CTD on any save game load

[Calcium1]

Hello anyone who is willing to help. Recently my game began crashing immediately after trying to load any save. The game works fine if I start a new game, but I cannot load any saves. My NetScriptFramework does not want to create a crash log for it, so I had to work with a skse minidump. Here is what it gave me:

CONTEXT:  (.ecxr)
rax=000001c430419a38 rbx=0000000000000000 rcx=72656e6f73697250
rdx=0000000080000269 rsi=72656e6f73697250 rdi=0000000000000000
rip=00007ff79903243a rsp=0000008addefeed0 rbp=0000008addeff050
 r8=0000000000000002  r9=0000000000000001 r10=0000000000000000
r11=0000008addefecd0 r12=000001c3852c4348 r13=000001c44dff0f40
r14=000001c4087814a8 r15=0000000000000000
iopl=0         nv up ei pl zr na po nc
cs=0033  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
SkyrimSE+0x124243a:
00007ff7`9903243a 395910          cmp     dword ptr [rcx+10h],ebx ds:72656e6f`73697260=????????
Resetting default scope

EXCEPTION_RECORD:  (.exr -1)
ExceptionAddress: 00007ff79903243a (SkyrimSE+0x000000000124243a)
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 0000000000000000
   Parameter[1]: ffffffffffffffff
Attempt to read from address ffffffffffffffff

PROCESS_NAME:  SkyrimSE.exe

READ_ADDRESS:  ffffffffffffffff 

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at 0x%p referenced memory at 0x%p. The memory could not be %s.

EXCEPTION_CODE_STR:  c0000005

EXCEPTION_PARAMETER1:  0000000000000000

EXCEPTION_PARAMETER2:  ffffffffffffffff

STACK_TEXT:  
0000008a`ddefeed0 00007ff7`99024f1e     : 00000000`00000000 000001c4`30419a30 0000008a`ddeff050 00000000`0000000b : SkyrimSE+0x124243a
0000008a`ddefef10 00007ff7`9904ff9f     : 00000000`00000000 000001c4`4de8e740 000001c4`087814a0 000001c4`087814a0 : SkyrimSE+0x1234f1e
0000008a`ddefef50 00007ff7`9871e23f     : 000001c4`08778118 00007ff7`00000014 000001c4`4a6afa60 000001c4`087813f0 : SkyrimSE+0x125ff9f
0000008a`ddeff0c0 00007ffd`06bbf640     : 00000000`0000005b 00000000`00000000 00007ff7`9ad1851c 00007ff7`9ad18594 : SkyrimSE+0x92e23f
0000008a`ddeff170 00007ff7`9871b8c7     : 00007ff7`9ad17e80 00007ff7`994beca8 ffffffff`fffffffe 00000000`00000000 : skse64_1_5_97+0xf640
0000008a`ddeff1a0 00007ff7`98371d31     : 00000000`00000000 00000000`000003e8 00007ff7`97df0000 00000000`00000000 : SkyrimSE+0x92b8c7
0000008a`ddeff1d0 00007ff7`9836d44b     : 000001c3`fd6f8444 0000008a`ddeff340 00000000`0003cf5a 0000008a`ddeff340 : SkyrimSE+0x581d31
0000008a`ddeff240 00007ffd`06bc051b     : 000001c4`256c3100 0000008a`ddeff790 000001c4`46708bb0 000001c4`46708100 : SkyrimSE+0x57d44b
0000008a`ddeff680 00007ff7`9837b0a1     : 0000008a`dd003237 0000008a`ddeffae8 00000000`00000000 000001c3`fdeeb800 : skse64_1_5_97+0x1051b
0000008a`ddeff730 00007ff7`98379d20     : 000001c3`fdeeb800 000001c3`fdeeb800 00000000`00000010 000001c3`fdeebb70 : SkyrimSE+0x58b0a1
0000008a`ddeff9f0 00007ffd`06bc06e8     : 000001c3`8aaf9d00 00000000`00000002 000001c4`18158280 000001c4`46708100 : SkyrimSE+0x589d20
0000008a`ddeffad0 00007ff7`983a3074     : 000001c3`8aaf9d00 00000000`00000000 00000000`00000000 00000000`00000000 : skse64_1_5_97+0x106e8
0000008a`ddeffb10 00007ffc`fc8adec0     : 000001c3`8aaf9d00 00007ffd`05d07664 00000000`00000000 0000008a`ddeffbf0 : SkyrimSE+0x5b3074
0000008a`ddeffb50 00007ff7`9839f4f4     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : hdtSMP64+0x4dec0
0000008a`ddeffba0 00007ff7`9839cc05     : 00000000`0000000a 00000000`00000000 00000000`0000000a 00007ff7`00000002 : SkyrimSE+0x5af4f4
0000008a`ddeffc30 00007ff7`9913b17a     : 00000000`0000000a 00000000`00000000 00000000`00000000 00000000`00000000 : SkyrimSE+0x5acc05
0000008a`ddeffc60 00007ffd`52497614     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : SkyrimSE+0x134b17a
0000008a`ddeffca0 00007ffd`538026b1     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : kernel32!BaseThreadInitThunk+0x14
0000008a`ddeffcd0 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : ntdll!RtlUserThreadStart+0x21


STACK_COMMAND:  ~0s; .ecxr ; kb

SYMBOL_NAME:  SkyrimSE+124243a

MODULE_NAME: SkyrimSE

IMAGE_NAME:  SkyrimSE.exe

FAILURE_BUCKET_ID:  INVALID_POINTER_READ_c0000005_SkyrimSE.exe!Unknown

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

IMAGE_VERSION:  1.0.0.0

FAILURE_ID_HASH:  {cc7cdad3-3dd6-62ea-cf5d-422fbde3752b}

[traison]

Did you get the actual stack (not callstack) with that dump, or is that it? Can't really do anything with offsets in SkyrimSE.exe; can't get a debugger in there.

Edited July 22, 2023 by traison

[Calcium1]

I'm sorry to say but that is all it gave me. None of the other crash loggers made a log for it. If you have any idea how to make them create a log maybe that could be a good starting point?

[traison]

Well first off, check skse64.log to make sure a crash logger is being loaded. Only have one 3rd party one at any given time (preferably something other than .net).

[Calcium1]

So I got a crash log to generate, but it also says something about SkyrimSE.exe. Hopefully there's something that can be pulled from these.

crash-2023-07-23-18-57-20.log CrashLogger.log

[traison]

The only thing I can see here is that it looks like some value went over the int32 limit and wrapped around, causing the crash. The value in RDI is very close to the uint32 max, and the crashing instruction tried to add 0x28 to it and use it as a pointer to read 32 bits into eax. Coincidence? Maybe. Helpful? Probably not.

 

The stack is not much better either, however considering there's not much else to go by here, I'd inspect this form in xEdit: Skyrim.esm 0x167. Its an ImageSpace, and any mod changing it may be the source of your problem. You can revert the changes any mod makes by dragging and dropping values from Skyrim.esm; this way you don't have to uninstall anything. Maybe make some backups of modified plugins before you do though, this may not fix your issue.