KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff8050bc5f8c0, Address of the trap frame for the exception that caused the bugcheck
Arg3: fffff8050bc5f818, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
KEY_VALUES_STRING: 1
Key : Analysis.CPU.Sec
Value: 2
Key : Analysis.Elapsed.Sec
Value: 7
Key : Analysis.Memory.CommitPeak.Mb
Value: 68
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 17763.1.amd64fre.rs5_release.180914-1434
SYSTEM_MANUFACTURER: Micro-Star International Co., Ltd
SYSTEM_PRODUCT_NAME: MS-7B38
SYSTEM_SKU: To be filled by O.E.M.
SYSTEM_VERSION: 1.0
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 2.80
BIOS_DATE: 03/15/2018
BASEBOARD_MANUFACTURER: Micro-Star International Co., Ltd
BASEBOARD_PRODUCT: B350M PRO-VD PLUS (MS-7B38)
BASEBOARD_VERSION: 1.0
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: fffff8050bc5f8c0
BUGCHECK_P3: fffff8050bc5f818
BUGCHECK_P4: 0
TRAP_FRAME: fffff8050bc5f8c0 -- (.trap 0xfffff8050bc5f8c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffff8050896bfc8 rbx=0000000000000000 rcx=0000000000000003
rdx=ffffb48d1a1b49f8 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80509a18103 rsp=fffff8050bc5fa50 rbp=fffff80509d79400
r8=0000024fc4bbc7aa r9=ffffb48d1e06d180 r10=0000000000000000
r11=00000000000000c0 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na po nc
nt!KiRetireDpcList+0x1856f3:
fffff805`09a18103 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: fffff8050bc5f818 -- (.exr 0xfffff8050bc5f818)
ExceptionAddress: fffff80509a18103 (nt!KiRetireDpcList+0x00000000001856f3)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: 4
CPU_MHZ: dac
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 11
CPU_STEPPING: 0
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXPNP: 1 (!blackboxpnp)
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-HH6FM2D
ANALYSIS_SESSION_TIME: 05-14-2019 10:09:27.0520
ANALYSIS_VERSION: 10.0.18869.1002 amd64fre
LAST_CONTROL_TRANSFER: from fffff805099def69 to fffff805099cd7e0
STACK_TEXT:
fffff805`0bc5f598 fffff805`099def69 : 00000000`00000139 00000000`00000003 fffff805`0bc5f8c0 fffff805`0bc5f818 : nt!KeBugCheckEx
fffff805`0bc5f5a0 fffff805`099df310 : ffffb48d`1ab0fbf0 00000000`00000002 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
fffff805`0bc5f6e0 fffff805`099dd708 : 00000000`00000000 00000000`00000002 fffff805`08968180 fffff805`16f24446 : nt!KiFastFailDispatch+0xd0
fffff805`0bc5f8c0 fffff805`09a18103 : 00000000`0000001c 00000000`00989680 fffff805`09d79400 00000000`0093f12e : nt!KiRaiseSecurityCheckFailure+0x308
fffff805`0bc5fa50 fffff805`099d11fa : 00000000`00000000 fffff805`08968180 00000000`001a6550 fffff805`09d79400 : nt!KiRetireDpcList+0x1856f3
fffff805`0bc5fc60 00000000`00000000 : fffff805`0bc60000 fffff805`0bc5a000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x5a
THREAD_SHA1_HASH_MOD_FUNC: ffd2efa94f020a441a50c0e912e3bb2816ba18bd
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 0107862ea57dbfecf573b7c84f18d27c63b620c7
THREAD_SHA1_HASH_MOD: ee8fcf1fb60cb6e3e2f60ddbed2ec02b5748a693
FOLLOWUP_IP:
nt!KiFastFailDispatch+d0
fffff805`099df310 c644242000 mov byte ptr [rsp+20h],0
FAULT_INSTR_CODE: 202444c6
SYMBOL_STACK_INDEX: 2
SYMBOL_NAME: nt!KiFastFailDispatch+d0
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 0
IMAGE_VERSION: 10.0.17763.475
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: d0
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_nt!KiFastFailDispatch
TARGET_TIME: 2019-05-13T20:16:49.000Z
OSBUILD: 17763
OSSERVICEPACK: 475
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: unknown_date
BUILDDATESTAMP_STR: 180914-1434
BUILDLAB_STR: rs5_release
BUILDOSVER_STR: 10.0.17763.1.amd64fre.rs5_release.180914-1434
ANALYSIS_SESSION_ELAPSED_TIME: 1d7d
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_nt!kifastfaildispatch
FAILURE_ID_HASH: {3aede96a-54dd-40d6-d4cb-2a161a843851}
Followup: MachineOwner
---------