KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure. The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffff84011aa8b7b0, Address of the trap frame for the exception that caused the bugcheck
Arg3: ffff84011aa8b708, Address of the exception record for the exception that caused the bugcheck
Arg4: 0000000000000000, Reserved
Debugging Details:
------------------
*** WARNING: Unable to verify timestamp for win32k.sys
KEY_VALUES_STRING: 1
PROCESSES_ANALYSIS: 1
SERVICE_ANALYSIS: 1
STACKHASH_ANALYSIS: 1
TIMELINE_ANALYSIS: 1
DUMP_CLASS: 1
DUMP_QUALIFIER: 400
BUILD_VERSION_STRING: 18362.1.amd64fre.19h1_release.190318-1202
SYSTEM_MANUFACTURER: System manufacturer
SYSTEM_PRODUCT_NAME: System Product Name
SYSTEM_SKU: SKU
SYSTEM_VERSION: System Version
BIOS_VENDOR: American Megatrends Inc.
BIOS_VERSION: 1405
BIOS_DATE: 11/19/2019
BASEBOARD_MANUFACTURER: ASUSTeK COMPUTER INC.
BASEBOARD_PRODUCT: TUF GAMING X570-PLUS
BASEBOARD_VERSION: Rev X.0x
DUMP_TYPE: 2
BUGCHECK_P1: 3
BUGCHECK_P2: ffff84011aa8b7b0
BUGCHECK_P3: ffff84011aa8b708
BUGCHECK_P4: 0
TRAP_FRAME: ffff84011aa8b7b0 -- (.trap 0xffff84011aa8b7b0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff888594abebb8 rbx=0000000000000000 rcx=0000000000000003
rdx=000000000000082f rsi=0000000000000000 rdi=0000000000000000
rip=fffff8077406bb54 rsp=ffff84011aa8b940 rbp=ffff888594f90220
r8=000000000000082f r9=000000000000002f r10=0000fffff80774ab
r11=ffff84011aa8b840 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei ng nz na po cy
nt!KiProcessExpiredTimerList+0x234:
fffff807`7406bb54 cd29 int 29h
Resetting default scope
EXCEPTION_RECORD: ffff84011aa8b708 -- (.exr 0xffff84011aa8b708)
ExceptionAddress: fffff8077406bb54 (nt!KiProcessExpiredTimerList+0x0000000000000234)
ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
ExceptionFlags: 00000001
NumberParameters: 1
Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY
CPU_COUNT: c
CPU_MHZ: d42
CPU_VENDOR: AuthenticAMD
CPU_FAMILY: 17
CPU_MODEL: 8
CPU_STEPPING: 2
BLACKBOXBSD: 1 (!blackboxbsd)
BLACKBOXNTFS: 1 (!blackboxntfs)
BLACKBOXPNP: 1 (!blackboxpnp)
BLACKBOXWINLOGON: 1
CUSTOMER_CRASH_COUNT: 1
BUGCHECK_STR: 0x139
PROCESS_NAME: System
CURRENT_IRQL: 2
DEFAULT_BUCKET_ID: FAIL_FAST_CORRUPT_LIST_ENTRY
ERROR_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE: (NTSTATUS) 0xc0000409 - <Unable to get error code text>
EXCEPTION_CODE_STR: c0000409
EXCEPTION_PARAMETER1: 0000000000000003
ANALYSIS_SESSION_HOST: DESKTOP-18V31A3
ANALYSIS_SESSION_TIME: 01-31-2020 13:06:54.0980
ANALYSIS_VERSION: 10.0.18362.1 x86fre
LAST_CONTROL_TRANSFER: from fffff807741d32e9 to fffff807741c14e0
STACK_TEXT:
ffff8401`1aa8b488 fffff807`741d32e9 : 00000000`00000139 00000000`00000003 ffff8401`1aa8b7b0 ffff8401`1aa8b708 : nt!KeBugCheckEx
ffff8401`1aa8b490 fffff807`741d3710 : 00000000`00000000 ffff8885`94cac178 ffff8885`94ca2000 fffff807`740616c4 : nt!KiBugCheckDispatch+0x69
ffff8401`1aa8b5d0 fffff807`741d1aa5 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffff8401`1aa8b7b0 fffff807`7406bb54 : ffff8885`94f90070 ffff8885`8ae261f0 00000001`00000002 ffff8885`93d96010 : nt!KiRaiseSecurityCheckFailure+0x325
ffff8401`1aa8b940 fffff807`7406a7e9 : 00000000`00000014 00000000`00989680 00000000`00010828 00000000`00000040 : nt!KiProcessExpiredTimerList+0x234
ffff8401`1aa8ba30 fffff807`741c5024 : ffffffff`00000000 ffff9900`64d79180 ffff9900`64d8a340 ffff8885`9ba53380 : nt!KiRetireDpcList+0x4e9
ffff8401`1aa8bc60 00000000`00000000 : ffff8401`1aa8c000 ffff8401`1aa86000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x84
THREAD_SHA1_HASH_MOD_FUNC: a5119ebdc9ff71d34433e0daf4177502fc924f29
THREAD_SHA1_HASH_MOD_FUNC_OFFSET: 060f65eb7dbeac629aaa0950c72f0d4dec6c7f1c
THREAD_SHA1_HASH_MOD: 30a3e915496deaace47137d5b90c3ecc03746bf6
FOLLOWUP_IP:
nt!KiProcessExpiredTimerList+234
fffff807`7406bb54 cd29 int 29h
FAULT_INSTR_CODE: 8b4829cd
SYMBOL_STACK_INDEX: 4
SYMBOL_NAME: nt!KiProcessExpiredTimerList+234
FOLLOWUP_NAME: MachineOwner
MODULE_NAME: nt
IMAGE_NAME: ntkrnlmp.exe
DEBUG_FLR_IMAGE_TIMESTAMP: 4f6eba0
IMAGE_VERSION: 10.0.18362.592
STACK_COMMAND: .thread ; .cxr ; kb
BUCKET_ID_FUNC_OFFSET: 234
FAILURE_BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiProcessExpiredTimerList
BUCKET_ID: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiProcessExpiredTimerList
PRIMARY_PROBLEM_CLASS: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiProcessExpiredTimerList
TARGET_TIME: 2020-01-30T23:09:36.000Z
OSBUILD: 18362
OSSERVICEPACK: 592
SERVICEPACK_NUMBER: 0
OS_REVISION: 0
SUITE_MASK: 272
PRODUCT_TYPE: 1
OSPLATFORM_TYPE: x64
OSNAME: Windows 10
OSEDITION: Windows 10 WinNt TerminalServer SingleUserTS
OS_LOCALE:
USER_LCID: 0
OSBUILD_TIMESTAMP: 1972-08-22 03:24:00
BUILDDATESTAMP_STR: 190318-1202
BUILDLAB_STR: 19h1_release
BUILDOSVER_STR: 10.0.18362.1.amd64fre.19h1_release.190318-1202
ANALYSIS_SESSION_ELAPSED_TIME: 6360
ANALYSIS_SOURCE: KM
FAILURE_ID_HASH_STRING: km:0x139_3_corrupt_list_entry_ktimer_list_corruption_nt!kiprocessexpiredtimerlist
FAILURE_ID_HASH: {9db7945b-255d-24a1-9f2c-82344e883ab8}
Followup: MachineOwner
---------