KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: ffffb0862a9566c0, Address of the trap frame for the exception that caused the BugCheck
Arg3: ffffb0862a956618, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------


KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 1734

    Key  : Analysis.Elapsed.mSec
    Value: 4540

    Key  : Analysis.IO.Other.Mb
    Value: 0

    Key  : Analysis.IO.Read.Mb
    Value: 1

    Key  : Analysis.IO.Write.Mb
    Value: 23

    Key  : Analysis.Init.CPU.mSec
    Value: 828

    Key  : Analysis.Init.Elapsed.mSec
    Value: 17485

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 93

    Key  : Analysis.Version.DbgEng
    Value: 10.0.27920.1001

    Key  : Analysis.Version.Description
    Value: 10.2506.23.01 amd64fre

    Key  : Analysis.Version.Ext
    Value: 1.2506.23.1

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x139

    Key  : Bugcheck.Code.TargetModel
    Value: 0x139

    Key  : FailFast.Name
    Value: CORRUPT_LIST_ENTRY

    Key  : FailFast.Type
    Value: 3

    Key  : Failure.Bucket
    Value: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiInsertTimerTable

    Key  : Failure.Exception.Code
    Value: 0xc0000409

    Key  : Failure.Exception.Record
    Value: 0xffffb0862a956618

    Key  : Failure.Hash
    Value: {f89e8bcc-9d62-a3aa-7602-6fa1ac774850}

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1

    Key  : WER.System.BIOSRevision
    Value: 5.14.0.0


BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: ffffb0862a9566c0

BUGCHECK_P3: ffffb0862a956618

BUGCHECK_P4: 0

FILE_IN_CAB:  092425-12109-01.dmp

FAULTING_THREAD:  ffff9b84672a9080

TRAP_FRAME:  ffffb0862a9566c0 -- (.trap 0xffffb0862a9566c0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffff9b84672a91a0 rbx=0000000000000000 rcx=0000000000000003
rdx=ffff9b846b88f1a0 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8044d0572c9 rsp=ffffb0862a956850 rbp=000003e7ee08d4eb
 r8=500003e7ee095a12  r9=fffff8044cc00000 r10=fffff80448e12ac0
r11=ffffb0862a956900 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po cy
nt!KiInsertTimerTable+0x18ec39:
fffff804`4d0572c9 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  ffffb0862a956618 -- (.exr 0xffffb0862a956618)
ExceptionAddress: fffff8044d0572c9 (nt!KiInsertTimerTable+0x000000000018ec39)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY 

BLACKBOXBSD: 1 (!blackboxbsd)


BLACKBOXNTFS: 1 (!blackboxntfs)


BLACKBOXPNP: 1 (!blackboxpnp)


BLACKBOXWINLOGON: 1 (!blackboxwinlogon)


CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  winws.exe

ERROR_CODE: (NTSTATUS) 0xc0000409 -                                                             .                                                                                           .

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

IP_IN_FREE_BLOCK: 0

STACK_TEXT:  
ffffb086`2a956398 fffff804`4d011da9     : 00000000`00000139 00000000`00000003 ffffb086`2a9566c0 ffffb086`2a956618 : nt!KeBugCheckEx
ffffb086`2a9563a0 fffff804`4d012350     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiBugCheckDispatch+0x69
ffffb086`2a9564e0 fffff804`4d0101f2     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiFastFailDispatch+0xd0
ffffb086`2a9566c0 fffff804`4d0572c9     : 00000000`000002c0 00000000`00000250 00000000`000002c4 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x332
ffffb086`2a956850 fffff804`4cec69fd     : ffff9b84`672a9080 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiInsertTimerTable+0x18ec39
ffffb086`2a9568d0 fffff804`4cec6033     : 9b84680f`00000082 fffff804`00000000 00000000`00000001 ffff9b84`672a91c0 : nt!KiCommitThreadWait+0x3bd
ffffb086`2a956970 fffff804`4d23e061     : ffff9b84`68ecf160 00000000`00000006 ffffb086`2a956a01 00000000`00000000 : nt!KeWaitForSingleObject+0x233
ffffb086`2a956a60 fffff804`4d23dfba     : ffff9b84`672a9080 00000007`ffff54e8 00000000`00000000 00000000`00000001 : nt!ObWaitForSingleObject+0x91
ffffb086`2a956ac0 fffff804`4d011508     : 00000008`00000000 00000000`00000000 ffffb086`2a956b18 ffffffff`fff85ee0 : nt!NtWaitForSingleObject+0x6a
ffffb086`2a956b00 00007ffc`6896d574     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x28
00000007`ffff54b8 00000000`00000000     : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`6896d574


SYMBOL_NAME:  nt!KiInsertTimerTable+18ec39

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.19041.6328

STACK_COMMAND: .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  18ec39

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiInsertTimerTable

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {f89e8bcc-9d62-a3aa-7602-6fa1ac774850}

Followup:     MachineOwner
---------