Help understanding WinDbg Minidump debug

Question

0: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * *******************************************************************************

KERNEL_SECURITY_CHECK_FAILURE (139)
A kernel component has corrupted a critical data structure.  The corruption
could potentially allow a malicious user to gain control of this machine.
Arguments:
Arg1: 0000000000000003, A LIST_ENTRY has been corrupted (i.e. double remove).
Arg2: fffff80273e74890, Address of the trap frame for the exception that caused the BugCheck
Arg3: fffff80273e747e8, Address of the exception record for the exception that caused the BugCheck
Arg4: 0000000000000000, Reserved

Debugging Details:
------------------

*** WARNING: Check Image - Checksum mismatch - Dump: 0x761f8, File: 0x821c3 - C:\ProgramData\Dbg\sym\USBPORT.SYS\E7A64FEA79000\USBPORT.SYS

KEY_VALUES_STRING: 1

    Key  : Analysis.CPU.mSec
    Value: 9515

    Key  : Analysis.Elapsed.mSec
    Value: 16308

    Key  : Analysis.IO.Other.Mb
    Value: 1

    Key  : Analysis.IO.Read.Mb
    Value: 12

    Key  : Analysis.IO.Write.Mb
    Value: 35

    Key  : Analysis.Init.CPU.mSec
    Value: 1608

    Key  : Analysis.Init.Elapsed.mSec
    Value: 28850

    Key  : Analysis.Memory.CommitPeak.Mb
    Value: 98

    Key  : Bugcheck.Code.LegacyAPI
    Value: 0x139

    Key  : FailFast.Name
    Value: CORRUPT_LIST_ENTRY

    Key  : FailFast.Type
    Value: 3

    Key  : Failure.Bucket
    Value: 0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiProcessExpiredTimerList

    Key  : Failure.Hash
    Value: {9db7945b-255d-24a1-9f2c-82344e883ab8}

    Key  : WER.OS.Branch
    Value: vb_release

    Key  : WER.OS.Version
    Value: 10.0.19041.1

BUGCHECK_CODE:  139

BUGCHECK_P1: 3

BUGCHECK_P2: fffff80273e74890

BUGCHECK_P3: fffff80273e747e8

BUGCHECK_P4: 0

FILE_IN_CAB:  021424-31375-01.dmp

TRAP_FRAME:  fffff80273e74890 -- (.trap 0xfffff80273e74890)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=ffffa50838115f78 rbx=0000000000000000 rcx=0000000000000003
rdx=0000000000000000 rsi=0000000000000000 rdi=0000000000000000
rip=fffff8026e0c1d98 rsp=fffff80273e74a20 rbp=ffffa50838115f60
 r8=0000000000000102  r9=0000000000000000 r10=fffff8026bd45ac0
r11=ffffbc7931400000 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na po cy
nt!KiProcessExpiredTimerList+0x248:
fffff802`6e0c1d98 cd29            int     29h
Resetting default scope

EXCEPTION_RECORD:  fffff80273e747e8 -- (.exr 0xfffff80273e747e8)
ExceptionAddress: fffff8026e0c1d98 (nt!KiProcessExpiredTimerList+0x0000000000000248)
   ExceptionCode: c0000409 (Security check failure or stack buffer overrun)
  ExceptionFlags: 00000001
NumberParameters: 1
   Parameter[0]: 0000000000000003
Subcode: 0x3 FAST_FAIL_CORRUPT_LIST_ENTRY 

BLACKBOXBSD: 1 (!blackboxbsd)

BLACKBOXNTFS: 1 (!blackboxntfs)

BLACKBOXPNP: 1 (!blackboxpnp)

BLACKBOXWINLOGON: 1

CUSTOMER_CRASH_COUNT:  1

PROCESS_NAME:  System

ERROR_CODE: (NTSTATUS) 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to gain control of this application.

EXCEPTION_CODE_STR:  c0000409

EXCEPTION_PARAMETER1:  0000000000000003

EXCEPTION_STR:  0xc0000409

STACK_TEXT:  
fffff802`73e74568 fffff802`6e211aa9     : 00000000`00000139 00000000`00000003 fffff802`73e74890 fffff802`73e747e8 : nt!KeBugCheckEx
fffff802`73e74570 fffff802`6e212010     : ffffcc81`15fed180 fffff802`6e03f5ef fffff780`00000000 ffffa508`3ca58080 : nt!KiBugCheckDispatch+0x69
fffff802`73e746b0 fffff802`6e20ff9d     : fffff802`73e74a28 00000000`00000000 00000000`ffffffff 00000000`00000007 : nt!KiFastFailDispatch+0xd0
fffff802`73e74890 fffff802`6e0c1d98     : ffffa508`39c63e10 00000000`00000000 fffff802`73e74c58 00000000`00000000 : nt!KiRaiseSecurityCheckFailure+0x31d
fffff802`73e74a20 fffff802`6e0c0d3d     : 00000000`00000000 00000000`00000000 00000000`00140001 00000000`0021eb73 : nt!KiProcessExpiredTimerList+0x248
fffff802`73e74b10 fffff802`6e2020ee     : 00000000`00000000 fffff802`6bd42180 fffff802`6eb27a00 ffffa508`3ae41340 : nt!KiRetireDpcList+0x5dd
fffff802`73e74da0 00000000`00000000     : fffff802`73e75000 fffff802`73e6f000 00000000`00000000 00000000`00000000 : nt!KiIdleLoop+0x9e

SYMBOL_NAME:  nt!KiProcessExpiredTimerList+248

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

IMAGE_VERSION:  10.0.19041.3930

STACK_COMMAND:  .cxr; .ecxr ; kb

BUCKET_ID_FUNC_OFFSET:  248

FAILURE_BUCKET_ID:  0x139_3_CORRUPT_LIST_ENTRY_KTIMER_LIST_CORRUPTION_nt!KiProcessExpiredTimerList

OS_VERSION:  10.0.19041.1

BUILDLAB_STR:  vb_release

OSPLATFORM_TYPE:  x64

OSNAME:  Windows 10

FAILURE_ID_HASH:  {9db7945b-255d-24a1-9f2c-82344e883ab8}

Followup:     MachineOwner
---------

Answer 1

Try open start and search for cmd or Command prompt and right click and run it as administrator and then type the following command:

sfc /scannow

Press enter and let it runs and see what the result is?

Answer 2

Both had already been updated prior.

Answer 3

Try update the Game and the graphic card driver.

Try open start and search for feedback and open the Feedback Hub app and report this issue.

Answer 4

I didn’t connect any new USB devices and windows is updated. I started up a video game and it bluescreened about 3 minutes later.

Answer 5

How this problem started?

Did you connect any USB device which caused this issue?

Have you installed all updates for the Windows?