CrossApartmentQueryInterface_NoDeadlock test crash

[jkotas]

Build Information

Build: https://dev.azure.com/dnceng-public/cbb18261-c48f-4abb-8651-8cdcb5474649/_build/results?buildId=945394
Build error leg or test failing: Interop/COM/ComWrappers/API/ComWrappersTests/ComWrappersTests.cmd
Pull request: #112303

Error Message

Fill the error message using step by step known issues guidance.

{
  "ErrorMessage": ["CrossApartmentQueryInterface_NoDeadlock","END EXECUTION - FAILED"],
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=945394
Error message validated: [CrossApartmentQueryInterface_NoDeadlock END EXECUTION - FAILED]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 2/8/2025 3:06:00 PM UTC

Report

Build	Definition	Test	Pull Request
946332	dotnet/runtime	Interop/COM/ComWrappers/API/ComWrappersTests/ComWrappersTests.cmd	#112342
945874	dotnet/runtime	Interop/COM/NETClients/Lifetime/NETClientLifetime/NETClientLifetime.cmd
2638724	dotnet-runtime	Interop/COM/ComWrappers/API/ComWrappersTestsBuiltInComDisabled/ComWrappersTestsBuiltInComDisabled.cmd
945394	dotnet/runtime	Interop/COM/ComWrappers/API/ComWrappersTests/ComWrappersTests.cmd	#112303
943899	dotnet/runtime	Interop/COM/ComWrappers/API/ComWrappersTests/ComWrappersTests.cmd	#112261

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
0	5	5

[jkotas]

The crash is caused by native heap corruption:

0:011> k
 # Child-SP          RetAddr               Call Site
00 0000006d`9417d498 00007ffe`04ed84f1     ntdll!ZwWaitForMultipleObjects+0x14 [d:\rs1.obj.amd64fre\minkernel\ntdll\daytona\objfre\amd64\usrstubs.asm @ 907] 
01 0000006d`9417d4a0 00007ffe`04ed7785     ntdll!WerpWaitForCrashReporting+0x6d [d:\rs1\minkernel\ntdll\wer.c @ 1336] 
02 0000006d`9417d500 00007ffe`04ed6797     ntdll!RtlReportExceptionHelper+0x269 [d:\rs1\minkernel\ntdll\wer.c @ 2182] 
03 0000006d`9417da70 00007ffe`04fc715d     ntdll!RtlReportException+0x77 [d:\rs1\minkernel\ntdll\wer.c @ 2332] 
04 (Inline Function) --------`--------     ntdll!RtlpTerminateFailureFilter+0xf [d:\rs1\minkernel\ntos\rtl\rtlutil.c @ 117] 
05 0000006d`9417daf0 00007ffe`04f66b96     ntdll!RtlReportCriticalFailure$filt$0+0x33 [d:\rs1\minkernel\ntos\rtl\rtlutil.c @ 195] 
06 0000006d`9417db20 00007ffe`04f75c02     ntdll!__C_specific_handler+0x96 [d:\rs1\minkernel\crts\crtw32\misc\amd64\chandler.c @ 209] 
07 0000006d`9417db90 00007ffe`04f7ab2d     ntdll!__GSHandlerCheck_SEH+0x76 [d:\rs1\minkernel\crts\crtw32\misc\amd64\gshandlerseh.c @ 93] 
08 0000006d`9417dbc0 00007ffe`04f049d3     ntdll!RtlpExecuteHandlerForException+0xd [d:\rs1\minkernel\ntos\rtl\amd64\xcptmisc.asm @ 131] 
09 0000006d`9417dbf0 00007ffe`04f066e9     ntdll!RtlDispatchException+0x373 [d:\rs1\minkernel\ntos\rtl\amd64\exdsptch.c @ 546] 
0a 0000006d`9417e2f0 00007ffe`04fc7103     ntdll!RtlRaiseException+0x2d9 [d:\rs1\minkernel\ntos\rtl\amd64\raise.c @ 160] 
0b 0000006d`9417f110 00007ffe`04fc7aa2     ntdll!RtlReportCriticalFailure+0x97 [d:\rs1\minkernel\ntos\rtl\rtlutil.c @ 193] 
0c 0000006d`9417f220 00007ffe`04f75b5a     ntdll!RtlpHeapHandleError+0x12 [d:\rs1\minkernel\ntos\rtl\heaplog.c @ 399] 
0d 0000006d`9417f250 00007ffe`04f164b5     ntdll!RtlpLogHeapFailure+0x96 [d:\rs1\minkernel\ntos\rtl\heaplog.c @ 739] 
0e (Inline Function) --------`--------     ntdll!RtlpProbeUserBufferUnsafe+0x40 [d:\rs1\minkernel\ntos\rtl\heappriv.h @ 2959] 
0f (Inline Function) --------`--------     ntdll!RtlpProbeUserBuffer+0x46 [d:\rs1\minkernel\ntos\rtl\heappriv.h @ 3012] 
10 (Inline Function) --------`--------     ntdll!RtlpFreeHeapInternal+0x67 [d:\rs1\minkernel\ntos\rtl\heap.c @ 2208] 
11 (Inline Function) --------`--------     ntdll!RtlpHpHeapFreeRedirectLayer+0xce [d:\rs1\minkernel\ntos\rtl\heappublic.c @ 233] 
12 0000006d`9417f280 00007ffe`0486a607     ntdll!RtlFreeHeap+0x125 [d:\rs1\minkernel\ntos\rtl\heappublic.c @ 333] 
13 0000006d`9417f330 00007ffd`741445ef     combase!CAgileReferenceMarshaled::Resolve+0x137 [d:\rs1\onecore\com\combase\dcomrem\giptbl.cxx @ 1934] 
14 0000006d`9417f380 00000266`23c00040     0x00007ffd`741445ef
15 0000006d`9417f388 0000006d`9417f490     0x00000266`23c00040
16 0000006d`9417f390 00000266`23c00290     0x0000006d`9417f490
17 0000006d`9417f398 00007ffe`04f2a150     0x00000266`23c00290
18 0000006d`9417f3a0 0000006d`9417f380     ntdll!RtlSetLastWin32Error+0x40 [d:\rs1\minkernel\ntos\rtl\error.c @ 306] 
19 0000006d`9417f3f0 00007ffd`741445ef     0x0000006d`9417f380
1a 0000006d`9417f3f8 0000006d`9417f490     0x00007ffd`741445ef
1b 0000006d`9417f400 00000266`23c00290     0x0000006d`9417f490
1c 0000006d`9417f408 0000fffc`090d49a1     0x00000266`23c00290
1d 0000006d`9417f410 000002a6`b31d9ee0     0x0000fffc`090d49a1
1e 0000006d`9417f418 dddddddd`00000000     0x000002a6`b31d9ee0
1f 0000006d`9417f420 00007ffe`0486a4cf     0xdddddddd`00000000
20 0000006d`9417f428 0000fffc`090d49a1     combase!CAgileReferenceMarshaled::Resolve [d:\rs1\onecore\com\combase\dcomrem\giptbl.cxx @ 1910] 
21 0000006d`9417f430 00000000`00000000     0x0000fffc`090d49a1
0:011> !clrstack
OS Thread Id: 0xcc8 (11)
        Child SP               IP Call Site
0000006D9417F3D0 00007ffe04f76be4 [InlinedCallFrame: 0000006d9417f3d0] 
0000006D9417F3D0 00007ffd741445ef [InlinedCallFrame: 0000006d9417f3d0] 
0000006D9417F380 00007ffd741445ef ILStubClass.IL_STUB_PInvoke(IntPtr, System.Guid ByRef, IntPtr ByRef)
0000006D9417F4A0 00007ffd741443ad ComWrappersTests.Program+c__DisplayClass28_0.b__1()
0000006D9417F4F0 00007ffdd209b277 System.Threading.Thread+StartHelper.RunWorker()
0000006D9417FBB8 00007ffdd3969393 [DebuggerU2MCatchHandlerFrame: 0000006d9417fbb8]