Version: Happens only with local user data.
OS: Linux

What steps will reproduce the problem?
(1) Compile the latest version of Chrome and run in debug mode.
(2) Open any page, like google.com, switch windows.
(3) Wait for maybe 30 seconds.

The issue didn't occur when running with clean user data directory.

What is the expected output?
Chrome should work.

What do you see instead?
Crash, with the following stack trace:
[13620:13620:0518/130521:WARNING:user_policy_signin_service.cc(168)] No OAuth Refresh Token - delaying policy download
[13620:13620:0518/130522:WARNING:message_queue.cc(38)] Leaking 2 ports in unreceived messages
[13620:13712:0518/130522:ERROR:url_blacklist_manager.cc(176)] Invalid pattern custom://*
[13620:13620:0518/130527:WARNING:message_queue.cc(38)] Leaking 2 ports in unreceived messages
[13620:13620:0518/130530:WARNING:CONSOLE(0)] "/deep/ combinator is deprecated. See https://www.chromestatus.com/features/6750456638341120 for more details.", source:  (0)
[13620:13698:0518/130539:WARNING:ipc_message_attachment_set.cc(57)] MessageAttachmentSet destroyed with unconsumed descriptors: 0/1
[13620:13620:0518/130551:FATAL:site_engagement_service.cc(508)] Check failed: url.is_valid(). 
#0 0x7faa01d499ee base::debug::StackTrace::StackTrace()
#1 0x7faa01d88b5f logging::LogMessage::~LogMessage()
#2 0x7fa9f6be72f1 SiteEngagementService::ResetScoreAndAccessTimesForURL()
#3 0x7fa9f6be8d0d SiteEngagementService::GetCountsAndLastVisitForOriginsComplete()
#4 0x7fa9f6bf2a64 _ZN4base8internal15RunnableAdapterIM21SiteEngagementServiceFvPN7history14HistoryServiceERKNSt7__debug8multisetI4GURLSt4lessIS8_ESaIS8_EEEbRKNS6_3mapIS8_St4pairIiNS_4TimeEESA_SaISG_IKS8_SI_EEEEEE3RunIPS2_JRKS5_SE_RKbSO_EEEvOT_DpOT0_
#5 0x7fa9f6bf2928 _ZN4base8internal12InvokeHelperILb1EvNS0_15RunnableAdapterIM21SiteEngagementServiceFvPN7history14HistoryServiceERKNSt7__debug8multisetI4GURLSt4lessIS9_ESaIS9_EEEbRKNS7_3mapIS9_St4pairIiNS_4TimeEESB_SaISH_IKS9_SJ_EEEEEEEE8MakeItSoINS_7WeakPtrIS3_EEJRKS6_SF_RKbSP_EEEvSS_T_DpOT0_
#6 0x7fa9f6bf287e _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1ELm2ELm3EEEENS0_9BindStateINS0_15RunnableAdapterIM21SiteEngagementServiceFvPN7history14HistoryServiceERKNSt7__debug8multisetI4GURLSt4lessISC_ESaISC_EEEbRKNSA_3mapISC_St4pairIiNS_4TimeEESE_SaISK_IKSC_SM_EEEEEEEFvPS6_S9_SI_bSS_EJNS_7WeakPtrIS6_EERS9_RSG_RbEEENS0_12InvokeHelperILb1EvSV_EEFvSS_EE3RunEPNS0_13BindStateBaseESS_
#7 0x7fa9f67ff7d6 base::Callback<>::Run()
#8 0x7fa9f6bdd514 base::internal::ReplyAdapter<>()
#9 0x7fa9f692a072 _ZN4base8internal15RunnableAdapterIPFvRKNS_7VersionEP11PrefServiceEE3RunIJS4_RKS6_EEEvDpOT_
#10 0x7faa02cb63aa _ZN4base8internal12InvokeHelperILb0EvNS0_15RunnableAdapterIPFvRKNS_8CallbackIFvRKNSt7__debug3mapI4GURLSt4pairIiNS_4TimeEESt4lessIS6_ESaIS7_IKS6_S9_EEEEELNS0_8CopyModeE1EEEPSF_EEEE8MakeItSoIJSM_SN_EEEvSQ_DpOT_
#11 0x7faa02cb6363 _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0ELm1EEEENS0_9BindStateINS0_15RunnableAdapterIPFvRKNS_8CallbackIFvRKNSt7__debug3mapI4GURLSt4pairIiNS_4TimeEESt4lessIS9_ESaISA_IKS9_SC_EEEEELNS0_8CopyModeE1EEEPSI_EEESR_JSP_NS0_12OwnedWrapperISI_EEEEENS0_12InvokeHelperILb0EvST_EEFvvEE3RunEPNS0_13BindStateBaseE
#12 0x7fa9f67fe25e base::Callback<>::Run()
#13 0x7faa01e6e690 base::(anonymous namespace)::PostTaskAndReplyRelay::RunReplyAndSelfDestruct()
#14 0x7faa01e6eb70 _ZN4base8internal15RunnableAdapterIMNS_12_GLOBAL__N_121PostTaskAndReplyRelayEFvvEE3RunIPS3_JEEEvOT_DpOT0_
#15 0x7faa01e6eab9 _ZN4base8internal12InvokeHelperILb0EvNS0_15RunnableAdapterIMNS_12_GLOBAL__N_121PostTaskAndReplyRelayEFvvEEEE8MakeItSoIJPS4_EEEvS7_DpOT_
#16 0x7faa01e6ea7d _ZN4base8internal7InvokerINS_13IndexSequenceIJLm0EEEENS0_9BindStateINS0_15RunnableAdapterIMNS_12_GLOBAL__N_121PostTaskAndReplyRelayEFvvEEEFvPS7_EJNS0_17UnretainedWrapperIS7_EEEEENS0_12InvokeHelperILb0EvSA_EEFvvEE3RunEPNS0_13BindStateBaseE
#17 0x7fa9f67fe25e base::Callback<>::Run()
#18 0x7faa01d4c9fe base::debug::TaskAnnotator::RunTask()
#19 0x7faa01d9ec8c base::MessageLoop::RunTask()
#20 0x7faa01d9ef28 base::MessageLoop::DeferOrRunPendingTask()
#21 0x7faa01d9f182 base::MessageLoop::DoWork()
#22 0x7faa01db0c5c base::MessagePumpGlib::HandleDispatch()
#23 0x7faa01db1421 base::(anonymous namespace)::WorkSourceDispatch()
#24 0x7fa9f474fe04 g_main_context_dispatch
#25 0x7fa9f4750048 <unknown>
#26 0x7fa9f47500ec g_main_context_iteration
#27 0x7faa01db0d5f base::MessagePumpGlib::Run()
#28 0x7faa01d9e67f base::MessageLoop::RunHandler()
#29 0x7faa01e1e0a4 base::RunLoop::Run()
#30 0x7fa9f68ed5af ChromeBrowserMainParts::MainMessageLoopRun()
#31 0x7fa9fa710b89 content::BrowserMainLoop::RunMainMessageLoopParts()
#32 0x7fa9fa71a105 content::BrowserMainRunnerImpl::Run()
#33 0x7fa9fa70a916 content::BrowserMain()
#34 0x7faa01ceb4f6 content::RunNamedProcessTypeMain()
#35 0x7faa01ced1e2 content::ContentMainRunnerImpl::Run()
#36 0x7faa01cea6b2 content::ContentMain()
#37 0x7fa9f67e2dd2 ChromeMain
#38 0x7fa9f67e2d82 main
#39 0x7fa9ed9eeec5 __libc_start_main
#40 0x7fa9f67e2c81 <unknown>

Aborted (core dumped)


I've checked with added logs and the URL that fails in site_engagement_service.cc is empty.