Unable to reproduce the crash on mac 10.11.6 chrome version 55.0.2865.0 with the above steps

Stack Trace:

Thread 0 CRASHED [EXC_BAD_ACCESS / KERN_INVALID_ADDRESS @ 0x00000000 ] MAGIC SIGNATURE THREAD
0x000000010ccb31a9	(Google Chrome Framework -core_tab_helper.cc:265 )	CoreTabHelper::DocumentOnLoadCompletedInMainFrame()
0x000000010a33d412	(Google Chrome Framework -web_contents_impl.cc:4490 )	content::WebContentsImpl::DocumentOnLoadCompleted(content::RenderFrameHost*)
0x000000010a0ec552	(Google Chrome Framework -render_frame_host_impl.cc:999 )	content::RenderFrameHostImpl::OnDocumentOnLoadCompleted(FrameMsg_UILoadMetricsReportType::Value, base::TimeTicks)
0x000000010a0ec39b	(Google Chrome Framework -tuple.h:144 )	bool IPC::MessageT<FrameHostMsg_DocumentOnLoadCompleted_Meta, std::__1::tuple<FrameMsg_UILoadMetricsReportType::Value, base::TimeTicks>, void>::Dispatch<content::RenderFrameHostImpl, content::RenderFrameHostImpl, void, void (content::RenderFrameHostImpl::*)(FrameMsg_UILoadMetricsReportType::Value, base::TimeTicks)>(IPC::Message const*, content::RenderFrameHostImpl*, content::RenderFrameHostImpl*, void*, void (content::RenderFrameHostImpl::*)(FrameMsg_UILoadMetricsReportType::Value, base::TimeTicks))
0x000000010a0e9a9c	(Google Chrome Framework -render_frame_host_impl.cc:584 )	content::RenderFrameHostImpl::OnMessageReceived(IPC::Message const&)
0x000000010a248ab8	(Google Chrome Framework -render_process_host_impl.cc:1968 )	content::RenderProcessHostImpl::OnMessageReceived(IPC::Message const&)
0x000000010b6be1ea	(Google Chrome Framework -ipc_channel_proxy.cc:332 )	IPC::ChannelProxy::Context::OnDispatchMessage(IPC::Message const&)
0x000000010ad6ed08	(Google Chrome Framework -callback.h:56 )	base::debug::TaskAnnotator::RunTask(char const*, base::PendingTask const&)
0x000000010ad90c9b	(Google Chrome Framework -message_loop.cc:488 )	base::MessageLoop::RunTask(base::PendingTask const&)
0x000000010ad90fdb	(Google Chrome Framework -message_loop.cc:497 )	base::MessageLoop::DeferOrRunPendingTask(base::PendingTask)
0x000000010ad91382	(Google Chrome Framework -message_loop.cc:621 )	base::MessageLoop::DoWork()
0x000000010ad934ac	(Google Chrome Framework -message_pump_mac.mm:330 )	base::MessagePumpCFRunLoopBase::RunWork()
0x000000010ad87089	(Google Chrome Framework + 0x019a9089 )	base::mac::CallWithEHFrame(void () block_pointer)
0x000000010ad92eb3	(Google Chrome Framework -message_pump_mac.mm:306 )	base::MessagePumpCFRunLoopBase::RunWorkSource(void*)
0x00007fff95332660	(CoreFoundation + 0x00080660 )	__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__
0x00007fff953247ec	(CoreFoundation + 0x000727ec )	__CFRunLoopDoSources0
0x00007fff95323e1e	(CoreFoundation + 0x00071e1e )	__CFRunLoopRun
0x00007fff95323837	(CoreFoundation + 0x00071837 )	CFRunLoopRunSpecific
0x00007fff9b04d43e	(HIToolbox + 0x0002e43e )	RunCurrentEventLoopInMode
0x00007fff9b04d1b9	(HIToolbox + 0x0002e1b9 )	ReceiveNextEventCommon
0x00007fff9b04cffa	(HIToolbox + 0x0002dffa )	_BlockUntilNextEventMatchingListInModeWithFilter
0x00007fff929c26d0	(AppKit + 0x000246d0 )	
0x00007fff929c1e7f	(AppKit + 0x00023e7f )	
0x00007fff929b5e22	(AppKit + 0x00017e22 )	
0x000000010ad93ccd	(Google Chrome Framework -message_pump_mac.mm:665 )	base::MessagePumpNSApplication::DoRun(base::MessagePump::Delegate*)
0x000000010ad93303	(Google Chrome Framework -message_pump_mac.mm:238 )	base::MessagePumpCFRunLoopBase::Run(base::MessagePump::Delegate*)
0x000000010adad700	(Google Chrome Framework -run_loop.cc:35 )	base::RunLoop::Run()
0x000000010a97fb24	(Google Chrome Framework -chrome_browser_main.cc:2098 )	ChromeBrowserMainParts::MainMessageLoopRun(int*)
0x000000010a015f83	(Google Chrome Framework -browser_main_loop.cc:954 )	content::BrowserMainLoop::RunMainMessageLoopParts()
0x000000010a0188c1	(Google Chrome Framework -browser_main_runner.cc:155 )	content::BrowserMainRunnerImpl::Run()
0x000000010a011d8b	(Google Chrome Framework -browser_main.cc:46 )	content::BrowserMain(content::MainFunctionParams const&)
0x000000010a93d079	(Google Chrome Framework -content_main_runner.cc:786 )	content::ContentMainRunnerImpl::Run()
0x000000010a93c2a5	(Google Chrome Framework -content_main.cc:20 )	content::ContentMain(content::ContentMainParams const&)
0x00000001093e0f89	(Google Chrome Framework -chrome_main.cc:85 )	ChromeMain
0x0000000109365d49	(Google Chrome Canary + 0x00000d49 )	
0x0000000109365b33	(Google Chrome Canary + 0x00000b33 )

This crash seems to be to similar to 635833 as per stack trace which got fixed in M54.

jam@, Could you please confirm if both are same

martijn@martijnc.be, Could you please try the same on a new profile and update the thread with observations.

This reproduces in a new, clean profile as well.

Crash ID 9454a2c9-2aac-4036-9ad8-76c5978133d0
Crash ID 0e8152b1-cd66-494f-8898-b3adda979195

These reports were not uploaded automatically but I requested the upload through chrome://crahes. That doesn't seem to have happened yet so I've attached both reports here as well.

Deleted: 0e8152b1-cd66-494f-8898-b3adda979195.dmp 783 KB

0e8152b1-cd66-494f-8898-b3adda979195.dmp 783 KB Download

Deleted: 9454a2c9-2aac-4036-9ad8-76c5978133d0.dmp 734 KB

9454a2c9-2aac-4036-9ad8-76c5978133d0.dmp 734 KB Download

Thank you for providing more feedback. Adding requester "tkonchada@chromium.org" for another review and adding "Needs-Review" label for tracking.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

I'm no longer able to reproduce this in Version 55.0.2873.0 canary (64-bit). I can print PDFs from Google Drive again as before.