Device name: Nexus 4

From "Settings > About Chrome"
Application version: 53.0.2785.124
OS: Android 5.1.1

When you close all incognito tabs the browser tries to destroy incognito profile, but because of asynchronous nature of this process if there would be any client that tries to request a pointer for incognito profile for the current profile will get a pointer to an object that is destroyed in an unpredictable moment of time.
Personally I observed this crash inside ChromeAutocompleteProviderClient, Unfortunately it is very rare and hard to reproduce.

Behavior in Android Browser (if applicable):
Crash when typing in omnibox immediately after closing incognito tab.


Steps to reproduce:
(1) Open incognito tab
(2) Close tab
(3) Start typing in omnibox

Expected result:
No crash

Actual result:
Crash