Version: 56.0.2905.0 (Official Build) canary (64-bit)
OS: Windows 10

What steps will reproduce the problem?
(1) Visit chrome://site-engagement
(2)
(3)

What is the expected output?

Site engagement scores are shown.

What do you see instead?

Sad tab.

Please use labels and text to provide additional information.

It looks like the browser is killing the process with a BAD MESSAGE

Stack from browser dump:

  *** Stack trace for last set context - .thread/.cxr resets it
 # Child-SP          RetAddr           Call Site
00 0000007e`5fdecfd0 00007fff`4ec11d15 chrome_elf!DumpProcessWithoutCrash+0x23 [c:\b\build\slave\win64-pgo\build\src\components\crash\content\app\crashpad_win.cc @ 154]
01 (Inline Function) --------`-------- chrome_7fff4e190000!base::debug::DumpWithoutCrashing+0x10 [c:\b\build\slave\win64-pgo\build\src\base\debug\dump_without_crashing.cc @ 23]
02 0000007e`5fded4e0 00007fff`4fbb3d08 chrome_7fff4e190000!content::bad_message::ReceivedBadMessage+0x21 [c:\b\build\slave\win64-pgo\build\src\content\browser\bad_message.cc @ 56]
03 (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::RunMixin<base::Callback<void __cdecl(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &),1,1> >::Run+0xc [c:\b\build\slave\win64-pgo\build\src\base\callback.h @ 64]
04 (Inline Function) --------`-------- chrome_7fff4e190000!mojo::edk::NodeChannel::NotifyBadMessage+0x38 [c:\b\build\slave\win64-pgo\build\src\mojo\edk\system\node_channel.cc @ 227]
05 0000007e`5fded540 00007fff`4e3e5e4f chrome_7fff4e190000!mojo::edk::NodeController::NotifyBadMessageFrom+0x74 [c:\b\build\slave\win64-pgo\build\src\mojo\edk\system\node_controller.cc @ 384]
06 (Inline Function) --------`-------- chrome_7fff4e190000!mojo::edk::Core::NotifyBadMessage+0xaa [c:\b\build\slave\win64-pgo\build\src\mojo\edk\system\core.cc @ 796]
07 0000007e`5fded5a0 00007fff`4f5a8059 chrome_7fff4e190000!MojoNotifyBadMessageImpl+0xd3 [c:\b\build\slave\win64-pgo\build\src\mojo\edk\embedder\entrypoints.cc @ 254]
08 (Inline Function) --------`-------- chrome_7fff4e190000!MojoNotifyBadMessage+0x11 [c:\b\build\slave\win64-pgo\build\src\mojo\public\c\system\thunks.cc @ 282]
09 (Inline Function) --------`-------- chrome_7fff4e190000!mojo::NotifyBadMessage+0x11 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\system\message.h @ 78]
0a (Inline Function) --------`-------- chrome_7fff4e190000!mojo::internal::MessageBuffer::NotifyBadMessage+0x23 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\message_buffer.cc @ 47]
0b (Inline Function) --------`-------- chrome_7fff4e190000!mojo::Message::NotifyBadMessage+0x23 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\message.cc @ 106]
0c 0000007e`5fded630 00007fff`4f5a894b chrome_7fff4e190000!mojo::`anonymous namespace'::DoNotifyBadMessage+0x31 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\message.cc @ 32]
0d (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::FunctorTraits<void (__cdecl*)(mojo::Message,std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &),void>::Invoke+0x3f [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 164]
0e (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::InvokeHelper<0,void>::MakeItSo+0x43 [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 285]
0f (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(mojo::Message,std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &),base::internal::PassedWrapper<mojo::Message> >,void __cdecl(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &)>::RunImpl+0x51 [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 361]
10 0000007e`5fded660 00007fff`4f5a84b8 chrome_7fff4e190000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(mojo::Message,std::basic_string<char,std::char_traits<char>,std::allocator<char> > const & __ptr64),base::internal::PassedWrapper<mojo::Message> >,void __cdecl(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const & __ptr64)>::Run+0x5b [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 339]
11 (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::RunMixin<base::Callback<void __cdecl(std::basic_string<char,std::char_traits<char>,std::allocator<char> > const &),1,1> >::Run+0xc [c:\b\build\slave\win64-pgo\build\src\base\callback.h @ 64]
12 0000007e`5fded6d0 00007fff`4fbcb71a chrome_7fff4e190000!mojo::ReportBadMessage+0x38 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\message.cc @ 187]
13 0000007e`5fded700 00007fff`4e37cd5f chrome_7fff4e190000!service_manager::InterfaceRegistry::GetInterface+0x2ca [c:\b\build\slave\win64-pgo\build\src\services\service_manager\public\cpp\lib\interface_registry.cc @ 161]
14 0000007e`5fded9a0 00007fff`4f5aa809 chrome_7fff4e190000!service_manager::mojom::InterfaceProviderStubDispatch::Accept+0x1bf [c:\b\build\slave\win64-pgo\build\src\out\release_x64\gen\services\service_manager\public\interfaces\interface_provider.mojom.cc @ 110]
15 0000007e`5fdedb00 00007fff`4f5b094f chrome_7fff4e190000!mojo::InterfaceEndpointClient::HandleValidatedMessage+0x205 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc @ 341]
16 0000007e`5fdedb60 00007fff`4f5ad6cc chrome_7fff4e190000!mojo::FilterChain::Accept+0x4f [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\filter_chain.cc @ 41]
17 (Inline Function) --------`-------- chrome_7fff4e190000!mojo::InterfaceEndpointClient::HandleIncomingMessage+0xd [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc @ 273]
18 0000007e`5fdedb90 00007fff`4f5aca29 chrome_7fff4e190000!mojo::internal::MultiplexRouter::ProcessIncomingMessage+0x148 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\multiplex_router.cc @ 824]
19 0000007e`5fdedbd0 00007fff`4f5b094f chrome_7fff4e190000!mojo::internal::MultiplexRouter::Accept+0x7d [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\multiplex_router.cc @ 536]
1a 0000007e`5fdedc50 00007fff`4f5af745 chrome_7fff4e190000!mojo::FilterChain::Accept+0x4f [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\filter_chain.cc @ 41]
1b 0000007e`5fdedc80 00007fff`4f5af3ac chrome_7fff4e190000!mojo::Connector::ReadSingleMessage+0x195 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\connector.cc @ 246]
1c (Inline Function) --------`-------- chrome_7fff4e190000!mojo::Connector::ReadAllAvailableMessages+0x13 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\connector.cc @ 272]
1d 0000007e`5fdedd70 00007fff`4f5b265b chrome_7fff4e190000!mojo::Connector::OnHandleReadyInternal+0x38 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\bindings\lib\connector.cc @ 205]
1e (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::RunMixin<base::Callback<void __cdecl(unsigned int),1,1> >::Run+0xe [c:\b\build\slave\win64-pgo\build\src\base\callback.h @ 64]
1f 0000007e`5fdedda0 00007fff`4eb8be59 chrome_7fff4e190000!mojo::Watcher::OnHandleReady+0x67 [c:\b\build\slave\win64-pgo\build\src\mojo\public\cpp\system\watcher.cc @ 123]
20 (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::FunctorTraits<void (__cdecl media::cast::UdpTransport::*)(int),void>::Invoke+0x14 [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 214]
21 (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::InvokeHelper<1,void>::MakeItSo+0x34 [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 305]
22 (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::Invoker<base::internal::BindState<void (__cdecl media::cast::UdpTransport::*)(int),base::WeakPtr<media::cast::UdpTransport>,enum net::Error>,void __cdecl(void)>::RunImpl+0x34 [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 361]
23 0000007e`5fdeddd0 00007fff`4f29ac4a chrome_7fff4e190000!base::internal::Invoker<base::internal::BindState<void (__cdecl media::cast::UdpTransport::*)(int) __ptr64,base::WeakPtr<media::cast::UdpTransport>,enum net::Error>,void __cdecl(void)>::Run+0x41 [c:\b\build\slave\win64-pgo\build\src\base\bind_internal.h @ 343]
24 (Inline Function) --------`-------- chrome_7fff4e190000!base::internal::RunMixin<base::Callback<void __cdecl(void),0,0> >::Run+0xf [c:\b\build\slave\win64-pgo\build\src\base\callback.h @ 47]
25 0000007e`5fdede00 00007fff`4f250b4c chrome_7fff4e190000!base::debug::TaskAnnotator::RunTask+0x1aa [c:\b\build\slave\win64-pgo\build\src\base\debug\task_annotator.cc @ 52]
26 0000007e`5fdedf00 00007fff`4f251760 chrome_7fff4e190000!base::MessageLoop::RunTask+0x4cc [c:\b\build\slave\win64-pgo\build\src\base\message_loop\message_loop.cc @ 414]
27 (Inline Function) --------`-------- chrome_7fff4e190000!base::MessageLoop::DeferOrRunPendingTask+0x4f [c:\b\build\slave\win64-pgo\build\src\base\message_loop\message_loop.cc @ 422]
28 0000007e`5fdef240 00007fff`4f29b531 chrome_7fff4e190000!base::MessageLoop::DoWork+0x420 [c:\b\build\slave\win64-pgo\build\src\base\message_loop\message_loop.cc @ 515]
29 0000007e`5fdef4f0 00007fff`4f29b204 chrome_7fff4e190000!base::MessagePumpForUI::DoRunLoop+0x71 [c:\b\build\slave\win64-pgo\build\src\base\message_loop\message_pump_win.cc @ 264]
2a 0000007e`5fdef560 00007fff`4f2730d3 chrome_7fff4e190000!base::MessagePumpWin::Run+0x54 [c:\b\build\slave\win64-pgo\build\src\base\message_loop\message_pump_win.cc @ 143]
2b (Inline Function) --------`-------- chrome_7fff4e190000!base::MessageLoop::RunHandler+0x28 [c:\b\build\slave\win64-pgo\build\src\base\message_loop\message_loop.cc @ 378]
2c 0000007e`5fdef5b0 00007fff`4f17eb7b chrome_7fff4e190000!base::RunLoop::Run+0x103 [c:\b\build\slave\win64-pgo\build\src\base\run_loop.cc @ 36]
2d 0000007e`5fdef600 00007fff`4ec3446d chrome_7fff4e190000!ChromeBrowserMainParts::MainMessageLoopRun+0xef [c:\b\build\slave\win64-pgo\build\src\chrome\browser\chrome_browser_main.cc @ 2003]
2e (Inline Function) --------`-------- chrome_7fff4e190000!content::BrowserMainLoop::RunMainMessageLoopParts+0x5f [c:\b\build\slave\win64-pgo\build\src\content\browser\browser_main_loop.cc @ 976]
2f 0000007e`5fdef680 00007fff`4ec2d403 chrome_7fff4e190000!content::BrowserMainRunnerImpl::Run+0x71 [c:\b\build\slave\win64-pgo\build\src\content\browser\browser_main_runner.cc @ 155]
30 0000007e`5fdef6d0 00007fff`4f12d513 chrome_7fff4e190000!content::BrowserMain+0xef [c:\b\build\slave\win64-pgo\build\src\content\browser\browser_main.cc @ 46]
31 (Inline Function) --------`-------- chrome_7fff4e190000!content::RunNamedProcessTypeMain+0x160 [c:\b\build\slave\win64-pgo\build\src\content\app\content_main_runner.cc @ 408]
32 0000007e`5fdef720 00007fff`4e24ba9e chrome_7fff4e190000!content::ContentMainRunnerImpl::Run+0x1ff [c:\b\build\slave\win64-pgo\build\src\content\app\content_main_runner.cc @ 776]
33 (Inline Function) --------`-------- chrome_7fff4e190000!content::ContentMain+0x81 [c:\b\build\slave\win64-pgo\build\src\content\app\content_main.cc @ 20]
34 0000007e`5fdef8d0 00007ff7`51dc7629 chrome_7fff4e190000!ChromeMain+0x12a [c:\b\build\slave\win64-pgo\build\src\chrome\app\chrome_main.cc @ 97]
35 0000007e`5fdef960 00007ff7`51dc20b1 chrome!MainDllLoader::Launch+0x3bd [c:\b\build\slave\win64-pgo\build\src\chrome\app\main_dll_loader_win.cc @ 176]
36 0000007e`5fdefab0 00007ff7`51e51183 chrome!wWinMain+0x271 [c:\b\build\slave\win64-pgo\build\src\chrome\app\chrome_exe_main_win.cc @ 248]
37 (Inline Function) --------`-------- chrome!invoke_main+0x21 [f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl @ 113]
38 0000007e`5fdefdb0 00007fff`88688102 chrome!__scrt_common_main_seh+0x117 [f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl @ 253]
39 0000007e`5fdefdf0 00007fff`88a2c5b4 KERNEL32!BaseThreadInitThunk+0x22
3a 0000007e`5fdefe20 00000000`00000000 ntdll!RtlUserThreadStart+0x34