Any chance you could dump the call of the most recent DesktopWindowTreeHostWin::SetCapture?

I tried on my win7 machine and couldn't repro, but it was a debug build. Do you happen to have a win7 machine handy you could try to repro on?

Seems like at the moment I can only repro it on a debug build (after a changing DCHECK->CHECK), so I've only been able to repro it on my Win10 machine (as copying the debug build over to win7 would be a bit tricky). Win10 and Win7 with release build aren't showing the bug.

Currently these are the stacktraces - 
Previous SetCapture before the crash:
	base::debug::StackTrace::StackTrace [0x100AE887+55] (c:\src\chrome\src\base\debug\stack_trace_win.cc:217)
	base::debug::StackTrace::StackTrace [0x100AE521+17] (c:\src\chrome\src\base\debug\stack_trace.cc:199)
	views::HWNDMessageHandler::SetCapture [0x0D511C9A+362] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:788)
	views::HWNDMessageHandler::HandleMouseEventInternal [0x0D50A67A+810] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:2643)
	views::HWNDMessageHandler::OnMouseRange [0x0D50E15D+29] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:1702)
	views::HWNDMessageHandler::_ProcessWindowMessage [0x0D4FC027+215] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.h:357)
	views::HWNDMessageHandler::OnWndProc [0x0D510AA3+147] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:940)
	gfx::WindowImpl::WndProc [0x01D95795+245] (c:\src\chrome\src\ui\gfx\win\window_impl.cc:304)
	base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc> [0x01D9369E+126] (c:\src\chrome\src\base\win\wrapped_window_proc.h:80)
	SetManipulationInputTarget [0x765E84F3+83]
	CallWindowProcW [0x765C6C40+768]
	DispatchMessageW [0x765C6541+593]
	DispatchMessageW [0x765C6300+16]
	base::MessagePumpForUI::ProcessMessageHelper [0x10141C28+424] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:365)
	base::MessagePumpForUI::ProcessPumpReplacementMessage [0x10141E8A+362] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:400)
	base::MessagePumpForUI::ProcessMessageHelper [0x10141C04+388] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:360)
	base::MessagePumpForUI::ProcessNextWindowsMessage [0x10141D01+81] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:339)
	base::MessagePumpForUI::DoRunLoop [0x101413D2+18] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:169)
	base::MessagePumpWin::Run [0x1014239B+123] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:58)
	base::MessageLoop::Run [0x1013A74F+191] (c:\src\chrome\src\base\message_loop\message_loop.cc:370)
	base::RunLoop::Run [0x101F9C2A+186] (c:\src\chrome\src\base\run_loop.cc:112)
	ChromeBrowserMainParts::MainMessageLoopRun [0x0719BA58+248] (c:\src\chrome\src\chrome\browser\chrome_browser_main.cc:1962)
	content::BrowserMainLoop::RunMainMessageLoopParts [0x11B7C101+225] (c:\src\chrome\src\content\browser\browser_main_loop.cc:1147)
	content::BrowserMainRunnerImpl::Run [0x11B823B3+243] (c:\src\chrome\src\content\browser\browser_main_runner.cc:143)
	content::BrowserMain [0x11B6E28B+155] (c:\src\chrome\src\content\browser\browser_main.cc:46)
	content::RunNamedProcessTypeMain [0x137FE967+135] (c:\src\chrome\src\content\app\content_main_runner.cc:407)
	content::ContentMainRunnerImpl::Run [0x137FE845+405] (c:\src\chrome\src\content\app\content_main_runner.cc:686)
	content::ContentServiceManagerMainDelegate::RunEmbedderProcess [0x137FC424+36] (c:\src\chrome\src\content\app\content_service_manager_main_delegate.cc:52)
	service_manager::Main [0x0D1D8A67+823] (c:\src\chrome\src\services\service_manager\embedder\main.cc:469)
	content::ContentMain [0x137FC979+41] (c:\src\chrome\src\content\app\content_main.cc:19)
	ChromeMain [0x05BDD9C3+275] (c:\src\chrome\src\chrome\app\chrome_main.cc:134)
	MainDllLoader::Launch [0x00432344+836] (c:\src\chrome\src\chrome\app\main_dll_loader_win.cc:199)
	wWinMain [0x0042D1E9+649] (c:\src\chrome\src\chrome\app\chrome_exe_main_win.cc:268)
	invoke_main [0x004EFD6E+30] (f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:118)
	__scrt_common_main_seh [0x004EFBD0+336] (f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:253)
	__scrt_common_main [0x004EFA6D+13] (f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl:296)
	wWinMainCRTStartup [0x004EFD88+8] (f:\dd\vctools\crt\vcstartup\src\startup\exe_wwinmain.cpp:17)
	BaseThreadInitThunk [0x762C38F4+36]
	RtlUnicodeStringToInteger [0x77BC5DE3+595]
	RtlUnicodeStringToInteger [0x77BC5DAE+542]
	(No symbol) [0x00000000]

CHECK fail backtrace
[18364:15056:0711/161504.433:FATAL:hwnd_message_handler.cc(787)] Check failed: !HasCapture(). 
Backtrace:
	base::debug::StackTrace::StackTrace [0x100AE887+55] (c:\src\chrome\src\base\debug\stack_trace_win.cc:217)
	base::debug::StackTrace::StackTrace [0x100AE521+17] (c:\src\chrome\src\base\debug\stack_trace.cc:199)
	logging::LogMessage::~LogMessage [0x1010322E+94] (c:\src\chrome\src\base\logging.cc:554)
	views::HWNDMessageHandler::SetCapture [0x0D511C7B+331] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:788)
	views::DesktopWindowTreeHostWin::SetCapture [0x0D57BC19+25] (c:\src\chrome\src\ui\views\widget\desktop_aura\desktop_window_tree_host_win.cc:556)
	aura::WindowEventDispatcher::SetNativeCapture [0x0F8FE31A+26] (c:\src\chrome\src\ui\aura\window_event_dispatcher.cc:439)
	views::DesktopCaptureClient::SetCapture [0x0D554198+520] (c:\src\chrome\src\ui\views\widget\desktop_aura\desktop_capture_client.cc:79)
	aura::Window::SetCapture [0x0F8F3C34+84] (c:\src\chrome\src\ui\aura\window.cc:569)
	content::RenderWidgetHostViewEventHandler::OnMouseEvent [0x12BA8230+1056] (c:\src\chrome\src\content\browser\renderer_host\render_widget_host_view_event_handler.cc:390)
	content::RenderWidgetHostViewAura::OnMouseEvent [0x126B227B+139] (c:\src\chrome\src\content\browser\renderer_host\render_widget_host_view_aura.cc:1604)
	ui::EventHandler::OnEvent [0x01B57046+86] (c:\src\chrome\src\ui\events\event_handler.cc:27)
	ui::EventDispatcher::DispatchEvent [0x01B54D89+105] (c:\src\chrome\src\ui\events\event_dispatcher.cc:192)
	ui::EventDispatcher::ProcessEvent [0x01B554C9+233] (c:\src\chrome\src\ui\events\event_dispatcher.cc:140)
	ui::EventDispatcherDelegate::DispatchEventToTarget [0x01B55237+55] (c:\src\chrome\src\ui\events\event_dispatcher.cc:87)
	ui::EventDispatcherDelegate::DispatchEvent [0x01B54EB3+211] (c:\src\chrome\src\ui\events\event_dispatcher.cc:58)
	ui::EventProcessor::OnEventFromSource [0x01B57AC7+647] (c:\src\chrome\src\ui\events\event_processor.cc:46)
	ui::EventSource::DeliverEventToSink [0x01B5952C+140] (c:\src\chrome\src\ui\events\event_source.cc:73)
	ui::EventSource::SendEventToSink [0x01B59875+597] (c:\src\chrome\src\ui\events\event_source.cc:52)
	views::DesktopWindowTreeHostWin::HandleMouseEvent [0x0D57A9FD+29] (c:\src\chrome\src\ui\views\widget\desktop_aura\desktop_window_tree_host_win.cc:840)
	views::HWNDMessageHandler::HandleMouseEventInternal [0x0D50A8C6+1398] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:2671)
	views::HWNDMessageHandler::OnMouseRange [0x0D50E15D+29] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:1702)
	views::HWNDMessageHandler::_ProcessWindowMessage [0x0D4FBFC6+118] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.h:356)
	views::HWNDMessageHandler::OnWndProc [0x0D510AA3+147] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:940)
	gfx::WindowImpl::WndProc [0x01D95795+245] (c:\src\chrome\src\ui\gfx\win\window_impl.cc:304)
	base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc> [0x01D9369E+126] (c:\src\chrome\src\base\win\wrapped_window_proc.h:80)
	SetManipulationInputTarget [0x765E84F3+83]
	CallWindowProcW [0x765C6C40+768]
	DispatchMessageW [0x765C6541+593]
	DispatchMessageW [0x765C6300+16]
	base::MessagePumpForUI::ProcessMessageHelper [0x10141C28+424] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:365)
	base::MessagePumpForUI::ProcessPumpReplacementMessage [0x10141E8A+362] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:400)
	base::MessagePumpForUI::HandleWorkMessage [0x10141744+36] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:264)
	base::MessagePumpForUI::MessageCallback [0x1014198B+43] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:138)
	base::internal::FunctorTraits<bool (__thiscall base::MessagePumpForUI::*)(unsigned int,unsigned int,long,long *),void>::Invoke<base::MessagePumpForUI *,unsigned int,unsigned int,long,long *> [0x1013FCD7+71] (c:\src\chrome\src\base\bind_internal.h:210)
	base::internal::InvokeHelper<0,bool>::MakeItSo<bool (__thiscall base::MessagePumpForUI::*const &)(unsigned int,unsigned int,long,long *),base::MessagePumpForUI *,unsigned int,unsigned int,long,long *> [0x1013FEA8+88] (c:\src\chrome\src\base\bind_internal.h:275)
	base::internal::Invoker<base::internal::BindState<bool (__thiscall base::MessagePumpForUI::*)(unsigned int,unsigned int,long,long *),base::internal::UnretainedWrapper<base::MessagePumpForUI> >,bool __cdecl(unsigned int,unsigned int,long,long *)>::RunImpl< [0x1013FF3F+111] (c:\src\chrome\src\base\bind_internal.h:351)
	base::internal::Invoker<base::internal::BindState<bool (__thiscall base::MessagePumpForUI::*)(unsigned int,unsigned int,long,long *),base::internal::UnretainedWrapper<base::MessagePumpForUI> >,bool __cdecl(unsigned int,unsigned int,long,long *)>::Run [0x101422F8+88] (c:\src\chrome\src\base\bind_internal.h:329)
	base::Callback<bool __cdecl(unsigned int,unsigned int,long,long *),1,1>::Run [0x103AA004+84] (c:\src\chrome\src\base\callback.h:80)
	base::win::MessageWindow::WindowProc [0x103AA18D+349] (c:\src\chrome\src\base\win\message_window.cc:157)
	base::win::WrappedWindowProc<&base::win::MessageWindow::WindowProc> [0x103A948B+123] (c:\src\chrome\src\base\win\wrapped_window_proc.h:80)
	SetManipulationInputTarget [0x765E84F3+83]
	CallWindowProcW [0x765C6C40+768]
	DispatchMessageW [0x765C6820+1328]
	PeekMessageW [0x765CD169+1369]
	KiUserCallbackDispatcher [0x77BD8E56+54]
	gfx::ShowSystemMenuAtPoint [0x01D873DA+90] (c:\src\chrome\src\ui\gfx\win\hwnd_util.cc:223)
	views::HWNDMessageHandler::HandleMouseEventInternal [0x0D50A58C+572] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:2608)
	views::HWNDMessageHandler::OnMouseRange [0x0D50E15D+29] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:1702)
	views::HWNDMessageHandler::_ProcessWindowMessage [0x0D4FBFC6+118] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.h:356)
	views::HWNDMessageHandler::OnWndProc [0x0D510AA3+147] (c:\src\chrome\src\ui\views\win\hwnd_message_handler.cc:940)
	gfx::WindowImpl::WndProc [0x01D95795+245] (c:\src\chrome\src\ui\gfx\win\window_impl.cc:304)
	base::win::WrappedWindowProc<&gfx::WindowImpl::WndProc> [0x01D9369E+126] (c:\src\chrome\src\base\win\wrapped_window_proc.h:80)
	SetManipulationInputTarget [0x765E84F3+83]
	CallWindowProcW [0x765C6C40+768]
	DispatchMessageW [0x765C6541+593]
	DispatchMessageW [0x765C6300+16]
	base::MessagePumpForUI::ProcessMessageHelper [0x10141C28+424] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:365)
	base::MessagePumpForUI::ProcessPumpReplacementMessage [0x10141E8A+362] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:400)
	base::MessagePumpForUI::ProcessMessageHelper [0x10141C04+388] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:360)
	base::MessagePumpForUI::ProcessNextWindowsMessage [0x10141D01+81] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:339)
	base::MessagePumpForUI::DoRunLoop [0x101413D2+18] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:169)
	base::MessagePumpWin::Run [0x1014239B+123] (c:\src\chrome\src\base\message_loop\message_pump_win.cc:58)

This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue.

Sorry for the inconvenience if the bug really should have been left as Available.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

*** UI Mass Triage ***

Closing due to inactivity.If you feel this issue should still be addressed, feel free to reopen it or to file a new issue.