Feedback link: https://predator-for-me.appspot.com/uma-sampling-profiler/result-feedback?key=ahFzfnByZWRhdG9yLWZvci1tZXJJCxIbVU1BU2FtcGxpbmdQcm9maWxlckFuYWx5c2lzIigxMWM5YmFkMzY5YmZmMWU1YmE5MjM2ZGRiZDJhNmMzNGM4NDdhYzc5DA

The result says that revision db10add2de5af94369714f34f46a67136fac3d9d touched the crashing line in frame #24, but the only change to this file in that revision was in the signature of the CreateChild function, which is not on the stack: https://chromium.googlesource.com/chromium/src.git/+/db10add2de5af94369714f34f46a67136fac3d9d%5E%21/cc/resources/display_resource_provider.cc