Crashed whenever opens NTP

[simonhong]

Reported by @SergeyZhukovsky

[ 00 ] brave_search_conversion::IsNTPPromotionEnabled(PrefService*, TemplateURLService*) ( utils.cc:36 )
[ 01 ] (anonymous namespace)::IsNTPPromotionEnabled(Profile*) ( brave_new_tab_page_handler.cc:55 )
[ 02 ] BraveNewTabPageHandler::BraveNewTabPageHandler(mojo::PendingReceiver<brave_new_tab_page::mojom::PageHandler>, mojo::PendingRemote<brave_new_tab_page::mojom::Page>, Profile*, content::WebContents*) ( brave_new_tab_page_handler.cc:99 )
[ 03 ] BraveNewTabUI::CreatePageHandler(mojo::PendingRemote<brave_new_tab_page::mojom::Page>, mojo::PendingReceiver<brave_new_tab_page::mojom::PageHandler>) ( unique_ptr.h:744 )
[ 04 ] brave_new_tab_page::mojom::PageHandlerFactoryStubDispatch::Accept(brave_new_tab_page::mojom::PageHandlerFactory*, mojo::Message*) ( brave_new_tab_page.mojom.cc:236 )
[ 05 ] mojo::InterfaceEndpointClient::HandleIncomingMessageThunk::Accept(mojo::Message*) ( interface_endpoint_client.cc:981 )
[ 06 ] mojo::internal::MultiplexRouter::Accept(mojo::Message*) ( message_dispatcher.cc:43 )
[ 07 ] mojo::MessageDispatcher::Accept(mojo::Message*) ( message_dispatcher.cc:43 )
[ 08 ] base::internal::Invoker<base::internal::BindState<void (mojo::Connector::*)(unsigned int), base::internal::UnretainedWrapper<mojo::Connector>>, void (unsigned int)>::Run(base::internal::BindStateBase*, unsigned int) ( connector.cc:561 )
[ 09 ] base::internal::Invoker<base::internal::BindState<void (mojo::SimpleWatcher::*)(int, unsigned int, mojo::HandleSignalsState const&), base::WeakPtr<mojo::SimpleWatcher>, int, unsigned int, mojo::HandleSignalsState>, void ()>::RunOnce(base::internal::BindStateBase*) ( callback.h:263 )
[ 10 ] non-virtual thunk to base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() ( callback.h:145 )
[ 11 ] base::(anonymous namespace)::WorkSourceDispatch(_GSource*, int (*)(void*), void*) ( message_pump_glib.cc:374 )
[ 12 ] g_main_context_dispatch
[ 13 ] g_main_context_dispatch
[ 14 ] g_main_context_iteration
[ 15 ] base::MessagePumpGlib::Run(base::MessagePump::Delegate*) ( message_pump_glib.cc:400 )
[ 16 ] base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) ( thread_controller_with_message_pump_impl.cc:577 )
[ 17 ] base::internal::Invoker<base::internal::BindState<content::PluginServiceImpl::GetPlugins(base::OnceCallback<void (std::Cr::vector<content::WebPluginInfo, std::Cr::allocator<content::WebPluginInfo>> const&)>)::$_0>, std::Cr::vector<content::WebPluginInfo, std::Cr::allocator<content::WebPluginInfo>> ()>::RunOnce(base::internal::BindStateBase*) (.4f82a00aba3188246fa36dbbe64642e7)
[ 18 ] operator new(unsigned long) ( allocator_shim.cc:160 )
[ 19 ] base::RunLoop::Run(base::Location const&) ( thread_controller_with_message_pump_impl.cc:0 )
[ 20 ] base::internal::Invoker<base::internal::BindState<content::PluginServiceImpl::GetPlugins(base::OnceCallback<void (std::Cr::vector<content::WebPluginInfo, std::Cr::allocator<content::WebPluginInfo>> const&)>)::$_0>, std::Cr::vector<content::WebPluginInfo, std::Cr::allocator<content::WebPluginInfo>> ()>::RunOnce(base::internal::BindStateBase*) (.4f82a00aba3188246fa36dbbe64642e7)
[ 21 ] operator new(unsigned long) ( allocator_shim.cc:160 )
[ 22 ] content::BrowserMainLoop::RunMainMessageLoop() ( browser_main_loop.cc:1042 )
[ 23 ] content::BrowserMainLoop::RunMainMessageLoop() ( browser_main_loop.cc:1042 )
[ 24 ] content::BrowserMain(content::MainFunctionParams) ( browser_main_runner_impl.cc:158 )
[ 25 ] content::BrowserChildProcessHostImpl::TerminateAll() ( new:0 )
[ 26 ] content::ContentMainRunnerImpl::Run() ( content_main_runner_impl.cc:680 )
[ 27 ] base::SparseHistogram::Add(int) ( lock_impl.h:125 )
[ 28 ] content::ContentMainRunnerImpl::Initialize(content::ContentMainParams) ( content_main_runner_impl.cc:990 )
[ 29 ] __gconv_destroy_spec
[ 30 ] __libc_freeres
[ 31 ] __libc_freeres
[ 32 ] __funlockfile
[ 33 ] base::internal::Invoker<base::internal::BindState<content::PluginServiceImpl::GetPlugins(base::OnceCallback<void (std::Cr::vector<content::WebPluginInfo, std::Cr::allocator<content::WebPluginInfo>> const&)>)::$_0>, std::Cr::vector<content::WebPluginInfo, std::Cr::allocator<content::WebPluginInfo>> ()>::RunOnce(base::internal::BindStateBase*) (.4f82a00aba3188246fa36dbbe64642e7)
[ 34 ] base::CommandLine::GetSwitchValueASCII(base::BasicStringPiece<char, std::Cr::char_traits<char>>) const ( char_traits.h:266 )
[ 35 ] content::ContentMain(content::ContentMainParams) ( content_main.cc:433 )
[ 36 ] GetProfileParamsProcess(base::CommandLine const&) ( process_type.cc:33 )