Open the crash report on crash-stats: 47c1236a-ef02-4e83-9ca5-44ed00260818.

The crash signature is js::jit::CalleeToToken.

Frame Signature Source Changesets
0 js::ToPrimitiveSlow(JSContext*, JSType, JS::MutableHandle<JS::Value>) js/src/vm/JSObject.cpp:2083
1 js::LooselyEqual(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, bool*) js/src/vm/EqualityOperations.cpp:186
2 LooselyEqualBooleanAndOther(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, bool*) js/src/vm/EqualityOperations.cpp:76
3 js::jit::IonCompareIC::update(JSContext*, JS::Handle<JSScript *>, js::jit::IonCompareIC*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, bool*) js/src/jit/IonIC.cpp:719
4 None None
5 None None
6 None None
7 None None
8 None None
9 None None
10 None None
11 None None
12 None None
13 None None
14 None None
15 None None
16 None None
17 None None
18 None None
19 js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) js/src/vm/Interpreter.cpp:711
0
2026-08-18
backout: False
20 mozilla::dom::EventListener::HandleEvent(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::Event&, mozilla::ErrorResult&) dom/bindings/EventListenerBinding.cpp:62
21 mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) dom/events/EventDispatcher.cpp:528
22 mozilla::EventDispatcher::Dispatch(mozilla::dom::EventTarget*, nsPresContext*, mozilla::WidgetEvent*, mozilla::dom::Event*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget *>*) dom/events/EventDispatcher.cpp:1366
23 mozilla::PresShell::EventHandler::HandleEventWithCurrentEventInfo(mozilla::WidgetEvent*, nsEventStatus*, bool, nsIContent*) layout/base/PresShell.cpp:9284
24 mozilla::PresShell::EventHandler::HandleEventWithTarget(mozilla::WidgetEvent*, nsIFrame*, nsIContent*, nsEventStatus*, bool, nsIContent**, nsIContent*) layout/base/PresShell.cpp:9191
25 mozilla::PointerEventHandler::DispatchPointerFromMouseOrTouch(mozilla::PresShell*, nsIFrame*, nsIContent*, mozilla::dom::Element*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*, nsIContent**) dom/events/PointerEventHandler.cpp:1389
26 mozilla::PresShell::EventHandler::HandleEvent(AutoWeakFrame&, mozilla::WidgetGUIEvent*, bool, nsEventStatus*) layout/base/PresShell.cpp:7721
27 mozilla::PresShell::HandleEvent(nsIFrame*, mozilla::WidgetGUIEvent*, bool, nsEventStatus*) layout/base/PresShell.cpp:7541
28 mozilla::PresShellWidgetListener::HandleEvent(mozilla::WidgetGUIEvent*) layout/base/PresShellWidgetListener.cpp:244
29 mozilla::dom::BrowserChild::HandleRealMouseButtonEvent(mozilla::WidgetMouseEvent const&, mozilla::layers::ScrollableLayerGuid const&, unsigned long long const&) dom/ipc/BrowserChild.cpp:1830
0
2026-08-18
backout: False
30 mozilla::dom::BrowserChild::ProcessPendingCoalescedMouseDataAndDispatchEvents() dom/ipc/BrowserChild.cpp:1564
0
2026-08-18
backout: False
31 nsRefreshDriver::TickObserverArray(unsigned int, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp:2269
32 nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) layout/base/nsRefreshDriver.cpp:2402
33 mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) layout/base/nsRefreshDriver.cpp:343
34 mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp:359
35 mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp:856
36 mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&) layout/base/nsRefreshDriver.cpp:753
37 mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread() layout/base/nsRefreshDriver.cpp:587
38 mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&) dom/ipc/VsyncMainChild.cpp:64
39 mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&) ipc/ipdl/PVsyncChild.cpp:241
40 mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) ipc/ipdl/PBackgroundChild.cpp:4960
41 mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) ipc/glue/MessageChannel.cpp:1512
42 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex &> const&) xpcom/threads/TaskController.cpp:1360
43 NS_ProcessNextEvent(nsIThread*, bool) xpcom/threads/nsThreadUtils.cpp:471
44 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:83
45 MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc:364
46 nsBaseAppShell::Run() widget/nsBaseAppShell.cpp:151
47 nsAppShell::Run() widget/windows/nsAppShell.cpp:632
48 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:233
49 MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc:364