Open the crash report on crash-stats: a413a10c-d0a6-4e5e-a0a7-9b23e0260819.

The crash signature is selectors::matching::matches_complex_selector_internal<T>.

Frame Signature Source Changesets
0 selectors::matching::matches_complex_selector_internal<style::gecko::wrapper::GeckoElement>(selectors::parser::SelectorIter<style::gecko::selector_parser::SelectorImpl>, style::gecko::wrapper::GeckoElement*, selectors::context::MatchingContext<style::gecko::selector_parser::SelectorImpl>*, selectors::matching::SubjectOrPseudoElement, selectors::matching::SubjectOrPseudoElement) servo/components/selectors/matching.rs:961
1 style::stylist::Stylist::push_applicable_declarations<style::gecko::wrapper::GeckoElement>(style::gecko::wrapper::GeckoElement, enum2$<core::option::Option<ref$<enum2$<style::gecko::pseudo_element::PseudoElement> > > >, enum2$<core::option::Option<servo_arc::ArcBorrow<style::shared_lock::Locked<style::properties::declaration_block::PropertyDeclarationBlock> > > >, enum2$<core::option::Option<servo_arc::ArcBorrow<style::shared_lock::Locked<style::properties::declaration_block::PropertyDeclarationBlock> > > >, style::properties::declaration_block::AnimationDeclarations, style::stylist::RuleInclusion, smallvec::SmallVec<array$<style::applicable_declarations::ApplicableDeclarationBlock,16> >*, selectors::context::MatchingContext<style::gecko::selector_parser::SelectorImpl>*) servo/components/style/stylist.rs:1748
2 style::style_resolver::StyleResolverForElement<style::gecko::wrapper::GeckoElement>::resolve_style<style::gecko::wrapper::GeckoElement>(enum2$<core::option::Option<ref$<style::properties::generated::gecko::ComputedValues> > >, enum2$<core::option::Option<ref$<style::properties::generated::gecko::ComputedValues> > >) servo/components/style/style_resolver.rs:265
4
2026-08-17
backout: False
3 style::parallel::style_trees<style::gecko::wrapper::GeckoElement,style::gecko::traversal::RecalcStyleOnly>(style::context::StyleContext<style::gecko::wrapper::GeckoElement>*, alloc::collections::vec_deque::VecDeque<style::dom::SendNode<style::gecko::wrapper::GeckoNode>,alloc::alloc::Global>, style_traits::dom::OpaqueNode, unsigned long long, enum2$<core::option::Option<ref$<rayon_core::scope::ScopeFifo> > >, style::gecko::traversal::RecalcStyleOnly*, style::scoped_tls::ScopedTLS<style::context::ThreadLocalStyleContext<style::gecko::wrapper::GeckoElement> >*) servo/components/style/parallel.rs:170
10
2026-08-17
backout: False
4 geckoservo::glue::traverse_subtree(style::gecko::wrapper::GeckoElement, style::global_style_data::GlobalStyleData*, style::gecko::data::PerDocumentStyleDataImpl*, style::shared_lock::SharedRwLockReadGuard*, style::traversal_flags::TraversalFlags, style::gecko_bindings::structs::root::mozilla::ServoElementSnapshotTable*) servo/ports/geckolib/glue.rs:315
0
2026-08-17
backout: False
5 geckoservo::glue::Servo_TraverseSubtree(style::gecko_bindings::structs::root::mozilla::dom::Element*, style::gecko::data::PerDocumentStyleData*, style::gecko_bindings::structs::root::mozilla::ServoElementSnapshotTable*, unsigned int) servo/ports/geckolib/glue.rs:375
0
2026-08-17
backout: False
6 mozilla::RestyleManager::DoProcessPendingRestyles(mozilla::ServoTraversalFlags) layout/style/RestyleManager.cpp:3287
7 mozilla::PresShell::DoFlushPendingNotifications(mozilla::ChangesToFlush) layout/base/PresShell.cpp:4649
8 mozilla::dom::Document::FlushPendingNotifications(mozilla::ChangesToFlush) dom/base/Document.cpp:11893
9 mozilla::dom::Element::GetScrollContainerFrame(nsIFrame**, mozilla::FlushType) dom/base/Element.cpp:791
0
2026-08-18
backout: False
10 mozilla::dom::Element::GetScrollSize() dom/base/Element.cpp:1097
0
2026-08-18
backout: False
11 mozilla::dom::Element_Binding::get_scrollHeight(JSContext*, JS::Handle<JSObject *>, void*, JSJitGetterCallArgs) dom/bindings/ElementBinding.cpp:4609
12 None None
13 None None
14 None None
15 None None
16 None None
17 None None
18 js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>, js::CallReason) js/src/vm/Interpreter.cpp:711
0
2026-08-18
backout: False
19 JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) js/src/vm/CallAndConstruct.cpp:118
20 mozilla::dom::FrameRequestCallback::Call(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, double, mozilla::ErrorResult&) dom/bindings/AnimationFrameProviderBinding.cpp:44
21 nsRefreshDriver::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsRefreshDriver::IsExtraTick) layout/base/nsRefreshDriver.cpp:2506
22 mozilla::RefreshDriverTimer::TickRefreshDrivers(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp, nsTArray<RefPtr<nsRefreshDriver> >&) layout/base/nsRefreshDriver.cpp:343
23 mozilla::RefreshDriverTimer::Tick(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp:359
24 mozilla::VsyncRefreshDriverTimer::TickRefreshDriver(mozilla::layers::BaseTransactionId<mozilla::VsyncIdType>, mozilla::TimeStamp) layout/base/nsRefreshDriver.cpp:856
25 mozilla::VsyncRefreshDriverTimer::NotifyVsyncOnMainThread(mozilla::VsyncEvent const&) layout/base/nsRefreshDriver.cpp:753
26 mozilla::VsyncRefreshDriverTimer::RefreshDriverVsyncObserver::NotifyVsyncTimerOnMainThread() layout/base/nsRefreshDriver.cpp:587
27 mozilla::dom::VsyncMainChild::RecvNotify(mozilla::VsyncEvent const&, float const&) dom/ipc/VsyncMainChild.cpp:64
28 mozilla::dom::PVsyncChild::OnMessageReceived(IPC::Message const&) ipc/ipdl/PVsyncChild.cpp:241
29 mozilla::ipc::PBackgroundChild::OnMessageReceived(IPC::Message const&) ipc/ipdl/PBackgroundChild.cpp:4960
30 mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::ipc::MessageChannel::MessageTask&) ipc/glue/MessageChannel.cpp:1512
31 mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex &> const&) xpcom/threads/TaskController.cpp:1360
32 NS_ProcessNextEvent(nsIThread*, bool) xpcom/threads/nsThreadUtils.cpp:471
33 mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:83
34 MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc:364
35 nsBaseAppShell::Run() widget/nsBaseAppShell.cpp:151
36 nsAppShell::Run() widget/windows/nsAppShell.cpp:632
37 mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*) ipc/glue/MessagePump.cpp:233
38 MessageLoop::RunHandler() ipc/chromium/src/base/message_loop.cc:364
39 mozilla::BootstrapImpl::XRE_InitChildProcess(int, char**, XREChildData const*) toolkit/xre/Bootstrap.cpp:59
40 wmain(int, wchar_t**) toolkit/xre/nsWindowsWMain.cpp:150
41 __scrt_common_main_seh() /builds/worker/workspace/obj-build/browser/app/D:/a/_work/1/s/src/vctools/crt/vcstartup/src/startup/exe_common.inl:288
42 BaseThreadInitThunk None
43 RtlUserThreadStart None