### Description
A user is seeing frequent crashes across a variety of websites i…ncluding youtube, linkedin, Stackoverflow and others. User's thread can be viewed here:
https://community.brave.app/t/brave-tab-crashes-daily/654235/7
Additional crash report IDs submitted:
```
64662900-9a02-c40f-0000-000000000000
01552a00-9a02-c40f-0000-000000000000
c6f22a00-9a02-c40f-0000-000000000000 (Linkedin)
21f72a00-9a02-c40f-0000-000000000000 (Stackoverflow)
```
<details>
<summary> Call stack for latest crash report</summary>
```
[ 00 ] scoped_refptr<blink::QualifiedName::QualifiedNameImpl>::operator->() ( scoped_refptr.h:293 )
[ 01 ] blink::QualifiedName::LocalName() ( qualified_name.h:170 )
[ 02 ] AnyAttributeMatches(blink::Element &,blink::CSSSelector::MatchType,blink::CSSSelector const &) ( selector_checker.cc:1353 )
[ 03 ] blink::SelectorChecker::CheckOne(blink::SelectorChecker::SelectorCheckingContext const &,blink::SelectorChecker::MatchResult &) ( selector_checker.cc:1510 )
[ 04 ] blink::SelectorChecker::MatchSelector(blink::SelectorChecker::SelectorCheckingContext const &,blink::SelectorChecker::MatchResult &) ( selector_checker.cc:889 )
[ 05 ] blink::SelectorChecker::MatchForSubSelector(blink::SelectorChecker::SelectorCheckingContext const &,blink::SelectorChecker::MatchResult &) ( selector_checker.cc:1001 )
[ 06 ] blink::SelectorChecker::MatchSelector(blink::SelectorChecker::SelectorCheckingContext const &,blink::SelectorChecker::MatchResult &) ( selector_checker.cc:907 )
[ 07 ] blink::Vector<cppgc::internal::BasicMember<blink::Element,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer>,0,blink::HeapAllocator>::push_back(blink::Element * &&) ( vector.h:2336 )
[ 08 ] CollectElementsByTagName(blink::ContainerNode &,blink::QualifiedName const &,blink::BasicHeapVector<1,cppgc::internal::BasicMember<blink::Element,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer>,0> &) ( selector_query.cc:219 )
[ 09 ] blink::SelectorQuery::Execute<blink::AllElementsSelectorQueryTrait>(blink::ContainerNode &,blink::BasicHeapVector<1,cppgc::internal::BasicMember<blink::Element,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer>,0> &) ( selector_query.cc:559 )
[ 10 ] blink::SelectorQuery::QueryAll(blink::ContainerNode &) ( selector_query.cc:145 )
[ 11 ] blink::ContainerNode::QuerySelectorAll(blink::AtomicString const &,blink::ExceptionState &) ( container_node.cc:1574 )
[ 12 ] blink::ContainerNode::querySelectorAll(blink::AtomicString const &,blink::ExceptionState &) ( container_node.cc:1544 )
[ 13 ] blink::`anonymous namespace'::v8_document::QuerySelectorAllOperationCallback(v8::FunctionCallbackInfo<v8::Value> const &) ( v8_document.cc:7881 )
[ 14 ] Builtins_CallApiCallbackGeneric ( chrome.dll )
[ 15 ] Builtins_InterpreterEntryTrampoline ( chrome.dll )
[ 16 ] Builtins_InterpreterEntryTrampoline ( chrome.dll )
[ 17 ] Builtins_JSEntryTrampoline ( chrome.dll )
[ 18 ] Builtins_JSEntry ( chrome.dll )
[ 19 ] Invoke(v8::internal::Isolate *,v8::internal::`anonymous namespace'::InvokeParams const &) ( execution.cc:474 )
[ 20 ] v8::internal::Execution::Call(v8::internal::Isolate *,v8::internal::DirectHandle<v8::internal::Object>,v8::internal::DirectHandle<v8::internal::Object>,v8::base::Vector<const v8::internal::DirectHandle<v8::internal::Object> >) ( execution.cc:565 )
[ 21 ] v8::Function::Call(v8::Isolate *,v8::Local<v8::Context>,v8::Local<v8::Value>,int,v8::Local<v8::Value> *) ( api.cc:5614 )
[ 22 ] blink::AgentRegistry<blink::AdTracker>::ForEachAgent(blink::probe::CallFunction::~CallFunction::<lambda_196> const &) ( agent_registry.h:79 )
[ 23 ] blink::probe::CallFunction::~CallFunction() ( core_probes_impl.cc:2793 )
[ 24 ] blink::V8ScriptRunner::CallFunction(v8::Local<v8::Function>,blink::ExecutionContext *,v8::Local<v8::Value>,int,v8::Local<v8::Value> *,v8::Isolate *) ( v8_script_runner.cc:853 )
[ 25 ] blink::bindings::CallbackInvokeHelper<blink::CallbackFunctionBase,0,0>::CallInternal(int,v8::Local<v8::Value> *) ( callback_invoke_helper.cc:123 )
[ 26 ] blink::bindings::CallbackInvokeHelper<blink::CallbackFunctionBase,0,0>::Call(int,v8::Local<v8::Value> *) ( callback_invoke_helper.cc:147 )
[ 27 ] blink::V8IdleRequestCallback::Invoke(blink::bindings::V8ValueOrScriptWrappableAdapter,blink::IdleDeadline *) ( v8_idle_request_callback.cc:64 )
[ 28 ] blink::V8IdleRequestCallback::InvokeAndReportException(blink::bindings::V8ValueOrScriptWrappableAdapter,blink::IdleDeadline *) ( v8_idle_request_callback.cc:112 )
[ 29 ] blink::`anonymous namespace'::V8IdleTask::invoke(blink::IdleDeadline *) ( window_idle_tasks.cc:63 )
[ 30 ] blink::ScriptedIdleTaskController::RunIdleTask(int,base::TimeTicks,blink::IdleDeadline::CallbackType) ( scripted_idle_task_controller.cc:361 )
[ 31 ] blink::HashTable<int,blink::KeyValuePair<int,cppgc::internal::BasicMember<blink::IdleTask,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer> >,blink::KeyValuePairExtractor,blink::HashMapValueTraits<blink::HashTraits<int>,blink::HashTraits<cppgc::internal::BasicMember<blink::IdleTask,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer> > >,blink::HashTraits<int>,blink::HeapAllocator>::find(int const &) ( hash_table.h:721 )
[ 32 ] blink::HashMap<int,cppgc::internal::BasicMember<blink::IdleTask,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer>,blink::HashTraits<int>,blink::HashTraits<cppgc::internal::BasicMember<blink::IdleTask,cppgc::internal::StrongMemberTag,cppgc::internal::DijkstraWriteBarrierPolicy,cppgc::internal::DisabledCheckingPolicy,cppgc::internal::CompressedPointer> >,blink::HeapAllocator>::find(int const &) ( hash_map.h:450 )
[ 33 ] blink::ScriptedIdleTaskController::SchedulerIdleTask(int,blink::ScriptedIdleTaskController::DecrementOnDelete,base::TimeTicks) ( scripted_idle_task_controller.cc:303 )
[ 34 ] base::internal::DecayedFunctorTraits<void (blink::ScriptedIdleTaskController::*)(int, blink::ScriptedIdleTaskController::DecrementOnDelete, base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&,int &&,blink::ScriptedIdleTaskController::DecrementOnDelete &&>::Invoke((int,blink::ScriptedIdleTaskController::DecrementOnDelete,base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> const &,int &&,blink::ScriptedIdleTaskController::DecrementOnDelete &&,base::TimeTicks &&) ( bind_internal.h:740 )
[ 35 ] base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (blink::ScriptedIdleTaskController::*&&)(int, blink::ScriptedIdleTaskController::DecrementOnDelete, base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&,int &&,blink::ScriptedIdleTaskController::DecrementOnDelete &&>,void,0,1,2>::MakeItSo((int,blink::ScriptedIdleTaskController::DecrementOnDelete,base::TimeTicks) &&,std::__Cr::tuple<cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy>,int,blink::ScriptedIdleTaskController::DecrementOnDelete> &&,base::TimeTicks &&) ( bind_internal.h:956 )
[ 36 ] base::internal::Invoker<base::internal::FunctorTraits<void (blink::ScriptedIdleTaskController::*&&)(int, blink::ScriptedIdleTaskController::DecrementOnDelete, base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&,int &&,blink::ScriptedIdleTaskController::DecrementOnDelete &&>,base::internal::BindState<1,1,0,void (blink::ScriptedIdleTaskController::*)(int, blink::ScriptedIdleTaskController::DecrementOnDelete, base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy>,int,blink::ScriptedIdleTaskController::DecrementOnDelete>,void (base::TimeTicks)>::RunImpl((int,blink::ScriptedIdleTaskController::DecrementOnDelete,base::TimeTicks) &&,std::__Cr::tuple<cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy>,int,blink::ScriptedIdleTaskController::DecrementOnDelete> &&,std::__Cr::integer_sequence<unsigned long long,0,1,2>,base::TimeTicks &&) ( bind_internal.h:1069 )
[ 37 ] base::internal::Invoker<base::internal::FunctorTraits<void (blink::ScriptedIdleTaskController::*&&)(int, blink::ScriptedIdleTaskController::DecrementOnDelete, base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy> &&,int &&,blink::ScriptedIdleTaskController::DecrementOnDelete &&>,base::internal::BindState<1,1,0,void (blink::ScriptedIdleTaskController::*)(int, blink::ScriptedIdleTaskController::DecrementOnDelete, base::TimeTicks),cppgc::internal::BasicPersistent<blink::ScriptedIdleTaskController,cppgc::internal::WeakPersistentPolicy,cppgc::internal::IgnoreLocationPolicy,cppgc::internal::DisabledCheckingPolicy>,int,blink::ScriptedIdleTaskController::DecrementOnDelete>,void (base::TimeTicks)>::RunOnce(base::internal::BindStateBase *,base::TimeTicks &&) ( bind_internal.h:982 )
[ 38 ] base::OnceCallback<void (base::TimeTicks)>::Run(base::TimeTicks) ( callback.h:155 )
[ 39 ] blink::scheduler::SingleThreadIdleTaskRunner::RunTask(base::OnceCallback<void (base::TimeTicks)>) ( single_thread_idle_task_runner.cc:121 )
[ 40 ] base::internal::InvokeHelper<1,base::internal::FunctorTraits<void (storage::LocalStorageImpl::*&&)(base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>),base::WeakPtr<storage::LocalStorageImpl> &&,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> &&>,void,0,1>::MakeItSo((base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>) &&,std::__Cr::tuple<base::WeakPtr<storage::LocalStorageImpl>,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> > &&) ( bind_internal.h:956 )
[ 41 ] base::internal::Invoker<base::internal::FunctorTraits<void (storage::LocalStorageImpl::*&&)(base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>),base::WeakPtr<storage::LocalStorageImpl> &&,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> &&>,base::internal::BindState<1,1,0,void (storage::LocalStorageImpl::*)(base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>),base::WeakPtr<storage::LocalStorageImpl>,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> >,void ()>::RunImpl((base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>) &&,std::__Cr::tuple<base::WeakPtr<storage::LocalStorageImpl>,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> > &&,std::__Cr::integer_sequence<unsigned long long,0,1>) ( bind_internal.h:1069 )
[ 42 ] base::internal::Invoker<base::internal::FunctorTraits<void (storage::LocalStorageImpl::*&&)(base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>),base::WeakPtr<storage::LocalStorageImpl> &&,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> &&>,base::internal::BindState<1,1,0,void (storage::LocalStorageImpl::*)(base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)>),base::WeakPtr<storage::LocalStorageImpl>,base::OnceCallback<void (std::__Cr::vector<mojo::StructPtr<storage::mojom::StorageUsageInfo>,std::__Cr::allocator<mojo::StructPtr<storage::mojom::StorageUsageInfo> > >)> >,void ()>::RunOnce(base::internal::BindStateBase *) ( bind_internal.h:982 )
[ 43 ] base::OnceCallback<void ()>::Run() ( callback.h:155 )
[ 44 ] base::TaskAnnotator::RunTaskImpl(base::PendingTask &) ( task_annotator.cc:229 )
[ 45 ] base::TaskAnnotator::RunTask(perfetto::StaticString,base::PendingTask &,base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl::<lambda_4> &&) ( task_annotator.h:112 )
[ 46 ] base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::LazyNow *) ( thread_controller_with_message_pump_impl.cc:465 )
[ 47 ] base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() ( thread_controller_with_message_pump_impl.cc:336 )
[ 48 ] base::MessagePumpDefault::Run(base::MessagePump::Delegate *) ( message_pump_default.cc:66 )
[ 49 ] base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool,base::TimeDelta) ( thread_controller_with_message_pump_impl.cc:643 )
[ 50 ] base::RunLoop::Run(base::Location const &) ( run_loop.cc:137 )
[ 51 ] content::RendererMain(content::MainFunctionParams) ( renderer_main.cc:344 )
[ 52 ] content::RunOtherNamedProcessTypeMain(std::__Cr::basic_string<char,std::__Cr::char_traits<char>,std::__Cr::allocator<char> > const &,content::MainFunctionParams,content::ContentMainDelegate *) ( content_main_runner_impl.cc:763 )
[ 53 ] content::ContentMainRunnerImpl::Run() ( content_main_runner_impl.cc:1166 )
[ 54 ] RunContentProcess(content::ContentMainParams,content::ContentMainRunner *) ( content_main.cc:356 )
[ 55 ] content::ContentMain(content::ContentMainParams) ( content_main.cc:369 )
[ 56 ] ChromeMain(HINSTANCE__ *,sandbox::SandboxInterfaceInfo *,__int64,__int64,__int64) ( chrome_main.cc:196 )
[ 57 ] MainDllLoader::Launch(HINSTANCE__ *,base::TimeTicks) ( main_dll_loader_win.cc:204 )
[ 58 ] wWinMain(HINSTANCE__ *,HINSTANCE__ *,wchar_t *,int) ( chrome_exe_main_win.cc:341 )
[ 59 ] invoke_main() ( exe_common.inl:118 )
[ 60 ] __scrt_common_main_seh() ( exe_common.inl:288 )
[ 61 ] BaseThreadInitThunk ( KERNEL32.DLL )
[ 62 ] RtlUserThreadStart ( ntdll.dll )
```
</details>