Don't confuse the two bugs, there was a recent crash using video on chromium 81 with ffmpeg 4.3, so downgrading to 81 is probably not a solution unless you downgrade ffmpeg and libav* packages to their 4.2.3 versions: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=963035
Version: 83.0.4103.116-1Here's a backtrace attached that I captured today, this happened while I was away, so I'm not sure what caused it.
674832:674862:0625/031754.463380:FATAL:ref_counted.cc(66)] Check failed: --ref_count_ != std::numeric_limits<decltype(ref_count_)>::max(). [Thread 0x7ffeb8e96700 (LWP 705938) exited] --Type <RET> for more, q to quit, c to continue without paging-- Thread 6 "Chrome_IOThread" received signal SIGABRT, Aborted. [Switching to Thread 0x7fffdb7fe700 (LWP 674862)] __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 50 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt #0 __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 #1 0x00007ffff2ef955b in __GI_abort () at abort.c:79 #2 0x000055555a806605 in () #3 0x000055555a779800 in logging::LogMessage::~LogMessage() () #4 0x000055555a77b548 in base::subtle::RefCountedBase::ReleaseImpl() const () #5 0x0000555558ec112a in content::ServiceWorkerObjectHost::~ServiceWorkerObjectHost() () #6 0x0000555558ec117e in content::ServiceWorkerObjectHost::~ServiceWorkerObjectHost() () #7 0x0000555558516387 in std::_Rb_tree<unsigned long, std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > >, std::_Select1st<std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > > >, std::less<unsigned long>, std::allocator<std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > > > >::_M_erase(std::_Rb_tree_node<std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > > >*) () #8 0x0000555558e7a3d9 in content::ServiceWorkerContainerHost::~ServiceWorkerContainerHost() () #9 0x0000555558e7a61e in content::ServiceWorkerContainerHost::~ServiceWorkerContainerHost() () #10 0x0000555558ec4967 in content::ServiceWorkerProviderHost::~ServiceWorkerProviderHost() () #11 0x0000555558ef04c7 in content::ServiceWorkerVersion::~ServiceWorkerVersion() () #12 0x0000555558ef077e in content::ServiceWorkerVersion::~ServiceWorkerVersion() () #13 0x0000555558ec113f in content::ServiceWorkerObjectHost::~ServiceWorkerObjectHost() () #14 0x0000555558ec117e in content::ServiceWorkerObjectHost::~ServiceWorkerObjectHost() () #15 0x0000555558516387 in std::_Rb_tree<unsigned long, std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > >, std::_Select1st<std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > > >, std::less<unsigned long>, std::allocator<std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > > > >::_M_erase(std::_Rb_tree_node<std::pair<unsigned long const, std::unique_ptr<autofill::FormStructure, std::default_delete<autofill::FormStructure> > > >*) () #16 0x00005555587d97a3 in std::_Rb_tree<unsigned long, std::pair<unsigned long const, std::unique_ptr<storage::FileSystemOperation, std::default_delete<storage::FileSystemOperation> > >, std::_Select1st<std::pair<unsigned long const, std::unique_ptr<storage::FileSystemOperation, std::default_delete<storage::FileSystemOperation> > > >, std::less<unsigned long>, std::allocator<std::pair<unsigned long const, std::unique_ptr<storage::FileSystemOperation, std::default_delete<storage::FileSystemOperation> > > > >::_M_erase_aux(std::_Rb_tree_const_iterator<std::pair<unsigned long const, std::unique_ptr<storage::FileSystemOperation, std::default_delete<storage::FileSystemOperation> > > >, std::_Rb_tree_const_iterator<std::pair<unsigned long const, std::unique_ptr<storage::FileSystemOperation, std::default_delete<storage::FileSystemOperation> > > >) () #17 0x0000555558b480bc in mojo::ReceiverSetBase<mojo::AssociatedReceiver<printing::mojom::PrintRenderFrame, mojo::RawPtrImplRefTraits<printing::mojom::PrintRenderFrame> >, void>::OnDisconnect(unsigned long, unsigned int, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) () #18 0x000055555a93945f in mojo::InterfaceEndpointClient::NotifyError(base::Optional<mojo::DisconnectReason> const&) () #19 0x000055555a93fa24 in mojo::internal::MultiplexRouter::ProcessNotifyErrorTask(mojo::internal::MultiplexRouter::Task*, mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) () #20 0x000055555a93db62 in mojo::internal::MultiplexRouter::ProcessTasks(mojo::internal::MultiplexRouter::ClientCallBehavior, base::SequencedTaskRunner*) () #21 0x000055555a93c82d in mojo::internal::MultiplexRouter::OnPipeConnectionError(bool) () #22 0x000055555a935213 in mojo::Connector::HandleError(bool, bool) () #23 0x000055555a9364b5 in mojo::Connector::ReadAllAvailableMessages() () #24 0x000055555a950abb in mojo::SimpleWatcher::OnHandleReady(int, unsigned int, mojo::HandleSignalsState const&) () #25 0x000055555a7b5212 in base::TaskAnnotator::RunTask(char const*, base::PendingTask*) () #26 0x000055555a7c5039 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWorkImpl(base::sequence_manager::LazyNow*, bool*) () #27 0x000055555a7c4de4 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::DoWork() () #28 0x000055555a825367 in base::MessagePumpLibevent::Run(base::MessagePump::Delegate*) () #29 0x000055555a7c55d5 in base::sequence_manager::internal::ThreadControllerWithMessagePumpImpl::Run(bool, base::TimeDelta) () #30 0x000055555a79d670 in base::RunLoop::Run() () #31 0x0000555558ae33b3 in content::BrowserProcessSubThread::IOThreadRun(base::RunLoop*) () #32 0x000055555a7db2a9 in base::Thread::ThreadMain() () #33 0x000055555a817c9e in base::(anonymous namespace)::ThreadFunc(void*) ()