Build: 2.0.170.0 (Official Build 11755)

-go to about:network window.
-start tracking 
-Navigate to few webpages in different tabs.
-Close the about:network window.

-Browser window crashes.

PS: After step4, if you don't see a crash, Please exit the browser window.
I bet, you will get a crash at least now. 

Crash Analysis:
###############
FAULTING_IP: 
+3000b
0003000b ??              ???

EXCEPTION_RECORD:  ffffffff -- (.exr 0xffffffffffffffff)
ExceptionAddress: 0003000b
   ExceptionCode: c0000005 (Access violation)
  ExceptionFlags: 00000000
NumberParameters: 2
   Parameter[0]: 00000008
   Parameter[1]: 0003000b
Attempt to execute non-executable address 0003000b

DEFAULT_BUCKET_ID:  SOFTWARE_NX_FAULT

PROCESS_NAME:  chrome.exe

ERROR_CODE: (NTSTATUS) 0xc0000005 - The instruction at "0x%08lx" referenced
memory at "0x%08lx". The memory could not be "%s".

WRITE_ADDRESS:  0003000b 

FAILED_INSTRUCTION_ADDRESS: 
+3000b
0003000b ??              ???

FAULTING_THREAD:  00000248

PRIMARY_PROBLEM_CLASS:  SOFTWARE_NX_FAULT

BUGCHECK_STR:  APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_INSTRUCTION_PTR

LAST_CONTROL_TRANSFER:  from 013d947a to 0003000b

STACK_TEXT:  
WARNING: Frame IP not in any known module. Following frames may be wrong.
0202f9e0 013d947a 0332a038 00000354 0202fa74 0x3000b
0202fa04 013d8ce1 00000354 032f1880 032f1880
chrome_1220000!URLRequestJob::RecordBytesRead+0x3f
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @ 514]
0202fa24 013d80e8 0332a038 032ec7c8 012e5342
chrome_1220000!URLRequestJob::Read+0x30
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @ 130]
0202fa30 012e5342 025319b0 00008000 032ec7c8
chrome_1220000!URLRequest::Read+0x2f
[c:\b\slave\chrome-official\build\src\net\url_request\url_request.cc @ 319]
0202fa54 012e4cc9 0202fa74 032f1880 0332a038
chrome_1220000!ResourceDispatcherHost::Read+0x46
[c:\b\slave\chrome-official\build\src\chrome\browser\renderer_host\resource_dispatcher_host.cc
@ 1071]
0202fa7c 013d90fe 032f1880 01aa3474 0332a038
chrome_1220000!ResourceDispatcherHost::OnResponseStarted+0x87
[c:\b\slave\chrome-official\build\src\chrome\browser\renderer_host\resource_dispatcher_host.cc
@ 804]
0202fc08 013f3b89 0332a038 00000000 00aa3df8
chrome_1220000!URLRequestJob::NotifyHeadersComplete+0x26e
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @ 370]
0202fca0 013f393d 0332bc70 0202fcfc 0332bc70
chrome_1220000!URLRequestHttpJob::NotifyHeadersComplete+0x151
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_http_job.cc
@ 477]
0202fce4 013dfadb 00000000 00000000 013de104
chrome_1220000!URLRequestHttpJob::OnStartCompleted+0x51
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_http_job.cc
@ 407]
0202fcf0 013de104 0202fcfc 00000000 0202fd5c
chrome_1220000!CallbackImpl<net::HttpCache::Transaction,void (__thiscall
net::HttpCache::Transaction::*)(int),Tuple1<int> >::RunWithParams+0x14
[c:\b\slave\chrome-official\build\src\base\task.h @ 571]
0202fd00 013de89f 02469b58 0202fd80 00000000
chrome_1220000!net::HttpCache::Transaction::HandleResult+0x1b
[c:\b\slave\chrome-official\build\src\net\http\http_cache.cc @ 597]
0202fd5c 013dfadb 00000000 0253b4c8 013ecf40
chrome_1220000!net::HttpCache::Transaction::OnNetworkInfoAvailable+0x1d1
[c:\b\slave\chrome-official\build\src\net\http\http_cache.cc @ 965]
0202fd68 013ecf40 0202fd80 0202fdcc 0202fd8c
chrome_1220000!CallbackImpl<net::HttpCache::Transaction,void (__thiscall
net::HttpCache::Transaction::*)(int),Tuple1<int> >::RunWithParams+0x14
[c:\b\slave\chrome-official\build\src\base\task.h @ 571]
0202fd78 013b195d 00000000 013fd7e9 0202fd94
chrome_1220000!net::HttpNetworkTransaction::OnIOComplete+0x2b
[c:\b\slave\chrome-official\build\src\net\http\http_network_transaction.cc
@ 366]
0202fd80 013fd7e9 0202fd94 0202fde8 013fd9a7
chrome_1220000!CallbackImpl<ExtensionsDOMHandler,void (__thiscall
ExtensionsDOMHandler::*)(Value const *),Tuple1<Value const *>
>::RunWithParams+0xe [c:\b\slave\chrome-official\build\src\base\task.h @ 572]
0202fd8c 013fd9a7 000005d8 02469b8c 0202fef0
chrome_1220000!net::TCPClientSocket::DoCallback+0x19
[c:\b\slave\chrome-official\build\src\net\base\tcp_client_socket_win.cc @ 317]
0202fde8 013fd9c6 0332de60 015b5ffa 00000984
chrome_1220000!net::TCPClientSocket::DidCompleteIO+0xc2
[c:\b\slave\chrome-official\build\src\net\base\tcp_client_socket_win.cc @ 369]
0202fdf0 015b5ffa 00000984 0332de60 0202fef0
chrome_1220000!net::TCPClientSocket::OnObjectSignaled+0x19
[c:\b\slave\chrome-official\build\src\net\base\tcp_client_socket_win.cc @ 380]
0202fe00 015a5f31 015a5f68 0202fe40 01bc3d38
chrome_1220000!base::ObjectWatcher::Watch::Run+0x1b
[c:\b\slave\chrome-official\build\src\base\object_watcher.cc @ 30]
0202fe04 015a5f68 0202fe40 01bc3d38 015a60f6
chrome_1220000!MessageLoop::RunTask+0x1c
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 309]
0202fe10 015a60f6 00000000 01bbb570 00000000
chrome_1220000!MessageLoop::DeferOrRunPendingTask+0x2a
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 316]
0202fe40 015bfb0c 01bbb570 00000000 00e60168
chrome_1220000!MessageLoop::DoWork+0x6e
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 416]
0202fe54 015bf630 0202fef0 0202fef0 00000000
chrome_1220000!base::MessagePumpForIO::DoRunLoop+0x6f
[c:\b\slave\chrome-official\build\src\base\message_pump_win.cc @ 468]
0202fe70 015bf4e3 00000000 0202fef0 015a5dfd
chrome_1220000!base::MessagePumpWin::RunWithDispatcher+0x38
[c:\b\slave\chrome-official\build\src\base\message_pump_win.cc @ 54]
0202fe7c 015a5dfd 0202fef0 01bc2bd8 015a5dcc
chrome_1220000!base::MessagePumpWin::Run+0xe
[c:\b\slave\chrome-official\build\src\base\message_pump_win.h @ 78]
0202fe88 015a5dcc c0aa9740 01bc2bec 01bc2bd8
chrome_1220000!MessageLoop::RunInternal+0x2b
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 198]
0202fec0 015a5d6f 01bc2e58 00000001 7c80a000
chrome_1220000!MessageLoop::RunHandler+0x4f
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 181]
0202fee0 015a9641 0013f194 01bc2bd0 01a24630
chrome_1220000!MessageLoop::Run+0x15
[c:\b\slave\chrome-official\build\src\base\message_loop.cc @ 155]
0202ffb0 015a9365 7c80b713 01bc2bd8 0013f194
chrome_1220000!base::Thread::ThreadMain+0x81
[c:\b\slave\chrome-official\build\src\base\thread.cc @ 159]
0202ffb4 7c80b713 01bc2bd8 0013f194 01bc2bd0 chrome_1220000!`anonymous
namespace'::ThreadFunc+0x9
[c:\b\slave\chrome-official\build\src\base\platform_thread_win.cc @ 27]
0202ffec 00000000 015a935c 01bc2bd8 00000000 kernel32!BaseThreadStart+0x37


STACK_COMMAND:  ~6s; .ecxr ; kb

FOLLOWUP_IP: 
chrome_1220000!URLRequestJob::RecordBytesRead+3f
[c:\b\slave\chrome-official\build\src\net\url_request\url_request_job.cc @ 514]
013d947a 8d75f4          lea     esi,[ebp-0Ch]

FAULTING_SOURCE_CODE:  
   510:     ++(metrics_->number_of_read_IO_);
   511:     metrics_->total_bytes_read_ += bytes_read;
   512:   }
   513:   filter_input_byte_count_ += bytes_read;
>  514:   g_url_request_job_tracker.OnBytesRead(this, bytes_read);
   515: }
   516: 
   517: const URLRequestStatus URLRequestJob::GetStatus() {
   518:   if (request_)
   519:     return request_->status();


SYMBOL_STACK_INDEX:  1

SYMBOL_NAME:  chrome_1220000!URLRequestJob::RecordBytesRead+3f

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: chrome_1220000

IMAGE_NAME:  chrome.dll

DEBUG_FLR_IMAGE_TIMESTAMP:  49bee579

FAILURE_BUCKET_ID: 
SOFTWARE_NX_FAULT_c0000005_chrome.dll!URLRequestJob::RecordBytesRead

BUCKET_ID: 
APPLICATION_FAULT_SOFTWARE_NX_FAULT_BAD_INSTRUCTION_PTR_BAD_IP_chrome_1220000!URLRequestJob::RecordBytesRead+3f