ChromeVoX was not enabled at that time.

Actually some of the lines were cut. The chrome log looks like this:

[1:1:0329/155206.445021:ERROR:automation_internal_custom_bindings.cc(1157)] Bad node_id_to_clear: 2
[1:1:0329/155206.451200:ERROR:automation_internal_custom_bindings.cc(1157)] 30 is not in the tree and not the new root
[1:1:0329/155206.471533:ERROR:automation_internal_custom_bindings.cc(1157)] Bad node_id_to_clear: 3
[1:1:0329/155206.481368:ERROR:automation_internal_custom_bindings.cc(1157)] Nodes left pending by the update: 1377 1305 1278 1279 1275 1280 1277 1306 1325 1312 1311 1310 1309 1308 1307 1304 1303 1302 1301 1332 1300 1299 1319 1283 1287 1316 1317 1284 1281 1343 1326 1298 1297 1296 1336 1295 1328 1334 1323 1294 1322 1293 1331 1292 1291 1290 1289 1288 1286 1285 1330 1340 1318 1339 1341 1282 1344 1342 1338 1327 1320 1321 1337 1335 1333 1329 1324 1315 1314 1313 1376 1375 1374 1373 1372 1371 1370 1369 1368 1367 1366 1365 1364 1363 1362 1361 1360 1359 1358 1357 1356 1355 1354 1353 1352 1351 1350 1349 1348 1347 1346 1345 1276
[1:1:0329/155207.118372:FATAL:ax_enums.cc(816)] Check failed: false. 
#0 0x61af616a436d base::debug::StackTrace::StackTrace()
#1 0x61af616a303c base::debug::StackTrace::StackTrace()
#2 0x61af616f0d7f logging::LogMessage::~LogMessage()
#3 0x61af6441eace ui::ToString()
#4 0x61af6aa18a2d extensions::AutomationInternalCustomBindings::GetState()
#5 0x61af5bc9d85d _ZN4base8internal13FunctorTraitsIMN7content12LinuxSandboxEFvRKSsEvE6InvokeIPS3_JS5_EEEvS7_OT_DpOT0_
#6 0x61af5bc9d796 _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN7content12LinuxSandboxEFvRKSsEJPS5_S7_EEEvOT_DpOT0_
#7 0x61af6aa288c4 _ZN4base8internal7InvokerINS0_9BindStateIMN10extensions32AutomationInternalCustomBindingsEFvRKN2v820FunctionCallbackInfoINS5_5ValueEEEEJNS0_17UnretainedWrapperIS4_EEEEEFvSA_EE7RunImplIRKSC_RKSt5tupleIJSE_EEJLm0EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EEEESA_
#8 0x61af6aa287ec _ZN4base8internal7InvokerINS0_9BindStateIMN10extensions32AutomationInternalCustomBindingsEFvRKN2v820FunctionCallbackInfoINS5_5ValueEEEEJNS0_17UnretainedWrapperIS4_EEEEEFvSA_EE3RunEPNS0_13BindStateBaseESA_
#9 0x61af5b9fb752 _ZNKR4base8CallbackIFvRKNS0_IFvvELNS_8internal8CopyModeE1ELNS2_10RepeatModeE1EEEELS3_1ELS4_1EE3RunES7_
#10 0x61af606c33f0 extensions::ObjectBackedNativeHandler::Router()
#11 0x61af5dcbdc29 v8::internal::FunctionCallbackArguments::Call()
#12 0x61af5de175f4 v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#13 0x61af5de16045 v8::internal::Builtin_Impl_HandleApiCall()
#14 0x61af5de15be6 v8::internal::Builtin_HandleApiCall()
#15 0x0df849684264 <unknown>

David reached to me, and suggested that https://codereview.chromium.org/2782753002/ might be to blame.
Yes, it seems that reverting it fixes the issue. I am not blocked by this issue, so I'll leave the decision on whether to roll the CL back or to land a fix to David.

Actually no. Reverting the Cl doesn't help.
It still crashed after some time:

[1:1:0329/201711.771899:ERROR:automation_internal_custom_bindings.cc(1142)] Bad node_id_to_clear: 1157
[1:1:0329/201711.786983:ERROR:automation_internal_custom_bindings.cc(1142)] 15 is not in the tree and not the new root
[1:1:0329/201711.816104:ERROR:automation_internal_custom_bindings.cc(1142)] Bad node_id_to_clear: 1221
[1:1:0329/201711.828185:ERROR:automation_internal_custom_bindings.cc(1142)] Nodes left pending by the update: 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2156 2155 2154 2169 2168 2170 2171 216
[1:1:0329/201712.404911:FATAL:ax_enums.cc(816)] Check failed: false. 
#0 0x6169307d13ed base::debug::StackTrace::StackTrace()
#1 0x6169307d00bc base::debug::StackTrace::StackTrace()
#2 0x61693081ddff logging::LogMessage::~LogMessage()
#3 0x61693354b9ae ui::ToString()
#4 0x616939b4582d extensions::AutomationInternalCustomBindings::GetState()
#5 0x61692adca89d _ZN4base8internal13FunctorTraitsIMN7content12LinuxSandboxEFvRKSsEvE6InvokeIPS3_JS5_EEEvS7_OT_DpOT0_
#6 0x61692adca7d6 _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN7content12LinuxSandboxEFvRKSsEJPS5_S7_EEEvOT_DpOT0_
#7 0x616939b556c4 _ZN4base8internal7InvokerINS0_9BindStateIMN10extensions32AutomationInternalCustomBindingsEFvRKN2v820FunctionCallbackInfoINS5_5ValueEEEEJNS0_17UnretainedWrapperIS4_EEEEEFvSA_EE7RunImplIRKSC_RKSt5tupleIJSE_EEJLm0EEEEvOT_OT0_NS_13IndexSequenceIJXspT1_EE
#8 0x616939b555ec _ZN4base8internal7InvokerINS0_9BindStateIMN10extensions32AutomationInternalCustomBindingsEFvRKN2v820FunctionCallbackInfoINS5_5ValueEEEEJNS0_17UnretainedWrapperIS4_EEEEEFvSA_EE3RunEPNS0_13BindStateBaseESA_
#9 0x61692ab28792 _ZNKR4base8CallbackIFvRKNS0_IFvvELNS_8internal8CopyModeE1ELNS2_10RepeatModeE1EEEELS3_1ELS4_1EE3RunES7_
#10 0x61692f7f0430 extensions::ObjectBackedNativeHandler::Router()
#11 0x61692cdeac69 v8::internal::FunctionCallbackArguments::Call()
#12 0x61692cf44634 v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#13 0x61692cf43085 v8::internal::Builtin_Impl_HandleApiCall()
#14 0x61692cf42c26 v8::internal::Builtin_HandleApiCall()
#15 0x0b1496a84264 <unknown>

Haven't seen this in a while, I think it was fixed on another bug