Chrome Version: 62.0.3193.0 r495924 developer build
OS: Win7

What steps will reproduce the problem?
(1) chrome.exe
(2) crash

[936:2424:0822/102216.043:FATAL:binding_state.cc(90)] Check failed: !router_.

0:000> k
  *** Stack trace for last set context - .thread/.cxr resets it
 # ChildEBP RetAddr  
00 0056d2f4 74dc9ab5 base!base::debug::BreakDebugger+0x11 [c:\src\chromium\src\base\debug\debugger_win.cc @ 21]
01 0056d868 73bbe091 base!logging::LogMessage::~LogMessage+0x345 [c:\src\chromium\src\base\logging.cc @ 787]
02 0056d930 6d72784d bindings!mojo::internal::BindingStateBase::BindInternal+0x51 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\binding_state.cc @ 93]
03 0056d964 6d7277cb chrome_6ccb0000!mojo::internal::BindingState<translate::mojom::ContentTranslateDriver,mojo::RawPtrImplRefTraits<translate::mojom::ContentTranslateDriver> >::Bind+0x50 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\binding_state.h @ 114]
04 0056d974 6d7278d4 chrome_6ccb0000!mojo::Binding<translate::mojom::ContentTranslateDriver,mojo::RawPtrImplRefTraits<translate::mojom::ContentTranslateDriver> >::Bind+0x23 [c:\src\chromium\src\mojo\public\cpp\bindings\binding.h @ 99]
05 0056d988 6d70aeaa chrome_6ccb0000!ChromeLanguageDetectionClient::BindContentTranslateDriver+0x48 [c:\src\chromium\src\chrome\browser\language\chrome_language_detection_client.cc @ 51]
06 0056d998 6d70c011 chrome_6ccb0000!base::internal::FunctorTraits<void (__cdecl*)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *),void>::Invoke<mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *>+0x19 [c:\src\chromium\src\base\bind_internal.h @ 149]
07 (Inline) -------- chrome_6ccb0000!base::internal::InvokeHelper<0,void>::MakeItSo+0x10 [c:\src\chromium\src\base\bind_internal.h @ 263]
08 0056d9ac 6d71948d chrome_6ccb0000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>,void __cdecl(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>::RunImpl<void (__cdecl*const &)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *),std::tuple<> const &>+0x32 [c:\src\chromium\src\base\bind_internal.h @ 335]
09 0056d9c8 6d718f4c chrome_6ccb0000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>,void __cdecl(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>::Run+0x1c [c:\src\chromium\src\base\bind_internal.h @ 317]
0a 0056d9e0 6d719790 chrome_6ccb0000!base::Callback<void __cdecl(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *),1,1>::Run+0x18 [c:\src\chromium\src\base\callback.h @ 80]
0b 0056d9f0 6d71255f chrome_6ccb0000!service_manager::CallbackBinder<translate::mojom::ContentTranslateDriver,content::RenderFrameHost *>::RunCallback+0x1d [c:\src\chromium\src\services\service_manager\public\cpp\interface_binder.h @ 70]
0c 0056da24 6d0a6cea chrome_6ccb0000!service_manager::CallbackBinder<translate::mojom::ContentTranslateDriver,content::RenderFrameHost *>::BindInterface+0x80 [c:\src\chromium\src\services\service_manager\public\cpp\interface_binder.h @ 62]
0d 0056daf4 6d0a7767 chrome_6ccb0000!service_manager::BinderRegistryWithArgs<content::RenderFrameHost *>::BindInterface+0x40 [c:\src\chromium\src\services\service_manager\public\cpp\binder_registry.h @ 88]
0e 0056db18 6d71300c chrome_6ccb0000!service_manager::BinderRegistryWithArgs<content::RenderFrameHost *>::TryBindInterface+0x3e [c:\src\chromium\src\services\service_manager\public\cpp\binder_registry.h @ 105]
0f 0056db30 68a01203 chrome_6ccb0000!ChromeContentBrowserClient::BindInterfaceRequestFromFrame+0x29 [c:\src\chromium\src\chrome\browser\chrome_content_browser_client.cc @ 2932]
10 0056db48 734cc675 content!content::RenderFrameHostImpl::GetInterface+0x5c [c:\src\chromium\src\content\browser\frame_host\render_frame_host_impl.cc @ 4069]
11 0056dc68 6869c7b6 service_manager_mojom!service_manager::mojom::InterfaceProviderStubDispatch::Accept+0x123 [c:\src\chromium\src\out\rel\gen\services\service_manager\public\interfaces\interface_provider.mojom.cc @ 111]
12 0056dc78 73bc7f52 content!service_manager::mojom::InterfaceProviderStub<mojo::RawPtrImplRefTraits<service_manager::mojom::InterfaceProvider> >::Accept+0x19 [c:\src\chromium\src\out\rel\gen\services\service_manager\public\interfaces\interface_provider.mojom.h @ 121]
13 0056dd50 73bc50ec bindings!mojo::InterfaceEndpointClient::HandleValidatedMessage+0x223 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc @ 415]
14 0056de1c 73bc7d0c bindings!mojo::FilterChain::Accept+0x78 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\filter_chain.cc @ 40]
15 0056dee4 73bd1250 bindings!mojo::InterfaceEndpointClient::HandleIncomingMessage+0x67 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\interface_endpoint_client.cc @ 300]
16 0056dfe4 73bcefcd bindings!mojo::internal::MultiplexRouter::ProcessIncomingMessage+0x296 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\multiplex_router.cc @ 877]
17 0056e128 73bc50ec bindings!mojo::internal::MultiplexRouter::Accept+0x11b [c:\src\chromium\src\mojo\public\cpp\bindings\lib\multiplex_router.cc @ 599]
18 0056e1f4 73bc0d3d bindings!mojo::FilterChain::Accept+0x78 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\filter_chain.cc @ 40]
19 0056e3ec 73bc09dc bindings!mojo::Connector::ReadSingleMessage+0x1ab [c:\src\chromium\src\mojo\public\cpp\bindings\lib\connector.cc @ 439]
1a 0056e4c8 73bc054e bindings!mojo::Connector::ReadAllAvailableMessages+0x40 [c:\src\chromium\src\mojo\public\cpp\bindings\lib\connector.cc @ 469]
1b 0056e58c 73bbf382 bindings!mojo::Connector::OnHandleReadyInternal+0x7d [c:\src\chromium\src\mojo\public\cpp\bindings\lib\connector.cc @ 374]
1c (Inline) -------- bindings!base::internal::FunctorTraits<void (__thiscall mojo::Connector::*)(unsigned int),void>::Invoke+0xf [c:\src\chromium\src\base\bind_internal.h @ 194]
1d (Inline) -------- bindings!base::internal::InvokeHelper<0,void>::MakeItSo+0xf [c:\src\chromium\src\base\bind_internal.h @ 263]
1e 0056e598 73bc0f5f bindings!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::Connector::*)(unsigned int),base::internal::UnretainedWrapper<mojo::Connector> >,void __cdecl(unsigned int)>::RunImpl<void (__thiscall mojo::Connector::*const &)(unsigned int),std::tuple<base::internal::UnretainedWrapper<mojo::Connector> > const &,0>+0x31 [c:\src\chromium\src\base\bind_internal.h @ 339]
1f 0056e5b0 73b93ce0 bindings!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::Connector::*)(unsigned int),base::internal::UnretainedWrapper<mojo::Connector> >,void __cdecl(unsigned int)>::Run+0x19 [c:\src\chromium\src\base\bind_internal.h @ 317]
20 (Inline) -------- mojo_public_system_cpp!base::Callback<void __cdecl(unsigned int),1,1>::Run+0x16 [c:\src\chromium\src\base\callback.h @ 80]
21 0056e5c4 73b9389c mojo_public_system_cpp!mojo::SimpleWatcher::DiscardReadyState+0x1d [c:\src\chromium\src\mojo\public\cpp\system\simple_watcher.h @ 193]
22 (Inline) -------- mojo_public_system_cpp!base::internal::FunctorTraits<void (__cdecl*)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),void>::Invoke+0x10 [c:\src\chromium\src\base\bind_internal.h @ 149]
23 (Inline) -------- mojo_public_system_cpp!base::internal::InvokeHelper<0,void>::MakeItSo+0x10 [c:\src\chromium\src\base\bind_internal.h @ 263]
24 0056e5d8 73b93df9 mojo_public_system_cpp!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),base::Callback<void __cdecl(unsigned int),1,1> >,void __cdecl(unsigned int,mojo::HandleSignalsState const &)>::RunImpl<void (__cdecl*const &)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),std::tuple<base::Callback<void __cdecl(unsigned int),1,1> > const &,0>+0x32 [c:\src\chromium\src\base\bind_internal.h @ 335]
25 0056e5f4 73b9602e mojo_public_system_cpp!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),base::Callback<void __cdecl(unsigned int),1,1> >,void __cdecl(unsigned int,mojo::HandleSignalsState const &)>::Run+0x1c [c:\src\chromium\src\base\bind_internal.h @ 317]
26 (Inline) -------- mojo_public_system_cpp!base::Callback<void __cdecl(unsigned int,mojo::HandleSignalsState const &),1,1>::Run+0x18 [c:\src\chromium\src\base\callback.h @ 80]
27 0056e6d0 73b9507d mojo_public_system_cpp!mojo::SimpleWatcher::OnHandleReady+0xd2 [c:\src\chromium\src\mojo\public\cpp\system\simple_watcher.cc @ 276]
28 (Inline) -------- mojo_public_system_cpp!base::internal::FunctorTraits<void (__thiscall mojo::SimpleWatcher::*)(int,unsigned int,mojo::HandleSignalsState const &),void>::Invoke+0x1c [c:\src\chromium\src\base\bind_internal.h @ 194]
29 0056e6e8 73b950c6 mojo_public_system_cpp!base::internal::InvokeHelper<1,void>::MakeItSo<void (__thiscall mojo::SimpleWatcher::*const &)(int,unsigned int,mojo::HandleSignalsState const &),base::WeakPtr<mojo::SimpleWatcher> const &,int const &,unsigned int const &,mojo::HandleSignalsState const &>+0x2e [c:\src\chromium\src\base\bind_internal.h @ 283]
2a 0056e704 73b9612f mojo_public_system_cpp!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::SimpleWatcher::*)(int,unsigned int,mojo::HandleSignalsState const &),base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState>,void __cdecl(void)>::RunImpl<void (__thiscall mojo::SimpleWatcher::*const &)(int,unsigned int,mojo::HandleSignalsState const &),std::tuple<base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState> const &,0,1,2,3>+0x3a [c:\src\chromium\src\base\bind_internal.h @ 335]
2b 0056e718 74da00ae mojo_public_system_cpp!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::SimpleWatcher::*)(int,unsigned int,mojo::HandleSignalsState const &),base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState>,void __cdecl(void)>::Run+0x16 [c:\src\chromium\src\base\bind_internal.h @ 317]
2c (Inline) -------- base!base::Callback<void __cdecl(void),0,0>::Run+0x9 [c:\src\chromium\src\base\callback.h @ 91]
2d 0056e7b4 74ddea72 base!base::debug::TaskAnnotator::RunTask+0x12e [c:\src\chromium\src\base\debug\task_annotator.cc @ 59]
2e 0056ede4 74ddd6b9 base!base::MessageLoop::RunTask+0x4d2 [c:\src\chromium\src\base\message_loop\message_loop.cc @ 407]
2f (Inline) -------- base!base::MessageLoop::DeferOrRunPendingTask+0x9a [c:\src\chromium\src\base\message_loop\message_loop.cc @ 417]
30 0056efa0 74de12cd base!base::MessageLoop::DoWork+0x309 [c:\src\chromium\src\base\message_loop\message_loop.cc @ 524]
31 0056efd0 74de1d4a base!base::MessagePumpForUI::DoRunLoop+0x5d [c:\src\chromium\src\base\message_loop\message_pump_win.cc @ 174]
32 0056eff8 74dde51b base!base::MessagePumpWin::Run+0x4a [c:\src\chromium\src\base\message_loop\message_pump_win.cc @ 58]
33 0056f0c4 74e25b69 base!base::MessageLoop::Run+0x6b [c:\src\chromium\src\base\message_loop\message_loop.cc @ 346]
34 0056f1bc 6d7579c3 base!base::RunLoop::Run+0x89 [c:\src\chromium\src\base\run_loop.cc @ 124]
35 0056f2a8 68884962 chrome_6ccb0000!ChromeBrowserMainParts::MainMessageLoopRun+0xf5 [c:\src\chromium\src\chrome\browser\chrome_browser_main.cc @ 1918]
36 0056f2b8 68886399 content!content::BrowserMainLoop::RunMainMessageLoopParts+0x4f [c:\src\chromium\src\content\browser\browser_main_loop.cc @ 1175]
37 0056f37c 6887ea01 content!content::BrowserMainRunnerImpl::Run+0x9e [c:\src\chromium\src\content\browser\browser_main_runner.cc @ 153]
38 0056f390 692cb562 content!content::BrowserMain+0x84 [c:\src\chromium\src\content\browser\browser_main.cc @ 46]
39 0056f454 692cb40c content!content::RunNamedProcessTypeMain+0xd0 [c:\src\chromium\src\content\app\content_main_runner.cc @ 410]
3a 0056f560 73c60da6 content!content::ContentMainRunnerImpl::Run+0x126 [c:\src\chromium\src\content\app\content_main_runner.cc @ 693]
3b 0056f6b0 692ca7c2 embedder!service_manager::Main+0x234 [c:\src\chromium\src\services\service_manager\embedder\main.cc @ 469]
3c 0056f6e4 6cf189ce content!content::ContentMain+0x29 [c:\src\chromium\src\content\app\content_main.cc @ 19]
3d 0056f74c 002662f4 chrome_6ccb0000!ChromeMain+0xe2 [c:\src\chromium\src\chrome\app\chrome_main.cc @ 122]
3e 0056f7d4 002641af chrome!MainDllLoader::Launch+0x1c2 [c:\src\chromium\src\chrome\app\main_dll_loader_win.cc @ 201]
3f 0056f910 002aeb78 chrome!wWinMain+0x210 [c:\src\chromium\src\chrome\app\chrome_exe_main_win.cc @ 276]
40 (Inline) -------- chrome!invoke_main+0x1a [f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl @ 113]
41 0056f95c 76b833ca chrome!__scrt_common_main_seh+0xf6 [f:\dd\vctools\crt\vcstartup\src\startup\exe_common.inl @ 253]
42 0056f968 77e09ed2 kernel32!BaseThreadInitThunk+0xe
43 0056f9a8 77e09ea5 ntdll!__RtlUserThreadStart+0x70
44 0056f9c0 00000000 ntdll!_RtlUserThreadStart+0x1b