I tried to run a dcheck_always_on SyzyASAN build locally, which asserts about 10s in.
Looks like the culprit is here:

void BindingStateBase::BindInternal(
    ScopedMessagePipeHandle handle,
    scoped_refptr<base::SingleThreadTaskRunner> runner,
    const char* interface_name,
    std::unique_ptr<MessageReceiver> request_validator,
    bool passes_associated_kinds,
    bool has_sync_methods,
    MessageReceiverWithResponderStatus* stub,
    uint32_t interface_version) {
  DCHECK(!router_);  << HERE

  auto sequenced_runner =
      GetTaskRunnerToUseFromUserProvidedTaskRunner(std::move(runner));
  MultiplexRouter::Config config =
      passes_associated_kinds
          ? MultiplexRouter::MULTI_INTERFACE
          : (has_sync_methods
                 ? MultiplexRouter::SINGLE_INTERFACE_WITH_SYNC_METHODS
                 : MultiplexRouter::SINGLE_INTERFACE);
  router_ =
      new MultiplexRouter(std::move(handle), config, false, sequenced_runner);
  router_->SetMasterInterfaceName(interface_name);

  endpoint_client_.reset(new InterfaceEndpointClient(
      router_->CreateLocalEndpointHandle(kMasterInterfaceId), stub,
      std::move(request_validator), has_sync_methods,
      std::move(sequenced_runner), interface_version));
}

0:000> kc
  *** Stack trace for last set context - .thread/.cxr resets it
 # 
00 chrome_67660000!base::debug::BreakDebugger
01 chrome_67660000!logging::LogMessage::~LogMessage
02 chrome_67660000!mojo::internal::BindingStateBase::BindInternal
03 chrome_67660000!mojo::internal::BindingState<translate::mojom::ContentTranslateDriver,mojo::RawPtrImplRefTraits<translate::mojom::ContentTranslateDriver> >::Bind
04 chrome_67660000!mojo::Binding<translate::mojom::ContentTranslateDriver,mojo::RawPtrImplRefTraits<translate::mojom::ContentTranslateDriver> >::Bind
05 chrome_67660000!ChromeLanguageDetectionClient::BindContentTranslateDriver
06 chrome_67660000!base::internal::FunctorTraits<void (__cdecl*)(mojo::InterfaceRequest<device::mojom::UsbChooserService>,content::RenderFrameHost *),void>::Invoke<mojo::InterfaceRequest<device::mojom::UsbChooserService>,content::RenderFrameHost *>
07 chrome_67660000!base::internal::InvokeHelper<0,void>::MakeItSo
08 chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>,void __cdecl(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>::RunImpl<void (__cdecl*const &)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *),std::tuple<> const &>
09 chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>,void __cdecl(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *)>::Run
0a chrome_67660000!base::Callback<void __cdecl(mojo::InterfaceRequest<translate::mojom::ContentTranslateDriver>,content::RenderFrameHost *),1,1>::Run
0b chrome_67660000!service_manager::CallbackBinder<device::mojom::UsbDeviceManager,content::RenderFrameHost *>::RunCallback
0c chrome_67660000!service_manager::CallbackBinder<translate::mojom::ContentTranslateDriver,content::RenderFrameHost *>::BindInterface
0d chrome_67660000!service_manager::BinderRegistryWithArgs<service_manager::BindSourceInfo const &>::BindInterface
0e chrome_67660000!service_manager::BinderRegistryWithArgs<service_manager::BindSourceInfo const &>::TryBindInterface
0f chrome_67660000!ChromeContentBrowserClient::BindInterfaceRequestFromFrame
10 chrome_67660000!content::RenderFrameHostImpl::GetInterface
11 chrome_67660000!service_manager::mojom::InterfaceProviderStubDispatch::Accept
12 chrome_67660000!service_manager::mojom::InterfaceProviderStub<mojo::RawPtrImplRefTraits<service_manager::mojom::InterfaceProvider> >::Accept
13 chrome_67660000!mojo::InterfaceEndpointClient::HandleValidatedMessage
14 chrome_67660000!mojo::FilterChain::Accept
15 chrome_67660000!mojo::InterfaceEndpointClient::HandleIncomingMessage
16 chrome_67660000!mojo::internal::MultiplexRouter::ProcessIncomingMessage
17 chrome_67660000!mojo::internal::MultiplexRouter::Accept
18 chrome_67660000!mojo::FilterChain::Accept
19 chrome_67660000!mojo::Connector::ReadSingleMessage
1a chrome_67660000!mojo::Connector::ReadAllAvailableMessages
1b chrome_67660000!mojo::Connector::OnHandleReadyInternal
1c chrome_67660000!base::internal::FunctorTraits<void (__thiscall mojo::Connector::*)(unsigned int),void>::Invoke
1d chrome_67660000!base::internal::InvokeHelper<0,void>::MakeItSo
1e chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::Connector::*)(unsigned int),base::internal::UnretainedWrapper<mojo::Connector> >,void __cdecl(unsigned int)>::RunImpl<void (__thiscall mojo::Connector::*const &)(unsigned int),std::tuple<base::internal::UnretainedWrapper<mojo::Connector> > const &,0>
1f chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::Connector::*)(unsigned int),base::internal::UnretainedWrapper<mojo::Connector> >,void __cdecl(unsigned int)>::Run
20 chrome_67660000!base::Callback<void __cdecl(enum device::UMABluetoothDiscoverySessionOutcome),1,1>::Run
21 chrome_67660000!device::RunDiscoverySessionErrorCallback
22 chrome_67660000!base::internal::FunctorTraits<void (__cdecl*)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),void>::Invoke
23 chrome_67660000!base::internal::InvokeHelper<0,void>::MakeItSo
24 chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),base::Callback<void __cdecl(unsigned int),1,1> >,void __cdecl(unsigned int,mojo::HandleSignalsState const &)>::RunImpl<void (__cdecl*const &)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),std::tuple<base::Callback<void __cdecl(unsigned int),1,1> > const &,0>
25 chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__cdecl*)(base::Callback<void __cdecl(unsigned int),1,1> const &,unsigned int,mojo::HandleSignalsState const &),base::Callback<void __cdecl(unsigned int),1,1> >,void __cdecl(unsigned int,mojo::HandleSignalsState const &)>::Run
26 chrome_67660000!base::Callback<void __cdecl(unsigned int,mojo::HandleSignalsState const &),1,1>::Run
27 chrome_67660000!mojo::SimpleWatcher::OnHandleReady
28 chrome_67660000!base::internal::FunctorTraits<void (__thiscall midi::MidiScheduler::*)(midi::MidiManagerClient *,unsigned int,base::Callback<void __cdecl(void),1,1> const &),void>::Invoke
29 chrome_67660000!base::internal::InvokeHelper<1,void>::MakeItSo<void (__thiscall midi::MidiScheduler::*const &)(midi::MidiManagerClient *,unsigned int,base::Callback<void __cdecl(void),1,1> const &),base::WeakPtr<midi::MidiScheduler> const &,midi::MidiManagerClient * const &,unsigned int const &,base::Callback<void __cdecl(void),1,1> const &>
2a chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::SimpleWatcher::*)(int,unsigned int,mojo::HandleSignalsState const &),base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState>,void __cdecl(void)>::RunImpl<void (__thiscall mojo::SimpleWatcher::*const &)(int,unsigned int,mojo::HandleSignalsState const &),std::tuple<base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState> const &,0,1,2,3>
2b chrome_67660000!base::internal::Invoker<base::internal::BindState<void (__thiscall mojo::SimpleWatcher::*)(int,unsigned int,mojo::HandleSignalsState const &),base::WeakPtr<mojo::SimpleWatcher>,int,unsigned int,mojo::HandleSignalsState>,void __cdecl(void)>::Run