I saw Automation Inspector mentioned in this doc:
https://chromium.googlesource.com/chromium/src/+/master/docs/accessibility/overview.md

1. Build linux-chromeos and run on Linux.
2. Install Automation Inspector extension:
https://chrome.google.com/webstore/detail/automation-inspector-exte/magknkflhkbbjaalinnipadaihkbghoc
3. From new tab page, click the extension action button.

Renderer crash:

[159204:159204:1128/095251.491867:INFO:CONSOLE(59)] "Connected to automation client with tab id = 13", source: chrome-extension://magknkflhkbbjaalinnipadaihkbghoc/js/server/automation-server.js (59)
[159204:159204:1128/095251.828750:INFO:CONSOLE(92)] "Begin listening to treeChanges", source: chrome-extension://magknkflhkbbjaalinnipadaihkbghoc/js/server/automation-server.js (92)
[1:1:1128/095251.843638:FATAL:ax_tree.cc(299)] Check failed: IsNodeIdIntAttribute(attr). 
#0 0x7fb552d0253d base::debug::StackTrace::StackTrace()
#1 0x7fb5529fe22a base::debug::StackTrace::StackTrace()
#2 0x7fb552a6a11e logging::LogMessage::~LogMessage()
#3 0x7fb5448d948f ui::AXTree::GetReverseRelations()
#4 0x558ec04b42b4 extensions::AutomationInternalCustomBindings::AddRoutes()::$_24::operator()()
#5 0x558ec04b4105 extensions::AutomationInternalCustomBindings::AddRoutes()::$_24::__invoke()
#6 0x558ec04ab526 extensions::(anonymous namespace)::NodeIDPlusAttributeWrapper::Run()
#7 0x558ec04ccbbf _ZN4base8internal13FunctorTraitsIMN10extensions12_GLOBAL__N_126NodeIDPlusAttributeWrapperEFvRKN2v820FunctionCallbackInfoINS5_5ValueEEEEvE6InvokeISC_RK13scoped_refptrIS4_EJSA_EEEvT_OT0_DpOT1_
#8 0x558ec04ccaef _ZN4base8internal12InvokeHelperILb0EvE8MakeItSoIRKMN10extensions12_GLOBAL__N_126NodeIDPlusAttributeWrapperEFvRKN2v820FunctionCallbackInfoINS7_5ValueEEEEJRK13scoped_refptrIS6_ESC_EEEvOT_DpOT0_
#9 0x558ec04cca80 _ZN4base8internal7InvokerINS0_9BindStateIMN10extensions12_GLOBAL__N_126NodeIDPlusAttributeWrapperEFvRKN2v820FunctionCallbackInfoINS6_5ValueEEEEJ13scoped_refptrIS5_EEEEFvSB_EE7RunImplIRKSD_RKNSt3__15tupleIJSF_EEEJLm0EEEEvOT_OT0_NSM_16integer_sequenceImJXspT1_EEEESB_
#10 0x558ec04cc9b4 _ZN4base8internal7InvokerINS0_9BindStateIMN10extensions12_GLOBAL__N_126NodeIDPlusAttributeWrapperEFvRKN2v820FunctionCallbackInfoINS6_5ValueEEEEJ13scoped_refptrIS5_EEEEFvSB_EE3RunEPNS0_13BindStateBaseESB_
#11 0x558eb64f29ad _ZNKR4base17RepeatingCallbackIFvRKNSt3__16vectorINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS6_IS8_EEEEEE3RunESC_
#12 0x558eb9b580d6 extensions::ObjectBackedNativeHandler::Router()
#13 0x7fb52f551ca9 v8::internal::FunctionCallbackArguments::Call()
#14 0x7fb52f5506dd v8::internal::(anonymous namespace)::HandleApiCallHelper<>()
#15 0x7fb52f54eea3 v8::internal::Builtin_Impl_HandleApiCall()
#16 0x7fb52f54e96f v8::internal::Builtin_HandleApiCall()
#17 0x7fb52f24e1d2 <unknown>