dmesg shows:
A bit of googling shows that bit 11 in the fault code means invalid write. So I guess the binary for the menu is writing to NULL ...
Code:
safestrapmenu: unhandled page fault (11) at 0x00000000, code 0x817