Try to expand the RNA tree in Outliner -> User Preference crash blender. RNA_struct_idproperties was not checking if ptr.data is NULL and always try to access the properties type information. Note: brecht double check this.