Assuming the TCB structures aren't totally hosed, this should originate from a call in CHDK code since the assert is in spytask.
@srsa: The crash actually happens when you connect the USB cable, or connect chdkptp?
An oddity in the camera log:
00007020: ConnectUSBCable
00007020: CmrConState_CheckStoreLens
00007020: _Init_PcConnect
00007020: CmrCon_DeliverUSBConnect
00007020: _ConnectUSBCBR
00007020: LogicalEvent:0x3137:adr:0x0,Para:0
00007030: LogicalEvent:0x5005:adr:0x0,Para:0
00007090: PTPRspnd.StartUpPTPFrameworkClient
00018470: Window:IneffectiveLockPhysicalScreen
The last message is some 11 seconds after the USB cable connection.