On Wed, 2008-09-24 at 00:45 +0200, Johannes Berg wrote:

Well, that does seem to fix the regression. That is, it no longer
crashes.

Spoke too early, it seems that the crash isn't exactly reproducible all
the time nor happens at the same spot all the time. I'd suspect that the
timer code isn't to blame but something in the IPI code or so.

johannes