On Wed, Nov 05, 2008 at 09:22:38AM -0800, Yinghai Lu wrote:
> > What is your theory for why this was causing a failure in the timer
> > subsystem?  Were we overrunning the end of irq_desc array and stomping
> > on some other data structure?
> 
> Yes. Please do apply that two patches at first.
> 

Success!  Applying these two patches, as found at:

	http://lkml.org/lkml/2008/11/4/431
        http://lkml.org/lkml/2008/11/5/81

... and my 2.6.28-rc3-git2 based kernel successfully booted on my
system.

I'll update:  http://bugzilla.kernel.org/show_bug.cgi?id=11951
accordingly.   Are these two patches scheduled to be pushed to 
mainstream, hopefully ASAP since they are a regression fix?

						- Ted

P.S.  I've attached the dmesg of the patched 2.6.28-rc3-git2 kernel.