Audio transcode crashes in simple channel mixer

VLC 1.1.10 crashes transcoding 6 AAC channels down to 2 (produced on Fedora 15, also reproducible on OSX).

VLC --version:

VLC media player 1.1.10 The Luggage (revision exported)
VLC version 1.1.10 The Luggage (exported)
Compiled by mockbuild on hephaestus.wilsonet.com (Jun  7 2011 06:43:11)
Compiler: gcc version 4.6.0 20110509 (Red Hat 4.6.0-7) (GCC) 

debug log related to audio:

[0x7f67c4000ad0] main generic debug: using decoder module "faad"
[0x7f67c4000ad0] main generic debug: TIMER module_need() : 2.007 ms - Total 2.007 ms / 1 intvls (Avg 2.007 ms)
[0x7f67c4000f20] main encoder debug: looking for encoder module: 12 candidates
[0x7f67c4000f20] avcodec encoder debug: libavcodec initialized (interface 0x347500)
[0x7f67c4000f20] avcodec encoder debug: found encoder MPEG AAC Audio
[0x7f67c4000f20] main encoder debug: using encoder module "avcodec"
[0x7f67c4000f20] main encoder debug: TIMER module_need() : 4.510 ms - Total 4.510 ms / 1 intvls (Avg 4.510 ms)
[0x7f67d40026d0] stream_out_transcode stream out debug: Looking for filter (f32l->s16l, channels 6->2, rate 48000->48000)
[0x7f67c400ff70] main filter debug: looking for audio filter module: 13 candidates
[0x7f67c400ff70] main filter debug: using audio filter module "simple_channel_mixer"
[0x7f67c400ff70] main filter debug: TIMER module_need() : 0.650 ms - Total 0.650 ms / 1 intvls (Avg 0.650 ms)
[0x7f67d40026d0] main stream out debug: Filter 'simple_channel_mixer' (0x7f67c400ff70) appended to chain
[0x7f67c4227490] main filter debug: looking for audio filter module: 13 candidates
[0x7f67c4227490] audio_format filter debug: f32l->s16l, bits per sample: 0->16
[0x7f67c4227490] main filter debug: using audio filter module "audio_format"
[0x7f67c4227490] main filter debug: TIMER module_need() : 0.256 ms - Total 0.256 ms / 1 intvls (Avg 0.256 ms)
[0x7f67d40026d0] main stream out debug: Filter 'audio_format' (0x7f67c4227490) appended to chain
[0x7f67d40026d0] stream_out_transcode stream out debug: Got complete audio filter chain

Source file:

mp4info version 1.5.0.1test-in.mp4:
Track	Type	Info
1	video	H264 High@4, 5323.776 secs, 744 kbps, 704x352 @ 23.976028 fps
2	audio	MPEG-4 AAC LC, 5323.904 secs, 200 kbps, 24000 Hz
3	text
4	text

Command line:

vlc -I dummy test-in.mp4 --sout='#transcode{acodec=mp4a,ab=128,samplerate=48000,channels=2}:std{access=file,mux=mp4,dst=test-out.mp4}' vlc://quit

Backtrace:

(gdb) bt
[#0](https://code.videolan.org/videolan/vlc/-/issues/0)  0x00007fbecf7f8cbb in DoWork (p_out_buf=0x7fbec81300f0, 
    p_in_buf=0x7fbec8124000, p_filter=0x7fbec800fed0) at simple.c:115
[#1](https://code.videolan.org/videolan/vlc/-/issues/1)  Filter (p_block=0x7fbec8124000, p_filter=0x7fbec800fed0) at simple.c:277
[#2](https://code.videolan.org/videolan/vlc/-/issues/2)  Filter (p_filter=0x7fbec800fed0, p_block=0x7fbec8124000) at simple.c:251
[#3](https://code.videolan.org/videolan/vlc/-/issues/3)  0x0000003781ca4098 in filter_chain_AudioFilter (p_chain=<optimized out>, 
    p_block=<optimized out>) at misc/filter_chain.c:242
[#4](https://code.videolan.org/videolan/vlc/-/issues/4)  0x00007fbee23eb301 in transcode_audio_process (p_stream=0x7fbed80024f0, 
    id=0x7fbec8000a10, in=0x7fbed876c250, out=0x7fbed6ac8d48) at audio.c:385
[#5](https://code.videolan.org/videolan/vlc/-/issues/5)  0x00007fbee23e8c9d in Send (p_stream=0x7fbed80024f0, id=0x7fbec8000a10, 
    p_buffer=<optimized out>) at transcode.c:688
[#6](https://code.videolan.org/videolan/vlc/-/issues/6)  0x0000003781cacd32 in sout_InputSendBuffer (p_input=0x7fbec80009d0, 
    p_buffer=0x7fbed876c250) at stream_output/stream_output.c:283
[#7](https://code.videolan.org/videolan/vlc/-/issues/7)  0x0000003781c4368c in DecoderPlaySout (b_telx=<optimized out>, 
    p_sout_block=0x7fbed876c250, p_dec=0x7fbed876b650) at input/decoder.c:1660
[#8](https://code.videolan.org/videolan/vlc/-/issues/8)  DecoderProcessSout (p_block=0x0, p_dec=0x7fbed876b650)
    at input/decoder.c:1784
[#9](https://code.videolan.org/videolan/vlc/-/issues/9)  DecoderProcess (p_dec=0x7fbed876b650, p_block=<optimized out>)
    at input/decoder.c:1984
[#10](https://code.videolan.org/videolan/vlc/-/issues/10) 0x0000003781c4409b in DecoderThread (p_this=0x7fbed876b650)
    at input/decoder.c:892
[#11](https://code.videolan.org/videolan/vlc/-/issues/11) 0x0000003781c91fe4 in thread_entry (data=<optimized out>)
    at misc/threads.c:58
[#12](https://code.videolan.org/videolan/vlc/-/issues/12) 0x0000003a30607af1 in ?? ()
[#13](https://code.videolan.org/videolan/vlc/-/issues/13) 0x0000000000000000 in ?? ()

I have a core file, but not sure it's practical to attach since it's 60MB.

Let me know if you need anything else to diagnose...