I have managed to turn the crash into a WARN_ON, by adding this to the begin of nouveau_software_vblank():
if (!psw) { WARN_ON(1); return; }
And I have also managed to load the module manually instead by udev. So I am happy to attach a full log of what's going on here. See also my added printk's starting with XXX that mark some interesting points in the initialization.
This should give you enough information to track down the cause of the problem. To my non-expert eyes it looks like "noaccel" prevents registration of NVOBJ_ENGINE_SW or at least delays it too much.
Thanks,
Ortwin