Turns out the undef handler path is quite hot, as only one thread per core can have VFP enabled at a time.