bridge-related oops while running start/stop test

Kernel 2.6.26-dostoevsky crashed after almost 7 hours of ss test:

Apr 20 19:50:36 ovz Failed to initialize the ICMP6 control socket (err -105).
Apr 20 19:50:36 ovz BUG: unable to handle kernel NULL pointer dereference at 00000001
Apr 20 19:50:36 ovz IP: [<c04785eb>] kmem_cache_alloc+0x5a/0xdc
Apr 20 19:50:36 ovz *pde = 00000000
Apr 20 19:50:36 ovz Oops: 0000 [#1] SMP
Apr 20 19:50:36 ovz Modules linked in: bridge vzethdev simfs vzrst vzcpt tun vzdquota xt_tcpudp vznetdev vzmon vzdev i
pv6 xt_length ipt_ttl xt_tcpmss xt_TCPMSS xt_multiport xt_limit xt_dscp ipt_REJECT iptable_filter iptable_mangle iptab
le_nat nf_nat nf_conntrack_ipv4 nf_conntrack ip_tables x_tables video output sbs sbshc battery ac lp sg floppy sr_mod
cdrom serio_raw snd_intel8x0 snd_ac97_codec ac97_bus snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq parport_pc b
utton parport snd_seq_device snd_pcm_oss e100 snd_mixer_oss mii snd_pcm snd_timer snd i2c_i801 soundcore pata_acpi i2c
_core snd_page_alloc ata_generic iTCO_wdt iTCO_vendor_support pcspkr dm_snapshot dm_zero dm_mirror dm_log dm_mod ata_p
iix libata sd_mod scsi_mod ext3 jbd mbcache ehci_hcd ohci_hcd uhci_hcd
Apr 20 19:50:36 ovz
Apr 20 19:50:36 ovz Pid: 20733, comm: vzquota Not tainted (2.6.26-dostoevsky.1 #1 dostoevsky)
Apr 20 19:50:36 ovz EIP: 0060:[<c04785eb>] EFLAGS: 00010002 CPU: 0
Apr 20 19:50:36 ovz EIP is at kmem_cache_alloc+0x5a/0xdc
Apr 20 19:50:36 ovz EAX: 00000000 EBX: 00000001 ECX: f8e37898 EDX: c18f8548
Apr 20 19:50:36 ovz ESI: c07444b0 EDI: 00000001 EBP: 00000246 ESP: c0796eb8
Apr 20 19:50:36 ovz DS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068
Apr 20 19:50:36 ovz Process vzquota (pid: 20733, veid: 0, ti=c0796000 task=c6137230 task.ti=f4c83000)
Apr 20 19:50:36 ovz Stack: 00000040 00000020 e277f69c d945b828 d94796c0 e277f500 f8e37898 cdd3701c
Apr 20 19:50:36 ovz 00000000 d945b828 f8e37bd4 00000000 e277f69c d94796c0 d94796c0 eb50fe00
Apr 20 19:50:36 ovz
Apr 20 19:50:36 ovz e277f500 d945b822 f8e3871e 00000001 e277f140 eb50fe00 d945b822 eb50fe00
Apr 20 19:50:36 ovz Call Trace:
Apr 20 19:50:36 ovz [<f8e37898>] fdb_create+0x18/0x63 [bridge]
Apr 20 19:50:36 ovz [<f8e37bd4>] br_fdb_update+0x18b/0x197 [bridge]
Apr 20 19:50:36 ovz [<f8e3871e>] br_handle_frame_finish+0x36/0xd5 [bridge]
Apr 20 19:50:36 ovz [<f8e3899a>] br_handle_frame+0x1b9/0x1cf [bridge]
Apr 20 19:50:36 ovz [<c05a6d5c>] netif_receive_skb+0x2d3/0x3e0
Apr 20 19:50:36 ovz [<f89fdb17>] e100_rx_indicate+0x1b3/0x1d7 [e100]
Apr 20 19:50:36 ovz [<f89fdb6c>] e100_rx_clean+0x31/0x1f0 [e100]
Apr 20 19:50:36 ovz [<f89fdfb3>] e100_poll+0x20/0x84 [e100]
Apr 20 19:50:36 ovz [<c05a7036>] net_rx_action+0xa8/0x1d7
Apr 20 19:50:36 ovz [<c042b92d>] __do_softirq+0xa0/0x14f
Apr 20 19:50:36 ovz [<c0406600>] do_softirq+0x61/0xb4
Apr 20 19:50:36 ovz [<c04551d9>] handle_fasteoi_irq+0x0/0xa4
Apr 20 19:50:36 ovz [<c042bad6>] irq_exit+0x6c/0x9e
Apr 20 19:50:36 ovz [<c04064fb>] do_IRQ+0x93/0xa7
Apr 20 19:50:36 ovz [<c0405387>] common_interrupt+0x23/0x28
Apr 20 19:50:36 ovz [<c0487616>] sys_ioctl+0x3c/0x42
Apr 20 19:50:36 ovz [<c04049ae>] syscall_call+0x7/0xb
Apr 20 19:50:36 ovz =======================
Apr 20 19:50:36 ovz Code: 88 00 00 00 8b 42 10 89 04 24 8b 3a 85 ff 75 16 52 89 f0 51 8b 54 24 0c 83 c9 ff e8 f3 fd ff
 ff 5f 89 c3 5a eb 0a 8b 42 0c 89 fb <8b> 04 87 89 02 85 db 74 36 8b 06 a9 00 00 00 10 74 2d a9 00 00
Apr 20 19:50:36 ovz EIP: [<c04785eb>] kmem_cache_alloc+0x5a/0xdc SS:ESP 0068:c0796eb8
Apr 20 19:50:36 ovz Kernel panic - not syncing: Fatal exception in interrupt