Hello,

	I'm seeing reproducible oops on 2.6.23-mm1 when trying to run tcpdump
over ppp0 interface. To reproduce I type simply:

# tcpdump -i ppp0

and wait a few seconds. I captured two oopses with a bit different stack
trace but EIP always points to packet_rcv():

(gdb) l* 0xc02d7d49
0xc02d7d49 is in packet_rcv (include/linux/netdevice.h:830).
825     static inline int dev_parse_header(const struct sk_buff *skb,
826                                        unsigned char *haddr)
827     {
828             const struct net_device *dev = skb->dev;
829     
830             if (!dev->header_ops->parse)
831                     return 0;
832             return dev->header_ops->parse(skb, haddr);
833     }
834

Please find pics attached (sorry for poor quality - I can provide you with better ones
tommorow if needed):

http://tuxland.pl/misc/2.6.23-mm1/DSC00136.JPG
http://tuxland.pl/misc/2.6.23-mm1/DSC00142.JPG

Regards,

	Mariusz