It seems the new skbuff routines aren't entirely stable ;-)
Anyway, could you check out the function that is indicated by the first
number (look it up in System.map, read the README on how to fine EIP
numbers in crashes). Also, it would be very useful to know what in your
setup triggers this - could you check your rc files to see exactly what
command it is that gets this happening?
Linus