The commit

commit 5f5dace1ce001b24fb8286e09ffd3c4d2b547e09
Author: Denis V. Lunev <den@openvz.org>
Date:   Thu Sep 27 12:41:26 2007 -0700

     [NET]: Various dst_ifdown routines to catch refcounting bugs

causes a 100% reproducible oops in net-2.6.24.git, in ip6_route_add().

Platform: x86-64 Fedora 7

Config and lspci attached.