A Gentoo user reported an oops soon after upgrading from 2.4.32 to 2.6.15.

Unfortunately as it is a critical system, further testing cannot be performed,
so the reproducability of this is unknown. We are also missing the first few
lines of the oops report.

Here's the oops anyway. If this is useless without further testing as I suspect,
then please close this bug.

[17372366.136000] Oops: 0003 [#1]
[17372366.136000] SMP
[17372366.136000] Modules linked in: af_packet autofs4 parport_pc lp parport
md3
[17372366.136000] CPU:    0
[17372366.136000] EIP:    0060:[<c028596b>]    Not tainted VLI
[17372366.136000] EFLAGS: 00010246   (2.6.15-gentoo-r1)
[17372366.136000] EIP is at __alloc_skb+0xc5/0x130
[17372366.136000] eax: d98a8e80   ebx: d703d180   ecx: 00000000   edx: d98a8e00
[17372366.136000] esi: 00000080   edi: d703d200   ebp: 00000020   esp: c03dbf00
[17372366.136000] ds: 007b   es: 007b   ss: 0068
[17372366.136000] Process swapper (pid: 0, threadinfo=c03da000 task=c0347b20)
[17372366.136000] Stack: f7b947a8 00010000 f5a19e80 00000122 00000042 f8839624
[17372366.136000]        00000000 f7f703e0 f6daa440 00000000 01230000 00000122
[17372366.136000]        f7f70380 f7f70000 c03dbf74 f883986e f7f70380 00000040
[17372366.136000] Call Trace:
[17372366.136000]  [<f8839624>] tg3_rx+0x184/0x358 [tg3]
[17372366.136000]  [<f883986e>] tg3_poll+0x76/0x129 [tg3]
[17372366.136000]  [<c028ab1d>] net_rx_action+0x69/0xf0
[17372366.136000]  [<c011a43d>] __do_softirq+0x55/0xbd
[17372366.136000]  [<c011a4d2>] do_softirq+0x2d/0x31
[17372366.136000]  [<c0104447>] do_IRQ+0x47/0x4f
[17372366.136000]  [<c0102e52>] common_interrupt+0x1a/0x20
[17372366.136000]  [<c010088c>] default_idle+0x0/0x55
[17372366.136000]  [<c01008b8>] default_idle+0x2c/0x55
[17372366.136000]  [<c010094f>] cpu_idle+0x5a/0x6f
[17372366.136000]  [<c03dc795>] start_kernel+0x14d/0x14f
[17372366.136000] Code: 83 7c 24 20 00 74 1e 0f b6 43 6d c7 83 30 01 00 00 01 0
[17372366.136000]  <0>Kernel panic - not syncing: Fatal exception in interrupt

gdb doesn't make it very clear which codepath was taken in tg3_rx:

(gdb) list *tg3_rx+0x184
0x3624 is in tg3_rx (skbuff.h:314).
309     extern struct sk_buff *__alloc_skb(unsigned int size,
310                                        gfp_t priority, int fclone);
311     static inline struct sk_buff *alloc_skb(unsigned int size,
312                                             gfp_t priority)
313     {
314             return __alloc_skb(size, priority, 0);
315     }
316
317     static inline struct sk_buff *alloc_skb_fclone(unsigned int size,
318                                                    gfp_t priority)