All you need is an UML guest assigned an IP on your network, iptables, and 
the two files below in the same directory.  Run the script, while ping-flooding 
the UML's IP address from the host, or another machine on your network.

This script works best with a 2.6 based UML.  I can recreate the crash easily using
2.6.9-linode9 (based on -bb4), also available on this website.

-Chris