I have tested 2.6.29 and didn't saw my bug again.
I will test 2.6.26 and unpatched version.
On 2.6.26 I was able to reproduce your problem with 0s and I believe that hack worked on kernel 2.6.28-rcsomething.
As I said before I don't see that problem on 2.6.29 even with unpatched version.
Can you try this version?