On Thu, 2 Aug 2012, Glauber Costa wrote:

> After applying v8, and proceeding with cache deletion + later insertion
> as I've previously laid down, I can still see the bug I mentioned here.
>
> I am attaching the backtrace I've got with SLUB_DEBUG_ON. My first guess
> based on it would be a double free somewhere.

This looks like you are passing an invalid pointer to kfree.