On Fri, 3 Aug 2012, Glauber Costa wrote:

> When a non-alias cache is freed, both sysfs_slab_remove and
> kmem_cache_release are called.
>
> You are freeing structures on both, so you have two double frees.
>
> slab_sysfs_remove() is the correct place for it, so you need to remove
> them from kmem_cache_release(), which becomes an empty function.

So this is another bug in Linus's tree.

> Please consider replacing your patch with the attached. Replacing your
> patch by this one makes my test case work after the series is applied.

Ok. In the future please send a diff of only the changes you have made. We
have various tools that generate these diffs for you. I hope you are using
some version control system like quilt or git?