> Yes, I don't think the sub changes are ready for prime-time.
At this point there is no tie in with slub changes. This is
freepointer corruption that is typical for writing to the object after
free it. Enabling slub debugging is needed to figure out when the object