It's 100% reproducible on my kvm VM. The bug is the assert_spin_lockedin redirty_tail. I really can't find a way how we reach it withoutd_lock so this really confuses me.