On Wed, Mar 27, 2019 at 10:27:57AM +0800, jianchao.wang wrote: > As the comment above, the stable request maybe something that has been freed due to following case, > 1. a hctx->fq.flush_rq of dead request_queue that shares the same tagset > 2. a removed io scheduler's sched request > and this freed request could be allocated by others which may change the field of request->state. You're not explaing how that request->state is changed. I understand the request can be reallocated, but what is changing its state?