ll_update_lsm_md() down_write() if lli->lli_lsm_md is NULL, and tries to initialize it, but if a concurrent lookup initialized lli->lli_lsm_md after this check and before taking write lock, it will up_read(), so the write lock is not released, therefore subsequent lookup will deadlock on this.