======================================
| [  658.809897][    C0] 1 lock held by swapper/0/0:
| [ 658.810099][ C0] #0: ffffc90000007b30 ((&add_entry->add_timer)){+.-.}-{0:0}, at: call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1782) 
| [  658.810481][    C0]
| [  658.810481][    C0] stack backtrace:
[  658.810993][    C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[  658.811435][    C0] Call Trace:
[  658.811580][    C0]  <IRQ>
[ 658.811674][ C0] dump_stack_lvl (lib/dump_stack.c:122) 
[ 658.811862][ C0] check_noncircular (kernel/locking/lockdep.c:2186) 
[ 658.812046][ C0] ? __pfx_check_noncircular (kernel/locking/lockdep.c:2162) 
[ 658.812243][ C0] ? alloc_chain_hlocks (kernel/locking/lockdep.c:3500) 
[ 658.812438][ C0] check_prev_add (kernel/locking/lockdep.c:3134) 
[ 658.812647][ C0] validate_chain (kernel/locking/lockdep.c:3253 kernel/locking/lockdep.c:3868) 
[ 658.812833][ C0] ? __pfx_validate_chain (kernel/locking/lockdep.c:3824) 
[ 658.813025][ C0] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:227) 
[ 658.813275][ C0] ? mark_lock (kernel/locking/lockdep.c:4655 (discriminator 3)) 
[ 658.813426][ C0] __lock_acquire (kernel/locking/lockdep.c:5142) 
[ 658.813611][ C0] lock_acquire.part.0 (kernel/locking/lockdep.c:466 kernel/locking/lockdep.c:5761) 
[ 658.813795][ C0] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 658.813981][ C0] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5724) 
[ 658.814166][ C0] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 658.814347][ C0] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 658.814530][ C0] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 658.814715][ C0] ? lock_acquire (kernel/locking/lockdep.c:5732) 
[ 658.814902][ C0] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 658.815090][ C0] _raw_spin_lock_bh (./include/linux/spinlock_api_smp.h:127 kernel/locking/spinlock.c:178) 
[ 658.815271][ C0] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 658.815455][ C0] mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 658.815643][ C0] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 658.815820][ C0] ? __pfx_call_timer_fn (./include/trace/events/timer.h:92) 
[ 658.816004][ C0] ? lock_acquire (kernel/locking/lockdep.c:5732) 
[ 658.816200][ C0] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 658.816385][ C0] call_timer_fn (kernel/time/timer.c:1792) 
[ 658.816569][ C0] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1782) 
[ 658.816775][ C0] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1782) 
[ 658.816959][ C0] ? __pfx_call_timer_fn (kernel/time/timer.c:1769) 
[ 658.817167][ C0] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 658.817366][ C0] __run_timers (kernel/time/timer.c:1844 kernel/time/timer.c:2417) 
[ 658.817560][ C0] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 658.817747][ C0] ? __pfx___run_timers (kernel/time/timer.c:2388) 
[ 658.817927][ C0] ? __lock_release (kernel/locking/lockdep.c:5435) 
[ 658.818111][ C0] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 658.818316][ C0] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 658.818500][ C0] ? lock_acquire (kernel/locking/lockdep.c:5732) 
[ 658.818712][ C0] ? timer_expire_remote (kernel/time/timer.c:2428 kernel/time/timer.c:2421 kernel/time/timer.c:2180) 
[ 658.818913][ C0] timer_expire_remote (kernel/time/timer.c:2429 kernel/time/timer.c:2421 kernel/time/timer.c:2180) 
[ 658.819109][ C0] tmigr_handle_remote_cpu (./arch/x86/include/asm/irqflags.h:26 ./arch/x86/include/asm/irqflags.h:87 ./arch/x86/include/asm/irqflags.h:147 kernel/time/timer_migration.c:947) 
[ 658.819300][ C0] ? __pfx_tmigr_handle_remote_cpu (kernel/time/timer_migration.c:891) 
[ 658.819541][ C0] ? __pfx___lock_release (kernel/locking/lockdep.c:5411) 
[ 658.819735][ C0] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5724) 
[ 658.819919][ C0] tmigr_handle_remote_up (kernel/time/timer_migration.c:1024) 
[ 658.820127][ C0] tmigr_handle_remote (kernel/time/timer_migration.c:533 kernel/time/timer_migration.c:1080) 
[ 658.820329][ C0] ? __pfx_tmigr_handle_remote (kernel/time/timer_migration.c:1045) 
[ 658.820511][ C0] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 658.820702][ C0] ? spin_bug (./include/linux/pid.h:232 kernel/locking/spinlock_debug.c:64 kernel/locking/spinlock_debug.c:78) 
[ 658.820840][ C0] ? lockdep_hardirqs_on_prepare (kernel/locking/lockdep.c:4291 kernel/locking/lockdep.c:4358) 
[ 658.821090][ C0] handle_softirqs (kernel/softirq.c:554) 
[ 658.821295][ C0] irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637 kernel/softirq.c:649) 
[ 658.821437][ C0] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) 
[  658.821632][    C0]  </IRQ>
[  658.821730][    C0]  <TASK>
[ 658.821823][ C0] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) 
[ 658.822067][ C0] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/kernel/process.c:743) 
[ 658.822282][ C0] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 37 3c 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	4c 01 c7             	add    %r8,%rdi
   3:	4c 29 c2             	sub    %r8,%rdx
   6:	e9 72 ff ff ff       	jmp    0xffffffffffffff7d
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	f3 0f 1e fa          	endbr64
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d c3 37 3c 00 	verw   0x3c37c3(%rip)        # 0x3c37eb
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	fa                   	cli		<-- trapping instruction
  2b:	c3                   	ret
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	cc                   	int3
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	fa                   	cli
   1:	c3                   	ret
   2:	cc                   	int3
   3:	cc                   	int3
   4:	cc                   	int3
   5:	cc                   	int3
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[  658.822974][    C0] RSP: 0018:ffffffffb4e07e00 EFLAGS: 00000246
[  658.823204][    C0] RAX: 0000000000b225e7 RBX: 1ffffffff69c0fc2 RCX: ffffffffb3e9d975
[  658.823491][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffb16a6b94
[  658.823799][    C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006c07098
[  658.824093][    C0] R10: ffff8880360384c3 R11: ffff88803603de80 R12: 0000000000000000
[  658.824381][    C0] R13: ffffffffb4e41080 R14: dffffc0000000000 R15: 0000000000014770
[ 658.824672][ C0] ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:147) 
[ 658.824880][ C0] ? cpuidle_idle_call (kernel/sched/idle.c:186) 
[ 658.825064][ C0] default_idle_call (./include/linux/cpuidle.h:143 kernel/sched/idle.c:118) 
[ 658.825271][ C0] cpuidle_idle_call (kernel/sched/idle.c:186) 
[ 658.825453][ C0] ? __pfx_cpuidle_idle_call (kernel/sched/idle.c:168) 
[ 658.825658][ C0] ? tsc_verify_tsc_adjust (arch/x86/kernel/tsc_sync.c:59) 
[ 658.825853][ C0] do_idle (kernel/sched/idle.c:326) 
[ 658.825992][ C0] cpu_startup_entry (kernel/sched/idle.c:423 (discriminator 1)) 
[ 658.826200][ C0] rest_init (./include/linux/rcupdate.h:839 init/main.c:718) 
[ 658.826341][ C0] start_kernel (init/main.c:1053 (discriminator 1)) 
[ 658.826557][ C0] x86_64_start_reservations (arch/x86/kernel/head64.c:495) 
[ 658.826747][ C0] x86_64_start_kernel (arch/x86/kernel/head64.c:437 (discriminator 17)) 


Finger prints:
check_prev_add:validate_chain:__lock_acquire:_raw_spin_lock_bh:mptcp_pm_add_timer