======================================
| [ 1625.976877][    C3] 1 lock held by swapper/3/0:
| [ 1625.977034][ C3] #0: ffffc90000298d68 ((&add_entry->add_timer)){+.-.}-{0:0}, at: call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1782) 
| [ 1625.977300][    C3]
| [ 1625.977300][    C3] stack backtrace:
[ 1625.977684][    C3] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 1625.977998][    C3] Call Trace:
[ 1625.978118][    C3]  <IRQ>
[ 1625.978201][ C3] dump_stack_lvl (lib/dump_stack.c:122) 
[ 1625.978338][ C3] check_noncircular (kernel/locking/lockdep.c:2186) 
[ 1625.978483][ C3] ? unwind_next_frame (arch/x86/kernel/unwind_orc.c:495) 
[ 1625.978617][ C3] ? __pfx_check_noncircular (kernel/locking/lockdep.c:2162) 
[ 1625.978748][ C3] ? __pfx_unwind_next_frame (arch/x86/kernel/unwind_orc.c:469) 
[ 1625.978878][ C3] ? alloc_chain_hlocks (kernel/locking/lockdep.c:3500) 
[ 1625.979026][ C3] check_prev_add (kernel/locking/lockdep.c:3134) 
[ 1625.979158][ C3] validate_chain (kernel/locking/lockdep.c:3253 kernel/locking/lockdep.c:3868) 
[ 1625.979292][ C3] ? __pfx_validate_chain (kernel/locking/lockdep.c:3824) 
[ 1625.979420][ C3] ? hlock_class (./arch/x86/include/asm/bitops.h:227 ./arch/x86/include/asm/bitops.h:239 ./include/asm-generic/bitops/instrumented-non-atomic.h:142 kernel/locking/lockdep.c:227) 
[ 1625.979551][ C3] ? mark_lock (kernel/locking/lockdep.c:4655 (discriminator 3)) 
[ 1625.979650][ C3] __lock_acquire (kernel/locking/lockdep.c:5142) 
[ 1625.979788][ C3] lock_acquire.part.0 (kernel/locking/lockdep.c:466 kernel/locking/lockdep.c:5761) 
[ 1625.979929][ C3] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 1625.980074][ C3] ? __pfx_lock_acquire.part.0 (kernel/locking/lockdep.c:5724) 
[ 1625.980203][ C3] ? trace_lock_acquire (./include/trace/events/lock.h:24 (discriminator 52)) 
[ 1625.980331][ C3] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 1625.980461][ C3] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 1625.980588][ C3] ? lock_acquire (kernel/locking/lockdep.c:5732) 
[ 1625.980717][ C3] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 1625.980847][ C3] _raw_spin_lock_bh (./include/linux/spinlock_api_smp.h:127 kernel/locking/spinlock.c:178) 
[ 1625.980998][ C3] ? mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 1625.981132][ C3] mptcp_pm_add_timer (net/mptcp/protocol.h:1057 net/mptcp/pm_netlink.c:315) 
[ 1625.981258][ C3] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 1625.981383][ C3] ? call_timer_fn (kernel/time/timer.c:1769) 
[ 1625.981510][ C3] ? lock_acquire (kernel/locking/lockdep.c:5732) 
[ 1625.981637][ C3] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 1625.981761][ C3] call_timer_fn (kernel/time/timer.c:1792) 
[ 1625.981906][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1782) 
[ 1625.982070][ C3] ? call_timer_fn (./include/linux/lockdep.h:31 kernel/time/timer.c:1782) 
[ 1625.982211][ C3] ? __pfx_call_timer_fn (kernel/time/timer.c:1769) 
[ 1625.982340][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 1625.982470][ C3] __run_timers (kernel/time/timer.c:1844 kernel/time/timer.c:2417) 
[ 1625.982598][ C3] ? __pfx_mptcp_pm_add_timer (net/mptcp/pm_netlink.c:292) 
[ 1625.982729][ C3] ? __pfx___run_timers (kernel/time/timer.c:2388) 
[ 1625.982860][ C3] ? do_raw_spin_lock (./arch/x86/include/asm/atomic.h:107 ./include/linux/atomic/atomic-arch-fallback.h:2170 ./include/linux/atomic/atomic-instrumented.h:1302 ./include/asm-generic/qspinlock.h:111 kernel/locking/spinlock_debug.c:116) 
[ 1625.982998][ C3] ? __pfx_do_raw_spin_lock (kernel/locking/spinlock_debug.c:114) 
[ 1625.983133][ C3] ? lock_acquire (kernel/locking/lockdep.c:5732) 
[ 1625.983268][ C3] ? run_timer_softirq (kernel/time/timer.c:2428 kernel/time/timer.c:2421 kernel/time/timer.c:2437 kernel/time/timer.c:2447) 
[ 1625.983402][ C3] run_timer_softirq (kernel/time/timer.c:2429 kernel/time/timer.c:2421 kernel/time/timer.c:2437 kernel/time/timer.c:2447) 
[ 1625.983547][ C3] handle_softirqs (kernel/softirq.c:554) 
[ 1625.983679][ C3] irq_exit_rcu (kernel/softirq.c:589 kernel/softirq.c:428 kernel/softirq.c:637 kernel/softirq.c:649) 
[ 1625.983777][ C3] sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1043 arch/x86/kernel/apic/apic.c:1043) 
[ 1625.983907][    C3]  </IRQ>
[ 1625.983996][    C3]  <TASK>
[ 1625.984069][ C3] asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:702) 
[ 1625.984231][ C3] RIP: 0010:default_idle (./arch/x86/include/asm/irqflags.h:37 ./arch/x86/include/asm/irqflags.h:92 arch/x86/kernel/process.c:743) 
[ 1625.984387][ C3] Code: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 3b 3c 00 fb f4 <fa> c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90
All code
========
   0:	4c 01 c7             	add    %r8,%rdi
   3:	4c 29 c2             	sub    %r8,%rdx
   6:	e9 72 ff ff ff       	jmp    0xffffffffffffff7d
   b:	90                   	nop
   c:	90                   	nop
   d:	90                   	nop
   e:	90                   	nop
   f:	90                   	nop
  10:	90                   	nop
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
  16:	90                   	nop
  17:	90                   	nop
  18:	90                   	nop
  19:	90                   	nop
  1a:	90                   	nop
  1b:	f3 0f 1e fa          	endbr64
  1f:	66 90                	xchg   %ax,%ax
  21:	0f 00 2d 13 3b 3c 00 	verw   0x3c3b13(%rip)        # 0x3c3b3b
  28:	fb                   	sti
  29:	f4                   	hlt
  2a:*	fa                   	cli		<-- trapping instruction
  2b:	c3                   	ret
  2c:	cc                   	int3
  2d:	cc                   	int3
  2e:	cc                   	int3
  2f:	cc                   	int3
  30:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
  37:	00 00 00 00 
  3b:	90                   	nop
  3c:	90                   	nop
  3d:	90                   	nop
  3e:	90                   	nop
  3f:	90                   	nop

Code starting with the faulting instruction
===========================================
   0:	fa                   	cli
   1:	c3                   	ret
   2:	cc                   	int3
   3:	cc                   	int3
   4:	cc                   	int3
   5:	cc                   	int3
   6:	66 66 2e 0f 1f 84 00 	data16 cs nopw 0x0(%rax,%rax,1)
   d:	00 00 00 00 
  11:	90                   	nop
  12:	90                   	nop
  13:	90                   	nop
  14:	90                   	nop
  15:	90                   	nop
[ 1625.984867][    C3] RSP: 0018:ffffc9000017fdf8 EFLAGS: 00000246
[ 1625.985060][    C3] RAX: 0000000002662003 RBX: 1ffff9200002ffc1 RCX: ffffffffa7c9d625
[ 1625.985259][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffa54a6d74
[ 1625.985473][    C3] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1006c37098
[ 1625.985672][    C3] R10: ffff8880361b84c3 R11: ffff8880361bde80 R12: 0000000000000000
[ 1625.985878][    C3] R13: ffff888001baa300 R14: dffffc0000000000 R15: 0000000000000000
[ 1625.986103][ C3] ? ct_kernel_exit.constprop.0 (kernel/context_tracking.c:147) 
[ 1625.986235][ C3] ? cpuidle_idle_call (kernel/sched/idle.c:186) 
[ 1625.986375][ C3] default_idle_call (./include/linux/cpuidle.h:143 kernel/sched/idle.c:118) 
[ 1625.986519][ C3] cpuidle_idle_call (kernel/sched/idle.c:186) 
[ 1625.986648][ C3] ? __pfx_cpuidle_idle_call (kernel/sched/idle.c:168) 
[ 1625.986780][ C3] ? tsc_verify_tsc_adjust (arch/x86/kernel/tsc_sync.c:59) 
[ 1625.986926][ C3] do_idle (kernel/sched/idle.c:326) 
[ 1625.987040][ C3] cpu_startup_entry (kernel/sched/idle.c:423 (discriminator 1)) 
[ 1625.987171][ C3] start_secondary (arch/x86/kernel/smpboot.c:201 arch/x86/kernel/smpboot.c:281) 
[ 1625.987326][ C3] ? __pfx_start_secondary (arch/x86/kernel/smpboot.c:231) 


Finger prints:
check_prev_add:validate_chain:__lock_acquire:_raw_spin_lock_bh:mptcp_pm_add_timer