======================================
| [  106.506772][    C3] 1 lock held by mirror_gre_chan/1684:
| [  106.506860][    C3]  #0: ffffffff99d77c00 (rcu_callback){....}-{0:0}, at: rcu_do_batch (./include/linux/rcupdate.h:300 (discriminator 2) kernel/rcu/tree.c:2611 (discriminator 2))
| [  106.507069][    C3]
| [  106.507069][    C3] stack backtrace:
[  106.507345][    C3] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
[  106.507348][    C3] Call Trace:
[  106.507350][    C3]  <IRQ>
[  106.507351][    C3]  dump_stack_lvl (lib/dump_stack.c:94 lib/dump_stack.c:120)
[  106.507357][    C3]  print_usage_bug.part.0.cold (kernel/locking/lockdep.c:4042)
[  106.507365][    C3]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  106.507369][    C3]  mark_lock_irq (kernel/locking/lockdep.c:4013 kernel/locking/lockdep.c:4056 kernel/locking/lockdep.c:4267)
[  106.507371][    C3]  ? sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1061 (discriminator 37) arch/x86/kernel/apic/apic.c:1061 (discriminator 37))
[  106.507375][    C3]  ? asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697)
[  106.507378][    C3]  ? save_trace (kernel/locking/lockdep.c:589)
[  106.507380][    C3]  ? kthreadd (kernel/kthread.c:456 (discriminator 1) kernel/kthread.c:817 (discriminator 1))
[  106.507384][    C3]  mark_lock (kernel/locking/lockdep.c:4753)
[  106.507387][    C3]  mark_usage (kernel/locking/lockdep.c:4642)
[  106.507390][    C3]  __lock_acquire (kernel/locking/lockdep.c:5191)
[  106.507392][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  106.507395][    C3]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  106.507400][    C3]  lock_acquire.part.0 (kernel/locking/lockdep.c:5868 (discriminator 1))
[  106.507402][    C3]  ? tcf_mirred_release (./include/linux/spinlock.h:342 net/sched/act_mirred.c:78) act_mirred
[  106.507405][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  106.507408][    C3]  ? lock_acquire (./include/trace/events/lock.h:24 (discriminator 22) kernel/locking/lockdep.c:5831 (discriminator 22))
[  106.507410][    C3]  _raw_spin_lock (./include/linux/spinlock_api_smp.h:158 (discriminator 1) kernel/locking/spinlock.c:158 (discriminator 1))
[  106.507413][    C3]  ? tcf_mirred_release (./include/linux/spinlock.h:342 net/sched/act_mirred.c:78) act_mirred
[  106.507416][    C3] tcf_mirred_release (./include/linux/spinlock.h:342 net/sched/act_mirred.c:78) act_mirred
[  106.507419][    C3]  tcf_action_rcu_free (net/sched/act_api.c:367 net/sched/act_api.c:378)
[  106.507421][    C3]  ? rcu_do_batch (./include/linux/rcupdate.h:310 (discriminator 2) kernel/rcu/tree.c:2619 (discriminator 2))
[  106.507424][    C3]  rcu_do_batch (kernel/rcu/tree.c:2617)
[  106.507428][    C3]  ? trace_rcu_batch_end (./include/trace/events/rcu.h:714 (discriminator 19))
[  106.507431][    C3]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  106.507433][    C3]  ? do_raw_spin_unlock (./include/linux/instrumented.h:82 ./include/linux/atomic/atomic-instrumented.h:32 ./include/asm-generic/qspinlock.h:57 kernel/locking/spinlock_debug.c:101 kernel/locking/spinlock_debug.c:141)
[  106.507435][    C3]  ? lockdep_hardirqs_on_prepare.part.0 (kernel/locking/lockdep.c:470 (discriminator 2) kernel/locking/lockdep.c:4411 (discriminator 2))
[  106.507437][    C3]  ? lockdep_hardirqs_on (kernel/locking/lockdep.c:4472)
[  106.507440][    C3]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:178 (discriminator 6) kernel/locking/spinlock.c:198 (discriminator 6))
[  106.507442][    C3]  ? _raw_spin_unlock_irqrestore (./include/linux/spinlock_api_smp.h:179 (discriminator 1) kernel/locking/spinlock.c:198 (discriminator 1))
[  106.507445][    C3]  rcu_core (kernel/rcu/tree.c:2869)
[  106.507448][    C3]  handle_softirqs (kernel/softirq.c:622)
[  106.507451][    C3]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[  106.507454][    C3]  ? __lock_release.isra.0 (kernel/locking/lockdep.c:5535)
[  106.507457][    C3]  ? _local_bh_enable (kernel/softirq.c:405 (discriminator 1))
[  106.507460][    C3]  __irq_exit_rcu (kernel/softirq.c:656 kernel/softirq.c:496 kernel/softirq.c:735)
[  106.507462][    C3]  irq_exit_rcu (kernel/softirq.c:752)
[  106.507465][    C3]  sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1061 (discriminator 37) arch/x86/kernel/apic/apic.c:1061 (discriminator 37))
[  106.507467][    C3]  </IRQ>
[  106.507468][    C3]  <TASK>
[  106.507469][    C3]  ? init_data_structures_once.part.0 (kernel/locking/lockdep.c:3397 (discriminator 1) kernel/locking/lockdep.c:3438 (discriminator 1) kernel/locking/lockdep.c:3482 (discriminator 1) kernel/locking/lockdep.c:1210 (discriminator 1))
[  106.507472][    C3]  asm_sysvec_apic_timer_interrupt (./arch/x86/include/asm/idtentry.h:697)
[  106.507474][    C3] RIP: 0010:lock_release (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:119 ./arch/x86/include/asm/irqflags.h:159 kernel/locking/lockdep.c:5892 kernel/locking/lockdep.c:5875)
[  106.507477][    C3] Code: d1 33 04 83 f8 01 0f 85 fd 00 00 00 9c 58 f6 c4 02 0f 85 12 01 00 00 41 f7 c7 00 02 00 00 0f 84 bf 00 00 00 fb 4c 8b 7c 24 18 <48> 8b 5c 24 08 4c 8b 74 24 10 48 83 c4 20 c3 65 8b 05 42 8b 33 04
All code
========
   0:	d1 33                	shll   $1,(%rbx)
   2:	04 83                	add    $0x83,%al
   4:	f8                   	clc
   5:	01 0f                	add    %ecx,(%rdi)
   7:	85 fd                	test   %edi,%ebp
   9:	00 00                	add    %al,(%rax)
   b:	00 9c 58 f6 c4 02 0f 	add    %bl,0xf02c4f6(%rax,%rbx,2)
  12:	85 12                	test   %edx,(%rdx)
  14:	01 00                	add    %eax,(%rax)
  16:	00 41 f7             	add    %al,-0x9(%rcx)
  19:	c7 00 02 00 00 0f    	movl   $0xf000002,(%rax)
  1f:	84 bf 00 00 00 fb    	test   %bh,-0x5000000(%rdi)
  25:	4c 8b 7c 24 18       	mov    0x18(%rsp),%r15
  2a:*	48 8b 5c 24 08       	mov    0x8(%rsp),%rbx		<-- trapping instruction
  2f:	4c 8b 74 24 10       	mov    0x10(%rsp),%r14
  34:	48 83 c4 20          	add    $0x20,%rsp
  38:	c3                   	ret
  39:	65 8b 05 42 8b 33 04 	mov    %gs:0x4338b42(%rip),%eax        # 0x4338b82

Code starting with the faulting instruction
===========================================
   0:	48 8b 5c 24 08       	mov    0x8(%rsp),%rbx
   5:	4c 8b 74 24 10       	mov    0x10(%rsp),%r14
   a:	48 83 c4 20          	add    $0x20,%rsp
   e:	c3                   	ret
   f:	65 8b 05 42 8b 33 04 	mov    %gs:0x4338b42(%rip),%eax        # 0x4338b58
[  106.507479][    C3] RSP: 0018:ffa0000001f57748 EFLAGS: 00000206
[  106.507482][    C3] RAX: 0000000000000046 RBX: ffffffff99d77d20 RCX: 0000000000000001
[  106.507484][    C3] RDX: 0000000000000000 RSI: ffffffff997ebde8 RDI: ffffffff9926f6c0
[  106.507486][    C3] RBP: ffa0000001f57a58 R08: 0000000000000001 R09: ffa0000001f577f8
[  106.507487][    C3] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff9a98e901
[  106.507488][    C3] R13: ffa0000001f57870 R14: ffffffff9694a6e1 R15: 0000000000000001
[  106.507490][    C3]  ? unwind_next_frame (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) ./include/linux/rcupdate.h:1181 (discriminator 2) arch/x86/kernel/unwind_orc.c:495 (discriminator 2))
[  106.507496][    C3]  unwind_next_frame (./include/linux/rcupdate.h:310 (discriminator 2) ./include/linux/rcupdate.h:869 (discriminator 2) ./include/linux/rcupdate.h:1181 (discriminator 2) arch/x86/kernel/unwind_orc.c:495 (discriminator 2))
[  106.507498][    C3]  ? __alloc_object (mm/kmemleak.c:701)
[  106.507502][    C3]  ? kmem_cache_alloc_noprof (./include/linux/kasan.h:253 mm/slub.c:4570 mm/slub.c:4899 mm/slub.c:4906)
[  106.507507][    C3]  ? stack_access_ok (./arch/x86/include/asm/stacktrace.h:55)
[  106.507509][    C3]  ? prepare_creds (kernel/cred.c:185 (discriminator 7))
[  106.507513][    C3]  ? __unwind_start (arch/x86/kernel/unwind_orc.c:787)
[  106.507515][    C3]  ? write_profile (profile.c:?)
[  106.507518][    C3]  arch_stack_walk (arch/x86/kernel/stacktrace.c:25)
[  106.507523][    C3]  ? __create_object (mm/kmemleak.c:779)
[  106.507526][    C3]  stack_trace_save (kernel/stacktrace.c:122 (discriminator 1))
[  106.507529][    C3]  ? filter_irq_stacks (kernel/stacktrace.c:402)
[  106.507533][    C3]  set_track_prepare (mm/slub.c:1038)
[  106.507538][    C3]  __alloc_object (mm/kmemleak.c:701)
[  106.507541][    C3]  __create_object (mm/kmemleak.c:779)
[  106.507543][    C3]  ? kasan_save_track (mm/kasan/common.c:78)
[  106.507547][    C3]  kmem_cache_alloc_noprof (./include/linux/kmemleak.h:44 mm/slub.c:4575 mm/slub.c:4899 mm/slub.c:4906)
[  106.507549][    C3]  ? find_vmap_area (mm/vmalloc.c:2516)
[  106.507554][    C3]  prepare_creds (kernel/cred.c:185 (discriminator 7))
[  106.507556][    C3]  copy_creds (kernel/cred.c:286)
[  106.507559][    C3]  copy_process (kernel/fork.c:2125)
[  106.507563][    C3]  ? restore_fpregs_from_user (arch/x86/kernel/fpu/signal.c:300)
[  106.507566][    C3]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4040 (discriminator 3) kernel/rcu/tree.c:4032 (discriminator 3))
[  106.507568][    C3]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[  106.507572][    C3]  ? pidfd_prepare (./include/linux/list.h:1021 (discriminator 3))
[  106.507575][    C3]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4040 (discriminator 3) kernel/rcu/tree.c:4032 (discriminator 3))
[  106.507577][    C3]  ? rcu_lockdep_current_cpu_online (kernel/rcu/tree.c:4040 (discriminator 3) kernel/rcu/tree.c:4032 (discriminator 3))
[  106.507580][    C3]  ? rcu_read_lock_any_held (./include/linux/lockdep.h:249 kernel/rcu/update.c:386 kernel/rcu/update.c:380)
[  106.507583][    C3]  kernel_clone (kernel/fork.c:2722)
[  106.507585][    C3]  ? create_io_thread (kernel/fork.c:2660)
[  106.507589][    C3]  ? __might_fault (mm/memory.c:7340 (discriminator 5))
[  106.507592][    C3]  ? find_held_lock (kernel/locking/lockdep.c:5350)
[  106.507596][    C3]  __do_sys_clone (kernel/fork.c:2863)
[  106.507598][    C3]  ? kernel_clone (./include/trace/events/sched.h:396 (discriminator 19))
[  106.507603][    C3]  ? rcu_is_watching (./include/linux/context_tracking.h:128 (discriminator 3) kernel/rcu/tree.c:752 (discriminator 3))
[  106.507606][    C3]  ? trace_irq_enable.constprop.0 (./include/trace/events/preemptirq.h:40 (discriminator 22))
[  106.507609][    C3]  do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94)
[  106.507611][    C3]  ? trace_hardirqs_off (kernel/trace/trace_preemptirq.c:104 (discriminator 1))
[  106.507613][    C3]  ? exc_page_fault (arch/x86/mm/fault.c:1480 (discriminator 3) arch/x86/mm/fault.c:1527 (discriminator 3))
[  106.507616][    C3]  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)
[  106.507618][    C3] RIP: 0033:0x7f5e282d8226
[  106.507621][    C3] Code: 7d e0 e8 7d a4 f5 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5a 89 c3 85 c0 75 2f 64 48 8b 04 25 10 00 00
All code
========
   0:	7d e0                	jge    0xffffffffffffffe2
   2:	e8 7d a4 f5 ff       	call   0xfffffffffff5a484
   7:	45 31 c0             	xor    %r8d,%r8d
   a:	31 d2                	xor    %edx,%edx
   c:	31 f6                	xor    %esi,%esi
   e:	64 48 8b 04 25 10 00 	mov    %fs:0x10,%rax
  15:	00 00 
  17:	bf 11 00 20 01       	mov    $0x1200011,%edi
  1c:	4c 8d 90 d0 02 00 00 	lea    0x2d0(%rax),%r10
  23:	b8 38 00 00 00       	mov    $0x38,%eax
  28:	0f 05                	syscall
  2a:*	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax		<-- trapping instruction
  30:	77 5a                	ja     0x8c
  32:	89 c3                	mov    %eax,%ebx
  34:	85 c0                	test   %eax,%eax
  36:	75 2f                	jne    0x67
  38:	64                   	fs
  39:	48                   	rex.W
  3a:	8b                   	.byte 0x8b
  3b:	04 25                	add    $0x25,%al
  3d:	10 00                	adc    %al,(%rax)
	...

Code starting with the faulting instruction
===========================================
   0:	48 3d 00 f0 ff ff    	cmp    $0xfffffffffffff000,%rax
   6:	77 5a                	ja     0x62
   8:	89 c3                	mov    %eax,%ebx
   a:	85 c0                	test   %eax,%eax
   c:	75 2f                	jne    0x3d
   e:	64                   	fs
   f:	48                   	rex.W
  10:	8b                   	.byte 0x8b
  11:	04 25                	add    $0x25,%al
  13:	10 00                	adc    %al,(%rax)
	...
[  106.507622][    C3] RSP: 002b:00007ffe483ca000 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  106.507625][    C3] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f5e282d8226
[  106.507626][    C3] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  106.507628][    C3] RBP: 00007ffe483ca020 R08: 0000000000000000 R09: 0000000000000040
[  106.507629][    C3] R10: 00007f5e28215e50 R11: 0000000000000246 R12: 00005566c8b36ad0


Finger prints:
mark_lock_irq:mark_lock:mark_usage:__lock_acquire:_raw_spin_lock