==================================================================
BUG: KCSAN: data-race in add_timer / run_timer_softirq

read to 0xffff88812be1b6c8 of 8 bytes by task 23 on cpu 1:
 __mod_timer kernel/time/timer.c:1026 [inline]
 mod_timer kernel/time/timer.c:1100 [inline]
 add_timer+0x16f/0x550 kernel/time/timer.c:1136
 __queue_delayed_work+0x13b/0x1d0 kernel/workqueue.c:1649
 queue_delayed_work_on+0xf3/0x110 kernel/workqueue.c:1674
 queue_delayed_work include/linux/workqueue.h:509 [inline]
 bond_netdev_notify_work drivers/net/bonding/bond_main.c:1355 [inline]
 bond_netdev_notify_work+0x150/0x160 drivers/net/bonding/bond_main.c:1342
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2269
 worker_thread+0xa0/0x800 kernel/workqueue.c:2415
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

write to 0xffff88812be1b6c8 of 8 bytes by interrupt on cpu 0:
 expire_timers kernel/time/timer.c:1445 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0xba3/0xd20 kernel/time/timer.c:1786
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1082
 do_softirq.part.0+0x6b/0x80 kernel/softirq.c:337
 do_softirq kernel/softirq.c:329 [inline]
 __local_bh_enable_ip+0x76/0x80 kernel/softirq.c:189
 local_bh_enable include/linux/bottom_half.h:32 [inline]
 get_next_corpse net/netfilter/nf_conntrack_core.c:2013 [inline]
 nf_ct_iterate_cleanup+0x129/0x2e0 net/netfilter/nf_conntrack_core.c:2036
 nf_ct_iterate_cleanup_net net/netfilter/nf_conntrack_core.c:2121 [inline]
 nf_ct_iterate_cleanup_net+0xe2/0xf0 net/netfilter/nf_conntrack_core.c:2106
 masq_device_event+0x8a/0x90 net/netfilter/nf_nat_masquerade.c:88
 notifier_call_chain+0xd7/0x160 kernel/notifier.c:95
 __raw_notifier_call_chain kernel/notifier.c:396 [inline]
 raw_notifier_call_chain+0x37/0x50 kernel/notifier.c:403
 call_netdevice_notifiers_info+0x48/0xc0 net/core/dev.c:1749
 call_netdevice_notifiers_extack net/core/dev.c:1761 [inline]
 call_netdevice_notifiers net/core/dev.c:1775 [inline]
 __dev_notify_flags+0xcf/0x200 net/core/dev.c:7655
 dev_change_flags+0xb8/0xe0 net/core/dev.c:7691

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 7510 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================