==================================================================
BUG: KCSAN: data-race in add_timer / run_timer_softirq

read to 0xffff88812be1b6c8 of 8 bytes by task 21 on cpu 1:
 __mod_timer kernel/time/timer.c:1026 [inline]
 mod_timer kernel/time/timer.c:1100 [inline]
 add_timer+0x16f/0x550 kernel/time/timer.c:1136
 __queue_delayed_work+0x13b/0x1d0 kernel/workqueue.c:1649
 queue_delayed_work_on+0xf3/0x110 kernel/workqueue.c:1674
 queue_delayed_work include/linux/workqueue.h:509 [inline]
 bond_netdev_notify_work drivers/net/bonding/bond_main.c:1355 [inline]
 bond_netdev_notify_work+0x150/0x160 drivers/net/bonding/bond_main.c:1342
 process_one_work+0x3d4/0x890 kernel/workqueue.c:2269
 worker_thread+0xa0/0x800 kernel/workqueue.c:2415
 kthread+0x1d4/0x200 drivers/block/aoe/aoecmd.c:1253
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:352

write to 0xffff88812be1b6c8 of 8 bytes by interrupt on cpu 0:
 expire_timers kernel/time/timer.c:1450 [inline]
 __run_timers kernel/time/timer.c:1773 [inline]
 __run_timers kernel/time/timer.c:1740 [inline]
 run_timer_softirq+0xcc0/0xd20 kernel/time/timer.c:1786
 __do_softirq+0x115/0x33f kernel/softirq.c:292
 invoke_softirq kernel/softirq.c:373 [inline]
 irq_exit+0xbb/0xe0 kernel/softirq.c:413
 exiting_irq arch/x86/include/asm/apic.h:536 [inline]
 smp_apic_timer_interrupt+0xe6/0x280 arch/x86/kernel/apic/apic.c:1137
 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:830
 arch_local_irq_restore arch/x86/include/asm/paravirt.h:756 [inline]
 __kcsan_setup_watchpoint+0x282/0x510 kernel/kcsan/core.c:454
 __tsan_read8 kernel/kcsan/kcsan.c:31 [inline]
 __tsan_read8+0x2c/0x30 kernel/kcsan/kcsan.c:31
 pte_val arch/x86/include/asm/paravirt.h:382 [inline]
 pte_pfn arch/x86/include/asm/pgtable.h:213 [inline]
 vm_normal_page+0x30/0x220 mm/memory.c:577
 zap_pte_range mm/memory.c:1035 [inline]
 zap_pmd_range mm/memory.c:1166 [inline]
 zap_pud_range mm/memory.c:1195 [inline]
 zap_p4d_range mm/memory.c:1216 [inline]
 unmap_page_range+0x8e3/0x18d0 mm/memory.c:1237
 unmap_single_vma+0x144/0x200 mm/memory.c:1282
 unmap_vmas+0xda/0x1a0 mm/memory.c:1314
 exit_mmap+0x13e/0x300 mm/mmap.c:3161
 __mmput kernel/fork.c:1079 [inline]
 mmput+0xea/0x280 kernel/fork.c:1100

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 7181 Comm: syz-executor.2 Not tainted 5.4.0-rc3+ #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================