==================================================================
BUG: KCSAN: data-race in __mod_timer / expire_timers

write to 0xffff88813bc1b908 of 8 bytes by interrupt on cpu 0:
 expire_timers+0x164/0x260 kernel/time/timer.c:1472
 __run_timers+0x358/0x3f0 kernel/time/timer.c:1745
 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1758
 __do_softirq+0x13c/0x2c3 kernel/softirq.c:345
 invoke_softirq kernel/softirq.c:221 [inline]
 __irq_exit_rcu+0xb4/0xc0 kernel/softirq.c:422
 sysvec_apic_timer_interrupt+0x6e/0x80 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:632
 smap_restore arch/x86/include/asm/smap.h:71 [inline]
 kcsan_setup_watchpoint+0x436/0x470 kernel/kcsan/core.c:590
 page_zonenum include/linux/mm.h:1107 [inline]
 is_zone_device_page include/linux/mm.h:1114 [inline]
 release_pages+0x166/0xb60 mm/swap.c:871
 free_pages_and_swap_cache+0x1db/0x1f0 mm/swap_state.c:329
 tlb_batch_pages_flush mm/mmu_gather.c:49 [inline]
 tlb_flush_mmu_free mm/mmu_gather.c:242 [inline]
 tlb_flush_mmu+0x597/0x5f0 mm/mmu_gather.c:249
 zap_pte_range+0x1168/0x13f0 mm/memory.c:1342
 zap_pmd_range mm/memory.c:1380 [inline]
 zap_pud_range mm/memory.c:1409 [inline]
 zap_p4d_range mm/memory.c:1430 [inline]
 unmap_page_range+0x540/0x650 mm/memory.c:1451
 unmap_single_vma+0x157/0x210 mm/memory.c:1496
 unmap_vmas+0xc0/0x170 mm/memory.c:1528
 exit_mmap+0x1be/0x400 mm/mmap.c:3218
 __mmput+0xa2/0x220 kernel/fork.c:1082
 mmput+0x3d/0x50 kernel/fork.c:1103
 exit_mm+0x344/0x430 kernel/exit.c:501
 do_exit+0x3ff/0x1670 kernel/exit.c:812
 do_group_exit+0xce/0x180 kernel/exit.c:922
 get_signal+0xdce/0x14e0 kernel/signal.c:2773
 arch_do_signal_or_restart+0x2a/0x270 arch/x86/kernel/signal.c:811
 handle_signal_work kernel/entry/common.c:147 [inline]
 exit_to_user_mode_loop kernel/entry/common.c:171 [inline]
 exit_to_user_mode_prepare+0x11a/0x1b0 kernel/entry/common.c:208
 __syscall_exit_to_user_mode_work kernel/entry/common.c:290 [inline]
 syscall_exit_to_user_mode+0x20/0x40 kernel/entry/common.c:301
 do_syscall_64+0x45/0x80 arch/x86/entry/common.c:56
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff88813bc1b908 of 8 bytes by task 8 on cpu 1:
 __mod_timer+0x44e/0xc10 kernel/time/timer.c:1035
 add_timer+0x38/0x50 kernel/time/timer.c:1142
 __queue_delayed_work+0xec/0x150 kernel/workqueue.c:1655
 queue_delayed_work_on+0x6f/0xd0 kernel/workqueue.c:1680
 queue_delayed_work include/linux/workqueue.h:522 [inline]
 bond_mii_monitor+0x156d/0x15f0 drivers/net/bonding/bond_main.c:2555
 process_one_work+0x3e1/0x950 kernel/workqueue.c:2275
 worker_thread+0x616/0xa70 kernel/workqueue.c:2421
 kthread+0x20b/0x230 kernel/kthread.c:292
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:294

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G        W         5.12.0-rc2-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Workqueue: bond4 bond_mii_monitor
==================================================================
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50