==================================================================
BUG: KCSAN: data-race in expire_timers / try_to_del_timer_sync

write to 0xffff888237c376c8 of 8 bytes by interrupt on cpu 0:
 expire_timers+0x13d/0x250 kernel/time/timer.c:1465
 __run_timers+0x358/0x420 kernel/time/timer.c:1732
 run_timer_softirq+0x19/0x30 kernel/time/timer.c:1745
 __do_softirq+0x12c/0x26e kernel/softirq.c:558
 invoke_softirq kernel/softirq.c:432 [inline]
 __irq_exit_rcu+0x9a/0xb0 kernel/softirq.c:636
 sysvec_apic_timer_interrupt+0x69/0x80 arch/x86/kernel/apic/apic.c:1100
 asm_sysvec_apic_timer_interrupt+0x12/0x20 arch/x86/include/asm/idtentry.h:638
 is_atomic kernel/kcsan/core.c:238 [inline]
 should_watch kernel/kcsan/core.c:266 [inline]
 check_access kernel/kcsan/core.c:642 [inline]
 __tsan_read1+0x116/0x180 kernel/kcsan/core.c:861
 strlen+0x1b/0x40 lib/string.c:565
 trace_event_get_offsets_mmap_lock_start_locking include/trace/events/mmap_lock.h:16 [inline]
 perf_trace_mmap_lock_start_locking+0x46/0x1f0 include/trace/events/mmap_lock.h:16
 trace_mmap_lock_start_locking include/trace/events/mmap_lock.h:16 [inline]
 __mmap_lock_do_trace_start_locking+0xeb/0x100 mm/mmap_lock.c:230
 __mmap_lock_trace_start_locking include/linux/mmap_lock.h:29 [inline]
 mmap_read_trylock include/linux/mmap_lock.h:135 [inline]
 do_user_addr_fault+0x441/0xbe0 arch/x86/mm/fault.c:1331
 handle_page_fault arch/x86/mm/fault.c:1475 [inline]
 exc_page_fault+0x91/0x220 arch/x86/mm/fault.c:1531
 asm_exc_page_fault+0x1e/0x30 arch/x86/include/asm/idtentry.h:568
 __clear_user arch/x86/lib/usercopy_64.c:24 [inline]
 clear_user+0x60/0xa0 arch/x86/lib/usercopy_64.c:54
 iov_iter_zero+0x11b/0xb00 lib/iov_iter.c:896
 read_iter_zero+0x63/0x180 drivers/char/mem.c:492
 call_read_iter include/linux/fs.h:2108 [inline]
 do_iter_readv_writev+0x2e8/0x360 fs/read_write.c:738
 do_iter_read+0x109/0x4b0 fs/read_write.c:801
 vfs_readv fs/read_write.c:921 [inline]
 do_readv+0x13d/0x290 fs/read_write.c:958
 __do_sys_readv fs/read_write.c:1049 [inline]
 __se_sys_readv fs/read_write.c:1046 [inline]
 __x64_sys_readv+0x41/0x50 fs/read_write.c:1046
 do_syscall_x64 arch/x86/entry/common.c:50 [inline]
 do_syscall_64+0x3d/0x90 arch/x86/entry/common.c:80
 entry_SYSCALL_64_after_hwframe+0x44/0xae

read to 0xffff888237c376c8 of 8 bytes by task 11 on cpu 1:
 try_to_del_timer_sync+0xe3/0x290 kernel/time/timer.c:1233
 del_timer_sync kernel/time/timer.c:1380 [inline]
 schedule_timeout+0x108/0x240 kernel/time/timer.c:1880
 rcu_gp_fqs_loop kernel/rcu/tree.c:1996 [inline]
 rcu_gp_kthread+0xbf7/0xec0 kernel/rcu/tree.c:2169
 kthread+0x262/0x280 kernel/kthread.c:319
 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295

value changed: 0xffffc90000277e60 -> 0x0000000000000000

Reported by Kernel Concurrency Sanitizer on:
CPU: 1 PID: 11 Comm: rcu_sched Tainted: G        W         5.14.0-rc3-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================