add_timer_on() called from mce_timer_fn() triggers BUG at kernel/timer.c:930!

Issue

Kernel panics with the following BUG:

[13033058.527573] kernel BUG at kernel/timer.c:930!
[13033058.528126] invalid opcode: 0000 [#1] SMP 
[13033058.528599] Modules linked in: btrfs zlib_deflate raid6_pq xor vfat msdos fat ext4 mbcache jbd2 binfmt_misc tcp_lp vhost_net macvtap macvlan tun bnep bluetooth rfkill fuse ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack ipt_REJECT xt_CHECKSUM iptable_mangle ip6table_filter ip6_tables iptable_filter ip_tables ebtable_nat ebtables bridge stp llc sg iTCO_wdt ipmi_devintf iTCO_vendor_support dcdbas sb_edac edac_core acpi_power_meter coretemp kvm_intel kvm crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel pcspkr aesni_intel lrw gf128mul glue_helper ablk_helper cryptd mei_me ipmi_si lpc_ich ses mei mfd_core ipmi_msghandler ntb enclosure wmi shpchp mperf nfsd auth_rpcgss nfs_acl lockd uinput sunrpc xfs sd_mod crc_t10dif crct10dif_common
[13033058.535269]  mgag200 qla2xxx syscopyarea sysfillrect sysimgblt i2c_algo_bit drm_kms_helper bnx2x ttm ahci libahci drm libata scsi_transport_fc i2c_core megaraid_sas scsi_tgt mdio libcrc32c dm_mirror dm_region_hash dm_log dm_mod
[13033058.536519] CPU: 14 PID: 0 Comm: swapper/14 Not tainted 3.10.0-123.el7.x86_64 #1
[13033058.537307] Hardware name: Dell Inc. PowerEdge M620/04VJW2, BIOS 2.7.0 05/30/2018
[13033058.538191] task: ffff880bec48e660 ti: ffff880bec4a8000 task.ti: ffff880bec4a8000
[13033058.539088] RIP: 0010:[<ffffffff8106f5ca>]  [<ffffffff8106f5ca>] add_timer_on+0xda/0xf0
[13033058.539919] RSP: 0018:ffff880bff1c3dd8  EFLAGS: 00010286
[13033058.540355] RAX: 0000000000000000 RBX: ffff880bff1cd920 RCX: 000000001fbee3ff
[13033058.540706] RDX: ffff880bff1c0000 RSI: 000000000000000e RDI: ffff880bff1cd920
[13033058.541225] RBP: ffff880bff1c3e08 R08: 0000000000000096 R09: 00000000000004e4
[13033058.541552] R10: 00000000000004e3 R11: 0000000000000003 R12: 000000000000ea60
[13033058.542052] R13: ffff880bec2fc000 R14: 000000000000000e R15: 000000000000000e
[13033058.542343] FS:  0000000000000000(0000) GS:ffff880bff1c0000(0000) knlGS:0000000000000000
[13033058.542833] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[13033058.543111] CR2: 00007ff8102b4114 CR3: 00000000018ce000 CR4: 00000000000427e0
[13033058.543575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[13033058.543874] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[13033058.544341] Stack:
[13033058.544439]  0000001481031d51 ffff880bff1cd920 000000000000ea60 0000000000000100
[13033058.544893]  ffffffff81030610 000000000000000e ffff880bff1c3e28 ffffffff810306a4
[13033058.545185]  ffff880bec2fc000 ffff880bff1cd920 ffff880bff1c3e60 ffffffff8106d236
[13033058.545608] Call Trace:
[13033058.545778]  <IRQ> 
[13033058.545959] 
[13033058.546168]  [<ffffffff81030610>] ? mce_cpu_restart+0x40/0x40
[13033058.546550]  [<ffffffff810306a4>] mce_timer_fn+0x94/0x130
[13033058.547120]  [<ffffffff8106d236>] call_timer_fn+0x36/0x110
[13033058.547662]  [<ffffffff81030610>] ? mce_cpu_restart+0x40/0x40
[13033058.548221]  [<ffffffff8106f2ff>] run_timer_softirq+0x21f/0x320
[13033058.548808]  [<ffffffff81067047>] __do_softirq+0xf7/0x290
[13033058.549373]  [<ffffffff815f3a5c>] call_softirq+0x1c/0x30
[13033058.549970]  [<ffffffff81014d25>] do_softirq+0x55/0x90
[13033058.550492]  [<ffffffff810673e5>] irq_exit+0x115/0x120
[13033058.551052]  [<ffffffff815f4435>] smp_apic_timer_interrupt+0x45/0x60
[13033058.551688]  [<ffffffff815f2d9d>] apic_timer_interrupt+0x6d/0x80
[13033058.552261]  <EOI> 
[13033058.552439] 
[13033058.558490]  [<ffffffff814834df>] ? cpuidle_enter_state+0x4f/0xc0
[13033058.562149]  [<ffffffff81483615>] cpuidle_idle_call+0xc5/0x200
[13033058.565444]  [<ffffffff8101bc7e>] arch_cpu_idle+0xe/0x30
[13033058.568828]  [<ffffffff810b4725>] cpu_startup_entry+0xf5/0x290
[13033058.571197]  [<ffffffff815cfee1>] start_secondary+0x265/0x27b