new syscall switch_sandbox does not cause kernel oops