vhe-guest kernel panic (el1_irq). This is similar to NVM boo

Freeing unused kernel memory: 396K (ffff00000883a000 - ffff00000889d000)
Bad mode in Synchronous Abort handler detected, code 0x8600000f -- IABT (current EL)
CPU: 0 PID: 0 Comm:  Not tainted 4.6.0-rc1+ #76
Hardware name: linux,dummy-virt (DT)
task: 0000ffff9d25c358 ti: 0000ffffda907be0 task.ti:           (null)
PC is at 0xffff9d2483fc
LR is at 0xffff9d248c00
pc : [<0000ffff9d2483fc>] lr : [<0000ffff9d248c00>] pstate: 20000005
sp : ffff8003700c7ff0
x29: 0000ffffda907be0 x28: 00000000027f4357
x27: 0000ffffda907da0 x26: 0000ffff9d26b000
x25: 0000ffff9d25c000 x24: 0000ffffda907db0
x23: 000000009fd0d5d6 x22: 0000000000000000
x21: 000000000000000b x20: 0000ffff9d25c6a0
x19: 0000ffffda907c90 x18: 0000ffffda907c90
x17: 0000ffff9d2538a8 x16: 0000ffff9d26c000
x15: 0000ffff9d26c000 x14: 0000000000000041
x13: 0000ffff9cfb2fc8 x12: 0000ffff9d25e9d0
x11: 0000000000000228 x10: 00000000ffffffff
x9 : 0000ffff9d258e40 x8 : 0000ffff9d2575f0
x7 : 0000000000044349 x6 : 000000000000000a
x5 : 0000ffff9cfb2e28 x4 : 0000ffff9cfa1220
x3 : 0000ffff9d25c000 x2 : 0000ffff9cfa12a8
x1 : 0000000000000012 x0 : 0000ffff9cfa1680

Internal error: Oops - bad mode: 0 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 0 Comm:  Not tainted 4.6.0-rc1+ #76
Hardware name: linux,dummy-virt (DT)
task: 0000ffff9d25c358 ti: 0000ffffda907be0 task.ti:           (null)
PC is at 0xffff9d2483fc
LR is at 0xffff9d248c00
pc : [<0000ffff9d2483fc>] lr : [<0000ffff9d248c00>] pstate: 20000005
sp : ffff8003700c7ff0
x29: 0000ffffda907be0 x28: 00000000027f4357
x27: 0000ffffda907da0 x26: 0000ffff9d26b000
x25: 0000ffff9d25c000 x24: 0000ffffda907db0
x23: 000000009fd0d5d6 x22: 0000000000000000
x21: 000000000000000b x20: 0000ffff9d25c6a0
x19: 0000ffffda907c90 x18: 0000ffffda907c90
x17: 0000ffff9d2538a8 x16: 0000ffff9d26c000
x15: 0000ffff9d26c000 x14: 0000000000000041
x13: 0000ffff9cfb2fc8 x12: 0000ffff9d25e9d0
x11: 0000000000000228 x10: 00000000ffffffff
x9 : 0000ffff9d258e40 x8 : 0000ffff9d2575f0
x7 : 0000000000044349 x6 : 000000000000000a
x5 : 0000ffff9cfb2e28 x4 : 0000ffff9cfa1220
x3 : 0000ffff9d25c000 x2 : 0000ffff9cfa12a8
x1 : 0000000000000012 x0 : 0000ffff9cfa1680

Process  (pid: 0, stack limit = 0x0000ffffda907c00)
Stack: (0xffff8003700c7ff0 to 0x0000000000004000)
Call trace:
[<0000ffff9d2483fc>] 0xffff9d2483fc
Code: f9400400 f9417c64 f94004a2 f9001260 (b40028c4)
Unable to handle kernel NULL pointer dereference at virtual address 00000120
pgd = ffff000008938000
[00000120] *pgd=00000003bfffe003, *pud=00000003bfffd003, *pmd=0000000000000000
Internal error: Oops: 96000004 [#2] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 0 Comm:  Tainted: G      D         4.6.0-rc1+ #76
Hardware name: linux,dummy-virt (DT)
task: 0000ffff9d25c358 ti: 0000ffffda907be0 task.ti:           (null)
PC is at account_system_time+0x48/0x17c
LR is at account_process_tick+0x5c/0x118
pc : [<ffff0000080e05b8>] lr : [<ffff0000080e08f8>] pstate: 600001c5
sp : ffff8003700c7a30
x29: ffff8003700c7a30 x28: 0000ffffda907be0
x27: ffff000008115a8c x26: 0000000000000001
x25: ffff0000088ffb5e x24: 0000000015705fe8
x23: 0000000000000001 x22: 0000000015705fe8
x21: 000080037772c000 x20: 0000ffff9d25c358
x19: ffff80037ffb1000 x18: 0000ffffda907c90
x17: 0000ffff9d2538a8 x16: 0000ffff9d26c000
x15: 0000ffff9d26c000 x14: 0000000000000008
x13: 0000000000000000 x12: 0098968000000000
x11: 0000000000989680 x10: 0000000000000000
x9 : 0000989680000000 x8 : 000000000007a120
x7 : 00000000152ce4e8 x6 : 0000000006969197
x5 : 0000000000000002 x4 : 0000000000000000
x3 : 0000000006969198 x2 : 0000000000000001
x1 : 0000ffff9d202896 x0 : 0000ffff9d25c358

Process  (pid: 0, stack limit = 0x0000ffffda907c00)
Stack: (0xffff8003700c7a30 to 0x0000000000004000)
Call trace:
Exception stack(0xffff8003700c7870 to 0xffff8003700c7990)
7860:                                   ffff80037ffb1000 0000ffff9d25c358
7880: ffff8003700c7a30 ffff0000080e05b8 ffff8003700c78c0 00000000ffffffd0
78a0: ffff8003700c78f0 ffff8003700c78f0 ffff8003700c78c0 00000000ffffffd0
78c0: 0000ffff9d2483fc ffff8003700c7938 0000ffff9d2483fc 0000ffffda907be0
78e0: 0000000000000004 0000000000000004 ffff8003700c7950 ffff00000812036c
7900: ffff8003700c79a0 ffff000008910460 0000ffff9d25c358 0000ffff9d202896
7920: 0000000000000001 0000000006969198 0000000000000000 0000000000000002
7940: 0000000006969197 00000000152ce4e8 000000000007a120 0000989680000000
7960: 0000000000000000 0000000000989680 0098968000000000 0000000000000000
7980: 0000000000000008 0000ffff9d26c000
[<ffff0000080e05b8>] account_system_time+0x48/0x17c
[<ffff0000080e08f8>] account_process_tick+0x5c/0x118
[<ffff000008107230>] update_process_times+0x28/0x68
[<ffff000008115a7c>] tick_sched_handle.isra.15+0x3c/0x4c
[<ffff000008115ad0>] tick_sched_timer+0x44/0x7c
[<ffff000008107948>] __hrtimer_run_queues+0xe8/0x14c
[<ffff000008107edc>] hrtimer_interrupt+0x9c/0x1e0
[<ffff00000850c05c>] arch_timer_handler_virt+0x2c/0x38
[<ffff0000080fa6f8>] handle_percpu_devid_irq+0x78/0x98
[<ffff0000080f6240>] generic_handle_irq+0x24/0x38
[<ffff0000080f6578>] __handle_domain_irq+0x60/0xac
[<ffff0000080824c8>] gic_handle_irq+0x5c/0xb0
Exception stack(0xffff8003700c7c80 to 0xffff8003700c7da0)
7c80: ffff8003700c7cb0 0000000000000000 ffff8003700c7dd0 ffff00000863d060
7ca0: 0000000060000145 0000ffff9d25c358 ffff0000089040e8 0000000000000001
7cc0: 0000000000000080 0000000000000080 ffff0000088cb8d8 ffff000008397c20
7ce0: 0000000000000001 6228203036323130 00000000000000e4 00000000000000e3
7d00: 0000000000000000 0000000000000006 3063383432643966 61747370205d3e30
7d20: 30303032203a6574 0000ffff9d26c000 0000ffff9d26c000 0000ffff9d2538a8
7d40: 0000ffffda907c90 ffff000008904000 0000000000000000 ffff000008773760
7d60: ffff8003700c7ed0 0000ffffda907be0 0000ffff9d25c358 0000ffff9d25c000
7d80: 0000ffff9d26b000 0000ffffda907da0 00000000027f4357 ffff8003700c7dd0
[<ffff000008085720>] el1_irq+0xa0/0x10c
[<ffff000008089a9c>] die+0xc4/0x1b4
[<ffff000008089c50>] arm64_notify_die+0x1c/0x54
[<ffff000008089e9c>] bad_mode+0x8c/0x98
[<0000ffff9d248c00>] 0xffff9d248c00
Code: 8b020021 8b0300c3 f9028801 f9029003 (39448081)
---[ end trace c0d71f4f658cd624 ]---
Kernel panic - not syncing: Fatal exception in interrupt
Kernel Offset: disabled
Memory Limit: none
---[ end Kernel panic - not syncing: Fatal exception in interrupt