If SELinux is registered before SMACK, SMACK panics afterregister_security() call.If SMACK is registered before SELinux, SELinux panics afterregister_security() call.Consequently allmodconfig kernel doesn't boot. It would be nice ifsome Kconfig magic to exclude each other will be in place.