Dec 27 23:08:30 ipfire kernel: ------------[ cut here ]------------
Dec 27 23:08:30 ipfire kernel: refcount_t: underflow; use-after-free.
Dec 27 23:08:30 ipfire kernel: WARNING: CPU: 1 PID: 3026 at lib/refcount.c:28 refcount_warn_saturate+0xba/0x110
Dec 27 23:08:30 ipfire kernel: Modules linked in: xt_NFQUEUE nfnetlink_queue xt_MASQUERADE ccm cpufreq_conservative cpufreq_ondemand xt_geoip(O) xt_ipp2p(O) compat_xtables(O) xt_REDIRECT xt_hashlimit xt_mac xt_multiport xt_policy xt_TCPMSS xt_conntrack xt_comment ipt_REJECT nf_reject_ipv4 xt_LOG xt_limit xt_mark xt_connmark nf_log_syslog iptable_raw iptable_mangle iptable_filter vfat fat rt2800usb rt2x00usb x86_pkg_temp_thermal rt2800lib intel_powerclamp coretemp rt2x00lib mac80211 kvm_intel sch_fq_codel kvm snd_hda_codec_realtek snd_hda_codec_generic i2c_algo_bit fb_sys_fops ledtrig_audio syscopyarea at24 sysfillrect sysimgblt snd_hda_intel iTCO_wdt cfg80211 regmap_i2c iTCO_vendor_support snd_intel_dspcfg snd_hda_codec irqbypass crct10dif_pclmul i2c_i801 r8169 crc32_pclmul snd_hda_core i2c_smbus rfkill i2c_core ghash_clmulni_intel lpc_ich pcspkr realtek snd_hwdep libarc4 ir_rc6_decoder mfd_core rc_rc6_mce snd_pcm nuvoton_cir rc_core snd_timer snd soundcore acpi_pad lp parport_pc parport video efivarfs
Dec 27 23:08:30 ipfire kernel:  [last unloaded: hwmon_vid]
Dec 27 23:08:30 ipfire kernel: CPU: 1 PID: 3026 Comm: W-NFQ#0 Tainted: G           O      5.15.6-ipfire #1
Dec 27 23:08:30 ipfire kernel: Hardware name: To be filled by O.E.M. To be filled by O.E.M./CRESCENTBAY, BIOS 5.011 04/13/2016
Dec 27 23:08:30 ipfire kernel: RIP: 0010:refcount_warn_saturate+0xba/0x110
Dec 27 23:08:30 ipfire kernel: Code: 01 01 e8 32 91 59 00 0f 0b 31 f6 89 f7 c3 80 3d 14 8d 39 01 00 75 85 48 c7 c7 98 f6 73 8e c6 05 04 8d 39 01 01 e8 0f 91 59 00 <0f> 0b 31 f6 89 f7 c3 80 3d ef 8c 39 01 00 0f 85 5e ff ff ff 48 c7
Dec 27 23:08:30 ipfire kernel: RSP: 0018:ffffaf02025a7878 EFLAGS: 00010246
Dec 27 23:08:30 ipfire kernel: RAX: 0000000000000000 RBX: ffff88e4836a3980 RCX: 0000000000000000
Dec 27 23:08:30 ipfire kernel: RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
Dec 27 23:08:30 ipfire kernel: RBP: ffff88e4836a3980 R08: 0000000000000000 R09: 0000000000000000
Dec 27 23:08:30 ipfire kernel: R10: 0000000000000000 R11: 0000000000000000 R12: ffff88e4836a3980
Dec 27 23:08:30 ipfire kernel: R13: 0000000000000000 R14: 0000000000000005 R15: ffff88e4afbbd200
Dec 27 23:08:30 ipfire kernel: FS:  00007d7409fc6640(0000) GS:ffff88e5c7300000(0000) knlGS:0000000000000000
Dec 27 23:08:30 ipfire kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Dec 27 23:08:30 ipfire kernel: CR2: 0000748ca3636868 CR3: 0000000103004006 CR4: 00000000000706e0
Dec 27 23:08:30 ipfire kernel: Call Trace:
Dec 27 23:08:30 ipfire kernel:  <TASK>
Dec 27 23:08:30 ipfire kernel:  nf_queue_entry_release_refs+0x8b/0xa0
Dec 27 23:08:30 ipfire kernel:  nf_reinject+0x7a/0x1e0
Dec 27 23:08:30 ipfire kernel:  nfqnl_recv_verdict+0x303/0x4f0 [nfnetlink_queue]
Dec 27 23:08:30 ipfire kernel:  nfnetlink_rcv_msg+0x251/0x310
Dec 27 23:08:30 ipfire kernel:  ? nfnetlink_net_init+0xa0/0xa0
Dec 27 23:08:30 ipfire kernel:  netlink_rcv_skb+0x5b/0x110
Dec 27 23:08:30 ipfire kernel:  netlink_unicast+0x215/0x2e0
Dec 27 23:08:30 ipfire kernel:  netlink_sendmsg+0x233/0x480
Dec 27 23:08:30 ipfire kernel:  ? netlink_unicast+0x2e0/0x2e0
Dec 27 23:08:30 ipfire kernel:  ____sys_sendmsg+0x2a6/0x2e0
Dec 27 23:08:30 ipfire kernel:  ___sys_sendmsg+0xa3/0x100
Dec 27 23:08:30 ipfire kernel:  __sys_sendmsg+0x81/0xe0
Dec 27 23:08:30 ipfire kernel:  do_syscall_64+0x5c/0x90
Dec 27 23:08:30 ipfire kernel:  ? syscall_exit_to_user_mode+0x23/0x50
Dec 27 23:08:30 ipfire kernel:  ? __x64_sys_recvfrom+0x20/0x40
Dec 27 23:08:30 ipfire kernel:  ? do_syscall_64+0x69/0x90
Dec 27 23:08:30 ipfire kernel:  ? syscall_exit_to_user_mode+0x23/0x50
Dec 27 23:08:30 ipfire kernel:  ? switch_fpu_return+0x51/0xc0
Dec 27 23:08:30 ipfire kernel:  ? exit_to_user_mode_prepare+0x8d/0x160
Dec 27 23:08:30 ipfire kernel:  entry_SYSCALL_64_after_hwframe+0x44/0xae
Dec 27 23:08:30 ipfire kernel: RIP: 0033:0x7d740c06162d
Dec 27 23:08:30 ipfire kernel: Code: 28 89 54 24 1c 48 89 74 24 10 89 7c 24 08 e8 fa ee ff ff 8b 54 24 1c 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 33 44 89 c7 48 89 44 24 08 e8 4e ef ff ff 48
Dec 27 23:08:30 ipfire kernel: RSP: 002b:00007d7409fc3f40 EFLAGS: 00000293 ORIG_RAX: 000000000000002e
Dec 27 23:08:30 ipfire kernel: RAX: ffffffffffffffda RBX: 00007d7404268dd0 RCX: 00007d740c06162d
Dec 27 23:08:30 ipfire kernel: RDX: 0000000000000000 RSI: 00007d7409fc3f80 RDI: 0000000000000005
Dec 27 23:08:30 ipfire kernel: RBP: 00007d7409fc3fe0 R08: 0000000000000000 R09: 00007d740b740de0
Dec 27 23:08:30 ipfire kernel: R10: 00007d73fc57d340 R11: 0000000000000293 R12: 0000000000000000
Dec 27 23:08:30 ipfire kernel: R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000080
Dec 27 23:08:30 ipfire kernel:  </TASK>
Dec 27 23:08:30 ipfire kernel: ---[ end trace d19df8b93013567a ]---