Kernel panic when syncing conntrack entries with conntrackd about ndpi HOT 5 OPEN

Try without iptables emulation.
Remove everything related to nftables and install iptables-legacy

from ndpi.

I have try with only iptables-legacy , kernel panic too.

[ 1415.927047]
[ 1415.929132] ndpi_mt+0x931/0x1dd0 [xt_ndpi]
[ 1415.933455] ? igb_xmit_frame_ring+0x5d3/0xc30 [igb]
[ 1415.938644] ? dev_hard_start_xmit+0xd5/0x230
[ 1415.943153] ipt_do_table+0x2a9/0x710
[ 1415.946966] nf_hook_slow+0x39/0xb0
[ 1415.950586] nf_hook_slow_list+0x67/0xe0
[ 1415.954651] ip_sublist_rcv+0x1fc/0x220
[ 1415.958688] ? ip_rcv_finish_core.constprop.0+0x4d0/0x4d0
[ 1415.964280] ip_list_rcv+0xf7/0x120
[ 1415.967981] __netif_receive_skb_list_core+0x253/0x2a0
[ 1415.973415] netif_receive_skb_list_internal+0x1cb/0x310
[ 1415.978927] napi_complete_done+0x6a/0x180
[ 1415.983261] igb_poll+0x824/0x13c0 [igb]
[ 1415.987307] ? load_balance+0x16a/0xca0
[ 1415.991269] net_rx_action+0x152/0x3d0
[ 1415.995203] __do_softirq+0xe5/0x2f9
[ 1415.998963] ? handle_fasteoi_mask_irq+0x1d0/0x1d0
[ 1416.003929] asm_call_irq_on_stack+0xf/0x20
[ 1416.008269]
[ 1416.010422] do_softirq_own_stack+0x5b/0x80
[ 1416.014833] irq_exit_rcu+0xc5/0x100
[ 1416.018628] common_interrupt+0xb8/0x1e0
[ 1416.022685] asm_common_interrupt+0x1e/0x40
[ 1416.026928] RIP: 0010:cpuidle_enter_state+0xd6/0x390

from ndpi.

To find the place where the error occurs, I need the ndpi.o object file compiled with debugging information and the commit that was used for compilation.
(The command "objdump -l -d mail.o" should show the line numbers in the source files)

from ndpi.

main.o.gz
I use the last commit :
commit 9a6412b (HEAD -> flow_info-4, origin/flow_info-4, origin/HEAD)

obj.txt

from ndpi.

I have a guess about the reason for this error. "conntrackd" restores the value of "label" in which we store a pointer to our internal structures.

If the guess is correct, then by fixing conntrackd (so that it does not restore the "label") you can get rid of kernel crashes.

The fix will require significant code changes.
I don't have time for such changes yet.

from ndpi.