Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > syzbot managed to reach this WARN_ON_ONCE with a giant cgroup tree, > remove it. > > WARNING: CPU: 0 PID: 5853 at net/netfilter/nft_socket.c:220 nft_socket_init+0x2f4/0x3d0 net/netfilter/nft_socket.c:220 I looked at the repro and as far as i could see it just passes a large NFTA_SOCKET_LEVEL attribute value. I'd propose: syzbot managed to reach this WARN_ON_ONCE by passing a huge level value, remove it. Patch is correct though. Acked-by: Florian Westphal <fw@xxxxxxxxx>