sys/linux: add new netlink warnings

Update #590

23 files changed, 218 insertions, 9 deletions

diff --git a/sys/linux/dev_nbd.txt.warn b/sys/linux/dev_nbd.txt.warn
index b6e4d8d20..61b8c7776 100644
--- a/sys/linux/dev_nbd.txt.warn
+++ b/sys/linux/dev_nbd.txt.warn
@@ -1 +1,2 @@
+bad-netlink-attr: nbd_attr_policy.NBD_ATTR_SOCKETS: should be nlnest [amd64]
 no-such-struct: nbd_sock_pair
diff --git a/sys/linux/io_uring.txt.warn b/sys/linux/io_uring.txt.warn
index 45862cefa..76773b438 100644
--- a/sys/linux/io_uring.txt.warn
+++ b/sys/linux/io_uring.txt.warn
@@ -1,3 +1,3 @@
-bad-field-number: io_uring_files_update: syz=2 kernel=3 [arm,arm64]
+bad-field-number: io_uring_files_update: syz=2 kernel=3 [amd64,arm,arm64]
 bad-struct-size: io_uring_files_update: syz=8 kernel=16 [arm]
-bad-field-offset: io_uring_files_update.fds/resv: syz=8 kernel=4 [arm64]
+bad-field-offset: io_uring_files_update.fds/resv: syz=8 kernel=4
diff --git a/sys/linux/ipvs.txt.warn b/sys/linux/ipvs.txt.warn
index b9f95c3ee..9e2e8073f 100644
--- a/sys/linux/ipvs.txt.warn
+++ b/sys/linux/ipvs.txt.warn
@@ -1 +1,5 @@
+bad-netlink-attr: ip_vs_cmd_policy.IPVS_CMD_ATTR_SERVICE: should be nlnest [amd64]
+bad-netlink-attr: ip_vs_cmd_policy.IPVS_CMD_ATTR_DEST: should be nlnest [amd64]
+bad-netlink-attr: ip_vs_cmd_policy.IPVS_CMD_ATTR_DAEMON: should be nlnest [amd64]
+bad-netlink-attr: ip_vs_dest_policy.IPVS_DEST_ATTR_FWD_METHOD: bad size 2, expect 4 [amd64]
 no-such-struct: ip_vs_svcdest_user
diff --git a/sys/linux/socket_bluetooth.txt.warn b/sys/linux/socket_bluetooth.txt.warn
index f10bddad5..c9e74ce9d 100644
--- a/sys/linux/socket_bluetooth.txt.warn
+++ b/sys/linux/socket_bluetooth.txt.warn
@@ -1,2 +1,3 @@
 no-such-struct: vhci_command_vendor_pkt
-no-such-struct: bdaddr
+bad-field-number: bdaddr_t: syz=3 kernel=1
+no-such-struct: bdaddr_fixed
diff --git a/sys/linux/socket_netlink_generic_80211.txt b/sys/linux/socket_netlink_generic_80211.txt
index 7948332f1..f2ae7493f 100644
--- a/sys/linux/socket_netlink_generic_80211.txt
+++ b/sys/linux/socket_netlink_generic_80211.txt
@@ -60,6 +60,7 @@ nl80211_wdev {
 	whipy	nl80211_whipy
 }
 
+# nl80211_policy in kernel
 nl80211_dev_policy [
 	NL80211_ATTR_WIPHY	nlattr[NL80211_ATTR_WIPHY, nl80211_whipy]
 	NL80211_ATTR_IFINDEX	nlattr[NL80211_ATTR_IFINDEX, ifindex]
diff --git a/sys/linux/socket_netlink_generic_80211.txt.warn b/sys/linux/socket_netlink_generic_80211.txt.warn
index 87b54abbf..833844b44 100644
--- a/sys/linux/socket_netlink_generic_80211.txt.warn
+++ b/sys/linux/socket_netlink_generic_80211.txt.warn
@@ -1 +1,27 @@
 no-such-struct: nl80211_wdev
+no-such-netlink-policy: nl80211_dev_policy [amd64]
+no-such-netlink-policy: nl80211_wiphy_policy [amd64]
+no-such-netlink-policy: nl80211_setns_policy [amd64]
+no-such-netlink-policy: nl80211_interface_policy [amd64]
+no-such-netlink-policy: nl80211_cmd_key_policy [amd64]
+bad-netlink-attr: nl80211_key_policy.NL80211_KEY_DEFAULT_TYPES: should be nlnest [amd64]
+no-such-netlink-policy: nl80211_beacon_policy [amd64]
+no-such-netlink-policy: nl80211_tx_rates_policy [amd64]
+no-such-netlink-policy: nl80211_station_policy [amd64]
+no-such-netlink-policy: nl80211_mpath_policy [amd64]
+no-such-netlink-policy: nl80211_bss_policy [amd64]
+no-such-netlink-policy: nl80211_reg_policy [amd64]
+no-such-netlink-policy: nl80211_mesh_policy [amd64]
+no-such-netlink-policy: nl80211_join_mesh_policy [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_TTL: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_ELEMENT_TTL: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_HWMP_RANN_INTERVAL: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_HWMP_ROOT_INTERVAL: bad min value 0, expect 1 [amd64]
+bad-netlink-attr: nl80211_meshconf_params_policy.NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL: bad min value 0, expect 1 [amd64]
+no-such-netlink-policy: nl80211_scan_policy [amd64]
+no-such-netlink-policy: nl80211_rates_policy [amd64]
+bad-netlink-attr: nl80211_match_policy.NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI: should be nlnest [amd64]
diff --git a/sys/linux/socket_netlink_generic_devlink.txt b/sys/linux/socket_netlink_generic_devlink.txt
index 7a89fc648..5d049e440 100644
--- a/sys/linux/socket_netlink_generic_devlink.txt
+++ b/sys/linux/socket_netlink_generic_devlink.txt
@@ -18,11 +18,13 @@ devlink_devname {
 	z	const[0, int8]
 } [packed]
 
+# devlink_nl_policy in kernel
 devlink_handle_nsim {
 	DEVLINK_ATTR_BUS_NAME	nlattr[DEVLINK_ATTR_BUS_NAME, string["netdevsim"]]
 	DEVLINK_ATTR_DEV_NAME	nlattr[DEVLINK_ATTR_DEV_NAME, devlink_devname]
 } [packed, align_4]
 
+# devlink_nl_policy in kernel
 devlink_handle_pci {
 	DEVLINK_ATTR_BUS_NAME	nlattr[DEVLINK_ATTR_BUS_NAME, string["pci"]]
 # 0000:00:10.0 is a fixed pci address what is moved from initial network namespace by initialize_devlink()
diff --git a/sys/linux/socket_netlink_generic_devlink.txt.warn b/sys/linux/socket_netlink_generic_devlink.txt.warn
index 5483e4c5c..125119fe4 100644
--- a/sys/linux/socket_netlink_generic_devlink.txt.warn
+++ b/sys/linux/socket_netlink_generic_devlink.txt.warn
@@ -1,3 +1,4 @@
 no-such-struct: devlink_devname
-no-such-struct: devlink_handle_nsim
-no-such-struct: devlink_handle_pci
+no-such-netlink-policy: devlink_handle_nsim
+no-such-netlink-policy: devlink_handle_pci
+no-such-netlink-policy: devlink_reload_arg [amd64]
diff --git a/sys/linux/socket_netlink_generic_fou.txt.warn b/sys/linux/socket_netlink_generic_fou.txt.warn
new file mode 100644
index 000000000..27818777b
--- /dev/null
+++ b/sys/linux/socket_netlink_generic_fou.txt.warn
@@ -0,0 +1,2 @@
+bad-netlink-attr: fou_nl_policy.FOU_ATTR_LOCAL_V6: unhandled type 16 [amd64]
+bad-netlink-attr: fou_nl_policy.FOU_ATTR_PEER_V6: unhandled type 16 [amd64]
diff --git a/sys/linux/socket_netlink_generic_gtp.txt.warn b/sys/linux/socket_netlink_generic_gtp.txt.warn
new file mode 100644
index 000000000..bd2873718
--- /dev/null
+++ b/sys/linux/socket_netlink_generic_gtp.txt.warn
@@ -0,0 +1 @@
+no-such-netlink-policy: gtp_policy_var [amd64]
diff --git a/sys/linux/socket_netlink_generic_netlabel.txt.warn b/sys/linux/socket_netlink_generic_netlabel.txt.warn
new file mode 100644
index 000000000..f31ca0b5b
--- /dev/null
+++ b/sys/linux/socket_netlink_generic_netlabel.txt.warn
@@ -0,0 +1,5 @@
+bad-netlink-attr: netlbl_cipsov4_genl_policy.NLBL_CIPSOV4_A_TAGLST: should be nlnest [amd64]
+bad-netlink-attr: netlbl_cipsov4_genl_policy.NLBL_CIPSOV4_A_MLSLVLLST: should be nlnest [amd64]
+bad-netlink-attr: netlbl_cipsov4_genl_policy.NLBL_CIPSOV4_A_MLSCATLST: should be nlnest [amd64]
+no-such-netlink-policy: netlbl_cipsov4_mlslvl_policy [amd64]
+no-such-netlink-policy: netlbl_cipsov4_mlscat_policy [amd64]
diff --git a/sys/linux/socket_netlink_generic_team.txt.warn b/sys/linux/socket_netlink_generic_team.txt.warn
index 4aa03417b..0aad58306 100644
--- a/sys/linux/socket_netlink_generic_team.txt.warn
+++ b/sys/linux/socket_netlink_generic_team.txt.warn
@@ -1,3 +1,4 @@
+bad-netlink-attr: team_nl_policy.TEAM_ATTR_LIST_OPTION: should be nlnest [amd64]
 no-such-struct: team_nl_option_policy
 no-such-struct: team_nl_option_policy_per_port
 no-such-struct: team_nl_option_policy_array
diff --git a/sys/linux/socket_netlink_netfilter_acct.txt.warn b/sys/linux/socket_netlink_netfilter_acct.txt.warn
new file mode 100644
index 000000000..178ac60b4
--- /dev/null
+++ b/sys/linux/socket_netlink_netfilter_acct.txt.warn
@@ -0,0 +1 @@
+no-such-netlink-policy: nfnl_acct_filter_policy [amd64]
diff --git a/sys/linux/socket_netlink_netfilter_conntrack.txt.warn b/sys/linux/socket_netlink_netfilter_conntrack.txt.warn
index 950ac88b8..9d2c23859 100644
--- a/sys/linux/socket_netlink_netfilter_conntrack.txt.warn
+++ b/sys/linux/socket_netlink_netfilter_conntrack.txt.warn
@@ -1,2 +1,15 @@
-no-such-struct: cta_ip_nla_policy4
-no-such-struct: cta_ip_nla_policy6
+bad-netlink-attr: ct_nla_policy.CTA_TUPLE_ORIG: should be nlnest [amd64]
+bad-netlink-attr: ct_nla_policy.CTA_TUPLE_REPLY: should be nlnest [amd64]
+bad-netlink-attr: ct_nla_policy.CTA_PROTOINFO: should be nlnest [amd64]
+bad-netlink-attr: ct_nla_policy.CTA_HELP: should be nlnest [amd64]
+bad-netlink-attr: ct_nla_policy.CTA_NAT_SRC: should be nlnest [amd64]
+bad-netlink-attr: ct_nla_policy.CTA_NAT_DST: should be nlnest [amd64]
+bad-netlink-attr: ct_nla_policy.CTA_TUPLE_MASTER: should be nlnest [amd64]
+bad-netlink-attr: tuple_nla_policy.CTA_TUPLE_IP: should be nlnest [amd64]
+bad-netlink-attr: tuple_nla_policy.CTA_TUPLE_PROTO: should be nlnest [amd64]
+no-such-netlink-policy: cta_ip_nla_policy4
+no-such-netlink-policy: cta_ip_nla_policy6
+bad-netlink-attr: protoinfo_policy.CTA_PROTOINFO_TCP: should be nlnest [amd64]
+bad-netlink-attr: protoinfo_policy.CTA_PROTOINFO_DCCP: should be nlnest [amd64]
+bad-netlink-attr: protoinfo_policy.CTA_PROTOINFO_SCTP: should be nlnest [amd64]
+bad-netlink-attr: nat_nla_policy.CTA_NAT_PROTO: should be nlnest [amd64]
diff --git a/sys/linux/socket_netlink_netfilter_conntrack_exp.txt.warn b/sys/linux/socket_netlink_netfilter_conntrack_exp.txt.warn
new file mode 100644
index 000000000..091e88005
--- /dev/null
+++ b/sys/linux/socket_netlink_netfilter_conntrack_exp.txt.warn
@@ -0,0 +1,5 @@
+bad-netlink-attr: exp_nla_policy.CTA_EXPECT_MASTER: should be nlnest [amd64]
+bad-netlink-attr: exp_nla_policy.CTA_EXPECT_TUPLE: should be nlnest [amd64]
+bad-netlink-attr: exp_nla_policy.CTA_EXPECT_MASK: should be nlnest [amd64]
+bad-netlink-attr: exp_nla_policy.CTA_EXPECT_NAT: should be nlnest [amd64]
+bad-netlink-attr: exp_nat_nla_policy.CTA_EXPECT_NAT_TUPLE: should be nlnest [amd64]
diff --git a/sys/linux/socket_netlink_netfilter_ipset.txt.warn b/sys/linux/socket_netlink_netfilter_ipset.txt.warn
index 60e34bcf4..6456b5b38 100644
--- a/sys/linux/socket_netlink_netfilter_ipset.txt.warn
+++ b/sys/linux/socket_netlink_netfilter_ipset.txt.warn
@@ -1,2 +1,4 @@
 no-such-struct: ip_set_req_get_set_byname
 no-such-struct: ip_set_req_get_set_byindex
+no-such-netlink-policy: ip_set_type_create_policy [amd64]
+no-such-netlink-policy: ip_set_type_adt_policy [amd64]
diff --git a/sys/linux/socket_netlink_netfilter_nftables.txt.warn b/sys/linux/socket_netlink_netfilter_nftables.txt.warn
index 50a0f6b00..ae366fb7e 100644
--- a/sys/linux/socket_netlink_netfilter_nftables.txt.warn
+++ b/sys/linux/socket_netlink_netfilter_nftables.txt.warn
@@ -1,3 +1,5 @@
 no-such-struct: nft_nlmsghdr
 no-such-struct: nfgenmsg_nft
+multiple-netlink-policy: nft_counter_policy [amd64]
+no-such-netlink-policy: nft_new_obj_policy_t [amd64]
 no-such-struct: nft_flow_offload_policy
diff --git a/sys/linux/socket_netlink_route.txt b/sys/linux/socket_netlink_route.txt
index df032ee1b..dab1a643b 100644
--- a/sys/linux/socket_netlink_route.txt
+++ b/sys/linux/socket_netlink_route.txt
@@ -467,12 +467,14 @@ gre_common_policy [
 	IFLA_GRE_ERSPAN_HWID		nlattr[IFLA_GRE_ERSPAN_HWID, int16]
 ] [varlen]
 
+# ipgre_policy in kernel
 ipgre_policy [
 	IFLA_GRE_LOCAL		nlattr[IFLA_GRE_LOCAL, ipv4_addr]
 	IFLA_GRE_REMOTE		nlattr[IFLA_GRE_REMOTE, ipv4_addr]
 	gre_common_policy	array[gre_common_policy]
 ] [varlen]
 
+# ip6gre_policy in kernel
 ip6gre_policy [
 	IFLA_GRE_LOCAL		nlattr[IFLA_GRE_LOCAL, ipv6_addr]
 	IFLA_GRE_REMOTE		nlattr[IFLA_GRE_REMOTE, ipv6_addr]
diff --git a/sys/linux/socket_netlink_route.txt.warn b/sys/linux/socket_netlink_route.txt.warn
index e867ccb5b..3ac080fb1 100644
--- a/sys/linux/socket_netlink_route.txt.warn
+++ b/sys/linux/socket_netlink_route.txt.warn
@@ -1,4 +1,56 @@
-no-such-struct: ifla_info_policy_t
+bad-netlink-attr: ifla_policy.IFLA_MTU: bad size 4, expect 32 [amd64]
+bad-netlink-attr: ifla_policy.IFLA_LINKINFO: should be nlnest [amd64]
+bad-netlink-attr: ifla_policy.IFLA_VFINFO_LIST: should be nlnest [amd64]
+bad-netlink-attr: ifla_policy.IFLA_VF_PORTS: should be nlnest [amd64]
+bad-netlink-attr: ifla_policy.IFLA_PORT_SELF: should be nlnest [amd64]
+bad-netlink-attr: ifla_policy.IFLA_XDP: should be nlnest [amd64]
+bad-netlink-attr: ifla_policy.IFLA_PROP_LIST: should be nlnest [amd64]
+no-such-netlink-policy: ifla_af_spec_policy [amd64]
+no-such-netlink-policy: ifla_info_policy_t
+bad-netlink-attr: caif_hsi_policy.__IFLA_CAIF_HSI_INACTIVITY_TOUT: bad size 2, expect 4 [amd64]
+bad-netlink-attr: caif_hsi_policy.__IFLA_CAIF_HSI_AGGREGATION_TOUT: bad size 2, expect 4 [amd64]
+bad-netlink-attr: caif_hsi_policy.__IFLA_CAIF_HSI_HEAD_ALIGN: bad size 2, expect 4 [amd64]
+bad-netlink-attr: caif_hsi_policy.__IFLA_CAIF_HSI_TAIL_ALIGN: bad size 2, expect 4 [amd64]
+bad-netlink-attr: caif_hsi_policy.__IFLA_CAIF_HSI_QHIGH_WATERMARK: bad size 2, expect 4 [amd64]
+bad-netlink-attr: caif_hsi_policy.__IFLA_CAIF_HSI_QLOW_WATERMARK: bad size 2, expect 4 [amd64]
+bad-netlink-attr: macsec_rtnl_policy.IFLA_MACSEC_VALIDATION: bad size 1, expect 8 [amd64]
+bad-netlink-attr: macvlan_policy.IFLA_MACVLAN_MACADDR_DATA: should be nlnest [amd64]
+multiple-netlink-policy: vlan_policy [amd64]
+bad-netlink-attr: bond_policy.IFLA_BOND_ARP_IP_TARGET: should be nlnest [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_VLAN_PROTOCOL: bad size 4, expect 2 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_GROUP_FWD_MASK: bad size 4, expect 2 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_ROUTER: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_SNOOPING: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_QUERY_USE_IFADDR: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_QUERIER: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_LAST_MEMBER_INTVL: bad size 4, expect 8 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_MEMBERSHIP_INTVL: bad size 4, expect 8 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_QUERIER_INTVL: bad size 4, expect 8 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_QUERY_INTVL: bad size 4, expect 8 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_QUERY_RESPONSE_INTVL: bad size 4, expect 8 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_STARTUP_QUERY_INTVL: bad size 4, expect 8 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_NF_CALL_IPTABLES: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_NF_CALL_IP6TABLES: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_NF_CALL_ARPTABLES: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_VLAN_DEFAULT_PVID: bad size 4, expect 2 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_VLAN_STATS_ENABLED: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_STATS_ENABLED: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_IGMP_VERSION: bad size 4, expect 1 [amd64]
+bad-netlink-attr: br_policy.IFLA_BR_MCAST_MLD_VERSION: bad size 4, expect 1 [amd64]
+no-such-netlink-policy: gre_common_policy [amd64]
 no-such-struct: peer_info
+no-such-netlink-policy: vti_common_policy [amd64]
+no-such-netlink-policy: tunl_policy [amd64]
+bad-netlink-attr: rtm_ipv4_policy.RTA_METRICS: should be nlnest [amd64]
+bad-netlink-attr: rtm_ipv4_policy.RTA_ENCAP: should be nlnest [amd64]
+bad-netlink-attr: rtm_ipv6_policy.RTA_METRICS: should be nlnest [amd64]
+bad-netlink-attr: rtm_ipv6_policy.RTA_ENCAP: should be nlnest [amd64]
+no-such-netlink-policy: fra_generic_policy [amd64]
+bad-netlink-attr: nl_neightbl_policy.NDTA_PARMS: should be nlnest [amd64]
+no-such-netlink-policy: nd_policy [amd64]
+no-such-netlink-policy: devconf_ip_policy [amd64]
+bad-netlink-attr: ifla_vf_policy.IFLA_VF_VLAN_LIST: should be nlnest [amd64]
 bad-field-number: ifla_vf_mac: syz=3 kernel=2
 bad-field-size: ifla_vf_mac.mac: syz=6 kernel=32
+bad-netlink-attr: ifla_port_policy.IFLA_PORT_HOST_UUID: expect string [amd64]
+bad-netlink-attr: ifla_xdp_policy.IFLA_XDP_FD: bad size 120, expect 4 [amd64]
diff --git a/sys/linux/socket_netlink_route_sched.txt b/sys/linux/socket_netlink_route_sched.txt
index 3909f79b9..e2033cdb1 100644
--- a/sys/linux/socket_netlink_route_sched.txt
+++ b/sys/linux/socket_netlink_route_sched.txt
@@ -1309,6 +1309,7 @@ tc_u32_key {
 	offmask	int32
 }
 
+# in kernel meta_policy
 tcf_em_meta_policy [
 	TCA_EM_META_HDR		nlattr[TCA_EM_META_HDR, tcf_meta_hdr]
 	TCA_EM_META_LVALUE	nlattr[TCA_EM_META_LVALUE, array[tcf_em_meta_int_var]]
@@ -1332,6 +1333,7 @@ tcf_em_meta_int_var [
 	TCF_META_TYPE_VAR	array[int8, 0:10]
 ] [varlen]
 
+# in kernel em_ipt_policy
 tcf_em_ipt_policy [
 	TCA_EM_IPT_HOOK			nlattr[TCA_EM_IPT_HOOK, flags[nf_inet_hooks, int32]]
 	TCA_EM_IPT_MATCH_NAME		nlattr[TCA_EM_IPT_MATCH_NAME, string["policy"]]
diff --git a/sys/linux/socket_netlink_route_sched.txt.warn b/sys/linux/socket_netlink_route_sched.txt.warn
index eaf7b5ad7..365a79946 100644
--- a/sys/linux/socket_netlink_route_sched.txt.warn
+++ b/sys/linux/socket_netlink_route_sched.txt.warn
@@ -1,5 +1,73 @@
 no-such-struct: tcm_handle
-no-such-struct: tca_kind_options_t
+no-such-netlink-policy: tca_kind_options_t
+no-such-netlink-policy: q_cake_options [amd64]
+no-such-netlink-policy: q_cbq_options [amd64]
+no-such-netlink-policy: q_cbs_options [amd64]
+no-such-netlink-policy: q_choke_options [amd64]
+no-such-netlink-policy: q_codel_options [amd64]
+no-such-netlink-policy: q_dsmark_options [amd64]
+no-such-netlink-policy: q_fq_options [amd64]
+no-such-netlink-policy: q_fq_codel_options [amd64]
+no-such-netlink-policy: q_gred_options [amd64]
+no-such-netlink-policy: q_hhf_options [amd64]
+no-such-netlink-policy: q_htb_options [amd64]
+no-such-netlink-policy: q_mqprio_options [amd64]
+no-such-netlink-policy: q_netem_options [amd64]
+no-such-netlink-policy: netem_loss_policy [amd64]
+no-such-netlink-policy: q_pie_options [amd64]
+no-such-netlink-policy: q_red_options [amd64]
+no-such-netlink-policy: q_sfb_options [amd64]
+no-such-netlink-policy: tc_taprio_sched_entries [amd64]
+no-such-netlink-policy: tc_taprio_sched_entry [amd64]
+no-such-netlink-policy: tc_taprio_options [amd64]
+no-such-netlink-policy: q_tbf_options [amd64]
+no-such-netlink-policy: c_atm_options [amd64]
+no-such-netlink-policy: c_drr_options [amd64]
+no-such-netlink-policy: c_dsmark_options [amd64]
+no-such-netlink-policy: c_hfsc_options [amd64]
+no-such-netlink-policy: c_htb_options [amd64]
+no-such-netlink-policy: c_qfq_options [amd64]
+no-such-netlink-policy: f_basic_options [amd64]
+no-such-netlink-policy: tca_bpf_ops [amd64]
+no-such-netlink-policy: f_cgroup_options [amd64]
+no-such-netlink-policy: f_flow_options [amd64]
+no-such-netlink-policy: tc_flower_key_enc_opts_geneve [amd64]
+no-such-netlink-policy: tc_flower_key_enc_opts [amd64]
+no-such-netlink-policy: f_flower_options [amd64]
+no-such-netlink-policy: f_fw_options [amd64]
+no-such-netlink-policy: f_matchall_options [amd64]
+no-such-netlink-policy: f_route_options [amd64]
+no-such-netlink-policy: f_rfvp_options [amd64]
+no-such-netlink-policy: f_rfvp6_options [amd64]
+no-such-netlink-policy: f_tcindex_options [amd64]
+no-such-netlink-policy: f_u32_options [amd64]
+no-such-netlink-policy: tca_actions [amd64]
+no-such-netlink-policy: tca_actions_t [amd64]
+no-such-netlink-policy: m_bpf_options [amd64]
+no-such-netlink-policy: m_connmark_options [amd64]
+no-such-netlink-policy: m_csum_options [amd64]
+no-such-netlink-policy: m_ct_options [amd64]
+no-such-netlink-policy: m_gact_options [amd64]
+no-such-netlink-policy: m_ife_options [amd64]
+no-such-netlink-policy: tca_ife_meta_policy [amd64]
+no-such-netlink-policy: m_ipt_options [amd64]
+no-such-netlink-policy: m_xt_options [amd64]
+no-such-netlink-policy: m_mirred_options [amd64]
+bad-netlink-attr: mpls_policy.TCA_MPLS_TTL: bad min value 0, expect 1 [amd64]
+no-such-netlink-policy: m_nat_options [amd64]
+no-such-netlink-policy: m_pedit_options [amd64]
+no-such-netlink-policy: tca_pedit_keys_ex_policy [amd64]
+no-such-netlink-policy: tca_pedit_key_ex_policy [amd64]
+no-such-netlink-policy: m_police_options [amd64]
+no-such-netlink-policy: m_sample_options [amd64]
+no-such-netlink-policy: m_simple_options [amd64]
+no-such-netlink-policy: m_skbedit_options [amd64]
+no-such-netlink-policy: m_skbmod_options [amd64]
+no-such-netlink-policy: m_tunnel_key_options [amd64]
+no-such-netlink-policy: m_vlan_options [amd64]
+no-such-netlink-policy: action_gd_policy [amd64]
+no-such-netlink-policy: tca_actions_kind_index [amd64]
+no-such-netlink-policy: action_dump_flags [amd64]
 no-such-struct: tc_gen
 bad-field-number: tc_connmark: syz=2 kernel=6
 bad-field-size: tc_connmark.tc_gen/index: syz=20 kernel=4
@@ -37,5 +105,10 @@ bad-field-offset: tc_tunnel_key.t_action/capab: syz=20 kernel=4
 bad-field-number: tc_vlan: syz=2 kernel=6
 bad-field-size: tc_vlan.tc_gen/index: syz=20 kernel=4
 bad-field-offset: tc_vlan.v_action/capab: syz=20 kernel=4
+no-such-netlink-policy: tca_polices [amd64]
+no-such-netlink-policy: tca_ematches [amd64]
+no-such-netlink-policy: tca_ematch_tree_list [amd64]
 no-such-struct: tcf_ematch_hdr_t
+no-such-netlink-policy: tcf_em_meta_policy [amd64]
+no-such-netlink-policy: tcf_em_ipt_policy [amd64]
 no-such-struct: tc_estimator
diff --git a/sys/linux/socket_netlink_xfrm.txt.warn b/sys/linux/socket_netlink_xfrm.txt.warn
index 92ff9247b..f538418d1 100644
--- a/sys/linux/socket_netlink_xfrm.txt.warn
+++ b/sys/linux/socket_netlink_xfrm.txt.warn
@@ -1 +1,2 @@
+no-such-netlink-policy: xfrm_attrs [amd64]
 no-such-struct: xfrm_filter
diff --git a/sys/linux/socket_tipc_netlink.txt.warn b/sys/linux/socket_tipc_netlink.txt.warn
index a64fb7ca2..35a038efa 100644
--- a/sys/linux/socket_tipc_netlink.txt.warn
+++ b/sys/linux/socket_tipc_netlink.txt.warn
@@ -1,2 +1,13 @@
 no-such-struct: tipc_genlmsghdr_t
 no-such-struct: tipc_tlv_desc
+bad-netlink-attr: tipc_nl_policy.TIPC_NLA_BEARER: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_policy.TIPC_NLA_SOCK: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_policy.TIPC_NLA_LINK: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_policy.TIPC_NLA_MEDIA: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_policy.TIPC_NLA_NET: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_policy.TIPC_NLA_MON: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_bearer_policy.TIPC_NLA_BEARER_NAME: expect string [amd64]
+bad-netlink-attr: tipc_nl_bearer_policy.TIPC_NLA_BEARER_PROP: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_link_policy.TIPC_NLA_LINK_PROP: should be nlnest [amd64]
+bad-netlink-attr: tipc_nl_media_policy.TIPC_NLA_MEDIA_PROP: should be nlnest [amd64]
+no-such-netlink-policy: tipc_bearer_udp [amd64]