[PATCH ipsec-next v5 7/8] xfrm: add error messages to state migration
From: Antony Antony
Date: Tue Jan 27 2026 - 05:49:34 EST
Add descriptive(extack) error messages for all error paths
in state migration. This improves diagnostics by
providing clear feedback when migration fails.
Signed-off-by: Antony Antony <antony.antony@xxxxxxxxxxx>
---
v4->v5: - added this patch
---
net/xfrm/xfrm_state.c | 13 ++++++++++---
1 file changed, 10 insertions(+), 3 deletions(-)
diff --git a/net/xfrm/xfrm_state.c b/net/xfrm/xfrm_state.c
index 88a362e46972..2e03871ae872 100644
--- a/net/xfrm/xfrm_state.c
+++ b/net/xfrm/xfrm_state.c
@@ -2129,15 +2129,21 @@ struct xfrm_state *xfrm_state_migrate_create(struct xfrm_state *x,
struct xfrm_state *xc;
xc = xfrm_state_clone_and_setup(x, encap, m);
- if (!xc)
+ if (!xc) {
+ NL_SET_ERR_MSG(extack, "Failed to clone and setup state");
return NULL;
+ }
- if (xfrm_init_state(xc) < 0)
+ if (xfrm_init_state(xc) < 0) {
+ NL_SET_ERR_MSG(extack, "Failed to initialize migrated state");
goto error;
+ }
/* configure the hardware if offload is requested */
- if (xuo && xfrm_dev_state_add(net, xc, xuo, extack))
+ if (xuo && xfrm_dev_state_add(net, xc, xuo, extack)) {
+ NL_SET_ERR_MSG(extack, "Failed to initialize state offload");
goto error;
+ }
return xc;
error:
@@ -2161,6 +2167,7 @@ int xfrm_state_migrate_install(const struct xfrm_state *x,
xfrm_state_insert(xc);
} else {
if (xfrm_state_add(xc) < 0) {
+ NL_SET_ERR_MSG(extack, "Failed to add migrated state");
if (xuo)
xfrm_dev_state_delete(xc);
xc->km.state = XFRM_STATE_DEAD;
--
2.39.5