49 		NL_SET_ERR_MSG(extack, "Invalid AUTH/CRYPT/COMP attribute length");  in verify_one_alg()
60 		NL_SET_ERR_MSG(extack, "Invalid algorithm attribute type");  in verify_one_alg()
79 		NL_SET_ERR_MSG(extack, "Invalid AUTH_TRUNC attribute length");  in verify_auth_trunc()
97 		NL_SET_ERR_MSG(extack, "Invalid AEAD attribute length");  in verify_aead()
125 		NL_SET_ERR_MSG(extack, "Invalid security context length");  in verify_sec_ctx_len()
141 			NL_SET_ERR_MSG(extack, "Missing required attribute for ESN");  in verify_replay()
150 		NL_SET_ERR_MSG(extack, "ESN bitmap length must be <= 128");  in verify_replay()
156 		NL_SET_ERR_MSG(extack, "ESN attribute is too short to fit the full bitmap length");  in verify_replay()
162 		NL_SET_ERR_MSG(extack, "ESN only supported for ESP and AH");  in verify_replay()
167 		NL_SET_ERR_MSG(extack, "ESN not compatible with legacy replay_window");  in verify_replay()
173 			NL_SET_ERR_MSG(extack, "Replay window should be 0 for output SA");  in verify_replay()
177 			NL_SET_ERR_MSG(extack,  in verify_replay()
182 			NL_SET_ERR_MSG(extack, "Replay bmp_len should 0 for output SA");  in verify_replay()
189 			NL_SET_ERR_MSG(extack,  in verify_replay()
216 		NL_SET_ERR_MSG(extack, "IPv6 support disabled");  in verify_newsa_info()
221 		NL_SET_ERR_MSG(extack, "Invalid address family");  in verify_newsa_info()
234 			NL_SET_ERR_MSG(extack, "Invalid prefix length in selector (must be <= 32 for IPv4)");  in verify_newsa_info()
243 			NL_SET_ERR_MSG(extack, "Invalid prefix length in selector (must be <= 128 for IPv6)");  in verify_newsa_info()
249 		NL_SET_ERR_MSG(extack, "IPv6 support disabled");  in verify_newsa_info()
255 		NL_SET_ERR_MSG(extack, "Invalid address family in selector");  in verify_newsa_info()
264 			NL_SET_ERR_MSG(extack, "Missing required attribute for AH: AUTH_TRUNC or AUTH");  in verify_newsa_info()
272 			NL_SET_ERR_MSG(extack, "Invalid attributes for AH: AEAD, CRYPT, COMP, TFCPAD");  in verify_newsa_info()
279 			NL_SET_ERR_MSG(extack, "Invalid attribute for ESP: COMP");  in verify_newsa_info()
287 …NL_SET_ERR_MSG(extack, "Missing required attribute for ESP: at least one of AUTH, AUTH_TRUNC, CRYP…  in verify_newsa_info()
295 …NL_SET_ERR_MSG(extack, "Invalid attribute combination for ESP: AEAD can't be used with AUTH, AUTH_…  in verify_newsa_info()
301 			NL_SET_ERR_MSG(extack, "TFC padding can only be used in tunnel mode");  in verify_newsa_info()
308 			NL_SET_ERR_MSG(extack, "Missing required attribute for COMP: COMP");  in verify_newsa_info()
317 			NL_SET_ERR_MSG(extack, "Invalid attributes for COMP: AEAD, AUTH, AUTH_TRUNC, CRYPT, TFCPAD");  in verify_newsa_info()
322 			NL_SET_ERR_MSG(extack, "SPI is too large for COMP (must be < 0x10000)");  in verify_newsa_info()
338 			NL_SET_ERR_MSG(extack, "Invalid attributes for DSTOPTS/ROUTING");  in verify_newsa_info()
343 			NL_SET_ERR_MSG(extack, "Missing required COADDR attribute for DSTOPTS/ROUTING");  in verify_newsa_info()
350 		NL_SET_ERR_MSG(extack, "Unsupported protocol");  in verify_newsa_info()
378 		NL_SET_ERR_MSG(extack, "Unsupported mode");  in verify_newsa_info()
386 			NL_SET_ERR_MSG(extack, "MTIMER_THRESH attribute can only be set on ENCAP states");  in verify_newsa_info()
392 			NL_SET_ERR_MSG(extack,  in verify_newsa_info()
401 			NL_SET_ERR_MSG(extack, "Flag DECAP_DSCP should not be set for output SA");  in verify_newsa_info()
407 			NL_SET_ERR_MSG(extack, "Flag ICMP should not be set for output SA");  in verify_newsa_info()
413 			NL_SET_ERR_MSG(extack, "Flag WILDRECV should not be set for output SA");  in verify_newsa_info()
419 			NL_SET_ERR_MSG(extack, "Replay window should be 0 for output SA");  in verify_newsa_info()
430 				NL_SET_ERR_MSG(extack,  in verify_newsa_info()
440 			NL_SET_ERR_MSG(extack, "Flag NOPMTUDISC should not be set for input SA");  in verify_newsa_info()
449 				NL_SET_ERR_MSG(extack, "Flag DONT_ENCAP_DSCP should not be set for input SA");  in verify_newsa_info()
455 				NL_SET_ERR_MSG(extack, "Flag OSEQ_MAY_WRAP should not be set for input SA");  in verify_newsa_info()
481 		NL_SET_ERR_MSG(extack, "Requested COMP algorithm not found");  in attach_one_algo()
508 		NL_SET_ERR_MSG(extack, "Requested CRYPT algorithm not found");  in attach_crypt()
537 		NL_SET_ERR_MSG(extack, "Requested AUTH algorithm not found");  in attach_auth()
568 		NL_SET_ERR_MSG(extack, "Requested AUTH_TRUNC algorithm not found");  in attach_auth_trunc()
572 		NL_SET_ERR_MSG(extack, "Invalid length requested for truncated ICV");  in attach_auth_trunc()
602 		NL_SET_ERR_MSG(extack, "Requested AEAD algorithm not found");  in attach_aead()
633 		NL_SET_ERR_MSG(extack, "ESN attribute is too short");  in xfrm_replay_verify_len()
638 		NL_SET_ERR_MSG(extack, "New ESN size doesn't match the existing SA's ESN size");  in xfrm_replay_verify_len()
643 		NL_SET_ERR_MSG(extack, "New ESN bitmap size doesn't match the existing SA's ESN bitmap");  in xfrm_replay_verify_len()
648 		NL_SET_ERR_MSG(extack, "ESN replay window is longer than the bitmap");  in xfrm_replay_verify_len()
985 		NL_SET_ERR_MSG(extack, "SA is in use by tunnels");  in xfrm_del_sa()
1542 			NL_SET_ERR_MSG(extack, "Invalid SPD_IPV4_HTHRESH attribute length");  in xfrm_set_spdinfo()
1547 			NL_SET_ERR_MSG(extack, "Invalid hash threshold (must be <= 32 for IPv4)");  in xfrm_set_spdinfo()
1555 			NL_SET_ERR_MSG(extack, "Invalid SPD_IPV6_HTHRESH attribute length");  in xfrm_set_spdinfo()
1560 			NL_SET_ERR_MSG(extack, "Invalid hash threshold (must be <= 128 for IPv6)");  in xfrm_set_spdinfo()
1734 		NL_SET_ERR_MSG(extack, "Target ACQUIRE not found");  in xfrm_alloc_userspi()
1779 		NL_SET_ERR_MSG(extack, "Invalid policy direction");  in verify_policy_dir()
1796 		NL_SET_ERR_MSG(extack, "Invalid policy type");  in verify_policy_type()
1816 		NL_SET_ERR_MSG(extack, "Invalid policy share");  in verify_newpolicy_info()
1826 		NL_SET_ERR_MSG(extack, "Invalid policy action");  in verify_newpolicy_info()
1833 			NL_SET_ERR_MSG(extack, "Invalid prefix length in selector (must be <= 32 for IPv4)");  in verify_newpolicy_info()
1842 			NL_SET_ERR_MSG(extack, "Invalid prefix length in selector (must be <= 128 for IPv6)");  in verify_newpolicy_info()
1848 		NL_SET_ERR_MSG(extack, "IPv6 support disabled");  in verify_newpolicy_info()
1853 		NL_SET_ERR_MSG(extack, "Invalid selector family");  in verify_newpolicy_info()
1861 		NL_SET_ERR_MSG(extack, "Policy index doesn't match direction");  in verify_newpolicy_info()
1912 …NL_SET_ERR_MSG(extack, "Template count must be <= XFRM_MAX_DEPTH (" __stringify(XFRM_MAX_DEPTH) ")…  in validate_tmpl()
1933 				NL_SET_ERR_MSG(extack, "Mode in optional template not allowed in outbound policy");  in validate_tmpl()
1939 				NL_SET_ERR_MSG(extack, "Mode in template doesn't support a family change");  in validate_tmpl()
1945 …NL_SET_ERR_MSG(extack, "Mode in template must be < XFRM_MODE_MAX (" __stringify(XFRM_MODE_MAX) ")"…  in validate_tmpl()
1959 			NL_SET_ERR_MSG(extack, "Invalid family in template");  in validate_tmpl()
1964 			NL_SET_ERR_MSG(extack, "Invalid XFRM protocol in template");  in validate_tmpl()
2661 		NL_SET_ERR_MSG(extack, "Missing required attribute for AE");  in xfrm_new_ae()
2667 		NL_SET_ERR_MSG(extack, "NLM_F_REPLACE flag is required");  in xfrm_new_ae()
2678 		NL_SET_ERR_MSG(extack, "SA must be in VALID state");  in xfrm_new_ae()
2818 		NL_SET_ERR_MSG(extack, "SA must be in VALID state");  in xfrm_add_sa_expire()
2922 		NL_SET_ERR_MSG(extack, "Invalid number of SAs to migrate, must be 0 < num <= XFRM_MAX_DEPTH (6)");  in copy_from_user_migrate()
2958 		NL_SET_ERR_MSG(extack, "Missing required MIGRATE attribute");  in xfrm_do_migrate()
3243 			NL_SET_ERR_MSG(extack, "Invalid attribute SA_DIR");  in xfrm_reject_unused_attr()