299 		struct macsec_rx_sa *rx_sa;  member
785 	struct macsec_rx_sa *rx_sa = macsec_skb_cb(skb)->rx_sa;  in macsec_post_decrypt()  local
786 	struct pcpu_rx_sc_stats *rxsc_stats = this_cpu_ptr(rx_sa->sc->stats);  in macsec_post_decrypt()
790 	spin_lock(&rx_sa->lock);  in macsec_post_decrypt()
791 	if (rx_sa->next_pn >= secy->replay_window)  in macsec_post_decrypt()
792 		lowest_pn = rx_sa->next_pn - secy->replay_window;  in macsec_post_decrypt()
798 		spin_unlock(&rx_sa->lock);  in macsec_post_decrypt()
815 		spin_unlock(&rx_sa->lock);  in macsec_post_decrypt()
829 			this_cpu_inc(rx_sa->stats->InPktsInvalid);  in macsec_post_decrypt()
842 			this_cpu_inc(rx_sa->stats->InPktsOK);  in macsec_post_decrypt()
846 		if (pn >= rx_sa->next_pn)  in macsec_post_decrypt()
847 			rx_sa->next_pn = pn + 1;  in macsec_post_decrypt()
848 		spin_unlock(&rx_sa->lock);  in macsec_post_decrypt()
888 	struct macsec_rx_sa *rx_sa = macsec_skb_cb(skb)->rx_sa;  in macsec_decrypt_done()  local
889 	struct macsec_rx_sc *rx_sc = rx_sa->sc;  in macsec_decrypt_done()
917 	macsec_rxsa_put(rx_sa);  in macsec_decrypt_done()
924 				      struct macsec_rx_sa *rx_sa,  in macsec_decrypt()  argument
946 	req = macsec_alloc_req(rx_sa->key.tfm, &iv, &sg, ret);  in macsec_decrypt()
1079 	struct macsec_rx_sa *rx_sa;  in macsec_handle_frame()  local
1165 	rx_sa = macsec_rxsa_get(rx_sc->sa[macsec_skb_cb(skb)->assoc_num]);  in macsec_handle_frame()
1166 	if (!rx_sa) {  in macsec_handle_frame()
1194 		spin_lock(&rx_sa->lock);  in macsec_handle_frame()
1195 		late = rx_sa->next_pn >= secy->replay_window &&  in macsec_handle_frame()
1196 		       pn < (rx_sa->next_pn - secy->replay_window);  in macsec_handle_frame()
1197 		spin_unlock(&rx_sa->lock);  in macsec_handle_frame()
1207 	macsec_skb_cb(skb)->rx_sa = rx_sa;  in macsec_handle_frame()
1212 		skb = macsec_decrypt(skb, dev, rx_sa, sci, secy);  in macsec_handle_frame()
1217 			macsec_rxsa_put(rx_sa);  in macsec_handle_frame()
1233 	if (rx_sa)  in macsec_handle_frame()
1234 		macsec_rxsa_put(rx_sa);  in macsec_handle_frame()
1250 	macsec_rxsa_put(rx_sa);  in macsec_handle_frame()
1330 static int init_rx_sa(struct macsec_rx_sa *rx_sa, char *sak, int key_len,  in init_rx_sa()  argument
1333 	rx_sa->stats = alloc_percpu(struct macsec_rx_sa_stats);  in init_rx_sa()
1334 	if (!rx_sa->stats)  in init_rx_sa()
1337 	rx_sa->key.tfm = macsec_alloc_tfm(sak, key_len, icv_len);  in init_rx_sa()
1338 	if (IS_ERR(rx_sa->key.tfm)) {  in init_rx_sa()
1339 		free_percpu(rx_sa->stats);  in init_rx_sa()
1340 		return PTR_ERR(rx_sa->key.tfm);  in init_rx_sa()
1343 	rx_sa->active = false;  in init_rx_sa()
1344 	rx_sa->next_pn = 1;  in init_rx_sa()
1345 	refcount_set(&rx_sa->refcnt, 1);  in init_rx_sa()
1346 	spin_lock_init(&rx_sa->lock);  in init_rx_sa()
1351 static void clear_rx_sa(struct macsec_rx_sa *rx_sa)  in clear_rx_sa()  argument
1353 	rx_sa->active = false;  in clear_rx_sa()
1355 	macsec_rxsa_put(rx_sa);  in clear_rx_sa()
1563 	struct macsec_rx_sa *rx_sa;  in get_rxsa_from_nl()  local
1576 	rx_sa = rtnl_dereference(rx_sc->sa[*assoc_num]);  in get_rxsa_from_nl()
1577 	if (!rx_sa)  in get_rxsa_from_nl()
1581 	return rx_sa;  in get_rxsa_from_nl()
1657 	struct macsec_rx_sa *rx_sa;  in macsec_add_rxsa()  local
1691 	rx_sa = rtnl_dereference(rx_sc->sa[assoc_num]);  in macsec_add_rxsa()
1692 	if (rx_sa) {  in macsec_add_rxsa()
1697 	rx_sa = kmalloc(sizeof(*rx_sa), GFP_KERNEL);  in macsec_add_rxsa()
1698 	if (!rx_sa) {  in macsec_add_rxsa()
1703 	err = init_rx_sa(rx_sa, nla_data(tb_sa[MACSEC_SA_ATTR_KEY]),  in macsec_add_rxsa()
1706 		kfree(rx_sa);  in macsec_add_rxsa()
1712 		spin_lock_bh(&rx_sa->lock);  in macsec_add_rxsa()
1713 		rx_sa->next_pn = nla_get_u32(tb_sa[MACSEC_SA_ATTR_PN]);  in macsec_add_rxsa()
1714 		spin_unlock_bh(&rx_sa->lock);  in macsec_add_rxsa()
1718 		rx_sa->active = !!nla_get_u8(tb_sa[MACSEC_SA_ATTR_ACTIVE]);  in macsec_add_rxsa()
1720 	nla_memcpy(rx_sa->key.id, tb_sa[MACSEC_SA_ATTR_KEYID], MACSEC_KEYID_LEN);  in macsec_add_rxsa()
1721 	rx_sa->sc = rx_sc;  in macsec_add_rxsa()
1722 	rcu_assign_pointer(rx_sc->sa[assoc_num], rx_sa);  in macsec_add_rxsa()
1891 	struct macsec_rx_sa *rx_sa;  in macsec_del_rxsa()  local
1906 	rx_sa = get_rxsa_from_nl(genl_info_net(info), attrs, tb_rxsc, tb_sa,  in macsec_del_rxsa()
1908 	if (IS_ERR(rx_sa)) {  in macsec_del_rxsa()
1910 		return PTR_ERR(rx_sa);  in macsec_del_rxsa()
1913 	if (rx_sa->active) {  in macsec_del_rxsa()
1919 	clear_rx_sa(rx_sa);  in macsec_del_rxsa()
2074 	struct macsec_rx_sa *rx_sa;  in macsec_upd_rxsa()  local
2092 	rx_sa = get_rxsa_from_nl(genl_info_net(info), attrs, tb_rxsc, tb_sa,  in macsec_upd_rxsa()
2094 	if (IS_ERR(rx_sa)) {  in macsec_upd_rxsa()
2096 		return PTR_ERR(rx_sa);  in macsec_upd_rxsa()
2100 		spin_lock_bh(&rx_sa->lock);  in macsec_upd_rxsa()
2101 		rx_sa->next_pn = nla_get_u32(tb_sa[MACSEC_SA_ATTR_PN]);  in macsec_upd_rxsa()
2102 		spin_unlock_bh(&rx_sa->lock);  in macsec_upd_rxsa()
2106 		rx_sa->active = nla_get_u8(tb_sa[MACSEC_SA_ATTR_ACTIVE]);  in macsec_upd_rxsa()
2538 			struct macsec_rx_sa *rx_sa = rtnl_dereference(rx_sc->sa[i]);  in dump_secy()  local
2541 			if (!rx_sa)  in dump_secy()
2560 			if (copy_rx_sa_stats(skb, rx_sa->stats)) {  in dump_secy()
2570 			    nla_put_u32(skb, MACSEC_SA_ATTR_PN, rx_sa->next_pn) ||  in dump_secy()
2571 			    nla_put(skb, MACSEC_SA_ATTR_KEYID, MACSEC_KEYID_LEN, rx_sa->key.id) ||  in dump_secy()
2572 			    nla_put_u8(skb, MACSEC_SA_ATTR_ACTIVE, rx_sa->active)) {  in dump_secy()