diff --git a/net/mac80211/tx.c b/net/mac80211/tx.c
index dca01d7e6e3e..de8d74a76fb4 100644
--- a/net/mac80211/tx.c
+++ b/net/mac80211/tx.c
@@ -3105,13 +3105,13 @@ void ieee80211_check_fast_xmit(struct sta_info *sta)
 	if (!fast_tx)
 		goto out;
 
- out:
 	/* we might have raced against another call to this function */
 	old = rcu_dereference_protected(sta->fast_tx,
 					lockdep_is_held(&sta->lock));
 	rcu_assign_pointer(sta->fast_tx, fast_tx);
 	if (old)
 		kfree_rcu(old, rcu_head);
+out:
 	spin_unlock_bh(&sta->lock);
 }