48 	struct tid_ampdu_rx *tid_rx =  in ieee80211_free_tid_rx()  local
52 	for (i = 0; i < tid_rx->buf_size; i++)  in ieee80211_free_tid_rx()
53 		__skb_queue_purge(&tid_rx->reorder_buf[i]);  in ieee80211_free_tid_rx()
54 	kfree(tid_rx->reorder_buf);  in ieee80211_free_tid_rx()
55 	kfree(tid_rx->reorder_time);  in ieee80211_free_tid_rx()
56 	kfree(tid_rx);  in ieee80211_free_tid_rx()
63 	struct tid_ampdu_rx *tid_rx;  in ___ieee80211_stop_rx_ba_session()  local
67 	tid_rx = rcu_dereference_protected(sta->ampdu_mlme.tid_rx[tid],  in ___ieee80211_stop_rx_ba_session()
70 	if (!tid_rx)  in ___ieee80211_stop_rx_ba_session()
73 	RCU_INIT_POINTER(sta->ampdu_mlme.tid_rx[tid], NULL);  in ___ieee80211_stop_rx_ba_session()
92 	del_timer_sync(&tid_rx->session_timer);  in ___ieee80211_stop_rx_ba_session()
95 	spin_lock_bh(&tid_rx->reorder_lock);  in ___ieee80211_stop_rx_ba_session()
96 	tid_rx->removed = true;  in ___ieee80211_stop_rx_ba_session()
97 	spin_unlock_bh(&tid_rx->reorder_lock);  in ___ieee80211_stop_rx_ba_session()
98 	del_timer_sync(&tid_rx->reorder_timer);  in ___ieee80211_stop_rx_ba_session()
100 	call_rcu(&tid_rx->rcu_head, ieee80211_free_tid_rx);  in ___ieee80211_stop_rx_ba_session()
148 	struct tid_ampdu_rx *tid_rx;  in sta_rx_agg_session_timer_expired()  local
152 	tid_rx = rcu_dereference(sta->ampdu_mlme.tid_rx[*ptid]);  in sta_rx_agg_session_timer_expired()
153 	if (!tid_rx) {  in sta_rx_agg_session_timer_expired()
158 	timeout = tid_rx->last_rx + TU_TO_JIFFIES(tid_rx->timeout);  in sta_rx_agg_session_timer_expired()
160 		mod_timer(&tid_rx->session_timer, timeout);  in sta_rx_agg_session_timer_expired()
280 	if (sta->ampdu_mlme.tid_rx[tid]) {  in __ieee80211_start_rx_ba_session()
345 	rcu_assign_pointer(sta->ampdu_mlme.tid_rx[tid], tid_agg_rx);  in __ieee80211_start_rx_ba_session()