--- a/ath/if_ath.c +++ b/ath/if_ath.c @@ -13534,7 +13534,7 @@ cleanup_ath_buf(struct ath_softc *sc, st bus_unmap_single( sc->sc_bdev, bf->bf_skbaddrff[i], - (direction == BUS_DMA_TODEVICE ? + (direction == BUS_DMA_FROMDEVICE ? sc->sc_rxbufsize : ffskb->len), direction); bf->bf_skbaddrff[i] = 0;