+++ /dev/null
---- a/ath/if_ath.c
-+++ b/ath/if_ath.c
-@@ -13534,7 +13534,7 @@ cleanup_ath_buf(struct ath_softc *sc, st
- bus_unmap_single(
- sc->sc_bdev,
- bf->bf_skbaddrff[i],
-- (direction == BUS_DMA_TODEVICE ?
-+ (direction == BUS_DMA_FROMDEVICE ?
- sc->sc_rxbufsize : ffskb->len),
- direction);
- bf->bf_skbaddrff[i] = 0;