https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=286219
--- Comment #5 from Bjoern A. Zeeb <b...@freebsd.org> --- (In reply to Graham Perrin from comment #4) So the KASSERT caught what I mentioned in #c2. That means the iv_bss (or rather our local sta) copy went away while we were still holding the ic lock and we were holding a reference for the ni cached there as well. This will need a separate investigation; do you have a core dump again this time to see if there was a firmware crash before as well again? -- You are receiving this mail because: You are the assignee for the bug.