--- a/ath/if_ath.c
+++ b/ath/if_ath.c
@@ -13511,7 +13511,7 @@ cleanup_ath_buf(struct ath_softc *sc, st
bus_unmap_single(
sc->sc_bdev,
bf->bf_skbaddrff[i],
- (direction == BUS_DMA_TODEVICE ?
+ (direction == BUS_DMA_FROMDEVICE ?
sc->sc_rxbufsize : ffskb->len),
direction);
bf->bf_skbaddrff[i] = 0;