Index: sys/dev/iwi/if_iwi.c
===================================================================
--- sys/dev/iwi/if_iwi.c	(revision 235132)
+++ sys/dev/iwi/if_iwi.c	(working copy)
@@ -2811,7 +2811,7 @@ iwi_auth_and_assoc(struct iwi_softc *sc, struct ie
 {
 	struct ieee80211com *ic = vap->iv_ic;
 	struct ifnet *ifp = vap->iv_ifp;
-	struct ieee80211_node *ni = vap->iv_bss;
+	struct ieee80211_node *ni;
 	struct iwi_configuration config;
 	struct iwi_associate *assoc = &sc->assoc;
 	struct iwi_rateset rs;
@@ -2826,6 +2826,8 @@ iwi_auth_and_assoc(struct iwi_softc *sc, struct ie
 		return (-1);
 	}
 
+	ni = ieee80211_ref_node(vap->iv_bss);
+
 	IWI_STATE_BEGIN(sc, IWI_FW_ASSOCIATING);
 	error = 0;
 	mode = 0;
@@ -2982,6 +2984,8 @@ done:
 	if (error)
 		IWI_STATE_END(sc, IWI_FW_ASSOCIATING);
 
+	ieee80211_free_node(ni);
+
 	return (error);
 }