Index: sys/dev/rtwn/usb/rtwn_usb_rx.c
===================================================================
--- sys/dev/rtwn/usb/rtwn_usb_rx.c
+++ sys/dev/rtwn/usb/rtwn_usb_rx.c
@@ -400,13 +400,13 @@
 		 * ieee80211_input() because here is at the end of a USB
 		 * callback and safe to unlock.
 		 */
-		NET_EPOCH_ENTER(et);
 		while (m != NULL) {
 			next = m->m_nextpkt;
 			m->m_nextpkt = NULL;
 
 			ni = rtwn_rx_frame(sc, m);
 
+			NET_EPOCH_ENTER(et);
 			RTWN_UNLOCK(sc);
 
 			if (ni != NULL) {
@@ -416,9 +416,9 @@
 				(void)ieee80211_input_mimo_all(ic, m);
 			}
 			RTWN_LOCK(sc);
+			NET_EPOCH_EXIT(et);
 			m = next;
 		}
-		NET_EPOCH_EXIT(et);
 		break;
 	default:
 		/* needs it to the inactive queue due to a error. */