Index: head/sys/netgraph/ng_base.c
===================================================================
--- head/sys/netgraph/ng_base.c
+++ head/sys/netgraph/ng_base.c
@@ -3815,7 +3815,7 @@
 	item = c->c_arg;
 	/* Do an extra check */
 	if ((rval > 0) && (c->c_func == &ng_callout_trampoline) &&
-	    (NGI_NODE(item) == node)) {
+	    (item != NULL) && (NGI_NODE(item) == node)) {
 		/*
 		 * We successfully removed it from the queue before it ran
 		 * So now we need to unreference everything that was