ok, so I think you're hitting the iwn bug with scanning hanging. net80211 does scan-channel-at-a-time and instead we should be issuing a scan command once and then waiting for the results. There's not much we can do about it without finishing redoing how the scan stuff works completely in iwn. -adrian