Christian, I am getting this crash for the carl9170 in recent kernels, though I have not yet bisected it. It hangs the networking system completely (ifconfig -a never returns) and it prevents a reboot. I have to use sysrq-b to 'cleanly' reboot the system. I can apply and test any patches. usbcore: registered new interface driver carl9170 usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] usb 1-1: firmware API: 1.9.6 2012-07-07 ath: EEPROM regdomain: 0x3a ath: EEPROM indicates we should expect a direct regpair map ath: Country alpha2 being used: BM ath: Regpair used: 0x3a PREEMPT CPU: 0 PID: 44 Comm: kworker/0:2 Not tainted 5.1.0-rc7.pentiumii-laptop #1446 Workqueue: events request_firmware_work_func EIP: nl80211_send_wiphy+0x558/0x1a58 [cfg80211] Code: 0f 85 73 02 00 00 80 7f 16 00 75 0c 80 7f 2c 00 0f 84 a4 00 00 00 eb 6a 8d 47 19 ba 03 00 00 00 50 b9 10 00 00 00 8b 75 bc c9 <f0> e8 2a ae 81 f8 5a cd c0 0f 85 5d 14 00 00 4d b7 4f 14 ba 04 00 EAX: c891205d EBX: c4a76000 ECX: 00000010 EDX: 00000003 ESI: c76fa5a0 EDI: c8912044 EBP: c036de14 ESP: c036ddd4 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010202 CR0: 80050033 CR2: b716c540 CR3: 07618000 CR4: 00000290 Call Trace: ? nl80211_notify_wiphy+0x52/0x84 [cfg80211] wiphy_register+0x303/0x624 [cfg80211] ? ieee80211_register_hw+0x325/0x94a [mac80211] ? __kmalloc+0x8c/0x9c ? ieee80211_cs_list_valid+0xb/0x31 [mac80211] ieee80211_register_hw+0x68f/0x94a [mac80211] ? ath_reg_apply_radar_flags.isra.4+0xb/0x62 [ath] ? ath_reg_apply_world_flags+0xa/0xba [ath] ? ath_regd_init+0xd8/0xec [ath] ? carl9170_op_bss_info_changed+0x16a/0x16a [carl9170] carl9170_register+0x1f5/0x36d [carl9170] ? carl9170_register+0x1f5/0x36d [carl9170] carl9170_usb_firmware_step2+0x226/0x251 [carl9170] request_firmware_work_func+0x2a/0x51 process_one_work+0x134/0x260 worker_thread+0x18b/0x24a kthread+0xcd/0xcf ? cancel_delayed_work_sync+0x14/0x14 ? kthread_create_worker_on_cpu+0x1c/0x1c ret_from_fork+0x19/0x24 Modules linked in: carl9170 mac80211 ath cfg80211 r8169 realtek libphy rfkill uhci_hcd ehci_pci ehci_hcd pcmcia usbcore i2c_piix4 i2c_core usb_common yenta_socket pcmcia_rsrc pcmcia_core autofs4 ---[ end trace dbf0bc816dabbb51 ]--- EIP: nl80211_send_wiphy+0x558/0x1a58 [cfg80211] Code: 0f 85 73 02 00 00 80 7f 16 00 75 0c 80 7f 2c 00 0f 84 a4 00 00 00 eb 6a 8d 47 19 ba 03 00 00 00 50 b9 10 00 00 00 8b 75 bc c9 <f0> e8 2a ae 81 f8 5a cd c0 0f 85 5d 14 00 00 4d b7 4f 14 ba 04 00 EAX: c891205d EBX: c4a76000 ECX: 00000010 EDX: 00000003 ESI: c76fa5a0 EDI: c8912044 EBP: c036de14 ESP: c15b02b8 DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068 EFLAGS: 00010202 CR0: 80050033 CR2: b7271500 CR3: 0770f000 CR4: 00000290 r8169 0000:06:00.0 enp6s0: Link is Up - 1Gbps/Full - flow control rx/tx - Matthew Whitehead