Disable Spread Spectrum (SSC) on the TX2 with a 28.2 release,but kernel stop

Hi,

I have use Jetpack-L4T-3.2-LINUX-X64 on a TX2. we use x4+x1 pcie mode, and x4 port connect PEX8717 pci bridge chip.

However, we need to have spread spectrum disabled on our custom board.
we refer the BBS by ShaneCCC。
https://devtalk.nvidia.com/default/topic/1025480/jetson-tx1/disable-spread-spectrum-ssc-on-the-tx1-with-a-28-1-release-/
we modify the bpmb-fw-dtb,but the kernel stop at PCI enum.

Starting kernel ...

[    6.431749] tegra-pcie 10003000.pcie-controller: probing port 0, using 4 lanes
[    6.442349] tegra-pcie 10003000.pcie-controller: probing port 2, using 1 lanes
[    6.487974] dhd_module_init in
[    6.492629] tegra_net_perf_init: cannot get wifi sclk
[    6.499004] found wifi platform device bcmdhd_wlan
[    6.506069] wifi_platform_get_country_code_map: could not get country_code_map
[    6.515180] wifi_plat_dev_drv_probe:platform country code map is not available
[    6.524605] Power-up adapter 'DHD generic adapter'
[    6.530872] wifi_platform_set_power = 1
[    6.736228] wifi_platform_bus_enumerate device present 1
[    6.739498] Wake76 for irq=199
[    6.739499] Wake77 for irq=199
[    6.739500] Wake78 for irq=199
[    6.739501] Wake79 for irq=199
[    6.739501] Wake80 for irq=199
[    6.739502] Wake81 for irq=199
[    6.739503] Wake82 for irq=199
[    6.739712] xhci-tegra 3530000.xhci: can't get usb3-0 phy (-517)
[    6.740013] Wake76 for irq=199
[    6.740014] Wake77 for irq=199
[    6.740015] Wake78 for irq=199
[    6.740015] Wake79 for irq=199
[    6.740016] Wake80 for irq=199
[    6.740017] Wake81 for irq=199
[    6.740017] Wake82 for irq=199
[    6.740045] tegra-xotg xotg: usb2 phy is not available yet
[    6.740166] tegra-usb-cd usb_cd: otg phy is not available yet
[    6.740598] tegra-xudc-new 3550000.xudc: usb2 phy is not available yet
[    6.740745] tegra186-padctl 3520000.pinctrl: padctl mmio start 0x0000000003520000 end 0x0000000003520fff
[    6.740750] tegra186-padctl 3520000.pinctrl: ao mmio start 0x0000000003540000 end 0x0000000003540fff
[    6.740788] tegra186-padctl 3520000.pinctrl: FUSE_SKU_USB_CALIB_0 0x2cbc94
[    6.740791] tegra186-padctl 3520000.pinctrl: FUSE_USB_CALIB_EXT_0 0x9
[    6.741517] tegra186-padctl 3520000.pinctrl: using UTMI port 0 for otg
[    6.754084] wifi_platform_bus_enumerate device present 0
[    6.754458] F1 signature read @0x18000000=0x17214354
[    6.756518] Wake76 for irq=199
[    6.756519] Wake77 for irq=199
[    6.756520] Wake78 for irq=199
[    6.756521] Wake79 for irq=199
[    6.756521] Wake80 for irq=199
[    6.756522] Wake81 for irq=199
[    6.756523] Wake82 for irq=199
[    6.756765] xhci-tegra 3530000.xhci: can't get usb3-0 phy (-517)
[    6.757173] Wake76 for irq=199
[    6.757174] Wake77 for irq=199
[    6.757175] Wake78 for irq=199
[    6.757175] Wake79 for irq=199
[    6.757176] Wake80 for irq=199
[    6.757177] Wake81 for irq=199
[    6.757177] Wake82 for irq=199
[    6.757219] tegra-xotg xotg: usb2 phy is not available yet
[    6.757383] tegra-usb-cd usb_cd: otg phy is not available yet
[    6.757843] tegra-xudc-new 3550000.xudc: usb2 phy is not available yet
[    6.757953] F1 signature OK, socitype:0x1 chip:0x4354 rev:0x1 pkg:0x2
[    6.758056] tegra186-padctl 3520000.pinctrl: padctl mmio start 0x0000000003520000 end 0x0000000003520fff
[    6.758061] tegra186-padctl 3520000.pinctrl: ao mmio start 0x0000000003540000 end 0x0000000003540fff
[    6.758101] tegra186-padctl 3520000.pinctrl: FUSE_SKU_USB_CALIB_0 0x2cbc94
[    6.758104] tegra186-padctl 3520000.pinctrl: FUSE_USB_CALIB_EXT_0 0x9
[    6.758433] DHD: dongle ram size is set to 786432(orig 786432) at 0x180000
[    6.758488] wifi_platform_prealloc: failed to alloc static mem section 7
[    6.758494] wifi_platform_get_mac_addr
[    6.758974] tegra186-padctl 3520000.pinctrl: using UTMI port 0 for otg
[    6.760018] CFG80211-ERROR) wl_setup_wiphy : Registering Vendor80211
[    6.793420] cfg80211: World regulatory domain updated:
[    6.793427] cfg80211:  DFS Master region: unset
[    6.793427] cfg80211:   (start_freq - end_freq @ bandwidth), (max_antenna_gain, max_eirp), (dfs_cac_time)
[    6.793433] cfg80211:   (2402000 KHz - 2472000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    6.793437] cfg80211:   (2457000 KHz - 2482000 KHz @ 40000 KHz), (N/A, 2000 mBm), (N/A)
[    6.793440] cfg80211:   (2474000 KHz - 2494000 KHz @ 20000 KHz), (N/A, 2000 mBm), (N/A)
[    6.793444] cfg80211:   (5170000 KHz - 5250000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (N/A)
[    6.793448] cfg80211:   (5250000 KHz - 5330000 KHz @ 80000 KHz, 160000 KHz AUTO), (N/A, 2000 mBm), (0 s)
[    6.793452] cfg80211:   (5490000 KHz - 5730000 KHz @ 160000 KHz), (N/A, 2000 mBm), (0 s)
[    6.793455] cfg80211:   (5735000 KHz - 5835000 KHz @ 80000 KHz), (N/A, 2000 mBm), (N/A)
[    6.793458] cfg80211:   (57240000 KHz - 63720000 KHz @ 2160000 KHz), (N/A, 0 mBm), (N/A)
[    6.798040] wl_create_event_handler(): thread:wl_event_handler:202 started
[    6.798045] CFG80211-ERROR) wl_event_handler : tsk Enter, tsk = 0xffffffc1e12c1a70
[    6.798135] dhd_attach(): thread:dhd_watchdog_thread:203 started
[    6.798159] dhd_attach(): thread:dhd_dpc:204 started
[    6.798188] dhd_attach(): thread:dhd_rxf:205 started
[    6.798195] dhd_deferred_work_init: work queue initialized 
[    6.798569] Dongle Host Driver, version 1.201.82 (r)
[    6.798569] Compiled in drivers/net/wireless/bcmdhd on Mar  1 2018 at 20:46:20
[    6.799083] tegra_sysfs_register
[    6.799113] Register interface [wlan0]  MAC: 00:04:4b:8d:6c:c5
[    6.799113] 
[    6.799116] dhd_prot_ioctl : bus is down. we have nothing to do
[    6.799195] sdhci-tegra 3440000.sdhci: Tuning already done, restoring the best tap value : 67
[    6.800235] wifi_platform_set_power = 0
[    6.938353] tegra-pcie 10003000.pcie-controller: link 2 down, retrying
[    7.006370] Wake76 for irq=199
[    7.006371] Wake77 for irq=199
[    7.006372] Wake78 for irq=199
[    7.006373] Wake79 for irq=199
[    7.006373] Wake80 for irq=199
[    7.006374] Wake81 for irq=199
[    7.006375] Wake82 for irq=199
[    7.006602] xhci-tegra 3530000.xhci: can't get usb3-0 phy (-517)
[    7.007033] Wake76 for irq=199
[    7.007034] Wake77 for irq=199
[    7.007035] Wake78 for irq=199
[    7.007036] Wake79 for irq=199
[    7.007036] Wake80 for irq=199
[    7.007037] Wake81 for irq=199
[    7.007038] Wake82 for irq=199
[    7.007088] tegra-xotg xotg: usb2 phy is not available yet
[    7.007278] tegra-usb-cd usb_cd: otg phy is not available yet
[    7.007817] tegra-xudc-new 3550000.xudc: usb2 phy is not available yet
[    7.008053] tegra186-padctl 3520000.pinctrl: padctl mmio start 0x0000000003520000 end 0x0000000003520fff
[    7.008058] tegra186-padctl 3520000.pinctrl: ao mmio start 0x0000000003540000 end 0x0000000003540fff
[    7.008095] tegra186-padctl 3520000.pinctrl: FUSE_SKU_USB_CALIB_0 0x2cbc94
[    7.008098] tegra186-padctl 3520000.pinctrl: FUSE_USB_CALIB_EXT_0 0x9
[    7.008988] tegra186-padctl 3520000.pinctrl: using UTMI port 0 for otg
[    7.348209] tegra-pcie 10003000.pcie-controller: link 2 down, retrying
[    7.774227] tegra-pcie 10003000.pcie-controller: link 2 down, retrying
[    7.783642] tegra-pcie 10003000.pcie-controller: link 2 down, ignoring
[    7.792053] tegra-pcie 10003000.pcie-controller: PCI host bridge to bus 0000:00
[    7.801354] pci_bus 0000:00: root bus resource [mem 0x50100000-0x57ffffff]
[    7.809326] pci_bus 0000:00: root bus resource [mem 0x58000000-0x7fffffff pref]
[    7.809330] pci_bus 0000:00: root bus resource [bus 00-ff]
[    7.809332] pci_bus 0000:00: root bus resource [io  0x1000-0xffff]
[    7.809358] pci 0000:00:01.0: [10de:10e5] type 01 class 0x060400
[    7.809450] pci 0000:00:01.0: PME# supported from D0 D1 D2 D3hot D3cold
[    7.809695] iommu: Adding device 0000:00:01.0 to group 55
[    7.809778] pci 0000:00:01.0: bridge configuration invalid ([bus 00-00]), reconfiguring

I followed the kernel source code, kernel stop at

tegra_pcie_scan_bus
  pci_scan_child_bus
    pci_scan_slot
      pci_scan_single_device
        pci_scan_device
          pci_bus_read_dev_vendor_id
	    if (pci_bus_read_config_dword(bus, devfn, PCI_VENDOR_ID, l))
	      return false;

it stop in pci_bus_read_config_dword(bus, devfn, PCI_VENDOR_ID, l).
Thanks for any help.

@1209319251
If it stop in the pci_bus_read_config_dword() that could be the device have problem to disable the SSC.