PCIe wifi crash when connect to AP

We are porting a new PCIe wifi module(qcom,fg50x)on tx2-nx,use command lspci can find the device as follow
1.:~$lspci -vvvv

00:01.0 PCI bridge: NVIDIA Corporation Device 10e5 (rev a1) (prog-if 00 [Normal decode])
        Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR+ FastB2B- DisINTx-
        Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
        Latency: 0
        Interrupt: pin A routed to IRQ 373
        Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
        I/O behind bridge: 0000f000-00000fff
        Memory behind bridge: 40100000-401fffff
        Prefetchable memory behind bridge: 00000000fff00000-00000000000fffff
        Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
        BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
                PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
        Capabilities: <access denied>
        Kernel driver in use: pcieport

01:00.0 Unassigned class [ff00]: Qualcomm Device 1101
        Subsystem: Qualcomm Device 0108
        Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
        Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
        Region 0: Memory at 40100000 (64-bit, non-prefetchable) [disabled] [size=1M]
        Capabilities: <access denied>

2.insmod
sudo modprobe cfg80211
sudo insmod wlan_cnss_core_pcie.ko

[  412.487414] wlan_cnss_core_pcie: loading out-of-tree module taints kernel.
[  412.510440] [enable_bb_ctxt] 0x1000
[  412.513997] [enable_bb_ctxt] 0x1000
[  412.518064] cnss: Current L1SS status: 0x0[  412.522027] cnss: Current ASPM status: 0x41
[  412.526229] cnss: ASPM status changed to: 40[  412.530453] rddm size 400000[  412.533255] IPC_RTR: ipc_router_mhi_xprt_cb: Invalid cb reason 6
[  412.539330] IPC_RTR: ipc_router_mhi_xprt_cb: Invalid cb reason 6
[  412.545891] [enable_bb_ctxt] 0x800
[  412.549322] [enable_bb_ctxt] 0x800

sudo insmod wlan.ko

[  455.995875] wlan: Loading driver v5.2.0.184N.029
[  456.083210] [bhi_probe] jtagid:0x301050e1
[  456.109170] patch-1: clear rx-vec, bhi_base as 0x          (null)syrius@tegra-ubuntu:/lib/modules$ [  456.342482] cnss: Failed to load BDF: regdb.bin
[  456.368897] cnss: cnss_fw_ready_hdlr 614  
[  456.378708] [kworke][0x1b32171b][16:05:51.536257] wlan: [6:E:TXRX] hif_print_hal_shadow_register_cfg: num_config 28
[  456.413893] [kworke][0x1b32a08a][16:05:51.571440] wlan: [6:E:mlme] mlme_init_reg_cfg: 2371: null pdev
[  456.423270] [kworke][0x1b32c52c][16:05:51.580818] wlan: [6:E:QDF] cds_get_context: 1464: Module ID 66 context is Null
[  456.433903] [kworke][0x1b32eeb6][16:05:51.591452] wlan: [6:E:HDD] hdd_wlan_start_modules: 3736: WBUFF init unsuccessful; status: 11
[  456.446659] [kworke][0x1b33208a][16:05:51.604209] wlan: [6:E:QDF] cds_get_context: 1464: Module ID 66 context is Null
[  456.457349] [kworke][0x1b334a4b][16:05:51.614898] wlan: [6:F:WMA] WMA --> wmi_unified_attach - success
[  456.484637] [kworke][0x1b33b4e2][16:05:51.642185] wlan: [6:E:QDF] htc_wait_target: 657: Target Ready! TX resource : 1 size:2176, MaxMsgsPerHTCBundle = 1
[  456.498296] [kworke][0x1b33ea3e][16:05:51.655844] wlan: [6:E:QDF] htc_setup_target_buffer_assignments: 549: SVS Index : 1 TX : 0x100 : alloc:1
[  457.139345] [kworke][0x1b3db259][16:05:52.296895] wlan: [2251:E:QDF] copy_fw_abi_version_tlv: 6993: copy_fw_abi_version_tlv: INIT_CMD version: 1, 0, 0x5f414351, 0x4c4d, 0x0, 0x0
[  457.285333] [kworke][0x1b3fec8c][16:05:52.442867] wlan: [4531:E:QDF] ready_extract_init_status_tlv: 9076: ready_extract_init_status_tlv:0
[  457.299818] [kworke][0x1b40252e][16:05:52.457365] wlan: [4531:E:OSIF] os_if_spectral_netlink_init: 585: Spectral context is NULL!
[  457.312054] [kworke][0x1b4054fb][16:05:52.469602] wlan: [4531:E:QDF] dp_peer_map_attach_wifi3: 9433: dp_peer_map_attach_wifi3 max_peers 52, max_ast_index: 144
[  457.312054] 
[  457.328188] [kworke][0x1b409403][16:05:52.485737] wlan: [6:E:WMI] send_action_oui_cmd_tlv: 220: Invalid action id
[  457.338714] [kworke][0x1b40bd21][16:05:52.496263] wlan: [6:E:action_oui] ucfg_action_oui_send: 160: Failed to send: 7
[  457.351836] [kworke][0x1b40f061][16:05:52.509384] wlan: [6:E:SPECTRAL] wlan_register_wmi_spectral_cmd_ops: 220: spectral context is NULL!
[  457.364486] [kworke][0x1b4121cc][16:05:52.522034] wlan: [6:E:SPECTRAL] spectral_register_legacy_cb: 116: Invalid Context
[  457.376252] [soft_i][0x1b414fc0][16:05:52.533798] wlan: [0:W:TXRX] *** Warning: host/target HTT versions are different, though compatible!
[  457.376465] [kworke][0x1b415096][16:05:52.534013] wlan: [6:E:TXRX] dp_rxdma_ring_config: 4367: DBS enabled max_mac_rings 2
[  457.376473] [kworke][0x1b41509e][16:05:52.534021] wlan: [6:E:TXRX] dp_rxdma_ring_config: 4378: pdev_id 0 max_mac_rings 2
[  457.376479] [kworke][0x1b4150a5][16:05:52.534028] wlan: [6:E:TXRX] dp_rxdma_ring_config: 4395: mac_id 0
[  457.377717] [kworke][0x1b41557b][16:05:52.535265] wlan: [6:E:TXRX] dp_rxdma_ring_config: 4395: mac_id 1
[  457.379284] [schedu][0x1b415b9a][16:05:52.536832] wlan: [4536:E:PE] pe_register_callbacks_with_wma: 1382: Registering roaming callbacks with WMA failed
[  457.379341] [kworke][0x1b415bd2][16:05:52.536889] wlan: [6:E:REGULATORY] reg_freq_width_to_chan_op_class: 594: invalid frequency 5660
[  459.520126] [schedu][0x1b620638][16:05:54.677663] wlan: [4536:E:REGULATORY] reg_freq_width_to_chan_op_class: 594: invalid frequency 5825

3.ifconfig
And the we can get the wlan0 and wlan1

eth0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        ether 48:b0:2d:3b:60:2f  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device interrupt 37  

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1  (Local Loopback)
        RX packets 2576  bytes 158032 (158.0 KB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 2576  bytes 158032 (158.0 KB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

wlan0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        ether 00:03:7f:12:70:70  txqueuelen 3000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

wlan1: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        ether 00:03:7f:93:70:70  txqueuelen 3000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

4.wpa_cli scan
Use wpa_cli to scan,we can get AP list in my env. like this

> scan
OK
<3>CTRL-EVENT-SCAN-STARTED 
<3>CTRL-EVENT-SCAN-RESULTS 
<3>WPS-AP-AVAILABLE 
<3>CTRL-EVENT-NETWORK-NOT-FOUND 
<3>CTRL-EVENT-SCAN-STARTED 
<3>CTRL-EVENT-SCAN-RESULTS 
<3>WPS-AP-AVAILABLE 
> scan
scan           scan_interval  scan_results   
> scan_results 
bssid / frequency / signal level / flags / ssid
9c:e8:95:a0:28:b0       5805    -53     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:28:a0       5220    -69     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:23:00       5200    -78     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:23:01       5200    -78     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:23:02       5200    -78     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
9c:e8:95:a0:23:10       5785    -74     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:23:11       5785    -75     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:23:12       5785    -76     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
06:ea:56:2f:0c:47       5745    -82     [WPA2-PSK-CCMP][WPS][ESS]       XKAZMMFDJBJYGXT 4096
9c:e8:95:a0:55:b2       5825    -82     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
9c:e8:95:a0:28:c1       2462    -73     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:28:c0       2462    -75     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:23:21       2437    -89     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:23:22       2437    -88     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
9c:e8:95:a0:55:c2       2412    -93     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
34:1e:6b:eb:02:78       2417    -94     [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][WPS][ESS]       ChinaNet-irZ3
60:3a:7c:b2:01:f0       2462    -91     [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][ESS]    Dotu_GUEST
9c:e8:95:a0:28:a1       5220    -69     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:28:a2       5220    -69     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
9c:e8:95:a0:55:c1       2412    -94     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
66:3a:7c:b2:01:f0       2462    -93     [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][ESS]    Dotu-2.4G
9c:e8:95:a0:23:20       2437    -88     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:55:c0       2412    -95     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:28:b1       5805    -53     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:28:b2       5805    -54     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
9c:e8:95:a0:55:b0       5825    -82     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusFriends
9c:e8:95:a0:55:b1       5825    -82     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_2.4G
9c:e8:95:a0:28:c2       2462    -74     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
f4:2a:7d:4a:a3:10       5240    -91     [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][ESS]    VL216-5G
58:b6:33:2f:6d:9c       5260    -88     [WPA2-PSK-CCMP][ESS]    CMSQ
f4:2a:7d:4a:a3:0b       2442    -94     [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][ESS]    VL216
90:e7:10:66:b6:d2       5745    -89     [WPA-PSK-CCMP+TKIP][WPA2-PSK+FT/PSK-CCMP+TKIP][ESS]     SyriusOffice_5.0G
2c:58:e8:66:8e:ac       2432    -92     [WPA-PSK-CCMP+TKIP][WPA2-PSK-CCMP+TKIP][ESS]    ChinaNet-LF4v
<3>CTRL-EVENT-SCAN-STARTED 
<3>CTRL-EVENT-SCAN-RESULTS 
<3>WPS-AP-AVAILABLE 

When I want to connect an AP, the kernel crash as follow

[  966.574824] [wpa_su][0x399b10ae][16:14:21.732372] wlan: [3734:E:REGULATORY] reg_freq_width_to_chan_op_class: 594: invalid frequency 5825
[  966.614567] [soft_i][0x399babee][16:14:21.772116] wlan: [0:E:DP] dp_peer_find_add_id: peer         pK-error ID 4 vid 0 mac b2:0c:e2:55:2b:fb
[  966.627224] [soft_i][0x399bdd5c][16:14:21.784770] wlan: [0:E:DP] dp_peer_map_ast: peer         pK-error ID 122 vid 0 mac b2:0c:e2:55:2b:fb
[  966.858094] [schedu][0x399f6331][16:14:22.015640] wlan: [4536:E:QDF] Cannot malloc 0 bytes @ lim_strip_ie:5731
[  966.868212] [schedu][0x399f8aab][16:14:22.025746] wlan: [4536:W:PE] lim_strip_supp_op_class_update_struct: 5833: Failed to strip supp_op_mode IE status: 2
[  966.905465] [soft_i][0x39a01c3c][16:14:22.063011] wlan: [0:E:DP] dp_tx_initialize_threshold: tx flow control threshold is set, pool size is 1024
[  977.075366] [schedu][0x3a3b4a69][16:14:32.232911] wlan: [4536:E:tdls] tdls_process_reset_all_peers: 487: tdls objects are NULL 
[  977.587439] [schedu][0x3a431ab3][16:14:32.744985] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.611197] [schedu][0x3a43777f][16:14:32.768741] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.631206] [schedu][0x3a43c5a8][16:14:32.788750] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.651204] [schedu][0x3a4413c7][16:14:32.808749] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.675193] [schedu][0x3a44717c][16:14:32.832738] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.695204] [schedu][0x3a44bfa7][16:14:32.852749] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.719193] [schedu][0x3a451d5c][16:14:32.876739] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.739204] [schedu][0x3a456b86][16:14:32.896749] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.763191] [schedu][0x3a45c939][16:14:32.920736] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  977.787190] [schedu][0x3a4626f9][16:14:32.944736] wlan: [4536:W:WMA] wma_wait_tx_complete: 4909: Waiting for outstanding packet to drain.
[  978.255181] tegra-xusb 3530000.xhci: xHCI host not responding to stop endpoint command.
[  978.263178] tegra-xusb 3530000.xhci: Assuming host is dying, halting host.
[  978.270132] tegra-xusb 3530000.xhci: HC died; cleaning up
[  978.270169] usb 1-2-port2: cannot reset (err = -22)
[  978.270183] usb 1-2-port2: cannot reset (err = -22)
[  978.270195] usb 1-2-port2: cannot reset (err = -22)
[  978.270207] usb 1-2-port2: cannot reset (err = -22)
[  978.270218] usb 1-2-port2: cannot reset (err = -22)
[  978.270221] usb 1-2-port2: Cannot enable. Maybe the USB cable is bad?
[  978.270234] usb 1-2-port2: cannot disable (err = -22)
[  978.270246] usb 1-2-port2: cannot reset (err = -22)
[  978.270257] usb 1-2-port2: cannot reset (err = -22)
[  978.270268] usb 1-2-port2: cannot reset (err = -22)
[  978.270279] usb 1-2-port2: cannot reset (err = -22)
[  978.270289] usb 1-2-port2: cannot reset (err = -22)
[  978.270292] usb 1-2-port2: Cannot enable. Maybe the USB cable is bad?
[  978.270303] usb 1-2-port2: cannot disable (err = -22)
[  978.270314] usb 1-2-port2: cannot reset (err = -22)
[  978.270325] usb 1-2-port2: cannot reset (err = -22)
[  978.270336] usb 1-2-port2: cannot reset (err = -22)
[  978.270347] usb 1-2-port2: cannot reset (err = -22)
[  978.270358] usb 1-2-port2: cannot reset (err = -22)
[  978.270360] usb 1-2-port2: Cannot enable. Maybe the USB cable is bad?
[  978.270371] usb 1-2-port2: cannot disable (err = -22)
[  978.270382] usb 1-2-port2: cannot reset (err = -22)
[  978.270393] usb 1-2-port2: cannot reset (err = -22)
[  978.270404] usb 1-2-port2: cannot reset (err = -22)
[  978.270415] usb 1-2-port2: cannot reset (err = -22)
[  978.270426] usb 1-2-port2: cannot reset (err = -22)
[  978.270428] usb 1-2-port2: Cannot enable. Maybe the USB cable is bad?
[  978.270439] usb 1-2-port2: cannot disable (err = -22)
[  978.270451] usb 1-2-port2: cannot disable (err = -22)
[  978.270540] hub 1-2:1.0: hub_ext_port_status failed (err = -22)
[  978.435261] scsi 0:0:0:0: rejecting I/O to offline device
[  987.987277] [schedu][0x3ae1cafe][16:14:43.144805] wlan: [4536:E:CMN_MLME] PSOC_0 VDEV_0: STOP rsp timeout
[  987.997486] [schedu][0x3ae1f2eb][16:14:43.155026] wlan: [4536:E:WMA] __wma_handle_vdev_stop_rsp Del bss failed vdev:0
[  988.009230] [schedu][0x3ae220cc][16:14:43.166771] wlan: [4536:E:DP] dp_tx_delete_flow_pool: 342: avail desc less than pool size
[  988.083181] INFO: rcu_preempt self-detected stall on CPU
[  988.088550]  0-...: (1 GPs behind) idle=0ed/2/0 softirq=8235/8235 fqs=2173 
[  988.095513]   (t=5250 jiffies g=2102 c=2101 q=1271)
[  988.621097] irq 62: nobody cared (try booting with the "irqpoll" option)
[  988.628149] handlers:
[  988.630443] [<ffffff8008a20460>] usb_hcd_irq
[  988.634737] Disabling IRQ #62
[  988.637801] bpmp: mrq 22 took 1676000 us
[  988.637935] [soft_i][0x3aebb8a4][16:14:43.795468] wlan: [0:E:DP] dp_tx_desc_free 364 pool is freed!!
[  988.638722] [kworke][0x3aebbbba][16:14:43.796257] wlan: [4531:E:PE] pe_handle_mgmt_frame: 1262: Failed to fill cds packet from event buffer
[  988.639641] [mhi_process_event_ring] No event access, PM_STATE:0x200
Error: Connection activation failed: (7) Secrets were required, but not provided.
syrius@tegra-ubuntu:~$ [  990.825616] [mhi_process_event_ring] No event access, PM_STATE:0x200
[  990.832030] [mhi_process_event_ring] No event access, PM_STATE:0x200
[  990.927265] [fw_paging_dump] to create file:/var/crash/2018-01-28-16-14-46-paging.bin
[  990.935663] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff80012bd9d0, size: 0x200
[  990.946791] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800eb01000, size: 0x80000
[  990.960223] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800f771000, size: 0x80000
[  990.973265] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800f7f3000, size: 0x80000
[  990.986312] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800f875000, size: 0x80000
[  990.999360] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800f8f7000, size: 0x80000
[  991.012423] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800f979000, size: 0x80000
[  991.025459] [fw_paging_dump] to write file:/var/crash/2018-01-28-16-14-46-paging.bin, mem: 0xffffff800f9fb000, size: 0x80000
[  991.098113] [fw_remote_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-remote.bin, mem: 0xffffff800fb81000, size: 0x35c000
[  991.164338] [firmware_dump] to create file:/var/crash/2018-01-28-16-14-46-fwsram.bin
[  991.172241] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.185015] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800f482000, size: 0x80000
[  991.198036] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800f504000, size: 0x80000
[  991.210651] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800f586000, size: 0x80000
[  991.223604] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800f608000, size: 0x80000
[  991.236691] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800f68a000, size: 0x80000
[  991.249838] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  991.262461] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800faff000, size: 0x80000
[  991.275421] [firmware_dump] to write file:/var/crash/2018-01-28-16-14-46-fwsram.bin, mem: 0xffffff800806c000, size: 0x80
[  991.340174] [dump_fw_to_file] version:0x1, size: 0x188
[  991.345356] [extract_fw_mem_dump] to create file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin
[  991.353913] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.365679] [extract_fw_mem_dump]  mem: 0xffffff800f400188, size: 0x7fe78
[  991.373951] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800f482000, size: 0x80000
[  991.385777] [extract_fw_mem_dump]  mem: 0xffffff800f482000, size: 0x80000
[  991.394278] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800f504000, size: 0x80000
[  991.406098] [extract_fw_mem_dump]  mem: 0xffffff800f504000, size: 0x80000
[  991.414436] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800f586000, size: 0x80000
[  991.426258] [extract_fw_mem_dump]  mem: 0xffffff800f586000, size: 0x80000
[  991.434748] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800f608000, size: 0x80000
[  991.446568] [extract_fw_mem_dump]  mem: 0xffffff800f608000, size: 0x80000
[  991.454968] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800f68a000, size: 0x80000
[  991.466784] [extract_fw_mem_dump]  mem: 0xffffff800f68a000, size: 0x80000
[  991.475112] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SRAM.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  991.486926] [extract_fw_mem_dump]  mem: 0xffffff800fa7d000, size: 0x20188
[  991.537409] [extract_fw_mem_dump] to create file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin
[  991.545947] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.557709] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800f482000, size: 0x80000
[  991.569513] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800f504000, size: 0x80000
[  991.581312] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800f586000, size: 0x80000
[  991.593116] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800f608000, size: 0x80000
[  991.604924] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800f68a000, size: 0x80000
[  991.616725] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_SOC.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  991.628522] [extract_fw_mem_dump]  mem: 0xffffff800fa9d188, size: 0x4000
[  991.640635] [extract_fw_mem_dump] to create file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin
[  991.649163] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.661006] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800f482000, size: 0x80000
[  991.672962] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800f504000, size: 0x80000
[  991.684962] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800f586000, size: 0x80000
[  991.696907] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800f608000, size: 0x80000
[  991.708811] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800f68a000, size: 0x80000
[  991.720727] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-ETB_WCSS.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  991.732620] [extract_fw_mem_dump]  mem: 0xffffff800faa1188, size: 0x8000
[  991.744536] [extract_fw_mem_dump] to create file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin
[  991.753505] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.765420] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800f482000, size: 0x80000
[  991.777348] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800f504000, size: 0x80000
[  991.789258] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800f586000, size: 0x80000
[  991.801170] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800f608000, size: 0x80000
[  991.813079] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800f68a000, size: 0x80000
[  991.824993] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYA-M3.3.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  991.836941] [extract_fw_mem_dump]  mem: 0xffffff800faa9188, size: 0x40000
[  991.852597] [extract_fw_mem_dump] to create file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin
[  991.861197] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.873285] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800f482000, size: 0x80000
[  991.885344] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800f504000, size: 0x80000
[  991.897279] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800f586000, size: 0x80000
[  991.909193] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800f608000, size: 0x80000
[  991.921105] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800f68a000, size: 0x80000
[  991.933017] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  991.944923] [extract_fw_mem_dump]  mem: 0xffffff800fae9188, size: 0x13e78
[  991.952036] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-PHYB-M3.3.bin, mem: 0xffffff800faff000, size: 0x80000
[  991.964110] [extract_fw_mem_dump]  mem: 0xffffff800faff000, size: 0x2c188
[  991.978492] [extract_fw_mem_dump] to create file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin
[  991.987140] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800f400000, size: 0x80000
[  991.998810] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800f482000, size: 0x80000
[  992.010457] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800f504000, size: 0x80000
[  992.022102] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800f586000, size: 0x80000
[  992.033865] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800f608000, size: 0x80000
[  992.045598] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800f68a000, size: 0x80000
[  992.057332] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800fa7d000, size: 0x80000
[  992.069010] [extract_fw_mem_dump] to write file:/var/crash/2018-01-28-16-14-46-Q6-SFR.bin, mem: 0xffffff800faff000, size: 0x80000
[  992.080660] [extract_fw_mem_dump]  mem: 0xffffff800fb2b188, size: 0x50
[  992.091198] cnss: Unknown CNSS MHI state (10)
[  992.095575] cnss: Failed to set MHI state: RDDM_DONE(10)
[  992.100903] cnss: QDSSCSR_ETRIRQCTRL[0x1c0106c] = 0x0
[  992.105964] cnss: QDSSCSR_PRESERVEETF[0x1c01070] = 0x0
[  992.111111] cnss: QDSSCSR_PRESERVEETR0[0x1c01074] = 0x0
[  992.116383] cnss: QDSSCSR_PRESERVEETR1[0x1c01078] = 0x0
[  992.121674] Kernel panic - not syncing: cnss: RDDM triggers kernel panic
[  992.128371] CPU: 3 PID: 4531 Comm: kworker/u12:1 Tainted: G           O    4.9.201-buzzard-2021-08-25 #3
[  992.137834] Hardware name: lanai-3636 (DT)
[  992.142026] Workqueue: cnss_driver_event cnss_idle_shutdown [wlan_cnss_core_pcie]
[  992.149509] Call trace:
[  992.151957] [<ffffff800808b9f8>] dump_backtrace+0x0/0x198
[  992.157350] [<ffffff800808bfbc>] show_stack+0x24/0x30
[  992.162395] [<ffffff800845abe8>] dump_stack+0xa0/0xc8
[  992.167440] [<ffffff80081c0a00>] panic+0x12c/0x2a8
[  992.172308] [<ffffff8001295614>] cnss_idle_shutdown+0x5a4/0x6b8 [wlan_cnss_core_pcie]
[  992.180128] [<ffffff80080d40cc>] process_one_work+0x1e4/0x4b0
[  992.185865] [<ffffff80080d43e8>] worker_thread+0x50/0x4c8
[  992.191257] [<ffffff80080db074>] kthread+0xec/0xf0
[  992.196041] [<ffffff80080838a0>] ret_from_fork+0x10/0x30
[  992.201346] SMP: stopping secondary CPUs
[  992.205267] Kernel Offset: disabled
[  992.208749] Memory Limit: none
[  992.211798] trusty-log panic notifier - trusty version Built: 06:07:51 Aug 25 2021 [  992.219268] cnss: Crash shutdown with driver_state 0xc7
[  992.224488] cnss: Setting MHI state: RDDM_KERNEL_PANIC(8)
[ 1024.375122] [bhi_rddm] rddm transfer timeout
[ 1024.379385] cnss: Failed to set MHI state: RDDM_KERNEL_PANIC(8)
[ 1024.385294] cnss: Fail to complete RDDM, err = -5
[ 1024.389989] cnss: Config PCIe remap window register to 0x40000038
[ 1024.396077] cnss: QDSSCSR_ETRIRQCTRL[0x1c0106c] = 0x0
[ 1024.401118] cnss: Config PCIe remap window register to 0x40000038
[ 1024.407205] cnss: QDSSCSR_PRESERVEETF[0x1c01070] = 0x0
[ 1024.412334] cnss: Config PCIe remap window register to 0x40000038
[ 1024.418422] cnss: QDSSCSR_PRESERVEETR0[0x1c01074] = 0x0
[ 1024.423636] cnss: Config PCIe remap window register to 0x40000038
[ 1024.429724] cnss: QDSSCSR_PRESERVEETR1[0x1c01078] = 0x0
[ 1024.485949] Rebooting in 5 seconds..

We communicated with Qualcomm and they reported that the response of MSI interrupt was too slow. It is necessary to check the MSI interrupt and tasklet scheduling information.

‘too slow’ is a bit vague. Do we know what is the expectation in terms of how fast the MSI interrupt service is expected and how much is Tegra’s MSI interrupt response lagging?

When I try to connect to a 2.4G AP,the kernel panic as the same,and the dump info. is the same.

The qcom wifi driver now only used one MSI irq,when I change the driver to use defconfig numbers of MSI irq(32),the driver loader faild like this,

I found the nvidia pci driver (pci-tegra.c)has the PCI MSI NR define as below


So what the matter, TX2-NX can’t use more the one MSI IRQ?