8devices/qcacld-2.0

System crash

triggerfinger-debug opened this issue · 3 comments

Hi, I am trying to get Blue Bean DEV working on Jetson Nano host.
I was able to compile caf-wlan/LNX.LEH.4.2.2.2 branch with some modification as seen here b2c2f68

trying to connect to wifi network will crash the system as does trying to connect to an AP by bluebean

I would like to get this fixed. Please advise.

Dmesg log as follows:

[  632.749877] wlan: [7609:E :SME] No Pending command waiting
[  633.006983] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  633.012464] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  633.096402] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  633.124663] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  633.269863] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  633.764465] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  633.766035] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  634.060216] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  634.436345] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  636.038167] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  637.509158] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  638.210022] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  638.210334] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  638.900055] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  639.144546] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  639.220027] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  640.244011] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  641.228034] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  641.312460] TXRX: ol_tx_classify: remove the peer reference ffffffc075db4000
[  641.317776] Unable to handle kernel NULL pointer dereference at virtual address 00000001
[  641.325886] Mem abort info:
[  641.328702]   ESR = 0x96000021
[  641.331760]   Exception class = DABT (current EL), IL = 32 bits
[  641.337786]   SET = 0, FnV = 0
[  641.340868]   EA = 0, S1PTW = 0
[  641.344020] Data abort info:
[  641.346913]   ISV = 0, ISS = 0x00000021
[  641.350757]   CM = 0, WnR = 0
[  641.353747] user pgtable: 4k pages, 39-bit VAs, pgd = ffffffc0728b6000

299-tegra #1
[  641.414514] Hardware name: NVIDIA Jetson Nano 2GB Developer Kit (DT)
[  641.421425] Workqueue: events usb_hif_io_comp_work [wlan_usb]
[  641.427166] task: ffffffc0787a7000 task.stack: ffffffc076fbc000
[  641.433074] PC is at __ll_sc_atomic_sub_return+0x4/0x20
[  641.438286] LR is at skb_release_head_state+0x3c/0xf8
[  641.443323] pc : [<ffffff8008458874>] lr : [<ffffff8008dadbdc>] pstate: 60400045
[  641.450699] sp : ffffffc076fbfab0
[  641.454003] x29: ffffffc076fbfab0 x28: 0000000000000000
[  641.459316] x27: ffffffc076fbfbe0 x26: ffffffc073b77440
[  641.464626] x25: ffffffc073b7744e x24: ffffffc05d480000
[  641.469936] x23: ffffffc03a982000 x22: ffffffc03a982000
[  641.475246] x21: 0000000000000000 x20: 0000000000000001
[  641.480555] x19: ffffffc0729d2500 x18: 0000007f95202a70
[  641.485866] x17: 0000000000000000 x16: 0000000000000000
[  641.491175] x15: 0000000000000000 x14: 0000000000000001
[  641.496484] x13: 00000000000002b4 x12: 071c71c71c71c71c
[  641.501793] x11: 0000000000000606 x10: 0000000000000a40
[  641.507103] x9 : ffffffc076fbfd10 x8 : 0000000000000000
[  641.512414] x7 : ffffffc0729d2500 x6 : ffffffc0729d2526
[  641.517723] x5 : ffffffc0729d2528 x4 : ffffffc05d480000
[  641.523033] x3 : 000000407662e000 x2 : 0000000000000001
[  641.542255] Call trace:
[  641.544694] [<ffffff8008458874>] __ll_sc_atomic_sub_return+0x4/0x20
[  641.550945] [<ffffff8008dae628>] skb_release_all+0x20/0x40
[  641.556417] [<ffffff8008dae7b8>] consume_skb+0x38/0x118
[  641.561628] [<ffffff8008dc1abc>] __dev_kfree_skb_any+0x54/0x60
[  641.568026] [<ffffff8001713c24>] __adf_nbuf_free+0x24/0x30 [wlan_usb]
[  641.575029] [<ffffff80016f8708>] ol_tx_desc_frame_list_free+0x70/0x88 [wlan_usb]
[  641.582947] [<ffffff80016fea28>] ol_tx_completion_handler+0x118/0x228 [wlan_usb]
[  641.590849] [<ffffff800171d64c>] htt_t2h_msg_handler+0xf4/0x270 [wlan_usb]
[  641.598232] [<ffffff8001711fc0>] DoRecvCompletion+0xc8/0x160 [wlan_usb]
[  641.605354] [<ffffff800171294c>] HTCRxCompletionHandler+0x4c4/0x800 [wlan_usb                                            ]
[  641.613083] [<ffffff8001716344>] usb_hif_io_comp_work+0x13c/0x1d8 [wlan_usb]
[  641.620117] [<ffffff80080d4154>] process_one_work+0x1e4/0x4b0
[  641.625848] [<ffffff80080d4470>] worker_thread+0x50/0x4c8
[  641.631232] [<ffffff80080db154>] kthread+0xec/0xf0
[  641.636010] [<ffffff80080838a0>] ret_from_fork+0x10/0x30
[  641.641309] ---[ end trace 5f362c6e46e3bd11 ]---
[  641.656346] Unable to handle kernel paging request at virtual address ffffffffffffffd8

Some more logs from when device is connected


[   86.123695] usb 1-3.2: new high-speed USB device number 5 using tegra-xusb
[   86.144728] usb 1-3.2: New USB device found, idVendor=0cf3, idProduct=9378
[   86.144734] usb 1-3.2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.144737] usb 1-3.2: Product: USBWLAN
[   86.144741] usb 1-3.2: Manufacturer: Qualcomm Atheros
[   86.144744] usb 1-3.2: SerialNumber: 12345678
[   87.478384] wlan_usb: loading out-of-tree module taints kernel.
[   87.622788] wlan_usb: loading driver v4.5.20.037
[   87.622913] hif_usb_probe
[   87.623822] Enter:hif_usb_disable_lpm,Line:127
[   87.623826] hif_usb_disable_lpm: LPM isn't enabled
[   87.623828] Exit:hif_usb_disable_lpm,Line:154
[   87.623832] BCDDevice : 300
[   87.623838] RX Bulk Ep:0x81 maxpktsz:512
[   87.623857] athusb: alloc resources lpipe:4 hpipe:0xC0408580 urbs:32
[   87.623859] RX Bulk Ep:0x82 maxpktsz:512
[   87.623876] athusb: alloc resources lpipe:5 hpipe:0xC0410580 urbs:32
[   87.623878] RX Bulk Ep:0x83 maxpktsz:512
[   87.623899] athusb: alloc resources lpipe:6 hpipe:0xC0418580 urbs:32
[   87.623901] RX Bulk Ep:0x84 maxpktsz:512
[   87.623918] athusb: alloc resources lpipe:7 hpipe:0xC0420580 urbs:32
[   87.623920] TX Bulk Ep:0x01 maxpktsz:512
[   87.623936] athusb: alloc resources lpipe:0 hpipe:0xC0008500 urbs:32
[   87.623938] TX Bulk Ep:0x02 maxpktsz:512
[   87.623958] athusb: alloc resources lpipe:1 hpipe:0xC0010500 urbs:32
[   87.623960] TX Bulk Ep:0x03 maxpktsz:512
[   87.623978] athusb: alloc resources lpipe:2 hpipe:0xC0018500 urbs:32
[   87.623980] TX Bulk Ep:0x04 maxpktsz:512
[   87.623996] athusb: alloc resources lpipe:3 hpipe:0xC0020500 urbs:32
[   87.624008] /proc/cld/athdiagpfs created
[   87.628003] wlan: [7698:E :HDD] wlan_hdd_cfg80211_init: wiphy->bands[i] is NULL, i = 2
[   87.630360] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
[   87.631896] Board extended Data download address: 0x0
[   87.640917] wlan: [7698:E :VOS] ol_transfer_bin_file: transferring file: fakeboar.bin size 8124 bytes done!
[   87.641023] ol_download_firmware: Using 0x1234 for the remainder of init
[   87.670005] wlan: [7698:E :VOS] ol_transfer_bin_file: transferring file: otp.bin size 24037 bytes done!
[   87.670622] ol_transfer_bin_file: Loading setup file athsetup.bin
[   87.670676] usb 1-3.2: Direct firmware load for athsetup.bin failed with error -2
[   87.678200] usb 1-3.2: Falling back to user helper
[   87.683926] ol_transfer_bin_file: Failed to get athsetup.bin
[   88.412711] wlan: [7698:E :VOS] ol_transfer_bin_file: transferring file: athwlan.bin size 591880 bytes done!
[   88.413212] +HTCCreate ..  HIF :ffffffc037007000
[   88.413229] -HTCCreate (0xffffffc076b1f000)
[   88.413333] WDA_open-4688: WMA --> wmi_unified_attach - success
[   88.413347] ol_if_dfs_attach: called; ptr=ffffffc03d71db54, radar_info=ffffffc03d7e3738
[   88.413558] wlan: [7698:E :SAP] dfs_init_radar_filters[201]: Unknown dfs domain 0
[   88.413585] +HWT
[   88.418249] Target Ready! : transmit resources : 3 size:1792, MaxMsgsPerHTCBundle = 8
[   88.418254] HTC Service Index : 1 TX : 0x100 : alloc:3
[   88.418257] HTC Service:0x0001, ULpipe:0 DLpipe:5 id:0 Ready
[   88.418259] -HWT
[   88.418337] is_full_reorder_offloaded? 0
[   88.418340] HTC Service TX : 0x300 : allocation is zero!
[   88.418444] HTC Service:0x0300, ULpipe:1 DLpipe:5 id:1 Ready
[   88.418447] HTC Service:0x0300 ep:1 TX flow control disabled
[   88.418449] HTC Service TX : 0x301 : allocation is zero!
[   88.418534]  Target failed service 0x301 connect request (status:1)
[   88.418536] TX HTT OFF, ep -1 size 0
[   88.418566] htt_tx_attach:htt_desc_start:0xffffffc02f7c0000 htt_desc_end:0xffffffc02f7dc200
[   88.419000] HTC Service:0x0100, ULpipe:0 DLpipe:5 id:2 Ready
[   88.419003] HTC Service:0x0100 ep:2 TX flow control disabled
[   88.419006] wma_pre_start-5056: WMA --> wmi_unified_connect_htc_service - success
[   88.419029] wma_mc_process_msg-21967: McThread: WNI_CFG_DNLD_REQ
[   88.420916] HTC will not use TX credit flow control
[   88.421499] __wmi_control_rx: WMI UNIFIED SERVICE READY event
[   88.421505] wma_rx_service_ready_event-24799: WMA <-- WMI_SERVICE_READY_EVENTID
[   88.421510] wlan: [672:E :WDA] wma_rx_service_ready_event: Firmware build version : 00000029
[   88.421516] wlan: [672:E :WDA] wma_rx_service_ready_event: Board version: 0.21014003
[   88.421525] wma_rx_service_ready_event-24914: WMA --> WMI_INIT_CMDID
[   88.428173] __wmi_control_rx:  WMI UNIFIED READY event
[   88.428178] wma_rx_ready_event-24943: WMA <-- WMI_READY_EVENTID
[   88.428560] wlan: [7698:E :VOS] error: wiphy->bands is NULL, i = 2
[   88.428569] wlan: [7698:F :HDD] pAdapter is null !!
[   88.428961] wlan: [7698:E :SME] csr_init_chan_list: 326: init time country code 00
[   88.429147] usb 1-3.2: Direct firmware load for wlan/usb_wlan_mac.bin failed with error -2
[   88.443668] usb 1-3.2: Falling back to user helper
[   88.449689] wlan: [7698:E :WDA] MCC TX Pause Event Handler register
[   88.449696] wlan: [7698:E :WDA] Target does not support batch scan feature
[   88.449930] session id - 0, AddSta session - 0
[   88.449955] wlan: [7711:E :WDA] wma_unified_vdev_create_send: ID = 0 VAP Addr = c4:93:00:0f:bd:0f
[   88.449980] wma_vdev_attach-5905: vdev_id 0, txrx_vdev_handle = ffffffc075f50800
[   88.449998] Enter:usb_hif_start_recv_pipes,Line:958
[   88.450000] Post URBs to RX_DATA_PIPE: 32
[   88.450073] wlan: [7711:E :SME] No Pending command waiting
[   88.450089] wlan: [7698:E :HDD] wlan_hdd_tdls_init TDLS Implicit trigger not enabled!
[   88.450585] Exit:usb_hif_start_recv_pipes,Line:994
[   88.450639] target uses HTT version 3.27; host uses 3.23
[   88.450642] *** Warning: host/target HTT versions are different, though compatible!
[   88.452683] wlan: [7698:E :HDD] wlan_hdd_validate_context: Unloading/Loading in Progress. Ignore!!!
[   88.452690] wlan: [7698:E :HDD] wlan_hdd_cfg80211_get_txpower: HDD context is not valid
[   88.453481] session id - 1, AddSta session - 0
[   88.453583] wlan: [7711:E :WDA] Invalid wda_cli_set pdev command/Not yet implemented 0x34
[   88.453602] wlan: [7711:E :WDA] wma_unified_vdev_create_send: ID = 1 VAP Addr = c6:93:00:90:bd:0f
[   88.453620] wma_vdev_attach-5905: vdev_id 1, txrx_vdev_handle = ffffffc073e1ac00
[   88.453624] wma_vdev_attach-5971: P2P Device: creating self peer c6:93:00:90:bd:0f, vdev_id 1
[   88.453646] wlan: [7711:E :WDA] wma_create_peer: Created peer with peer_addr c6:93:00:90:bd:0f vdev_id 1, peer_cou
[   88.453715] wlan: [7711:E :SME] No Pending command waiting
[   88.454282] wlan: [7698:E :HDD] wlan_hdd_validate_context: Unloading/Loading in Progress. Ignore!!!
[   88.454289] wlan: [7698:E :HDD] wlan_hdd_cfg80211_get_txpower: HDD context is not valid
[   88.454549] wlan: [7711:E :WDA] Invalid wda_cli_set pdev command/Not yet implemented 0x34
[   88.457049] TXRX: ol_txrx_peer_find_add_id: Delete Peer ffffffc076b09000
[   88.462795] Host SW:4.5.20.037, FW:0.0.0.41, HW:QCA9377_REV1_1
[   88.462841] wlan_logging_sock_activate_svc: Initalizing FEConsoleLog = 0 NumBuff = 32
[   88.462948] wlan_logging_sock_activate_svc: Activated wlan_logging svc
[   88.463019] wlan: [7698:E :HDD] hdd_wlan_startup: 12529: set tsf GPIO failed
[   88.463026] wlan: [7711:E :WDA] TM sending the following to firmware: min 0 max 110 enable 1
[   88.463035] wlan: [7711:E :WDA] TM Sending thermal mgmt cmd: low temp 0, upper temp 110, enabled 1
[   88.463984] wlan: [4173:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.468804] wlan: [4173:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.469831] usbcore: registered new interface driver hif_usb
[   88.469837] wlan_usb: driver loaded
[   88.499128] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   88.499336] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   88.499355] wlan: [4173:E :SME] PmcOffloadEnableStaModePowerSave: 3819: Failed to Queue Sta Mode Ps Request
[   88.499749] wlan: [4173:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.507982] wlan: [4172:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.508047] wlan: [4172:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.508371] wlan: [4172:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.508431] wlan: [4172:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.509569] wlan: [4172:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   88.573170] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready
[   88.574350] wlan: [4172:E :HDD] received scan request
[   88.574390] wlan: [4172:E :SME] No Pending command waiting
[   88.574489] wlan: [7711:E :WDA] scan_id a001, vdev_id 0, scan type 0, msg_type 1103
[   92.055940] wlan: [672:E :WDA]  scan complete - scan_id a001, vdev_id 0
[   92.056100] wlan: [7711:E :SME] No Pending command waiting
[   92.056219] wlan: [7711:E :SME] No Pending command waiting
[   92.056386] wlan: [7711:E :SME] No Pending command waiting
[   92.056486] wlan: [7711:E :SME] Found 37 BSS
[   92.057179] wlan: [7711:E :SME] No Pending command waiting
[   92.057188] wlan: [7711:E :SME] No Pending command waiting
[   92.057734] wlan: [7711:E :SME] PmcOffloadEnableStaModePowerSave: 3832: sta mode power save already enabled
[   92.057740] wlan: [7711:E :SME] No Pending command waiting
[   92.351649] wlan: [7802:E :HDD] hdd_ioctl: unknown ioctl 35587
[   92.351736] wlan: [7802:E :HDD] hdd_ioctl: unknown ioctl 35593
[   92.351984] wlan: [7802:E :HDD] hdd_ioctl: unknown ioctl 35587
[   92.352017] wlan: [7802:E :HDD] hdd_ioctl: unknown ioctl 35593

After configuring with nmtui, this is the log from when the usb is connected till crash:

[   45.856970] tegra-xusb-padctl 7009f000.xusb_padctl: power on UTMI pads 1
[   46.017132] usb 1-2: reset high-speed USB device number 3 using tegra-xusb
[   46.356943] usb 1-2.1: new high-speed USB device number 6 using tegra-xusb
[   46.381933] usb 1-2.1: New USB device found, idVendor=0cf3, idProduct=9378
[   46.381939] usb 1-2.1: New USB device strings: Mfr=1, Product=2, SerialNumber    =3
[   46.381943] usb 1-2.1: Product: USBWLAN
[   46.381946] usb 1-2.1: Manufacturer: Qualcomm Atheros
[   46.381949] usb 1-2.1: SerialNumber: 12345678
[   47.689336] wlan_usb: loading out-of-tree module taints kernel.
[   47.833403] wlan_usb: loading driver v4.5.20.037
[   47.833527] hif_usb_probe
[   47.834439] Enter:hif_usb_disable_lpm,Line:127
[   47.834442] hif_usb_disable_lpm: LPM isn't enabled
[   47.834445] Exit:hif_usb_disable_lpm,Line:154
[   47.834448] BCDDevice : 300
[   47.834453] RX Bulk Ep:0x81 maxpktsz:512
[   47.834472] athusb: alloc resources lpipe:4 hpipe:0xC0408680 urbs:32
[   47.834475] RX Bulk Ep:0x82 maxpktsz:512
[   47.834491] athusb: alloc resources lpipe:5 hpipe:0xC0410680 urbs:32
[   47.834493] RX Bulk Ep:0x83 maxpktsz:512
[   47.834512] athusb: alloc resources lpipe:6 hpipe:0xC0418680 urbs:32
[   47.834514] RX Bulk Ep:0x84 maxpktsz:512
[   47.834533] athusb: alloc resources lpipe:7 hpipe:0xC0420680 urbs:32
[   47.834535] TX Bulk Ep:0x01 maxpktsz:512
[   47.834552] athusb: alloc resources lpipe:0 hpipe:0xC0008600 urbs:32
[   47.834554] TX Bulk Ep:0x02 maxpktsz:512
[   47.834572] athusb: alloc resources lpipe:1 hpipe:0xC0010600 urbs:32
[   47.834574] TX Bulk Ep:0x03 maxpktsz:512
[   47.834588] athusb: alloc resources lpipe:2 hpipe:0xC0018600 urbs:32
[   47.834590] TX Bulk Ep:0x04 maxpktsz:512
[   47.834606] athusb: alloc resources lpipe:3 hpipe:0xC0020600 urbs:32
[   47.834618] /proc/cld/athdiagpfs created
[   47.838312] wlan: [7567:E :HDD] wlan_hdd_cfg80211_init: wiphy->bands[i] is NULL, i = 2
[   47.840648] NUM_DEV=1 FWMODE=0x2 FWSUBMODE=0x0 FWBR_BUF 0
[   47.842167] Board extended Data download address: 0x0
[   47.851340] wlan: [7567:E :VOS] ol_transfer_bin_file: transferring file: fakeboar.bin size 8124 bytes done!
[   47.851450] ol_download_firmware: Using 0x1234 for the remainder of init
[   47.880715] wlan: [7567:E :VOS] ol_transfer_bin_file: transferring file: otp.bin size 24037 bytes done!
[   47.881356] ol_transfer_bin_file: Loading setup file athsetup.bin
[   47.881398] usb 1-2.1: Direct firmware load for athsetup.bin failed with error -2
[   47.888920] usb 1-2.1: Falling back to user helper
[   47.895764] ol_transfer_bin_file: Failed to get athsetup.bin
[   48.637708] wlan: [7567:E :VOS] ol_transfer_bin_file: transferring file: athwlan.bin size 591880 bytes done!
[   48.638229] +HTCCreate ..  HIF :ffffffc048b4a000
[   48.638244] -HTCCreate (0xffffffc0684f2000)
[   48.638351] WDA_open-4688: WMA --> wmi_unified_attach - success
[   48.638366] ol_if_dfs_attach: called; ptr=ffffffc0345e1b54, radar_info=ffffffc061c13738
[   48.638572] wlan: [7567:E :SAP] dfs_init_radar_filters[201]: Unknown dfs domain 0
[   48.638598] +HWT
[   48.643229] Target Ready! : transmit resources : 3 size:1792, MaxMsgsPerHTCBundle = 8
[   48.643234] HTC Service Index : 1 TX : 0x100 : alloc:3
[   48.643238] HTC Service:0x0001, ULpipe:0 DLpipe:5 id:0 Ready
[   48.643240] -HWT
[   48.643315] is_full_reorder_offloaded? 0
[   48.643318] HTC Service TX : 0x300 : allocation is zero!
[   48.643415] HTC Service:0x0300, ULpipe:1 DLpipe:5 id:1 Ready
[   48.643418] HTC Service:0x0300 ep:1 TX flow control disabled
[   48.643420] HTC Service TX : 0x301 : allocation is zero!
[   48.643501]  Target failed service 0x301 connect request (status:1)
[   48.643504] TX HTT OFF, ep -1 size 0
[   48.643534] htt_tx_attach:htt_desc_start:0xffffffc034520000 htt_desc_end:0xffffffc03453c200
[   48.643954] HTC Service:0x0100, ULpipe:0 DLpipe:5 id:2 Ready
[   48.643957] HTC Service:0x0100 ep:2 TX flow control disabled
[   48.643960] wma_pre_start-5056: WMA --> wmi_unified_connect_htc_service - success
[   48.643978] wma_mc_process_msg-21967: McThread: WNI_CFG_DNLD_REQ
[   48.645957] HTC will not use TX credit flow control
[   48.646513] __wmi_control_rx: WMI UNIFIED SERVICE READY event
[   48.646517] wma_rx_service_ready_event-24799: WMA <-- WMI_SERVICE_READY_EVENTID
[   48.646522] wlan: [1714:E :WDA] wma_rx_service_ready_event: Firmware build version : 00000029
[   48.646528] wlan: [1714:E :WDA] wma_rx_service_ready_event: Board version: 0.21014003
[   48.646538] wma_rx_service_ready_event-24914: WMA --> WMI_INIT_CMDID
[   48.653166] __wmi_control_rx:  WMI UNIFIED READY event
[   48.653171] wma_rx_ready_event-24943: WMA <-- WMI_READY_EVENTID
[   48.653683] wlan: [7567:E :SME] csr_init_chan_list: 326: init time country code US
[   48.964882] wlan: [7567:E :VOS] init time reg hint callback not called
[   48.964900] wlan: [7567:E :VOS] error: wiphy->bands is NULL, i = 2
[   48.965132] usb 1-2.1: Direct firmware load for wlan/usb_wlan_mac.bin failed with error -2
[   48.973946] usb 1-2.1: Falling back to user helper
[   48.980181] wlan: [7567:E :WDA] MCC TX Pause Event Handler register
[   48.980188] wlan: [7567:E :WDA] Target does not support batch scan feature
[   48.980389] session id - 0, AddSta session - 0
[   48.980415] wlan: [7572:E :WDA] wma_unified_vdev_create_send: ID = 0 VAP Addr= c4:93:00:0f:bd:0f
[   48.980441] wma_vdev_attach-5905: vdev_id 0, txrx_vdev_handle = ffffffc0755a5a00
[   48.980485] Enter:usb_hif_start_recv_pipes,Line:958
[   48.980488] Post URBs to RX_DATA_PIPE: 32
[   48.980534] wlan: [7572:E :SME] No Pending command waiting
[   48.980545] wlan: [7567:E :HDD] wlan_hdd_tdls_init TDLS Implicit trigger not enabled!
[   48.981085] Exit:usb_hif_start_recv_pipes,Line:994
[   48.981255] target uses HTT version 3.27; host uses 3.23
[   48.981303] *** Warning: host/target HTT versions are different, though compatible!
[   48.981555] wlan: [7567:E :HDD] wlan_hdd_validate_context: Unloading/Loading in Progress. Ignore!!!
[   48.981562] wlan: [7567:E :HDD] wlan_hdd_cfg80211_get_txpower: HDD context is not valid
[   48.981806] session id - 1, AddSta session - 0
[   48.981858] wlan: [7572:E :WDA] Invalid wda_cli_set pdev command/Not yet implemented 0x34
[   48.981878] wlan: [7572:E :WDA] wma_unified_vdev_create_send: ID = 1 VAP Addr = c6:93:00:90:bd:0f
[   48.981896] wma_vdev_attach-5905: vdev_id 1, txrx_vdev_handle = ffffffc0744da400
[   48.981901] wma_vdev_attach-5971: P2P Device: creating self peer c6:93:00:90:bd:0f, vdev_id 1
[   48.981923] wlan: [7572:E :WDA] wma_create_peer: Created peer with peer_addr c6:93:00:90:bd:0f vdev_id 1, peer_count - 1
[   48.981992] wlan: [7572:E :SME] No Pending command waiting
[   48.982653] wlan: [7567:E :HDD] wlan_hdd_validate_context: Unloading/Loading in Progress. Ignore!!!
[   48.982659] wlan: [7567:E :HDD] wlan_hdd_cfg80211_get_txpower: HDD context is not valid
[   48.983306] wlan: [7572:E :WDA] Invalid wda_cli_set pdev command/Not yet implemented 0x34
[   48.987467] TXRX: ol_txrx_peer_find_add_id: Delete Peer ffffffc0433e2000
[   48.987686] Host SW:4.5.20.037, FW:0.0.0.41, HW:QCA9377_REV1_1
[   48.987734] wlan_logging_sock_activate_svc: Initalizing FEConsoleLog = 0 NumBuff = 32
[   48.987828] wlan_logging_sock_activate_svc: Activated wlan_logging svc
[   48.987911] wlan: [7567:E :HDD] hdd_wlan_startup: 12529: set tsf GPIO failed
[   48.987915] wlan: [7572:E :WDA] TM sending the following to firmware: min 0 max 110 enable 1
[   48.987923] wlan: [7572:E :WDA] TM Sending thermal mgmt cmd: low temp 0, upper temp 110, enabled 1
[   48.988020] usbcore: registered new interface driver hif_usb
[   48.988023] wlan_usb: driver loaded
[   48.988912] wlan: [4217:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   48.993213] wlan: [4217:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.022196] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   49.022405] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   49.022421] wlan: [4217:E :SME] PmcOffloadEnableStaModePowerSave: 3819: Failed to Queue Sta Mode Ps Request
[   49.022914] wlan: [4217:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.030513] wlan: [4212:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.030586] wlan: [4212:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.030905] wlan: [4212:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.030960] wlan: [4212:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.032161] wlan: [4212:E :HDD] wlan_hdd_get_classAstats: Unable to retrieve Class A statistics
[   49.095653] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready
[   49.097343] wlan: [4212:E :HDD] received scan request
[   49.097384] wlan: [4212:E :SME] No Pending command waiting
[   49.097477] wlan: [7572:E :WDA] scan_id a001, vdev_id 0, scan type 0, msg_type 1103
[   52.242581] wlan: [1714:E :WDA]  scan complete - scan_id a001, vdev_id 0
[   52.242755] wlan: [7572:E :SME] No Pending command waiting
[   52.242882] wlan: [7572:E :SME] No Pending command waiting
[   52.243045] wlan: [7572:E :SME] No Pending command waiting
[   52.243264] wlan: [7572:E :SME] Found 43 BSS
[   52.244124] wlan: [7572:E :SME] No Pending command waiting
[   52.244135] wlan: [7572:E :SME] No Pending command waiting
[   52.244940] wlan: [7572:E :SME] PmcOffloadEnableStaModePowerSave: 3832: sta mode power save already enabled
[   52.244947] wlan: [7572:E :SME] No Pending command waiting
[   52.410804] wlan: [7572:E :WDA] wma_create_peer: Created peer with peer_addr 1c:36:bb:06:39:94 vdev_id 0, peer_count - 2
[   52.411315] TXRX: ol_txrx_peer_find_add_id: Delete Peer ffffffc04a357000
[   52.461015] wlan: [7572:E :PE ] wlan_cfgGetInt: 333: Not valid cfg id 1
[   52.461184] wlan: [7572:E :WDA] wma_add_sta_req_sta_mode: statype 0 vdev_id 0 aid 6 bssid 1c:36:bb:06:39:94 staIdx 1 status 0
[   52.461264] wlan: c4:93:00:0f:bd:0f connected to 1c:36:bb:06:39:94
[   52.461277] wlan: [7572:E :HDD] MODE 0, CH 11, LWM 0, HWM 0, TXQDEP 1500
[   52.461284] wlan: [7572:E :HDD] wlan(11) 1c:36:bb:06:39:94 Standalone
[   52.524817] wlan: [7572:E :SME] sme_UpdateDSCPtoUPMapping: QOS Mapping IE not present
[   52.524867] wlan: [7572:E :SME] No Pending command waiting
[   52.530727] wlan: [7572:E :SME] No Pending command waiting
[   52.530907] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   52.530910] wlan: [7572:E :SME] No Pending command waiting
[   52.671423] Unable to handle kernel NULL pointer dereference at virtual address 00000001
[   52.679529] Mem abort info:
[   52.682586]   ESR = 0x96000021
[   52.685830]   Exception class = DABT (current EL), IL = 32 bits
[   52.696775]   SET = 0, FnV = 0
[   52.699826]   EA = 0, S1PTW = 0
[   52.703201] Data abort info:
[   52.707523]   ISV = 0, ISS = 0x00000021
[   52.711406]   CM = 0, WnR = 0
[   52.716613] user pgtable: 4k pages, 39-bit VAs, pgd = ffffffc075f94000
[   52.724147] [0000000000000001] *pgd=0000000000000000, *pud=0000000000000000
[   52.731987] Internal error: Oops: 96000021 [#1] PREEMPT SMP
[   52.737547] Modules linked in: wlan_usb(O) bnep xt_conntrack ipt_MASQUERADE nf_nat_masquerade_ipv4 nf_conntrack_netlink nfnetlink xt_addrtype iptable_filter     iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack br_    netfilter zram overlay uvcvideo rtl8821cu cfg80211 userspace_alert binfmt_misc nvgpu ip_tables x_tables
[   52.767676] CPU: 0 PID: 1714 Comm: kworker/0:3 Tainted: G           O    4.9.    299-tegra #1
[   52.775833] Hardware name: NVIDIA Jetson Nano 2GB Developer Kit (DT)
[   52.782783] Workqueue: events usb_hif_io_comp_work [wlan_usb]
[   52.788526] task: ffffffc076800000 task.stack: ffffffc076808000
[   52.794436] PC is at __ll_sc_atomic_sub_return+0x4/0x20
[   52.799649] LR is at skb_release_head_state+0x3c/0xf8

Could it be missing LOCK and UNLOCK_HTC_ENDPOINT_RX in DoRecvCompletion

Solution was to use CNSS.LEA.NRT_3.0 branch and patch Kernel.