Android ICS: wpa_supplicant not connecting to hostapd in 80211n mode

[Valeriy Kucherenko]

Hi,

I've recently bought HTC One S phone (Android 4, kernel 3.0.8) and now facing a problem that I could not connect my phone to AP while AP is configured in Wireless-N mode. The connection process stucks in authentication loop and then disconnects. If I just comment out ieee80211n config parameter in hostapd all works fine, but in G-mode. Can somebody help me with this problem? I've few days googled to find solution but find nothing.

Here is the log from hostapd:

association request: STA=xx:xx:xx:xx:xx:xx capab_info=0x431 listen_interval=3
Validating WMM IE: OUI 00:50:f2  OUI type 2  OUI sub-type 0  version 1  QoS info 0x0
  old AID 1
HT: STA xx:xx:xx:xx:xx:xx HT Capabilities Info: 0x016c
update_sta_ht STA xx:xx:xx:xx:xx:xx - no greenfield, num of non-gf stations 1
update_sta_ht STA xx:xx:xx:xx:xx:xx - 20 MHz HT, num of 20MHz HT STAs 1
hostapd_ht_operation_update current operation mode=0x6
hostapd_ht_operation_update new operation mode=0x6 changes=0
wlan0: STA xx:xx:xx:xx:xx:xx IEEE 802.11: association OK (aid 1)
mgmt::assoc_resp cb
wlan0: STA xx:xx:xx:xx:xx:xx IEEE 802.11: associated (aid 1)
wlan0: STA xx:xx:xx:xx:xx:xx MLME: MLME-ASSOCIATE.indication(xx:xx:xx:xx:xx:xx)
wlan0: STA xx:xx:xx:xx:xx:xx MLME: MLME-DELETEKEYS.request(xx:xx:xx:xx:xx:xx)
wpa_driver_nl80211_set_key: ifindex=7 alg=0 addr=0x932ddd0 key_idx=0 set_tx=1 seq_len=0 key_len=0
   addr=xx:xx:xx:xx:xx:xx
wlan0: STA xx:xx:xx:xx:xx:xx WPA: event 1 notification
wpa_driver_nl80211_set_key: ifindex=7 alg=0 addr=0x932ddd0 key_idx=0 set_tx=1 seq_len=0 key_len=0
   addr=xx:xx:xx:xx:xx:xx
IEEE 802.1X: Ignore STA - 802.1X not enabled or forced for WPS
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state AUTHENTICATION2
WPA: Assign ANonce - hexdump(len=32): 61 31 36 07 83 07 8a c3 57 6c 1d 50 a0 44 15 3e c0 76 93 05 4b b5 85 e7 cd 0c 4b bb 94 90 a6 6e
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state INITPSK
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKSTART
wlan0: STA xx:xx:xx:xx:xx:xx WPA: sending 1/4 msg of 4-Way Handshake
WPA: Send EAPOL(version=2 secure=0 mic=0 ack=1 install=0 pairwise=8 kde_len=0 keyidx=0 encr=0)
WPA: Use EAPOL-Key timeout of 100 ms (retry counter 1)
nl80211: Event message available
nl80211: New station xx:xx:xx:xx:xx:xx
IEEE 802.1X: 121 bytes from xx:xx:xx:xx:xx:xx
   IEEE 802.1X: version=1 type=3 length=117
WPA: Received EAPOL-Key from xx:xx:xx:xx:xx:xx key_info=0x10a type=2 key_data_length=22
WPA: Received Key Nonce - hexdump(len=32): 4c 90 01 ef c1 29 d5 85 46 2a 8c 85 f6 6d 2a 07 04 e7 9e 08 12 f2 c4 ac f7 90 14 07 fc b4 ec cd
WPA: Received Replay Counter - hexdump(len=8): 00 00 00 00 00 00 00 01
wlan0: STA xx:xx:xx:xx:xx:xx WPA: received EAPOL-Key frame (2/4 Pairwise)
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKCALCNEGOTIATING
WPA: PTK derivation - A1=yy:yy:yy:yy:yy:yy A2=xx:xx:xx:xx:xx:xx
WPA: Nonce1 - hexdump(len=32): 61 31 36 07 83 07 8a c3 57 6c 1d 50 a0 44 15 3e c0 76 93 05 4b b5 85 e7 cd 0c 4b bb 94 90 a6 6e
WPA: Nonce2 - hexdump(len=32): 4c 90 01 ef c1 29 d5 85 46 2a 8c 85 f6 6d 2a 07 04 e7 9e 08 12 f2 c4 ac f7 90 14 07 fc b4 ec cd
WPA: PMK - hexdump(len=32): [REMOVED]
WPA: PTK - hexdump(len=48): [REMOVED]
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKCALCNEGOTIATING2
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKINITNEGOTIATING
wlan0: STA xx:xx:xx:xx:xx:xx WPA: sending 3/4 msg of 4-Way Handshake
WPA: Send EAPOL(version=2 secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=46 keyidx=2 encr=1)
Plaintext EAPOL-Key Key Data - hexdump(len=56): [REMOVED]
WPA: Use EAPOL-Key timeout of 100 ms (retry counter 1)
mgmt::action cb
wlan0: STA xx:xx:xx:xx:xx:xx WPA: EAPOL-Key timeout
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKINITNEGOTIATING
wlan0: STA xx:xx:xx:xx:xx:xx WPA: sending 3/4 msg of 4-Way Handshake
WPA: Send EAPOL(version=2 secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=46 keyidx=2 encr=1)
Plaintext EAPOL-Key Key Data - hexdump(len=56): [REMOVED]
WPA: Use EAPOL-Key timeout of 1000 ms (retry counter 2)
wlan0: STA xx:xx:xx:xx:xx:xx WPA: EAPOL-Key timeout
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKINITNEGOTIATING
wlan0: STA xx:xx:xx:xx:xx:xx WPA: sending 3/4 msg of 4-Way Handshake
WPA: Send EAPOL(version=2 secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=46 keyidx=2 encr=1)
Plaintext EAPOL-Key Key Data - hexdump(len=56): [REMOVED]
WPA: Use EAPOL-Key timeout of 1000 ms (retry counter 3)
wlan0: STA xx:xx:xx:xx:xx:xx WPA: EAPOL-Key timeout
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKINITNEGOTIATING
wlan0: STA xx:xx:xx:xx:xx:xx WPA: sending 3/4 msg of 4-Way Handshake
WPA: Send EAPOL(version=2 secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=46 keyidx=2 encr=1)
Plaintext EAPOL-Key Key Data - hexdump(len=56): [REMOVED]
WPA: Use EAPOL-Key timeout of 1000 ms (retry counter 4)
wlan0: STA xx:xx:xx:xx:xx:xx WPA: EAPOL-Key timeout
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state PTKINITNEGOTIATING
wlan0: STA xx:xx:xx:xx:xx:xx WPA: PTKINITNEGOTIATING: Retry limit 4 reached
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state DISCONNECT
hostapd_wpa_auth_disconnect: WPA authenticator requests disconnect: STA xx:xx:xx:xx:xx:xx reason 2
wlan0: STA xx:xx:xx:xx:xx:xx WPA: event 3 notification
wpa_driver_nl80211_set_key: ifindex=7 alg=0 addr=0x932ddd0 key_idx=0 set_tx=1 seq_len=0 key_len=0
   addr=xx:xx:xx:xx:xx:xx
WPA: wpa_sm_step() called recursively
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state DISCONNECTED
WPA: xx:xx:xx:xx:xx:xx WPA_PTK entering state INITIALIZE
wpa_driver_nl80211_set_key: ifindex=7 alg=0 addr=0x932ddd0 key_idx=0 set_tx=1 seq_len=0 key_len=0
   addr=xx:xx:xx:xx:xx:xx
wlan0: STA xx:xx:xx:xx:xx:xx IEEE 802.1X: unauthorizing port
mgmt::deauth cb
STA xx:xx:xx:xx:xx:xx acknowledged deauth
Removing STA xx:xx:xx:xx:xx:xx from kernel driver
wlan0: STA xx:xx:xx:xx:xx:xx MLME: MLME-DEAUTHENTICATE.indication(xx:xx:xx:xx:xx:xx, 2)
wlan0: STA xx:xx:xx:xx:xx:xx MLME: MLME-DELETEKEYS.request(xx:xx:xx:xx:xx:xx)
wpa_driver_nl80211_set_key: ifindex=7 alg=0 addr=0x932ddd0 key_idx=0 set_tx=1 seq_len=0 key_len=0
   addr=xx:xx:xx:xx:xx:xx

Also there is one time was "WPA: invalid MIC in msg 2/4 of 4-Way Handshake", but I can't catch it now.