Android cofiguring problem

```
Hi,all
We are tring to port USB wifi vt6656 to rowboat Android,we can use
wireless tools(which contain iwconfig,iwlist,etc.) configuring wifi
successfully,by using this way we can connect the internet
successfully.However,when we tried to use Android UI(wifi setting) to
configure it,it can find ap signal,but just a second later,the system
crashed,the logcat message shows below:

com.android.settings/com.android.settings.WirelessSettings paused=false}
I/ActivityManager( 771): Starting activity: Intent {
act=android.intent.action.MAIN
cmp=com.android.settings/.wifi.WifiSettings }
I/ActivityManager( 771): Displayed activity
com.android.settings/.wifi.WifiSettings: 327 ms (total 327 ms)
I/WindowManager( 771): Checking dispatch to: Window{49ca9e40 StatusBar
paused=false}
I/WindowManager( 771): Checking dispatch to: Window{49cdd180
StatusBarExpanded paused=false}
I/WindowManager( 771): Not visible!
I/WindowManager( 771): Checking dispatch to: Window{49cc8180 TrackingView
paused=false}
I/WindowManager( 771): Not visible!
I/WindowManager( 771): Checking dispatch to: Window{49c59978
com.android.settings/com.android.settings.wifi.WifiSettings paused=false}
D/SettingsWifiEnabler( 893): Received wifi state changed from Disabled to
Enabling
VIA Networking Wireless LAN USB Driver Ver. 1.20.03
VIA Networking Wireless LAN USB Driver Ver. 1.20.03
Copyright (c) 2004 VIA Networking Technologies, Inc.
eth1 (vntwusb): not using net_device_ops yet
vntwpa (vntwusb): not using net_device_ops yet
usb 1-1.1: reset high speed USB device using musb_hdrc and address 3
usbcore: registered new interface driver vntwusb
E/WifiHW ( 771): Wi-Fi has be loaded...
init: no such service 'ifcfg_vt6656'
D/dalvikvm( 771): GC freed 9820 objects / 470256 bytes in 156ms
Config_FileOperation file Not exist
Zone=[2][E][U]!!
Antenna AUX&MAIN all available!
E/WifiHW ( 771): Unable to open connection to supplicant
on "/data/system/wpa_supplicant/eth1": Connection refused
I/wpa_supplicant( 907): CTRL-EVENT-STATE-CHANGE id=-1 state=2
W/wpa_supplicant( 907): Failed to initiate AP scan.
D/WifiService( 771): ACTION_BATTERY_CHANGED pluggedType: 1
V/WifiHW ( 771): Not connected to wpa_supplicant - "LIST_NETWORKS"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "AP_SCAN 2" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-ACTIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "SCAN" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-PASSIVE"
command dropped.
D/SettingsWifiEnabler( 893): Received wifi state changed from Enabling to
Enabled
V/WifiHW ( 771): Not connected to wpa_supplicant - "LIST_NETWORKS"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "BLACKLIST clear"
command dropped.
I/wpa_supplicant( 907): CTRL-EVENT-SCAN-RESULTS Ready
I/wpa_supplicant( 907): Trying to assoAP(BSS) finding:Found a AP(BSS)..
ciate with 00:0a:eb:d0:e8:52 (SSID='TP-LINK' freq=2437 MHz)
I/wpa_supplicant( 907): CTRL-EVENT-STATE-CHANGE id=-1 state=3
802.11 Authen (OPEN) Successful.
Association Successful, AID=4.
Link with AP(SSID): TP-LINK
I/wpa_supplicant( 907): CTRL-EVENT-STATE-CHANGE id=0 state=4
I/wpa_supplicant( 907): Associated with 00:0a:eb:d0:e8:52
I/wpa_supplicant( 907): CTRL-EVENT-STATE-CHANGE id=0 state=7
I/wpa_supplicant( 907): CTRL-EVENT-CONNECTED - Connection to
00:0a:eb:d0:e8:52 completed (auth) [id=0 id_str=]
V/WifiHW ( 771): Not connected to wpa_supplicant - "AP_SCAN 2" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-ACTIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "SCAN" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-PASSIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "AP_SCAN 2" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-ACTIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "SCAN" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-PASSIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "AP_SCAN 2" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-ACTIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "SCAN" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-PASSIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "AP_SCAN 2" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-ACTIVE"
command dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "SCAN" command
dropped.
V/WifiHW ( 771): Not connected to wpa_supplicant - "DRIVER SCAN-PASSIVE"
command dropped.
E/SettingsWifiLayer( 893): Unable to scan for networks
I/NotificationService( 771): enqueueToast pkg=com.android.settings
callback=android.app.ITransientNotification$Stub$Proxy@49cf4e20 duration=1
W/ActivityManager( 771): Unable to start service Intent {
act=android.bluetooth.IBluetoothHeadset }: not found
E/BluetoothHeadset( 771): Could not bind to Bluetooth Headset Service
V/WifiStateTracker( 771): Connection to supplicant established,
state=COMPLETED
W/BluetoothHeadset( 771): Proxy not attached to service
D/WifiStateTracker( 771): DhcpHandler: DHCP request started
D/dalvikvm( 893): GC freed 3909 objects / 219888 bytes in 261ms
I/ARMAssembler( 771): generated
scanline__00000077:03515104_00001A01_00000000 [ 46 ipp] (68 ins) at
[0x25e4a8:0x25e5b8] in 427246 ns
I/wpa_supplicant( 907): CTRL-EVENT-SCAN-RESULTS Ready
I/WindowManager( 771): Checking dispatch to: Window{49ca9e40 StatusBar
paused=false}
I/WindowManager( 771): Checking dispatch to: Window{49cdd180
StatusBarExpanded paused=false}
I/WindowManager( 771): Not visible!
I/WindowManager( 771): Checking dispatch to: Window{49cc8180 TrackingView
paused=false}
I/WindowManager( 771): Not visible!
I/WindowManager( 771): Checking dispatch to: Window{49c59978
com.android.settings/com.android.settings.wifi.WifiSettings paused=false}
D/dalvikvm( 893): Trying to load lib /system/lib/libcerttool_jni.so 0x0
D/dalvikvm( 893): Added shared lib /system/lib/libcerttool_jni.so 0x0
I/ARMAssembler( 771): generated
scanline__00000077:03515104_00000000_00000000 [ 27 ipp] (41 ins) at
[0x262a70:0x262b14] in 305175 ns
I/ARMAssembler( 771): generated
scanline__00000077:03515104_00001001_00000000 [ 64 ipp] (84 ins) at
[0x263298:0x2633e8] in 427246 ns
I/WindowManager( 771): Checking dispatch to: Window{49ca9e40 StatusBar
paused=false}
I/WindowManager( 771): Checking dispatch to: Window{49cdd180
StatusBarExpanded paused=false}
I/WindowManager( 771): Not visible!
I/WindowManager( 771): Checking dispatch to: Window{49cc8180 TrackingView
paused=false}
I/WindowManager( 771): Not visible!
I/WindowManager( 771): Checking dispatch to: Window{49d2b8e0 Connect to
TP-LINK paused=false}
I/wpa_supplicant( 907): CTRL-EVENT-STATE-CHANGE id=0 state=0
V/WifiMonitor( 771): Event [CTRL-EVENT-STATE-CHANGE id=0 state=0]
V/WifiStateTracker( 771): ChangUnable to handle kernel NULL pointer
dereference at virtual address 00000001
ing supplicant state: COMPLETED pgd = c73cc000
==> DISCONNECTED
D/WifiStateTra[00000001] *pgd=87096031cker( 771): Deconfiguring inter,
*pte=00000000face and stopping DHCP
, *ppte=00000000
Internal error: Oops: 17 [#1]
Modules linked in: vntwusb
CPU: 0 Not tainted (2.6.29-rc3-omap1 #23)
PC is at tcp_v4_nuke_addr+0x80/0xb8
LR is at tcp_v4_nuke_addr+0x2c/0xb8
pc : [] lr : [] psr: 20000013
sp : c5c83e18 ip : c5c83e18 fp : c5c83e44
r10: 0000006e r9 : c04d1c30 r8 : c04d0efc
r7 : 00000000 r6 : 00000000 r5 : 00000001 r4 : 00000001
r3 : c7120000 r2 : c5c82000 r1 : 00000023 r0 : 00000000
Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
Control: 10c5387d Table: 873cc019 DAC: 00000015
Process ConnectivityThr (pid: 801, stack limit = 0xc5c822e0)
Stack: (0xc5c83e18 to 0xc5c84000)
3e00: c5c83e44
00008939
3e20: 00000000 00000001 c5fa70a0 c5c83e68 c5dbf400 c5fa70ac c5c83eb4
c5c83e48
3e40: c02ec550 c02e0940 00000008 c057fac0 52707d54 00000000 31687465
00000000
3e60: 00000000 00000000 00000002 00000000 00000000 00000000 00000002
00000000
3e80: 00000000 00000000 c5c83eb4 52707d54 00008939 52707d54 c7313f20
52707d54
3ea0: c5c82000 44105ea8 c5c83ecc c5c83eb8 c02ed58c c02ebe04 00000002
c7313f20
3ec0: c5c83eec c5c83ed0 c029f9f0 c02ed4b8 00000000 c7313f20 00008939
52707d54
3ee0: c5c83f0c c5c83ef0 c00b633c c029f808 c5c83fac 00000043 c7313f20
00008939
3f00: c5c83f7c c5c83f10 c00b6858 c00b6310 c5c83f5c c5c83f20 c02a003c
00000018
3f20: 00000000 00000000 fffffffe 00000000 c5c83f64 c5c83f40 c00731a0
c004f2c4
3f40: c729e01c c7132040 00000015 c70d4c00 c04583c0 00000043 52707d54
00008939
3f60: c7313f20 c0034044 c5c82000 44105ea8 c5c83fa4 c5c83f80 c00b68fc
c00b63b8
3f80: c02a0d20 00000001 adb040c8 52707d64 52707d54 00000036 00000000
c5c83fa8
3fa0: c0033ec0 c00b68c8 adb040c8 52707d64 00000043 00008939 52707d54
00000002
3fc0: adb040c8 52707d64 52707d54 00000036 52707da8 44105eb8 44105ea8
ad040101
3fe0: adb040dc 52707d38 afe1fbc5 afe0c71c 00000010 00000043 ff0020ff
ff0100ff
Backtrace:
[] (tcp_v4_nuke_addr+0x0/0xb8) from []
(devinet_ioctl+0x758/0x7cc)
[] (devinet_ioctl+0x0/0x7cc) from []
(inet_ioctl+0xe0/0x110)
[] (inet_ioctl+0x0/0x110) from []
(sock_ioctl+0x1f4/0x24c)
r4:c7313f20
[] (sock_ioctl+0x0/0x24c) from [] (vfs_ioctl+0x38/0x7c)
r6:52707d54 r5:00008939 r4:c7313f20
[] (vfs_ioctl+0x0/0x7c) from []
(do_vfs_ioctl+0x4ac/0x510)
r6:00008939 r5:c7313f20 r4:00000043
[] (do_vfs_ioctl+0x0/0x510) from []
(sys_ioctl+0x40/0x64)
[] (sys_ioctl+0x0/0x64) from []
(ret_fast_syscall+0x0/0x2c)
r7:00000036 r6:52707d54 r5:52707d64 r4:adb040c8
Code: ebffbdd8 e5955000 e2554000 0a000005 (e4143008)
Kernel panic - not syncing: Fatal exception in interrupt

```

Original issue reported on code.google.com by `jinkui...@gmail.com` on 16 May 2010 at 2:33

Start with the supplied logcat and kernel oops, focusing on the vntwusb driver, wpa_supplicant, WifiSettings, and the tcp_v4_nuke_addr backtrace. Reproduce the failure through Android's Wi-Fi settings rather than wireless tools, then trace the disconnect path. Done means the UI can configure the USB Wi-Fi device without triggering the kernel NULL-pointer panic.

Written by the indexing model from the issue text.