I've also just hit this (Trixie on a Pi Zero W) wasted a day going down various rabbit holes to no avail. Has anyone raised it on the Raspbian github? EDIT: assuming not, I have just done so, see here https://github.com/raspberrypi/linux/issues/7247.
The moment you try to bring up a Hotspot with security included via NMCLI, it emits:
...and the log shows:
I also notice, earlier in the log there was a warning:
...and wondered if the [unactivated] Wifi direct p2p connection that the driver seems to create automagically could somehow be interfering with the ap_scan type (which I understand should be 0 for an AP).
The moment you try to bring up a Hotspot with security included via NMCLI, it emits:
Code:
Error: Connection activation failed: 802.1X supplicant took too long to authenticateCode:
wlan0: Could not connect to kernel drivernl80211: Station flush failed: ret=-14 (Bad address)nl80211: flush -> DEL_STATION wlan0 (all)wlan0: Flushing old station entriesWPA: group state machine entering state FATAL_FAILUREnl80211: set_key failed; err=-22 Invalid argumentnl80211: kernel reports: key setting validation failed broadcast keynl80211: KEY_DATA - hexdump(len=16): [REMOVED]nl80211: NEW_KEYwpa_driver_nl80211_set_key: ifindex=2 (wlan0) alg=4 addr=0x2089cc key_idx=4 set_tx=1 seq_len=0 key_len=16 key_flag=0x1anl80211: NL80211_CMD_SET_KEY - default key broadcast keynl80211: KEY_DATA - hexdump(len=16): [REMOVED]nl80211: NEW_KEYwpa_driver_nl80211_set_key: ifindex=2 (wlan0) alg=3 addr=0x2089cc key_idx=1 set_tx=1 seq_len=0 key_len=16 key_flag=0x1aWPA: group state machine entering state SETKEYSDONE (VLAN-ID 0)IGTK - hexdump(len=16): [REMOVED]GTK - hexdump(len=16): [REMOVED]WPA: group state machine entering state GTK_INIT (VLAN-ID 0)WPA: Start group state machine to set initial keysCode:
Note: nl80211 driver interface is not designed to be used with ap_scan=2; this can result in connection failuresStatistics: Posted by Rob Meades — Tue Feb 17, 2026 11:02 am