WPS: Connection Issue after EAP-Fail with same SSID and different BSSID

[Krishna Chaitanya]

Hi,

While testing WPS we have encountered below scenario:

AP: 2.4 and 5GHz radios have same SSID (WPS enabled on both) but
different BSSID. First our DUT Connects to 2.4GHz Radio, does the WPS
handshake and disconnects after EAP-Fail. After that when it attempts
to connect again, based on the scan results it attempts connection to
5GHz Radio. This is because the wpa_supplicant is treating this
connection as a fresh attempt and follows normal rules for choosing an
AP.

Shouldn't we make the SSID/BSSID with which we have completed the WPS
handshake as a preferred network and try to connect to it first and
only then attempt a fresh connection?

Logs Snippet below: (Can share the full logs if needed)

EAP: Received EAP-Failure
EAP: Status notification: completion (param=failure)
CTRL_IFACE monitor sent successfully to /tmp/wpa_ctrl_24579-2\x00
EAP: Workaround for unexpected identifier field in EAP Success:
reqId=6 lastId=5 (these are supposed to be same)
EAP: EAP entering state FAILURE
wlan0: CTRL-EVENT-EAP-FAILURE EAP authentication failed
CTRL_IFACE monitor sent successfully to /tmp/wpa_ctrl_24579-2\x00
EAPOL: SUPP_PAE entering state HELD
EAPOL: Supplicant port status: Unauthorized
nl80211: Set supplicant port unauthorized for 00:90:4c:13:0f:26
EAPOL: SUPP_BE entering state RECEIVE
EAPOL: SUPP_BE entering state FAIL
EAPOL: SUPP_BE entering state IDLE
EAPOL authentication completed - result=FAILURE
WPS: Network configuration replaced - try to associate with the
received credential (freq=5200)
wlan0: Request to deauthenticate - bssid=00:90:4c:13:0f:26
pending_bssid=00:00:00:00:00:00 reason=3 state=ASSOCIATED
TDLS: Tear down peers
wpa_driver_nl80211_deauthenticate(addr=00:90:4c:13:0f:26 reason_code=3)
wlan0: Event DEAUTH (12) received
wlan0: Deauthentication notification
wlan0:  * reason 3 (locally generated)
Deauthentication frame IE(s) - hexdump(len=0): [NULL]
wlan0: CTRL-EVENT-DISCONNECTED bssid=00:90:4c:13:0f:26 reason=3
locally_generated=1
CTRL_IFACE monitor sent successfully to /tmp/wpa_ctrl_24579-2\x00
wlan0: Auto connect enabled: try to reconnect (wps=1/0 wpa_state=6)
wlan0: Setting scan request: 0.100000 sec
wlan0: Radio work 'sme-connect'@0xab2508 done in 4.093520 seconds
wlan0: Ignore connection failure due to local request to disconnect
TDLS: Remove peers on disassociation
wlan0: WPA: Clear old PMK and PTK
wlan0: Disconnect event - remove keys
wlan0: State: ASSOCIATED -> DISCONNECTED
nl80211: Set wlan0 operstate 0->0 (DORMANT)
netlink: Operstate: ifindex=5 linkmode=-1 (no change), operstate=5
(IF_OPER_DORMANT)
WMM AC: WMM AC is disabled
EAPOL: External notification - portEnabled=0
EAPOL: SUPP_PAE entering state DISCONNECTED
EAPOL: Supplicant port status: Unauthorized
nl80211: Skip set_supp_port(unauthorized) while not associated
EAPOL: SUPP_BE entering state INITIALIZE
EAP: EAP entering state DISABLED
EAPOL: External notification - portValid=0
wlan0: State: DISCONNECTED -> DISCONNECTED
nl80211: Set wlan0 operstate 0->0 (DORMANT)
netlink: Operstate: ifindex=5 linkmode=-1 (no change), operstate=5
(IF_OPER_DORMANT)
EAPOL: External notification - portEnabled=0
EAPOL: External notification - portValid=0
WPS: Checking whether fast association without a new scan can be used
wlan0: Selecting BSS from priority group 0
wlan0: 0: ec:1a:59:34:23:24 ssid='BELKIN_F9K1101v424G11g20WPA2'
wpa_ie_len=0 rsn_ie_len=20 caps=0x411 level=-22 wps
wlan0:    skip - SSID mismatch
wlan0: 1: 48:f8:b3:86:ae:81 ssid='LINKSYS_EA630024G11g20WPA2'
wpa_ie_len=0 rsn_ie_len=20 caps=0x411 level=-26 wps
wlan0:    skip - SSID mismatch
wlan0: 2: 00:90:4c:09:0f:26 ssid='Network-05210F26' wpa_ie_len=0
rsn_ie_len=20 caps=0x411 level=-33 wps
wlan0:    selected based on RSN IE
wlan0:    selected BSS 00:90:4c:09:0f:26 ssid='Network-05210F26'
WPS: Continue association from timeout
RTM_NEWLINK: ifi_index=5 ifname=wlan0 operstate=2 linkmode=1
ifi_family=0 ifi_flags=0x1003 ([UP])
RTM_NEWLINK: ifi_index=5 ifname=wlan0 wext ifi_family=0 ifi_flags=0x1003 ([UP])
nl80211: Event message available
nl80211: Drv Event 20 (NL80211_CMD_DEL_STATION) received for wlan0
nl80211: Delete station 00:90:4c:13:0f:26
nl80211: Event message available
nl80211: Drv Event 39 (NL80211_CMD_DEAUTHENTICATE) received for wlan0
nl80211: MLME event 39 (NL80211_CMD_DEAUTHENTICATE) on
wlan0(00:11:22:33:12:60) A1=00:90:4c:13:0f:26 A2=00:11:22:33:12:60
nl80211: MLME event frame - hexdump(len=26): c0 00 00 00 00 90 4c 13
0f 26 00 11 22 33 12 60 00 90 4c 13 0f 26 00 00 03 00
nl80211: Deauthenticate event
nl80211: Ignore deauth event triggered due to own deauth request
nl80211: Event message available
nl80211: Drv Event 48 (NL80211_CMD_DISCONNECT) received for wlan0
nl80211: Ignore disconnect event when using userspace SME
WPS: Continuing association after eapol_cb
wlan0: Selecting BSS from priority group 0
wlan0: 0: ec:1a:59:34:23:24 ssid='BELKIN_F9K1101v424G11g20WPA2'
wpa_ie_len=0 rsn_ie_len=20 caps=0x411 level=-22 wps
wlan0:    skip - SSID mismatch
wlan0: 1: 48:f8:b3:86:ae:81 ssid='LINKSYS_EA630024G11g20WPA2'
wpa_ie_len=0 rsn_ie_len=20 caps=0x411 level=-26 wps
wlan0:    skip - SSID mismatch
wlan0: 2: 00:90:4c:09:0f:26 ssid='Network-05210F26' wpa_ie_len=0
rsn_ie_len=20 caps=0x411 level=-33 wps
wlan0:    selected based on RSN IE
wlan0:    selected BSS 00:90:4c:09:0f:26 ssid='Network-05210F26'
wlan0: Considering connect request: reassociate: 1  selected:
00:90:4c:09:0f:26  bssid: 00:00:00:00:00:00  pending:
00:00:00:00:00:00  wpa_state: DISCONNECTED  ssid=0xab72c0
current_ssid=(nil)
wlan0: Request association with 00:90:4c:09:0f:26
wlan0: Re-association to the same ESS