No subject

[bogus at does.not.exist.com]

"On reception of Message 2, the Authenticator checks that the key replay
counter corresponds to the outstanding Message 1. If not, it silently discards
the message."

Hence, shouldn't hostapd just discard the first msg 2/4 it receives
from the STA?

As far as I could see this behavior was introduced in commit
22a299ee9d192d06c235428d017234539fbf6a62 ("Improve EAPOL-Key
handshake stability with retransmitted frames").

Thanks,
Helmut