[PATCH] SME: Fix duplicated Association Request IEs when continuing authentication

[Jouni Malinen]

On Thu, Jul 09, 2026 at 10:27:19PM +0200, Louis Kotze wrote:
> Commit 064d1b372876 skipped the RSN parameter selection when sending the
> second or later Authentication frame of an exchange (e.g., the SAE
> confirm). However, the skipped block was also what reset
> sme.assoc_req_ie_len, while the IE construction after the skip_setup
> label still ran for every Authentication frame. Each additional frame
> of the exchange appended another copy of several elements (Supported
> Operating Classes, RRM Enabled Capabilities, RSNXE, etc.) and inserted
> another Extended Capabilities element after the RSNE.
> 
> As a result, any connection that uses more than one Authentication
> frame with SME-in-wpa_supplicant (e.g., all SAE authentication with
> mac80211-based drivers) sends an Association Request frame with
> duplicated IEs. Found while debugging MLO association failures on
> rtw89 against a TP-Link Deco BE65 AP MLD, where the main branch sends
> each of these elements twice in the two-link association request while
> wpa_supplicant 2.11 sends them once.
> 
> Fix this by skipping the Association Request IE construction entirely
> when continuing an Authentication frame exchange. The IEs were already
> built when the first frame of the exchange was sent and do not change
> within the exchange.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA