### run.sh ssh stdout ###
== loading module ==
 4    1 0xffffffff82600000     4000 rfcomm_up5747.ko (/root/rfup/DF-5747/rfcomm_up5747.ko)
		325 rfcomm_up5747
== firing scenario (hw.df5747_fire=1) ==
EXPECT: bind #2 returns 0 with live-listener mutation (upstream: EINVAL)
hw.df5747_fire: 0 -> 0
== done (module left loaded; guest reset cleans up) ==

### dmesg (kernel console) — baseline run, verbatim production code ###
=== DF-5747 harness: rfcomm_bind() missing DLC state check ===
[DF-5747] bind #1 (state CLOSED)          -> 0 (expect 0)
[DF-5747] listen()                        -> 0; state=8 (8=LISTEN), channel=3
[DF-5747] bind #2 (state LISTEN)          -> 0  (BUG: live listener mutated; upstream returns EINVAL)
[DF-5747] listener now advertises: channel=5 psm=0x1001 state=8
[DF-5747] disconnect() on LISTEN dlc      -> 22 (expect EINVAL)
[upper] disconnected (0)
[DF-5747] detach() complete, dlc freed, listen session freed
=== DF-5747 harness done ===