DF-2295 leak_sample.txt host-side byte-attribution
captured bytes: 1504 (read() return), slot psize: 512, stream.len: 1500
window at user offset X (X>=512) covers ring byte offset r=X-512, i.e. slot (r//512)+1 at slot-local offset r%%512;
expected record: {0xF00DF00D, 0x50000000|slot, off, 0xDEADC0DE^tag}.

user[ 512..] = ring slot 1 offset    0  OK
user[ 528..] = ring slot 1 offset   16  OK
user[ 544..] = ring slot 1 offset   32  OK
user[ 560..] = ring slot 1 offset   48  OK
user[ 576..] = ring slot 1 offset   64  OK
user[ 592..] = ring slot 1 offset   80  OK
user[ 608..] = ring slot 1 offset   96  OK
user[ 624..] = ring slot 1 offset  112  OK
user[ 640..] = ring slot 1 offset  128  OK
user[ 656..] = ring slot 1 offset  144  OK
user[ 672..] = ring slot 1 offset  160  OK
user[ 688..] = ring slot 1 offset  176  OK
user[ 704..] = ring slot 1 offset  192  OK
user[ 720..] = ring slot 1 offset  208  OK
user[ 736..] = ring slot 1 offset  224  OK
user[ 752..] = ring slot 1 offset  240  OK
user[ 768..] = ring slot 1 offset  256  OK
user[ 784..] = ring slot 1 offset  272  OK
user[ 800..] = ring slot 1 offset  288  OK
user[ 816..] = ring slot 1 offset  304  OK
user[ 832..] = ring slot 1 offset  320  OK
user[ 848..] = ring slot 1 offset  336  OK
user[ 864..] = ring slot 1 offset  352  OK
user[ 880..] = ring slot 1 offset  368  OK
user[ 896..] = ring slot 1 offset  384  OK
user[ 912..] = ring slot 1 offset  400  OK
user[ 928..] = ring slot 1 offset  416  OK
user[ 944..] = ring slot 1 offset  432  OK
user[ 960..] = ring slot 1 offset  448  OK
user[ 976..] = ring slot 1 offset  464  OK
user[ 992..] = ring slot 1 offset  480  OK
user[1008..] = ring slot 1 offset  496  OK
user[1024..] = ring slot 2 offset    0  OK
user[1040..] = ring slot 2 offset   16  OK
user[1056..] = ring slot 2 offset   32  OK
user[1072..] = ring slot 2 offset   48  OK
user[1088..] = ring slot 2 offset   64  OK
user[1104..] = ring slot 2 offset   80  OK
user[1120..] = ring slot 2 offset   96  OK
user[1136..] = ring slot 2 offset  112  OK
user[1152..] = ring slot 2 offset  128  OK
user[1168..] = ring slot 2 offset  144  OK
user[1184..] = ring slot 2 offset  160  OK
user[1200..] = ring slot 2 offset  176  OK
user[1216..] = ring slot 2 offset  192  OK
user[1232..] = ring slot 2 offset  208  OK
user[1248..] = ring slot 2 offset  224  OK
user[1264..] = ring slot 2 offset  240  OK
user[1280..] = ring slot 2 offset  256  OK
user[1296..] = ring slot 2 offset  272  OK
user[1312..] = ring slot 2 offset  288  OK
user[1328..] = ring slot 2 offset  304  OK
user[1344..] = ring slot 2 offset  320  OK
user[1360..] = ring slot 2 offset  336  OK
user[1376..] = ring slot 2 offset  352  OK
user[1392..] = ring slot 2 offset  368  OK
user[1408..] = ring slot 2 offset  384  OK
user[1424..] = ring slot 2 offset  400  OK
user[1440..] = ring slot 2 offset  416  OK
user[1456..] = ring slot 2 offset  432  OK
user[1472..] = ring slot 2 offset  448  OK
user[1488..] = ring slot 2 offset  464  OK

windows checked: 62, all attributed: True
beyond-slot bytes: 992 — fully attributed to known adjacent DMA-ring slot content