SCENARIO guard: desc at page+4088, bLength=8, bNrInPins=3, d1 lands at offset 8 (== bLength)
SCENARIO guard: byte at offset 8 is the first byte of the PROT_NONE page -> expect SIGSEGV now
UAUDIO: invalid descriptor, type=36, sub_type=4, len=8 of 8 bytes
SCENARIO guard: returned 0x0 (rejected)
guard=0
SCENARIO canary: desc at page+4087, bLength=8, bNrInPins=3, d1 lands at offset 8 (== bLength)
UAUDIO: invalid descriptor, type=36, sub_type=4, len=8 of 8 bytes
SCENARIO canary: returned 0x0 (rejected)
SCENARIO canary: rejection DPRINTF above shows the OOB-read 0x5A inside 'len=104 of 8 bytes' -- the byte past the declared body was consumed
canary=0
SCENARIO control: desc at page+4076, bLength=20, bNrInPins=3, d1 lands at offset 8 (== bLength)
SCENARIO control: returned 0x800473fec (ACCEPTED)
control=0