[attack] fifo bytes (5): 80 55 a5 a5 a5 [attack] FIFO should be: 80 55 A5 A5 A5 -- bytes [2..4] are kernel-stack residue the device never sent (leaked to userspace via /dev/uepN read) attack_exit=0 [control] fifo bytes (5): 80 11 22 33 44 [control] full 5-byte transfer: all FIFO bytes device-supplied control_exit=0