Rohde&Schwarz NRP-Zxx USB power sensors are not USB TMC but something undocumented and cursed.
You send it null terminated SCPI commands chunked into 16 byte pieces and 0 padded as USB bulk.
It sends back 16 byte USB bulk, byte 0 indicates what it is which can be a status, a little endian single precision float, 10 bytes of string or an indication that it's done sending a string.
