[*] dev=/dev/ttyv0 mode=23 geometry=40x25 nominal_capacity=1000
[*] filled 999 screen cells (vtb verified after 25 polls)
[*] mouse at pixel (319,399) after drag
[*] best paste delivery: 1024 bytes, 25 '\r' line breaks (over up to 25 attempts)
[*] pasted 1024 bytes back from the tty
[+] RESULT: OVERFLOW REPRODUCED - mouse_cut wrote and pasted 1024 bytes into a 1001-byte cut_buffer request (24 bytes beyond the requested allocation size).
[+] The 1024 delivered bytes require cut_buffer[0..1023] to be populated and the terminating NUL to be written at index 1024 - provably past the kmalloc'd size.
EXIT=0