===== same-worker run 1 (2026-10-22T18:20:58+08:00) =====
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f5396b3eb60 -> libphp=0x7f53964e0000
      chunk buckets: [('0x7f5394200000', 7495), ('0x7f5396a00000', 1095), ('0x7f5394800000', 87), ('0x7f5394000000', 79)]
[try 1] A2 + B2: main=0x7f5394800000 S=0x7f53948f8398 zif_system=0x7f5396945370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
rc=0
===== same-worker run 2 (2026-10-22T18:21:00+08:00) =====
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f5396b3eb60 -> libphp=0x7f53964e0000
      chunk buckets: [('0x7f5394200000', 7495), ('0x7f5396a00000', 1095), ('0x7f5394800000', 87), ('0x7f5394000000', 79)]
[try 1] A2 + B2: main=0x7f5394800000 S=0x7f53948f8398 zif_system=0x7f5396945370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
rc=0
===== same-worker run 3 (2026-10-22T18:21:02+08:00) =====
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f5396b3eb60 -> libphp=0x7f53964e0000
      chunk buckets: [('0x7f5394200000', 7495), ('0x7f5396a00000', 1095), ('0x7f5394800000', 87), ('0x7f5394000000', 79)]
[try 1] A2 + B2: main=0x7f5394800000 S=0x7f53948f8398 zif_system=0x7f5396945370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
rc=0
===== fresh-container run 1 (2026-10-22T18:21:04+08:00) =====
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f4a19fb1b60 -> libphp=0x7f4a19953000
      chunk buckets: [('0x7f4a17600000', 7495), ('0x7f4a19e00000', 1095), ('0x7f4a17c00000', 87), ('0x7f4a17400000', 79)]
[try 1] A2 + B2: main=0x7f4a17c00000 S=0x7f4a17cf8398 zif_system=0x7f4a19db8370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
rc=0
===== fresh-container run 2 (2026-10-22T18:21:09+08:00) =====
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f9037634b60 -> libphp=0x7f9036fd6000
      chunk buckets: [('0x7f9034c00000', 7495), ('0x7f9037600000', 1095), ('0x7f9035400000', 87), ('0x7f9034a00000', 79)]
[try 1] A2 + B2: main=0x7f9035400000 S=0x7f90354f8398 zif_system=0x7f903743b370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
rc=0
===== final validation (2026-10-22T18:23:13+08:00) =====
[try 1] A1: END-cleanup send_cookie OOM
[try 1] B1: stale-id OOB read (chunk base + libphp)
      decoded=819208 zval_ptr_dtor=0x7f0144ed5b60 -> libphp=0x7f0144877000
      chunk buckets: [('0x7f0142400000', 7495), ('0x7f0144e00000', 1095), ('0x7f0142c00000', 87), ('0x7f0142200000', 79)]
[try 1] A2 + B2: main=0x7f0142c00000 S=0x7f0142cf8398 zif_system=0x7f0144cdc370
[4/4] RCE OK; proof /home/debian/p2s-pure-1022/out/p1:
uid=33(www-data) gid=33(www-data) groups=33(www-data)
rc=0