_gpu_dxg_r4d_probe2.nx

_gpu_dxg_r4d_probe2.nx -- SOVEREIGN-GPU ladder R4d PROBE pass 2: locate the allocation_info pointer. Probe-1 found alloc_count @44 (set @44=1 -> kernel reads the NULL allocation_info array -> -EFAULT(-14)). Now, with device@0 + alloc_count@44=1, point each 8-aligned u64 offset at a VALID readable buffer: the offset that makes the -14 EFAULT go AWAY (kernel successfully reads the d3dkmt_allocationinfo2 entry, then fails later with -EINVAL etc.) IS `allocation_info`. (@40 is skipped: a u64 there would clobber alloc_count@44.) raw syscalls only. No log writes. license_tier: ORIGINAL