kfence: zero guard page after out-of-bounds access