I think I've seen my new favorite esoteric exploit construction

The demonstrated packet composition creates a splice-backed UDP skb containing bytes from a file opened read-only, queues the packet to NFQUEUE, taps the resulting netlink skb through a netlink tap and nlmon, rewrites only the linear prefix into a valid authenticated ESP packet using traffic-control pedit, and redirects the packet to loopback. The nonlinear file-backed fragment remains attached. ESP then performs authenticated decryption over the retained page-cache-backed bytes.

Like check it out, it's Tony Hawks Pro Packet Mangler 2

Rube Goldberg Machine of a chain, love it, unhinged