got 3760 bytes from kern.ttys (readable as UNPRIVILEGED user)
raw blob written to ttys.bin
could not guess struct tty record size; scanning whole blob

Leaked kernel-range pointer-sized values:

TOTAL kernel-range pointers leaked      : 0
  of which kernel .text/.rodata (FN)    : 0
  of which heap/direct-map              : 0

VERDICT: NO LEAK — pointer fields are sanitized (fixed kernel).
RC=2