Representative leaked pointer values across 3 runs (stock kernel, uid 1001):
run1: f_file=0xfffff80116c49380 f_data=0xfffff8008f521b00  (struct file / vnode slab)
run2: f_file=0xfffff80117103700 f_data=0xfffff80117b4ea80  (DTYPE_SOCKET fp / socket)
run3: f_file=0xfffff801167ccd80 f_data=0xfffff8008f521b00
Pattern: stable kernel-heap direct-map addresses (0xfffff8xxxxxxxxxx), distinct
per-object, consistent with struct file objcache and vnode/socket slabs.