# Patched kernel (#1 with fix.diff hunk 1 - tty.c TIOCSCTTY dissociation),
# same PoC "hold 20" mode, same decoding:
kern.ttys: ... count=...
[00] state=01100020 line=0 dev=0x2100 pgrp=0x0 session=0x0 refs=0
# Identical orphan state, but t_session == NULL and t_pgrp == NULL: the
# replaced tty is fully dissociated by the fix. No dangling pointer.