=== patch --dry-run --forward output (proves fix.diff applies cleanly) === cmd: cd /usr/src && patch -p1 --dry-run --forward < DF-1494.diff APPLIES_OK (verified 2026-07-21 on with-src #0 baseline) --- fix.diff hunk summary --- @@ -1035,6 +1035,11 @@ + if (uio->uio_offset < 0 || + uio->uio_offset >= sbuf_len(&midistat_sbuf)) { + lockmgr(&midistat_lock, LK_RELEASE); + return 0; + }