; captured verbatim from dfbsd-qemu/boot.log (host-side serial console)
; at 2026-09-19 ~15:14 UTC, immediately after `kldunload snd_atiixp`
; on the audit guest. The disk was then reverted (vm.sh reset with-src),
; which truncated boot.log — this excerpt is the preserved copy.
;
; ATTRIBUTION: this is KNOWN finding DF-4116
; (sys/dev/sound/pcm/sndstat.c, "sndstat_sysuninit deletes a
; never-initialized sbuf on sound.ko unload") — NOT a new finding, and
; NOT an atiixp.c defect. It is kept here because it was triggered by
; exercising the snd_atiixp module lifecycle during this audit, and it
; incidentally re-confirms DF-4116 at runtime.

panic: sbuf_delete called with uninitialized or corrupt sbuf
cpuid = 4
Trace beginning at frame 0xfffff801184df828
_assert_sbuf_integrity() at _assert_sbuf_integrity+0x42 0xffffffff806a0a12 
_assert_sbuf_integrity() at _assert_sbuf_integrity+0x42 0xffffffff806a0a12 
sbuf_delete() at sbuf_delete+0x1b 0xffffffff806a172b 
sndstat_sysuninit() at sndstat_sysuninit+0x8c 0xffffffff8269a46c 
linker_file_unload() at linker_file_unload+0x3aa 0xffffffff8062437a 
linker_file_unload() at linker_file_unload+0x14e 0xffffffff8062411e 
Debugger("panic")

CPU4 stopping CPUs: 0x0000002f
 stopped
Stopped at      Debugger+0x7c:  movb    $0,0xbdaf09(%rip)
db>