=== DF-2275 decisive BASELINE (vulnerable) runs ===
[userland] /root/da_user mlen  (DAIOCTRIM {start=0, len=4104})
mode=mlen      start=0 (0x0) len=4104 (0x1008) DAIOCTRIM=0x80104380 -> ioctl...

[kernel console]
panic: assertion "(bytes_left % 512) == 0" failed in daioctl at /usr/src/sys/bus/cam/scsi/scsi_da.c:558
daioctl() at daioctl+0x34d 0xffffffff802b9cbd 
daioctl() at daioctl+0x34d 0xffffffff802b9cbd 
dev_dioctl() at dev_dioctl+0x65 0xffffffff8062de55 
mapped_ioctl() at mapped_ioctl+0x5fa 0xffffffff806a93ba 
syscall2() at syscall2+0x11e 0xffffffff80bd7aae 

[userland] /root/da_user moff  (DAIOCTRIM {start=520, len=4096})
(guest down; output lost with the ssh connection - trigger line from run log:)
mode=moff      start=520 (0x208) len=4096 (0x1000) DAIOCTRIM=0x80104380 -> ioctl...

[kernel console]
panic: assertion "(bytes_start% 512) == 0" failed in daioctl at /usr/src/sys/bus/cam/scsi/scsi_da.c:559
daioctl() at daioctl+0x379 0xffffffff802b9ce9 
daioctl() at daioctl+0x379 0xffffffff802b9ce9 
dev_dioctl() at dev_dioctl+0x65 0xffffffff8062de55 
mapped_ioctl() at mapped_ioctl+0x5fa 0xffffffff806a93ba 
syscall2() at syscall2+0x11e 0xffffffff80bd7aae 

=== DF-2275 FIXED kernel A/B (fix.diff applied) ===
mode=mlen      start=0 (0x0) len=4104 (0x1008) DAIOCTRIM=0x80104380 -> ioctl...
ioctl returned r=-1 errno=22 (Invalid argument) in 0.000 sec
mode=moff      start=520 (0x208) len=4096 (0x1000) DAIOCTRIM=0x80104380 -> ioctl...
ioctl returned r=-1 errno=22 (Invalid argument) in 0.000 sec

Full logs: panic.txt, serial_mlen_full.log, serial_moff_full.log, run_baseline_full.log, rig/run_fixed_outer.log