Ultra-2 with ISP panics

[Baby Peanut]

I boot older release diskless and fsck /dev/da0a but when I try to boot
-current from it:

Rebooting...
Resetting ... 

Sun Ultra 2 UPA/SBus (2 X UltraSPARC 200MHz), No Keyboard
OpenBoot 3.11, 768 MB memory installed, Serial #8830939.
Ethernet address 8:0:20:86:bf:db, Host ID: 8086bfdb.


Rebooting with command: boot /sbus at 1f,0/QLGC,isp at 3,10000/sd at 2,0:a     
Boot device: /sbus at 1f,0/QLGC,isp at 3,10000/sd at 2,0:a  File and args: 
 
>> FreeBSD/sparc64 boot block
   Boot path:   /sbus at 1f,0/QLGC,isp at 3,10000/sd at 2,0:a
   Boot loader: /boot/loader
Console: OpenFirmware console

FreeBSD/sparc64 bootstrap loader, Revision 1.0
(kstailey at netman.kenland.etc, Tue Apr 22 22:15:02 EDT 2003)
bootpath="/sbus at 1f,0/QLGC,isp at 3,10000/sd at 2,0:a"
WARNING: attempt to free non dma-alloc'd range: -2000 2000 
Loading /boot/defaults/loader.conf 
WARNING: attempt to free non dma-alloc'd range: -2000 2000 
WARNING: attempt to free non dma-alloc'd range: -2000 2000 
WARNING: attempt to free non dma-alloc'd range: -2000 2000 
WARNING: attempt to free non dma-alloc'd range: -2000 2000 
/boot/kernel/kernel data=0x384408+0x126f28
syms=[0x8+0x50340+0x8+0x3f810]

Hit [Enter] to boot immediately, or any other key for command prompt.
Booting [/boot/kernel/kernel]...               
nothing to autoload yet.
jumping to kernel entry at 0xc0040000.
msgstray vector interrupt 2033
buf cksum mismatch (read 2e587, calc 570cf)
Copyright (c) 1992-2003 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993,
1994
        The Regents of the University of California. All rights
reserved.
FreeBSD 5.0-CURRENT #7: Wed Apr 23 18:31:51 EDT 2003
    kstailey at netman.kenland.etc:/usr/obj/usr/src/sys/GENERIC
Preloaded elf kernel "/boot/kernel/kernel" at 0xc053e000.
Timecounter "tick"  frequency 200001046 Hz
real memory  = 779337728 (743 MB)
avail memory = 749543424 (714 MB)
cpu0: Sun Microsystems UltraSparc-I Processor (200.00 MHz CPU)
cpu1: Sun Microsystems UltraSparc-I Processor (200.00 MHz CPU)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
nexus0: <OpenFirmware Nexus device>
sbus0: clock 25.000 MHz
DVMA map: 0xfe000000 to 0xffffffff
initialializing counter-timer
Timecounter "counter-timer"  frequency 1000000 Hz
sbus0: <U2S UPA-SBus bridge> on nexus0
sbus0: <SUNW,CS4231>, type (unknown) (no driver attached)
sbus0: <auxio>, type (unknown) (no driver attached)
sbus0: <flashprom>, type (unknown) (no driver attached)
sbus0: <SUNW,fdtwo>, type block (no driver attached)
eeprom0: <SBus EEPROM/clock> mem 0x1200000-0x1201fff on sbus0
eeprom0: model mk48t59
eeprom0: hostid 8086bfdb
zs0: <Zilog Z8530> mem 0x1100000-0x1100003 irq 2024 on sbus0
zstty0: <ttya> on zs0
zstty0: console 9600,8,n,1,-
zstty1: <ttyb> on zs0
sbus0: <zs>, type serial (no driver attached)
sbus0: <sc>, type (unknown) (no driver attached)
sbus0: <SUNW,pll>, type (unknown) (no driver attached)
sbus0: <SUNW,fas>, type scsi (no driver attached)
hme0: <Sun HME 10/100 Ethernet> mem
0x8c07000-0x8c0701f,0x8c06000-0x8c07fff,0x8c
04000-0x8c05fff,0x8c02000-0x8c03fff,0x8c00000-0x8c00107 irq 2017 on
sbus0
hme0: Ethernet address: 08:00:20:86:bf:db
miibus0: <MII bus> on hme0
nsphy0: <DP83840 10/100 media interface> on miibus0
nsphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
sbus0: <SUNW,bpp>, type (unknown) (no driver attached)
sbus0: <cgsix>, type display (no driver attached)
isp0 mem 0x10000-0x1044f irq 2011 on sbus0
Timecounters tick every 10.000 msec
Waiting 15 seconds for SCSI devices to settle
da0 at isp0 bus 0 target 2 lun 0
da0: <SEAGATE ST318404LSUN18G 5221> Fixed Direct Access SCSI-3 device 
da0: 20.000MB/s transfers (10.000MHz, offset 12, 16bit), Tagged
Queueing Enabled
da0: 17274MB (35378533 512 byte sectors: 255H 63S/T 2202C)
SMP: AP CPU #1 Launched!
Mounting root from ufs:/dev/da0a
zone: FFS1 dinode(0xfffff800461c25c0) slab 0x1f90 freed address 0
unaligned.
panic: should be 0xfffff800ffffffa0

cpuid = 1; 
Debugger("panic")
Stopped at      Debugger+0x1c:  ta              %xcc, 1
db> trace
panic() at panic+0x134
uma_dbg_free() at uma_dbg_free+0xc8
uma_zfree_arg() at uma_zfree_arg+0xf4
ffs_ifree() at ffs_ifree+0x28
ufs_reclaim() at ufs_reclaim+0xe8
ufs_vnoperate() at ufs_vnoperate+0x1c
vclean() at vclean+0x3d4
vgonel() at vgonel+0x44
vrecycle() at vrecycle+0x48
ufs_inactive() at ufs_inactive+0x25c
ufs_vnoperate() at ufs_vnoperate+0x1c
vput() at vput+0x170
ffs_vget() at ffs_vget+0x298
ufs_root() at ufs_root+0x18
start_init() at start_init+0x58
fork_exit() at fork_exit+0xd8
fork_trampoline() at fork_trampoline+0xdc
isp_2100_risc_code() at isp_2100_risc_code+0x7d8c
panic: mtx_lock() of spin mutex (null) @ /usr/src/sys/vm/vm_fault.c:285
cpuid = 1; 
Debugger("panic")
Stopped at      Debugger+0x1c:  ta              %xcc, 1
db> 

__________________________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo
http://search.yahoo.com