panic (wi_cmd)

Hello
after few months I tried -CURRENT on my router (because of new ath driver)
with four XI-626 (Prism2.5) cards and one Atheros based card
I have in rc.conf

ifconfig_wi0="inet 10.27.4.1/27 ssid bhillz-alfa.CZF channel 10 mediaopt
hostap up"
ifconfig_wi1="10.27.64.34/30 ssid bhillz-kamyk channel 9 mediaopt adhoc up"
ifconfig_wi1_alias0="inet 10.27.64.54/30"
ifconfig_wi2="inet 10.27.134.3/29 ssid bhillz-caha up"
ifconfig_wi3="inet 10.27.128.17/30 ssid bhillz-radotin.CZF channel 3
mediaopt adhoc up"
ifconfig_wi3_alias0="10.27.192.6/30"
ifconfig_ath0="10.27.128.58/30 ssid BH2TR channel 149 media autoselect
mode 11a mediaopt hostap up"

Is there something wrong in my config ?
The same config works well on RELENG_5

I got panic after setting up wi interface
I tried to comment out ifconfig_wi0, ifconfig_wi1 etc..,
but on every ifconfig wi call i got the same panic.
any suggestions ?

here is dmesg and trace

/boot/kernel/acpi.ko text=0x41c9c data=0x2124+0x10cc
syms=[0x4+0x7730+0x4+0x9ea0]
GDB: no debug ports present
KDB: debugger backends: ddb
KDB: current backend: ddb
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 6.0-CURRENT #1: Wed May 11 18:38:12 CEST 2005
    xmik_at_tresen-6.praha12.czf:/usr/obj/usr/src/sys/ROUTER-IPFW-PF
WARNING: WITNESS option enabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: AMD Athlon(tm) XP 1800+ (1533.40-MHz 686-class CPU)
  Origin = "AuthenticAMD"  Id = 0x662  Stepping = 2
 
Features=0x383fbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE>
  AMD Features=0xc0480000<MP,AMIE,DSP,3DNow!>
real memory  = 805240832 (767 MB)
avail memory = 778891264 (742 MB)
ath_hal: 0.9.14.9 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
acpi0: <AMIINT VIA_K7> on motherboard
acpi0: Power Button (fixed)
pci_link0: <ACPI PCI Link LNKA> irq 10 on acpi0
pci_link1: <ACPI PCI Link LNKB> irq 11 on acpi0
pci_link2: <ACPI PCI Link LNKC> irq 7 on acpi0
pci_link3: <ACPI PCI Link LNKD> irq 5 on acpi0
pci_link4: <ACPI PCI Link LNKE> irq 0 on acpi0
pci_link5: <ACPI PCI Link LNKF> irq 0 on acpi0
pci_link6: <ACPI PCI Link LNKG> irq 0 on acpi0
pci_link7: <ACPI PCI Link LNKH> irq 0 on acpi0
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x808-0x80b on acpi0
cpu0: <ACPI CPU> on acpi0
acpi_throttle0: <ACPI CPU Throttling> on cpu0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
agp0: <VIA 8377 (Apollo KT400/KT400A/KT600) host to PCI bridge> mem
0xe0000000-0xe3ffffff at device 0.0 on pci0
pcib1: <PCI-PCI bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
wi0: <Intersil Prism2.5> mem 0xdfaff000-0xdfafffff irq 10 at device 8.0
on pci0
wi0: using RF:PRISM2.5 MAC:ISL3874A(Mini-PCI)
wi0: Intersil Firmware: Primary (1.1.1), Station (1.7.4)
wi0: Ethernet address: 00:60:b3:6d:7a:15
wi1: <Intersil Prism2.5> mem 0xdfafe000-0xdfafefff irq 5 at device 9.0
on pci0
wi1: using RF:PRISM2.5 MAC:ISL3874A(Mini-PCI)
wi1: Intersil Firmware: Primary (1.1.1), Station (1.7.4)
wi1: Ethernet address: 00:60:b3:6d:7a:a2
ath0: <Atheros 5212> mem 0xdffe0000-0xdffeffff irq 7 at device 10.0 on pci0
ath0: Ethernet address: 00:90:4b:ca:33:19
ath0: mac 5.9 phy 4.3 radio 3.6
wi2: <Intersil Prism2.5> mem 0xdfafd000-0xdfafdfff irq 11 at device 11.0
on pci0
wi2: using RF:PRISM2.5 MAC:ISL3874A(Mini-PCI)
wi2: Intersil Firmware: Primary (1.1.1), Station (1.7.4)
wi2: Ethernet address: 00:60:b3:69:ea:69
wi3: <Intersil Prism2.5> mem 0xdfafc000-0xdfafcfff irq 7 at device 12.0
on pci0
wi3: using RF:PRISM2.5 MAC:ISL3874A(Mini-PCI)
wi3: Intersil Firmware: Primary (1.1.1), Station (1.8.0)
wi3: Ethernet address: 00:60:b3:6d:78:9d
fxp0: <Intel 82559 Pro/100 Ethernet> port 0xd400-0xd43f mem
0xdfffb000-0xdfffbfff,0xdfe00000-0xdfefffff irq 11 at device 14.0 on pci0
miibus0: <MII bus> on fxp0
inphy0: <i82555 10/100 media interface> on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
fxp0: Ethernet address: 00:d0:b7:16:ce:43
atapci0: <VIA 6420 SATA150 controller> port
0xec00-0xec07,0xe800-0xe803,0xe400-0xe407,0xe000-0xe003,0xdc00-0xdc0f,0xd800-0xd8ff
irq 11 at device 15.0 on pci0
ata2: <ATA channel 0> on atapci0
ata3: <ATA channel 1> on atapci0
atapci1: <VIA 8237 UDMA133 controller> port
0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xfc00-0xfc0f at device 15.1 on pci0
ata0: <ATA channel 0> on atapci1
ata1: <ATA channel 1> on atapci1
uhci0: <VIA 83C572 USB controller> port 0xc400-0xc41f irq 10 at device
16.0 on pci0
uhci0: [GIANT-LOCKED]
usb0: <VIA 83C572 USB controller> on uhci0
usb0: USB revision 1.0
uhub0: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
uhci1: <VIA 83C572 USB controller> port 0xc800-0xc81f irq 10 at device
16.1 on pci0
uhci1: [GIANT-LOCKED]
usb1: <VIA 83C572 USB controller> on uhci1
usb1: USB revision 1.0
uhub1: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub1: 2 ports with 2 removable, self powered
uhci2: <VIA 83C572 USB controller> port 0xcc00-0xcc1f irq 11 at device
16.2 on pci0
uhci2: [GIANT-LOCKED]
usb2: <VIA 83C572 USB controller> on uhci2
usb2: USB revision 1.0
uhub2: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub2: 2 ports with 2 removable, self powered
uhci3: <VIA 83C572 USB controller> port 0xd000-0xd01f irq 11 at device
16.3 on pci0
uhci3: [GIANT-LOCKED]
usb3: <VIA 83C572 USB controller> on uhci3
usb3: USB revision 1.0
uhub3: VIA UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub3: 2 ports with 2 removable, self powered
ehci0: <VIA VT6202 USB 2.0 controller> mem 0xdfffae00-0xdfffaeff irq 7
at device 16.4 on pci0
ehci0: [GIANT-LOCKED]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <VIA VT6202 USB 2.0 controller> on ehci0
usb4: USB revision 2.0
uhub4: VIA EHCI root hub, class 9/0, rev 2.00/1.00, addr 1
uhub4: 8 ports with 8 removable, self powered
isab0: <PCI-ISA bridge> at device 17.0 on pci0
isa0: <ISA bus> on isab0
vr0: <VIA VT6102 Rhine II 10/100BaseTX> port 0xc000-0xc0ff mem
0xdfffad00-0xdfffadff irq 7 at device 18.0 on pci0
miibus1: <MII bus> on vr0
ukphy0: <Generic IEEE 802.3u media interface> on miibus1
ukphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
vr0: Ethernet address: 00:69:00:0e:24:ff
acpi_button1: <Sleep Button> on acpi0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on
acpi0
sio0: type 16550A, console
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
pmtimer0 on isa0
orm0: <ISA Option ROM> at iomem 0xc8000-0xc8fff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
atkbd0: [GIANT-LOCKED]
fdc0: No FDOUT register!
ppc0: parallel port not found.
ucom0: Prolific Technology Inc. USB-Serial Controller, rev 1.10/3.00, addr 2
RTC BIOS diagnostic error 20<config_unit>
Timecounter "TSC" frequency 1533399196 Hz quality 800
Timecounters tick every 1.000 msec
ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding
enabled, default to accept, logging unlimited
ad0: 488MB <512M 1.1> at ata0-master PIO4
ATA PseudoRAID loaded
Trying to mount root from ufs:/dev/ad0s1a
Loading configuration files.
Entropy harvesting: interrupts ethernet point_to_point kickstart.
Starting file system checks:
/dev/ad0s1a: FILE SYSTEM CLEAN; SKIPPING CHECKS
/dev/ad0s1a: clean, 155346 free (122 frags, 19403 blocks, 0.1%
fragmentation)
-- RESTORING /var from FlashDisk--
-- /var was RESTORED --
Setting hostname: bhillz.praha12.czf.
net.inet.icmp.icmplim: 200 -> 400
net.inet.ip.random_id: 0 -> 1
net.inet.ip.process_options: 1 -> 0
kern.ipc.maxsockbuf: 262144 -> 2097152
dev.ath.0.acktimeout: 45 -> 30
dev.ath.0.ctstimeout: 45 -> 30
dev.ath.0.slottime: 20 -> 9
ifconfig: SIOCIFCREATE: Invalid argument
ifconfig: SIOCIFCREATE: Invalid argument
ifconfig: SIOCIFCREATE: Invalid argument
panic: Hey partner, hold on there!
KDB: enter: panic
[thread pid 21 tid 100015 ]
Stopped at      kdb_enter+0x2b: nop
db> where
Tracing pid 21 tid 100015 td 0xc1de7c00
kdb_enter(c0721694) at kdb_enter+0x2b
panic(c0719f6a,c206ea00,134,c1ee525c,dc97ead0) at panic+0xbb
wi_cmd(c1ee5000,10b,134,0,0) at wi_cmd+0x31
wi_start(c1ee5000) at wi_start+0x5c9
if_start(c1ee5000,c1ee5000,2,c1ee525c,c206ea00) at if_start+0x7b
ieee80211_mgmt_output(c1ee525c,c2115400,c206ea00,b0,17) at
ieee80211_mgmt_output+0x2a9
ieee80211_send_mgmt(c1ee525c,c2115400,b0,2) at ieee80211_send_mgmt+0x991
ieee80211_auth_open(c1ee525c,c206eb30,c2115400,24,5151b,1,0) at
ieee80211_auth_open+0xcf
ieee80211_recv_mgmt(c1ee525c,c206eb00,c2116000,b0,24) at
ieee80211_recv_mgmt+0xe7f
ieee80211_input(c1ee525c,c206eb00,c2116000,24,5151b) at
ieee80211_input+0xb15
wi_rx_intr(c1ee5000) at wi_rx_intr+0x476
wi_intr(c1ee5000) at wi_intr+0x143
ithread_loop(c1de2780,dc97ed38,c1de2780,c052f6fc,0) at ithread_loop+0x120
fork_exit(c052f6fc,c1de2780,dc97ed38) at fork_exit+0xa0
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xdc97ed6c, ebp = 0 ---