Found it. The blocksize must be no greater than MAXBSIZE, but newfs doesn't check this. Instead, it cheerfully overruns its internal buffers and one part of the code stomps on things another part has set up. didn't lukem fix in -current this a few months back?