Could you print out the contents of the bus_space_handle_t's after the
device is attached?  (On the Alpha this is just a 64-bit address.)
That would help determine whether it's just a subtle truncation bug
somewhere, or something else.

(The full dmesg output would be kinda nice, too.  I'm not sure who
here has one of these machines, but I'm sure I don't.)