On Helge's suggestion I stopped freeing bootmem, and the problem no longer manifests. No more time to work on it. I won't commit the syscall wrapper patch for now. -P