> it seems like a bug to me.
> (although i'm not sure how pvepl is used.  i'm not really sure if
> i'm looking at a right file. :-)

I just tested the following patch to free routine but was still able to
reproduce the crash. :-(


Index: arm32/pmap.c
===================================================================
RCS file: /cvsroot/src/sys/arch/arm/arm32/pmap.c,v
retrieving revision 1.149
diff -u -r1.149 pmap.c
--- arm32/pmap.c        2 Jan 2005 22:47:26 -0000       1.149
+++ arm32/pmap.c        14 Jan 2005 02:05:37 -0000
@@ -4136,16 +4136,16 @@
 {
        extern void pool_page_free(struct pool *, void *);

-       if (pmap_initialized) {
-               pool_page_free(pp, v);
-               return;
-       }
-
        if ((vaddr_t)v < last_bootstrap_page) {
                *((void **)v) = free_bootstrap_pages;
                free_bootstrap_pages = v;
                return;
        }
+
+       if (pmap_initialized) {
+               pool_page_free(pp, v);
+               return;
+       }
 }

 /*