Ok, should hopefully be fixed now. Two of the procedures in kern_proc.c were leaking tokens. I need to put a test in the system call code so the panic is caught earlier. If not fixed there's another leaker somewhere. -Matt