Well, since the only kernel stuff mapped through the tlb are the per-process
kernel stack and low level user page table, I'd be tempted to just
	addr & 0x1fffffff
to get the phys addr. (that is what both MACH_CACHED_TO_PHYS() and
MACH_UNCACHED_TO_PHYS() do.)

But I suppose that might be dangerous down the road, if other parts of
the kernel end up in mapped address space.

Have fun, rick

------------------------------------------------------------------------------