Loading...
src/magazine_tiny.c libmalloc-166.220.1 libmalloc-116
--- libmalloc/libmalloc-166.220.1/src/magazine_tiny.c
+++ libmalloc/libmalloc-116/src/magazine_tiny.c
@@ -23,40 +23,6 @@
 
 #include "internal.h"
 
-// The address and size of the block in mag_last_free are combined. These
-// macros abstract construction of the combined value and extraction of the
-// size and pointer.
-#define TINY_MAG_LAST_FREE_FROM_PTR_AND_MSIZE(ptr, msize) (void *)(((uintptr_t)(ptr))|((msize_t)msize))
-#define TINY_PTR_FROM_MAG_LAST_FREE(x) (void *)(((uintptr_t)(x)) & ~(TINY_QUANTUM - 1))
-#define TINY_MSIZE_FROM_MAG_LAST_FREE(x) (msize_t)(((uintptr_t)(x)) & (TINY_QUANTUM - 1))
-
-// Adjusts the pointer part of mag_last_free by a given amount in bytes. Must be
-// a multiple of the quantum size (not checked).
-#define TINY_MAG_LAST_FREE_PTR_ADJUST_PTR(x, size) (x) = ((void *)(x) + (size))
-
-// Decrements the size part of mag_last_free by a given msize value. Must not
-// reduce the msize part below zero (not checked).
-#define TINY_MAG_LAST_FREE_PTR_DEC_MSIZE(x, msize_delta) (x) = ((void *)(x) - (msize_delta))
-
-static MALLOC_INLINE MALLOC_ALWAYS_INLINE
-mag_index_t
-tiny_mag_get_thread_index(void)
-{
-#if CONFIG_TINY_USES_HYPER_SHIFT
-	if (os_likely(_os_cpu_number_override == -1)) {
-		return _os_cpu_number() >> hyper_shift;
-	} else {
-		return _os_cpu_number_override >> hyper_shift;
-	}
-#else // CONFIG_SMALL_USES_HYPER_SHIFT
-	if (os_likely(_os_cpu_number_override == -1)) {
-		return _os_cpu_number();
-	} else {
-		return _os_cpu_number_override;
-	}
-#endif // CONFIG_SMALL_USES_HYPER_SHIFT
-}
-
 /*
  * Get the size of the previous free block, which is stored in the last two
  * bytes of the block.  If the previous block is not free, then the result is
@@ -92,10 +58,10 @@
 
 #if DEBUG_MALLOC
 	if (msize >= NUM_TINY_SLOTS) {
-		malloc_report(ASL_LEVEL_ERR, "set_tiny_meta_header_in_use() invariant broken %p %d\n", ptr, msize);
+		malloc_printf("set_tiny_meta_header_in_use() invariant broken %p %d\n", ptr, msize);
 	}
 	if ((unsigned)index + (unsigned)msize > 0x10000) {
-		malloc_report(ASL_LEVEL_ERR, "set_tiny_meta_header_in_use() invariant broken (2) %p %d\n", ptr, msize);
+		malloc_printf("set_tiny_meta_header_in_use() invariant broken (2) %p %d\n", ptr, msize);
 	}
 #endif
 
@@ -149,8 +115,8 @@
 
 		mf = get_tiny_meta_header(ptr, &ff);
 		if (msize != mf) {
-			malloc_report(ASL_LEVEL_INFO, "setting header for tiny in_use %p : %d\n", ptr, msize);
-			malloc_report(ASL_LEVEL_INFO, "reading header for tiny %p : %d %d\n", ptr, mf, ff);
+			malloc_printf("setting header for tiny in_use %p : %d\n", ptr, msize);
+			malloc_printf("reading header for tiny %p : %d %d\n", ptr, mf, ff);
 		}
 	}
 #endif
@@ -200,7 +166,7 @@
 
 #if DEBUG_MALLOC
 	if ((unsigned)index + (unsigned)msize > 0x10000) {
-		malloc_report(ASL_LEVEL_ERR, "setting header for tiny free %p msize too large: %d\n", ptr, msize);
+		malloc_printf("setting header for tiny free %p msize too large: %d\n", ptr, msize);
 	}
 #endif
 
@@ -223,8 +189,8 @@
 	boolean_t ff;
 	msize_t mf = get_tiny_meta_header(ptr, &ff);
 	if ((msize != mf) || !ff) {
-		malloc_report(ASL_LEVEL_INFO, "setting header for tiny free %p : %u\n", ptr, msize);
-		malloc_report(ASL_LEVEL_INFO, "reading header for tiny %p : %u %u\n", ptr, mf, ff);
+		malloc_printf("setting header for tiny free %p : %u\n", ptr, msize);
+		malloc_printf("reading header for tiny %p : %u %u\n", ptr, mf, ff);
 	}
 #endif
 }
@@ -290,7 +256,7 @@
  * Assumes szone has been locked
  */
 static void
-tiny_free_list_add_ptr(rack_t *rack, magazine_t *tiny_mag_ptr, void *ptr, msize_t msize)
+tiny_free_list_add_ptr(szone_t *szone, magazine_t *tiny_mag_ptr, void *ptr, msize_t msize)
 {
 	grain_t slot = (!msize || (msize >= NUM_TINY_SLOTS)) ? NUM_TINY_SLOTS - 1 : msize - 1;
 	tiny_free_list_t *free_ptr = ptr;
@@ -298,32 +264,30 @@
 
 #if DEBUG_MALLOC
 	if (LOG(szone, ptr)) {
-		malloc_report(ASL_LEVEL_INFO, "in %s, ptr=%p, msize=%d\n", __FUNCTION__, ptr, msize);
+		malloc_printf("in %s, ptr=%p, msize=%d\n", __FUNCTION__, ptr, msize);
 	}
 	if (((uintptr_t)ptr) & (TINY_QUANTUM - 1)) {
-		malloc_zone_error(rack->debug_flags, true, "tiny_free_list_add_ptr: Unaligned ptr: %p\n", ptr);
+		szone_error(szone, 1, "tiny_free_list_add_ptr: Unaligned ptr", ptr, NULL);
 	}
 #endif
 	set_tiny_meta_header_free(ptr, msize);
 	if (free_head) {
 #if DEBUG_MALLOC
 		if (free_list_unchecksum_ptr(szone, &free_head->previous)) {
-			malloc_zone_error(rack->debug_flags, true,
-					"tiny_free_list_add_ptr: Internal invariant broken (free_head->previous): "
-					"ptr=%p slot=%d free_head=%p previous=%p\n", ptr, slot, (void *)free_head, free_head->previous.p);
+			szone_error(szone, 1, "tiny_free_list_add_ptr: Internal invariant broken (free_head->previous)", ptr,
+						"ptr=%p slot=%d free_head=%p previous=%p\n", ptr, slot, (void *)free_head, free_head->previous.p);
 		}
 		if (!tiny_meta_header_is_free(free_head)) {
-			malloc_zone_error(rack->debug_flags, true,
-					"tiny_free_list_add_ptr: Internal invariant broken (free_head is not a free pointer): "
-					"ptr=%p slot=%d free_head=%p\n", ptr, slot, (void *)free_head);
-		}
-#endif
-		free_head->previous.u = free_list_checksum_ptr(rack, free_ptr);
+			szone_error(szone, 1, "tiny_free_list_add_ptr: Internal invariant broken (free_head is not a free pointer)", ptr,
+						"ptr=%p slot=%d free_head=%p\n", ptr, slot, (void *)free_head);
+		}
+#endif
+		free_head->previous.u = free_list_checksum_ptr(szone, free_ptr);
 	} else {
 		BITMAPV_SET(tiny_mag_ptr->mag_bitmap, slot);
 	}
-	free_ptr->previous.u = free_list_checksum_ptr(rack, NULL);
-	free_ptr->next.u = free_list_checksum_ptr(rack, free_head);
+	free_ptr->previous.u = free_list_checksum_ptr(szone, NULL);
+	free_ptr->next.u = free_list_checksum_ptr(szone, free_head);
 
 	tiny_mag_ptr->mag_free_list[slot].p = free_ptr;
 }
@@ -333,27 +297,26 @@
  * Assumes szone has been locked
  */
 static void
-tiny_free_list_remove_ptr(rack_t *rack, magazine_t *tiny_mag_ptr, void *ptr, msize_t msize)
+tiny_free_list_remove_ptr(szone_t *szone, magazine_t *tiny_mag_ptr, void *ptr, msize_t msize)
 {
 	grain_t slot = (!msize || (msize >= NUM_TINY_SLOTS)) ? NUM_TINY_SLOTS - 1 : msize - 1;
 	tiny_free_list_t *free_ptr = ptr, *next, *previous;
 
-	next = free_list_unchecksum_ptr(rack, &free_ptr->next);
-	previous = free_list_unchecksum_ptr(rack, &free_ptr->previous);
+	next = free_list_unchecksum_ptr(szone, &free_ptr->next);
+	previous = free_list_unchecksum_ptr(szone, &free_ptr->previous);
 
 #if DEBUG_MALLOC
 	if (LOG(szone, ptr)) {
-		malloc_report(ASL_LEVEL_INFO, "In %s, ptr=%p, msize=%d\n", __FUNCTION__, ptr, msize);
+		malloc_printf("In %s, ptr=%p, msize=%d\n", __FUNCTION__, ptr, msize);
 	}
 #endif
 	if (!previous) {
 		// The block to remove is the head of the free list
 #if DEBUG_MALLOC
 		if (tiny_mag_ptr->mag_free_list[slot] != ptr) {
-			malloc_zone_error(rack->debug_flags, true,
-					"tiny_free_list_remove_ptr: Internal invariant broken (tiny_mag_ptr->mag_free_list[slot]): "
-					"ptr=%p slot=%d msize=%d tiny_mag_ptr->mag_free_list[slot]=%p\n", ptr, slot, msize,
-					(void *)tiny_mag_ptr->mag_free_list[slot]);
+			szone_error(szone, 1, "tiny_free_list_remove_ptr: Internal invariant broken (tiny_mag_ptr->mag_free_list[slot])", ptr,
+						"ptr=%p slot=%d msize=%d tiny_mag_ptr->mag_free_list[slot]=%p\n", ptr, slot, msize,
+						(void *)tiny_mag_ptr->mag_free_list[slot]);
 			return;
 		}
 #endif
@@ -362,29 +325,11 @@
 			BITMAPV_CLR(tiny_mag_ptr->mag_bitmap, slot);
 		}
 	} else {
-		// Check that the next pointer of "previous" points to free_ptr.
-		tiny_free_list_t *prev_next = free_list_unchecksum_ptr(rack, &previous->next);
-		if (prev_next != free_ptr) {
-			malloc_zone_error(rack->debug_flags, true,
-					"tiny_free_list_remove_ptr: Internal invariant broken (next ptr of prev): "
-					"ptr=%p, prev_next=%p\n", ptr, prev_next);
-			__builtin_unreachable(); // Always crashes in malloc_zone_error().
-		}
-
 		// We know free_ptr is already checksummed, so we don't need to do it
 		// again.
 		previous->next = free_ptr->next;
 	}
 	if (next) {
-		// Check that the previous pointer of "next" points to free_ptr.
-		tiny_free_list_t *next_prev = free_list_unchecksum_ptr(rack, &next->previous);
-		if (next_prev != free_ptr) {
-			malloc_zone_error(rack->debug_flags, true,
-					"tiny_free_list_remove_ptr: Internal invariant broken (prev ptr of next): "
-					"ptr=%p, next_prev=%p\n", ptr, next_prev);
-			__builtin_unreachable(); // Always crashes in malloc_zone_error().
-		}
-
 		// We know free_ptr is already checksummed, so we don't need to do it
 		// again.
 		next->previous = free_ptr->previous;
@@ -392,7 +337,7 @@
 }
 
 void
-tiny_finalize_region(rack_t *rack, magazine_t *tiny_mag_ptr)
+tiny_finalize_region(szone_t *szone, magazine_t *tiny_mag_ptr)
 {
 	void *last_block, *previous_block;
 	uint32_t *last_header;
@@ -432,13 +377,13 @@
 		previous_block = tiny_previous_preceding_free(last_block, &previous_msize);
 		if (previous_block) {
 			set_tiny_meta_header_middle(last_block);
-			tiny_free_list_remove_ptr(rack, tiny_mag_ptr, previous_block, previous_msize);
+			tiny_free_list_remove_ptr(szone, tiny_mag_ptr, previous_block, previous_msize);
 			last_block = previous_block;
 			last_msize += previous_msize;
 		}
 
 		// splice last_block into the free list
-		tiny_free_list_add_ptr(rack, tiny_mag_ptr, last_block, last_msize);
+		tiny_free_list_add_ptr(szone, tiny_mag_ptr, last_block, last_msize);
 		tiny_mag_ptr->mag_bytes_free_at_end = 0;
 	}
 
@@ -457,12 +402,12 @@
 		if (tiny_meta_header_is_free(next_block)) {
 			msize_t next_msize = get_tiny_free_size(next_block);
 			set_tiny_meta_header_middle(next_block);
-			tiny_free_list_remove_ptr(rack, tiny_mag_ptr, next_block, next_msize);
+			tiny_free_list_remove_ptr(szone, tiny_mag_ptr, next_block, next_msize);
 			last_msize += next_msize;
 		}
 
 		// splice last_block into the free list
-		tiny_free_list_add_ptr(rack, tiny_mag_ptr, last_block, last_msize);
+		tiny_free_list_add_ptr(szone, tiny_mag_ptr, last_block, last_msize);
 		tiny_mag_ptr->mag_bytes_free_at_start = 0;
 	}
 #endif
@@ -471,7 +416,7 @@
 }
 
 int
-tiny_free_detach_region(rack_t *rack, magazine_t *tiny_mag_ptr, region_t r)
+tiny_free_detach_region(szone_t *szone, magazine_t *tiny_mag_ptr, region_t r)
 {
 	uintptr_t start = (uintptr_t)TINY_REGION_ADDRESS(r);
 	uintptr_t current = start;
@@ -488,12 +433,12 @@
 		}
 		if (!msize) {
 #if DEBUG_MALLOC
-			malloc_report(ASL_LEVEL_ERR, "*** tiny_free_detach_region error with %p: msize=%d is_free=%d\n", (void *)current, msize, is_free);
+			malloc_printf("*** tiny_free_detach_region error with %p: msize=%d is_free =%d\n", (void *)current, msize, is_free);
 #endif
 			break;
 		}
 		if (is_free) {
-			tiny_free_list_remove_ptr(rack, tiny_mag_ptr, (void *)current, msize);
+			tiny_free_list_remove_ptr(szone, tiny_mag_ptr, (void *)current, msize);
 		} else {
 			total_alloc++;
 		}
@@ -503,7 +448,7 @@
 }
 
 size_t
-tiny_free_reattach_region(rack_t *rack, magazine_t *tiny_mag_ptr, region_t r)
+tiny_free_reattach_region(szone_t *szone, magazine_t *tiny_mag_ptr, region_t r)
 {
 	uintptr_t start = (uintptr_t)TINY_REGION_ADDRESS(r);
 	uintptr_t current = start;
@@ -520,12 +465,12 @@
 		}
 		if (!msize) {
 #if DEBUG_MALLOC
-			malloc_report(ASL_LEVEL_ERR, "*** tiny_free_reattach_region error with %p: msize=%d is_free=%d\n", (void *)current, msize, is_free);
+			malloc_printf("*** tiny_free_reattach_region error with %p: msize=%d is_free =%d\n", (void *)current, msize, is_free);
 #endif
 			break;
 		}
 		if (is_free) {
-			tiny_free_list_add_ptr(rack, tiny_mag_ptr, (void *)current, msize);
+			tiny_free_list_add_ptr(szone, tiny_mag_ptr, (void *)current, msize);
 		} else {
 			total_alloc += TINY_BYTES_FOR_MSIZE(msize);
 		}
@@ -539,7 +484,7 @@
 } tiny_pg_pair_t;
 
 void
-tiny_free_scan_madvise_free(rack_t *rack, magazine_t *depot_ptr, region_t r)
+tiny_free_scan_madvise_free(szone_t *szone, magazine_t *depot_ptr, region_t r)
 {
 	uintptr_t start = (uintptr_t)TINY_REGION_ADDRESS(r);
 	uintptr_t current = start;
@@ -557,7 +502,7 @@
 		if (is_free && !msize && (current == start)) {
 			// first block is all free
 #if DEBUG_MALLOC
-			malloc_report(ASL_LEVEL_INFO, "*** tiny_free_scan_madvise_free first block is all free! %p: msize=%d is_free=%d\n", (void *)current,
+			malloc_printf("*** tiny_free_scan_madvise_free first block is all free! %p: msize=%d is_free =%d\n", (void *)current,
 						  msize, is_free);
 #endif
 			uintptr_t pgLo = round_page_kernel(start + sizeof(tiny_free_list_t) + sizeof(msize_t));
@@ -572,7 +517,7 @@
 		}
 		if (!msize) {
 #if DEBUG_MALLOC
-			malloc_report(ASL_LEVEL_ERR, "*** tiny_free_scan_madvise_free error with %p: msize=%d is_free=%d\n", (void *)current, msize, is_free);
+			malloc_printf("*** tiny_free_scan_madvise_free error with %p: msize=%d is_free =%d\n", (void *)current, msize, is_free);
 #endif
 			break;
 		}
@@ -600,20 +545,20 @@
 		// (1) is ensured by design, (2) and (3) are ensured by bumping the globally visible counter node->pinned_to_depot.
 
 		OSAtomicIncrement32Barrier(&(REGION_TRAILER_FOR_TINY_REGION(r)->pinned_to_depot));
-		SZONE_MAGAZINE_PTR_UNLOCK(depot_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, depot_ptr);
 		for (i = 0; i < advisories; ++i) {
 			uintptr_t addr = (advisory[i].pnum << vm_kernel_page_shift) + start;
 			size_t size = advisory[i].size << vm_kernel_page_shift;
 
-			mvm_madvise_free(rack, r, addr, addr + size, NULL, rack->debug_flags & MALLOC_DO_SCRIBBLE);
-		}
-		SZONE_MAGAZINE_PTR_LOCK(depot_ptr);
+			madvise_free_range(szone, r, addr, addr + size, NULL);
+		}
+		SZONE_MAGAZINE_PTR_LOCK(szone, depot_ptr);
 		OSAtomicDecrement32Barrier(&(REGION_TRAILER_FOR_TINY_REGION(r)->pinned_to_depot));
 	}
 }
 
 static region_t
-tiny_find_msize_region(rack_t *rack, magazine_t *tiny_mag_ptr, mag_index_t mag_index, msize_t msize)
+tiny_find_msize_region(szone_t *szone, magazine_t *tiny_mag_ptr, mag_index_t mag_index, msize_t msize)
 {
 	tiny_free_list_t *ptr;
 	grain_t slot = msize - 1;
@@ -657,7 +602,7 @@
 		} else {
 			/* Shouldn't happen. Fall through to look at last slot. */
 #if DEBUG_MALLOC
-			malloc_report(ASL_LEVEL_ERR, "in tiny_find_msize_region(), mag_bitmap out of sync, slot=%d\n", slot);
+			malloc_printf("in tiny_find_msize_region(), mag_bitmap out of sync, slot=%d\n", slot);
 #endif
 		}
 	}
@@ -673,7 +618,7 @@
 }
 
 static MALLOC_INLINE void
-tiny_madvise_free_range_no_lock(rack_t *rack,
+tiny_madvise_free_range_no_lock(szone_t *szone,
 								magazine_t *tiny_mag_ptr,
 								region_t region,
 								void *headptr,
@@ -706,48 +651,48 @@
 		uintptr_t free_hi = MIN(trunc_extent, hi);
 
 		if (free_lo < free_hi) {
-			tiny_free_list_remove_ptr(rack, tiny_mag_ptr, ptr, msize);
+			tiny_free_list_remove_ptr(szone, tiny_mag_ptr, ptr, msize);
 			set_tiny_meta_header_in_use(ptr, msize);
 
 			OSAtomicIncrement32Barrier(&(node->pinned_to_depot));
-			SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-			mvm_madvise_free(rack, region, free_lo, free_hi, &rack->last_madvise, rack->debug_flags & MALLOC_DO_SCRIBBLE);
-			SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+			madvise_free_range(szone, region, free_lo, free_hi, &szone->last_tiny_advise);
+			SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
 			OSAtomicDecrement32Barrier(&(node->pinned_to_depot));
 
 			set_tiny_meta_header_free(ptr, msize);
-			tiny_free_list_add_ptr(rack, tiny_mag_ptr, ptr, msize);
+			tiny_free_list_add_ptr(szone, tiny_mag_ptr, ptr, msize);
 		}
 	}
 }
 
 static boolean_t
-tiny_get_region_from_depot(rack_t *rack, magazine_t *tiny_mag_ptr, mag_index_t mag_index, msize_t msize)
-{
-	magazine_t *depot_ptr = &(rack->magazines[DEPOT_MAGAZINE_INDEX]);
+tiny_get_region_from_depot(szone_t *szone, magazine_t *tiny_mag_ptr, mag_index_t mag_index, msize_t msize)
+{
+	magazine_t *depot_ptr = &(szone->tiny_magazines[DEPOT_MAGAZINE_INDEX]);
 
 	/* FIXME: Would Uniprocessor benefit from recirc and MADV_FREE? */
-	if (rack->num_magazines == 1) { // Uniprocessor, single magazine, so no recirculation necessary
+	if (szone->num_tiny_magazines == 1) { // Uniprocessor, single magazine, so no recirculation necessary
 		return 0;
 	}
 
 #if DEBUG_MALLOC
 	if (DEPOT_MAGAZINE_INDEX == mag_index) {
-		malloc_zone_error(rack->debug_flags, true, "tiny_get_region_from_depot called for magazine index -1\n");
+		szone_error(szone, 1, "tiny_get_region_from_depot called for magazine index -1", NULL, NULL);
 		return 0;
 	}
 #endif
 
-	SZONE_MAGAZINE_PTR_LOCK(depot_ptr);
+	SZONE_MAGAZINE_PTR_LOCK(szone, depot_ptr);
 
 	// Appropriate a Depot'd region that can satisfy requested msize.
 	region_trailer_t *node;
 	region_t sparse_region;
 
 	while (1) {
-		sparse_region = tiny_find_msize_region(rack, depot_ptr, DEPOT_MAGAZINE_INDEX, msize);
+		sparse_region = tiny_find_msize_region(szone, depot_ptr, DEPOT_MAGAZINE_INDEX, msize);
 		if (NULL == sparse_region) { // Depot empty?
-			SZONE_MAGAZINE_PTR_UNLOCK(depot_ptr);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, depot_ptr);
 			return 0;
 		}
 
@@ -756,23 +701,23 @@
 			break;
 		}
 
-		SZONE_MAGAZINE_PTR_UNLOCK(depot_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, depot_ptr);
 		yield();
-		SZONE_MAGAZINE_PTR_LOCK(depot_ptr);
+		SZONE_MAGAZINE_PTR_LOCK(szone, depot_ptr);
 	}
 
 	// disconnect node from Depot
-	recirc_list_extract(rack, depot_ptr, node);
+	recirc_list_extract(szone, depot_ptr, node);
 
 	// Iterate the region pulling its free entries off the (locked) Depot's free list
-	int objects_in_use = tiny_free_detach_region(rack, depot_ptr, sparse_region);
+	int objects_in_use = tiny_free_detach_region(szone, depot_ptr, sparse_region);
 
 	// Transfer ownership of the region
 	MAGAZINE_INDEX_FOR_TINY_REGION(sparse_region) = mag_index;
 	node->pinned_to_depot = 0;
 
 	// Iterate the region putting its free entries on its new (locked) magazine's free list
-	size_t bytes_inplay = tiny_free_reattach_region(rack, tiny_mag_ptr, sparse_region);
+	size_t bytes_inplay = tiny_free_reattach_region(szone, tiny_mag_ptr, sparse_region);
 
 	depot_ptr->mag_num_bytes_in_objects -= bytes_inplay;
 	depot_ptr->num_bytes_in_magazine -= TINY_REGION_PAYLOAD_BYTES;
@@ -783,88 +728,74 @@
 	tiny_mag_ptr->mag_num_objects += objects_in_use;
 
 	// connect to magazine as first node
-	recirc_list_splice_first(rack, tiny_mag_ptr, node);
-
-	SZONE_MAGAZINE_PTR_UNLOCK(depot_ptr);
-
-	// DTrace USDT Probe
-	MAGMALLOC_DEPOTREGION(TINY_SZONE_FROM_RACK(rack), (int)mag_index, (void *)sparse_region,
-			TINY_REGION_SIZE, (int)BYTES_USED_FOR_TINY_REGION(sparse_region));
+	recirc_list_splice_first(szone, tiny_mag_ptr, node);
+
+	SZONE_MAGAZINE_PTR_UNLOCK(szone, depot_ptr);
+
+	// madvise() outside the Depot lock
+	(void)madvise_reuse_range(szone, sparse_region, (uintptr_t)sparse_region, (uintptr_t)sparse_region + TINY_REGION_PAYLOAD_BYTES);
+
+	MAGMALLOC_DEPOTREGION((void *)szone, (int)mag_index, (void *)sparse_region, TINY_REGION_SIZE,
+						  (int)BYTES_USED_FOR_TINY_REGION(sparse_region)); // DTrace USDT Probe
 
 	return 1;
 }
 
 #if CONFIG_RECIRC_DEPOT
 static region_t
-tiny_free_try_depot_unmap_no_lock(rack_t *rack, magazine_t *depot_ptr, region_trailer_t *node)
-{
-	if (0 < node->bytes_used || 0 < node->pinned_to_depot ||
-		depot_ptr->recirculation_entries < recirc_retained_regions)
-	{
+tiny_free_try_depot_unmap_no_lock(szone_t *szone, magazine_t *depot_ptr, region_trailer_t *node)
+{
+	if (0 < node->bytes_used || 0 < node->pinned_to_depot || depot_ptr->recirculation_entries < (szone->num_tiny_magazines * 2)) {
 		return NULL;
 	}
 
 	// disconnect node from Depot
-	recirc_list_extract(rack, depot_ptr, node);
+	recirc_list_extract(szone, depot_ptr, node);
 
 	// Iterate the region pulling its free entries off the (locked) Depot's free list
 	region_t sparse_region = TINY_REGION_FOR_PTR(node);
-	int objects_in_use = tiny_free_detach_region(rack, depot_ptr, sparse_region);
+	int objects_in_use = tiny_free_detach_region(szone, depot_ptr, sparse_region);
 
 	if (0 == objects_in_use) {
 		// Invalidate the hash table entry for this region with HASHRING_REGION_DEALLOCATED.
 		// Using HASHRING_REGION_DEALLOCATED preserves the collision chain, using HASHRING_OPEN_ENTRY (0) would not.
-		rgnhdl_t pSlot = hash_lookup_region_no_lock(rack->region_generation->hashed_regions,
-				rack->region_generation->num_regions_allocated,
-				rack->region_generation->num_regions_allocated_shift,
-				sparse_region);
-
+		rgnhdl_t pSlot = hash_lookup_region_no_lock(szone->tiny_region_generation->hashed_regions,
+													szone->tiny_region_generation->num_regions_allocated, szone->tiny_region_generation->num_regions_allocated_shift,
+													sparse_region);
 		if (NULL == pSlot) {
-			malloc_zone_error(rack->debug_flags, true, "tiny_free_try_depot_unmap_no_lock hash lookup failed: %p\n", sparse_region);
+			szone_error(szone, 1, "tiny_free_try_depot_unmap_no_lock hash lookup failed:", NULL, "%p\n", sparse_region);
 			return NULL;
 		}
 		*pSlot = HASHRING_REGION_DEALLOCATED;
 		depot_ptr->num_bytes_in_magazine -= TINY_REGION_PAYLOAD_BYTES;
-
-		// Atomically increment num_regions_dealloc
-#ifdef __LP64___
-		OSAtomicIncrement64(&rack->num_regions_dealloc);
-#else
-		OSAtomicIncrement32((int32_t *)&rack->num_regions_dealloc);
-#endif
+		__sync_fetch_and_add(&(szone->num_tiny_regions_dealloc), 1); // Atomically increment num_tiny_regions_dealloc
 
 		// Caller will transfer ownership of the region back to the OS with no locks held
-		MAGMALLOC_DEALLOCREGION(TINY_SZONE_FROM_RACK(rack), (void *)sparse_region, TINY_REGION_SIZE); // DTrace USDT Probe
+		MAGMALLOC_DEALLOCREGION((void *)szone, (void *)sparse_region, TINY_REGION_SIZE); // DTrace USDT Probe
 		return sparse_region;
 	} else {
-		malloc_zone_error(rack->debug_flags, true, "tiny_free_try_depot_unmap_no_lock objects_in_use not zero: %d\n", objects_in_use);
+		szone_error(szone, 1, "tiny_free_try_depot_unmap_no_lock objects_in_use not zero:", NULL, "%d\n", objects_in_use);
 		return NULL;
 	}
 }
 
 static boolean_t
-tiny_free_do_recirc_to_depot(rack_t *rack, magazine_t *tiny_mag_ptr, mag_index_t mag_index)
+tiny_free_do_recirc_to_depot(szone_t *szone, magazine_t *tiny_mag_ptr, mag_index_t mag_index)
 {
 	// The entire magazine crossed the "emptiness threshold". Transfer a region
 	// from this magazine to the Depot. Choose a region that itself has crossed the emptiness threshold (i.e
 	// is at least fraction "f" empty.) Such a region will be marked "suitable" on the recirculation list.
 	region_trailer_t *node = tiny_mag_ptr->firstNode;
 
-	while (node && (!node->recirc_suitable || node->pinned_to_depot)) {
-		// If we skip a node due to pinned_to_depot being non-zero, it must be
-		// because another thread is madvising the same region in
-		// tiny_madvise_free_range_no_lock(), called from tiny_free_no_lock().
-		// When that's done, the same thread will enter tiny_free_try_recirc_to_depot()
-		// for the same region, which will come back here. So this just defers
-		// recirculation of the region.
+	while (node && !node->recirc_suitable) {
 		node = node->next;
 	}
 
 	if (NULL == node) {
 #if DEBUG_MALLOC
-		malloc_report(ASL_LEVEL_INFO, "*** tiny_free_do_recirc_to_depot end of list\n");
-#endif
-		return TRUE; // Caller must SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		malloc_printf("*** tiny_free_do_recirc_to_depot end of list\n");
+#endif
+		return TRUE; // Caller must SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 	}
 
 	region_t sparse_region = TINY_REGION_FOR_PTR(node);
@@ -872,58 +803,58 @@
 	// Deal with unclaimed memory -- mag_bytes_free_at_end or mag_bytes_free_at_start
 	if (sparse_region == tiny_mag_ptr->mag_last_region &&
 		(tiny_mag_ptr->mag_bytes_free_at_end || tiny_mag_ptr->mag_bytes_free_at_start)) {
-		tiny_finalize_region(rack, tiny_mag_ptr);
+		tiny_finalize_region(szone, tiny_mag_ptr);
 	}
 
 	// disconnect "suitable" node from magazine
-	recirc_list_extract(rack, tiny_mag_ptr, node);
+	recirc_list_extract(szone, tiny_mag_ptr, node);
 
 	// Iterate the region pulling its free entries off its (locked) magazine's free list
-	int objects_in_use = tiny_free_detach_region(rack, tiny_mag_ptr, sparse_region);
-	magazine_t *depot_ptr = &(rack->magazines[DEPOT_MAGAZINE_INDEX]);
+	int objects_in_use = tiny_free_detach_region(szone, tiny_mag_ptr, sparse_region);
+	magazine_t *depot_ptr = &(szone->tiny_magazines[DEPOT_MAGAZINE_INDEX]);
 
 	// hand over the region to the (locked) Depot
-	SZONE_MAGAZINE_PTR_LOCK(depot_ptr);
+	SZONE_MAGAZINE_PTR_LOCK(szone, depot_ptr);
 	// this will cause tiny_free_list_add_ptr called by tiny_free_reattach_region to use
 	// the depot as its target magazine, rather than magazine formerly associated with sparse_region
 	MAGAZINE_INDEX_FOR_TINY_REGION(sparse_region) = DEPOT_MAGAZINE_INDEX;
 	node->pinned_to_depot = 0;
 
 	// Iterate the region putting its free entries on Depot's free list
-	size_t bytes_inplay = tiny_free_reattach_region(rack, depot_ptr, sparse_region);
+	size_t bytes_inplay = tiny_free_reattach_region(szone, depot_ptr, sparse_region);
 
 	tiny_mag_ptr->mag_num_bytes_in_objects -= bytes_inplay;
 	tiny_mag_ptr->num_bytes_in_magazine -= TINY_REGION_PAYLOAD_BYTES;
 	tiny_mag_ptr->mag_num_objects -= objects_in_use;
 
-	SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr); // Unlock the originating magazine
+	SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr); // Unlock the originating magazine
 
 	depot_ptr->mag_num_bytes_in_objects += bytes_inplay;
 	depot_ptr->num_bytes_in_magazine += TINY_REGION_PAYLOAD_BYTES;
 	depot_ptr->mag_num_objects += objects_in_use;
 
 	// connect to Depot as last node
-	recirc_list_splice_last(rack, depot_ptr, node);
-
-	MAGMALLOC_RECIRCREGION(TINY_SZONE_FROM_RACK(rack), (int)mag_index, (void *)sparse_region, TINY_REGION_SIZE,
+	recirc_list_splice_last(szone, depot_ptr, node);
+
+	MAGMALLOC_RECIRCREGION((void *)szone, (int)mag_index, (void *)sparse_region, TINY_REGION_SIZE,
 						   (int)BYTES_USED_FOR_TINY_REGION(sparse_region)); // DTrace USDT Probe
 
 #if !CONFIG_AGGRESSIVE_MADVISE
 	// Mark free'd dirty pages with MADV_FREE to reduce memory pressure
-	tiny_free_scan_madvise_free(rack, depot_ptr, sparse_region);
+	tiny_free_scan_madvise_free(szone, depot_ptr, sparse_region);
 #endif
 
 	// If the region is entirely empty vm_deallocate() it outside the depot lock
-	region_t r_dealloc = tiny_free_try_depot_unmap_no_lock(rack, depot_ptr, node);
-	SZONE_MAGAZINE_PTR_UNLOCK(depot_ptr);
+	region_t r_dealloc = tiny_free_try_depot_unmap_no_lock(szone, depot_ptr, node);
+	SZONE_MAGAZINE_PTR_UNLOCK(szone, depot_ptr);
 	if (r_dealloc) {
-		mvm_deallocate_pages(r_dealloc, TINY_REGION_SIZE, 0);
+		deallocate_pages(szone, r_dealloc, TINY_REGION_SIZE, 0);
 	}
 	return FALSE; // Caller need not unlock the originating magazine
 }
 
 static MALLOC_INLINE boolean_t
-tiny_free_try_recirc_to_depot(rack_t *rack,
+tiny_free_try_recirc_to_depot(szone_t *szone,
 							  magazine_t *tiny_mag_ptr,
 							  mag_index_t mag_index,
 							  region_t region,
@@ -936,9 +867,9 @@
 	size_t bytes_used = node->bytes_used;
 
 	/* FIXME: Would Uniprocessor benefit from recirc and MADV_FREE? */
-	if (rack->num_magazines == 1) { // Uniprocessor, single magazine, so no recirculation necessary
+	if (szone->num_tiny_magazines == 1) { // Uniprocessor, single magazine, so no recirculation necessary
 		/* NOTHING */
-		return TRUE; // Caller must do SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr)
+		return TRUE; // Caller must do SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr)
 	} else if (DEPOT_MAGAZINE_INDEX != mag_index) {
 		// Emptiness discriminant
 		if (bytes_used < DENSITY_THRESHOLD(TINY_REGION_PAYLOAD_BYTES)) {
@@ -957,13 +888,13 @@
 		size_t u = tiny_mag_ptr->mag_num_bytes_in_objects; // In use (malloc'd) from this magaqzine
 
 		if (a - u > ((3 * TINY_REGION_PAYLOAD_BYTES) / 2) && u < DENSITY_THRESHOLD(a)) {
-			return tiny_free_do_recirc_to_depot(rack, tiny_mag_ptr, mag_index);
+			return tiny_free_do_recirc_to_depot(szone, tiny_mag_ptr, mag_index);
 		}
 	} else {
 #if !CONFIG_AGGRESSIVE_MADVISE
 		// We are free'ing into the depot, so madvise as we do so unless we were madvising every incoming
 		// allocation anyway.
-		tiny_madvise_free_range_no_lock(rack, tiny_mag_ptr, region, headptr, headsize, ptr, msize);
+		tiny_madvise_free_range_no_lock(szone, tiny_mag_ptr, region, headptr, headsize, ptr, msize);
 #endif
 
 		if (0 < bytes_used || 0 < node->pinned_to_depot) {
@@ -972,20 +903,20 @@
 			 * with detach_region/reattach_region */
 		} else {
 			/* Depot'd region is just now empty. Consider return to OS. */
-			region_t r_dealloc = tiny_free_try_depot_unmap_no_lock(rack, tiny_mag_ptr, node);
-			SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+			region_t r_dealloc = tiny_free_try_depot_unmap_no_lock(szone, tiny_mag_ptr, node);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 			if (r_dealloc) {
-				mvm_deallocate_pages(r_dealloc, TINY_REGION_SIZE, 0);
+				deallocate_pages(szone, r_dealloc, TINY_REGION_SIZE, 0);
 			}
 			return FALSE; // Caller need not unlock
 		}
 	}
-	return TRUE; // Caller must do SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr)
+	return TRUE; // Caller must do SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr)
 }
 #endif // CONFIG_RECIRC_DEPOT
 
 boolean_t
-tiny_free_no_lock(rack_t *rack, magazine_t *tiny_mag_ptr, mag_index_t mag_index, region_t region, void *ptr, msize_t msize)
+tiny_free_no_lock(szone_t *szone, magazine_t *tiny_mag_ptr, mag_index_t mag_index, region_t region, void *ptr, msize_t msize)
 {
 	void *original_ptr = ptr;
 	size_t original_size = TINY_BYTES_FOR_MSIZE(msize);
@@ -998,12 +929,11 @@
 
 #if DEBUG_MALLOC
 	if (LOG(szone, ptr)) {
-		malloc_report(ASL_LEVEL_INFO, "in tiny_free_no_lock(), ptr=%p, msize=%d\n", ptr, msize);
+		malloc_printf("in tiny_free_no_lock(), ptr=%p, msize=%d\n", ptr, msize);
 	}
 	if (!msize) {
-		malloc_zone_error(rack->debug_flags, true,
-				"trying to free tiny block that is too small in tiny_free_no_lock(), ptr=%p, msize=%d\n",
-				ptr, msize);
+		szone_error(szone, 1, "trying to free tiny block that is too small", ptr, "in tiny_free_no_lock(), ptr=%p, msize=%d\n", ptr,
+					msize);
 	}
 #endif
 
@@ -1012,13 +942,13 @@
 	if (previous) {
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr) || LOG(szone, previous)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_free_no_lock(), coalesced backwards for %p previous=%p\n", ptr, previous);
+			malloc_printf("in tiny_free_no_lock(), coalesced backwards for %p previous=%p\n", ptr, previous);
 		}
 #endif
 
 		// clear the meta_header since this is no longer the start of a block
 		set_tiny_meta_header_middle(ptr);
-		tiny_free_list_remove_ptr(rack, tiny_mag_ptr, previous, previous_msize);
+		tiny_free_list_remove_ptr(szone, tiny_mag_ptr, previous, previous_msize);
 		ptr = previous;
 		msize += previous_msize;
 	}
@@ -1027,7 +957,7 @@
 		next_msize = get_tiny_free_size(next_block);
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr) || LOG(szone, next_block)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_free_no_lock(), for ptr=%p, msize=%d coalesced forward=%p next_msize=%d\n", ptr, msize,
+			malloc_printf("in tiny_free_no_lock(), for ptr=%p, msize=%d coalesced forward=%p next_msize=%d\n", ptr, msize,
 						  next_block, next_msize);
 		}
 #endif
@@ -1039,17 +969,17 @@
 			msize += next_msize;
 
 			big_free_block = (tiny_free_list_t *)next_block;
-			after_next_block = free_list_unchecksum_ptr(rack, &big_free_block->next);
-			before_next_block = free_list_unchecksum_ptr(rack, &big_free_block->previous);
+			after_next_block = free_list_unchecksum_ptr(szone, &big_free_block->next);
+			before_next_block = free_list_unchecksum_ptr(szone, &big_free_block->previous);
 
 			if (!before_next_block) {
 				tiny_mag_ptr->mag_free_list[NUM_TINY_SLOTS - 1].p = ptr;
 			} else {
-				before_next_block->next.u = free_list_checksum_ptr(rack, ptr);
+				before_next_block->next.u = free_list_checksum_ptr(szone, ptr);
 			}
 
 			if (after_next_block) {
-				after_next_block->previous.u = free_list_checksum_ptr(rack, ptr);
+				after_next_block->previous.u = free_list_checksum_ptr(szone, ptr);
 			}
 
 			// we don't need to checksum these since they are already checksummed
@@ -1062,18 +992,18 @@
 
 			goto tiny_free_ending;
 		}
-		tiny_free_list_remove_ptr(rack, tiny_mag_ptr, next_block, next_msize);
+		tiny_free_list_remove_ptr(szone, tiny_mag_ptr, next_block, next_msize);
 		set_tiny_meta_header_middle(next_block); // clear the meta_header to enable coalescing backwards
 		msize += next_msize;
 	}
 
 	// The tiny cache already scribbles free blocks as they go through the
 	// cache whenever msize < TINY_QUANTUM , so we do not need to do it here.
-	if ((rack->debug_flags & MALLOC_DO_SCRIBBLE) && msize && (msize >= TINY_QUANTUM)) {
+	if ((szone->debug_flags & MALLOC_DO_SCRIBBLE) && msize && (msize >= TINY_QUANTUM)) {
 		memset(ptr, SCRABBLE_BYTE, TINY_BYTES_FOR_MSIZE(msize));
 	}
 
-	tiny_free_list_add_ptr(rack, tiny_mag_ptr, ptr, msize);
+	tiny_free_list_add_ptr(szone, tiny_mag_ptr, ptr, msize);
 
 tiny_free_ending:
 
@@ -1089,22 +1019,22 @@
 #if CONFIG_AGGRESSIVE_MADVISE
 	// Platforms that want to madvise every freed allocation do so here, even if we continue
 	// on to use the recirc depot after.
-	tiny_madvise_free_range_no_lock(rack, tiny_mag_ptr, region, original_ptr, original_size, ptr, msize);
-#endif
-
-	// Caller must do SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr) if this function
+	tiny_madvise_free_range_no_lock(szone, tiny_mag_ptr, region, original_ptr, original_size, ptr, msize);
+#endif
+
+	// Caller must do SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr) if this function
 	// returns TRUE.
 	boolean_t needs_unlock = TRUE;
 
 #if CONFIG_RECIRC_DEPOT
-	needs_unlock = tiny_free_try_recirc_to_depot(rack, tiny_mag_ptr, mag_index, region, original_ptr, original_size, ptr, msize);
+	needs_unlock = tiny_free_try_recirc_to_depot(szone, tiny_mag_ptr, mag_index, region, original_ptr, original_size, ptr, msize);
 #endif
 	return needs_unlock;
 }
 
 // Allocates from the last region or a freshly allocated region
 static void *
-tiny_malloc_from_region_no_lock(rack_t *rack,
+tiny_malloc_from_region_no_lock(szone_t *szone,
 								magazine_t *tiny_mag_ptr,
 								mag_index_t mag_index,
 								msize_t msize,
@@ -1114,29 +1044,59 @@
 
 	// Deal with unclaimed memory -- mag_bytes_free_at_end or mag_bytes_free_at_start
 	if (tiny_mag_ptr->mag_bytes_free_at_end || tiny_mag_ptr->mag_bytes_free_at_start) {
-		tiny_finalize_region(rack, tiny_mag_ptr);
+		tiny_finalize_region(szone, tiny_mag_ptr);
 	}
 
 	// We set the unused bits of the header in the last pair to be all ones, and those of the inuse to zeroes.
-#if NUM_TINY_BLOCKS & 31
-	const uint32_t header = 0xFFFFFFFFU << (NUM_TINY_BLOCKS & 31);
-#else
-	const uint32_t header = 0;
-#endif
-	((tiny_region_t)aligned_address)->pairs[CEIL_NUM_TINY_BLOCKS_WORDS - 1].header = header;
+	((tiny_region_t)aligned_address)->pairs[CEIL_NUM_TINY_BLOCKS_WORDS - 1].header =
+	(NUM_TINY_BLOCKS & 31) ? (0xFFFFFFFFU << (NUM_TINY_BLOCKS & 31)) : 0;
 	((tiny_region_t)aligned_address)->pairs[CEIL_NUM_TINY_BLOCKS_WORDS - 1].inuse = 0;
 
+	// Here find the only place in tinyland that (infrequently) takes the tiny_regions_lock.
+	// Only one thread at a time should be permitted to assess the density of the hash
+	// ring and adjust if needed.
+	// Only one thread at a time should be permitted to insert its new region on
+	// the hash ring.
+	// It is safe for all other threads to read the hash ring (hashed_regions) and
+	// the associated sizes (num_regions_allocated and num_tiny_regions).
+
+	_malloc_lock_lock(&szone->tiny_regions_lock);
+
+	// Check to see if the hash ring of tiny regions needs to grow.  Try to
+	// avoid the hash ring becoming too dense.
+	if (szone->tiny_region_generation->num_regions_allocated < (2 * szone->num_tiny_regions)) {
+		region_t *new_regions;
+		size_t new_size;
+		size_t new_shift = szone->tiny_region_generation->num_regions_allocated_shift; // In/Out parameter
+		new_regions = hash_regions_grow_no_lock(szone, szone->tiny_region_generation->hashed_regions,
+												szone->tiny_region_generation->num_regions_allocated, &new_shift, &new_size);
+		// Do not deallocate the current hashed_regions allocation since someone may
+		// be iterating it.  Instead, just leak it.
+
+		// Prepare to advance to the "next generation" of the hash ring.
+		szone->tiny_region_generation->nextgen->hashed_regions = new_regions;
+		szone->tiny_region_generation->nextgen->num_regions_allocated = new_size;
+		szone->tiny_region_generation->nextgen->num_regions_allocated_shift = new_shift;
+
+		// Throw the switch to atomically advance to the next generation.
+		szone->tiny_region_generation = szone->tiny_region_generation->nextgen;
+		// Ensure everyone sees the advance.
+		OSMemoryBarrier();
+	}
 	// Tag the region at "aligned_address" as belonging to us,
 	// and so put it under the protection of the magazine lock we are holding.
 	// Do this before advertising "aligned_address" on the hash ring(!)
 	MAGAZINE_INDEX_FOR_TINY_REGION(aligned_address) = mag_index;
 
-	// Insert the new region into the hash ring
-	rack_region_insert(rack, (region_t)aligned_address);
+	// Insert the new region into the hash ring, and update malloc statistics
+	hash_region_insert_no_lock(szone->tiny_region_generation->hashed_regions, szone->tiny_region_generation->num_regions_allocated,
+							   szone->tiny_region_generation->num_regions_allocated_shift, aligned_address);
+
+	szone->num_tiny_regions++;
+	_malloc_lock_unlock(&szone->tiny_regions_lock);
 
 	tiny_mag_ptr->mag_last_region = aligned_address;
 	BYTES_USED_FOR_TINY_REGION(aligned_address) = TINY_BYTES_FOR_MSIZE(msize);
-
 #if CONFIG_ASLR_INTERNAL
 	int offset_msize = malloc_entropy[0] & TINY_ENTROPY_MASK;
 #if DEBUG_MALLOC
@@ -1144,7 +1104,7 @@
 		offset_msize = strtol(getenv("MallocASLRForce"), NULL, 0) & TINY_ENTROPY_MASK;
 	}
 	if (getenv("MallocASLRPrint")) {
-		malloc_report(ASL_LEVEL_INFO, "Region: %p offset: %d\n", aligned_address, offset_msize);
+		malloc_printf("Region: %p offset: %d\n", aligned_address, offset_msize);
 	}
 #endif
 #else
@@ -1171,11 +1131,11 @@
 #endif
 
 	// connect to magazine as last node
-	recirc_list_splice_last(rack, tiny_mag_ptr, REGION_TRAILER_FOR_TINY_REGION(aligned_address));
+	recirc_list_splice_last(szone, tiny_mag_ptr, REGION_TRAILER_FOR_TINY_REGION(aligned_address));
 
 #if DEBUG_MALLOC
 	if (LOG(szone, ptr)) {
-		malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_from_region_no_lock(), ptr=%p, msize=%d\n", ptr, msize);
+		malloc_printf("in tiny_malloc_from_region_no_lock(), ptr=%p, msize=%d\n", ptr, msize);
 	}
 #endif
 	return ptr;
@@ -1185,7 +1145,7 @@
 tiny_memalign(szone_t *szone, size_t alignment, size_t size, size_t span)
 {
 	msize_t mspan = TINY_MSIZE_FOR_BYTES(span + TINY_QUANTUM - 1);
-	void *p = tiny_malloc_should_clear(&szone->tiny_rack, mspan, 0);
+	void *p = szone_malloc(szone, span); // avoids inlining tiny_malloc_should_clear(szone, mspan, 0);
 
 	if (NULL == p) {
 		return NULL;
@@ -1202,9 +1162,8 @@
 		void *q = (void *)(((uintptr_t)p) + pad);
 
 		// Mark q as a block header and in-use, thus creating two blocks.
-		magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone->tiny_rack.magazines,
-				REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)),
-				MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)));
+		magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone, szone->tiny_magazines,
+																	REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)), MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)));
 		set_tiny_meta_header_in_use(q, msize);
 		tiny_mag_ptr->mag_num_objects++;
 
@@ -1213,10 +1172,11 @@
 		if (mwaste > 0) {
 			BITARRAY_SET(TINY_INUSE_FOR_HEADER(TINY_BLOCK_HEADER_FOR_PTR(q)), TINY_INDEX_FOR_PTR(q) + msize);
 		}
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 
 		// Give up mpad blocks beginning at p to the tiny free list
-		free_tiny(&szone->tiny_rack, p, TINY_REGION_FOR_PTR(p), TINY_BYTES_FOR_MSIZE(mpad));
+		// region_t r = TINY_REGION_FOR_PTR(p);
+		szone_free(szone, p); // avoids inlining free_tiny(szone, p, &r);
 
 		p = q; // advance p to the desired alignment
 	}
@@ -1224,51 +1184,43 @@
 	if (mwaste > 0) {
 		void *q = (void *)(((uintptr_t)p) + TINY_BYTES_FOR_MSIZE(msize));
 		// Mark q as block header and in-use, thus creating two blocks.
-		magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone->tiny_rack.magazines,
-				REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)),
-				MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)));
+		magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone, szone->tiny_magazines,
+																	REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)), MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(p)));
 		set_tiny_meta_header_in_use(q, mwaste);
 		tiny_mag_ptr->mag_num_objects++;
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 
 		// Give up mwaste blocks beginning at q to the tiny free list
-		free_tiny(&szone->tiny_rack, q, TINY_REGION_FOR_PTR(q), TINY_BYTES_FOR_MSIZE(mwaste));
+		// region_t r = TINY_REGION_FOR_PTR(q);
+		szone_free(szone, q); // avoids inlining free_tiny(szone, q, &r);
 	}
 
 	return p; // p has the desired size and alignment, and can later be free()'d
 }
 
-boolean_t
-tiny_claimed_address(rack_t *rack, void *ptr)
-{
-	region_t r = tiny_region_for_ptr_no_lock(rack, ptr);
-	return r && ptr < TINY_REGION_END(r);
-}
-
 void *
-tiny_try_shrink_in_place(rack_t *rack, void *ptr, size_t old_size, size_t new_good_size)
+tiny_try_shrink_in_place(szone_t *szone, void *ptr, size_t old_size, size_t new_good_size)
 {
 	msize_t new_msize = TINY_MSIZE_FOR_BYTES(new_good_size);
 	msize_t mshrinkage = TINY_MSIZE_FOR_BYTES(old_size) - new_msize;
 
 	if (mshrinkage) {
 		void *q = (void *)((uintptr_t)ptr + TINY_BYTES_FOR_MSIZE(new_msize));
-		magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(rack->magazines,
-				REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)),
-				MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)));
+		magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone, szone->tiny_magazines,
+																	REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)), MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)));
 
 		// Mark q as block header and in-use, thus creating two blocks.
 		set_tiny_meta_header_in_use(q, mshrinkage);
 		tiny_mag_ptr->mag_num_objects++;
 
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-		free_tiny(rack, q, TINY_REGION_FOR_PTR(q), 0);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+		szone_free(szone, q); // avoid inlining free_tiny(szone, q, ...);
 	}
 	return ptr;
 }
 
 boolean_t
-tiny_try_realloc_in_place(rack_t *rack, void *ptr, size_t old_size, size_t new_size)
+tiny_try_realloc_in_place(szone_t *szone, void *ptr, size_t old_size, size_t new_size)
 {
 	// returns 1 on success
 	msize_t index;
@@ -1276,12 +1228,11 @@
 	unsigned next_index;
 	void *next_block;
 	boolean_t is_free;
-	msize_t next_msize, coalesced_msize, leftover_msize, new_msize;
+	msize_t next_msize, coalesced_msize, leftover_msize;
 	void *leftover;
 
 	index = TINY_INDEX_FOR_PTR(ptr);
 	old_msize = TINY_MSIZE_FOR_BYTES(old_size);
-	new_msize = TINY_MSIZE_FOR_BYTES(new_size + TINY_QUANTUM - 1);
 	next_index = index + old_msize;
 
 	if (next_index >= NUM_TINY_BLOCKS) {
@@ -1289,97 +1240,46 @@
 	}
 	next_block = (char *)ptr + old_size;
 
-	magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(rack->magazines,
-			REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)),
-			MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)));
+	magazine_t *tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone, szone->tiny_magazines,
+																REGION_TRAILER_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)), MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr)));
 
 	if (DEPOT_MAGAZINE_INDEX == MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr))) {
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 		return 0;
 	}
 
-	coalesced_msize = new_msize - old_msize;
-#if CONFIG_TINY_CACHE
-	void *last_free_ptr = tiny_mag_ptr->mag_last_free;
-	msize_t last_free_msize = tiny_mag_ptr->mag_last_free_msize;
-	if (last_free_ptr == next_block && old_msize + last_free_msize >= new_msize) {
-		/*
-		 * There is a block in mag_last_free and it's immediately after
-		 * this block and it's large enough. We can use some or all of it.
-		 */
-		leftover_msize = last_free_msize - coalesced_msize;
-		if (leftover_msize) {
-			tiny_mag_ptr->mag_last_free_msize -= coalesced_msize;
-			tiny_mag_ptr->mag_last_free += new_size - old_size;
-			// The block in mag_last_free is still marked as header and in-use, so copy that
-			// state to the block that remains. The state for the block that we're going to
-			// use is adjusted by the set_tiny_meta_header_middle() call below.
-			set_tiny_meta_header_in_use(next_block + TINY_BYTES_FOR_MSIZE(coalesced_msize), leftover_msize);
-		} else {
-			// Using the whole block.
-			tiny_mag_ptr->mag_last_free = NULL;
-			tiny_mag_ptr->mag_last_free_msize = 0;
-			tiny_mag_ptr->mag_last_free_rgn = NULL;
-		}
-		set_tiny_meta_header_middle(next_block);
-	} else {
-#endif // CONFIG_TINY_CACHE
-		/*
-		 * Try to expand into unused space immediately after this block.
-		 */
-		msize_t unused_msize = TINY_MSIZE_FOR_BYTES(tiny_mag_ptr->mag_bytes_free_at_end);
-		void *unused_start = TINY_REGION_END(TINY_REGION_FOR_PTR(ptr)) - tiny_mag_ptr->mag_bytes_free_at_end;
-		if (tiny_mag_ptr->mag_last_region == TINY_REGION_FOR_PTR(ptr)
-				&& coalesced_msize < unused_msize && unused_start == ptr + old_size) {
-			// The block at the start of mag_bytes_free_at_end is marked as
-			// header/in-use and the next one has header/free. We need to
-			// reset both the header and in-use bit in the first block and we
-			// need to reset the header bit in the second block if it's part of
-			// the new allocation.
-			set_tiny_meta_header_middle(unused_start);
-			if (coalesced_msize > 1) {
-				set_tiny_meta_header_middle(unused_start + TINY_QUANTUM);
-			}
-			tiny_mag_ptr->mag_bytes_free_at_end -= TINY_BYTES_FOR_MSIZE(coalesced_msize);
-			if (tiny_mag_ptr->mag_bytes_free_at_end) {
-				// Mark the first block of the remaining free area as a header and in-use.
-				set_tiny_meta_header_in_use_1(ptr + TINY_BYTES_FOR_MSIZE(new_msize));
-			}
-		} else {
-			/*
-			 * Look for a free block immediately afterwards.  If it's large
-			 * enough, we can consume (part of) it.
-			 */
-			is_free = tiny_meta_header_is_free(next_block);
-			if (!is_free) {
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-				return 0; // next_block is in use;
-			}
-			next_msize = get_tiny_free_size(next_block);
-			if (old_msize + next_msize < new_msize) {
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-				return 0; // even with next block, not enough
-			}
-			/*
-		 	 * The following block is big enough; pull it from its freelist and chop off enough to satisfy
-		 	 * our needs.
-		 	 */
-			tiny_free_list_remove_ptr(rack, tiny_mag_ptr, next_block, next_msize);
-			set_tiny_meta_header_middle(next_block); // clear the meta_header to enable coalescing backwards
-			leftover_msize = next_msize - coalesced_msize;
-			if (leftover_msize) {
-				/* there's some left, so put the remainder back */
-				leftover = (void *)((uintptr_t)next_block + TINY_BYTES_FOR_MSIZE(coalesced_msize));
-				tiny_free_list_add_ptr(rack, tiny_mag_ptr, leftover, leftover_msize);
-			}
-			set_tiny_meta_header_in_use(ptr, old_msize + coalesced_msize);
-		}
-#if CONFIG_TINY_CACHE
-	}
-#endif // CONFIG_TINY_CACHE
+	/*
+	 * Look for a free block immediately afterwards.  If it's large enough, we can consume (part of)
+	 * it.
+	 */
+	is_free = tiny_meta_header_is_free(next_block);
+	if (!is_free) {
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+		return 0; // next_block is in use;
+	}
+	next_msize = get_tiny_free_size(next_block);
+	if (old_size + TINY_BYTES_FOR_MSIZE(next_msize) < new_size) {
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+		return 0; // even with next block, not enough
+	}
+	/*
+	 * The following block is big enough; pull it from its freelist and chop off enough to satisfy
+	 * our needs.
+	 */
+	tiny_free_list_remove_ptr(szone, tiny_mag_ptr, next_block, next_msize);
+	set_tiny_meta_header_middle(next_block); // clear the meta_header to enable coalescing backwards
+	coalesced_msize = TINY_MSIZE_FOR_BYTES(new_size - old_size + TINY_QUANTUM - 1);
+	leftover_msize = next_msize - coalesced_msize;
+	if (leftover_msize) {
+		/* there's some left, so put the remainder back */
+		leftover = (void *)((uintptr_t)next_block + TINY_BYTES_FOR_MSIZE(coalesced_msize));
+
+		tiny_free_list_add_ptr(szone, tiny_mag_ptr, leftover, leftover_msize);
+	}
+	set_tiny_meta_header_in_use(ptr, old_msize + coalesced_msize);
 #if DEBUG_MALLOC
 	if (LOG(szone, ptr)) {
-		malloc_report(ASL_LEVEL_INFO, "in tiny_try_realloc_in_place(), ptr=%p, msize=%d\n", ptr, old_msize + coalesced_msize);
+		malloc_printf("in tiny_try_realloc_in_place(), ptr=%p, msize=%d\n", ptr, old_msize + coalesced_msize);
 	}
 #endif
 	tiny_mag_ptr->mag_num_bytes_in_objects += TINY_BYTES_FOR_MSIZE(coalesced_msize);
@@ -1399,20 +1299,13 @@
 		node->recirc_suitable = FALSE;
 	}
 
-	SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+	SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 	CHECK(szone, __PRETTY_FUNCTION__);
 	return 1;
 }
 
-static char *tiny_check_fail_msg = "*** check: incorrect tiny region ";
-
-#define TINY_CHECK_FAIL(fmt, ...) \
-	malloc_zone_check_fail(tiny_check_fail_msg, \
-			"%ld, counter=%d\n" fmt, region_index, counter, __VA_ARGS__);
-
 boolean_t
-tiny_check_region(rack_t *rack, region_t region, size_t region_index,
-		unsigned counter)
+tiny_check_region(szone_t *szone, region_t region)
 {
 	uintptr_t start, ptr, region_end;
 	boolean_t prev_free = 0;
@@ -1421,19 +1314,10 @@
 	tiny_free_list_t *free_head;
 	void *follower, *previous, *next;
 	mag_index_t mag_index = MAGAZINE_INDEX_FOR_TINY_REGION(region);
-	magazine_t *tiny_mag_ptr = &(rack->magazines[mag_index]);
+	magazine_t *tiny_mag_ptr = &(szone->tiny_magazines[mag_index]);
 
 	// Assumes locked
 	CHECK_MAGAZINE_PTR_LOCKED(szone, tiny_mag_ptr, __PRETTY_FUNCTION__);
-
-	// Do not check the region if pinned_to_depot is not zero because it
-	// may not be in a consistent state (specifically, if may have a
-	// block marked as in-use that's longer than any legal allocation,
-	// which upsets get_tiny_meta_header() because it can't determine the
-	// block's length).
-	if (!REGION_TRAILER_FOR_TINY_REGION(region)->pinned_to_depot) {
-		return 1;
-	}
 
 	/* establish region limits */
 	start = (uintptr_t)TINY_REGION_ADDRESS(region);
@@ -1447,9 +1331,7 @@
 		if (tiny_mag_ptr->mag_bytes_free_at_start) {
 			msize = get_tiny_meta_header((void *)(ptr - TINY_QUANTUM), &is_free);
 			if (is_free || (msize != 1)) {
-				TINY_CHECK_FAIL("*** invariant broken for leader block %p - %d %d\n",
-						(void *)(ptr - TINY_QUANTUM), msize, is_free);
-				return 0;
+				malloc_printf("*** invariant broken for leader block %p - %d %d\n", ptr - TINY_QUANTUM, msize, is_free);
 			}
 		}
 	}
@@ -1481,7 +1363,7 @@
 		 * corrupt.
 		 */
 		if (!msize) {
-			TINY_CHECK_FAIL("*** invariant broken for tiny block %p this msize=%d - size is too small\n", (void *)ptr, msize);
+			malloc_printf("*** invariant broken for tiny block %p this msize=%d - size is too small\n", ptr, msize);
 			return 0;
 		}
 
@@ -1491,7 +1373,7 @@
 			 */
 			prev_free = 0;
 			if (msize > (NUM_TINY_SLOTS - 1)) {
-				TINY_CHECK_FAIL("*** invariant broken for %p this tiny msize=%d - size is too large\n", (void *)ptr, msize);
+				malloc_printf("*** invariant broken for %p this tiny msize=%d - size is too large\n", ptr, msize);
 				return 0;
 			}
 			/* move to next block */
@@ -1503,7 +1385,7 @@
 			 * free block.
 			 */
 			if (prev_free) {
-				TINY_CHECK_FAIL("*** invariant broken for free block %p this tiny msize=%d: two free blocks in a row\n", (void *)ptr, msize);
+				malloc_printf("*** invariant broken for free block %p this tiny msize=%d: two free blocks in a row\n", ptr, msize);
 				return 0;
 			}
 #endif // CONFIG_RELAXED_INVARIANT_CHECKS
@@ -1512,14 +1394,14 @@
 			 * Check the integrity of this block's entry in its freelist.
 			 */
 			free_head = (tiny_free_list_t *)ptr;
-			previous = free_list_unchecksum_ptr(rack, &free_head->previous);
-			next = free_list_unchecksum_ptr(rack, &free_head->next);
+			previous = free_list_unchecksum_ptr(szone, &free_head->previous);
+			next = free_list_unchecksum_ptr(szone, &free_head->next);
 			if (previous && !tiny_meta_header_is_free(previous)) {
-				TINY_CHECK_FAIL("*** invariant broken for %p (previous %p is not a free pointer)\n", (void *)ptr, previous);
+				malloc_printf("*** invariant broken for %p (previous %p is not a free pointer)\n", ptr, previous);
 				return 0;
 			}
 			if (next && !tiny_meta_header_is_free(next)) {
-				TINY_CHECK_FAIL("*** invariant broken for %p (next in free list %p is not a free pointer)\n", (void *)ptr, next);
+				malloc_printf("*** invariant broken for %p (next in free list %p is not a free pointer)\n", ptr, next);
 				return 0;
 			}
 			/*
@@ -1527,10 +1409,10 @@
 			 */
 			follower = FOLLOWING_TINY_PTR(ptr, msize);
 			if (((uintptr_t)follower != region_end) && (get_tiny_previous_free_msize(follower) != msize)) {
-				TINY_CHECK_FAIL("*** invariant broken for tiny free %p followed by %p in region [%p-%p] "
-						"(end marker incorrect) should be %d; in fact %d\n",
-						(void *)ptr, follower, TINY_REGION_ADDRESS(region), (void *)region_end,
-						msize, get_tiny_previous_free_msize(follower));
+				malloc_printf(
+							  "*** invariant broken for tiny free %p followed by %p in region [%p-%p] "
+							  "(end marker incorrect) should be %d; in fact %d\n",
+							  ptr, follower, TINY_REGION_ADDRESS(region), region_end, msize, get_tiny_previous_free_msize(follower));
 				return 0;
 			}
 			/* move to next block */
@@ -1541,7 +1423,7 @@
 	 * Ensure that we scanned the entire region
 	 */
 	if (ptr != region_end) {
-		TINY_CHECK_FAIL("*** invariant broken for region end %p - %p\n", (void *)ptr, (void *)region_end);
+		malloc_printf("*** invariant broken for region end %p - %p\n", ptr, region_end);
 		return 0;
 	}
 	/*
@@ -1551,8 +1433,7 @@
 		if (tiny_mag_ptr->mag_bytes_free_at_end) {
 			msize = get_tiny_meta_header((void *)ptr, &is_free);
 			if (is_free || (msize != 1)) {
-				TINY_CHECK_FAIL("*** invariant broken for blocker block %p - %d %d\n", (void *)ptr, msize, is_free);
-				return 0;
+				malloc_printf("*** invariant broken for blocker block %p - %d %d\n", ptr, msize, is_free);
 			}
 		}
 	}
@@ -1589,7 +1470,7 @@
 	magazine_t *tiny_mag_base = NULL;
 
 	region_hash_generation_t *trg_ptr;
-	err = reader(task, (vm_address_t)szone->tiny_rack.region_generation, sizeof(region_hash_generation_t), (void **)&trg_ptr);
+	err = reader(task, (vm_address_t)szone->tiny_region_generation, sizeof(region_hash_generation_t), (void **)&trg_ptr);
 	if (err) {
 		return err;
 	}
@@ -1602,7 +1483,7 @@
 
 	if (type_mask & MALLOC_PTR_IN_USE_RANGE_TYPE) {
 		// Map in all active magazines. Do this outside the iteration over regions.
-		err = reader(task, (vm_address_t)(szone->tiny_rack.magazines), szone->tiny_rack.num_magazines * sizeof(magazine_t),
+		err = reader(task, (vm_address_t)(szone->tiny_magazines), szone->num_tiny_magazines * sizeof(magazine_t),
 					 (void **)&tiny_mag_base);
 		if (err) {
 			return err;
@@ -1625,7 +1506,8 @@
 				recorder(task, context, MALLOC_PTR_REGION_RANGE_TYPE, &ptr_range, 1);
 			}
 			if (type_mask & MALLOC_PTR_IN_USE_RANGE_TYPE) {
-				vm_address_t mag_last_free;
+				void *mag_last_free;
+				vm_address_t mag_last_free_ptr = 0;
 				msize_t mag_last_free_msize = 0;
 
 				err = reader(task, range.address, range.size, (void **)&mapped_region);
@@ -1637,13 +1519,19 @@
 				magazine_t *tiny_mag_ptr = tiny_mag_base + mag_index;
 
 				if (DEPOT_MAGAZINE_INDEX != mag_index) {
-					mag_last_free = (uintptr_t)tiny_mag_ptr->mag_last_free;
-					mag_last_free_msize = tiny_mag_ptr->mag_last_free_msize;
+					mag_last_free = tiny_mag_ptr->mag_last_free;
+					if (mag_last_free) {
+						mag_last_free_ptr = (uintptr_t)mag_last_free & ~(TINY_QUANTUM - 1);
+						mag_last_free_msize = (uintptr_t)mag_last_free & (TINY_QUANTUM - 1);
+					}
 				} else {
-					for (mag_index = 0; mag_index < szone->tiny_rack.num_magazines; mag_index++) {
+					for (mag_index = 0; mag_index < szone->num_tiny_magazines; mag_index++) {
 						if ((void *)range.address == (tiny_mag_base + mag_index)->mag_last_free_rgn) {
-							mag_last_free = (uintptr_t)(tiny_mag_base + mag_index)->mag_last_free;
-							mag_last_free_msize = (tiny_mag_base + mag_index)->mag_last_free_msize;
+							mag_last_free = (tiny_mag_base + mag_index)->mag_last_free;
+							if (mag_last_free) {
+								mag_last_free_ptr = (uintptr_t)mag_last_free & ~(TINY_QUANTUM - 1);
+								mag_last_free_msize = (uintptr_t)mag_last_free & (TINY_QUANTUM - 1);
+							}
 						}
 					}
 				}
@@ -1678,7 +1566,7 @@
 							msize = 1;
 						}
 
-					} else if (range.address + block_offset != mag_last_free) {
+					} else if (range.address + block_offset != mag_last_free_ptr) {
 						msize = 1;
 						bit = block_index + 1;
 						while (!BITARRAY_BIT(block_header, bit)) {
@@ -1715,7 +1603,7 @@
 }
 
 void *
-tiny_malloc_from_free_list(rack_t *rack, magazine_t *tiny_mag_ptr, mag_index_t mag_index, msize_t msize)
+tiny_malloc_from_free_list(szone_t *szone, magazine_t *tiny_mag_ptr, mag_index_t mag_index, msize_t msize)
 {
 	tiny_free_list_t *ptr;
 	msize_t this_msize;
@@ -1739,7 +1627,7 @@
 	//
 	ptr = the_slot->p;
 	if (ptr) {
-		next = free_list_unchecksum_ptr(rack, &ptr->next);
+		next = free_list_unchecksum_ptr(szone, &ptr->next);
 		if (next) {
 			next->previous = ptr->previous;
 		} else {
@@ -1749,7 +1637,7 @@
 		this_msize = msize;
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_from_free_list(), exact match ptr=%p, this_msize=%d\n", ptr, this_msize);
+			malloc_printf("in tiny_malloc_from_free_list(), exact match ptr=%p, this_msize=%d\n", ptr, this_msize);
 		}
 #endif
 		goto return_tiny_alloc;
@@ -1774,7 +1662,7 @@
 	if (free_list < limit) {
 		ptr = free_list->p;
 		if (ptr) {
-			next = free_list_unchecksum_ptr(rack, &ptr->next);
+			next = free_list_unchecksum_ptr(szone, &ptr->next);
 			free_list->p = next;
 			if (next) {
 				next->previous = ptr->previous;
@@ -1785,7 +1673,7 @@
 			goto add_leftover_and_proceed;
 		}
 #if DEBUG_MALLOC
-		malloc_report(ASL_LEVEL_ERR, "in tiny_malloc_from_free_list(), mag_bitmap out of sync, slot=%d\n", slot);
+		malloc_printf("in tiny_malloc_from_free_list(), mag_bitmap out of sync, slot=%d\n", slot);
 #endif
 	}
 
@@ -1796,7 +1684,7 @@
 	ptr = limit->p;
 	if (ptr) {
 		this_msize = get_tiny_free_size(ptr);
-		next = free_list_unchecksum_ptr(rack, &ptr->next);
+		next = free_list_unchecksum_ptr(szone, &ptr->next);
 		if (this_msize - msize >= NUM_TINY_SLOTS) {
 			// the leftover will go back to the free list, so we optimize by
 			// modifying the free list rather than a pop and push of the head
@@ -1804,14 +1692,14 @@
 			leftover_ptr = (tiny_free_list_t *)((unsigned char *)ptr + TINY_BYTES_FOR_MSIZE(msize));
 			limit->p = leftover_ptr;
 			if (next) {
-				next->previous.u = free_list_checksum_ptr(rack, leftover_ptr);
+				next->previous.u = free_list_checksum_ptr(szone, leftover_ptr);
 			}
 			leftover_ptr->previous = ptr->previous;
 			leftover_ptr->next = ptr->next;
 			set_tiny_meta_header_free(leftover_ptr, leftover_msize);
 #if DEBUG_MALLOC
 			if (LOG(szone, ptr)) {
-				malloc_report(ASL_LEVEL_INFO,
+				malloc_printf(
 							  "in tiny_malloc_from_free_list(), last slot ptr=%p, msize=%d this_msize=%d\n", ptr, msize, this_msize);
 			}
 #endif
@@ -1838,7 +1726,7 @@
 		this_msize = msize;
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_from_free_list(), from end ptr=%p, msize=%d\n", ptr, msize);
+			malloc_printf("in tiny_malloc_from_free_list(), from end ptr=%p, msize=%d\n", ptr, msize);
 		}
 #endif
 		goto return_tiny_alloc;
@@ -1856,7 +1744,7 @@
 		this_msize = msize;
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_from_free_list(), from start ptr=%p, msize=%d\n", ptr, msize);
+			malloc_printf("in tiny_malloc_from_free_list(), from start ptr=%p, msize=%d\n", ptr, msize);
 		}
 #endif
 		goto return_tiny_alloc;
@@ -1870,10 +1758,10 @@
 		leftover_ptr = (tiny_free_list_t *)((unsigned char *)ptr + TINY_BYTES_FOR_MSIZE(msize));
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_from_free_list(), adding leftover ptr=%p, this_msize=%d\n", ptr, this_msize);
-		}
-#endif
-		tiny_free_list_add_ptr(rack, tiny_mag_ptr, leftover_ptr, leftover_msize);
+			malloc_printf("in tiny_malloc_from_free_list(), adding leftover ptr=%p, this_msize=%d\n", ptr, this_msize);
+		}
+#endif
+		tiny_free_list_add_ptr(szone, tiny_mag_ptr, leftover_ptr, leftover_msize);
 		this_msize = msize;
 	}
 
@@ -1897,7 +1785,7 @@
 	}
 #if DEBUG_MALLOC
 	if (LOG(szone, ptr)) {
-		malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_from_free_list(), ptr=%p, this_msize=%d, msize=%d\n", ptr, this_msize, msize);
+		malloc_printf("in tiny_malloc_from_free_list(), ptr=%p, this_msize=%d, msize=%d\n", ptr, this_msize, msize);
 	}
 #endif
 	if (this_msize > 1) {
@@ -1909,44 +1797,44 @@
 }
 
 void *
-tiny_malloc_should_clear(rack_t *rack, msize_t msize, boolean_t cleared_requested)
+tiny_malloc_should_clear(szone_t *szone, msize_t msize, boolean_t cleared_requested)
 {
 	void *ptr;
-	mag_index_t mag_index = tiny_mag_get_thread_index() % rack->num_magazines;
-	magazine_t *tiny_mag_ptr = &(rack->magazines[mag_index]);
-
-	MALLOC_TRACE(TRACE_tiny_malloc, (uintptr_t)rack, TINY_BYTES_FOR_MSIZE(msize), (uintptr_t)tiny_mag_ptr, cleared_requested);
+	mag_index_t mag_index = mag_get_thread_index(szone);
+	magazine_t *tiny_mag_ptr = &(szone->tiny_magazines[mag_index]);
+
+	MALLOC_TRACE(TRACE_tiny_malloc, (uintptr_t)szone, TINY_BYTES_FOR_MSIZE(msize), (uintptr_t)tiny_mag_ptr, cleared_requested);
 
 #if DEBUG_MALLOC
 	if (DEPOT_MAGAZINE_INDEX == mag_index) {
-		malloc_zone_error(rack->debug_flags, true, "malloc called for magazine index -1\n");
+		szone_error(szone, 1, "malloc called for magazine index -1", NULL, NULL);
 		return (NULL);
 	}
 
 	if (!msize) {
-		malloc_zone_error(rack->debug_flags, true, "invariant broken (!msize) in allocation (region)\n");
+		szone_error(szone, 1, "invariant broken (!msize) in allocation (region)", NULL, NULL);
 		return (NULL);
 	}
 #endif
 
-	SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
+	SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
 
 #if CONFIG_TINY_CACHE
 	ptr = tiny_mag_ptr->mag_last_free;
 
-	if (tiny_mag_ptr->mag_last_free_msize == msize) {
+	if ((((uintptr_t)ptr) & (TINY_QUANTUM - 1)) == msize) {
 		// we have a winner
 		tiny_mag_ptr->mag_last_free = NULL;
-		tiny_mag_ptr->mag_last_free_msize = 0;
 		tiny_mag_ptr->mag_last_free_rgn = NULL;
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 		CHECK(szone, __PRETTY_FUNCTION__);
+		ptr = (void *)((uintptr_t)ptr & ~(TINY_QUANTUM - 1));
 		if (cleared_requested) {
 			memset(ptr, 0, TINY_BYTES_FOR_MSIZE(msize));
 		}
 #if DEBUG_MALLOC
 		if (LOG(szone, ptr)) {
-			malloc_report(ASL_LEVEL_INFO, "in tiny_malloc_should_clear(), tiny cache ptr=%p, msize=%d\n", ptr, msize);
+			malloc_printf("in tiny_malloc_should_clear(), tiny cache ptr=%p, msize=%d\n", ptr, msize);
 		}
 #endif
 		return ptr;
@@ -1954,9 +1842,9 @@
 #endif /* CONFIG_TINY_CACHE */
 
 	while (1) {
-		ptr = tiny_malloc_from_free_list(rack, tiny_mag_ptr, mag_index, msize);
+		ptr = tiny_malloc_from_free_list(szone, tiny_mag_ptr, mag_index, msize);
 		if (ptr) {
-			SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 			CHECK(szone, __PRETTY_FUNCTION__);
 			if (cleared_requested) {
 				memset(ptr, 0, TINY_BYTES_FOR_MSIZE(msize));
@@ -1964,10 +1852,10 @@
 			return ptr;
 		}
 
-		if (tiny_get_region_from_depot(rack, tiny_mag_ptr, mag_index, msize)) {
-			ptr = tiny_malloc_from_free_list(rack, tiny_mag_ptr, mag_index, msize);
+		if (tiny_get_region_from_depot(szone, tiny_mag_ptr, mag_index, msize)) {
+			ptr = tiny_malloc_from_free_list(szone, tiny_mag_ptr, mag_index, msize);
 			if (ptr) {
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				CHECK(szone, __PRETTY_FUNCTION__);
 				if (cleared_requested) {
 					memset(ptr, 0, TINY_BYTES_FOR_MSIZE(msize));
@@ -1988,95 +1876,54 @@
 			// time to create a new region (do this outside the magazine lock)
 			tiny_mag_ptr->alloc_underway = TRUE;
 			OSMemoryBarrier();
-			SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-			fresh_region = mvm_allocate_pages_securely(TINY_REGION_SIZE, TINY_BLOCKS_ALIGN, VM_MEMORY_MALLOC_TINY, rack->debug_flags);
-			SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
-
-			// DTrace USDT Probe
-			MAGMALLOC_ALLOCREGION(TINY_SZONE_FROM_RACK(rack), (int)mag_index, fresh_region, TINY_REGION_SIZE);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+			fresh_region = allocate_pages_securely(szone, TINY_REGION_SIZE, TINY_BLOCKS_ALIGN, VM_MEMORY_MALLOC_TINY);
+			SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
+
+			MAGMALLOC_ALLOCREGION((void *)szone, (int)mag_index, fresh_region, TINY_REGION_SIZE); // DTrace USDT Probe
 
 			if (!fresh_region) { // out of memory!
 				tiny_mag_ptr->alloc_underway = FALSE;
 				OSMemoryBarrier();
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				return NULL;
 			}
 
-			ptr = tiny_malloc_from_region_no_lock(rack, tiny_mag_ptr, mag_index, msize, fresh_region);
+			ptr = tiny_malloc_from_region_no_lock(szone, tiny_mag_ptr, mag_index, msize, fresh_region);
 
 			// we don't clear because this freshly allocated space is pristine
 			tiny_mag_ptr->alloc_underway = FALSE;
 			OSMemoryBarrier();
-			SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 			CHECK(szone, __PRETTY_FUNCTION__);
 			return ptr;
 		} else {
-			SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+			SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 			yield();
-			SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
+			SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
 		}
 	}
 	/* NOTREACHED */
 }
 
-size_t
-tiny_size(rack_t *rack, const void *ptr)
-{
-	if (tiny_region_for_ptr_no_lock(rack, ptr)) {
-		if (TINY_INDEX_FOR_PTR(ptr) >= NUM_TINY_BLOCKS) {
-			return 0;
-		}
-
-		boolean_t is_free;
-		msize_t msize = get_tiny_meta_header(ptr, &is_free);
-		if (is_free) {
-			return 0;
-		}
-
-#if CONFIG_TINY_CACHE
-		{
-			mag_index_t mag_index = MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr));
-			if (DEPOT_MAGAZINE_INDEX != mag_index) {
-				magazine_t *tiny_mag_ptr = &rack->magazines[mag_index];
-
-				if (msize < TINY_QUANTUM && ptr == tiny_mag_ptr->mag_last_free) {
-					return 0;
-				}
-			} else {
-				for (mag_index = 0; mag_index < rack->num_magazines; mag_index++) {
-					magazine_t *tiny_mag_ptr = &(rack->magazines[mag_index]);
-
-					if (msize < TINY_QUANTUM && ptr == tiny_mag_ptr->mag_last_free) {
-						return 0;
-					}
-				}
-			}
-		}
-#endif
-		return TINY_BYTES_FOR_MSIZE(msize);
-	}
-
-	return 0;
-}
-
 static MALLOC_NOINLINE void
-free_tiny_botch(rack_t *rack, tiny_free_list_t *ptr)
+free_tiny_botch(szone_t *szone, tiny_free_list_t *ptr)
 {
 	mag_index_t mag_index = MAGAZINE_INDEX_FOR_TINY_REGION(TINY_REGION_FOR_PTR(ptr));
-	magazine_t *tiny_mag_ptr = &(rack->magazines[mag_index]);
-	SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-	malloc_zone_error(rack->debug_flags, true, "Double free of object %p\n", ptr);
+	magazine_t *tiny_mag_ptr = &(szone->tiny_magazines[mag_index]);
+	SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+	szone_error(szone, 1, "double free", ptr, NULL);
 }
 
 void
-free_tiny(rack_t *rack, void *ptr, region_t tiny_region, size_t known_size)
+free_tiny(szone_t *szone, void *ptr, region_t tiny_region, size_t known_size)
 {
 	msize_t msize;
 	boolean_t is_free;
 	mag_index_t mag_index = MAGAZINE_INDEX_FOR_TINY_REGION(tiny_region);
-	magazine_t *tiny_mag_ptr = &(rack->magazines[mag_index]);
-
-	MALLOC_TRACE(TRACE_tiny_free, (uintptr_t)rack, (uintptr_t)ptr, (uintptr_t)tiny_mag_ptr, known_size);
+	magazine_t *tiny_mag_ptr = &(szone->tiny_magazines[mag_index]);
+
+	MALLOC_TRACE(TRACE_tiny_free, (uintptr_t)szone, (uintptr_t)ptr, (uintptr_t)tiny_mag_ptr, known_size);
 
 	// ptr is known to be in tiny_region
 	if (known_size) {
@@ -2084,49 +1931,47 @@
 	} else {
 		msize = get_tiny_meta_header(ptr, &is_free);
 		if (is_free) {
-			free_tiny_botch(rack, ptr);
+			free_tiny_botch(szone, ptr);
 			return;
 		}
 	}
 #if DEBUG_MALLOC
 	if (!msize) {
-		malloc_report(ASL_LEVEL_ERR, "*** free_tiny() block in use is too large: %p\n", ptr);
+		malloc_printf("*** free_tiny() block in use is too large: %p\n", ptr);
 		return;
 	}
 #endif
 
-	SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
+	SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
 
 #if CONFIG_TINY_CACHE
 	// Depot does not participate in CONFIG_TINY_CACHE since it can't be directly malloc()'d
 	if (DEPOT_MAGAZINE_INDEX != mag_index) {
 		if (msize < TINY_QUANTUM) {					  // to see if the bits fit in the last 4 bits
 			void *ptr2 = tiny_mag_ptr->mag_last_free; // Might be NULL
-			msize_t msize2 = tiny_mag_ptr->mag_last_free_msize;
 			region_t rgn2 = tiny_mag_ptr->mag_last_free_rgn;
 
 			/* check that we don't already have this pointer in the cache */
-			if (ptr == ptr2) {
-				free_tiny_botch(rack, ptr);
+			if (ptr == (void *)((uintptr_t)ptr2 & ~(TINY_QUANTUM - 1))) {
+				free_tiny_botch(szone, ptr);
 				return;
 			}
 
-			if ((rack->debug_flags & MALLOC_DO_SCRIBBLE) && msize) {
+			if ((szone->debug_flags & MALLOC_DO_SCRIBBLE) && msize) {
 				memset(ptr, SCRABBLE_BYTE, TINY_BYTES_FOR_MSIZE(msize));
 			}
 
-			tiny_mag_ptr->mag_last_free = ptr;
-			tiny_mag_ptr->mag_last_free_msize = msize;
+			tiny_mag_ptr->mag_last_free = (void *)(((uintptr_t)ptr) | msize);
 			tiny_mag_ptr->mag_last_free_rgn = tiny_region;
 
 			if (!ptr2) {
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				CHECK(szone, __PRETTY_FUNCTION__);
 				return;
 			}
 
-			msize = msize2;
-			ptr = ptr2;
+			msize = (uintptr_t)ptr2 & (TINY_QUANTUM - 1);
+			ptr = (void *)(((uintptr_t)ptr2) & ~(TINY_QUANTUM - 1));
 			tiny_region = rgn2;
 		}
 	}
@@ -2140,122 +1985,23 @@
 	mag_index_t refreshed_index;
 
 	while (mag_index != (refreshed_index = trailer->mag_index)) { // Note assignment
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
+
 		mag_index = refreshed_index;
-		tiny_mag_ptr = &(rack->magazines[mag_index]);
-		SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
-	}
-
-	if (tiny_free_no_lock(rack, tiny_mag_ptr, mag_index, tiny_region, ptr, msize)) {
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		tiny_mag_ptr = &(szone->tiny_magazines[mag_index]);
+		SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
+	}
+
+	if (tiny_free_no_lock(szone, tiny_mag_ptr, mag_index, tiny_region, ptr, msize)) {
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 	}
 
 	CHECK(szone, __PRETTY_FUNCTION__);
 }
 
-unsigned
-tiny_batch_malloc(szone_t *szone, size_t size, void **results, unsigned count)
-{
-	msize_t msize = TINY_MSIZE_FOR_BYTES(size + TINY_QUANTUM - 1);
-	unsigned found = 0;
-	mag_index_t mag_index = tiny_mag_get_thread_index() % szone->tiny_rack.num_magazines;
-	magazine_t *tiny_mag_ptr = &(szone->tiny_rack.magazines[mag_index]);
-
-	// make sure to return objects at least one quantum in size
-	if (!msize) {
-		msize = 1;
-	}
-
-	CHECK(szone, __PRETTY_FUNCTION__);
-
-	// We must lock the zone now, since tiny_malloc_from_free_list assumes that
-	// the caller has done so.
-	SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
-
-	// with the zone locked, allocate objects from the free list until all
-	// sufficiently large objects have been exhausted, or we have met our quota
-	// of objects to allocate.
-	while (found < count) {
-		void *ptr = tiny_malloc_from_free_list(&szone->tiny_rack, tiny_mag_ptr, mag_index, msize);
-		if (!ptr) {
-			break;
-		}
-
-		*results++ = ptr;
-		found++;
-	}
-	SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-	return found;
-}
-
 void
-tiny_batch_free(szone_t *szone, void **to_be_freed, unsigned count)
-{
-	unsigned cc = 0;
-	void *ptr;
-	region_t tiny_region = NULL;
-	boolean_t is_free;
-	msize_t msize;
-	magazine_t *tiny_mag_ptr = NULL;
-	mag_index_t mag_index = -1;
-
-	// frees all the pointers in to_be_freed
-	// note that to_be_freed may be overwritten during the process
-	if (!count) {
-		return;
-	}
-
-	CHECK(szone, __PRETTY_FUNCTION__);
-	while (cc < count) {
-		ptr = to_be_freed[cc];
-		if (ptr) {
-			if (NULL == tiny_region || tiny_region != TINY_REGION_FOR_PTR(ptr)) { // region same as last iteration?
-				if (tiny_mag_ptr) {												  // non-NULL iff magazine lock taken
-					SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-					tiny_mag_ptr = NULL;
-				}
-
-				tiny_region = tiny_region_for_ptr_no_lock(&szone->tiny_rack, ptr);
-
-				if (tiny_region) {
-					tiny_mag_ptr = mag_lock_zine_for_region_trailer(szone->tiny_rack.magazines,
-							REGION_TRAILER_FOR_TINY_REGION(tiny_region),
-							MAGAZINE_INDEX_FOR_TINY_REGION(tiny_region));
-					mag_index = MAGAZINE_INDEX_FOR_TINY_REGION(tiny_region);
-				}
-			}
-			if (tiny_region) {
-				// this is a tiny pointer
-				if (TINY_INDEX_FOR_PTR(ptr) >= NUM_TINY_BLOCKS) {
-					break; // pointer to metadata; let the standard free deal with it
-				}
-				msize = get_tiny_meta_header(ptr, &is_free);
-				if (is_free) {
-					break; // a double free; let the standard free deal with it
-				}
-				if (!tiny_free_no_lock(&szone->tiny_rack, tiny_mag_ptr, mag_index, tiny_region, ptr, msize)) {
-					// Arrange to re-acquire magazine lock
-					tiny_mag_ptr = NULL;
-					tiny_region = NULL;
-				}
-				to_be_freed[cc] = NULL;
-			} else {
-				// No region in this zone claims ptr; let the standard free deal with it
-				break;
-			}
-		}
-		cc++;
-	}
-
-	if (tiny_mag_ptr) {
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
-		tiny_mag_ptr = NULL;
-	}
-}
-
-
-void
-print_tiny_free_list(rack_t *rack)
+print_tiny_free_list(szone_t *szone)
 {
 	tiny_free_list_t *ptr;
 	_SIMPLE_STRING b = _simple_salloc();
@@ -2263,20 +2009,20 @@
 
 	if (b) {
 		_simple_sappend(b, "tiny free sizes:\n");
-		for (mag_index = -1; mag_index < rack->num_magazines; mag_index++) {
+		for (mag_index = -1; mag_index < szone->num_tiny_magazines; mag_index++) {
 			grain_t slot = 0;
 			_simple_sprintf(b, "\tMagazine %d: ", mag_index);
 			while (slot < NUM_TINY_SLOTS) {
-				ptr = rack->magazines[mag_index].mag_free_list[slot].p;
+				ptr = szone->tiny_magazines[mag_index].mag_free_list[slot].p;
 				if (ptr) {
 					_simple_sprintf(b, "%s%y[%d]; ", (slot == NUM_TINY_SLOTS - 1) ? ">=" : "", (slot + 1) * TINY_QUANTUM,
-									free_list_count(rack, (free_list_t){ .p = ptr }));
+									free_list_count(szone, (free_list_t){ .p = ptr }));
 				}
 				slot++;
 			}
 			_simple_sappend(b, "\n");
 		}
-		malloc_report(MALLOC_REPORT_NOLOG | MALLOC_REPORT_NOPREFIX, "%s\n", _simple_string(b));
+		_malloc_printf(MALLOC_PRINTF_NOLOG | MALLOC_PRINTF_NOPREFIX, "%s\n", _simple_string(b));
 		_simple_sfree(b);
 	}
 }
@@ -2298,7 +2044,7 @@
 	if (region == HASHRING_REGION_DEALLOCATED) {
 		if ((b = _simple_salloc()) != NULL) {
 			_simple_sprintf(b, "Tiny region [unknown address] was returned to the OS\n");
-			malloc_report(MALLOC_REPORT_NOLOG | MALLOC_REPORT_NOPREFIX, "%s\n", _simple_string(b));
+			_malloc_printf(MALLOC_PRINTF_NOLOG | MALLOC_PRINTF_NOPREFIX, "%s\n", _simple_string(b));
 			_simple_sfree(b);
 		}
 		return;
@@ -2318,13 +2064,13 @@
 			break;
 		}
 		if (!msize) {
-			malloc_report(ASL_LEVEL_ERR, "*** error with %p: msize=%d\n", (void *)current, (unsigned)msize);
+			malloc_printf("*** error with %p: msize=%d\n", (void *)current, (unsigned)msize);
 			break;
 		}
 		if (!is_free) {
 			// block in use
 			if (msize > NUM_TINY_SLOTS) {
-				malloc_report(ASL_LEVEL_ERR, "*** error at %p msize for in_use is %d\n", (void *)current, msize);
+				malloc_printf("*** error at %p msize for in_use is %d\n", (void *)current, msize);
 			}
 			if (msize < 1024) {
 				counts[msize]++;
@@ -2360,59 +2106,53 @@
 				}
 			}
 		}
-		malloc_report(MALLOC_REPORT_NOLOG | MALLOC_REPORT_NOPREFIX, "%s\n", _simple_string(b));
+		_malloc_printf(MALLOC_PRINTF_NOLOG | MALLOC_PRINTF_NOPREFIX, "%s\n", _simple_string(b));
 		_simple_sfree(b);
 	}
 }
 
-static char *tiny_freelist_fail_msg = "check: tiny free list incorrect ";
-
-#define TINY_FREELIST_FAIL(fmt, ...) \
-	malloc_zone_check_fail(tiny_freelist_fail_msg, \
-			" (slot=%u), counter=%d\n" fmt, slot, counter, __VA_ARGS__);
-
 boolean_t
-tiny_free_list_check(rack_t *rack, grain_t slot, unsigned counter)
+tiny_free_list_check(szone_t *szone, grain_t slot)
 {
 	mag_index_t mag_index;
 
-	for (mag_index = -1; mag_index < rack->num_magazines; mag_index++) {
-		magazine_t *tiny_mag_ptr = &(rack->magazines[mag_index]);
-		SZONE_MAGAZINE_PTR_LOCK(tiny_mag_ptr);
+	for (mag_index = -1; mag_index < szone->num_tiny_magazines; mag_index++) {
+		magazine_t *tiny_mag_ptr = &(szone->tiny_magazines[mag_index]);
+		SZONE_MAGAZINE_PTR_LOCK(szone, tiny_mag_ptr);
 
 		unsigned count = 0;
-		tiny_free_list_t *ptr = rack->magazines[mag_index].mag_free_list[slot].p;
+		tiny_free_list_t *ptr = szone->tiny_magazines[mag_index].mag_free_list[slot].p;
 		boolean_t is_free;
 		tiny_free_list_t *previous = NULL;
 
 		while (ptr) {
 			is_free = tiny_meta_header_is_free(ptr);
 			if (!is_free) {
-				TINY_FREELIST_FAIL("*** in-use ptr in free list slot=%u count=%d ptr=%p\n", slot, count, ptr);
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+				malloc_printf("*** in-use ptr in free list slot=%d count=%d ptr=%p\n", slot, count, ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				return 0;
 			}
 			if (((uintptr_t)ptr) & (TINY_QUANTUM - 1)) {
-				TINY_FREELIST_FAIL("*** unaligned ptr in free list slot=%u count=%d ptr=%p\n", slot, count, ptr);
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+				malloc_printf("*** unaligned ptr in free list slot=%d  count=%d ptr=%p\n", slot, count, ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				return 0;
 			}
-			if (!tiny_region_for_ptr_no_lock(rack, ptr)) {
-				TINY_FREELIST_FAIL("*** ptr not in szone slot=%d  count=%u ptr=%p\n", slot, count, ptr);
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+			if (!tiny_region_for_ptr_no_lock(szone, ptr)) {
+				malloc_printf("*** ptr not in szone slot=%d  count=%d ptr=%p\n", slot, count, ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				return 0;
 			}
-			if (free_list_unchecksum_ptr(rack, &ptr->previous) != previous) {
-				TINY_FREELIST_FAIL("*** previous incorrectly set slot=%u count=%d ptr=%p\n", slot, count, ptr);
-				SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+			if (free_list_unchecksum_ptr(szone, &ptr->previous) != previous) {
+				malloc_printf("*** previous incorrectly set slot=%d  count=%d ptr=%p\n", slot, count, ptr);
+				SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 				return 0;
 			}
 			previous = ptr;
-			ptr = free_list_unchecksum_ptr(rack, &ptr->next);
+			ptr = free_list_unchecksum_ptr(szone, &ptr->next);
 			count++;
 		}
 		
-		SZONE_MAGAZINE_PTR_UNLOCK(tiny_mag_ptr);
+		SZONE_MAGAZINE_PTR_UNLOCK(szone, tiny_mag_ptr);
 	}
 	return 1;
 }