From b5d3c5fdb99e1602a36ddcf94fe95b96cdc157f3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lo=C3=AFc=20Gr=C3=A9goire?= <loic@gregoire.dev>
Date: Mon, 7 Sep 2026 20:58:14 -0400
Subject: [PATCH] mm/zone: free empty slabs on drain()

---
 src/mm/zone.zig | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/src/mm/zone.zig b/src/mm/zone.zig
index dc7d51b..bcbb8eb 100644
--- a/src/mm/zone.zig
+++ b/src/mm/zone.zig
@@ -1106,7 +1106,19 @@ pub const Zone = struct {
         self.maglist_destroy(depot.empty_mags.head, 0);
         self.maglist_destroy(depot.full_mags.head, magazine_size.load());
 
+        // Destroy all free slabs. Swap the list under the lock.
+        const head = &self.free_slabs.head;
+        var entry = self.free_slabs.first();
+        self.free_slabs.init();
+
         self.lock.release();
+
+        while (entry != head) {
+            const slab: *Slab = @fieldParentPtr("link", entry);
+            const next = entry.next;
+            self.slab_destroy(slab);
+            entry = next;
+        }
     }
 
     fn trim_maglist(self: *Self, maglist: *MagazineList, rounds: usize) void {
@@ -1324,10 +1336,11 @@ pub const Zone = struct {
 
     fn slab_destroy(self: *Self, slab: *Slab) void {
         if (self.obj_size > small_slab_size) {
+            const base = slab.base;
             const alloc_size = @sizeOf(Slab) + Slab.bitmap_bytes(slab.capacity);
             gpa.free(@as([*]u8, @ptrCast(slab))[0..alloc_size]);
 
-            mm.heap.free(slab.base, self.slab_size);
+            mm.heap.free(base, self.slab_size);
         } else {
             free_page(@ptrFromInt(
                 std.mem.alignBackward(usize, @intFromPtr(slab), mm.page_size),