It looks like usf found (allocated) is never used. I guess something like tbf->dir.ul.usf[ts] = usf is missed.

Regards,

Vladimir Rolbin.