On 2/7/25 12:41 PM, Dongli Zhang wrote: > @@ -378,6 +384,11 @@ static void vhost_scsi_release_tmf_res(struct vhost_scsi_tmf *tmf) > { > struct vhost_scsi_inflight *inflight = tmf->inflight; > > + if (tmf->tmf_log_num) { > + kfree(tmf->tmf_log); > + tmf->tmf_log_num = 0; Just a small nit. We can drop this line above. We free the struct on the next line so it's not useful. > + } > + > kfree(tmf);