diff --git a/fs/fuse/dev.c b/fs/fuse/dev.c
index 1050c1c..11ea2c4 100644
--- a/fs/fuse/dev.c
+++ b/fs/fuse/dev.c
@@ -1957,7 +1957,7 @@
 
 	pipe_lock(pipe);
 
-	bufs = kvmalloc_array(pipe->buffers, sizeof(struct pipe_buffer),
+	bufs = kvmalloc_array(pipe->nrbufs, sizeof(struct pipe_buffer),
 			      GFP_KERNEL);
 	if (!bufs) {
 		pipe_unlock(pipe);