1339 	struct pipe_buffer *bufs;  in fuse_dev_splice_read()  local
1346 	bufs = kvmalloc_array(pipe->buffers, sizeof(struct pipe_buffer),  in fuse_dev_splice_read()
1348 	if (!bufs)  in fuse_dev_splice_read()
1352 	cs.pipebufs = bufs;  in fuse_dev_splice_read()
1368 		bufs[page_nr].ops = &nosteal_pipe_buf_ops;  in fuse_dev_splice_read()
1369 		bufs[page_nr].flags = 0;  in fuse_dev_splice_read()
1370 		ret = add_to_pipe(pipe, &bufs[page_nr++]);  in fuse_dev_splice_read()
1378 		put_page(bufs[page_nr].page);  in fuse_dev_splice_read()
1380 	kvfree(bufs);  in fuse_dev_splice_read()
1942 	struct pipe_buffer *bufs;  in fuse_dev_splice_write()  local
1954 	bufs = kvmalloc_array(pipe->nrbufs, sizeof(struct pipe_buffer),  in fuse_dev_splice_write()
1956 	if (!bufs) {  in fuse_dev_splice_write()
1964 		rem += pipe->bufs[(pipe->curbuf + idx) & (pipe->buffers - 1)].len;  in fuse_dev_splice_write()
1977 		ibuf = &pipe->bufs[pipe->curbuf];  in fuse_dev_splice_write()
1978 		obuf = &bufs[nbuf];  in fuse_dev_splice_write()
2001 	cs.pipebufs = bufs;  in fuse_dev_splice_write()
2013 		pipe_buf_release(pipe, &bufs[idx]);  in fuse_dev_splice_write()
2016 	kvfree(bufs);  in fuse_dev_splice_write()