1374 	struct pipe_buffer *bufs;  in fuse_dev_splice_read()  local
1381 	bufs = kvmalloc_array(pipe->buffers, sizeof(struct pipe_buffer),  in fuse_dev_splice_read()
1383 	if (!bufs)  in fuse_dev_splice_read()
1387 	cs.pipebufs = bufs;  in fuse_dev_splice_read()
1403 		bufs[page_nr].ops = &nosteal_pipe_buf_ops;  in fuse_dev_splice_read()
1404 		bufs[page_nr].flags = 0;  in fuse_dev_splice_read()
1405 		ret = add_to_pipe(pipe, &bufs[page_nr++]);  in fuse_dev_splice_read()
1413 		put_page(bufs[page_nr].page);  in fuse_dev_splice_read()
1415 	kvfree(bufs);  in fuse_dev_splice_read()
1983 	struct pipe_buffer *bufs;  in fuse_dev_splice_write()  local
1995 	bufs = kvmalloc_array(pipe->nrbufs, sizeof(struct pipe_buffer),  in fuse_dev_splice_write()
1997 	if (!bufs) {  in fuse_dev_splice_write()
2005 		rem += pipe->bufs[(pipe->curbuf + idx) & (pipe->buffers - 1)].len;  in fuse_dev_splice_write()
2018 		ibuf = &pipe->bufs[pipe->curbuf];  in fuse_dev_splice_write()
2019 		obuf = &bufs[nbuf];  in fuse_dev_splice_write()
2042 	cs.pipebufs = bufs;  in fuse_dev_splice_write()
2054 		struct pipe_buffer *buf = &bufs[idx];  in fuse_dev_splice_write()
2061 	kvfree(bufs);  in fuse_dev_splice_write()