diff --git a/dma.c b/dma.c
index ae6351aa..d60cbca7 100644
--- a/dma.c
+++ b/dma.c
@@ -165,7 +165,7 @@ mt76_dma_rx_fill(struct mt76_dev *dev, struct mt76_queue *q)
 	spin_lock_bh(&q->lock);
 
 	while (q->queued < q->ndesc - 1) {
-		buf = kzalloc(len, GFP_ATOMIC);
+		buf = kzalloc(q->buf_size, GFP_ATOMIC);
 		if (!buf)
 			break;