1 files changed, 2 insertions, 2 deletions

diff --git a/drivers/infiniband/core/user_mad.c b/drivers/infiniband/core/user_mad.c
index fc5519a3de99..a48166a8e04b 100644
--- a/drivers/infiniband/core/user_mad.c
+++ b/drivers/infiniband/core/user_mad.c
@@ -398,12 +398,12 @@ static ssize_t ib_umad_write(struct file *filp, const char __user *buf,
          * transaction ID matches the agent being used to send the
          * MAD.
          */
-        method = ((struct ib_mad_hdr *) packet->msg)->method;
+        method = ((struct ib_mad_hdr *) packet->msg->mad)->method;
 
         if (!(method & IB_MGMT_METHOD_RESP)       &&
             method != IB_MGMT_METHOD_TRAP_REPRESS &&
             method != IB_MGMT_METHOD_SEND) {
-                tid = &((struct ib_mad_hdr *) packet->msg)->tid;
+                tid = &((struct ib_mad_hdr *) packet->msg->mad)->tid;
                 *tid = cpu_to_be64(((u64) agent->hi_tid) << 32 |
                                    (be64_to_cpup(tid) & 0xffffffff));
         }