diff --git a/sys/security/audit/audit_trigger.c b/sys/security/audit/audit_trigger.c
index 1cf1be2dd3f..562c45028ac 100644
--- a/sys/security/audit/audit_trigger.c
+++ b/sys/security/audit/audit_trigger.c
@@ -113,7 +113,7 @@ audit_read(struct cdev *dev, struct uio *uio, int ioflag)
 	}
 	mtx_unlock(&audit_trigger_mtx);
 	if (!error) {
-		error = uiomove(ti, sizeof *ti, uio);
+		error = uiomove(&ti->trigger, sizeof(ti->trigger), uio);
 		free(ti, M_AUDITTRIGGER);
 	}
 	return (error);