260 	__u64 addr;  member
528 	struct sockaddr __user		*addr;  member
545 	u64				addr;  member
561 	u64				addr;  member
572 	u64				addr;  member
578 	struct sockaddr __user		*addr;  member
622 	u64				addr;  member
646 	__u64				addr;  member
721 	struct sockaddr_storage		addr;  member
2484 	kbuf = (struct io_buffer *) (unsigned long) req->rw.addr;  in io_put_rw_kbuf()
3037 	req->rw.addr = READ_ONCE(sqe->addr);  in io_prep_rw()
3127 	u64 buf_end, buf_addr = req->rw.addr;  in __io_import_fixed()
3246 	kbuf = (struct io_buffer *) (unsigned long) req->rw.addr;  in io_rw_buffer_select()
3251 	req->rw.addr = (u64) (unsigned long) kbuf;  in io_rw_buffer_select()
3253 	return u64_to_user_ptr(kbuf->addr);  in io_rw_buffer_select()
3265 	uiov = u64_to_user_ptr(req->rw.addr);  in io_compat_import()
3286 	struct iovec __user *uiov = u64_to_user_ptr(req->rw.addr);  in __io_iov_buffer_select()
3310 		kbuf = (struct io_buffer *) (unsigned long) req->rw.addr;  in io_iov_buffer_select()
3311 		iov[0].iov_base = u64_to_user_ptr(kbuf->addr);  in io_iov_buffer_select()
3329 	void __user *buf = u64_to_user_ptr(req->rw.addr);  in io_import_iovec()
3403 			iovec.iov_base = u64_to_user_ptr(req->rw.addr);  in loop_rw_iter()
3424 			req->rw.addr += nr;  in loop_rw_iter()
3865 	oldf = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_renameat_prep()
3922 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_unlinkat_prep()
3957 	if (unlikely(sqe->ioprio || sqe->off || sqe->addr || sqe->rw_flags ||  in io_shutdown_prep()
4109 	if (unlikely(sqe->addr || sqe->ioprio || sqe->buf_index ||  in io_fsync_prep()
4150 	req->sync.len = READ_ONCE(sqe->addr);  in io_fallocate_prep()
4189 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));  in __io_openat_prep()
4313 	if (sqe->ioprio || sqe->rw_flags || sqe->addr || sqe->len || sqe->off ||  in io_remove_buffers_prep()
4393 	p->addr = READ_ONCE(sqe->addr);  in io_provide_buffers_prep()
4399 	if (check_add_overflow((unsigned long)p->addr, size, &tmp_check))  in io_provide_buffers_prep()
4403 	if (!access_ok(u64_to_user_ptr(p->addr), size))  in io_provide_buffers_prep()
4417 	u64 addr = pbuf->addr;  in io_add_buffers()  local
4425 		buf->addr = addr;  in io_add_buffers()
4428 		addr += pbuf->len;  in io_add_buffers()
4487 		ev = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_epoll_ctl_prep()
4526 	req->madvise.addr = READ_ONCE(sqe->addr);  in io_madvise_prep()
4544 	ret = do_madvise(current->mm, ma->addr, ma->len, ma->advice);  in io_madvise()
4556 	if (sqe->ioprio || sqe->buf_index || sqe->addr || sqe->splice_fd_in)  in io_fadvise_prep()
4601 	req->statx.filename = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_statx_prep()
4629 	if (sqe->ioprio || sqe->off || sqe->addr || sqe->len ||  in io_close_prep()
4700 	if (unlikely(sqe->addr || sqe->ioprio || sqe->buf_index ||  in io_sfr_prep()
4749 		async_msg->msg.msg_name = &async_msg->addr;  in io_setup_async_msg()
4765 	iomsg->msg.msg_name = &iomsg->addr;  in io_sendmsg_copy_hdr()
4795 	sr->umsg = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_sendmsg_prep()
4994 	iomsg->msg.msg_name = &iomsg->addr;  in io_recvmsg_copy_hdr()
5045 	sr->umsg = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_recvmsg_prep()
5087 		kmsg->fast_iov[0].iov_base = u64_to_user_ptr(kbuf->addr);  in io_recvmsg()
5153 		buf = u64_to_user_ptr(kbuf->addr);  in io_recv()
5210 	accept->addr = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_accept_prep()
5239 	file = do_accept(req->file, file_flags, accept->addr, accept->addr_len,  in io_accept()
5269 	return move_addr_to_kernel(conn->addr, conn->addr_len, &io->address);  in io_connect_prep_async()
5282 	conn->addr = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_connect_prep()
5297 		ret = move_addr_to_kernel(req->connect.addr,  in io_connect()
5965 	upd->old_user_data = READ_ONCE(sqe->addr);  in io_poll_update_prep()
5987 	if (sqe->ioprio || sqe->buf_index || sqe->off || sqe->addr)  in io_poll_add_prep()
6194 	tr->addr = READ_ONCE(sqe->addr);  in io_timeout_remove_prep()
6231 		ret = io_timeout_cancel(ctx, tr->addr);  in io_timeout_remove()
6239 			ret = io_linked_timeout_update(ctx, tr->addr, &tr->ts, mode);  in io_timeout_remove()
6241 			ret = io_timeout_update(ctx, tr->addr, &tr->ts, mode);  in io_timeout_remove()
6284 	if (get_timespec64(&data->ts, u64_to_user_ptr(sqe->addr)))  in io_timeout_prep()
6427 	req->cancel.addr = READ_ONCE(sqe->addr);  in io_async_cancel_prep()
6434 	u64 sqe_addr = req->cancel.addr;  in io_async_cancel()
6448 		ret = io_async_cancel_one(tctx, req->cancel.addr, ctx);  in io_async_cancel()
6472 	req->rsrc_update.arg = READ_ONCE(sqe->addr);  in io_rsrc_update_prep()
6696 			kfree((void *)(unsigned long)req->rw.addr);  in io_clean_op()
10005 	unsigned long addr, unsigned long len,  in io_uring_nommu_get_unmapped_area()  argument
11126 	BUILD_BUG_SQE_ELEM(16, __u64,  addr);  in io_uring_init()