3099 	return u64_to_user_ptr(kbuf->addr);  in io_rw_buffer_select()
3111 	uiov = u64_to_user_ptr(req->rw.addr);  in io_compat_import()
3132 	struct iovec __user *uiov = u64_to_user_ptr(req->rw.addr);  in __io_iov_buffer_select()
3157 		iov[0].iov_base = u64_to_user_ptr(kbuf->addr);  in io_iov_buffer_select()
3175 	void __user *buf = u64_to_user_ptr(req->rw.addr);  in io_import_iovec()
3246 			iovec.iov_base = u64_to_user_ptr(req->rw.addr);  in loop_rw_iter()
3691 	oldf = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_renameat_prep()
3692 	newf = u64_to_user_ptr(READ_ONCE(sqe->addr2));  in io_renameat_prep()
3748 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_unlinkat_prep()
3794 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_mkdirat_prep()
3835 	oldpath = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_symlinkat_prep()
3836 	newpath = u64_to_user_ptr(READ_ONCE(sqe->addr2));  in io_symlinkat_prep()
3884 	oldf = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_linkat_prep()
3885 	newf = u64_to_user_ptr(READ_ONCE(sqe->addr2));  in io_linkat_prep()
4153 	fname = u64_to_user_ptr(READ_ONCE(sqe->addr));  in __io_openat_prep()
4185 	how = u64_to_user_ptr(READ_ONCE(sqe->addr2));  in io_openat2_prep()
4364 	if (!access_ok(u64_to_user_ptr(p->addr), size))  in io_provide_buffers_prep()
4446 		ev = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_epoll_ctl_prep()
4560 	req->statx.filename = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_statx_prep()
4561 	req->statx.buffer = u64_to_user_ptr(READ_ONCE(sqe->addr2));  in io_statx_prep()
4734 	sr->umsg = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_sendmsg_prep()
4955 	sr->umsg = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_recvmsg_prep()
4995 		kmsg->fast_iov[0].iov_base = u64_to_user_ptr(kbuf->addr);  in io_recvmsg()
5047 		buf = u64_to_user_ptr(kbuf->addr);  in io_recv()
5090 	accept->addr = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_accept_prep()
5091 	accept->addr_len = u64_to_user_ptr(READ_ONCE(sqe->addr2));  in io_accept_prep()
5163 	conn->addr = u64_to_user_ptr(READ_ONCE(sqe->addr));  in io_connect_prep()
6066 		if (get_timespec64(&tr->ts, u64_to_user_ptr(sqe->addr2)))  in io_timeout_remove_prep()
6147 	if (get_timespec64(&data->ts, u64_to_user_ptr(sqe->addr)))  in io_timeout_prep()
8450 	u64 __user *tags = u64_to_user_ptr(up->tags);  in __io_sqe_files_update()
8451 	__s32 __user *fds = u64_to_user_ptr(up->data);  in __io_sqe_files_update()
8852 		dst->iov_base = u64_to_user_ptr((u64)ciov.iov_base);  in io_copy_iov()
9118 	u64 __user *tags = u64_to_user_ptr(up->tags);  in __io_sqe_buffers_update()
9119 	struct iovec iov, __user *iovs = u64_to_user_ptr(up->data);  in __io_sqe_buffers_update()
9928 	*sig = u64_to_user_ptr(arg.sigmask);  in io_get_ext_arg()
9930 	*ts = u64_to_user_ptr(arg.ts);  in io_get_ext_arg()
10604 		return io_sqe_files_register(ctx, u64_to_user_ptr(rr.data),  in io_register_rsrc()
10605 					     rr.nr, u64_to_user_ptr(rr.tags));  in io_register_rsrc()
10607 		return io_sqe_buffers_register(ctx, u64_to_user_ptr(rr.data),  in io_register_rsrc()
10608 					       rr.nr, u64_to_user_ptr(rr.tags));  in io_register_rsrc()