Guys, can you please start formal thread on this? I have no idea where this came from and what the rationale is. Btw, if the pfn is crap in dma_direct_mmap then the dma_addr_t passed in is crap, as it is derived from that. What is the caller, and how is this triggered?