diff --git a/drivers/media/platform/tegra/camera/fusa-capture/capture-isp-channel.c b/drivers/media/platform/tegra/camera/fusa-capture/capture-isp-channel.c
index 3ad4b77f..d36e759b 100644
--- a/drivers/media/platform/tegra/camera/fusa-capture/capture-isp-channel.c
+++ b/drivers/media/platform/tegra/camera/fusa-capture/capture-isp-channel.c
@@ -394,6 +394,14 @@ static long isp_channel_ioctl(
 
 		if (copy_from_user(&req, ptr, sizeof(req)))
 			break;
+		if (!req.inputfences_relocs.num_relocs) {
+			dev_err(chan->isp_dev, "req.inputfences_relocs.num_relocs invalid");
+			break;
+		}
+		if (!req.prefences_relocs.num_relocs) {
+			dev_err(chan->isp_dev, "req.prefences_relocs.num_relocs invalid");
+			break;
+		}
 		err = isp_capture_request(chan, &req);
 		if (err)
 			dev_err(chan->isp_dev,