[git pull] drm fixes for 7.0-rc3

[Dave Airlie]

Hi Linus,

Weekly fixes pull. There is one mm fix in here for a HMM livelock
triggered by the xe driver tests. Otherwise it's a pretty wide range
of fixes across the board, ttm UAF regression fix, amdgpu fixes,
nouveau doesn't crash my laptop anymore fix, and a fair bit of misc.
Seems about right for rc3.

Regards,
Dave.

drm-fixes-2026-03-07:
drm fixes for 7.0-rc3

mm:
- mm: Fix a hmm_range_fault() livelock / starvation problem

pagemap:
- Revert "drm/pagemap: Disable device-to-device migration"

ttm:
- fix function return breaking reclaim
- fix build failure on PREEMPT_RT
- fix bo->resource UAF

dma-buf:
- include ioctl.h in uapi header

sched:
- fix kernel doc warning

amdgpu:
- LUT fixes
- VCN5 fix
- Dispclk fix
- SMU 13.x fix
- Fix race in VM acquire
- PSP 15.x fix
- UserQ fix

amdxdna:
- fix invalid payload for failed command
- fix NULL ptr dereference
- fix major fw version check
- avoid inconsistent fw state on error

i915/display:
- Fix for Lenovo T14 G7 display not refreshing

xe:
- Do not preempt fence signaling CS instructions
- Some leak and finalization fixes
- Workaround fix

nouveau:
- avoid runtime suspend oops when using dp aux

panthor:
- fix gem_sync argument ordering

solomon:
- fix incorrect display output

renesas:
- fix DSI divider programming

ethosu:
- fix job submit error clean-up refcount
- fix NPU_OP_ELEMENTWISE validation
- handle possible underflows in IFM size calcs
The following changes since commit 11439c4635edd669ae435eec308f4ab8a0804808:

  Linux 7.0-rc2 (2026-03-01 15:39:31 -0800)

are available in the Git repository at:

  https://gitlab.freedesktop.org/drm/kernel.git tags/drm-fixes-2026-03-07

for you to fetch changes up to 96bfe9ff7e88f0541002640acbcb3ec63c9d0130:

  Merge tag 'drm-xe-fixes-2026-03-05' of
https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes
(2026-03-06 19:45:19 +1000)

----------------------------------------------------------------
drm fixes for 7.0-rc3

mm:
- mm: Fix a hmm_range_fault() livelock / starvation problem

pagemap:
- Revert "drm/pagemap: Disable device-to-device migration"

ttm:
- fix function return breaking reclaim
- fix build failure on PREEMPT_RT
- fix bo->resource UAF

dma-buf:
- include ioctl.h in uapi header

sched:
- fix kernel doc warning

amdgpu:
- LUT fixes
- VCN5 fix
- Dispclk fix
- SMU 13.x fix
- Fix race in VM acquire
- PSP 15.x fix
- UserQ fix

amdxdna:
- fix invalid payload for failed command
- fix NULL ptr dereference
- fix major fw version check
- avoid inconsistent fw state on error

i915/display:
- Fix for Lenovo T14 G7 display not refreshing

xe:
- Do not preempt fence signaling CS instructions
- Some leak and finalization fixes
- Workaround fix

nouveau:
- avoid runtime suspend oops when using dp aux

panthor:
- fix gem_sync argument ordering

solomon:
- fix incorrect display output

renesas:
- fix DSI divider programming

ethosu:
- fix job submit error clean-up refcount
- fix NPU_OP_ELEMENTWISE validation
- handle possible underflows in IFM size calcs

----------------------------------------------------------------
Akash Goel (1):
      drm/panthor: Correct the order of arguments passed to gem_sync

Alex Hung (2):
      drm/amd/display: Use mpc.preblend flag to indicate 3D LUT
      drm/amd/display: Enable DEGAMMA and reject COLOR_PIPELINE+DEGAMMA_LUT

Alysa Liu (1):
      drm/amdgpu: Fix use-after-free race in VM acquire

Chris Brandt (1):
      drm: renesas: rz-du: mipi_dsi: Set DSI divider

Dave Airlie (6):
      nouveau/dpcd: return EBUSY for aux xfer if the device is asleep
      Merge tag 'amd-drm-fixes-7.0-2026-03-04' of
https://gitlab.freedesktop.org/agd5f/linux into drm-fixes
      Merge tag 'drm-intel-fixes-2026-03-05' of
https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes
      Merge tag 'drm-misc-fixes-2026-03-05' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes
      Merge tag 'drm-misc-fixes-2026-03-06' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes
      Merge tag 'drm-xe-fixes-2026-03-05' of
https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes

Dillon Varone (1):
      drm/amd/display: Fallback to boot snapshot for dispclk

Francesco Lavra (1):
      drm/solomon: Fix page start when updating rectangle in page
addressing mode

Isaac J. Manjarres (1):
      dma-buf: Include ioctl.h in UAPI header

Jouni Högander (2):
      drm/dp: Add definition for Panel Replay full-line granularity
      drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling

Julian Orth (1):
      drm/syncobj: Fix handle <-> fd ioctls with dirty stack

Lizhi Hou (4):
      accel/amdxdna: Fill invalid payload for failed command
      accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
      accel/amdxdna: Fix major version check on NPU1 platform
      accel/amdxdna: Split mailbox channel create function

Maarten Lankhorst (2):
      drm/ttm/tests: Fix build failure on PREEMPT_RT
      Revert "drm/syncobj: Fix handle <-> fd ioctls with dirty stack"

Matt Roper (1):
      drm/xe/xe2_hpg: Correct implementation of Wa_16025250150

Matthew Brost (1):
      drm/xe: Do not preempt fence signaling CS instructions

Rob Herring (Arm) (3):
      accel: ethosu: Fix job submit error clean-up refcount underflows
      accel: ethosu: Fix NPU_OP_ELEMENTWISE validation with scalar
      accel: ethosu: Handle possible underflow in IFM size calculations

Shuicheng Lin (2):
      drm/xe/configfs: Free ctx_restore_mid_bb in release
      drm/xe/reg_sr: Fix leak on xa_store failure

Sunil Khatri (1):
      drm/amdgpu/userq: refcount userqueues to avoid any race conditions

Thadeu Lima de Souza Cascardo (1):
      drm/ttm: Fix bo resource use-after-free

Thomas Hellström (2):
      mm: Fix a hmm_range_fault() livelock / starvation problem
      Revert "drm/pagemap: Disable device-to-device migration"

Tomasz Lis (1):
      drm/xe/queue: Call fini on exec queue creation fail

Tvrtko Ursulin (2):
      drm/ttm: Fix ttm_pool_beneficial_order() return type
      drm/amdgpu/userq: Consolidate wait ioctl exit path

Varun Gupta (1):
      drm/xe: Fix memory leak in xe_vm_madvise_ioctl

Yang Wang (1):
      drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x

Yujie Liu (1):
      drm/sched: Fix kernel-doc warning for drm_sched_job_done()

Zhanjun Dong (1):
      drm/xe/gsc: Fix GSC proxy cleanup on early initialization failure

sguttula (2):
      drm/amdgpu: Enable DPG support for VCN5
      drm/amdgpu/psp: Use Indirect access address for GFX to PSP mailbox

 drivers/accel/amdxdna/aie2_ctx.c                   |  23 ++--
 drivers/accel/amdxdna/aie2_message.c               |  36 +++++--
 drivers/accel/amdxdna/aie2_pci.c                   |  66 ++++++------
 drivers/accel/amdxdna/aie2_pci.h                   |   1 +
 drivers/accel/amdxdna/amdxdna_ctx.c                |  27 +++++
 drivers/accel/amdxdna/amdxdna_ctx.h                |   3 +
 drivers/accel/amdxdna/amdxdna_mailbox.c            |  99 +++++++++---------
 drivers/accel/amdxdna/amdxdna_mailbox.h            |  31 +++---
 drivers/accel/amdxdna/npu1_regs.c                  |   2 +-
 drivers/accel/ethosu/ethosu_gem.c                  |  12 ++-
 drivers/accel/ethosu/ethosu_job.c                  |  28 +++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c          | 116 ++++++++++++++-------
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h          |   4 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c    |  42 +++-----
 drivers/gpu/drm/amd/amdgpu/psp_v15_0.c             |  20 ++--
 drivers/gpu/drm/amd/amdgpu/soc21.c                 |   4 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_color.c    |   6 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_colorop.c  |   3 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c |  16 +--
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c    |   8 ++
 .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c  |   6 +-
 .../drm/amd/include/asic_reg/mp/mp_15_0_0_offset.h |  18 ++++
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c   |   8 +-
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c   |   3 +-
 drivers/gpu/drm/drm_pagemap.c                      |  14 +--
 drivers/gpu/drm/i915/display/intel_psr.c           |  11 +-
 drivers/gpu/drm/nouveau/nouveau_connector.c        |   3 +
 drivers/gpu/drm/panthor/panthor_sched.c            |   9 +-
 drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c     |  16 ++-
 drivers/gpu/drm/scheduler/sched_main.c             |   1 +
 drivers/gpu/drm/solomon/ssd130x.c                  |   6 +-
 drivers/gpu/drm/ttm/tests/ttm_bo_test.c            |   4 +-
 drivers/gpu/drm/ttm/ttm_bo.c                       |  11 +-
 drivers/gpu/drm/ttm/ttm_pool_internal.h            |   2 +-
 drivers/gpu/drm/xe/xe_configfs.c                   |   1 +
 drivers/gpu/drm/xe/xe_exec_queue.c                 |  23 ++--
 drivers/gpu/drm/xe/xe_gsc_proxy.c                  |  43 ++++++--
 drivers/gpu/drm/xe/xe_gsc_types.h                  |   2 +
 drivers/gpu/drm/xe/xe_lrc.h                        |   3 +-
 drivers/gpu/drm/xe/xe_reg_sr.c                     |   4 +-
 drivers/gpu/drm/xe/xe_ring_ops.c                   |   9 ++
 drivers/gpu/drm/xe/xe_vm_madvise.c                 |   3 +-
 drivers/gpu/drm/xe/xe_wa.c                         |  13 +--
 include/drm/display/drm_dp.h                       |   2 +
 include/linux/migrate.h                            |  10 +-
 include/uapi/linux/dma-buf.h                       |   1 +
 mm/filemap.c                                       |  15 ++-
 mm/memory.c                                        |   3 +-
 mm/migrate.c                                       |   8 +-
 mm/migrate_device.c                                |   2 +-
 51 files changed, 516 insertions(+), 291 deletions(-)