[git pull] drm fixes for 7.3-rc7

From: Dave Airlie

Date: Sat Oct 10 2026 - 15:23:37 EST


Hi Linus,

Live from Dublin Airport, it's Saturday Night drm fixes. This week has
the missing misc fixes from last week which I tracked down and seemed
to be a race/bug in my lei setup somehow, once I asked lei to ignore
it's cache I got the missing email. But there are more misc fixes this
week and amd and intel ones.

The main ones in this are amdgpu and xe, with vc4, vmwgfx, nouveau and
imagination in the middle, with a bunch of small single fixes.

Bit busier than I'd like, but the missing misc might explain it,
anyways time for me to fly home.

Dave.

drm-fixes-2026-10-11:
drm fixes for 7.3-rc7

fb:
- defer setup when fbdev_probe() fails, not just on -EAGAIN

bridge:
- Fix unlocked list_del in drm_bridge_add()
- Fix unlocked list access in drm_bridge_attach()
- th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value
- th1520-dw-hdmi: Fix remove() callback

aspeed:
- Balance the display clock enable on teardown

i915:
- Fix a GT park race that could trigger spurious RPM wakelock warnings
- Fix execbuffer relocation cleanup to avoid out-of-bounds free

xe:
- i2c removal
- system Controller Maibox header handling
- two bo pin/unpin accounting bugs
- not emitting a w/a twice
- xe_mmio_wait32() to honor delay/sleep maximums

amdgpu:
- Fix direct scanout alpha on some DRM_FORMATs
- UserQ fixes
- Fix tearing flips with PSR
- GPU reset vblank fix
- Debugfs register interface fix
- Fix display mode patching
- Expand Mac reserved memory workaround

amdkfd:
- SDMA doorbell fix
- Fix dma-buf reference leak in error path

imagination:
- fix reference and vm_bo handling in remap()
- size page table preallocation by device address

gud:
- don't keep a connector without a CRTC as connector_state

panthor:
- validate userspace queue count against initialized firmware slot count

nouveau:
- fix null ptr regression
- skip turing CE workaround for non-GR

vmwgfx:
- validate pitch value
- add blend mode property

vc4:
- drain hangcheck timer on unbind
- free BO cache on teardown
- use kvmalloc_objs for bo cache size list
- disable V3D interrupt across runtime suspend
- fix binner slot allocation
- fix fw refcount leak
The following changes since commit a90ee4305c4a5df72c11b31dacfdc76e00fcf78a:

Linux 7.3-rc6 (2026-10-04 13:45:25 -0700)

are available in the Git repository at:

https://gitlab.freedesktop.org/drm/kernel.git tags/drm-fixes-2026-10-11

for you to fetch changes up to c61e23ed14359e6289c08e55940dd3401fe27db0:

Merge tag 'drm-misc-fixes-2026-10-09' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes
(2026-10-11 04:58:03 +1000)

----------------------------------------------------------------
drm fixes for 7.3-rc7

fb:
- defer setup when fbdev_probe() fails, not just on -EAGAIN

bridge:
- Fix unlocked list_del in drm_bridge_add()
- Fix unlocked list access in drm_bridge_attach()
- th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value
- th1520-dw-hdmi: Fix remove() callback

aspeed:
- Balance the display clock enable on teardown

i915:
- Fix a GT park race that could trigger spurious RPM wakelock warnings
- Fix execbuffer relocation cleanup to avoid out-of-bounds free

xe:
- i2c removal
- system Controller Maibox header handling
- two bo pin/unpin accounting bugs
- not emitting a w/a twice
- xe_mmio_wait32() to honor delay/sleep maximums

amdgpu:
- Fix direct scanout alpha on some DRM_FORMATs
- UserQ fixes
- Fix tearing flips with PSR
- GPU reset vblank fix
- Debugfs register interface fix
- Fix display mode patching
- Expand Mac reserved memory workaround

amdkfd:
- SDMA doorbell fix
- Fix dma-buf reference leak in error path

imagination:
- fix reference and vm_bo handling in remap()
- size page table preallocation by device address

gud:
- don't keep a connector without a CRTC as connector_state

panthor:
- validate userspace queue count against initialized firmware slot count

nouveau:
- fix null ptr regression
- skip turing CE workaround for non-GR

vmwgfx:
- validate pitch value
- add blend mode property

vc4:
- drain hangcheck timer on unbind
- free BO cache on teardown
- use kvmalloc_objs for bo cache size list
- disable V3D interrupt across runtime suspend
- fix binner slot allocation
- fix fw refcount leak

----------------------------------------------------------------
Adrian Betschart (1):
drm/amd/display: Don't replace a sink mode that shares the native totals

Alan Previn (1):
drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums

Alex Deucher (1):
drm/amdgpu: make Mac FB workaround generic

Cristian Ciocaltea (2):
drm/bridge: Fix unlocked list_del in drm_bridge_add()
drm/bridge: Fix unlocked list access in drm_bridge_attach()

Dave Airlie (6):
nouveau: check gsp->rm as well as gsp pointer before gcx ready
Merge tag 'drm-misc-fixes-2026-10-01' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes
Merge tag 'drm-intel-fixes-2026-10-08' of
https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes
Merge tag 'drm-xe-fixes-2026-10-08' of
https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes
Merge tag 'amd-drm-fixes-7.3-2026-10-08' of
https://gitlab.freedesktop.org/drm/amdgpu/kernel into drm-fixes
Merge tag 'drm-misc-fixes-2026-10-09' of
https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes

Fan Wu (2):
drm/vc4: drain the hangcheck timer and works on V3D unbind
drm/xe/i2c: cancel the client work on remove

Felix Gu (2):
drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe()
return value
drm/bridge: th1520-dw-hdmi: Fix remove() callback

Gyeyoung Baek (2):
drm/imagination: Fix reference and vm_bo handling in remap()
drm/imagination: Size page table preallocation by device address

Haojie Li (1):
drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info

Ian Forbes (1):
drm/vmwgfx: Add blend mode property

Jesse Zhang (2):
drm/amdgpu/userq: only accept doorbell BOs as queue doorbell
drm/amdgpu/userq: return the memdup_user() error for the user MQD

Krzysztof Karas (2):
drm/i915/gem: Prevent overstepping exec array boundary
drm/i915/gt: Unmask interrupts only when ACTIVE is true

Leo Li (2):
drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs
drm/amd/display: disable self-refresh on tearing flips

Mallesh Koujalagi (1):
drm/xe/sysctrl: Fix mailbox header handling

Mary Guillemard (1):
drm/nouveau: Skip the Turing CE workaround object for non-GR channels

Maíra Canal (4):
drm/vc4: Free the BO cache size list on teardown
drm/vc4: Use kvmalloc_objs() for the BO cache size list
drm/vc4: Disable the V3D interrupt across runtime suspend
drm/vc4: Fix binner slot allocation failing on an idle GPU

Mikhail Gavrilov (1):
drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks

Myeonghun Pak (1):
drm/aspeed: Balance the display clock enable on teardown

Nguyen Ngoc Thang (1):
drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN

Oleg Keri (1):
drm/dp: don't mark the AUX backlight enabled when enabling failed

Osama Abdelkader (1):
drm/panthor: validate userspace queue count against initialized
firmware slot count

Sajal Gupta (1):
drm/gud: don't keep a connector without a CRTC as connector_state

Saleel Kudchadker (1):
drm/amdkfd: align SDMA doorbell base for shader doorbell writes

Thomas Hellström (2):
drm/xe: Fix shrinker accounting double-subtraction on nested external pins
drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin

Tvrtko Ursulin (1):
drm/xe: Do not emit Wa_16010904313 twice

Vitaly Prosyak (1):
drm/amdgpu: serialize vblank counter reads against GPU reset

Wentao Liang (1):
drm/vc4: Fix firmware reference leak in vc4_drm_bind()

Zack Rusin (1):
drm/vmwgfx: validate pitch coming from userspace

drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 +++++++-----
drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 ++-
drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 +
drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 13 +-
drivers/gpu/drm/amd/amdgpu/mes_userqueue.c | 9 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 ++++-
drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 ++
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 19 +++
.../amd/display/amdgpu_dm/amdgpu_dm_connector.c | 7 +-
.../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 20 +--
.../amdgpu_dm/tests/amdgpu_dm_connector_test.c | 42 +++++++
drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +-
drivers/gpu/drm/bridge/th1520-dw-hdmi.c | 8 +-
drivers/gpu/drm/display/drm_dp_helper.c | 4 +-
drivers/gpu/drm/drm_bridge.c | 8 +-
drivers/gpu/drm/drm_fb_helper.c | 6 +-
drivers/gpu/drm/gud/gud_pipe.c | 1 +
drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +-
drivers/gpu/drm/i915/gt/intel_rps.c | 3 +-
drivers/gpu/drm/imagination/pvr_mmu.c | 25 ++--
drivers/gpu/drm/imagination/pvr_vm.c | 8 +-
drivers/gpu/drm/nouveau/nouveau_abi16.c | 2 +-
drivers/gpu/drm/nouveau/nvkm/engine/device/user.c | 2 +-
drivers/gpu/drm/panthor/panthor_sched.c | 3 +
drivers/gpu/drm/vc4/vc4_bo.c | 5 +-
drivers/gpu/drm/vc4/vc4_drv.c | 5 +-
drivers/gpu/drm/vc4/vc4_drv.h | 2 +-
drivers/gpu/drm/vc4/vc4_gem.c | 8 +-
drivers/gpu/drm/vc4/vc4_irq.c | 24 ++--
drivers/gpu/drm/vc4/vc4_v3d.c | 65 +++++-----
drivers/gpu/drm/vc4/vc4_validate.c | 2 +-
drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c | 26 +++-
drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 8 ++
drivers/gpu/drm/xe/display/xe_fb_pin.c | 6 +-
drivers/gpu/drm/xe/xe_bo.c | 139 ++++++++++++++++-----
drivers/gpu/drm/xe/xe_bo.h | 2 +
drivers/gpu/drm/xe/xe_i2c.c | 5 +-
drivers/gpu/drm/xe/xe_lrc.c | 38 ++++--
drivers/gpu/drm/xe/xe_mmio.c | 5 +-
drivers/gpu/drm/xe/xe_sysctrl_mailbox.c | 16 +--
41 files changed, 461 insertions(+), 228 deletions(-)