Hi Linus, Weekly fixes pull. There is one mm fix in here for a HMM livelock triggered by the xe driver tests. Otherwise it's a pretty wide range of fixes across the board, ttm UAF regression fix, amdgpu fixes, nouveau doesn't crash my laptop anymore fix, and a fair bit of misc. Seems about right for rc3.
Regards, Dave. drm-fixes-2026-03-07: drm fixes for 7.0-rc3 mm: - mm: Fix a hmm_range_fault() livelock / starvation problem pagemap: - Revert "drm/pagemap: Disable device-to-device migration" ttm: - fix function return breaking reclaim - fix build failure on PREEMPT_RT - fix bo->resource UAF dma-buf: - include ioctl.h in uapi header sched: - fix kernel doc warning amdgpu: - LUT fixes - VCN5 fix - Dispclk fix - SMU 13.x fix - Fix race in VM acquire - PSP 15.x fix - UserQ fix amdxdna: - fix invalid payload for failed command - fix NULL ptr dereference - fix major fw version check - avoid inconsistent fw state on error i915/display: - Fix for Lenovo T14 G7 display not refreshing xe: - Do not preempt fence signaling CS instructions - Some leak and finalization fixes - Workaround fix nouveau: - avoid runtime suspend oops when using dp aux panthor: - fix gem_sync argument ordering solomon: - fix incorrect display output renesas: - fix DSI divider programming ethosu: - fix job submit error clean-up refcount - fix NPU_OP_ELEMENTWISE validation - handle possible underflows in IFM size calcs The following changes since commit 11439c4635edd669ae435eec308f4ab8a0804808: Linux 7.0-rc2 (2026-03-01 15:39:31 -0800) are available in the Git repository at: https://gitlab.freedesktop.org/drm/kernel.git tags/drm-fixes-2026-03-07 for you to fetch changes up to 96bfe9ff7e88f0541002640acbcb3ec63c9d0130: Merge tag 'drm-xe-fixes-2026-03-05' of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes (2026-03-06 19:45:19 +1000) ---------------------------------------------------------------- drm fixes for 7.0-rc3 mm: - mm: Fix a hmm_range_fault() livelock / starvation problem pagemap: - Revert "drm/pagemap: Disable device-to-device migration" ttm: - fix function return breaking reclaim - fix build failure on PREEMPT_RT - fix bo->resource UAF dma-buf: - include ioctl.h in uapi header sched: - fix kernel doc warning amdgpu: - LUT fixes - VCN5 fix - Dispclk fix - SMU 13.x fix - Fix race in VM acquire - PSP 15.x fix - UserQ fix amdxdna: - fix invalid payload for failed command - fix NULL ptr dereference - fix major fw version check - avoid inconsistent fw state on error i915/display: - Fix for Lenovo T14 G7 display not refreshing xe: - Do not preempt fence signaling CS instructions - Some leak and finalization fixes - Workaround fix nouveau: - avoid runtime suspend oops when using dp aux panthor: - fix gem_sync argument ordering solomon: - fix incorrect display output renesas: - fix DSI divider programming ethosu: - fix job submit error clean-up refcount - fix NPU_OP_ELEMENTWISE validation - handle possible underflows in IFM size calcs ---------------------------------------------------------------- Akash Goel (1): drm/panthor: Correct the order of arguments passed to gem_sync Alex Hung (2): drm/amd/display: Use mpc.preblend flag to indicate 3D LUT drm/amd/display: Enable DEGAMMA and reject COLOR_PIPELINE+DEGAMMA_LUT Alysa Liu (1): drm/amdgpu: Fix use-after-free race in VM acquire Chris Brandt (1): drm: renesas: rz-du: mipi_dsi: Set DSI divider Dave Airlie (6): nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Merge tag 'amd-drm-fixes-7.0-2026-03-04' of https://gitlab.freedesktop.org/agd5f/linux into drm-fixes Merge tag 'drm-intel-fixes-2026-03-05' of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes Merge tag 'drm-misc-fixes-2026-03-05' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes Merge tag 'drm-misc-fixes-2026-03-06' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes Merge tag 'drm-xe-fixes-2026-03-05' of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes Dillon Varone (1): drm/amd/display: Fallback to boot snapshot for dispclk Francesco Lavra (1): drm/solomon: Fix page start when updating rectangle in page addressing mode Isaac J. Manjarres (1): dma-buf: Include ioctl.h in UAPI header Jouni Högander (2): drm/dp: Add definition for Panel Replay full-line granularity drm/i915/psr: Fix for Panel Replay X granularity DPCD register handling Julian Orth (1): drm/syncobj: Fix handle <-> fd ioctls with dirty stack Lizhi Hou (4): accel/amdxdna: Fill invalid payload for failed command accel/amdxdna: Fix NULL pointer dereference of mgmt_chann accel/amdxdna: Fix major version check on NPU1 platform accel/amdxdna: Split mailbox channel create function Maarten Lankhorst (2): drm/ttm/tests: Fix build failure on PREEMPT_RT Revert "drm/syncobj: Fix handle <-> fd ioctls with dirty stack" Matt Roper (1): drm/xe/xe2_hpg: Correct implementation of Wa_16025250150 Matthew Brost (1): drm/xe: Do not preempt fence signaling CS instructions Rob Herring (Arm) (3): accel: ethosu: Fix job submit error clean-up refcount underflows accel: ethosu: Fix NPU_OP_ELEMENTWISE validation with scalar accel: ethosu: Handle possible underflow in IFM size calculations Shuicheng Lin (2): drm/xe/configfs: Free ctx_restore_mid_bb in release drm/xe/reg_sr: Fix leak on xa_store failure Sunil Khatri (1): drm/amdgpu/userq: refcount userqueues to avoid any race conditions Thadeu Lima de Souza Cascardo (1): drm/ttm: Fix bo resource use-after-free Thomas Hellström (2): mm: Fix a hmm_range_fault() livelock / starvation problem Revert "drm/pagemap: Disable device-to-device migration" Tomasz Lis (1): drm/xe/queue: Call fini on exec queue creation fail Tvrtko Ursulin (2): drm/ttm: Fix ttm_pool_beneficial_order() return type drm/amdgpu/userq: Consolidate wait ioctl exit path Varun Gupta (1): drm/xe: Fix memory leak in xe_vm_madvise_ioctl Yang Wang (1): drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x Yujie Liu (1): drm/sched: Fix kernel-doc warning for drm_sched_job_done() Zhanjun Dong (1): drm/xe/gsc: Fix GSC proxy cleanup on early initialization failure sguttula (2): drm/amdgpu: Enable DPG support for VCN5 drm/amdgpu/psp: Use Indirect access address for GFX to PSP mailbox drivers/accel/amdxdna/aie2_ctx.c | 23 ++-- drivers/accel/amdxdna/aie2_message.c | 36 +++++-- drivers/accel/amdxdna/aie2_pci.c | 66 ++++++------ drivers/accel/amdxdna/aie2_pci.h | 1 + drivers/accel/amdxdna/amdxdna_ctx.c | 27 +++++ drivers/accel/amdxdna/amdxdna_ctx.h | 3 + drivers/accel/amdxdna/amdxdna_mailbox.c | 99 +++++++++--------- drivers/accel/amdxdna/amdxdna_mailbox.h | 31 +++--- drivers/accel/amdxdna/npu1_regs.c | 2 +- drivers/accel/ethosu/ethosu_gem.c | 12 ++- drivers/accel/ethosu/ethosu_job.c | 28 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 116 ++++++++++++++------- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c | 42 +++----- drivers/gpu/drm/amd/amdgpu/psp_v15_0.c | 20 ++-- drivers/gpu/drm/amd/amdgpu/soc21.c | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_color.c | 6 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_colorop.c | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 16 +-- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 8 ++ .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 6 +- .../drm/amd/include/asic_reg/mp/mp_15_0_0_offset.h | 18 ++++ .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 8 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 3 +- drivers/gpu/drm/drm_pagemap.c | 14 +-- drivers/gpu/drm/i915/display/intel_psr.c | 11 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/panthor/panthor_sched.c | 9 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 16 ++- drivers/gpu/drm/scheduler/sched_main.c | 1 + drivers/gpu/drm/solomon/ssd130x.c | 6 +- drivers/gpu/drm/ttm/tests/ttm_bo_test.c | 4 +- drivers/gpu/drm/ttm/ttm_bo.c | 11 +- drivers/gpu/drm/ttm/ttm_pool_internal.h | 2 +- drivers/gpu/drm/xe/xe_configfs.c | 1 + drivers/gpu/drm/xe/xe_exec_queue.c | 23 ++-- drivers/gpu/drm/xe/xe_gsc_proxy.c | 43 ++++++-- drivers/gpu/drm/xe/xe_gsc_types.h | 2 + drivers/gpu/drm/xe/xe_lrc.h | 3 +- drivers/gpu/drm/xe/xe_reg_sr.c | 4 +- drivers/gpu/drm/xe/xe_ring_ops.c | 9 ++ drivers/gpu/drm/xe/xe_vm_madvise.c | 3 +- drivers/gpu/drm/xe/xe_wa.c | 13 +-- include/drm/display/drm_dp.h | 2 + include/linux/migrate.h | 10 +- include/uapi/linux/dma-buf.h | 1 + mm/filemap.c | 15 ++- mm/memory.c | 3 +- mm/migrate.c | 8 +- mm/migrate_device.c | 2 +- 51 files changed, 516 insertions(+), 291 deletions(-)
