Claude review: drm/msm: fbdev: Inline msm_alloc_stolen_fb()

[Claude Code Review Bot <claude-review@example.com>]

Patch Review

**Status: Looks good, minor observation.**

The inlining is done correctly. The key changes are:

- The error handling for the non-stolen BO fallback is now properly nested (`if (IS_ERR(bo))` inside the first `IS_ERR(bo)` block), which is a slight improvement over the original's sequential checks.
- `mode_cmd.modifier[0] = DRM_FORMAT_MOD_LINEAR` is explicitly set, which is a no-op since `DRM_FORMAT_MOD_LINEAR` is 0 and the struct is zero-initialized. The commit message correctly notes this.
- The error cleanup path is improved with descriptive labels (`err_drm_framebuffer_remove`, `err_drm_gem_object_put`).

One observation: the `drm_gem_object_put(bo)` at `err_drm_gem_object_put` runs even on `drm_framebuffer_remove` errors. In the old code, `msm_framebuffer_init()` failure was handled by the function itself (it would `drm_gem_object_put` internally on error), and then the caller would also `ERR_CAST` without another put. Now the new code does `goto err_drm_gem_object_put` which adds an explicit put. This is correct because `msm_framebuffer_init()` takes ownership of `bos[]` on success but does NOT consume the reference on failure — the caller's `bo` still needs to be put. The existing `msm_alloc_stolen_fb()` had the same pattern at its line:
```c
drm_gem_object_put(bo);
```
so this is faithful to the original.

---
Generated by Claude Code Patch Reviewer