Commit bb934c29fda8 for kernel

commit bb934c29fda8dcd409145a0deddc1a8095fec930
Merge: b62f58bd7187 c61e23ed1435
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Oct 10 16:50:50 2026 -0700

    Merge tag 'drm-fixes-2026-10-11' of https://gitlab.freedesktop.org/drm/kernel

    Pull drm fixes from Dave Ailie:
     "Live from Dublin Airport, it's Saturday Night drm fixes.

      This week has the missing misc fixes from last week which I tracked
      down and seemed to be a race/bug in my lei setup somehow, once I asked
      lei to ignore it's cache I got the missing email. But there are more
      misc fixes this week and amd and intel ones.

      The main ones in this are amdgpu and xe, with vc4, vmwgfx, nouveau and
      imagination in the middle, with a bunch of small single fixes.

      Bit busier than I'd like, but the missing misc might explain it,
      anyways time for me to fly home.

      fb:
       - defer setup when fbdev_probe() fails, not just on -EAGAIN

      bridge:
       - Fix unlocked list_del in drm_bridge_add()
       - Fix unlocked list access in drm_bridge_attach()
       - th1520-dw-hdmi:
           - Fix error check on dw_hdmi_probe() return value
           - Fix remove() callback

      aspeed:
       - Balance the display clock enable on teardown

      i915:
       - Fix a GT park race that could trigger spurious RPM wakelock
         warnings
       - Fix execbuffer relocation cleanup to avoid out-of-bounds free

      xe:
       - i2c removal
       - system Controller Maibox header handling
       - two bo pin/unpin accounting bugs
       - not emitting a w/a twice
       - xe_mmio_wait32() to honor delay/sleep maximums

      amdgpu:
       - Fix direct scanout alpha on some DRM_FORMATs
       - UserQ fixes
       - Fix tearing flips with PSR
       - GPU reset vblank fix
       - Debugfs register interface fix
       - Fix display mode patching
       - Expand Mac reserved memory workaround

      amdkfd:
       - SDMA doorbell fix
       - Fix dma-buf reference leak in error path

      imagination:
       - fix reference and vm_bo handling in remap()
       - size page table preallocation by device address

      gud:
       - don't keep a connector without a CRTC as connector_state

      panthor:
       - validate userspace queue count against initialized firmware
         slot count

      nouveau:
       - fix null ptr regression
       - skip turing CE workaround for non-GR

      vmwgfx:
       - validate pitch value
       - add blend mode property

      vc4:
       - drain hangcheck timer on unbind
       - free BO cache on teardown
       - use kvmalloc_objs for bo cache size list
       - disable V3D interrupt across runtime suspend
       - fix binner slot allocation
       - fix fw refcount leak"

    * tag 'drm-fixes-2026-10-11' of https://gitlab.freedesktop.org/drm/kernel: (39 commits)
      drm/nouveau: Skip the Turing CE workaround object for non-GR channels
      drm/vc4: Fix binner slot allocation failing on an idle GPU
      drm/vc4: Disable the V3D interrupt across runtime suspend
      drm/imagination: Size page table preallocation by device address
      drm/imagination: Fix reference and vm_bo handling in remap()
      drm/amdgpu: make Mac FB workaround generic
      drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info
      drm/amd/display: Don't replace a sink mode that shares the native totals
      drm/amdkfd: align SDMA doorbell base for shader doorbell writes
      drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks
      drm/amdgpu: serialize vblank counter reads against GPU reset
      drm/amd/display: disable self-refresh on tearing flips
      drm/amdgpu/userq: return the memdup_user() error for the user MQD
      drm/amdgpu/userq: only accept doorbell BOs as queue doorbell
      drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs
      drm/xe/i2c: cancel the client work on remove
      drm/xe/sysctrl: Fix mailbox header handling
      drm/i915/gt: Unmask interrupts only when ACTIVE is true
      drm/i915/gem: Prevent overstepping exec array boundary
      drm/gud: don't keep a connector without a CRTC as connector_state
      ...