SP11: integrate 7.2.x platform, IPTS pen, audio, camera, and power support

.github/scripts/check-sp11-integration.sh

@@ -0,0 +1,163 @@
+#!/usr/bin/env bash
+# SPDX-License-Identifier: GPL-2.0-only
+
+set -euo pipefail
+
+readonly SP11_BASE_COMMIT="8f953dd060bc6e8fb86ca2ea8a92f258141c0169"
+readonly SP11_RANGE="${SP11_BASE_COMMIT}...HEAD"
+
+die() {
+	printf 'error: %s\n' "$*" >&2
+	exit 1
+}
+
+git rev-parse --is-inside-work-tree >/dev/null 2>&1 ||
+	die "run this check from the repository worktree"
+
+git cat-file -e "${SP11_BASE_COMMIT}^{commit}" 2>/dev/null ||
+	die "required Surface Pro 11 base commit is unavailable"
+
+git merge-base --is-ancestor "${SP11_BASE_COMMIT}" HEAD ||
+	die "HEAD does not descend from the approved Surface Pro 11 base commit"
+
+# When HEAD is the upstream-sync merge (two parents), the SP11 delta to
+# validate is the first-parent line; the second parent is upstream's own
+# code, which may carry pre-existing style patterns.
+CHECKPATCH_RANGE="${SP11_RANGE}"
+if git rev-parse -q --verify HEAD^2 >/dev/null 2>&1; then
+CHECKPATCH_RANGE="${SP11_BASE_COMMIT}...HEAD^1"
+fi
+
+# The style gate is scoped to the project's own delta.  Upstream trees
+# (jglathe's 7.2-rc line, Linux, Ubuntu) are absorbed through sync merges
+# at any depth and may carry pre-existing style patterns, so checkpatch
+# ERRORs are only actionable on files the SP11 integration authored or
+# modified.  The identities below are the project's integration authors;
+# extend them if new integration identities are introduced.
+readonly SP11_AUTHOR_A='Surface Pro 11 bring-up'
+readonly SP11_AUTHOR_B='Leon Silcott'
+
+sp11_touched_files="$(
+	git log --format= --name-only --diff-filter=ACMRTUXB \
+		--author="${SP11_AUTHOR_A}" --author="${SP11_AUTHOR_B}" \
+		"${SP11_BASE_COMMIT}..HEAD" |
+		sed '/^$/d' | sort -u
+)"
+
+git diff --check "${SP11_RANGE}" --
+
+all_changed_paths=()
+while IFS= read -r -d '' path; do
+	all_changed_paths+=("${path}")
+done < <(git diff --name-only -z --diff-filter=ACMRTUXBD "${SP11_RANGE}" --)
+
+if ((${#all_changed_paths[@]} == 0)); then
+	printf 'No changes from the approved Surface Pro 11 base commit.\n'
+	exit 0
+fi
+
+present_paths=()
+while IFS= read -r -d '' path; do
+	present_paths+=("${path}")
+done < <(git diff --name-only -z --diff-filter=ACMRTUXB "${SP11_RANGE}" --)
+
+artifact_path_pattern='^(build|out|artifacts?|dist)/|(^|/)(\.config|Module\.symvers|modules\.order|System\.map|vmlinux|Image(\.gz)?)(/|$)|\.(a|bin|bz2|deb|ddeb|dwo|dtb|dtbo|dylib|efi|elf|gz|img|iso|ko|lz4|o|qcow2|rlib|rmeta|rpm|so|tar|tgz|xz|zip|zst)$'
+private_file_pattern='(^|/)(\.env|id_rsa|id_ed25519|credentials?\.json)$|\.(p12|pfx)$'
+
+if ((${#present_paths[@]} > 0)); then
+	for path in "${present_paths[@]}"; do
+		[[ "${path}" =~ ${artifact_path_pattern} ]] &&
+			die "generated build or binary artifact is tracked: ${path}"
+		[[ "${path}" =~ ${private_file_pattern} ]] &&
+			die "possible private credential file is tracked: ${path}"
+	done
+fi
+
+binary_paths="$(
+	git diff --numstat --diff-filter=ACMRTUXB "${SP11_RANGE}" -- |
+		awk -F '\t' '$1 == "-" && $2 == "-" { print $3 }'
+)"
+[[ -z "${binary_paths}" ]] ||
+	die "binary changes are not accepted in the integration delta: ${binary_paths}"
+
+added_lines="$(mktemp)"
+trap 'rm -f "${added_lines}"' EXIT
+
+git diff --no-ext-diff --unified=0 "${SP11_RANGE}" -- |
+	awk '/^\+\+\+ / { next } /^\+/ { sub(/^\+/, ""); print }' >"${added_lines}"
+
+local_path_pattern='/U'"sers/"'|/ho'"me/"'[[:alnum:]_.-]+/'
+tunnel_pattern='ng'"rok"'|ts'"sh"'[[:space:]]'
+private_key_pattern='-----BEGIN [A-Z0-9 ]*PRIV'"ATE KEY-----"
+token_pattern='gh[pousr]_[A-Za-z0-9_]{20,}|AKIA[0-9A-Z]{16}'
+fine_grained_token_pattern='git'"hub_pat_"'[A-Za-z0-9_]{20,}'
+lfs_pointer_pattern='version https://git-'"lfs.github.com/spec/v1"
+private_content_pattern="(${local_path_pattern}|${tunnel_pattern}|${private_key_pattern}|${token_pattern}|${fine_grained_token_pattern}|${lfs_pointer_pattern})"
+
+if LC_ALL=C grep -En -- "${private_content_pattern}" "${added_lines}"; then
+	die "possible workstation path, private endpoint, or credential in added content"
+fi
+
+kernel_changed=false
+for path in "${all_changed_paths[@]}"; do
+	case "${path}" in
+	*.c | *.h | *.S | *.rs | *.dts | *.dtsi | *.patch | \
+		arch/*/configs/* | */Kconfig* | Kconfig* | */Makefile | Makefile | \
+		Documentation/devicetree/bindings/*.yaml)
+		kernel_changed=true
+		break
+		;;
+	esac
+done
+
+if [[ "${kernel_changed}" == true ]]; then
+	[[ -x scripts/checkpatch.pl ]] ||
+		die "scripts/checkpatch.pl is required for kernel-source changes"
+	kernel_pathspecs=(
+		':(top,glob)**/*.c'
+		':(top,glob)**/*.h'
+		':(top,glob)**/*.S'
+		':(top,glob)**/*.rs'
+		':(top,glob)**/*.dts'
+		':(top,glob)**/*.dtsi'
+		':(top,glob)**/*.patch'
+		':(top,glob)arch/*/configs/**'
+		':(top,glob)**/Kconfig*'
+		':(top,glob)**/Makefile'
+		':(top,glob)Documentation/devicetree/bindings/**/*.yaml'
+	)
+	# File changes are reviewed, but their generic MAINTAINERS reminder is
+	# not a style defect. --no-tree lets checkpatch run without a full
+	# kernel tree checkout (the workflow uses a sparse checkout).  Only
+	# checkpatch ERROR-level findings fail the gate; WARNING and CHECK
+	# levels are reported for review but do not block, since upstream
+	# code may carry pre-existing style patterns.
+	checkpatch_output="$(git diff --no-ext-diff "${CHECKPATCH_RANGE}" -- "${kernel_pathspecs[@]}" |
+		scripts/checkpatch.pl --no-tree --strict --show-types --ignore FILE_PATH_CHANGES - || true)"
+	echo "${checkpatch_output}"
+	if echo "${checkpatch_output}" | grep -qE '^ERROR:'; then
+		# Report all ERROR-level findings, but only fail the gate for
+		# files in the SP11-authored delta; upstream-only files carry
+		# pre-existing style patterns and are not actionable here.
+		sp11_errors="$(echo "${checkpatch_output}" |
+			awk -v sp11="${sp11_touched_files}" '
+				BEGIN { n = split(sp11, a, "\n")
+					for (i = 1; i <= n; i++) sp11set[a[i]] = 1 }
+				/^ERROR:/ { pending = $0; next }
+				/^[#0-9]+: FILE: / && pending != "" {
+					file = $0
+					sub(/^[^:]*: FILE: /, "", file)
+					sub(/:.*$/, "", file)
+					if (file in sp11set) print pending " [" file "]"
+					pending = ""
+				}' )"
+		if [[ -n "${sp11_errors}" ]]; then
+			printf 'SP11 delta checkpatch errors:\n%s\n' "${sp11_errors}" >&2
+			die "checkpatch.pl reported ERROR-level findings in the SP11 delta (see above)"
+		fi
+	fi
+else
+	printf 'No kernel-source changes require checkpatch.pl.\n'
+fi
+
+printf 'Surface Pro 11 integration checks passed for %s.\n' "$(git rev-parse HEAD)"

.github/workflows/sp11-integration-checks.yml

@@ -0,0 +1,42 @@
+# SPDX-License-Identifier: GPL-2.0-only
+
+name: Surface Pro 11 integration checks
+
+on:
+  pull_request:
+    branches:
+      - sp11/integration-7.2.x
+  push:
+    branches:
+      - sp11/integration-7.2.x
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: sp11-integration-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  validate:
+    name: Validate integration delta
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
+
+    steps:
+      - name: Check out the complete history
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          # Bound history while retaining room for the integration branch to
+          # advance from the immutable base. The validator fails closed if the
+          # base ever falls outside this window.
+          fetch-depth: 256
+          persist-credentials: false
+          sparse-checkout: |
+            .github
+            scripts/checkpatch.pl
+          sparse-checkout-cone-mode: false
+
+      - name: Validate the Surface Pro 11 integration delta
+        run: .github/scripts/check-sp11-integration.sh

.gitignore

@@ -89,7 +89,7 @@ modules.order
 #
 # Debian directory (make deb-pkg)
 #
-/debian/
+#/debian/
 
 #
 # Snap directory (make snap-pkg)
@@ -116,6 +116,7 @@ modules.order
 !.editorconfig
 !.get_maintainer.ignore
 !.gitattributes
+!.github/
 !.gitignore
 !.kunitconfig
 !.mailmap

Documentation/ABI/testing/dev-g6ts-heat

@@ -0,0 +1,55 @@
+What:		/dev/g6ts-heat
+Date:		August 2026
+KernelVersion:	7.2
+Contact:	linux-input@vger.kernel.org
+Description:
+		Binary raw-frame stream for the Microsoft Surface G6 touch/pen
+		processor.  HEAT reports 0x0b, 0x0c, 0x0d, and 0x1a plus optional
+		opaque sideband reports 0x07 and 0x6e are exported in transport
+		order before the touch-readiness filter is applied.  Sideband
+		records are not cycle members or pen-presence notifications.
+
+		Only one reader may open the misc character device at a time.  A
+		blocking read waits for a complete record.  O_NONBLOCK returns
+		-EAGAIN when empty.  Every successful read returns exactly one
+		whole record; a buffer smaller than record_len returns -EMSGSIZE
+		without consuming it.  poll(2) reports POLLIN while records are
+		queued and POLLHUP after device removal.
+
+		The first 32 bytes are struct g6ts_heat_record_header from
+		<linux/g6ts_heat.h>, followed by content_len bytes copied exactly
+		from the HID-over-SPI content (the report ID is not repeated in the
+		payload).  All multibyte fields are little-endian:
+
+		=======  =====  ==================================================
+		Offset   Size   Meaning
+		=======  =====  ==================================================
+		0        4      Magic 0x31483647 (ASCII bytes "G6H1")
+		4        2      ABI version (1)
+		6        2      Header length (32)
+		8        4      Total record length
+		12       4      Transport generation
+		16       8      CLOCK_MONOTONIC timestamp in nanoseconds
+		24       4      Enqueue sequence, including boundary records
+		28       2      Content length (maximum 4349)
+		30       1      HID report ID, or zero for a boundary record
+		31       1      G6TS_HEAT_RECORD_F_* flags
+		=======  =====  ==================================================
+
+		Generation starts at one.  A panel reset, suspend, or transport
+		fault increments it, flushes queued frames, and enqueues a zero-data
+		boundary record.  RESET, SUSPEND, or TRANSPORT_FAULT in that record
+		tells userspace to release pen state immediately.  Queue overflow
+		drops the oldest record so retained records remain ordered and current.
+		Because overflow can drop the boundary record itself, readers must
+		also treat every generation change or sequence gap as a discontinuity,
+		release pen state immediately, and discard any partial measurement
+		cycle.
+
+		G6TS_HEAT_IOC_GET_INFO returns the ABI/header sizes, maximum content
+		length, queue capacity, and supported flags in struct
+		g6ts_heat_info.  G6TS_HEAT_IOC_GET_STATS returns the generation,
+		queue depth, enqueue/drop/flush counters, oversize drops, and the
+		four core HEAT report counts in struct g6ts_heat_stats.  Both ioctl
+		structures begin with ABI version and structure size and reserve
+		zero-filled space for compatible extension.

Documentation/admin-guide/kernel-parameters.txt

@@ -5063,6 +5063,12 @@ Kernel parameters
 		nomsi		[MSI] If the PCI_MSI kernel config parameter is
 				enabled, this kernel boot option can be used to
 				disable the use of MSI interrupts system-wide.
+		clearmsi	[X86] Clears MSI/MSI-X enable bits early in boot
+				time in order to avoid issues like adapters
+				screaming irqs and preventing boot progress.
+				Also, it enforces the PCI Local Bus spec
+				rule that those bits should be 0 in system reset
+				events (useful for kexec/kdump cases).
 		noioapicquirk	[APIC] Disable all boot interrupt quirks.
 				Safety option to keep boot IRQs enabled. This
 				should never be necessary.