Consolidate our Linux WIP into aurora-wip

.github/workflows/sep-source.yml

@@ -0,0 +1,69 @@
+name: SEP source checks
+
+on:
+  pull_request:
+    paths:
+      - 'drivers/soc/apple/**'
+      - 'include/uapi/linux/apple-sep.h'
+      - 'tools/aurora-sep/**'
+      - '.github/workflows/sep-source.yml'
+
+jobs:
+  source:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+          filter: blob:none
+          sparse-checkout-cone-mode: false
+          sparse-checkout: |
+            drivers/soc/apple/**
+            include/uapi/linux/apple-sep.h
+            tools/aurora-sep/**
+      - name: Check biometric ioctl ABI sizes
+        run: |
+          cat > /tmp/sep-abi.c <<'EOF'
+          #include <linux/apple-sep.h>
+          _Static_assert(sizeof(struct sep_bio_enrol_start) == 144, "enrol ABI");
+          _Static_assert(sizeof(struct sep_bio_enclave_list) == 520, "list ABI");
+          _Static_assert(sizeof(struct sep_bio_delete) == 16, "delete ABI");
+          int main(void) { return 0; }
+          EOF
+          cc -Wall -Werror -Iinclude/uapi /tmp/sep-abi.c -o /tmp/sep-abi
+          /tmp/sep-abi
+      - name: Test recovery utility and package sources
+        run: |
+          python3 -m unittest tools/aurora-sep/tests/test_sep_bio_identities.py -v
+          python3 -m unittest tools/aurora-sep/tests/test_orphan_delete.py -v
+          python3 -m unittest tools/aurora-sep/tests/test_enrol_admission.py -v
+          python3 -m unittest tools/aurora-sep/tests/test_owner_preparation.py -v
+          python3 -m unittest discover -s tools/aurora-sep/tests -p test_packaging.py -v
+
+  rust-build:
+    runs-on: ubuntu-24.04
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+      - name: Install kernel build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y clang lld llvm libclang-dev libelf-dev libssl-dev \
+            flex bison bc pkg-config make perl
+          rustup component add rust-src
+          cargo install bindgen-cli --version 0.71.1 --locked
+      - name: Compile Apple SEP module for arm64
+        env:
+          LIBCLANG_PATH: /usr/lib/llvm-18/lib
+        run: |
+          make LLVM=1 ARCH=arm64 rustavailable
+          make LLVM=1 ARCH=arm64 defconfig
+          scripts/kconfig/merge_config.sh -m .config arch/arm64/configs/asahi.config
+          scripts/config -e KUNIT -e APPLE_SEP_KUNIT_TEST
+          make LLVM=1 ARCH=arm64 olddefconfig
+          grep -qx 'CONFIG_APPLE_SEP=m' .config
+          grep -qx 'CONFIG_APPLE_SEP_KUNIT_TEST=y' .config
+          make -j2 LLVM=1 ARCH=arm64 modules_prepare
+          make -j2 LLVM=1 ARCH=arm64 drivers/soc/apple/apple-sep.o

Documentation/devicetree/bindings/display/apple,dcp.yaml

@@ -33,7 +33,9 @@ properties:
               - apple,t8112-dcpext
               - apple,t6000-dcpext
               - apple,t6020-dcpext
+              - apple,t6041-dcpext
           - const: apple,dcpext
+      - const: apple,t6041-dcpext
       - items:
           - const: apple,t8140-dcpext
           - const: apple,dcp
@@ -213,6 +215,23 @@ properties:
     $ref: /schemas/types.yaml#/definitions/uint32
     description: Display coprocessor index on multi-DCP systems.
 
+  apple,typec-hybrid-first:
+    type: boolean
+    description:
+      A hybrid pipeline (a fixed output plus Type-C routes) is planned for a
+      Type-C port before the other pipelines, while its fixed output has no
+      sink, instead of being kept back for that output. Set where this
+      pipeline is the only one that can be the primary of a display wider than
+      one pipe.
+
+  apple,dcp-endpoint:
+    $ref: /schemas/types.yaml#/definitions/uint32
+    description:
+      The display endpoint this coprocessor is to its firmware (its display
+      index), by which two external pipes name each other when a display
+      wider than one pipe is driven by two of them. 0 is the internal
+      display.
+
   apple,dptx-phy:
     $ref: /schemas/types.yaml#/definitions/uint32
     description: DisplayPort transmitter PHY selector.
@@ -276,6 +295,8 @@ properties:
   '#size-cells':
     const: 2
 
+  ranges: true
+
   piodma:
     type: object
     properties:
@@ -372,10 +393,19 @@ allOf:
             pattern: '^(dp-xbar|typec[0-9]+)$'
   - if:
       not:
-        properties:
-          compatible:
-            contains:
-              const: apple,t8132-dcp
+        anyOf:
+          - properties:
+              compatible:
+                contains:
+                  const: apple,t8132-dcp
+          - properties:
+              compatible:
+                contains:
+                  const: apple,t6041-dcpext
+              status:
+                const: disabled
+            required:
+              - status
     then:
       required:
         - apple,bw-scratch

Documentation/devicetree/bindings/dma/apple,sio.yaml

@@ -9,7 +9,9 @@ title: Apple SIO Coprocessor
 description:
   SIO is a coprocessor on Apple M1 and later chips (and maybe also on earlier
   chips). Its role is to offload SPI, UART and DisplayPort audio transfers,
-  being a pretend DMA controller.
+  being a pretend DMA controller. The SoC-specific compatible selects the
+  firmware protocol and channel configuration. In particular, apple,t6030-sio
+  requires protocol-10 boot tables before the coprocessor can be started.
 
 maintainers:
   - Martin Povišer <povik+lin@cutebit.org>
@@ -19,12 +21,15 @@ allOf:
 
 properties:
   compatible:
-    items:
-      - enum:
-          - apple,t6000-sio
-          - apple,t6030-sio
-          - apple,t8103-sio
-      - const: apple,sio
+    oneOf:
+      - items:
+          - enum:
+              - apple,t6000-sio
+              - apple,t6030-sio
+              - apple,t8103-sio
+          - const: apple,sio
+      - description: T6041 firmware requires a generation-specific backend.
+        const: apple,t6041-sio
 
   reg:
     maxItems: 1

Documentation/devicetree/bindings/gpu/apple,agx.yaml

@@ -72,6 +72,22 @@ properties:
       - enum: [hw-cal-b, fw-text, l2-pagetables]
       - enum: [globals, fw-data, fw-text]
 
+  apple,clpc:
+    $ref: /schemas/types.yaml#/definitions/phandle
+    description: |
+      Host performance controller receiving GPU submission and idle demand.
+      GFX supplier power cannot represent GPU work on firmware that keeps
+      its coprocessor domain powered while the cores are idle.
+
+  apple,idle-off-delay-ms:
+    minimum: 2
+    maximum: 1000
+    default: 2
+    description:
+      Continuous idle time before GPU power-off, in milliseconds. The G17
+      backend extends the firmware's native delay with its host idle-hold
+      control; an absent property preserves the native policy.
+
   apple,pmp:
     $ref: /schemas/types.yaml#/definitions/phandle
     description: PMP firmware provider owning the GPU power vote and telemetry
@@ -83,9 +99,9 @@ properties:
     minItems: 3
     maxItems: 3
     description:
-      macOS version (major, minor, patch) whose boot firmware loaded the GPU
-      firmware, which identifies the firmware build. Filled in by the boot
-      loader.
+      Reported macOS version (major, minor, patch) whose boot firmware loaded
+      the GPU firmware. Filled in by the boot loader. This is a selection
+      hint; the T6040 driver requires the exact loaded image identity.
 
   apple,cs-opp:
     $ref: /schemas/types.yaml#/definitions/phandle
@@ -99,6 +115,75 @@ properties:
       Operating-point table of the GPU's AFR clock domain, one voltage cell
       per state.
 
+  apple,t6040-handoff-version:
+    $ref: /schemas/types.yaml#/definitions/uint32
+    const: 2
+    description:
+      Written last by the boot loader after it has filled the T6040 operating
+      points, memory regions and per-chip calibration. Absent in the source DT.
+
+  apple,core-mask:
+    $ref: /schemas/types.yaml#/definitions/uint32
+    description: Enabled cores in the two ten-core T6040 clusters, low cluster first
+
+  apple,max-power-mw:
+    $ref: /schemas/types.yaml#/definitions/uint32
+    description: Per-chip maximum GPU power in milliwatts, calculated by the loader
+
+  apple,perf-base-pstate:
+    $ref: /schemas/types.yaml#/definitions/uint32
+    description:
+      Logical base state of the frequency-relative performance table. T6040
+      supports the first active state, also used when its ADT omits the property.
+
+  apple,perf-map-a:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      All 16 A selector register fields, indexing raw ADT operating points.
+      Eleven populated entries, including off, followed by five zeros.
+
+  apple,perf-map-b:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      All 16 B selector register fields, indexing raw ADT operating points.
+      Eleven populated entries, including off, followed by five zeros.
+
+  apple,perf-relative-a:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      Per-chip relative power of each populated A selector, in percent,
+      followed by zeros for the five unused selectors.
+
+  apple,perf-relative-b:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      Relative frequency of the populated A ladder above the base state,
+      in percent, followed by zeros for the five unused selectors.
+
+  apple,core-leak-coef:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      GPU core leakage, one coefficient per cluster. Per-chip efuse values decoded by the boot loader,
+      stored as IEEE-754 binary32 bit patterns in big-endian cells.
+
+  apple,sram-leak-coef:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      GPU SRAM leakage, one coefficient per cluster. Per-chip efuse values decoded by the boot loader,
+      stored as IEEE-754 binary32 bit patterns in big-endian cells.
+
+  apple,cs-leak-coef:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      CS leakage. Per-chip efuse values decoded by the boot loader,
+      stored as IEEE-754 binary32 bit patterns in big-endian cells.
+
+  apple,afr-leak-coef:
+    $ref: /schemas/types.yaml#/definitions/uint32-array
+    description:
+      AFR leakage. Per-chip efuse values decoded by the boot loader,
+      stored as IEEE-754 binary32 bit patterns in big-endian cells.
+
   apple,firmware-abi:
     $ref: /schemas/types.yaml#/definitions/uint32-array
     minItems: 3
@@ -190,6 +275,38 @@ allOf:
             const: apple,agx-t6040
     then:
       properties:
+        apple,core-mask:
+          minimum: 1
+          maximum: 1048575
+        apple,max-power-mw:
+          minimum: 1
+          maximum: 200000
+        apple,perf-base-pstate:
+          const: 1
+        apple,perf-map-a:
+          minItems: 16
+          maxItems: 16
+        apple,perf-map-b:
+          minItems: 16
+          maxItems: 16
+        apple,perf-relative-a:
+          minItems: 16
+          maxItems: 16
+        apple,perf-relative-b:
+          minItems: 16
+          maxItems: 16
+        apple,core-leak-coef:
+          minItems: 2
+          maxItems: 2
+        apple,sram-leak-coef:
+          minItems: 2
+          maxItems: 2
+        apple,cs-leak-coef:
+          minItems: 1
+          maxItems: 1
+        apple,afr-leak-coef:
+          minItems: 1
+          maxItems: 1
         reg:
           items:
             - description: GFX coprocessor control registers

Documentation/devicetree/bindings/input/apple,mesa-fingerprint.yaml

@@ -57,11 +57,17 @@ properties:
     description: Rail selector words, in power-on order.
 
   firmware-name:
-    maxItems: 1
+    minItems: 1
+    items:
+      - description:
+          Calibration blob for this sensor.
+      - description:
+          Signed root-key container, for sensors whose enclave session needs
+          one.
     description:
-      Calibration blob for this sensor.  It is per-device factory data written
-      at manufacture, so it is neither redistributable nor derivable from the
-      compatible; the board description has to name it.
+      Per-device factory data written at manufacture, so neither
+      redistributable nor derivable from the compatible; the board
+      description has to name it.
 
   spi-cpha: true
 

Documentation/devicetree/bindings/media/apple,t8140-ave.yaml

@@ -4,19 +4,21 @@
 $id: http://devicetree.org/schemas/media/apple,t8140-ave.yaml#
 $schema: http://devicetree.org/meta-schemas/core.yaml#
 
-title: Apple T8140 video encoder
+title: Apple video encoder
 
 maintainers:
   - Miguel Cruz <7362641+Acelogic@users.noreply.github.com>
 
 description: |
-  The T8140 AVE coprocessor encodes video using firmware preloaded by the
+  The T6041 and T8140 AVE coprocessors encode video using firmware preloaded by the
   bootloader. Its two DART instances translate the same stream. The
   bootloader supplies two reserved firmware regions and their IOVA mappings.
 
 properties:
   compatible:
-    const: apple,t8140-ave
+    enum:
+      - apple,t6041-ave
+      - apple,t8140-ave
 
   reg:
     items:

Documentation/devicetree/bindings/net/wireless/brcm,bcm4329-fmac.yaml

@@ -46,6 +46,7 @@ properties:
               - cypress,cyw4373-fmac
               - cypress,cyw43012-fmac
               - infineon,cyw43439-fmac
+              - pci14e4,4434  # BCM4388
           - const: brcm,bcm4329-fmac
       - enum:
           - brcm,bcm4329-fmac