syzbot


ID Workflow Result Correct Bug Created Started Finished Revision Error
7eb27dbb-ca97-4907-8b2a-dcc5a115d58b assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: ❌ RemoteTrigger: ❌ Unprivileged: ❌ UserNamespace: ❌ VMGuestTrigger: ❌ VMHostTrigger: ❌ KASAN: use-after-free Read in ptdump_pte_entry (2) 2026/06/09 20:30 2026/06/09 20:30 2026/06/09 21:32 c36c07f6c1f2230a36374cbd22235f635e8f9284

			
		
Agent: prod-syz-agent-4
External Bug ID: ---

Inputs:
BaseBranch master
BaseCommit RC
BaseRepository git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
BugTitle KASAN: use-after-free Read in ptdump_pte_entry
CrashLogID 4624125240279040
CrashReportID 5626301131522048
KernelCommit ba3e43a9e601636f5edb54e259a74f96ca3b8fd8
KernelConfig
Show (279275 bytes)
#
# Automatically generated file; DO NOT EDIT.
# Linux/x86_64 syzkaller Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="gcc (Debian 14.2.0-19) 14.2.0"
CONFIG_CC_IS_GCC=y
CONFIG_GCC_VERSION=140200
CONFIG_CLANG_VERSION=0
CONFIG_AS_IS_GNU=y
CONFIG_AS_VERSION=24400
CONFIG_LD_IS_BFD=y
CONFIG_LD_VERSION=24400
CONFIG_LLD_VERSION=0
CONFIG_RUSTC_VERSION=109101
CONFIG_RUST_IS_AVAILABLE=y
CONFIG_RUSTC_LLVM_VERSION=210102
CONFIG_RUSTC_LLVM_MAJOR_VERSION=21
CONFIG_CC_CAN_LINK=y
CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
CONFIG_TOOLS_SUPPORT_RELR=y
CONFIG_CC_HAS_ASM_INLINE=y
CONFIG_CC_HAS_ASSUME=y
CONFIG_CC_HAS_NO_PROFILE_FN_ATTR=y
CONFIG_LD_CAN_USE_KEEP_IN_OVERLAY=y
CONFIG_RUSTC_HAS_SPAN_FILE=y
CONFIG_RUSTC_HAS_UNNECESSARY_TRANSMUTES=y
CONFIG_RUSTC_HAS_FILE_WITH_NUL=y
CONFIG_RUSTC_HAS_FILE_AS_C_STR=y
CONFIG_PAHOLE_VERSION=130
CONFIG_CONSTRUCTORS=y
CONFIG_IRQ_WORK=y
CONFIG_BUILDTIME_TABLE_SORT=y
CONFIG_THREAD_INFO_IN_TASK=y

#
# General setup
#
CONFIG_INIT_ENV_ARG_LIMIT=32
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set
CONFIG_LOCALVERSION=""
CONFIG_LOCALVERSION_AUTO=y
CONFIG_BUILD_SALT=""
CONFIG_HAVE_KERNEL_GZIP=y
CONFIG_HAVE_KERNEL_BZIP2=y
CONFIG_HAVE_KERNEL_LZMA=y
CONFIG_HAVE_KERNEL_XZ=y
CONFIG_HAVE_KERNEL_LZO=y
CONFIG_HAVE_KERNEL_LZ4=y
CONFIG_HAVE_KERNEL_ZSTD=y
CONFIG_KERNEL_GZIP=y
# CONFIG_KERNEL_BZIP2 is not set
# CONFIG_KERNEL_LZMA is not set
# CONFIG_KERNEL_XZ is not set
# CONFIG_KERNEL_LZO is not set
# CONFIG_KERNEL_LZ4 is not set
# CONFIG_KERNEL_ZSTD is not set
CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="(none)"
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
CONFIG_SYSVIPC_COMPAT=y
CONFIG_POSIX_MQUEUE=y
CONFIG_POSIX_MQUEUE_SYSCTL=y
CONFIG_WATCH_QUEUE=y
CONFIG_CROSS_MEMORY_ATTACH=y
CONFIG_AUDIT=y
CONFIG_HAVE_ARCH_AUDITSYSCALL=y
CONFIG_AUDITSYSCALL=y

#
# IRQ subsystem
#
CONFIG_GENERIC_IRQ_PROBE=y
CONFIG_GENERIC_IRQ_SHOW=y
CONFIG_GENERIC_IRQ_EFFECTIVE_AFF_MASK=y
CONFIG_GENERIC_PENDING_IRQ=y
CONFIG_GENERIC_IRQ_MIGRATION=y
CONFIG_HARDIRQS_SW_RESEND=y
CONFIG_IRQ_DOMAIN=y
CONFIG_IRQ_DOMAIN_HIERARCHY=y
CONFIG_GENERIC_MSI_IRQ=y
CONFIG_GENERIC_IRQ_MATRIX_ALLOCATOR=y
CONFIG_GENERIC_IRQ_RESERVATION_MODE=y
CONFIG_IRQ_FORCED_THREADING=y
CONFIG_SPARSE_IRQ=y
# CONFIG_GENERIC_IRQ_DEBUGFS is not set
# end of IRQ subsystem

CONFIG_CLOCKSOURCE_WATCHDOG=y
CONFIG_ARCH_CLOCKSOURCE_INIT=y
CONFIG_ARCH_WANTS_CLOCKSOURCE_READ_INLINE=y
CONFIG_GENERIC_TIME_VSYSCALL=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST_IDLE=y
CONFIG_GENERIC_CLOCKEVENTS_MIN_ADJUST=y
CONFIG_GENERIC_CLOCKEVENTS_COUPLED=y
CONFIG_GENERIC_CLOCKEVENTS_COUPLED_INLINE=y
CONFIG_GENERIC_CMOS_UPDATE=y
CONFIG_HRTIMER_REARM_DEFERRED=y
CONFIG_HAVE_POSIX_CPU_TIMERS_TASK_WORK=y
CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y
CONFIG_CONTEXT_TRACKING=y
CONFIG_CONTEXT_TRACKING_IDLE=y

#
# Timers subsystem
#
CONFIG_TICK_ONESHOT=y
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set
CONFIG_CONTEXT_TRACKING_USER=y
# CONFIG_CONTEXT_TRACKING_USER_FORCE is not set
CONFIG_NO_HZ=y
CONFIG_HIGH_RES_TIMERS=y
CONFIG_POSIX_AUX_CLOCKS=y
# end of Timers subsystem

CONFIG_BPF=y
CONFIG_HAVE_EBPF_JIT=y
CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y

#
# BPF subsystem
#
CONFIG_BPF_SYSCALL=y
CONFIG_BPF_JIT=y
CONFIG_BPF_JIT_ALWAYS_ON=y
CONFIG_BPF_JIT_DEFAULT_ON=y
# CONFIG_BPF_UNPRIV_DEFAULT_OFF is not set
CONFIG_BPF_PRELOAD=y
CONFIG_BPF_PRELOAD_UMD=y
CONFIG_BPF_LSM=y
# end of BPF subsystem

CONFIG_PREEMPT_BUILD=y
CONFIG_ARCH_HAS_PREEMPT_LAZY=y
CONFIG_PREEMPT=y
# CONFIG_PREEMPT_LAZY is not set
# CONFIG_PREEMPT_RT is not set
CONFIG_PREEMPT_COUNT=y
CONFIG_PREEMPTION=y
CONFIG_PREEMPT_DYNAMIC=y
CONFIG_SCHED_CORE=y

#
# CPU/Task time and stats accounting
#
CONFIG_VIRT_CPU_ACCOUNTING=y
# CONFIG_TICK_CPU_ACCOUNTING is not set
CONFIG_VIRT_CPU_ACCOUNTING_GEN=y
CONFIG_IRQ_TIME_ACCOUNTING=y
CONFIG_HAVE_SCHED_AVG_IRQ=y
CONFIG_BSD_PROCESS_ACCT=y
CONFIG_BSD_PROCESS_ACCT_V3=y
CONFIG_TASKSTATS=y
CONFIG_TASK_DELAY_ACCT=y
CONFIG_TASK_XACCT=y
CONFIG_TASK_IO_ACCOUNTING=y
CONFIG_PSI=y
# CONFIG_PSI_DEFAULT_DISABLED is not set
# end of CPU/Task time and stats accounting

CONFIG_CPU_ISOLATION=y

#
# RCU Subsystem
#
CONFIG_TREE_RCU=y
CONFIG_PREEMPT_RCU=y
# CONFIG_RCU_EXPERT is not set
CONFIG_TREE_SRCU=y
CONFIG_TASKS_RCU_GENERIC=y
CONFIG_NEED_TASKS_RCU=y
CONFIG_TASKS_RCU=y
CONFIG_TASKS_TRACE_RCU=y
CONFIG_RCU_STALL_COMMON=y
CONFIG_RCU_NEED_SEGCBLIST=y
# end of RCU Subsystem

CONFIG_IKCONFIG=y
CONFIG_IKCONFIG_PROC=y
# CONFIG_IKHEADERS is not set
CONFIG_LOG_BUF_SHIFT=18
CONFIG_LOG_CPU_MAX_BUF_SHIFT=12
# CONFIG_PRINTK_INDEX is not set
CONFIG_HAVE_UNSTABLE_SCHED_CLOCK=y

#
# Scheduler features
#
# CONFIG_UCLAMP_TASK is not set
# CONFIG_SCHED_PROXY_EXEC is not set
# end of Scheduler features

CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y
CONFIG_ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH=y
CONFIG_CC_HAS_INT128=y
CONFIG_CC_IMPLICIT_FALLTHROUGH="-Wimplicit-fallthrough=5"
CONFIG_CC_MS_EXTENSIONS="-fms-extensions"
CONFIG_GCC10_NO_ARRAY_BOUNDS=y
CONFIG_CC_NO_ARRAY_BOUNDS=y
CONFIG_GCC_NO_STRINGOP_OVERFLOW=y
CONFIG_CC_NO_STRINGOP_OVERFLOW=y
CONFIG_ARCH_SUPPORTS_INT128=y
CONFIG_NUMA_BALANCING=y
CONFIG_NUMA_BALANCING_DEFAULT_ENABLED=y
CONFIG_SLAB_OBJ_EXT=y
CONFIG_CGROUPS=y
CONFIG_PAGE_COUNTER=y
# CONFIG_CGROUP_FAVOR_DYNMODS is not set
CONFIG_MEMCG=y
CONFIG_MEMCG_V1=y
CONFIG_BLK_CGROUP=y
CONFIG_CGROUP_WRITEBACK=y
CONFIG_CGROUP_SCHED=y
CONFIG_GROUP_SCHED_WEIGHT=y
CONFIG_GROUP_SCHED_BANDWIDTH=y
CONFIG_FAIR_GROUP_SCHED=y
CONFIG_CFS_BANDWIDTH=y
# CONFIG_RT_GROUP_SCHED is not set
CONFIG_SCHED_MM_CID=y
CONFIG_CGROUP_PIDS=y
CONFIG_CGROUP_RDMA=y
# CONFIG_CGROUP_DMEM is not set
CONFIG_CGROUP_FREEZER=y
CONFIG_CGROUP_HUGETLB=y
CONFIG_CPUSETS=y
# CONFIG_CPUSETS_V1 is not set
CONFIG_CGROUP_DEVICE=y
CONFIG_CGROUP_CPUACCT=y
CONFIG_CGROUP_PERF=y
# CONFIG_CGROUP_BPF is not set
CONFIG_CGROUP_MISC=y
CONFIG_CGROUP_DEBUG=y
CONFIG_SOCK_CGROUP_DATA=y
CONFIG_NAMESPACES=y
CONFIG_UTS_NS=y
CONFIG_TIME_NS=y
CONFIG_TIME_NS_VDSO=y
CONFIG_IPC_NS=y
CONFIG_USER_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y
CONFIG_CHECKPOINT_RESTORE=y
# CONFIG_SCHED_AUTOGROUP is not set
CONFIG_RELAY=y
CONFIG_BLK_DEV_INITRD=y
CONFIG_INITRAMFS_SOURCE=""
CONFIG_RD_GZIP=y
CONFIG_RD_BZIP2=y
CONFIG_RD_LZMA=y
CONFIG_RD_XZ=y
CONFIG_RD_LZO=y
CONFIG_RD_LZ4=y
CONFIG_RD_ZSTD=y
# CONFIG_BOOT_CONFIG is not set
CONFIG_CMDLINE_LOG_WRAP_IDEAL_LEN=1021
CONFIG_INITRAMFS_PRESERVE_MTIME=y
CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE=y
# CONFIG_CC_OPTIMIZE_FOR_SIZE is not set
CONFIG_LD_ORPHAN_WARN=y
CONFIG_LD_ORPHAN_WARN_LEVEL="warn"
CONFIG_SYSCTL=y
CONFIG_HAVE_UID16=y
CONFIG_SYSCTL_EXCEPTION_TRACE=y
CONFIG_SYSFS_SYSCALL=y
CONFIG_HAVE_PCSPKR_PLATFORM=y
CONFIG_EXPERT=y
CONFIG_UID16=y
CONFIG_MULTIUSER=y
CONFIG_SGETMASK_SYSCALL=y
CONFIG_FHANDLE=y
CONFIG_POSIX_TIMERS=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
CONFIG_PCSPKR_PLATFORM=y
# CONFIG_BASE_SMALL is not set
CONFIG_FUTEX=y
CONFIG_FUTEX_PI=y
CONFIG_FUTEX_PRIVATE_HASH=y
CONFIG_FUTEX_MPOL=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_TIMERFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_AIO=y
CONFIG_IO_URING=y
CONFIG_IO_URING_MOCK_FILE=y
CONFIG_ADVISE_SYSCALLS=y
CONFIG_MEMBARRIER=y
CONFIG_KCMP=y
CONFIG_RSEQ=y
CONFIG_RSEQ_SLICE_EXTENSION=y
# CONFIG_RSEQ_STATS is not set
# CONFIG_RSEQ_DEBUG_DEFAULT_ENABLE is not set
CONFIG_CACHESTAT_SYSCALL=y
CONFIG_KALLSYMS=y
# CONFIG_KALLSYMS_SELFTEST is not set
CONFIG_KALLSYMS_ALL=y
CONFIG_ARCH_HAS_MEMBARRIER_SYNC_CORE=y
CONFIG_ARCH_SUPPORTS_MSEAL_SYSTEM_MAPPINGS=y
CONFIG_HAVE_PERF_EVENTS=y
CONFIG_GUEST_PERF_EVENTS=y
CONFIG_PERF_GUEST_MEDIATED_PMU=y

#
# Kernel Performance Events And Counters
#
CONFIG_PERF_EVENTS=y
# CONFIG_DEBUG_PERF_USE_VMALLOC is not set
# end of Kernel Performance Events And Counters

CONFIG_SYSTEM_DATA_VERIFICATION=y
CONFIG_PROFILING=y
# CONFIG_RUST is not set
CONFIG_TRACEPOINTS=y

#
# Kexec and crash features
#
CONFIG_CRASH_RESERVE=y
CONFIG_VMCORE_INFO=y
CONFIG_KEXEC_CORE=y
CONFIG_KEXEC=y
# CONFIG_KEXEC_FILE is not set
# CONFIG_KEXEC_JUMP is not set
CONFIG_CRASH_DUMP=y
CONFIG_CRASH_HOTPLUG=y
CONFIG_CRASH_MAX_MEMORY_RANGES=8192
# end of Kexec and crash features

#
# Live Update and Kexec HandOver
#
# CONFIG_KEXEC_HANDOVER is not set
# end of Live Update and Kexec HandOver
# end of General setup

CONFIG_64BIT=y
CONFIG_X86_64=y
CONFIG_X86=y
CONFIG_INSTRUCTION_DECODER=y
CONFIG_OUTPUT_FORMAT="elf64-x86-64"
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_MMU=y
CONFIG_ARCH_MMAP_RND_BITS_MIN=28
CONFIG_ARCH_MMAP_RND_BITS_MAX=32
CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MIN=8
CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MAX=16
CONFIG_GENERIC_ISA_DMA=y
CONFIG_GENERIC_CSUM=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y
CONFIG_ARCH_MAY_HAVE_PC_FDC=y
CONFIG_GENERIC_CALIBRATE_DELAY=y
CONFIG_ARCH_HAS_CPU_RELAX=y
CONFIG_ARCH_HIBERNATION_POSSIBLE=y
CONFIG_ARCH_SUSPEND_POSSIBLE=y
CONFIG_AUDIT_ARCH=y
CONFIG_KASAN_SHADOW_OFFSET=0xdffffc0000000000
CONFIG_HAVE_INTEL_TXT=y
CONFIG_ARCH_SUPPORTS_UPROBES=y
CONFIG_FIX_EARLYCON_MEM=y
CONFIG_PGTABLE_LEVELS=5

#
# Processor type and features
#
CONFIG_SMP=y
CONFIG_X86_X2APIC=y
# CONFIG_X86_POSTED_MSI is not set
CONFIG_X86_MPPARSE=y
# CONFIG_X86_CPU_RESCTRL is not set
CONFIG_X86_FRED=y
CONFIG_X86_EXTENDED_PLATFORM=y
# CONFIG_X86_NUMACHIP is not set
# CONFIG_X86_VSMP is not set
# CONFIG_X86_INTEL_MID is not set
# CONFIG_X86_GOLDFISH is not set
# CONFIG_X86_INTEL_LPSS is not set
# CONFIG_X86_AMD_PLATFORM_DEVICE is not set
CONFIG_IOSF_MBI=y
# CONFIG_IOSF_MBI_DEBUG is not set
CONFIG_X86_SUPPORTS_MEMORY_FAILURE=y
CONFIG_SCHED_OMIT_FRAME_POINTER=y
CONFIG_HYPERVISOR_GUEST=y
CONFIG_PARAVIRT=y
CONFIG_PARAVIRT_SPINLOCKS=y
CONFIG_X86_HV_CALLBACK_VECTOR=y
# CONFIG_XEN is not set
CONFIG_KVM_GUEST=y
CONFIG_ARCH_CPUIDLE_HALTPOLL=y
CONFIG_PVH=y
# CONFIG_PARAVIRT_TIME_ACCOUNTING is not set
CONFIG_PARAVIRT_CLOCK=y
# CONFIG_JAILHOUSE_GUEST is not set
# CONFIG_ACRN_GUEST is not set
# CONFIG_BHYVE_GUEST is not set
CONFIG_CC_HAS_MARCH_NATIVE=y
# CONFIG_X86_NATIVE_CPU is not set
CONFIG_X86_INTERNODE_CACHE_SHIFT=6
CONFIG_X86_L1_CACHE_SHIFT=6
CONFIG_X86_TSC=y
CONFIG_X86_HAVE_PAE=y
CONFIG_X86_CX8=y
CONFIG_X86_CMOV=y
CONFIG_X86_MINIMUM_CPU_FAMILY=64
CONFIG_X86_DEBUGCTLMSR=y
CONFIG_IA32_FEAT_CTL=y
CONFIG_X86_VMX_FEATURE_NAMES=y
CONFIG_PROCESSOR_SELECT=y
CONFIG_BROADCAST_TLB_FLUSH=y
CONFIG_CPU_SUP_INTEL=y
CONFIG_CPU_SUP_AMD=y
# CONFIG_CPU_SUP_HYGON is not set
# CONFIG_CPU_SUP_CENTAUR is not set
# CONFIG_CPU_SUP_ZHAOXIN is not set
CONFIG_HPET_TIMER=y
CONFIG_HPET_EMULATE_RTC=y
CONFIG_DMI=y
# CONFIG_GART_IOMMU is not set
CONFIG_BOOT_VESA_SUPPORT=y
# CONFIG_MAXSMP is not set
CONFIG_NR_CPUS_RANGE_BEGIN=2
CONFIG_NR_CPUS_RANGE_END=512
CONFIG_NR_CPUS_DEFAULT=64
CONFIG_NR_CPUS=8
CONFIG_SCHED_MC_PRIO=y
CONFIG_X86_LOCAL_APIC=y
CONFIG_ACPI_MADT_WAKEUP=y
CONFIG_X86_IO_APIC=y
CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y
CONFIG_X86_MCE=y
# CONFIG_X86_MCELOG_LEGACY is not set
CONFIG_X86_MCE_INTEL=y
CONFIG_X86_MCE_AMD=y
CONFIG_X86_MCE_THRESHOLD=y
# CONFIG_X86_MCE_INJECT is not set

#
# Performance monitoring
#
CONFIG_PERF_EVENTS_INTEL_UNCORE=y
CONFIG_PERF_EVENTS_INTEL_RAPL=y
CONFIG_PERF_EVENTS_INTEL_CSTATE=y
# CONFIG_PERF_EVENTS_AMD_POWER is not set
CONFIG_PERF_EVENTS_AMD_UNCORE=y
# CONFIG_PERF_EVENTS_AMD_BRS is not set
# end of Performance monitoring

CONFIG_X86_16BIT=y
CONFIG_X86_ESPFIX64=y
CONFIG_X86_VSYSCALL_EMULATION=y
CONFIG_X86_IOPL_IOPERM=y
CONFIG_MICROCODE=y
# CONFIG_MICROCODE_LATE_LOADING is not set
# CONFIG_MICROCODE_DBG is not set
CONFIG_X86_MSR=y
CONFIG_X86_CPUID=y
CONFIG_X86_DIRECT_GBPAGES=y
# CONFIG_X86_CPA_STATISTICS is not set
CONFIG_NUMA=y
CONFIG_AMD_NUMA=y
CONFIG_X86_64_ACPI_NUMA=y
CONFIG_NODES_SHIFT=6
CONFIG_ARCH_SPARSEMEM_ENABLE=y
CONFIG_ARCH_SPARSEMEM_DEFAULT=y
# CONFIG_ARCH_MEMORY_PROBE is not set
CONFIG_ARCH_PROC_KCORE_TEXT=y
CONFIG_ILLEGAL_POINTER_VALUE=0xdead000000000000
# CONFIG_X86_PMEM_LEGACY is not set
# CONFIG_X86_CHECK_BIOS_CORRUPTION is not set
CONFIG_MTRR=y
# CONFIG_MTRR_SANITIZER is not set
CONFIG_X86_PAT=y
CONFIG_X86_UMIP=y
CONFIG_CC_HAS_IBT=y
CONFIG_X86_CET=y
CONFIG_X86_KERNEL_IBT=y
CONFIG_X86_INTEL_MEMORY_PROTECTION_KEYS=y
CONFIG_ARCH_PKEY_BITS=4
# CONFIG_X86_INTEL_TSX_MODE_OFF is not set
CONFIG_X86_INTEL_TSX_MODE_ON=y
# CONFIG_X86_INTEL_TSX_MODE_AUTO is not set
CONFIG_X86_SGX=y
CONFIG_X86_USER_SHADOW_STACK=y
# CONFIG_INTEL_TDX_HOST is not set
# CONFIG_EFI is not set
CONFIG_HZ_100=y
# CONFIG_HZ_250 is not set
# CONFIG_HZ_300 is not set
# CONFIG_HZ_1000 is not set
CONFIG_HZ=100
CONFIG_SCHED_HRTICK=y
CONFIG_ARCH_SUPPORTS_KEXEC=y
CONFIG_ARCH_SUPPORTS_KEXEC_FILE=y
CONFIG_ARCH_SUPPORTS_KEXEC_PURGATORY=y
CONFIG_ARCH_SUPPORTS_KEXEC_SIG=y
CONFIG_ARCH_SUPPORTS_KEXEC_SIG_FORCE=y
CONFIG_ARCH_SUPPORTS_KEXEC_BZIMAGE_VERIFY_SIG=y
CONFIG_ARCH_SUPPORTS_KEXEC_JUMP=y
CONFIG_ARCH_SUPPORTS_KEXEC_HANDOVER=y
CONFIG_ARCH_SUPPORTS_CRASH_DUMP=y
CONFIG_ARCH_DEFAULT_CRASH_DUMP=y
CONFIG_ARCH_SUPPORTS_CRASH_HOTPLUG=y
CONFIG_ARCH_HAS_GENERIC_CRASHKERNEL_RESERVATION=y
CONFIG_PHYSICAL_START=0x1000000
# CONFIG_RELOCATABLE is not set
CONFIG_PHYSICAL_ALIGN=0x200000
CONFIG_HOTPLUG_CPU=y
# CONFIG_COMPAT_VDSO is not set
CONFIG_LEGACY_VSYSCALL_XONLY=y
# CONFIG_LEGACY_VSYSCALL_NONE is not set
CONFIG_CMDLINE_BOOL=y
CONFIG_CMDLINE="earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 rcupdate.rcu_cpu_stall_cputime=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 sysctl.max_rcu_stall_to_panic=1 msr.allow_writes=off coredump_filter=0xffff root=/dev/sda console=ttyS0 vsyscall=native numa=fake=2 kvm-intel.nested=1 spec_store_bypass_disable=prctl nopcid vivid.n_devs=64 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=32 rose.rose_ndevs=32 smp.csd_lock_timeout=100000 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 dummy_hcd.num=32 max_loop=32 nbds_max=32 comedi.comedi_num_legacy_minors=4 panic_on_warn=1"
# CONFIG_CMDLINE_OVERRIDE is not set
CONFIG_MODIFY_LDT_SYSCALL=y
# CONFIG_STRICT_SIGALTSTACK_SIZE is not set
CONFIG_HAVE_LIVEPATCH=y
CONFIG_HAVE_KLP_BUILD=y
CONFIG_X86_BUS_LOCK_DETECT=y
# end of Processor type and features

CONFIG_CC_HAS_NAMED_AS=y
CONFIG_CC_HAS_NAMED_AS_FIXED_SANITIZERS=y
CONFIG_USE_X86_SEG_SUPPORT=y
CONFIG_CC_HAS_SLS=y
CONFIG_CC_HAS_RETURN_THUNK=y
CONFIG_CC_HAS_ENTRY_PADDING=y
CONFIG_FUNCTION_PADDING_CFI=11
CONFIG_FUNCTION_PADDING_BYTES=16
CONFIG_CALL_PADDING=y
CONFIG_HAVE_CALL_THUNKS=y
CONFIG_CALL_THUNKS=y
CONFIG_PREFIX_SYMBOLS=y
CONFIG_CPU_MITIGATIONS=y
CONFIG_MITIGATION_PAGE_TABLE_ISOLATION=y
CONFIG_MITIGATION_RETPOLINE=y
CONFIG_MITIGATION_RETHUNK=y
CONFIG_MITIGATION_UNRET_ENTRY=y
CONFIG_MITIGATION_CALL_DEPTH_TRACKING=y
# CONFIG_CALL_THUNKS_DEBUG is not set
CONFIG_MITIGATION_IBPB_ENTRY=y
CONFIG_MITIGATION_IBRS_ENTRY=y
CONFIG_MITIGATION_SRSO=y
# CONFIG_MITIGATION_SLS is not set
CONFIG_MITIGATION_GDS=y
CONFIG_MITIGATION_RFDS=y
CONFIG_MITIGATION_SPECTRE_BHI=y
CONFIG_MITIGATION_MDS=y
CONFIG_MITIGATION_TAA=y
CONFIG_MITIGATION_MMIO_STALE_DATA=y
CONFIG_MITIGATION_L1TF=y
CONFIG_MITIGATION_RETBLEED=y
CONFIG_MITIGATION_SPECTRE_V1=y
CONFIG_MITIGATION_SPECTRE_V2=y
CONFIG_MITIGATION_SRBDS=y
CONFIG_MITIGATION_SSB=y
CONFIG_MITIGATION_ITS=y
CONFIG_MITIGATION_TSA=y
# CONFIG_MITIGATION_VMSCAPE is not set
CONFIG_ARCH_HAS_ADD_PAGES=y

#
# Power management and ACPI options
#
CONFIG_ARCH_HIBERNATION_HEADER=y
CONFIG_SUSPEND=y
CONFIG_SUSPEND_FREEZER=y
# CONFIG_SUSPEND_SKIP_SYNC is not set
CONFIG_HIBERNATE_CALLBACKS=y
CONFIG_HIBERNATION=y
CONFIG_HIBERNATION_SNAPSHOT_DEV=y
CONFIG_HIBERNATION_COMP_LZO=y
# CONFIG_HIBERNATION_COMP_LZ4 is not set
CONFIG_HIBERNATION_DEF_COMP="lzo"
CONFIG_PM_STD_PARTITION=""
CONFIG_PM_SLEEP=y
CONFIG_PM_SLEEP_SMP=y
# CONFIG_PM_AUTOSLEEP is not set
# CONFIG_PM_USERSPACE_AUTOSLEEP is not set
# CONFIG_PM_WAKELOCKS is not set
# CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP is not set
CONFIG_PM=y
CONFIG_PM_DEBUG=y
# CONFIG_PM_ADVANCED_DEBUG is not set
# CONFIG_PM_TEST_SUSPEND is not set
CONFIG_PM_SLEEP_DEBUG=y
# CONFIG_DPM_WATCHDOG is not set
CONFIG_PM_TRACE=y
CONFIG_PM_TRACE_RTC=y
CONFIG_PM_CLK=y
# CONFIG_WQ_POWER_EFFICIENT_DEFAULT is not set
# CONFIG_ENERGY_MODEL is not set
CONFIG_ARCH_SUPPORTS_ACPI=y
CONFIG_ACPI=y
CONFIG_ACPI_LEGACY_TABLES_LOOKUP=y
CONFIG_ARCH_MIGHT_HAVE_ACPI_PDC=y
CONFIG_ACPI_SYSTEM_POWER_STATES_SUPPORT=y
CONFIG_ACPI_THERMAL_LIB=y
# CONFIG_ACPI_DEBUGGER is not set
CONFIG_ACPI_SPCR_TABLE=y
# CONFIG_ACPI_FPDT is not set
CONFIG_ACPI_LPIT=y
CONFIG_ACPI_SLEEP=y
CONFIG_ACPI_REV_OVERRIDE_POSSIBLE=y
CONFIG_ACPI_EC=y
# CONFIG_ACPI_EC_DEBUGFS is not set
CONFIG_ACPI_AC=y
CONFIG_ACPI_BATTERY=y
CONFIG_ACPI_BUTTON=y
CONFIG_ACPI_VIDEO=y
CONFIG_ACPI_FAN=y
# CONFIG_ACPI_TAD is not set
CONFIG_ACPI_DOCK=y
CONFIG_ACPI_CPU_FREQ_PSS=y
CONFIG_ACPI_PROCESSOR_CSTATE=y
CONFIG_ACPI_PROCESSOR_IDLE=y
CONFIG_ACPI_CPPC_LIB=y
CONFIG_ACPI_PROCESSOR=y
CONFIG_ACPI_HOTPLUG_CPU=y
# CONFIG_ACPI_PROCESSOR_AGGREGATOR is not set
CONFIG_ACPI_THERMAL=y
CONFIG_ACPI_PLATFORM_PROFILE=y
CONFIG_ARCH_HAS_ACPI_TABLE_UPGRADE=y
CONFIG_ACPI_TABLE_UPGRADE=y
CONFIG_ACPI_DEBUG=y
# CONFIG_ACPI_PCI_SLOT is not set
CONFIG_ACPI_CONTAINER=y
# CONFIG_ACPI_HOTPLUG_MEMORY is not set
CONFIG_ACPI_HOTPLUG_IOAPIC=y
# CONFIG_ACPI_SBS is not set
# CONFIG_ACPI_HED is not set
# CONFIG_ACPI_REDUCED_HARDWARE_ONLY is not set
CONFIG_ACPI_NHLT=y
CONFIG_ACPI_NFIT=y
# CONFIG_NFIT_SECURITY_DEBUG is not set
CONFIG_ACPI_NUMA=y
# CONFIG_ACPI_HMAT is not set
CONFIG_HAVE_ACPI_APEI=y
CONFIG_HAVE_ACPI_APEI_NMI=y
# CONFIG_ACPI_APEI is not set
# CONFIG_ACPI_DPTF is not set
# CONFIG_ACPI_EXTLOG is not set
# CONFIG_ACPI_CONFIGFS is not set
# CONFIG_ACPI_PFRUT is not set
CONFIG_ACPI_PCC=y
# CONFIG_ACPI_FFH is not set
CONFIG_ACPI_MRRM=y
CONFIG_PMIC_OPREGION=y
CONFIG_BXT_WC_PMIC_OPREGION=y
# CONFIG_CHT_WC_PMIC_OPREGION is not set
CONFIG_X86_PM_TIMER=y

#
# CPU Frequency scaling
#
CONFIG_CPU_FREQ=y
CONFIG_CPU_FREQ_GOV_ATTR_SET=y
CONFIG_CPU_FREQ_GOV_COMMON=y
# CONFIG_CPU_FREQ_STAT is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE=y
# CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL is not set
CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
# CONFIG_CPU_FREQ_GOV_POWERSAVE is not set
CONFIG_CPU_FREQ_GOV_USERSPACE=y
CONFIG_CPU_FREQ_GOV_ONDEMAND=y
# CONFIG_CPU_FREQ_GOV_CONSERVATIVE is not set
CONFIG_CPU_FREQ_GOV_SCHEDUTIL=y

#
# CPU frequency scaling drivers
#
# CONFIG_CPUFREQ_DT is not set
# CONFIG_CPUFREQ_DT_PLATDEV is not set
CONFIG_X86_INTEL_PSTATE=y
# CONFIG_X86_PCC_CPUFREQ is not set
CONFIG_X86_AMD_PSTATE=y
CONFIG_X86_AMD_PSTATE_DEFAULT_MODE=3
# CONFIG_X86_AMD_PSTATE_UT is not set
CONFIG_X86_ACPI_CPUFREQ=y
CONFIG_X86_ACPI_CPUFREQ_CPB=y
# CONFIG_X86_POWERNOW_K8 is not set
# CONFIG_X86_AMD_FREQ_SENSITIVITY is not set
# CONFIG_X86_SPEEDSTEP_CENTRINO is not set
# CONFIG_X86_P4_CLOCKMOD is not set

#
# shared options
#
CONFIG_CPUFREQ_ARCH_CUR_FREQ=y
# end of CPU Frequency scaling

#
# CPU Idle
#
CONFIG_CPU_IDLE=y
# CONFIG_CPU_IDLE_GOV_LADDER is not set
CONFIG_CPU_IDLE_GOV_MENU=y
# CONFIG_CPU_IDLE_GOV_TEO is not set
CONFIG_CPU_IDLE_GOV_HALTPOLL=y
CONFIG_HALTPOLL_CPUIDLE=y
# end of CPU Idle

CONFIG_INTEL_IDLE=y
# end of Power management and ACPI options

#
# Bus options (PCI etc.)
#
CONFIG_PCI_DIRECT=y
CONFIG_PCI_MMCONFIG=y
CONFIG_MMCONF_FAM10H=y
CONFIG_ISA_BUS=y
CONFIG_ISA_DMA_API=y
CONFIG_AMD_NB=y
CONFIG_AMD_NODE=y
# end of Bus options (PCI etc.)

#
# Binary Emulations
#
CONFIG_IA32_EMULATION=y
# CONFIG_IA32_EMULATION_DEFAULT_DISABLED is not set
# CONFIG_X86_X32_ABI is not set
CONFIG_COMPAT_32=y
CONFIG_COMPAT=y
CONFIG_COMPAT_FOR_U64_ALIGNMENT=y
# end of Binary Emulations

CONFIG_KVM_COMMON=y
CONFIG_HAVE_KVM_PFNCACHE=y
CONFIG_HAVE_KVM_IRQCHIP=y
CONFIG_HAVE_KVM_IRQ_ROUTING=y
CONFIG_HAVE_KVM_DIRTY_RING=y
CONFIG_HAVE_KVM_DIRTY_RING_TSO=y
CONFIG_HAVE_KVM_DIRTY_RING_ACQ_REL=y
CONFIG_KVM_MMIO=y
CONFIG_KVM_ASYNC_PF=y
CONFIG_HAVE_KVM_MSI=y
CONFIG_HAVE_KVM_READONLY_MEM=y
CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT=y
CONFIG_KVM_VFIO=y
CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT=y
CONFIG_KVM_GENERIC_PRE_FAULT_MEMORY=y
CONFIG_KVM_COMPAT=y
CONFIG_HAVE_KVM_IRQ_BYPASS=y
CONFIG_HAVE_KVM_NO_POLL=y
CONFIG_VIRT_XFER_TO_GUEST_WORK=y
CONFIG_HAVE_KVM_PM_NOTIFIER=y
CONFIG_KVM_GENERIC_HARDWARE_ENABLING=y
CONFIG_KVM_ELIDE_TLB_FLUSH_IF_YOUNG=y
CONFIG_KVM_MMU_LOCKLESS_AGING=y
CONFIG_KVM_GENERIC_MEMORY_ATTRIBUTES=y
CONFIG_KVM_GUEST_MEMFD=y
CONFIG_VIRTUALIZATION=y
CONFIG_KVM_X86=y
CONFIG_KVM=y
CONFIG_KVM_SW_PROTECTED_VM=y
CONFIG_KVM_INTEL=y
# CONFIG_KVM_INTEL_PROVE_VE is not set
CONFIG_X86_SGX_KVM=y
CONFIG_KVM_AMD=y
CONFIG_KVM_IOAPIC=y
# CONFIG_KVM_SMM is not set
CONFIG_KVM_HYPERV=y
CONFIG_KVM_XEN=y
CONFIG_KVM_PROVE_MMU=y
CONFIG_KVM_MAX_NR_VCPUS=1024
CONFIG_X86_REQUIRED_FEATURE_ALWAYS=y
CONFIG_X86_REQUIRED_FEATURE_NOPL=y
CONFIG_X86_REQUIRED_FEATURE_CX8=y
CONFIG_X86_REQUIRED_FEATURE_CMOV=y
CONFIG_X86_REQUIRED_FEATURE_CPUID=y
CONFIG_X86_REQUIRED_FEATURE_FPU=y
CONFIG_X86_REQUIRED_FEATURE_PAE=y
CONFIG_X86_REQUIRED_FEATURE_PSE=y
CONFIG_X86_REQUIRED_FEATURE_PGE=y
CONFIG_X86_REQUIRED_FEATURE_MSR=y
CONFIG_X86_REQUIRED_FEATURE_FXSR=y
CONFIG_X86_REQUIRED_FEATURE_XMM=y
CONFIG_X86_REQUIRED_FEATURE_XMM2=y
CONFIG_X86_REQUIRED_FEATURE_LM=y
CONFIG_X86_DISABLED_FEATURE_VME=y
CONFIG_X86_DISABLED_FEATURE_K6_MTRR=y
CONFIG_X86_DISABLED_FEATURE_CYRIX_ARR=y
CONFIG_X86_DISABLED_FEATURE_CENTAUR_MCR=y
CONFIG_X86_DISABLED_FEATURE_LAM=y
CONFIG_X86_DISABLED_FEATURE_XENPV=y
CONFIG_X86_DISABLED_FEATURE_TDX_GUEST=y
CONFIG_X86_DISABLED_FEATURE_SEV_SNP=y
CONFIG_AS_WRUSS=y
CONFIG_ARCH_CONFIGURES_CPU_MITIGATIONS=y

#
# General architecture-dependent options
#
CONFIG_HOTPLUG_SMT=y
CONFIG_ARCH_SUPPORTS_SCHED_SMT=y
CONFIG_ARCH_SUPPORTS_SCHED_CLUSTER=y
CONFIG_ARCH_SUPPORTS_SCHED_MC=y
CONFIG_SCHED_SMT=y
CONFIG_SCHED_CLUSTER=y
CONFIG_SCHED_MC=y
CONFIG_HOTPLUG_CORE_SYNC=y
CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
CONFIG_HOTPLUG_CORE_SYNC_FULL=y
CONFIG_HOTPLUG_SPLIT_STARTUP=y
CONFIG_HOTPLUG_PARALLEL=y
CONFIG_GENERIC_IRQ_ENTRY=y
CONFIG_GENERIC_SYSCALL=y
CONFIG_GENERIC_ENTRY=y
# CONFIG_KPROBES is not set
CONFIG_JUMP_LABEL=y
# CONFIG_STATIC_KEYS_SELFTEST is not set
# CONFIG_STATIC_CALL_SELFTEST is not set
CONFIG_UPROBES=y
CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y
CONFIG_ARCH_USE_BUILTIN_BSWAP=y
CONFIG_USER_RETURN_NOTIFIER=y
CONFIG_HAVE_IOREMAP_PROT=y
CONFIG_HAVE_KPROBES=y
CONFIG_HAVE_KRETPROBES=y
CONFIG_HAVE_OPTPROBES=y
CONFIG_HAVE_KPROBES_ON_FTRACE=y
CONFIG_ARCH_CORRECT_STACKTRACE_ON_KRETPROBE=y
CONFIG_HAVE_FUNCTION_ERROR_INJECTION=y
CONFIG_HAVE_NMI=y
CONFIG_TRACE_IRQFLAGS_SUPPORT=y
CONFIG_TRACE_IRQFLAGS_NMI_SUPPORT=y
CONFIG_HAVE_ARCH_TRACEHOOK=y
CONFIG_HAVE_DMA_CONTIGUOUS=y
CONFIG_GENERIC_SMP_IDLE_THREAD=y
CONFIG_ARCH_HAS_FORTIFY_SOURCE=y
CONFIG_ARCH_HAS_SET_MEMORY=y
CONFIG_ARCH_HAS_SET_DIRECT_MAP=y
CONFIG_ARCH_HAS_CPU_FINALIZE_INIT=y
CONFIG_ARCH_HAS_CPU_PASID=y
CONFIG_HAVE_ARCH_THREAD_STRUCT_WHITELIST=y
CONFIG_ARCH_WANTS_DYNAMIC_TASK_STRUCT=y
CONFIG_ARCH_WANTS_NO_INSTR=y
CONFIG_HAVE_ASM_MODVERSIONS=y
CONFIG_HAVE_REGS_AND_STACK_ACCESS_API=y
CONFIG_HAVE_RSEQ=y
CONFIG_HAVE_RUST=y
CONFIG_HAVE_FUNCTION_ARG_ACCESS_API=y
CONFIG_HAVE_HW_BREAKPOINT=y
CONFIG_HAVE_MIXED_BREAKPOINTS_REGS=y
CONFIG_HAVE_USER_RETURN_NOTIFIER=y
CONFIG_HAVE_PERF_EVENTS_NMI=y
CONFIG_HAVE_HARDLOCKUP_DETECTOR_PERF=y
CONFIG_UNWIND_USER=y
CONFIG_HAVE_UNWIND_USER_FP=y
CONFIG_HAVE_PERF_REGS=y
CONFIG_HAVE_PERF_USER_STACK_DUMP=y
CONFIG_HAVE_ARCH_JUMP_LABEL=y
CONFIG_HAVE_ARCH_JUMP_LABEL_RELATIVE=y
CONFIG_MMU_GATHER_TABLE_FREE=y
CONFIG_MMU_GATHER_RCU_TABLE_FREE=y
CONFIG_MMU_GATHER_MERGE_VMAS=y
CONFIG_ARCH_WANT_IRQS_OFF_ACTIVATE_MM=y
CONFIG_MMU_LAZY_TLB_REFCOUNT=y
CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y
CONFIG_ARCH_HAVE_EXTRA_ELF_NOTES=y
CONFIG_ARCH_HAS_NMI_SAFE_THIS_CPU_OPS=y
CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y
CONFIG_HAVE_CMPXCHG_LOCAL=y
CONFIG_HAVE_CMPXCHG_DOUBLE=y
CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y
CONFIG_ARCH_WANT_OLD_COMPAT_IPC=y
CONFIG_HAVE_ARCH_SECCOMP=y
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECCOMP=y
CONFIG_SECCOMP_FILTER=y
# CONFIG_SECCOMP_CACHE_DEBUG is not set
CONFIG_HAVE_ARCH_KSTACK_ERASE=y
CONFIG_HAVE_STACKPROTECTOR=y
CONFIG_STACKPROTECTOR=y
CONFIG_STACKPROTECTOR_STRONG=y
CONFIG_ARCH_SUPPORTS_LTO_CLANG=y
CONFIG_ARCH_SUPPORTS_LTO_CLANG_THIN=y
CONFIG_LTO_NONE=y
CONFIG_ARCH_SUPPORTS_AUTOFDO_CLANG=y
CONFIG_ARCH_SUPPORTS_PROPELLER_CLANG=y
CONFIG_ARCH_SUPPORTS_CFI=y
CONFIG_HAVE_ARCH_WITHIN_STACK_FRAMES=y
CONFIG_HAVE_CONTEXT_TRACKING_USER=y
CONFIG_HAVE_CONTEXT_TRACKING_USER_OFFSTACK=y
CONFIG_HAVE_VIRT_CPU_ACCOUNTING_GEN=y
CONFIG_HAVE_IRQ_TIME_ACCOUNTING=y
CONFIG_HAVE_PV_STEAL_CLOCK_GEN=y
CONFIG_HAVE_MOVE_PUD=y
CONFIG_HAVE_MOVE_PMD=y
CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE=y
CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE_PUD=y
CONFIG_HAVE_ARCH_HUGE_VMAP=y
CONFIG_HAVE_ARCH_HUGE_VMALLOC=y
CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y
CONFIG_ARCH_WANT_PMD_MKWRITE=y
CONFIG_HAVE_ARCH_SOFT_DIRTY=y
CONFIG_HAVE_MOD_ARCH_SPECIFIC=y
CONFIG_MODULES_USE_ELF_RELA=y
CONFIG_ARCH_HAS_EXECMEM_ROX=y
CONFIG_HAVE_IRQ_EXIT_ON_IRQ_STACK=y
CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK=y
CONFIG_SOFTIRQ_ON_OWN_STACK=y
CONFIG_ARCH_HAS_ELF_RANDOMIZE=y
CONFIG_HAVE_ARCH_MMAP_RND_BITS=y
CONFIG_HAVE_EXIT_THREAD=y
CONFIG_ARCH_MMAP_RND_BITS=28
CONFIG_HAVE_ARCH_MMAP_RND_COMPAT_BITS=y
CONFIG_ARCH_MMAP_RND_COMPAT_BITS=8
CONFIG_HAVE_ARCH_COMPAT_MMAP_BASES=y
CONFIG_HAVE_PAGE_SIZE_4KB=y
CONFIG_PAGE_SIZE_4KB=y
CONFIG_PAGE_SIZE_LESS_THAN_64KB=y
CONFIG_PAGE_SIZE_LESS_THAN_256KB=y
CONFIG_PAGE_SHIFT=12
CONFIG_HAVE_OBJTOOL=y
CONFIG_HAVE_JUMP_LABEL_HACK=y
CONFIG_HAVE_NOINSTR_HACK=y
CONFIG_HAVE_NOINSTR_VALIDATION=y
CONFIG_HAVE_UACCESS_VALIDATION=y
CONFIG_HAVE_STACK_VALIDATION=y
CONFIG_HAVE_RELIABLE_STACKTRACE=y
CONFIG_OLD_SIGSUSPEND3=y
CONFIG_COMPAT_OLD_SIGACTION=y
CONFIG_COMPAT_32BIT_TIME=y
CONFIG_ARCH_SUPPORTS_RT=y
CONFIG_HAVE_ARCH_VMAP_STACK=y
CONFIG_VMAP_STACK=y
CONFIG_HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET=y
CONFIG_RANDOMIZE_KSTACK_OFFSET=y
# CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT is not set
CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y
CONFIG_STRICT_KERNEL_RWX=y
CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y
CONFIG_STRICT_MODULE_RWX=y
CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y
# CONFIG_LOCK_EVENT_COUNTS is not set
CONFIG_ARCH_HAS_MEM_ENCRYPT=y
CONFIG_HAVE_STATIC_CALL=y
CONFIG_HAVE_STATIC_CALL_INLINE=y
CONFIG_HAVE_PREEMPT_DYNAMIC=y
CONFIG_HAVE_PREEMPT_DYNAMIC_CALL=y
CONFIG_ARCH_WANT_LD_ORPHAN_WARN=y
CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y
CONFIG_ARCH_SUPPORTS_PAGE_TABLE_CHECK=y
CONFIG_ARCH_HAS_ELFCORE_COMPAT=y
CONFIG_ARCH_HAS_PARANOID_L1D_FLUSH=y
CONFIG_DYNAMIC_SIGFRAME=y
CONFIG_HAVE_ARCH_NODE_DEV_GROUP=y
CONFIG_ARCH_HAS_HW_PTE_YOUNG=y
CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG=y
CONFIG_ARCH_HAS_KERNEL_FPU_SUPPORT=y
CONFIG_HAVE_GENERIC_TIF_BITS=y

#
# GCOV-based kernel profiling
#
# CONFIG_GCOV_KERNEL is not set
CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
# end of GCOV-based kernel profiling

CONFIG_HAVE_GCC_PLUGINS=y
CONFIG_FUNCTION_ALIGNMENT_4B=y
CONFIG_FUNCTION_ALIGNMENT_16B=y
CONFIG_FUNCTION_ALIGNMENT=16
CONFIG_CC_HAS_MIN_FUNCTION_ALIGNMENT=y
CONFIG_CC_HAS_SANE_FUNCTION_ALIGNMENT=y
CONFIG_ARCH_HAS_CPU_ATTACK_VECTORS=y
# end of General architecture-dependent options

CONFIG_RT_MUTEXES=y
CONFIG_MODULE_SIG_FORMAT=y
CONFIG_MODULES=y
# CONFIG_MODULE_DEBUG is not set
# CONFIG_MODULE_FORCE_LOAD is not set
CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set
CONFIG_MODVERSIONS=y
# CONFIG_GENKSYMS is not set
CONFIG_GENDWARFKSYMS=y
CONFIG_ASM_MODVERSIONS=y
# CONFIG_EXTENDED_MODVERSIONS is not set
# CONFIG_BASIC_MODVERSIONS is not set
CONFIG_MODULE_SRCVERSION_ALL=y
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
# CONFIG_MODULE_SIG_ALL is not set
CONFIG_MODULE_SIG_SHA256=y
# CONFIG_MODULE_SIG_SHA384 is not set
# CONFIG_MODULE_SIG_SHA512 is not set
# CONFIG_MODULE_SIG_SHA3_256 is not set
# CONFIG_MODULE_SIG_SHA3_384 is not set
# CONFIG_MODULE_SIG_SHA3_512 is not set
CONFIG_MODULE_SIG_HASH="sha256"
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
CONFIG_MODPROBE_PATH="/sbin/modprobe"
# CONFIG_TRIM_UNUSED_KSYMS is not set
CONFIG_MODULES_TREE_LOOKUP=y
CONFIG_BLOCK=y
CONFIG_BLOCK_LEGACY_AUTOLOAD=y
CONFIG_BLK_RQ_ALLOC_TIME=y
CONFIG_BLK_CGROUP_RWSTAT=y
CONFIG_BLK_CGROUP_PUNT_BIO=y
CONFIG_BLK_DEV_BSG_COMMON=y
CONFIG_BLK_ICQ=y
CONFIG_BLK_DEV_BSGLIB=y
CONFIG_BLK_DEV_INTEGRITY=y
# CONFIG_BLK_DEV_WRITE_MOUNTED is not set
CONFIG_BLK_DEV_ZONED=y
CONFIG_BLK_DEV_THROTTLING=y
CONFIG_BLK_WBT=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_CGROUP_IOLATENCY=y
# CONFIG_BLK_CGROUP_FC_APPID is not set
CONFIG_BLK_CGROUP_IOCOST=y
CONFIG_BLK_CGROUP_IOPRIO=y
CONFIG_BLK_DEBUG_FS=y
# CONFIG_BLK_SED_OPAL is not set
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y

#
# Partition Types
#
CONFIG_PARTITION_ADVANCED=y
CONFIG_ACORN_PARTITION=y
CONFIG_ACORN_PARTITION_CUMANA=y
CONFIG_ACORN_PARTITION_EESOX=y
CONFIG_ACORN_PARTITION_ICS=y
CONFIG_ACORN_PARTITION_ADFS=y
CONFIG_ACORN_PARTITION_POWERTEC=y
CONFIG_ACORN_PARTITION_RISCIX=y
CONFIG_AIX_PARTITION=y
CONFIG_OSF_PARTITION=y
CONFIG_AMIGA_PARTITION=y
CONFIG_ATARI_PARTITION=y
CONFIG_MAC_PARTITION=y
CONFIG_MSDOS_PARTITION=y
CONFIG_BSD_DISKLABEL=y
CONFIG_MINIX_SUBPARTITION=y
CONFIG_SOLARIS_X86_PARTITION=y
CONFIG_UNIXWARE_DISKLABEL=y
CONFIG_LDM_PARTITION=y
# CONFIG_LDM_DEBUG is not set
CONFIG_SGI_PARTITION=y
CONFIG_ULTRIX_PARTITION=y
CONFIG_SUN_PARTITION=y
CONFIG_KARMA_PARTITION=y
CONFIG_EFI_PARTITION=y
CONFIG_SYSV68_PARTITION=y
CONFIG_CMDLINE_PARTITION=y
# CONFIG_OF_PARTITION is not set
# end of Partition Types

CONFIG_BLK_PM=y
CONFIG_BLOCK_HOLDER_DEPRECATED=y
CONFIG_BLK_MQ_STACKING=y

#
# IO Schedulers
#
CONFIG_MQ_IOSCHED_DEADLINE=y
CONFIG_MQ_IOSCHED_KYBER=y
CONFIG_IOSCHED_BFQ=y
CONFIG_BFQ_GROUP_IOSCHED=y
CONFIG_BFQ_CGROUP_DEBUG=y
# end of IO Schedulers

CONFIG_PREEMPT_NOTIFIERS=y
CONFIG_PADATA=y
CONFIG_ASN1=y
CONFIG_UNINLINE_SPIN_UNLOCK=y
CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y
CONFIG_MUTEX_SPIN_ON_OWNER=y
CONFIG_RWSEM_SPIN_ON_OWNER=y
CONFIG_LOCK_SPIN_ON_OWNER=y
CONFIG_ARCH_USE_QUEUED_SPINLOCKS=y
CONFIG_QUEUED_SPINLOCKS=y
CONFIG_ARCH_USE_QUEUED_RWLOCKS=y
CONFIG_QUEUED_RWLOCKS=y
CONFIG_ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE=y
CONFIG_ARCH_HAS_SYNC_CORE_BEFORE_USERMODE=y
CONFIG_ARCH_HAS_SYSCALL_WRAPPER=y
CONFIG_FREEZER=y

#
# Executable file formats
#
CONFIG_BINFMT_ELF=y
CONFIG_COMPAT_BINFMT_ELF=y
CONFIG_ELFCORE=y
CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS=y
CONFIG_BINFMT_SCRIPT=y
CONFIG_BINFMT_MISC=y
CONFIG_COREDUMP=y
# end of Executable file formats

#
# Memory Management options
#
CONFIG_SWAP=y
CONFIG_ZSWAP=y
CONFIG_ZSWAP_DEFAULT_ON=y
CONFIG_ZSWAP_SHRINKER_DEFAULT_ON=y
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_DEFLATE is not set
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZO is not set
CONFIG_ZSWAP_COMPRESSOR_DEFAULT_842=y
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZ4 is not set
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZ4HC is not set
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_ZSTD is not set
CONFIG_ZSWAP_COMPRESSOR_DEFAULT="842"
CONFIG_ZSMALLOC=y

#
# Zsmalloc allocator options
#

#
# Zsmalloc is a common backend allocator for zswap & zram
#
# CONFIG_ZSMALLOC_STAT is not set
CONFIG_ZSMALLOC_CHAIN_SIZE=8
# end of Zsmalloc allocator options

#
# Slab allocator options
#
CONFIG_SLUB=y
CONFIG_KVFREE_RCU_BATCHED=y
# CONFIG_SLUB_TINY is not set
CONFIG_SLAB_MERGE_DEFAULT=y
# CONFIG_SLAB_FREELIST_RANDOM is not set
# CONFIG_SLAB_FREELIST_HARDENED is not set
# CONFIG_SLAB_BUCKETS is not set
# CONFIG_SLUB_STATS is not set
# CONFIG_RANDOM_KMALLOC_CACHES is not set
# end of Slab allocator options

# CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set
# CONFIG_COMPAT_BRK is not set
CONFIG_SPARSEMEM=y
CONFIG_SPARSEMEM_EXTREME=y
CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y
CONFIG_SPARSEMEM_VMEMMAP=y
CONFIG_SPARSEMEM_VMEMMAP_PREINIT=y
CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=y
CONFIG_ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP=y
CONFIG_ARCH_WANT_HUGETLB_VMEMMAP_PREINIT=y
CONFIG_HAVE_GUP_FAST=y
CONFIG_NUMA_KEEP_MEMINFO=y
CONFIG_MEMORY_ISOLATION=y
CONFIG_EXCLUSIVE_SYSTEM_RAM=y
CONFIG_HAVE_BOOTMEM_INFO_NODE=y
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y
CONFIG_MEMORY_HOTPLUG=y
# CONFIG_MHP_DEFAULT_ONLINE_TYPE_OFFLINE is not set
CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO=y
# CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_KERNEL is not set
# CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_MOVABLE is not set
CONFIG_MEMORY_HOTREMOVE=y
CONFIG_MHP_MEMMAP_ON_MEMORY=y
CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y
CONFIG_SPLIT_PTE_PTLOCKS=y
CONFIG_ARCH_ENABLE_SPLIT_PMD_PTLOCK=y
CONFIG_SPLIT_PMD_PTLOCKS=y
CONFIG_BALLOON=y
# CONFIG_BALLOON_MIGRATION is not set
CONFIG_COMPACTION=y
CONFIG_COMPACT_UNEVICTABLE_DEFAULT=1
CONFIG_PAGE_REPORTING=y
CONFIG_NUMA_MIGRATION=y
CONFIG_MIGRATION=y
CONFIG_DEVICE_MIGRATION=y
CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y
CONFIG_ARCH_ENABLE_THP_MIGRATION=y
CONFIG_CONTIG_ALLOC=y
CONFIG_PCP_BATCH_SCALE_MAX=5
CONFIG_PHYS_ADDR_T_64BIT=y
CONFIG_MMU_NOTIFIER=y
CONFIG_KSM=y
CONFIG_DEFAULT_MMAP_MIN_ADDR=4096
CONFIG_ARCH_SUPPORTS_MEMORY_FAILURE=y
# CONFIG_MEMORY_FAILURE is not set
CONFIG_ARCH_WANT_GENERAL_HUGETLB=y
CONFIG_ARCH_WANTS_THP_SWAP=y
# CONFIG_PERSISTENT_HUGE_ZERO_FOLIO is not set
CONFIG_MM_ID=y
CONFIG_TRANSPARENT_HUGEPAGE=y
# CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS is not set
CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y
# CONFIG_TRANSPARENT_HUGEPAGE_NEVER is not set
# CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_NEVER is not set
# CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_ALWAYS is not set
# CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_WITHIN_SIZE is not set
CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_ADVISE=y
# CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_NEVER is not set
# CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_ALWAYS is not set
# CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_WITHIN_SIZE is not set
CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_ADVISE=y
CONFIG_THP_SWAP=y
# CONFIG_READ_ONLY_THP_FOR_FS is not set
# CONFIG_NO_PAGE_MAPCOUNT is not set
CONFIG_PAGE_MAPCOUNT=y
CONFIG_PGTABLE_HAS_HUGE_LEAVES=y
CONFIG_HAVE_GIGANTIC_FOLIOS=y
CONFIG_ASYNC_KERNEL_PGTABLE_FREE=y
CONFIG_ARCH_SUPPORTS_HUGE_PFNMAP=y
CONFIG_ARCH_SUPPORTS_PMD_PFNMAP=y
CONFIG_ARCH_SUPPORTS_PUD_PFNMAP=y
CONFIG_NEED_PER_CPU_EMBED_FIRST_CHUNK=y
CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y
CONFIG_USE_PERCPU_NUMA_NODE_ID=y
CONFIG_HAVE_SETUP_PER_CPU_AREA=y
CONFIG_CMA=y
# CONFIG_CMA_DEBUGFS is not set
# CONFIG_CMA_SYSFS is not set
CONFIG_CMA_AREAS=20
CONFIG_PAGE_BLOCK_MAX_ORDER=10
CONFIG_MEM_SOFT_DIRTY=y
CONFIG_GENERIC_EARLY_IOREMAP=y
# CONFIG_DEFERRED_STRUCT_PAGE_INIT is not set
CONFIG_PAGE_IDLE_FLAG=y
# CONFIG_IDLE_PAGE_TRACKING is not set
CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y
CONFIG_ARCH_HAS_CURRENT_STACK_POINTER=y
CONFIG_ARCH_HAS_ZONE_DMA_SET=y
CONFIG_ZONE_DMA=y
CONFIG_ZONE_DMA32=y
CONFIG_ZONE_DEVICE=y
CONFIG_HMM_MIRROR=y
CONFIG_GET_FREE_REGION=y
CONFIG_DEVICE_PRIVATE=y
CONFIG_VMAP_PFN=y
CONFIG_ARCH_USES_HIGH_VMA_FLAGS=y
CONFIG_ARCH_HAS_PKEYS=y
CONFIG_ARCH_USES_PG_ARCH_2=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_PERCPU_STATS=y
# CONFIG_GUP_TEST is not set
# CONFIG_DMAPOOL_TEST is not set
CONFIG_ARCH_HAS_PTE_SPECIAL=y
CONFIG_MAPPING_DIRTY_HELPERS=y
CONFIG_KMAP_LOCAL=y
CONFIG_MEMFD_CREATE=y
CONFIG_SECRETMEM=y
CONFIG_ANON_VMA_NAME=y
CONFIG_HAVE_ARCH_USERFAULTFD_WP=y
CONFIG_HAVE_ARCH_USERFAULTFD_MINOR=y
CONFIG_USERFAULTFD=y
# CONFIG_PTE_MARKER_UFFD_WP is not set
CONFIG_LRU_GEN=y
CONFIG_LRU_GEN_ENABLED=y
# CONFIG_LRU_GEN_STATS is not set
CONFIG_LRU_GEN_WALKS_MMU=y
CONFIG_ARCH_SUPPORTS_PER_VMA_LOCK=y
CONFIG_PER_VMA_LOCK=y
CONFIG_LOCK_MM_AND_FIND_VMA=y
CONFIG_IOMMU_MM_DATA=y
CONFIG_EXECMEM=y
CONFIG_NUMA_MEMBLKS=y
CONFIG_NUMA_EMU=y
CONFIG_ARCH_HAS_USER_SHADOW_STACK=y
CONFIG_PT_RECLAIM=y

#
# Data Access Monitoring
#
CONFIG_DAMON=y
# CONFIG_DAMON_DEBUG_SANITY is not set
CONFIG_DAMON_VADDR=y
CONFIG_DAMON_PADDR=y
# CONFIG_DAMON_SYSFS is not set
CONFIG_DAMON_RECLAIM=y
# CONFIG_DAMON_LRU_SORT is not set
# CONFIG_DAMON_STAT is not set
# end of Data Access Monitoring
# end of Memory Management options

CONFIG_NET=y
CONFIG_WANT_COMPAT_NETLINK_MESSAGES=y
CONFIG_COMPAT_NETLINK_MESSAGES=y
CONFIG_NET_INGRESS=y
CONFIG_NET_EGRESS=y
CONFIG_NET_XGRESS=y
CONFIG_NET_REDIRECT=y
CONFIG_SKB_DECRYPTED=y
CONFIG_SKB_EXTENSIONS=y
CONFIG_NET_DEVMEM=y
CONFIG_NET_SHAPER=y
CONFIG_NET_CRC32C=y

#
# Networking options
#
CONFIG_PACKET=y
CONFIG_PACKET_DIAG=y
CONFIG_INET_PSP=y
CONFIG_UNIX=y
CONFIG_AF_UNIX_OOB=y
CONFIG_UNIX_DIAG=y
CONFIG_TLS=y
CONFIG_TLS_DEVICE=y
CONFIG_TLS_TOE=y
CONFIG_XFRM=y
CONFIG_XFRM_OFFLOAD=y
CONFIG_XFRM_ALGO=y
CONFIG_XFRM_USER=y
CONFIG_XFRM_USER_COMPAT=y
CONFIG_XFRM_INTERFACE=y
CONFIG_XFRM_SUB_POLICY=y
CONFIG_XFRM_MIGRATE=y
CONFIG_XFRM_STATISTICS=y
CONFIG_XFRM_AH=y
CONFIG_XFRM_ESP=y
CONFIG_XFRM_IPCOMP=y
CONFIG_NET_KEY=y
CONFIG_NET_KEY_MIGRATE=y
# CONFIG_XFRM_IPTFS is not set
CONFIG_XFRM_ESPINTCP=y
CONFIG_SMC=y
CONFIG_SMC_DIAG=y
# CONFIG_SMC_HS_CTRL_BPF is not set
CONFIG_DIBS=y
CONFIG_DIBS_LO=y
CONFIG_XDP_SOCKETS=y
CONFIG_XDP_SOCKETS_DIAG=y
CONFIG_NET_HANDSHAKE=y
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IP_ROUTE_MULTIPATH=y
CONFIG_IP_ROUTE_VERBOSE=y
CONFIG_IP_ROUTE_CLASSID=y
CONFIG_IP_PNP=y
CONFIG_IP_PNP_DHCP=y
CONFIG_IP_PNP_BOOTP=y
CONFIG_IP_PNP_RARP=y
CONFIG_NET_IPIP=y
CONFIG_NET_IPGRE_DEMUX=y
CONFIG_NET_IP_TUNNEL=y
CONFIG_NET_IPGRE=y
CONFIG_NET_IPGRE_BROADCAST=y
CONFIG_IP_MROUTE_COMMON=y
CONFIG_IP_MROUTE=y
CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
CONFIG_IP_PIMSM_V1=y
CONFIG_IP_PIMSM_V2=y
CONFIG_SYN_COOKIES=y
CONFIG_NET_IPVTI=y
CONFIG_NET_UDP_TUNNEL=y
CONFIG_NET_FOU=y
CONFIG_NET_FOU_IP_TUNNELS=y
CONFIG_INET_AH=y
CONFIG_INET_ESP=y
CONFIG_INET_ESP_OFFLOAD=y
CONFIG_INET_ESPINTCP=y
CONFIG_INET_IPCOMP=y
CONFIG_INET_TABLE_PERTURB_ORDER=16
CONFIG_INET_XFRM_TUNNEL=y
CONFIG_INET_TUNNEL=y
CONFIG_INET_DIAG=y
CONFIG_INET_TCP_DIAG=y
CONFIG_INET_UDP_DIAG=y
CONFIG_INET_RAW_DIAG=y
CONFIG_INET_DIAG_DESTROY=y
CONFIG_TCP_CONG_ADVANCED=y
CONFIG_TCP_CONG_BIC=y
CONFIG_TCP_CONG_CUBIC=y
CONFIG_TCP_CONG_WESTWOOD=y
CONFIG_TCP_CONG_HTCP=y
CONFIG_TCP_CONG_HSTCP=y
CONFIG_TCP_CONG_HYBLA=y
CONFIG_TCP_CONG_VEGAS=y
CONFIG_TCP_CONG_NV=y
CONFIG_TCP_CONG_SCALABLE=y
CONFIG_TCP_CONG_LP=y
CONFIG_TCP_CONG_VENO=y
CONFIG_TCP_CONG_YEAH=y
CONFIG_TCP_CONG_ILLINOIS=y
CONFIG_TCP_CONG_DCTCP=y
CONFIG_TCP_CONG_CDG=y
CONFIG_TCP_CONG_BBR=y
# CONFIG_DEFAULT_BIC is not set
CONFIG_DEFAULT_CUBIC=y
# CONFIG_DEFAULT_HTCP is not set
# CONFIG_DEFAULT_HYBLA is not set
# CONFIG_DEFAULT_VEGAS is not set
# CONFIG_DEFAULT_VENO is not set
# CONFIG_DEFAULT_WESTWOOD is not set
# CONFIG_DEFAULT_DCTCP is not set
# CONFIG_DEFAULT_CDG is not set
# CONFIG_DEFAULT_BBR is not set
# CONFIG_DEFAULT_RENO is not set
CONFIG_DEFAULT_TCP_CONG="cubic"
# CONFIG_TCP_AO is not set
CONFIG_TCP_MD5SIG=y
CONFIG_IPV6=y
CONFIG_IPV6_ROUTER_PREF=y
CONFIG_IPV6_ROUTE_INFO=y
CONFIG_IPV6_OPTIMISTIC_DAD=y
CONFIG_INET6_AH=y
CONFIG_INET6_ESP=y
CONFIG_INET6_ESP_OFFLOAD=y
CONFIG_INET6_ESPINTCP=y
CONFIG_INET6_IPCOMP=y
CONFIG_IPV6_MIP6=y
CONFIG_IPV6_ILA=y
CONFIG_INET6_XFRM_TUNNEL=y
CONFIG_INET6_TUNNEL=y
CONFIG_IPV6_VTI=y
CONFIG_IPV6_SIT=y
CONFIG_IPV6_SIT_6RD=y
CONFIG_IPV6_NDISC_NODETYPE=y
CONFIG_IPV6_TUNNEL=y
CONFIG_IPV6_GRE=y
CONFIG_IPV6_FOU=y
CONFIG_IPV6_FOU_TUNNEL=y
CONFIG_IPV6_MULTIPLE_TABLES=y
CONFIG_IPV6_SUBTREES=y
CONFIG_IPV6_MROUTE=y
CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
CONFIG_IPV6_PIMSM_V2=y
CONFIG_IPV6_SEG6_LWTUNNEL=y
CONFIG_IPV6_SEG6_HMAC=y
CONFIG_IPV6_SEG6_BPF=y
CONFIG_IPV6_RPL_LWTUNNEL=y
# CONFIG_IPV6_IOAM6_LWTUNNEL is not set
CONFIG_NETLABEL=y
CONFIG_MPTCP=y
CONFIG_INET_MPTCP_DIAG=y
CONFIG_MPTCP_IPV6=y
CONFIG_NETWORK_SECMARK=y
CONFIG_NET_PTP_CLASSIFY=y
# CONFIG_NETWORK_PHY_TIMESTAMPING is not set
CONFIG_NETFILTER=y
CONFIG_NETFILTER_ADVANCED=y
CONFIG_BRIDGE_NETFILTER=y

#
# Core Netfilter Configuration
#
CONFIG_NETFILTER_INGRESS=y
CONFIG_NETFILTER_EGRESS=y
CONFIG_NETFILTER_SKIP_EGRESS=y
CONFIG_NETFILTER_NETLINK=y
CONFIG_NETFILTER_FAMILY_BRIDGE=y
CONFIG_NETFILTER_FAMILY_ARP=y
CONFIG_NETFILTER_BPF_LINK=y
# CONFIG_NETFILTER_NETLINK_HOOK is not set
CONFIG_NETFILTER_NETLINK_ACCT=y
CONFIG_NETFILTER_NETLINK_QUEUE=y
CONFIG_NETFILTER_NETLINK_LOG=y
CONFIG_NETFILTER_NETLINK_OSF=y
CONFIG_NF_CONNTRACK=y
CONFIG_NF_LOG_SYSLOG=y
CONFIG_NETFILTER_CONNCOUNT=y
CONFIG_NF_CONNTRACK_MARK=y
CONFIG_NF_CONNTRACK_SECMARK=y
CONFIG_NF_CONNTRACK_ZONES=y
# CONFIG_NF_CONNTRACK_PROCFS is not set
CONFIG_NF_CONNTRACK_EVENTS=y
CONFIG_NF_CONNTRACK_TIMEOUT=y
CONFIG_NF_CONNTRACK_TIMESTAMP=y
CONFIG_NF_CONNTRACK_LABELS=y
CONFIG_NF_CONNTRACK_OVS=y
CONFIG_NF_CT_PROTO_GRE=y
CONFIG_NF_CT_PROTO_SCTP=y
CONFIG_NF_CONNTRACK_AMANDA=y
CONFIG_NF_CONNTRACK_FTP=y
CONFIG_NF_CONNTRACK_H323=y
CONFIG_NF_CONNTRACK_IRC=y
CONFIG_NF_CONNTRACK_BROADCAST=y
CONFIG_NF_CONNTRACK_NETBIOS_NS=y
CONFIG_NF_CONNTRACK_SNMP=y
CONFIG_NF_CONNTRACK_PPTP=y
CONFIG_NF_CONNTRACK_SANE=y
CONFIG_NF_CONNTRACK_SIP=y
CONFIG_NF_CONNTRACK_TFTP=y
CONFIG_NF_CT_NETLINK=y
CONFIG_NF_CT_NETLINK_TIMEOUT=y
CONFIG_NF_CT_NETLINK_HELPER=y
CONFIG_NETFILTER_NETLINK_GLUE_CT=y
CONFIG_NF_NAT=y
CONFIG_NF_NAT_AMANDA=y
CONFIG_NF_NAT_FTP=y
CONFIG_NF_NAT_IRC=y
CONFIG_NF_NAT_SIP=y
CONFIG_NF_NAT_TFTP=y
CONFIG_NF_NAT_REDIRECT=y
CONFIG_NF_NAT_MASQUERADE=y
CONFIG_NF_NAT_OVS=y
CONFIG_NETFILTER_SYNPROXY=y
CONFIG_NF_TABLES=y
CONFIG_NF_TABLES_INET=y
CONFIG_NF_TABLES_NETDEV=y
CONFIG_NFT_NUMGEN=y
CONFIG_NFT_CT=y
CONFIG_NFT_EXTHDR_DCCP=y
CONFIG_NFT_FLOW_OFFLOAD=y
CONFIG_NFT_CONNLIMIT=y
CONFIG_NFT_LOG=y
CONFIG_NFT_LIMIT=y
CONFIG_NFT_MASQ=y
CONFIG_NFT_REDIR=y
CONFIG_NFT_NAT=y
CONFIG_NFT_TUNNEL=y
CONFIG_NFT_QUEUE=y
CONFIG_NFT_QUOTA=y
CONFIG_NFT_REJECT=y
CONFIG_NFT_REJECT_INET=y
CONFIG_NFT_COMPAT=y
CONFIG_NFT_HASH=y
CONFIG_NFT_FIB=y
CONFIG_NFT_FIB_INET=y
CONFIG_NFT_XFRM=y
CONFIG_NFT_SOCKET=y
CONFIG_NFT_OSF=y
CONFIG_NFT_TPROXY=y
CONFIG_NFT_SYNPROXY=y
CONFIG_NF_DUP_NETDEV=y
CONFIG_NFT_DUP_NETDEV=y
CONFIG_NFT_FWD_NETDEV=y
CONFIG_NFT_FIB_NETDEV=y
CONFIG_NFT_REJECT_NETDEV=y
CONFIG_NF_FLOW_TABLE_INET=y
CONFIG_NF_FLOW_TABLE=y
# CONFIG_NF_FLOW_TABLE_PROCFS is not set
CONFIG_NETFILTER_XTABLES=y
CONFIG_NETFILTER_XTABLES_COMPAT=y
CONFIG_NETFILTER_XTABLES_LEGACY=y

#
# Xtables combined modules
#
CONFIG_NETFILTER_XT_MARK=y
CONFIG_NETFILTER_XT_CONNMARK=y
CONFIG_NETFILTER_XT_SET=y

#
# Xtables targets
#
CONFIG_NETFILTER_XT_TARGET_AUDIT=y
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=y
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=y
CONFIG_NETFILTER_XT_TARGET_CONNMARK=y
CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=y
CONFIG_NETFILTER_XT_TARGET_CT=y
CONFIG_NETFILTER_XT_TARGET_DSCP=y
CONFIG_NETFILTER_XT_TARGET_HL=y
CONFIG_NETFILTER_XT_TARGET_HMARK=y
CONFIG_NETFILTER_XT_TARGET_IDLETIMER=y
CONFIG_NETFILTER_XT_TARGET_LED=y
CONFIG_NETFILTER_XT_TARGET_LOG=y
CONFIG_NETFILTER_XT_TARGET_MARK=y
CONFIG_NETFILTER_XT_NAT=y
CONFIG_NETFILTER_XT_TARGET_NETMAP=y
CONFIG_NETFILTER_XT_TARGET_NFLOG=y
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=y
CONFIG_NETFILTER_XT_TARGET_NOTRACK=y
CONFIG_NETFILTER_XT_TARGET_RATEEST=y
CONFIG_NETFILTER_XT_TARGET_REDIRECT=y
CONFIG_NETFILTER_XT_TARGET_MASQUERADE=y
CONFIG_NETFILTER_XT_TARGET_TEE=y
CONFIG_NETFILTER_XT_TARGET_TPROXY=y
CONFIG_NETFILTER_XT_TARGET_TRACE=y
CONFIG_NETFILTER_XT_TARGET_SECMARK=y
CONFIG_NETFILTER_XT_TARGET_TCPMSS=y
CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=y

#
# Xtables matches
#
CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
CONFIG_NETFILTER_XT_MATCH_BPF=y
CONFIG_NETFILTER_XT_MATCH_CGROUP=y
CONFIG_NETFILTER_XT_MATCH_CLUSTER=y
CONFIG_NETFILTER_XT_MATCH_COMMENT=y
CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y
CONFIG_NETFILTER_XT_MATCH_CONNLABEL=y
CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=y
CONFIG_NETFILTER_XT_MATCH_CONNMARK=y
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
CONFIG_NETFILTER_XT_MATCH_CPU=y
CONFIG_NETFILTER_XT_MATCH_DCCP=y
CONFIG_NETFILTER_XT_MATCH_DEVGROUP=y
CONFIG_NETFILTER_XT_MATCH_DSCP=y
CONFIG_NETFILTER_XT_MATCH_ECN=y
CONFIG_NETFILTER_XT_MATCH_ESP=y
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=y
CONFIG_NETFILTER_XT_MATCH_HELPER=y
CONFIG_NETFILTER_XT_MATCH_HL=y
CONFIG_NETFILTER_XT_MATCH_IPCOMP=y
CONFIG_NETFILTER_XT_MATCH_IPRANGE=y
CONFIG_NETFILTER_XT_MATCH_IPVS=y
CONFIG_NETFILTER_XT_MATCH_L2TP=y
CONFIG_NETFILTER_XT_MATCH_LENGTH=y
CONFIG_NETFILTER_XT_MATCH_LIMIT=y
CONFIG_NETFILTER_XT_MATCH_MAC=y
CONFIG_NETFILTER_XT_MATCH_MARK=y
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
CONFIG_NETFILTER_XT_MATCH_NFACCT=y
CONFIG_NETFILTER_XT_MATCH_OSF=y
CONFIG_NETFILTER_XT_MATCH_OWNER=y
CONFIG_NETFILTER_XT_MATCH_POLICY=y
CONFIG_NETFILTER_XT_MATCH_PHYSDEV=y
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y
CONFIG_NETFILTER_XT_MATCH_QUOTA=y
CONFIG_NETFILTER_XT_MATCH_RATEEST=y
CONFIG_NETFILTER_XT_MATCH_REALM=y
CONFIG_NETFILTER_XT_MATCH_RECENT=y
CONFIG_NETFILTER_XT_MATCH_SCTP=y
CONFIG_NETFILTER_XT_MATCH_SOCKET=y
CONFIG_NETFILTER_XT_MATCH_STATE=y
CONFIG_NETFILTER_XT_MATCH_STATISTIC=y
CONFIG_NETFILTER_XT_MATCH_STRING=y
CONFIG_NETFILTER_XT_MATCH_TCPMSS=y
CONFIG_NETFILTER_XT_MATCH_TIME=y
CONFIG_NETFILTER_XT_MATCH_U32=y
# end of Core Netfilter Configuration

CONFIG_IP_SET=y
CONFIG_IP_SET_MAX=256
CONFIG_IP_SET_BITMAP_IP=y
CONFIG_IP_SET_BITMAP_IPMAC=y
CONFIG_IP_SET_BITMAP_PORT=y
CONFIG_IP_SET_HASH_IP=y
CONFIG_IP_SET_HASH_IPMARK=y
CONFIG_IP_SET_HASH_IPPORT=y
CONFIG_IP_SET_HASH_IPPORTIP=y
CONFIG_IP_SET_HASH_IPPORTNET=y
CONFIG_IP_SET_HASH_IPMAC=y
CONFIG_IP_SET_HASH_MAC=y
CONFIG_IP_SET_HASH_NETPORTNET=y
CONFIG_IP_SET_HASH_NET=y
CONFIG_IP_SET_HASH_NETNET=y
CONFIG_IP_SET_HASH_NETPORT=y
CONFIG_IP_SET_HASH_NETIFACE=y
CONFIG_IP_SET_LIST_SET=y
CONFIG_IP_VS=y
CONFIG_IP_VS_IPV6=y
# CONFIG_IP_VS_DEBUG is not set
CONFIG_IP_VS_TAB_BITS=12

#
# IPVS transport protocol load balancing support
#
CONFIG_IP_VS_PROTO_TCP=y
CONFIG_IP_VS_PROTO_UDP=y
CONFIG_IP_VS_PROTO_AH_ESP=y
CONFIG_IP_VS_PROTO_ESP=y
CONFIG_IP_VS_PROTO_AH=y
CONFIG_IP_VS_PROTO_SCTP=y

#
# IPVS scheduler
#
CONFIG_IP_VS_RR=y
CONFIG_IP_VS_WRR=y
CONFIG_IP_VS_LC=y
CONFIG_IP_VS_WLC=y
CONFIG_IP_VS_FO=y
CONFIG_IP_VS_OVF=y
CONFIG_IP_VS_LBLC=y
CONFIG_IP_VS_LBLCR=y
CONFIG_IP_VS_DH=y
CONFIG_IP_VS_SH=y
CONFIG_IP_VS_MH=y
CONFIG_IP_VS_SED=y
CONFIG_IP_VS_NQ=y
CONFIG_IP_VS_TWOS=y

#
# IPVS SH scheduler
#
CONFIG_IP_VS_SH_TAB_BITS=8

#
# IPVS MH scheduler
#
CONFIG_IP_VS_MH_TAB_INDEX=12

#
# IPVS application helper
#
CONFIG_IP_VS_FTP=y
CONFIG_IP_VS_NFCT=y
CONFIG_IP_VS_PE_SIP=y

#
# IP: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV4=y
CONFIG_IP_NF_IPTABLES_LEGACY=y
CONFIG_NF_SOCKET_IPV4=y
CONFIG_NF_TPROXY_IPV4=y
CONFIG_NF_TABLES_IPV4=y
CONFIG_NFT_REJECT_IPV4=y
CONFIG_NFT_DUP_IPV4=y
CONFIG_NFT_FIB_IPV4=y
CONFIG_NF_TABLES_ARP=y
CONFIG_NF_DUP_IPV4=y
CONFIG_NF_LOG_ARP=y
CONFIG_NF_LOG_IPV4=y
CONFIG_NF_REJECT_IPV4=y
CONFIG_NF_NAT_SNMP_BASIC=y
CONFIG_NF_NAT_PPTP=y
CONFIG_NF_NAT_H323=y
CONFIG_IP_NF_IPTABLES=y
CONFIG_IP_NF_MATCH_AH=y
CONFIG_IP_NF_MATCH_ECN=y
CONFIG_IP_NF_MATCH_RPFILTER=y
CONFIG_IP_NF_MATCH_TTL=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_TARGET_REJECT=y
CONFIG_IP_NF_TARGET_SYNPROXY=y
CONFIG_IP_NF_NAT=y
CONFIG_IP_NF_TARGET_MASQUERADE=y
CONFIG_IP_NF_TARGET_NETMAP=y
CONFIG_IP_NF_TARGET_REDIRECT=y
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_TARGET_ECN=y
CONFIG_IP_NF_TARGET_TTL=y
CONFIG_IP_NF_RAW=y
CONFIG_IP_NF_SECURITY=y
CONFIG_IP_NF_ARPTABLES=y
CONFIG_NFT_COMPAT_ARP=y
CONFIG_IP_NF_ARPFILTER=y
CONFIG_IP_NF_ARP_MANGLE=y
# end of IP: Netfilter Configuration

#
# IPv6: Netfilter Configuration
#
CONFIG_IP6_NF_IPTABLES_LEGACY=y
CONFIG_NF_SOCKET_IPV6=y
CONFIG_NF_TPROXY_IPV6=y
CONFIG_NF_TABLES_IPV6=y
CONFIG_NFT_REJECT_IPV6=y
CONFIG_NFT_DUP_IPV6=y
CONFIG_NFT_FIB_IPV6=y
CONFIG_NF_DUP_IPV6=y
CONFIG_NF_REJECT_IPV6=y
CONFIG_NF_LOG_IPV6=y
CONFIG_IP6_NF_IPTABLES=y
CONFIG_IP6_NF_MATCH_AH=y
CONFIG_IP6_NF_MATCH_EUI64=y
CONFIG_IP6_NF_MATCH_FRAG=y
CONFIG_IP6_NF_MATCH_OPTS=y
CONFIG_IP6_NF_MATCH_HL=y
CONFIG_IP6_NF_MATCH_IPV6HEADER=y
CONFIG_IP6_NF_MATCH_MH=y
CONFIG_IP6_NF_MATCH_RPFILTER=y
CONFIG_IP6_NF_MATCH_RT=y
CONFIG_IP6_NF_MATCH_SRH=y
CONFIG_IP6_NF_TARGET_HL=y
CONFIG_IP6_NF_FILTER=y
CONFIG_IP6_NF_TARGET_REJECT=y
CONFIG_IP6_NF_TARGET_SYNPROXY=y
CONFIG_IP6_NF_MANGLE=y
CONFIG_IP6_NF_RAW=y
CONFIG_IP6_NF_SECURITY=y
CONFIG_IP6_NF_NAT=y
CONFIG_IP6_NF_TARGET_MASQUERADE=y
CONFIG_IP6_NF_TARGET_NPT=y
# end of IPv6: Netfilter Configuration

CONFIG_NF_DEFRAG_IPV6=y
CONFIG_NF_TABLES_BRIDGE=y
CONFIG_NFT_BRIDGE_META=y
CONFIG_NFT_BRIDGE_REJECT=y
CONFIG_NF_CONNTRACK_BRIDGE=y
CONFIG_BRIDGE_NF_EBTABLES_LEGACY=y
CONFIG_BRIDGE_NF_EBTABLES=y
CONFIG_BRIDGE_EBT_BROUTE=y
CONFIG_BRIDGE_EBT_T_FILTER=y
CONFIG_BRIDGE_EBT_T_NAT=y
CONFIG_BRIDGE_EBT_802_3=y
CONFIG_BRIDGE_EBT_AMONG=y
CONFIG_BRIDGE_EBT_ARP=y
CONFIG_BRIDGE_EBT_IP=y
CONFIG_BRIDGE_EBT_IP6=y
CONFIG_BRIDGE_EBT_LIMIT=y
CONFIG_BRIDGE_EBT_MARK=y
CONFIG_BRIDGE_EBT_PKTTYPE=y
CONFIG_BRIDGE_EBT_STP=y
CONFIG_BRIDGE_EBT_VLAN=y
CONFIG_BRIDGE_EBT_ARPREPLY=y
CONFIG_BRIDGE_EBT_DNAT=y
CONFIG_BRIDGE_EBT_MARK_T=y
CONFIG_BRIDGE_EBT_REDIRECT=y
CONFIG_BRIDGE_EBT_SNAT=y
CONFIG_BRIDGE_EBT_LOG=y
CONFIG_BRIDGE_EBT_NFLOG=y
CONFIG_IP_SCTP=y
# CONFIG_SCTP_DBG_OBJCNT is not set
CONFIG_SCTP_DEFAULT_COOKIE_HMAC_SHA256=y
# CONFIG_SCTP_DEFAULT_COOKIE_HMAC_NONE is not set
CONFIG_INET_SCTP_DIAG=y
CONFIG_RDS=y
CONFIG_RDS_RDMA=y
CONFIG_RDS_TCP=y
# CONFIG_RDS_DEBUG is not set
CONFIG_TIPC=y
CONFIG_TIPC_MEDIA_IB=y
CONFIG_TIPC_MEDIA_UDP=y
CONFIG_TIPC_CRYPTO=y
CONFIG_TIPC_DIAG=y
CONFIG_ATM=y
CONFIG_ATM_BR2684=y
# CONFIG_ATM_BR2684_IPFILTER is not set
CONFIG_L2TP=y
# CONFIG_L2TP_DEBUGFS is not set
CONFIG_L2TP_V3=y
CONFIG_L2TP_IP=y
CONFIG_L2TP_ETH=y
CONFIG_STP=y
CONFIG_GARP=y
CONFIG_MRP=y
CONFIG_BRIDGE=y
CONFIG_BRIDGE_IGMP_SNOOPING=y
CONFIG_BRIDGE_VLAN_FILTERING=y
CONFIG_BRIDGE_MRP=y
CONFIG_BRIDGE_CFM=y
CONFIG_NET_DSA=y
# CONFIG_NET_DSA_TAG_NONE is not set
# CONFIG_NET_DSA_TAG_AR9331 is not set
CONFIG_NET_DSA_TAG_BRCM_COMMON=y
CONFIG_NET_DSA_TAG_BRCM=y
# CONFIG_NET_DSA_TAG_BRCM_LEGACY is not set
# CONFIG_NET_DSA_TAG_BRCM_LEGACY_FCS is not set
CONFIG_NET_DSA_TAG_BRCM_PREPEND=y
# CONFIG_NET_DSA_TAG_HELLCREEK is not set
# CONFIG_NET_DSA_TAG_GSWIP is not set
# CONFIG_NET_DSA_TAG_DSA is not set
# CONFIG_NET_DSA_TAG_EDSA is not set
CONFIG_NET_DSA_TAG_MTK=y
# CONFIG_NET_DSA_TAG_MXL_862XX is not set
# CONFIG_NET_DSA_TAG_MXL_GSW1XX is not set
# CONFIG_NET_DSA_TAG_KSZ is not set
# CONFIG_NET_DSA_TAG_OCELOT is not set
# CONFIG_NET_DSA_TAG_OCELOT_8021Q is not set
CONFIG_NET_DSA_TAG_QCA=y
CONFIG_NET_DSA_TAG_RTL4_A=y
# CONFIG_NET_DSA_TAG_RTL8_4 is not set
# CONFIG_NET_DSA_TAG_RZN1_A5PSW is not set
# CONFIG_NET_DSA_TAG_LAN9303 is not set
# CONFIG_NET_DSA_TAG_SJA1105 is not set
# CONFIG_NET_DSA_TAG_TRAILER is not set
# CONFIG_NET_DSA_TAG_VSC73XX_8021Q is not set
# CONFIG_NET_DSA_TAG_XRS700X is not set
# CONFIG_NET_DSA_TAG_YT921X is not set
CONFIG_VLAN_8021Q=y
CONFIG_VLAN_8021Q_GVRP=y
CONFIG_VLAN_8021Q_MVRP=y
CONFIG_LLC=y
CONFIG_LLC2=y
# CONFIG_ATALK is not set
CONFIG_X25=y
CONFIG_LAPB=y
CONFIG_PHONET=y
CONFIG_6LOWPAN=y
# CONFIG_6LOWPAN_DEBUGFS is not set
CONFIG_6LOWPAN_NHC=y
CONFIG_6LOWPAN_NHC_DEST=y
CONFIG_6LOWPAN_NHC_FRAGMENT=y
CONFIG_6LOWPAN_NHC_HOP=y
CONFIG_6LOWPAN_NHC_IPV6=y
CONFIG_6LOWPAN_NHC_MOBILITY=y
CONFIG_6LOWPAN_NHC_ROUTING=y
CONFIG_6LOWPAN_NHC_UDP=y
CONFIG_6LOWPAN_GHC_EXT_HDR_HOP=y
CONFIG_6LOWPAN_GHC_UDP=y
CONFIG_6LOWPAN_GHC_ICMPV6=y
CONFIG_6LOWPAN_GHC_EXT_HDR_DEST=y
CONFIG_6LOWPAN_GHC_EXT_HDR_FRAG=y
CONFIG_6LOWPAN_GHC_EXT_HDR_ROUTE=y
CONFIG_IEEE802154=y
CONFIG_IEEE802154_NL802154_EXPERIMENTAL=y
CONFIG_IEEE802154_SOCKET=y
CONFIG_IEEE802154_6LOWPAN=y
CONFIG_MAC802154=y
CONFIG_NET_SCHED=y

#
# Queueing/Scheduling
#
CONFIG_NET_SCH_HTB=y
CONFIG_NET_SCH_HFSC=y
CONFIG_NET_SCH_PRIO=y
CONFIG_NET_SCH_MULTIQ=y
CONFIG_NET_SCH_RED=y
CONFIG_NET_SCH_SFB=y
CONFIG_NET_SCH_SFQ=y
CONFIG_NET_SCH_TEQL=y
CONFIG_NET_SCH_TBF=y
CONFIG_NET_SCH_CBS=y
CONFIG_NET_SCH_ETF=y
CONFIG_NET_SCH_MQPRIO_LIB=y
CONFIG_NET_SCH_TAPRIO=y
CONFIG_NET_SCH_GRED=y
CONFIG_NET_SCH_NETEM=y
CONFIG_NET_SCH_DRR=y
CONFIG_NET_SCH_MQPRIO=y
CONFIG_NET_SCH_SKBPRIO=y
CONFIG_NET_SCH_CHOKE=y
CONFIG_NET_SCH_QFQ=y
CONFIG_NET_SCH_CODEL=y
CONFIG_NET_SCH_FQ_CODEL=y
CONFIG_NET_SCH_CAKE=y
CONFIG_NET_SCH_FQ=y
CONFIG_NET_SCH_HHF=y
CONFIG_NET_SCH_PIE=y
CONFIG_NET_SCH_FQ_PIE=y
CONFIG_NET_SCH_INGRESS=y
CONFIG_NET_SCH_PLUG=y
CONFIG_NET_SCH_ETS=y
# CONFIG_NET_SCH_DUALPI2 is not set
CONFIG_NET_SCH_DEFAULT=y
# CONFIG_DEFAULT_FQ is not set
CONFIG_DEFAULT_CODEL=y
# CONFIG_DEFAULT_FQ_CODEL is not set
# CONFIG_DEFAULT_FQ_PIE is not set
# CONFIG_DEFAULT_SFQ is not set
# CONFIG_DEFAULT_PFIFO_FAST is not set
CONFIG_DEFAULT_NET_SCH="pfifo_fast"

#
# Classification
#
CONFIG_NET_CLS=y
CONFIG_NET_CLS_BASIC=y
CONFIG_NET_CLS_ROUTE4=y
CONFIG_NET_CLS_FW=y
CONFIG_NET_CLS_U32=y
CONFIG_CLS_U32_PERF=y
CONFIG_CLS_U32_MARK=y
CONFIG_NET_CLS_FLOW=y
CONFIG_NET_CLS_CGROUP=y
CONFIG_NET_CLS_BPF=y
CONFIG_NET_CLS_FLOWER=y
CONFIG_NET_CLS_MATCHALL=y
CONFIG_NET_EMATCH=y
CONFIG_NET_EMATCH_STACK=32
CONFIG_NET_EMATCH_CMP=y
CONFIG_NET_EMATCH_NBYTE=y
CONFIG_NET_EMATCH_U32=y
CONFIG_NET_EMATCH_META=y
CONFIG_NET_EMATCH_TEXT=y
CONFIG_NET_EMATCH_CANID=y
CONFIG_NET_EMATCH_IPSET=y
CONFIG_NET_EMATCH_IPT=y
CONFIG_NET_CLS_ACT=y
CONFIG_NET_ACT_POLICE=y
CONFIG_NET_ACT_GACT=y
CONFIG_GACT_PROB=y
CONFIG_NET_ACT_MIRRED=y
CONFIG_NET_ACT_SAMPLE=y
CONFIG_NET_ACT_NAT=y
CONFIG_NET_ACT_PEDIT=y
CONFIG_NET_ACT_SIMP=y
CONFIG_NET_ACT_SKBEDIT=y
CONFIG_NET_ACT_CSUM=y
CONFIG_NET_ACT_MPLS=y
CONFIG_NET_ACT_VLAN=y
CONFIG_NET_ACT_BPF=y
CONFIG_NET_ACT_CONNMARK=y
CONFIG_NET_ACT_CTINFO=y
CONFIG_NET_ACT_SKBMOD=y
CONFIG_NET_ACT_IFE=y
CONFIG_NET_ACT_TUNNEL_KEY=y
CONFIG_NET_ACT_CT=y
CONFIG_NET_ACT_GATE=y
CONFIG_NET_IFE_SKBMARK=y
CONFIG_NET_IFE_SKBPRIO=y
CONFIG_NET_IFE_SKBTCINDEX=y
CONFIG_NET_TC_SKB_EXT=y
CONFIG_NET_SCH_FIFO=y
CONFIG_DCB=y
CONFIG_DNS_RESOLVER=y
CONFIG_BATMAN_ADV=y
CONFIG_BATMAN_ADV_BATMAN_V=y
CONFIG_BATMAN_ADV_BLA=y
CONFIG_BATMAN_ADV_DAT=y
CONFIG_BATMAN_ADV_MCAST=y
# CONFIG_BATMAN_ADV_DEBUG is not set
# CONFIG_BATMAN_ADV_TRACING is not set
CONFIG_OPENVSWITCH=y
CONFIG_OPENVSWITCH_GRE=y
CONFIG_OPENVSWITCH_VXLAN=y
CONFIG_OPENVSWITCH_GENEVE=y
CONFIG_VSOCKETS=y
CONFIG_VSOCKETS_DIAG=y
CONFIG_VSOCKETS_LOOPBACK=y
# CONFIG_VMWARE_VMCI_VSOCKETS is not set
CONFIG_VIRTIO_VSOCKETS=y
CONFIG_VIRTIO_VSOCKETS_COMMON=y
CONFIG_NETLINK_DIAG=y
CONFIG_MPLS=y
CONFIG_NET_MPLS_GSO=y
CONFIG_MPLS_ROUTING=y
CONFIG_MPLS_IPTUNNEL=y
CONFIG_NET_NSH=y
CONFIG_HSR=y
CONFIG_NET_SWITCHDEV=y
CONFIG_NET_L3_MASTER_DEV=y
CONFIG_QRTR=y
CONFIG_QRTR_TUN=y
# CONFIG_QRTR_MHI is not set
CONFIG_NET_NCSI=y
# CONFIG_NCSI_OEM_CMD_GET_MAC is not set
# CONFIG_NCSI_OEM_CMD_KEEP_PHY is not set
# CONFIG_PCPU_DEV_REFCNT is not set
CONFIG_MAX_SKB_FRAGS=17
CONFIG_RPS=y
CONFIG_RFS_ACCEL=y
CONFIG_SOCK_RX_QUEUE_MAPPING=y
CONFIG_XPS=y
CONFIG_CGROUP_NET_PRIO=y
CONFIG_CGROUP_NET_CLASSID=y
CONFIG_NET_RX_BUSY_POLL=y
CONFIG_BQL=y
CONFIG_NET_FLOW_LIMIT=y

#
# Network testing
#
# CONFIG_NET_PKTGEN is not set
CONFIG_NET_DROP_MONITOR=y
# end of Network testing
# end of Networking options

CONFIG_CAN=y
CONFIG_CAN_RAW=y
CONFIG_CAN_BCM=y
CONFIG_CAN_GW=y
CONFIG_CAN_J1939=y
CONFIG_CAN_ISOTP=y
CONFIG_BT=y
CONFIG_BT_BREDR=y
CONFIG_BT_RFCOMM=y
CONFIG_BT_RFCOMM_TTY=y
CONFIG_BT_BNEP=y
CONFIG_BT_BNEP_MC_FILTER=y
CONFIG_BT_BNEP_PROTO_FILTER=y
CONFIG_BT_HIDP=y
CONFIG_BT_LE=y
CONFIG_BT_LE_L2CAP_ECRED=y
CONFIG_BT_6LOWPAN=y
CONFIG_BT_LEDS=y
CONFIG_BT_MSFTEXT=y
# CONFIG_BT_AOSPEXT is not set
# CONFIG_BT_DEBUGFS is not set
# CONFIG_BT_SELFTEST is not set

#
# Bluetooth device drivers
#
CONFIG_BT_INTEL=y
CONFIG_BT_BCM=y
CONFIG_BT_RTL=y
CONFIG_BT_QCA=y
CONFIG_BT_MTK=y
CONFIG_BT_HCIBTUSB=y
CONFIG_BT_HCIBTUSB_AUTOSUSPEND=y
CONFIG_BT_HCIBTUSB_POLL_SYNC=y
CONFIG_BT_HCIBTUSB_BCM=y
CONFIG_BT_HCIBTUSB_MTK=y
CONFIG_BT_HCIBTUSB_RTL=y
# CONFIG_BT_HCIBTSDIO is not set
CONFIG_BT_HCIUART=y
CONFIG_BT_HCIUART_SERDEV=y
CONFIG_BT_HCIUART_H4=y
# CONFIG_BT_HCIUART_NOKIA is not set
CONFIG_BT_HCIUART_BCSP=y
# CONFIG_BT_HCIUART_ATH3K is not set
CONFIG_BT_HCIUART_LL=y
CONFIG_BT_HCIUART_3WIRE=y
# CONFIG_BT_HCIUART_INTEL is not set
# CONFIG_BT_HCIUART_BCM is not set
# CONFIG_BT_HCIUART_RTL is not set
CONFIG_BT_HCIUART_QCA=y
CONFIG_BT_HCIUART_AG6XX=y
CONFIG_BT_HCIUART_MRVL=y
# CONFIG_BT_HCIUART_AML is not set
CONFIG_BT_HCIBCM203X=y
# CONFIG_BT_HCIBCM4377 is not set
CONFIG_BT_HCIBPA10X=y
CONFIG_BT_HCIBFUSB=y
# CONFIG_BT_HCIDTL1 is not set
# CONFIG_BT_HCIBT3C is not set
# CONFIG_BT_HCIBLUECARD is not set
CONFIG_BT_HCIVHCI=y
CONFIG_BT_MRVL=y
CONFIG_BT_MRVL_SDIO=y
CONFIG_BT_ATH3K=y
CONFIG_BT_MTKSDIO=y
CONFIG_BT_MTKUART=y
# CONFIG_BT_VIRTIO is not set
# CONFIG_BT_NXPUART is not set
# CONFIG_BT_INTEL_PCIE is not set
# end of Bluetooth device drivers

CONFIG_AF_RXRPC=y
CONFIG_AF_RXRPC_IPV6=y
# CONFIG_AF_RXRPC_INJECT_LOSS is not set
# CONFIG_AF_RXRPC_INJECT_RX_DELAY is not set
# CONFIG_AF_RXRPC_DEBUG is not set
CONFIG_RXKAD=y
# CONFIG_RXGK is not set
# CONFIG_RXPERF is not set
CONFIG_AF_KCM=y
CONFIG_STREAM_PARSER=y
CONFIG_MCTP=y
CONFIG_FIB_RULES=y
CONFIG_WIRELESS=y
CONFIG_WEXT_CORE=y
CONFIG_WEXT_PROC=y
CONFIG_CFG80211=y
# CONFIG_NL80211_TESTMODE is not set
# CONFIG_CFG80211_DEVELOPER_WARNINGS is not set
# CONFIG_CFG80211_CERTIFICATION_ONUS is not set
CONFIG_CFG80211_REQUIRE_SIGNED_REGDB=y
CONFIG_CFG80211_USE_KERNEL_REGDB_KEYS=y
CONFIG_CFG80211_DEFAULT_PS=y
CONFIG_CFG80211_DEBUGFS=y
CONFIG_CFG80211_CRDA_SUPPORT=y
CONFIG_CFG80211_WEXT=y
CONFIG_MAC80211=y
CONFIG_MAC80211_HAS_RC=y
CONFIG_MAC80211_RC_MINSTREL=y
CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y
CONFIG_MAC80211_RC_DEFAULT="minstrel_ht"
CONFIG_MAC80211_MESH=y
CONFIG_MAC80211_LEDS=y
CONFIG_MAC80211_DEBUGFS=y
# CONFIG_MAC80211_MESSAGE_TRACING is not set
# CONFIG_MAC80211_DEBUG_MENU is not set
CONFIG_MAC80211_STA_HASH_MAX_SIZE=0
CONFIG_RFKILL=y
CONFIG_RFKILL_LEDS=y
CONFIG_RFKILL_INPUT=y
# CONFIG_RFKILL_GPIO is not set
CONFIG_NET_9P=y
CONFIG_NET_9P_FD=y
CONFIG_NET_9P_VIRTIO=y
# CONFIG_NET_9P_USBG is not set
CONFIG_NET_9P_RDMA=y
# CONFIG_NET_9P_DEBUG is not set
CONFIG_CEPH_LIB=y
# CONFIG_CEPH_LIB_PRETTYDEBUG is not set
CONFIG_CEPH_LIB_USE_DNS_RESOLVER=y
CONFIG_NFC=y
CONFIG_NFC_DIGITAL=y
CONFIG_NFC_NCI=y
# CONFIG_NFC_NCI_SPI is not set
CONFIG_NFC_NCI_UART=y
CONFIG_NFC_HCI=y
CONFIG_NFC_SHDLC=y

#
# Near Field Communication (NFC) devices
#
# CONFIG_NFC_TRF7970A is not set
# CONFIG_NFC_MEI_PHY is not set
CONFIG_NFC_SIM=y
CONFIG_NFC_PORT100=y
CONFIG_NFC_VIRTUAL_NCI=y
CONFIG_NFC_FDP=y
# CONFIG_NFC_FDP_I2C is not set
# CONFIG_NFC_PN544_I2C is not set
CONFIG_NFC_PN533=y
CONFIG_NFC_PN533_USB=y
# CONFIG_NFC_PN533_I2C is not set
# CONFIG_NFC_PN532_UART is not set
# CONFIG_NFC_MICROREAD_I2C is not set
CONFIG_NFC_MRVL=y
CONFIG_NFC_MRVL_USB=y
# CONFIG_NFC_MRVL_UART is not set
# CONFIG_NFC_MRVL_I2C is not set
# CONFIG_NFC_ST21NFCA_I2C is not set
# CONFIG_NFC_ST_NCI_I2C is not set
# CONFIG_NFC_ST_NCI_SPI is not set
# CONFIG_NFC_NXP_NCI is not set
# CONFIG_NFC_S3FWRN5_I2C is not set
# CONFIG_NFC_S3FWRN82_UART is not set
# CONFIG_NFC_ST95HF is not set
# end of Near Field Communication (NFC) devices

CONFIG_PSAMPLE=y
CONFIG_NET_IFE=y
CONFIG_LWTUNNEL=y
CONFIG_LWTUNNEL_BPF=y
CONFIG_DST_CACHE=y
CONFIG_GRO_CELLS=y
CONFIG_SOCK_VALIDATE_XMIT=y
CONFIG_NET_SELFTESTS=y
CONFIG_NET_SOCK_MSG=y
CONFIG_NET_DEVLINK=y
CONFIG_PAGE_POOL=y
# CONFIG_PAGE_POOL_STATS is not set
CONFIG_FAILOVER=y
CONFIG_ETHTOOL_NETLINK=y

#
# Device Drivers
#
CONFIG_HAVE_PCI=y
CONFIG_GENERIC_PCI_IOMAP=y
CONFIG_PCI=y
CONFIG_PCI_DOMAINS=y
CONFIG_PCIEPORTBUS=y
CONFIG_HOTPLUG_PCI_PCIE=y
CONFIG_PCIEAER=y
# CONFIG_PCIEAER_INJECT is not set
# CONFIG_PCIE_ECRC is not set
CONFIG_PCIEASPM=y
CONFIG_PCIEASPM_DEFAULT=y
# CONFIG_PCIEASPM_POWERSAVE is not set
# CONFIG_PCIEASPM_POWER_SUPERSAVE is not set
# CONFIG_PCIEASPM_PERFORMANCE is not set
CONFIG_PCIE_PME=y
# CONFIG_PCIE_DPC is not set
# CONFIG_PCIE_PTM is not set
CONFIG_PCI_MSI=y
CONFIG_PCI_QUIRKS=y
# CONFIG_PCI_DEBUG is not set
# CONFIG_PCI_REALLOC_ENABLE_AUTO is not set
# CONFIG_PCI_STUB is not set
# CONFIG_PCI_PF_STUB is not set
CONFIG_PCI_ATS=y
# CONFIG_PCI_TSM is not set
# CONFIG_PCI_DOE is not set
CONFIG_PCI_ECAM=y
CONFIG_PCI_LOCKLESS_CONFIG=y
CONFIG_PCI_IOV=y
# CONFIG_PCI_NPEM is not set
CONFIG_PCI_PRI=y
CONFIG_PCI_PASID=y
# CONFIG_PCIE_TPH is not set
# CONFIG_PCI_P2PDMA is not set
CONFIG_PCI_LABEL=y
# CONFIG_PCI_DYNAMIC_OF_NODES is not set
# CONFIG_PCIE_BUS_TUNE_OFF is not set
CONFIG_PCIE_BUS_DEFAULT=y
# CONFIG_PCIE_BUS_SAFE is not set
# CONFIG_PCIE_BUS_PERFORMANCE is not set
# CONFIG_PCIE_BUS_PEER2PEER is not set
CONFIG_VGA_ARB=y
CONFIG_VGA_ARB_MAX_GPUS=16
CONFIG_HOTPLUG_PCI=y
# CONFIG_HOTPLUG_PCI_ACPI is not set
# CONFIG_HOTPLUG_PCI_CPCI is not set
# CONFIG_HOTPLUG_PCI_OCTEONEP is not set
# CONFIG_HOTPLUG_PCI_SHPC is not set

#
# PCI controller drivers
#
CONFIG_PCI_HOST_COMMON=y
# CONFIG_PCI_FTPCI100 is not set
CONFIG_PCI_HOST_GENERIC=y
# CONFIG_VMD is not set
# CONFIG_PCIE_XILINX is not set

#
# Cadence-based PCIe controllers
#
# CONFIG_PCIE_CADENCE_PLAT_HOST is not set
# CONFIG_PCIE_CADENCE_PLAT_EP is not set
# end of Cadence-based PCIe controllers

#
# DesignWare-based PCIe controllers
#
# CONFIG_PCI_MESON is not set
# CONFIG_PCIE_INTEL_GW is not set
# CONFIG_PCIE_DW_PLAT_HOST is not set
# CONFIG_PCIE_DW_PLAT_EP is not set
# end of DesignWare-based PCIe controllers

#
# Mobiveil-based PCIe controllers
#
# end of Mobiveil-based PCIe controllers

#
# PLDA-based PCIe controllers
#
# CONFIG_PCIE_MICROCHIP_HOST is not set
# end of PLDA-based PCIe controllers
# end of PCI controller drivers

#
# PCI Endpoint
#
CONFIG_PCI_ENDPOINT=y
# CONFIG_PCI_ENDPOINT_CONFIGFS is not set
# CONFIG_PCI_ENDPOINT_MSI_DOORBELL is not set
# CONFIG_PCI_EPF_TEST is not set
# CONFIG_PCI_EPF_NTB is not set
# end of PCI Endpoint

#
# PCI switch controller drivers
#
# CONFIG_PCI_SW_SWITCHTEC is not set
# end of PCI switch controller drivers

# CONFIG_PCI_PWRCTRL_GENERIC is not set
# CONFIG_PCI_PWRCTRL_TC9563 is not set
# CONFIG_CXL_BUS is not set
CONFIG_PCCARD=y
CONFIG_PCMCIA=y
CONFIG_PCMCIA_LOAD_CIS=y
CONFIG_CARDBUS=y

#
# PC-card bridges
#
CONFIG_YENTA=y
CONFIG_YENTA_O2=y
CONFIG_YENTA_RICOH=y
CONFIG_YENTA_TI=y
CONFIG_YENTA_ENE_TUNE=y
CONFIG_YENTA_TOSHIBA=y
# CONFIG_PD6729 is not set
CONFIG_PCCARD_NONSTATIC=y
# CONFIG_RAPIDIO is not set
# CONFIG_PC104 is not set

#
# Generic Driver Options
#
CONFIG_AUXILIARY_BUS=y
CONFIG_UEVENT_HELPER=y
CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
CONFIG_DEVTMPFS=y
CONFIG_DEVTMPFS_MOUNT=y
# CONFIG_DEVTMPFS_SAFE is not set
CONFIG_DRIVER_DEFERRED_PROBE_TIMEOUT=10
CONFIG_STANDALONE=y
CONFIG_PREVENT_FIRMWARE_BUILD=y

#
# Firmware loader
#
CONFIG_FW_LOADER=y
# CONFIG_FW_LOADER_DEBUG is not set
CONFIG_FW_LOADER_PAGED_BUF=y
CONFIG_FW_LOADER_SYSFS=y
CONFIG_EXTRA_FIRMWARE=""
CONFIG_FW_LOADER_USER_HELPER=y
CONFIG_FW_LOADER_USER_HELPER_FALLBACK=y
CONFIG_FW_LOADER_COMPRESS=y
# CONFIG_FW_LOADER_COMPRESS_XZ is not set
# CONFIG_FW_LOADER_COMPRESS_ZSTD is not set
CONFIG_FW_CACHE=y
# CONFIG_FW_UPLOAD is not set
# end of Firmware loader

CONFIG_WANT_DEV_COREDUMP=y
CONFIG_ALLOW_DEV_COREDUMP=y
CONFIG_DEV_COREDUMP=y
# CONFIG_DEBUG_DRIVER is not set
CONFIG_DEBUG_DEVRES=y
# CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
# CONFIG_TEST_ASYNC_DRIVER_PROBE is not set
CONFIG_GENERIC_CPU_DEVICES=y
CONFIG_GENERIC_CPU_AUTOPROBE=y
CONFIG_GENERIC_CPU_VULNERABILITIES=y
CONFIG_REGMAP=y
CONFIG_REGMAP_I2C=y
CONFIG_REGMAP_SPI=y
CONFIG_REGMAP_MMIO=y
CONFIG_REGMAP_IRQ=y
CONFIG_DMA_SHARED_BUFFER=y
# CONFIG_DMA_FENCE_TRACE is not set
# CONFIG_FW_DEVLINK_SYNC_STATE_TIMEOUT is not set
# end of Generic Driver Options

#
# Bus devices
#
# CONFIG_MOXTET is not set
CONFIG_MHI_BUS=y
# CONFIG_MHI_BUS_DEBUG is not set
# CONFIG_MHI_BUS_PCI_GENERIC is not set
# CONFIG_MHI_BUS_EP is not set
# end of Bus devices

CONFIG_CONNECTOR=y
CONFIG_PROC_EVENTS=y

#
# Firmware Drivers
#

#
# ARM System Control and Management Interface Protocol
#
# end of ARM System Control and Management Interface Protocol

# CONFIG_EDD is not set
CONFIG_FIRMWARE_MEMMAP=y
CONFIG_DMIID=y
# CONFIG_DMI_SYSFS is not set
CONFIG_DMI_SCAN_MACHINE_NON_EFI_FALLBACK=y
# CONFIG_ISCSI_IBFT is not set
# CONFIG_FW_CFG_SYSFS is not set
CONFIG_SYSFB=y
# CONFIG_SYSFB_SIMPLEFB is not set
CONFIG_GOOGLE_FIRMWARE=y
# CONFIG_GOOGLE_SMI is not set
# CONFIG_GOOGLE_CBMEM is not set
CONFIG_GOOGLE_COREBOOT_TABLE=y
CONFIG_GOOGLE_MEMCONSOLE=y
# CONFIG_GOOGLE_MEMCONSOLE_X86_LEGACY is not set
# CONFIG_GOOGLE_FRAMEBUFFER_COREBOOT is not set
CONFIG_GOOGLE_MEMCONSOLE_COREBOOT=y
CONFIG_GOOGLE_VPD=y

#
# Qualcomm firmware drivers
#
# end of Qualcomm firmware drivers

#
# Tegra firmware driver
#
# end of Tegra firmware driver
# end of Firmware Drivers

# CONFIG_FWCTL is not set
CONFIG_GNSS=y
# CONFIG_GNSS_MTK_SERIAL is not set
# CONFIG_GNSS_SIRF_SERIAL is not set
# CONFIG_GNSS_UBX_SERIAL is not set
CONFIG_GNSS_USB=y
CONFIG_MTD=y
# CONFIG_MTD_TESTS is not set

#
# Partition parsers
#
# CONFIG_MTD_CMDLINE_PARTS is not set
# CONFIG_MTD_OF_PARTS is not set
# CONFIG_MTD_REDBOOT_PARTS is not set
# end of Partition parsers

#
# User Modules And Translation Layers
#
CONFIG_MTD_BLKDEVS=y
CONFIG_MTD_BLOCK=y

#
# Note that in some cases UBI block is preferred. See MTD_UBI_BLOCK.
#
CONFIG_FTL=y
# CONFIG_NFTL is not set
# CONFIG_INFTL is not set
# CONFIG_RFD_FTL is not set
# CONFIG_SSFDC is not set
# CONFIG_SM_FTL is not set
# CONFIG_MTD_OOPS is not set
# CONFIG_MTD_SWAP is not set
# CONFIG_MTD_PARTITIONED_MASTER is not set

#
# RAM/ROM/Flash chip drivers
#
# CONFIG_MTD_CFI is not set
# CONFIG_MTD_JEDECPROBE is not set
CONFIG_MTD_MAP_BANK_WIDTH_1=y
CONFIG_MTD_MAP_BANK_WIDTH_2=y
CONFIG_MTD_MAP_BANK_WIDTH_4=y
CONFIG_MTD_CFI_I1=y
CONFIG_MTD_CFI_I2=y
# CONFIG_MTD_RAM is not set
# CONFIG_MTD_ROM is not set
# CONFIG_MTD_ABSENT is not set
# end of RAM/ROM/Flash chip drivers

#
# Mapping drivers for chip access
#
# CONFIG_MTD_COMPLEX_MAPPINGS is not set
# CONFIG_MTD_PLATRAM is not set
# end of Mapping drivers for chip access

#
# Self-contained MTD device drivers
#
# CONFIG_MTD_PMC551 is not set
# CONFIG_MTD_DATAFLASH is not set
# CONFIG_MTD_MCHP23K256 is not set
# CONFIG_MTD_MCHP48L640 is not set
# CONFIG_MTD_SST25L is not set
CONFIG_MTD_SLRAM=y
CONFIG_MTD_PHRAM=y
CONFIG_MTD_MTDRAM=y
CONFIG_MTDRAM_TOTAL_SIZE=128
CONFIG_MTDRAM_ERASE_SIZE=4
CONFIG_MTD_BLOCK2MTD=y
# CONFIG_MTD_INTEL_DG is not set

#
# Disk-On-Chip Device Drivers
#
# CONFIG_MTD_DOCG3 is not set
# end of Self-contained MTD device drivers

#
# NAND
#
# CONFIG_MTD_ONENAND is not set
# CONFIG_MTD_RAW_NAND is not set
# CONFIG_MTD_SPI_NAND is not set

#
# ECC engine support
#
# CONFIG_MTD_NAND_ECC_SW_HAMMING is not set
# CONFIG_MTD_NAND_ECC_SW_BCH is not set
# CONFIG_MTD_NAND_ECC_MXIC is not set
# end of ECC engine support
# end of NAND

#
# LPDDR & LPDDR2 PCM memory drivers
#
# CONFIG_MTD_LPDDR is not set
# end of LPDDR & LPDDR2 PCM memory drivers

# CONFIG_MTD_SPI_NOR is not set
CONFIG_MTD_UBI=y
CONFIG_MTD_UBI_WL_THRESHOLD=4096
CONFIG_MTD_UBI_BEB_LIMIT=20
# CONFIG_MTD_UBI_FASTMAP is not set
# CONFIG_MTD_UBI_GLUEBI is not set
# CONFIG_MTD_UBI_BLOCK is not set
# CONFIG_MTD_UBI_FAULT_INJECTION is not set
# CONFIG_MTD_UBI_NVMEM is not set
# CONFIG_MTD_HYPERBUS is not set
CONFIG_DTC=y
CONFIG_OF=y
# CONFIG_OF_UNITTEST is not set
CONFIG_OF_FLATTREE=y
CONFIG_OF_EARLY_FLATTREE=y
CONFIG_OF_KOBJ=y
CONFIG_OF_ADDRESS=y
CONFIG_OF_IRQ=y
CONFIG_OF_RESERVED_MEM=y
# CONFIG_OF_OVERLAY is not set
CONFIG_OF_NUMA=y
CONFIG_ARCH_MIGHT_HAVE_PC_PARPORT=y
CONFIG_PARPORT=y
# CONFIG_PARPORT_PC is not set
# CONFIG_PARPORT_1284 is not set
CONFIG_PARPORT_NOT_PC=y
CONFIG_PNP=y
CONFIG_PNP_DEBUG_MESSAGES=y

#
# Protocols
#
CONFIG_PNPACPI=y
CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_NULL_BLK=y
CONFIG_BLK_DEV_NULL_BLK_FAULT_INJECTION=y
# CONFIG_BLK_DEV_FD is not set
CONFIG_CDROM=y
# CONFIG_BLK_DEV_PCIESSD_MTIP32XX is not set
CONFIG_ZRAM=y
# CONFIG_ZRAM_BACKEND_LZ4 is not set
# CONFIG_ZRAM_BACKEND_LZ4HC is not set
# CONFIG_ZRAM_BACKEND_ZSTD is not set
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
# CONFIG_ZRAM_BACKEND_842 is not set
CONFIG_ZRAM_BACKEND_FORCE_LZO=y
CONFIG_ZRAM_BACKEND_LZO=y
# CONFIG_ZRAM_DEF_COMP_LZORLE is not set
CONFIG_ZRAM_DEF_COMP_LZO=y
CONFIG_ZRAM_DEF_COMP="lzo"
# CONFIG_ZRAM_WRITEBACK is not set
# CONFIG_ZRAM_TRACK_ENTRY_ACTIME is not set
# CONFIG_ZRAM_MEMORY_TRACKING is not set
# CONFIG_ZRAM_MULTI_COMP is not set
CONFIG_BLK_DEV_LOOP=y
CONFIG_BLK_DEV_LOOP_MIN_COUNT=16
# CONFIG_BLK_DEV_DRBD is not set
CONFIG_BLK_DEV_NBD=y
CONFIG_BLK_DEV_RAM=y
CONFIG_BLK_DEV_RAM_COUNT=16
CONFIG_BLK_DEV_RAM_SIZE=4096
CONFIG_ATA_OVER_ETH=y
CONFIG_VIRTIO_BLK=y
# CONFIG_BLK_DEV_RBD is not set
CONFIG_BLK_DEV_UBLK=y
CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
CONFIG_BLK_DEV_RNBD=y
CONFIG_BLK_DEV_RNBD_CLIENT=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set

#
# NVME Support
#
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
CONFIG_NVME_MULTIPATH=y
# CONFIG_NVME_VERBOSE_ERRORS is not set
# CONFIG_NVME_HWMON is not set
CONFIG_NVME_FABRICS=y
CONFIG_NVME_RDMA=y
CONFIG_NVME_FC=y
CONFIG_NVME_TCP=y
# CONFIG_NVME_TCP_TLS is not set
# CONFIG_NVME_HOST_AUTH is not set
CONFIG_NVME_TARGET=y
# CONFIG_NVME_TARGET_DEBUGFS is not set
# CONFIG_NVME_TARGET_PASSTHRU is not set
CONFIG_NVME_TARGET_LOOP=y
CONFIG_NVME_TARGET_RDMA=y
CONFIG_NVME_TARGET_FC=y
CONFIG_NVME_TARGET_FCLOOP=y
CONFIG_NVME_TARGET_TCP=y
# CONFIG_NVME_TARGET_TCP_TLS is not set
# CONFIG_NVME_TARGET_AUTH is not set
# CONFIG_NVME_TARGET_PCI_EPF is not set
# end of NVME Support

#
# Misc devices
#
# CONFIG_AD525X_DPOT is not set
# CONFIG_DUMMY_IRQ is not set
# CONFIG_IBM_ASM is not set
# CONFIG_PHANTOM is not set
# CONFIG_RPMB is not set
# CONFIG_TI_FPC202 is not set
# CONFIG_TIFM_CORE is not set
# CONFIG_ICS932S401 is not set
# CONFIG_ENCLOSURE_SERVICES is not set
# CONFIG_HP_ILO is not set
# CONFIG_APDS9802ALS is not set
# CONFIG_ISL29003 is not set
# CONFIG_ISL29020 is not set
# CONFIG_SENSORS_TSL2550 is not set
# CONFIG_SENSORS_BH1770 is not set
# CONFIG_SENSORS_APDS990X is not set
# CONFIG_HMC6352 is not set
# CONFIG_DS1682 is not set
# CONFIG_VMWARE_BALLOON is not set
# CONFIG_LATTICE_ECP3_CONFIG is not set
# CONFIG_SRAM is not set
# CONFIG_DW_XDATA_PCIE is not set
# CONFIG_PCI_ENDPOINT_TEST is not set
# CONFIG_XILINX_SDFEC is not set
CONFIG_MISC_RTSX=y
# CONFIG_HISI_HIKEY_USB is not set
# CONFIG_OPEN_DICE is not set
# CONFIG_NTSYNC is not set
# CONFIG_VCPU_STALL_DETECTOR is not set
# CONFIG_NSM is not set
# CONFIG_C2PORT is not set

#
# EEPROM support
#
# CONFIG_EEPROM_AT24 is not set
# CONFIG_EEPROM_AT25 is not set
# CONFIG_EEPROM_MAX6875 is not set
CONFIG_EEPROM_93CX6=y
# CONFIG_EEPROM_93XX46 is not set
# CONFIG_EEPROM_IDT_89HPESX is not set
# CONFIG_EEPROM_EE1004 is not set
# CONFIG_EEPROM_M24LR is not set
# end of EEPROM support

# CONFIG_CB710_CORE is not set
# CONFIG_SENSORS_LIS3_I2C is not set
# CONFIG_ALTERA_STAPL is not set
CONFIG_INTEL_MEI=y
CONFIG_INTEL_MEI_ME=y
# CONFIG_INTEL_MEI_TXE is not set
# CONFIG_INTEL_MEI_GSC is not set
# CONFIG_INTEL_MEI_CSC is not set
# CONFIG_INTEL_MEI_VSC_HW is not set
# CONFIG_INTEL_MEI_HDCP is not set
# CONFIG_INTEL_MEI_PXP is not set
# CONFIG_INTEL_MEI_GSC_PROXY is not set
CONFIG_VMWARE_VMCI=y
# CONFIG_GENWQE is not set
# CONFIG_BCM_VK is not set
# CONFIG_MISC_ALCOR_PCI is not set
# CONFIG_MISC_RTSX_PCI is not set
CONFIG_MISC_RTSX_USB=y
# CONFIG_UACCE is not set
# CONFIG_PVPANIC is not set
# CONFIG_GP_PCI1XXXX is not set
# CONFIG_KEBA_CP500 is not set
# CONFIG_MISC_RP1 is not set
# end of Misc devices

#
# SCSI device support
#
CONFIG_SCSI_MOD=y
CONFIG_RAID_ATTRS=y
CONFIG_SCSI_COMMON=y
CONFIG_SCSI=y
CONFIG_SCSI_DMA=y
CONFIG_SCSI_NETLINK=y
CONFIG_SCSI_PROC_FS=y

#
# SCSI support type (disk, tape, CD-ROM)
#
CONFIG_BLK_DEV_SD=y
CONFIG_CHR_DEV_ST=y
CONFIG_BLK_DEV_SR=y
CONFIG_CHR_DEV_SG=y
CONFIG_BLK_DEV_BSG=y
# CONFIG_CHR_DEV_SCH is not set
CONFIG_SCSI_CONSTANTS=y
CONFIG_SCSI_LOGGING=y
CONFIG_SCSI_SCAN_ASYNC=y

#
# SCSI Transports
#
CONFIG_SCSI_SPI_ATTRS=y
CONFIG_SCSI_FC_ATTRS=y
CONFIG_SCSI_ISCSI_ATTRS=y
CONFIG_SCSI_SAS_ATTRS=y
CONFIG_SCSI_SAS_LIBSAS=y
CONFIG_SCSI_SAS_ATA=y
# CONFIG_SCSI_SAS_HOST_SMP is not set
CONFIG_SCSI_SRP_ATTRS=y
# end of SCSI Transports

CONFIG_SCSI_LOWLEVEL=y
# CONFIG_ISCSI_TCP is not set
# CONFIG_ISCSI_BOOT_SYSFS is not set
# CONFIG_SCSI_CXGB3_ISCSI is not set
# CONFIG_SCSI_CXGB4_ISCSI is not set
# CONFIG_SCSI_BNX2_ISCSI is not set
# CONFIG_BE2ISCSI is not set
# CONFIG_BLK_DEV_3W_XXXX_RAID is not set
CONFIG_SCSI_HPSA=y
# CONFIG_SCSI_3W_9XXX is not set
# CONFIG_SCSI_3W_SAS is not set
# CONFIG_SCSI_ACARD is not set
# CONFIG_SCSI_AACRAID is not set
# CONFIG_SCSI_AIC7XXX is not set
# CONFIG_SCSI_AIC79XX is not set
# CONFIG_SCSI_AIC94XX is not set
# CONFIG_SCSI_MVSAS is not set
# CONFIG_SCSI_MVUMI is not set
# CONFIG_SCSI_ADVANSYS is not set
# CONFIG_SCSI_ARCMSR is not set
# CONFIG_SCSI_ESAS2R is not set
# CONFIG_MEGARAID_NEWGEN is not set
# CONFIG_MEGARAID_LEGACY is not set
# CONFIG_MEGARAID_SAS is not set
# CONFIG_SCSI_MPT3SAS is not set
# CONFIG_SCSI_MPT2SAS is not set
# CONFIG_SCSI_MPI3MR is not set
# CONFIG_SCSI_SMARTPQI is not set
# CONFIG_SCSI_HPTIOP is not set
# CONFIG_SCSI_BUSLOGIC is not set
# CONFIG_SCSI_MYRB is not set
# CONFIG_SCSI_MYRS is not set
# CONFIG_VMWARE_PVSCSI is not set
# CONFIG_LIBFC is not set
# CONFIG_SCSI_SNIC is not set
# CONFIG_SCSI_DMX3191D is not set
# CONFIG_SCSI_FDOMAIN_PCI is not set
# CONFIG_SCSI_ISCI is not set
# CONFIG_SCSI_IPS is not set
# CONFIG_SCSI_INITIO is not set
# CONFIG_SCSI_INIA100 is not set
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
# CONFIG_SCSI_IPR is not set
# CONFIG_SCSI_QLOGIC_1280 is not set
# CONFIG_SCSI_QLA_FC is not set
# CONFIG_SCSI_QLA_ISCSI is not set
# CONFIG_SCSI_LPFC is not set
# CONFIG_SCSI_EFCT is not set
# CONFIG_SCSI_DC395x is not set
# CONFIG_SCSI_AM53C974 is not set
# CONFIG_SCSI_WD719X is not set
# CONFIG_SCSI_DEBUG is not set
# CONFIG_SCSI_PMCRAID is not set
# CONFIG_SCSI_PM8001 is not set
# CONFIG_SCSI_BFA_FC is not set
CONFIG_SCSI_VIRTIO=y
# CONFIG_SCSI_CHELSIO_FCOE is not set
# CONFIG_SCSI_LOWLEVEL_PCMCIA is not set
# CONFIG_SCSI_DH is not set
# end of SCSI device support

CONFIG_ATA=y
CONFIG_SATA_HOST=y
CONFIG_PATA_TIMINGS=y
CONFIG_ATA_VERBOSE_ERROR=y
CONFIG_ATA_FORCE=y
CONFIG_ATA_ACPI=y
# CONFIG_SATA_ZPODD is not set
CONFIG_SATA_PMP=y

#
# Controllers with non-SFF native interface
#
CONFIG_SATA_AHCI=y
CONFIG_SATA_MOBILE_LPM_POLICY=3
# CONFIG_SATA_AHCI_PLATFORM is not set
# CONFIG_AHCI_DWC is not set
# CONFIG_AHCI_CEVA is not set
# CONFIG_SATA_INIC162X is not set
# CONFIG_SATA_ACARD_AHCI is not set
# CONFIG_SATA_SIL24 is not set
CONFIG_ATA_SFF=y

#
# SFF controllers with custom DMA interface
#
# CONFIG_PDC_ADMA is not set
# CONFIG_SATA_QSTOR is not set
# CONFIG_SATA_SX4 is not set
CONFIG_ATA_BMDMA=y

#
# SATA SFF controllers with BMDMA
#
CONFIG_ATA_PIIX=y
# CONFIG_SATA_DWC is not set
# CONFIG_SATA_MV is not set
# CONFIG_SATA_NV is not set
# CONFIG_SATA_PROMISE is not set
# CONFIG_SATA_SIL is not set
# CONFIG_SATA_SIS is not set
# CONFIG_SATA_SVW is not set
# CONFIG_SATA_ULI is not set
# CONFIG_SATA_VIA is not set
# CONFIG_SATA_VITESSE is not set

#
# PATA SFF controllers with BMDMA
#
# CONFIG_PATA_ALI is not set
CONFIG_PATA_AMD=y
# CONFIG_PATA_ARTOP is not set
# CONFIG_PATA_ATIIXP is not set
# CONFIG_PATA_ATP867X is not set
# CONFIG_PATA_CMD64X is not set
# CONFIG_PATA_CYPRESS is not set
# CONFIG_PATA_EFAR is not set
# CONFIG_PATA_HPT366 is not set
# CONFIG_PATA_HPT37X is not set
# CONFIG_PATA_HPT3X2N is not set
# CONFIG_PATA_HPT3X3 is not set
# CONFIG_PATA_IT8213 is not set
# CONFIG_PATA_IT821X is not set
# CONFIG_PATA_JMICRON is not set
# CONFIG_PATA_MARVELL is not set
# CONFIG_PATA_NETCELL is not set
# CONFIG_PATA_NINJA32 is not set
# CONFIG_PATA_NS87415 is not set
CONFIG_PATA_OLDPIIX=y
# CONFIG_PATA_OPTIDMA is not set
# CONFIG_PATA_PDC2027X is not set
# CONFIG_PATA_PDC_OLD is not set
# CONFIG_PATA_RADISYS is not set
# CONFIG_PATA_RDC is not set
CONFIG_PATA_SCH=y
# CONFIG_PATA_SERVERWORKS is not set
# CONFIG_PATA_SIL680 is not set
# CONFIG_PATA_SIS is not set
# CONFIG_PATA_TOSHIBA is not set
# CONFIG_PATA_TRIFLEX is not set
# CONFIG_PATA_VIA is not set
# CONFIG_PATA_WINBOND is not set

#
# PIO-only SFF controllers
#
# CONFIG_PATA_CMD640_PCI is not set
# CONFIG_PATA_MPIIX is not set
# CONFIG_PATA_NS87410 is not set
# CONFIG_PATA_OPTI is not set
# CONFIG_PATA_PCMCIA is not set
# CONFIG_PATA_OF_PLATFORM is not set
# CONFIG_PATA_RZ1000 is not set

#
# Generic fallback / legacy drivers
#
# CONFIG_PATA_ACPI is not set
CONFIG_ATA_GENERIC=y
# CONFIG_PATA_LEGACY is not set
CONFIG_MD=y
CONFIG_BLK_DEV_MD=y
CONFIG_MD_BITMAP=y
# CONFIG_MD_LLBITMAP is not set
CONFIG_MD_AUTODETECT=y
CONFIG_MD_BITMAP_FILE=y
# CONFIG_MD_LINEAR is not set
CONFIG_MD_RAID0=y
CONFIG_MD_RAID1=y
CONFIG_MD_RAID10=y
CONFIG_MD_RAID456=y
# CONFIG_MD_CLUSTER is not set
CONFIG_BCACHE=y
# CONFIG_BCACHE_DEBUG is not set
# CONFIG_BCACHE_ASYNC_REGISTRATION is not set
CONFIG_BLK_DEV_DM_BUILTIN=y
CONFIG_BLK_DEV_DM=y
# CONFIG_DM_DEBUG is not set
CONFIG_DM_BUFIO=y
# CONFIG_DM_DEBUG_BLOCK_MANAGER_LOCKING is not set
CONFIG_DM_BIO_PRISON=y
CONFIG_DM_PERSISTENT_DATA=y
# CONFIG_DM_UNSTRIPED is not set
CONFIG_DM_CRYPT=y
CONFIG_DM_SNAPSHOT=y
CONFIG_DM_THIN_PROVISIONING=y
CONFIG_DM_CACHE=y
CONFIG_DM_CACHE_SMQ=y
CONFIG_DM_WRITECACHE=y
# CONFIG_DM_EBS is not set
# CONFIG_DM_ERA is not set
CONFIG_DM_CLONE=y
CONFIG_DM_MIRROR=y
# CONFIG_DM_LOG_USERSPACE is not set
CONFIG_DM_RAID=y
CONFIG_DM_ZERO=y
CONFIG_DM_MULTIPATH=y
CONFIG_DM_MULTIPATH_QL=y
CONFIG_DM_MULTIPATH_ST=y
# CONFIG_DM_MULTIPATH_HST is not set
# CONFIG_DM_MULTIPATH_IOA is not set
# CONFIG_DM_DELAY is not set
# CONFIG_DM_DUST is not set
# CONFIG_DM_INIT is not set
CONFIG_DM_UEVENT=y
CONFIG_DM_FLAKEY=y
CONFIG_DM_VERITY=y
# CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG is not set
CONFIG_DM_VERITY_FEC=y
# CONFIG_DM_SWITCH is not set
# CONFIG_DM_LOG_WRITES is not set
CONFIG_DM_INTEGRITY=y
CONFIG_DM_ZONED=y
CONFIG_DM_AUDIT=y
# CONFIG_DM_VDO is not set
# CONFIG_DM_PCACHE is not set
CONFIG_TARGET_CORE=y
# CONFIG_TCM_IBLOCK is not set
# CONFIG_TCM_FILEIO is not set
# CONFIG_TCM_PSCSI is not set
# CONFIG_LOOPBACK_TARGET is not set
# CONFIG_ISCSI_TARGET is not set
# CONFIG_SBP_TARGET is not set
# CONFIG_REMOTE_TARGET is not set
# CONFIG_FUSION is not set

#
# IEEE 1394 (FireWire) support
#
CONFIG_FIREWIRE=y
CONFIG_FIREWIRE_OHCI=y
CONFIG_FIREWIRE_SBP2=y
CONFIG_FIREWIRE_NET=y
# CONFIG_FIREWIRE_NOSY is not set
# end of IEEE 1394 (FireWire) support

# CONFIG_MACINTOSH_DRIVERS is not set
CONFIG_NETDEVICES=y
CONFIG_MII=y
CONFIG_NET_CORE=y
CONFIG_BONDING=y
CONFIG_DUMMY=y
CONFIG_WIREGUARD=y
# CONFIG_WIREGUARD_DEBUG is not set
# CONFIG_OVPN is not set
CONFIG_EQUALIZER=y
CONFIG_NET_FC=y
CONFIG_IFB=y
CONFIG_NET_TEAM=y
CONFIG_NET_TEAM_MODE_BROADCAST=y
CONFIG_NET_TEAM_MODE_ROUNDROBIN=y
CONFIG_NET_TEAM_MODE_RANDOM=y
CONFIG_NET_TEAM_MODE_ACTIVEBACKUP=y
CONFIG_NET_TEAM_MODE_LOADBALANCE=y
CONFIG_MACVLAN=y
CONFIG_MACVTAP=y
CONFIG_IPVLAN_L3S=y
CONFIG_IPVLAN=y
CONFIG_IPVTAP=y
CONFIG_VXLAN=y
CONFIG_GENEVE=y
CONFIG_BAREUDP=y
CONFIG_GTP=y
# CONFIG_PFCP is not set
# CONFIG_AMT is not set
CONFIG_MACSEC=y
CONFIG_NETCONSOLE=y
# CONFIG_NETCONSOLE_DYNAMIC is not set
# CONFIG_NETCONSOLE_EXTENDED_LOG is not set
CONFIG_NETPOLL=y
CONFIG_NET_POLL_CONTROLLER=y
CONFIG_TUN=y
CONFIG_TAP=y
CONFIG_TUN_VNET_CROSS_LE=y
CONFIG_VETH=y
CONFIG_VIRTIO_NET=y
CONFIG_NLMON=y
# CONFIG_NETKIT is not set
CONFIG_NET_VRF=y
CONFIG_VSOCKMON=y
# CONFIG_MHI_NET is not set
# CONFIG_ARCNET is not set
CONFIG_ATM_DRIVERS=y
# CONFIG_ATM_SOLOS is not set

#
# Distributed Switch Architecture drivers
#
# CONFIG_B53 is not set
# CONFIG_NET_DSA_BCM_SF2 is not set
# CONFIG_NET_DSA_LOOP is not set
# CONFIG_NET_DSA_HIRSCHMANN_HELLCREEK is not set
# CONFIG_NET_DSA_LANTIQ_GSWIP is not set
# CONFIG_NET_DSA_MXL_GSW1XX is not set
# CONFIG_NET_DSA_MT7530 is not set
# CONFIG_NET_DSA_MV88E6060 is not set
# CONFIG_NET_DSA_MICROCHIP_KSZ_COMMON is not set
# CONFIG_NET_DSA_MV88E6XXX is not set
# CONFIG_NET_DSA_MXL862 is not set
# CONFIG_NET_DSA_AR9331 is not set
# CONFIG_NET_DSA_QCA8K is not set
# CONFIG_NET_DSA_SJA1105 is not set
# CONFIG_NET_DSA_XRS700X_I2C is not set
# CONFIG_NET_DSA_XRS700X_MDIO is not set
# CONFIG_NET_DSA_REALTEK is not set
# CONFIG_NET_DSA_KS8995 is not set
# CONFIG_NET_DSA_SMSC_LAN9303_I2C is not set
# CONFIG_NET_DSA_SMSC_LAN9303_MDIO is not set
# CONFIG_NET_DSA_VITESSE_VSC73XX_SPI is not set
# CONFIG_NET_DSA_VITESSE_VSC73XX_PLATFORM is not set
# CONFIG_NET_DSA_YT921X is not set
# end of Distributed Switch Architecture drivers

CONFIG_ETHERNET=y
# CONFIG_NET_VENDOR_3COM is not set
# CONFIG_NET_VENDOR_ADAPTEC is not set
# CONFIG_NET_VENDOR_AGERE is not set
# CONFIG_NET_VENDOR_ALACRITECH is not set
# CONFIG_ALTERA_TSE is not set
CONFIG_NET_VENDOR_AMAZON=y
# CONFIG_ENA_ETHERNET is not set
# CONFIG_NET_VENDOR_AMD is not set
# CONFIG_NET_VENDOR_AQUANTIA is not set
# CONFIG_NET_VENDOR_ARC is not set
CONFIG_NET_VENDOR_ASIX=y
# CONFIG_SPI_AX88796C is not set
# CONFIG_NET_VENDOR_ATHEROS is not set
# CONFIG_CX_ECAT is not set
# CONFIG_NET_VENDOR_BROADCOM is not set
# CONFIG_NET_VENDOR_CADENCE is not set
# CONFIG_NET_VENDOR_CAVIUM is not set
# CONFIG_NET_VENDOR_CHELSIO is not set
CONFIG_NET_VENDOR_CISCO=y
# CONFIG_ENIC is not set
# CONFIG_NET_VENDOR_CORTINA is not set
CONFIG_NET_VENDOR_DAVICOM=y
# CONFIG_DM9051 is not set
# CONFIG_NET_VENDOR_DEC is not set
# CONFIG_NET_VENDOR_DLINK is not set
# CONFIG_NET_VENDOR_EMULEX is not set
CONFIG_NET_VENDOR_ENGLEDER=y
# CONFIG_TSNEP is not set
# CONFIG_NET_VENDOR_EZCHIP is not set
CONFIG_NET_VENDOR_FUNGIBLE=y
# CONFIG_FUN_ETH is not set
CONFIG_NET_VENDOR_GOOGLE=y
CONFIG_GVE=y
CONFIG_NET_VENDOR_HISILICON=y
# CONFIG_HIBMCGE is not set
# CONFIG_NET_VENDOR_HUAWEI is not set
CONFIG_NET_VENDOR_I825XX=y
CONFIG_NET_VENDOR_INTEL=y
CONFIG_E100=y
CONFIG_E1000=y
CONFIG_E1000E=y
CONFIG_E1000E_HWTS=y
# CONFIG_IGB is not set
# CONFIG_IGBVF is not set
# CONFIG_IXGBE is not set
# CONFIG_IXGBEVF is not set
# CONFIG_I40E is not set
# CONFIG_I40EVF is not set
# CONFIG_ICE is not set
# CONFIG_FM10K is not set
# CONFIG_IGC is not set
# CONFIG_IDPF is not set
# CONFIG_JME is not set
# CONFIG_NET_VENDOR_ADI is not set
CONFIG_NET_VENDOR_LITEX=y
# CONFIG_LITEX_LITEETH is not set
# CONFIG_NET_VENDOR_MARVELL is not set
CONFIG_NET_VENDOR_MELLANOX=y
# CONFIG_MLX4_EN is not set
CONFIG_MLX4_CORE=y
# CONFIG_MLX4_DEBUG is not set
# CONFIG_MLX4_CORE_GEN2 is not set
# CONFIG_MLX5_CORE is not set
# CONFIG_MLXSW_CORE is not set
# CONFIG_MLXFW is not set
CONFIG_NET_VENDOR_META=y
# CONFIG_FBNIC is not set
# CONFIG_NET_VENDOR_MICREL is not set
# CONFIG_NET_VENDOR_MICROCHIP is not set
# CONFIG_NET_VENDOR_MICROSEMI is not set
CONFIG_NET_VENDOR_MICROSOFT=y
CONFIG_NET_VENDOR_MUCSE=y
# CONFIG_MGBE is not set
# CONFIG_NET_VENDOR_MYRI is not set
# CONFIG_FEALNX is not set
# CONFIG_NET_VENDOR_NI is not set
# CONFIG_NET_VENDOR_NATSEMI is not set
# CONFIG_NET_VENDOR_NETRONOME is not set
# CONFIG_NET_VENDOR_NVIDIA is not set
# CONFIG_NET_VENDOR_OKI is not set
# CONFIG_ETHOC is not set
# CONFIG_NET_VENDOR_PENSANDO is not set
# CONFIG_NET_VENDOR_QLOGIC is not set
# CONFIG_NET_VENDOR_BROCADE is not set
# CONFIG_NET_VENDOR_QUALCOMM is not set
# CONFIG_NET_VENDOR_RDC is not set
# CONFIG_NET_VENDOR_REALTEK is not set
# CONFIG_NET_VENDOR_RENESAS is not set
# CONFIG_NET_VENDOR_ROCKER is not set
# CONFIG_NET_VENDOR_SAMSUNG is not set
# CONFIG_NET_VENDOR_SEEQ is not set
# CONFIG_NET_VENDOR_SILAN is not set
# CONFIG_NET_VENDOR_SIS is not set
# CONFIG_NET_VENDOR_SOLARFLARE is not set
# CONFIG_NET_VENDOR_SMSC is not set
# CONFIG_NET_VENDOR_SOCIONEXT is not set
# CONFIG_NET_VENDOR_STMICRO is not set
# CONFIG_NET_VENDOR_SUN is not set
# CONFIG_NET_VENDOR_SYNOPSYS is not set
# CONFIG_NET_VENDOR_TEHUTI is not set
# CONFIG_NET_VENDOR_TI is not set
CONFIG_NET_VENDOR_VERTEXCOM=y
# CONFIG_MSE102X is not set
# CONFIG_NET_VENDOR_VIA is not set
CONFIG_NET_VENDOR_WANGXUN=y
# CONFIG_NGBE is not set
# CONFIG_TXGBE is not set
# CONFIG_TXGBEVF is not set
# CONFIG_NGBEVF is not set
# CONFIG_NET_VENDOR_WIZNET is not set
# CONFIG_NET_VENDOR_XILINX is not set
# CONFIG_NET_VENDOR_XIRCOM is not set
CONFIG_FDDI=y
# CONFIG_DEFXX is not set
# CONFIG_SKFP is not set
CONFIG_PHYLINK=y
CONFIG_PHYLIB=y
CONFIG_SWPHY=y
CONFIG_PHY_PACKAGE=y
# CONFIG_LED_TRIGGER_PHY is not set
CONFIG_PHYLIB_LEDS=y
CONFIG_FIXED_PHY=y
# CONFIG_SFP is not set

#
# MII PHY device drivers
#
# CONFIG_AS21XXX_PHY is not set
# CONFIG_AIR_EN8811H_PHY is not set
# CONFIG_AMD_PHY is not set
# CONFIG_ADIN_PHY is not set
# CONFIG_ADIN1100_PHY is not set
# CONFIG_AQUANTIA_PHY is not set
CONFIG_AX88796B_PHY=y
# CONFIG_BROADCOM_PHY is not set
# CONFIG_BCM54140_PHY is not set
# CONFIG_BCM7XXX_PHY is not set
# CONFIG_BCM84881_PHY is not set
# CONFIG_BCM87XX_PHY is not set
# CONFIG_CICADA_PHY is not set
# CONFIG_CORTINA_PHY is not set
# CONFIG_DAVICOM_PHY is not set
# CONFIG_ICPLUS_PHY is not set
# CONFIG_LXT_PHY is not set
# CONFIG_INTEL_XWAY_PHY is not set
# CONFIG_LSI_ET1011C_PHY is not set
# CONFIG_MARVELL_PHY is not set
# CONFIG_MARVELL_10G_PHY is not set
# CONFIG_MARVELL_88Q2XXX_PHY is not set
# CONFIG_MARVELL_88X2222_PHY is not set
# CONFIG_MAXLINEAR_GPHY is not set
# CONFIG_MAXLINEAR_86110_PHY is not set
# CONFIG_MEDIATEK_GE_PHY is not set
# CONFIG_MICREL_PHY is not set
# CONFIG_MICROCHIP_T1S_PHY is not set
CONFIG_MICROCHIP_PHY=y
# CONFIG_MICROCHIP_T1_PHY is not set
# CONFIG_MICROSEMI_PHY is not set
# CONFIG_MOTORCOMM_PHY is not set
# CONFIG_NATIONAL_PHY is not set
# CONFIG_NXP_CBTX_PHY is not set
# CONFIG_NXP_C45_TJA11XX_PHY is not set
# CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_NCN26000_PHY is not set
# CONFIG_AT803X_PHY is not set
# CONFIG_QCA83XX_PHY is not set
# CONFIG_QCA808X_PHY is not set
# CONFIG_QCA807X_PHY is not set
# CONFIG_QSEMI_PHY is not set
CONFIG_REALTEK_PHY=y
# CONFIG_REALTEK_PHY_HWMON is not set
# CONFIG_RENESAS_PHY is not set
# CONFIG_ROCKCHIP_PHY is not set
CONFIG_SMSC_PHY=y
# CONFIG_STE10XP is not set
# CONFIG_TERANETICS_PHY is not set
# CONFIG_DP83822_PHY is not set
# CONFIG_DP83TC811_PHY is not set
# CONFIG_DP83848_PHY is not set
# CONFIG_DP83867_PHY is not set
# CONFIG_DP83869_PHY is not set
# CONFIG_DP83TD510_PHY is not set
# CONFIG_DP83TG720_PHY is not set
# CONFIG_VITESSE_PHY is not set
# CONFIG_XILINX_GMII2RGMII is not set
# CONFIG_PSE_CONTROLLER is not set
CONFIG_CAN_DEV=y
CONFIG_CAN_VCAN=y
CONFIG_CAN_VXCAN=y
CONFIG_CAN_NETLINK=y
CONFIG_CAN_CALC_BITTIMING=y
CONFIG_CAN_RX_OFFLOAD=y
# CONFIG_CAN_CAN327 is not set
# CONFIG_CAN_DUMMY is not set
# CONFIG_CAN_FLEXCAN is not set
# CONFIG_CAN_GRCAN is not set
# CONFIG_CAN_KVASER_PCIEFD is not set
CONFIG_CAN_SLCAN=y
# CONFIG_CAN_C_CAN is not set
# CONFIG_CAN_CC770 is not set
# CONFIG_CAN_CTUCANFD_PCI is not set
# CONFIG_CAN_CTUCANFD_PLATFORM is not set
# CONFIG_CAN_ESD_402_PCI is not set
CONFIG_CAN_IFI_CANFD=y
# CONFIG_CAN_M_CAN is not set
# CONFIG_CAN_PEAK_PCIEFD is not set
# CONFIG_CAN_SJA1000 is not set
# CONFIG_CAN_SOFTING is not set

#
# CAN SPI interfaces
#
# CONFIG_CAN_HI311X is not set
# CONFIG_CAN_MCP251X is not set
# CONFIG_CAN_MCP251XFD is not set
# end of CAN SPI interfaces

#
# CAN USB interfaces
#
CONFIG_CAN_8DEV_USB=y
CONFIG_CAN_EMS_USB=y
CONFIG_CAN_ESD_USB=y
CONFIG_CAN_ETAS_ES58X=y
CONFIG_CAN_F81604=y
CONFIG_CAN_GS_USB=y
CONFIG_CAN_KVASER_USB=y
CONFIG_CAN_MCBA_USB=y
CONFIG_CAN_PEAK_USB=y
CONFIG_CAN_UCAN=y
# end of CAN USB interfaces

# CONFIG_CAN_DEBUG_DEVICES is not set

#
# MCTP Device Drivers
#
# CONFIG_MCTP_SERIAL is not set
# CONFIG_MCTP_TRANSPORT_I2C is not set
# CONFIG_MCTP_TRANSPORT_USB is not set
# end of MCTP Device Drivers

CONFIG_FWNODE_MDIO=y
CONFIG_OF_MDIO=y
CONFIG_ACPI_MDIO=y
# CONFIG_MDIO_BITBANG is not set
# CONFIG_MDIO_BCM_UNIMAC is not set
# CONFIG_MDIO_HISI_FEMAC is not set
CONFIG_MDIO_MVUSB=y
# CONFIG_MDIO_MSCC_MIIM is not set
# CONFIG_MDIO_OCTEON is not set
# CONFIG_MDIO_IPQ4019 is not set
# CONFIG_MDIO_IPQ8064 is not set
# CONFIG_MDIO_THUNDER is not set

#
# MDIO Multiplexers
#
# CONFIG_MDIO_BUS_MUX_GPIO is not set
# CONFIG_MDIO_BUS_MUX_MULTIPLEXER is not set
# CONFIG_MDIO_BUS_MUX_MMIOREG is not set

#
# PCS device drivers
#
# CONFIG_PCS_XPCS is not set
# end of PCS device drivers

# CONFIG_PLIP is not set
CONFIG_PPP=y
CONFIG_PPP_BSDCOMP=y
CONFIG_PPP_DEFLATE=y
CONFIG_PPP_FILTER=y
CONFIG_PPP_MPPE=y
CONFIG_PPP_MULTILINK=y
CONFIG_PPPOATM=y
CONFIG_PPPOE=y
CONFIG_PPPOE_HASH_BITS_1=y
# CONFIG_PPPOE_HASH_BITS_2 is not set
# CONFIG_PPPOE_HASH_BITS_4 is not set
# CONFIG_PPPOE_HASH_BITS_8 is not set
CONFIG_PPPOE_HASH_BITS=1
CONFIG_PPTP=y
CONFIG_PPPOL2TP=y
CONFIG_PPP_ASYNC=y
CONFIG_PPP_SYNC_TTY=y
CONFIG_SLIP=y
CONFIG_SLHC=y
CONFIG_SLIP_COMPRESSED=y
CONFIG_SLIP_SMART=y
CONFIG_SLIP_MODE_SLIP6=y
CONFIG_USB_NET_DRIVERS=y
CONFIG_USB_CATC=y
CONFIG_USB_KAWETH=y
CONFIG_USB_PEGASUS=y
CONFIG_USB_RTL8150=y
CONFIG_USB_RTL8152=y
CONFIG_USB_LAN78XX=y
CONFIG_USB_USBNET=y
CONFIG_USB_NET_AX8817X=y
CONFIG_USB_NET_AX88179_178A=y
CONFIG_USB_NET_CDCETHER=y
CONFIG_USB_NET_CDC_EEM=y
CONFIG_USB_NET_CDC_NCM=y
CONFIG_USB_NET_HUAWEI_CDC_NCM=y
CONFIG_USB_NET_CDC_MBIM=y
CONFIG_USB_NET_DM9601=y
CONFIG_USB_NET_SR9700=y
CONFIG_USB_NET_SR9800=y
CONFIG_USB_NET_SMSC75XX=y
CONFIG_USB_NET_SMSC95XX=y
CONFIG_USB_NET_GL620A=y
CONFIG_USB_NET_NET1080=y
CONFIG_USB_NET_PLUSB=y
CONFIG_USB_NET_MCS7830=y
CONFIG_USB_NET_RNDIS_HOST=y
CONFIG_USB_NET_CDC_SUBSET_ENABLE=y
CONFIG_USB_NET_CDC_SUBSET=y
CONFIG_USB_ALI_M5632=y
CONFIG_USB_AN2720=y
CONFIG_USB_BELKIN=y
CONFIG_USB_ARMLINUX=y
CONFIG_USB_EPSON2888=y
CONFIG_USB_KC2190=y
CONFIG_USB_NET_ZAURUS=y
CONFIG_USB_NET_CX82310_ETH=y
CONFIG_USB_NET_KALMIA=y
CONFIG_USB_NET_QMI_WWAN=y
CONFIG_USB_HSO=y
CONFIG_USB_NET_INT51X1=y
CONFIG_USB_CDC_PHONET=y
CONFIG_USB_IPHETH=y
CONFIG_USB_SIERRA_NET=y
CONFIG_USB_VL600=y
CONFIG_USB_NET_CH9200=y
CONFIG_USB_NET_AQC111=y
CONFIG_USB_RTL8153_ECM=y
CONFIG_WLAN=y
CONFIG_WLAN_VENDOR_ADMTEK=y
# CONFIG_ADM8211 is not set
CONFIG_ATH_COMMON=y
CONFIG_WLAN_VENDOR_ATH=y
# CONFIG_ATH_DEBUG is not set
# CONFIG_ATH5K is not set
# CONFIG_ATH5K_PCI is not set
CONFIG_ATH9K_HW=y
CONFIG_ATH9K_COMMON=y
CONFIG_ATH9K_COMMON_DEBUG=y
CONFIG_ATH9K_BTCOEX_SUPPORT=y
CONFIG_ATH9K=y
CONFIG_ATH9K_PCI=y
CONFIG_ATH9K_AHB=y
CONFIG_ATH9K_DEBUGFS=y
# CONFIG_ATH9K_STATION_STATISTICS is not set
CONFIG_ATH9K_DYNACK=y
# CONFIG_ATH9K_WOW is not set
CONFIG_ATH9K_RFKILL=y
CONFIG_ATH9K_CHANNEL_CONTEXT=y
CONFIG_ATH9K_PCOEM=y
# CONFIG_ATH9K_PCI_NO_EEPROM is not set
CONFIG_ATH9K_HTC=y
CONFIG_ATH9K_HTC_DEBUGFS=y
# CONFIG_ATH9K_HWRNG is not set
CONFIG_ATH9K_COMMON_SPECTRAL=y
CONFIG_CARL9170=y
CONFIG_CARL9170_LEDS=y
# CONFIG_CARL9170_DEBUGFS is not set
CONFIG_CARL9170_WPC=y
CONFIG_CARL9170_HWRNG=y
CONFIG_ATH6KL=y
# CONFIG_ATH6KL_SDIO is not set
CONFIG_ATH6KL_USB=y
# CONFIG_ATH6KL_DEBUG is not set
# CONFIG_ATH6KL_TRACING is not set
CONFIG_AR5523=y
# CONFIG_WIL6210 is not set
CONFIG_ATH10K=y
CONFIG_ATH10K_CE=y
CONFIG_ATH10K_PCI=y
# CONFIG_ATH10K_AHB is not set
# CONFIG_ATH10K_SDIO is not set
CONFIG_ATH10K_USB=y
# CONFIG_ATH10K_DEBUG is not set
# CONFIG_ATH10K_DEBUGFS is not set
CONFIG_ATH10K_LEDS=y
# CONFIG_ATH10K_TRACING is not set
# CONFIG_WCN36XX is not set
CONFIG_ATH11K=y
# CONFIG_ATH11K_PCI is not set
# CONFIG_ATH11K_DEBUG is not set
# CONFIG_ATH11K_DEBUGFS is not set
# CONFIG_ATH11K_TRACING is not set
# CONFIG_ATH12K is not set
# CONFIG_WLAN_VENDOR_ATMEL is not set
# CONFIG_WLAN_VENDOR_BROADCOM is not set
# CONFIG_WLAN_VENDOR_INTEL is not set
# CONFIG_WLAN_VENDOR_INTERSIL is not set
# CONFIG_WLAN_VENDOR_MARVELL is not set
# CONFIG_WLAN_VENDOR_MEDIATEK is not set
# CONFIG_WLAN_VENDOR_MICROCHIP is not set
CONFIG_WLAN_VENDOR_PURELIFI=y
CONFIG_PLFXLC=y
# CONFIG_WLAN_VENDOR_RALINK is not set
# CONFIG_WLAN_VENDOR_REALTEK is not set
# CONFIG_WLAN_VENDOR_RSI is not set
CONFIG_WLAN_VENDOR_SILABS=y
# CONFIG_WFX is not set
# CONFIG_WLAN_VENDOR_ST is not set
# CONFIG_WLAN_VENDOR_TI is not set
# CONFIG_WLAN_VENDOR_ZYDAS is not set
# CONFIG_WLAN_VENDOR_QUANTENNA is not set
CONFIG_MAC80211_HWSIM=y
CONFIG_VIRT_WIFI=y
CONFIG_WAN=y
CONFIG_HDLC=y
CONFIG_HDLC_RAW=y
CONFIG_HDLC_RAW_ETH=y
CONFIG_HDLC_CISCO=y
CONFIG_HDLC_FR=y
CONFIG_HDLC_PPP=y
CONFIG_HDLC_X25=y
# CONFIG_FRAMER is not set
# CONFIG_PCI200SYN is not set
# CONFIG_WANXL is not set
# CONFIG_PC300TOO is not set
# CONFIG_FARSYNC is not set
CONFIG_LAPBETHER=y
CONFIG_IEEE802154_DRIVERS=y
# CONFIG_IEEE802154_FAKELB is not set
# CONFIG_IEEE802154_AT86RF230 is not set
# CONFIG_IEEE802154_MRF24J40 is not set
# CONFIG_IEEE802154_CC2520 is not set
CONFIG_IEEE802154_ATUSB=y
# CONFIG_IEEE802154_ADF7242 is not set
# CONFIG_IEEE802154_CA8210 is not set
# CONFIG_IEEE802154_MCR20A is not set
CONFIG_IEEE802154_HWSIM=y

#
# Wireless WAN
#
CONFIG_WWAN=y
# CONFIG_WWAN_DEBUGFS is not set
# CONFIG_WWAN_HWSIM is not set
CONFIG_MHI_WWAN_CTRL=y
# CONFIG_MHI_WWAN_MBIM is not set
# CONFIG_IOSM is not set
# CONFIG_MTK_T7XX is not set
# end of Wireless WAN

CONFIG_VMXNET3=y
# CONFIG_FUJITSU_ES is not set
CONFIG_USB4_NET=y
CONFIG_NETDEVSIM=y
CONFIG_NET_FAILOVER=y

#
# Input device support
#
CONFIG_INPUT=y
CONFIG_INPUT_LEDS=y
CONFIG_INPUT_FF_MEMLESS=y
CONFIG_INPUT_SPARSEKMAP=y
# CONFIG_INPUT_MATRIXKMAP is not set
CONFIG_INPUT_VIVALDIFMAP=y

#
# Userland interfaces
#
CONFIG_INPUT_MOUSEDEV=y
CONFIG_INPUT_MOUSEDEV_PSAUX=y
CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
CONFIG_INPUT_JOYDEV=y
CONFIG_INPUT_EVDEV=y

#
# Input Device Drivers
#
CONFIG_INPUT_KEYBOARD=y
# CONFIG_KEYBOARD_ADC is not set
# CONFIG_KEYBOARD_ADP5588 is not set
CONFIG_KEYBOARD_ATKBD=y
# CONFIG_KEYBOARD_QT1050 is not set
# CONFIG_KEYBOARD_QT1070 is not set
# CONFIG_KEYBOARD_QT2160 is not set
# CONFIG_KEYBOARD_DLINK_DIR685 is not set
# CONFIG_KEYBOARD_LKKBD is not set
# CONFIG_KEYBOARD_GPIO is not set
# CONFIG_KEYBOARD_GPIO_POLLED is not set
# CONFIG_KEYBOARD_TCA8418 is not set
# CONFIG_KEYBOARD_MATRIX is not set
# CONFIG_KEYBOARD_CHARLIEPLEX is not set
# CONFIG_KEYBOARD_LM8323 is not set
# CONFIG_KEYBOARD_LM8333 is not set
# CONFIG_KEYBOARD_MAX7359 is not set
# CONFIG_KEYBOARD_MPR121 is not set
# CONFIG_KEYBOARD_NEWTON is not set
# CONFIG_KEYBOARD_OPENCORES is not set
# CONFIG_KEYBOARD_PINEPHONE is not set
# CONFIG_KEYBOARD_SAMSUNG is not set
# CONFIG_KEYBOARD_STOWAWAY is not set
# CONFIG_KEYBOARD_SUNKBD is not set
# CONFIG_KEYBOARD_OMAP4 is not set
# CONFIG_KEYBOARD_TM2_TOUCHKEY is not set
# CONFIG_KEYBOARD_TWL4030 is not set
# CONFIG_KEYBOARD_XTKBD is not set
# CONFIG_KEYBOARD_CAP11XX is not set
# CONFIG_KEYBOARD_BCM is not set
# CONFIG_KEYBOARD_CYPRESS_SF is not set
CONFIG_INPUT_MOUSE=y
CONFIG_MOUSE_PS2=y
CONFIG_MOUSE_PS2_ALPS=y
CONFIG_MOUSE_PS2_BYD=y
CONFIG_MOUSE_PS2_LOGIPS2PP=y
CONFIG_MOUSE_PS2_SYNAPTICS=y
CONFIG_MOUSE_PS2_SYNAPTICS_SMBUS=y
CONFIG_MOUSE_PS2_CYPRESS=y
CONFIG_MOUSE_PS2_LIFEBOOK=y
CONFIG_MOUSE_PS2_TRACKPOINT=y
# CONFIG_MOUSE_PS2_ELANTECH is not set
# CONFIG_MOUSE_PS2_SENTELIC is not set
# CONFIG_MOUSE_PS2_TOUCHKIT is not set
CONFIG_MOUSE_PS2_FOCALTECH=y
# CONFIG_MOUSE_PS2_VMMOUSE is not set
CONFIG_MOUSE_PS2_SMBUS=y
# CONFIG_MOUSE_SERIAL is not set
CONFIG_MOUSE_APPLETOUCH=y
CONFIG_MOUSE_BCM5974=y
# CONFIG_MOUSE_CYAPA is not set
# CONFIG_MOUSE_ELAN_I2C is not set
# CONFIG_MOUSE_VSXXXAA is not set
# CONFIG_MOUSE_GPIO is not set
# CONFIG_MOUSE_SYNAPTICS_I2C is not set
CONFIG_MOUSE_SYNAPTICS_USB=y
CONFIG_INPUT_JOYSTICK=y
# CONFIG_JOYSTICK_ANALOG is not set
# CONFIG_JOYSTICK_A3D is not set
# CONFIG_JOYSTICK_ADC is not set
# CONFIG_JOYSTICK_ADI is not set
# CONFIG_JOYSTICK_COBRA is not set
# CONFIG_JOYSTICK_GF2K is not set
# CONFIG_JOYSTICK_GRIP is not set
# CONFIG_JOYSTICK_GRIP_MP is not set
# CONFIG_JOYSTICK_GUILLEMOT is not set
# CONFIG_JOYSTICK_INTERACT is not set
# CONFIG_JOYSTICK_SIDEWINDER is not set
# CONFIG_JOYSTICK_TMDC is not set
CONFIG_JOYSTICK_IFORCE=y
CONFIG_JOYSTICK_IFORCE_USB=y
# CONFIG_JOYSTICK_IFORCE_232 is not set
# CONFIG_JOYSTICK_WARRIOR is not set
# CONFIG_JOYSTICK_MAGELLAN is not set
# CONFIG_JOYSTICK_SPACEORB is not set
# CONFIG_JOYSTICK_SPACEBALL is not set
# CONFIG_JOYSTICK_STINGER is not set
# CONFIG_JOYSTICK_TWIDJOY is not set
# CONFIG_JOYSTICK_ZHENHUA is not set
# CONFIG_JOYSTICK_DB9 is not set
# CONFIG_JOYSTICK_GAMECON is not set
# CONFIG_JOYSTICK_TURBOGRAFX is not set
# CONFIG_JOYSTICK_AS5011 is not set
# CONFIG_JOYSTICK_JOYDUMP is not set
CONFIG_JOYSTICK_XPAD=y
CONFIG_JOYSTICK_XPAD_FF=y
CONFIG_JOYSTICK_XPAD_LEDS=y
# CONFIG_JOYSTICK_WALKERA0701 is not set
# CONFIG_JOYSTICK_PSXPAD_SPI is not set
CONFIG_JOYSTICK_PXRC=y
# CONFIG_JOYSTICK_QWIIC is not set
# CONFIG_JOYSTICK_FSIA6B is not set
# CONFIG_JOYSTICK_SENSEHAT is not set
# CONFIG_JOYSTICK_SEESAW is not set
CONFIG_INPUT_TABLET=y
CONFIG_TABLET_USB_ACECAD=y
CONFIG_TABLET_USB_AIPTEK=y
CONFIG_TABLET_USB_HANWANG=y
CONFIG_TABLET_USB_KBTAB=y
CONFIG_TABLET_USB_PEGASUS=y
# CONFIG_TABLET_SERIAL_WACOM4 is not set
CONFIG_INPUT_TOUCHSCREEN=y
# CONFIG_TOUCHSCREEN_ADS7846 is not set
# CONFIG_TOUCHSCREEN_AD7877 is not set
# CONFIG_TOUCHSCREEN_AD7879 is not set
# CONFIG_TOUCHSCREEN_ADC is not set
# CONFIG_TOUCHSCREEN_AR1021_I2C is not set
# CONFIG_TOUCHSCREEN_ATMEL_MXT is not set
# CONFIG_TOUCHSCREEN_AUO_PIXCIR is not set
# CONFIG_TOUCHSCREEN_BU21013 is not set
# CONFIG_TOUCHSCREEN_BU21029 is not set
# CONFIG_TOUCHSCREEN_CHIPONE_ICN8318 is not set
# CONFIG_TOUCHSCREEN_CHIPONE_ICN8505 is not set
# CONFIG_TOUCHSCREEN_CY8CTMA140 is not set
# CONFIG_TOUCHSCREEN_CY8CTMG110 is not set
# CONFIG_TOUCHSCREEN_CYTTSP_CORE is not set
# CONFIG_TOUCHSCREEN_CYTTSP5 is not set
# CONFIG_TOUCHSCREEN_DYNAPRO is not set
# CONFIG_TOUCHSCREEN_HAMPSHIRE is not set
# CONFIG_TOUCHSCREEN_EETI is not set
# CONFIG_TOUCHSCREEN_EGALAX is not set
# CONFIG_TOUCHSCREEN_EGALAX_SERIAL is not set
# CONFIG_TOUCHSCREEN_EXC3000 is not set
# CONFIG_TOUCHSCREEN_FUJITSU is not set
# CONFIG_TOUCHSCREEN_GOODIX is not set
# CONFIG_TOUCHSCREEN_GOODIX_BERLIN_I2C is not set
# CONFIG_TOUCHSCREEN_GOODIX_BERLIN_SPI is not set
# CONFIG_TOUCHSCREEN_HIDEEP is not set
# CONFIG_TOUCHSCREEN_HIMAX_HX852X is not set
# CONFIG_TOUCHSCREEN_HYCON_HY46XX is not set
# CONFIG_TOUCHSCREEN_HYNITRON_CSTXXX is not set
# CONFIG_TOUCHSCREEN_HYNITRON_CST816X is not set
# CONFIG_TOUCHSCREEN_ILI210X is not set
# CONFIG_TOUCHSCREEN_ILITEK is not set
# CONFIG_TOUCHSCREEN_S6SY761 is not set
# CONFIG_TOUCHSCREEN_GUNZE is not set
# CONFIG_TOUCHSCREEN_EKTF2127 is not set
# CONFIG_TOUCHSCREEN_ELAN is not set
# CONFIG_TOUCHSCREEN_ELO is not set
# CONFIG_TOUCHSCREEN_WACOM_W8001 is not set
# CONFIG_TOUCHSCREEN_WACOM_I2C is not set
# CONFIG_TOUCHSCREEN_MAX11801 is not set
# CONFIG_TOUCHSCREEN_MMS114 is not set
# CONFIG_TOUCHSCREEN_MELFAS_MIP4 is not set
# CONFIG_TOUCHSCREEN_MSG2638 is not set
# CONFIG_TOUCHSCREEN_MTOUCH is not set
# CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS is not set
# CONFIG_TOUCHSCREEN_IMAGIS is not set
# CONFIG_TOUCHSCREEN_IMX6UL_TSC is not set
# CONFIG_TOUCHSCREEN_INEXIO is not set
# CONFIG_TOUCHSCREEN_PENMOUNT is not set
# CONFIG_TOUCHSCREEN_EDT_FT5X06 is not set
# CONFIG_TOUCHSCREEN_TOUCHRIGHT is not set
# CONFIG_TOUCHSCREEN_TOUCHWIN is not set
# CONFIG_TOUCHSCREEN_PIXCIR is not set
# CONFIG_TOUCHSCREEN_WDT87XX_I2C is not set
CONFIG_TOUCHSCREEN_USB_COMPOSITE=y
CONFIG_TOUCHSCREEN_USB_EGALAX=y
CONFIG_TOUCHSCREEN_USB_PANJIT=y
CONFIG_TOUCHSCREEN_USB_3M=y
CONFIG_TOUCHSCREEN_USB_ITM=y
CONFIG_TOUCHSCREEN_USB_ETURBO=y
CONFIG_TOUCHSCREEN_USB_GUNZE=y
CONFIG_TOUCHSCREEN_USB_DMC_TSC10=y
CONFIG_TOUCHSCREEN_USB_IRTOUCH=y
CONFIG_TOUCHSCREEN_USB_IDEALTEK=y
CONFIG_TOUCHSCREEN_USB_GENERAL_TOUCH=y
CONFIG_TOUCHSCREEN_USB_GOTOP=y
CONFIG_TOUCHSCREEN_USB_JASTEC=y
CONFIG_TOUCHSCREEN_USB_ELO=y
CONFIG_TOUCHSCREEN_USB_E2I=y
CONFIG_TOUCHSCREEN_USB_ZYTRONIC=y
CONFIG_TOUCHSCREEN_USB_ETT_TC45USB=y
CONFIG_TOUCHSCREEN_USB_NEXIO=y
CONFIG_TOUCHSCREEN_USB_EASYTOUCH=y
# CONFIG_TOUCHSCREEN_TOUCHIT213 is not set
# CONFIG_TOUCHSCREEN_TSC_SERIO is not set
# CONFIG_TOUCHSCREEN_TSC2004 is not set
# CONFIG_TOUCHSCREEN_TSC2005 is not set
# CONFIG_TOUCHSCREEN_TSC2007 is not set
# CONFIG_TOUCHSCREEN_RM_TS is not set
# CONFIG_TOUCHSCREEN_SILEAD is not set
# CONFIG_TOUCHSCREEN_SIS_I2C is not set
# CONFIG_TOUCHSCREEN_ST1232 is not set
# CONFIG_TOUCHSCREEN_STMFTS is not set
CONFIG_TOUCHSCREEN_SUR40=y
# CONFIG_TOUCHSCREEN_SURFACE3_SPI is not set
# CONFIG_TOUCHSCREEN_SX8654 is not set
# CONFIG_TOUCHSCREEN_TPS6507X is not set
# CONFIG_TOUCHSCREEN_ZET6223 is not set
# CONFIG_TOUCHSCREEN_ZFORCE is not set
# CONFIG_TOUCHSCREEN_COLIBRI_VF50 is not set
# CONFIG_TOUCHSCREEN_ROHM_BU21023 is not set
# CONFIG_TOUCHSCREEN_IQS5XX is not set
# CONFIG_TOUCHSCREEN_IQS7211 is not set
# CONFIG_TOUCHSCREEN_ZINITIX is not set
# CONFIG_TOUCHSCREEN_HIMAX_HX83112B is not set
CONFIG_INPUT_MISC=y
# CONFIG_INPUT_AD714X is not set
# CONFIG_INPUT_ATMEL_CAPTOUCH is not set
# CONFIG_INPUT_AW86927 is not set
# CONFIG_INPUT_BMA150 is not set
# CONFIG_INPUT_E3X0_BUTTON is not set
# CONFIG_INPUT_PCSPKR is not set
# CONFIG_INPUT_MMA8450 is not set
# CONFIG_INPUT_APANEL is not set
# CONFIG_INPUT_GPIO_BEEPER is not set
# CONFIG_INPUT_GPIO_DECODER is not set
# CONFIG_INPUT_GPIO_VIBRA is not set
# CONFIG_INPUT_ATLAS_BTNS is not set
CONFIG_INPUT_ATI_REMOTE2=y
CONFIG_INPUT_KEYSPAN_REMOTE=y
# CONFIG_INPUT_KXTJ9 is not set
CONFIG_INPUT_POWERMATE=y
CONFIG_INPUT_YEALINK=y
CONFIG_INPUT_CM109=y
# CONFIG_INPUT_REGULATOR_HAPTIC is not set
# CONFIG_INPUT_RETU_PWRBUTTON is not set
# CONFIG_INPUT_TWL4030_PWRBUTTON is not set
# CONFIG_INPUT_TWL4030_VIBRA is not set
CONFIG_INPUT_UINPUT=y
# CONFIG_INPUT_PCF8574 is not set
# CONFIG_INPUT_GPIO_ROTARY_ENCODER is not set
# CONFIG_INPUT_DA7280_HAPTICS is not set
# CONFIG_INPUT_ADXL34X is not set
# CONFIG_INPUT_IBM_PANEL is not set
CONFIG_INPUT_IMS_PCU=y
# CONFIG_INPUT_IQS269A is not set
# CONFIG_INPUT_IQS626A is not set
# CONFIG_INPUT_IQS7222 is not set
# CONFIG_INPUT_CMA3000 is not set
# CONFIG_INPUT_IDEAPAD_SLIDEBAR is not set
# CONFIG_INPUT_DRV260X_HAPTICS is not set
# CONFIG_INPUT_DRV2665_HAPTICS is not set
# CONFIG_INPUT_DRV2667_HAPTICS is not set
CONFIG_RMI4_CORE=y
# CONFIG_RMI4_I2C is not set
# CONFIG_RMI4_SPI is not set
# CONFIG_RMI4_SMB is not set
CONFIG_RMI4_F03=y
CONFIG_RMI4_F03_SERIO=y
CONFIG_RMI4_2D_SENSOR=y
CONFIG_RMI4_F11=y
CONFIG_RMI4_F12=y
# CONFIG_RMI4_F1A is not set
# CONFIG_RMI4_F21 is not set
CONFIG_RMI4_F30=y
# CONFIG_RMI4_F34 is not set
CONFIG_RMI4_F3A=y
# CONFIG_RMI4_F54 is not set
# CONFIG_RMI4_F55 is not set

#
# Hardware I/O ports
#
CONFIG_SERIO=y
CONFIG_ARCH_MIGHT_HAVE_PC_SERIO=y
CONFIG_SERIO_I8042=y
CONFIG_SERIO_SERPORT=y
# CONFIG_SERIO_PARKBD is not set
# CONFIG_SERIO_PCIPS2 is not set
CONFIG_SERIO_LIBPS2=y
# CONFIG_SERIO_RAW is not set
# CONFIG_SERIO_ALTERA_PS2 is not set
# CONFIG_SERIO_PS2MULT is not set
# CONFIG_SERIO_ARC_PS2 is not set
# CONFIG_SERIO_APBPS2 is not set
# CONFIG_SERIO_GPIO_PS2 is not set
CONFIG_USERIO=y
# CONFIG_GAMEPORT is not set
# end of Hardware I/O ports
# end of Input device support

#
# Character devices
#
CONFIG_TTY=y
CONFIG_VT=y
CONFIG_CONSOLE_TRANSLATIONS=y
CONFIG_VT_CONSOLE=y
CONFIG_VT_CONSOLE_SLEEP=y
CONFIG_VT_HW_CONSOLE_BINDING=y
CONFIG_UNIX98_PTYS=y
CONFIG_LEGACY_PTYS=y
CONFIG_LEGACY_PTY_COUNT=256
CONFIG_LEGACY_TIOCSTI=y
CONFIG_LDISC_AUTOLOAD=y

#
# Serial drivers
#
CONFIG_SERIAL_EARLYCON=y
CONFIG_SERIAL_8250=y
CONFIG_SERIAL_8250_PNP=y
# CONFIG_SERIAL_8250_16550A_VARIANTS is not set
# CONFIG_SERIAL_8250_FINTEK is not set
CONFIG_SERIAL_8250_CONSOLE=y
CONFIG_SERIAL_8250_DMA=y
CONFIG_SERIAL_8250_PCILIB=y
CONFIG_SERIAL_8250_PCI=y
# CONFIG_SERIAL_8250_EXAR is not set
# CONFIG_SERIAL_8250_CS is not set
CONFIG_SERIAL_8250_NR_UARTS=32
CONFIG_SERIAL_8250_RUNTIME_UARTS=4
CONFIG_SERIAL_8250_EXTENDED=y
CONFIG_SERIAL_8250_SHARE_IRQ=y
CONFIG_SERIAL_8250_DETECT_IRQ=y
CONFIG_SERIAL_8250_RSA=y
CONFIG_SERIAL_8250_MANY_PORTS=y
# CONFIG_SERIAL_8250_PCI1XXXX is not set
# CONFIG_SERIAL_8250_DW is not set
# CONFIG_SERIAL_8250_RT288X is not set
CONFIG_SERIAL_8250_LPSS=y
CONFIG_SERIAL_8250_MID=y
CONFIG_SERIAL_8250_PERICOM=y
# CONFIG_SERIAL_8250_NI is not set
# CONFIG_SERIAL_OF_PLATFORM is not set
CONFIG_SERIAL_8250_DWLIB=y

#
# Non-8250 serial port support
#
# CONFIG_SERIAL_MAX3100 is not set
# CONFIG_SERIAL_MAX310X is not set
# CONFIG_SERIAL_UARTLITE is not set
CONFIG_SERIAL_CORE=y
CONFIG_SERIAL_CORE_CONSOLE=y
# CONFIG_SERIAL_JSM is not set
# CONFIG_SERIAL_SIFIVE is not set
# CONFIG_SERIAL_LANTIQ is not set
# CONFIG_SERIAL_SCCNXP is not set
# CONFIG_SERIAL_SC16IS7XX is not set
# CONFIG_SERIAL_ALTERA_JTAGUART is not set
# CONFIG_SERIAL_ALTERA_UART is not set
# CONFIG_SERIAL_XILINX_PS_UART is not set
# CONFIG_SERIAL_ARC is not set
# CONFIG_SERIAL_RP2 is not set
# CONFIG_SERIAL_FSL_LPUART is not set
# CONFIG_SERIAL_FSL_LINFLEXUART is not set
# CONFIG_SERIAL_CONEXANT_DIGICOLOR is not set
# CONFIG_SERIAL_SPRD is not set
# end of Serial drivers

CONFIG_SERIAL_MCTRL_GPIO=y
CONFIG_SERIAL_NONSTANDARD=y
# CONFIG_MOXA_INTELLIO is not set
# CONFIG_MOXA_SMARTIO is not set
CONFIG_N_HDLC=y
# CONFIG_IPWIRELESS is not set
CONFIG_N_GSM=y
CONFIG_NOZOMI=y
CONFIG_NULL_TTY=y
CONFIG_HVC_DRIVER=y
CONFIG_SERIAL_DEV_BUS=y
CONFIG_SERIAL_DEV_CTRL_TTYPORT=y
CONFIG_TTY_PRINTK=y
CONFIG_TTY_PRINTK_LEVEL=6
# CONFIG_PRINTER is not set
# CONFIG_PPDEV is not set
CONFIG_VIRTIO_CONSOLE=y
# CONFIG_IPMI_HANDLER is not set
# CONFIG_SSIF_IPMI_BMC is not set
# CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_HW_RANDOM=y
# CONFIG_HW_RANDOM_TIMERIOMEM is not set
# CONFIG_HW_RANDOM_INTEL is not set
# CONFIG_HW_RANDOM_AMD is not set
# CONFIG_HW_RANDOM_BA431 is not set
# CONFIG_HW_RANDOM_VIA is not set
CONFIG_HW_RANDOM_VIRTIO=y
# CONFIG_HW_RANDOM_CCTRNG is not set
# CONFIG_HW_RANDOM_XIPHERA is not set
# CONFIG_APPLICOM is not set
# CONFIG_DEVMEM is not set
CONFIG_NVRAM=y
# CONFIG_DEVPORT is not set
CONFIG_HPET=y
CONFIG_HPET_MMAP=y
CONFIG_HPET_MMAP_DEFAULT=y
# CONFIG_HANGCHECK_TIMER is not set
CONFIG_TCG_TPM=y
# CONFIG_TCG_TPM2_HMAC is not set
# CONFIG_HW_RANDOM_TPM is not set
CONFIG_TCG_TIS_CORE=y
CONFIG_TCG_TIS=y
# CONFIG_TCG_TIS_SPI is not set
# CONFIG_TCG_TIS_I2C is not set
# CONFIG_TCG_TIS_I2C_CR50 is not set
# CONFIG_TCG_TIS_I2C_ATMEL is not set
# CONFIG_TCG_TIS_I2C_INFINEON is not set
# CONFIG_TCG_TIS_I2C_NUVOTON is not set
# CONFIG_TCG_NSC is not set
# CONFIG_TCG_ATMEL is not set
# CONFIG_TCG_INFINEON is not set
CONFIG_TCG_CRB=y
# CONFIG_TCG_VTPM_PROXY is not set
# CONFIG_TCG_TIS_ST33ZP24_I2C is not set
# CONFIG_TCG_TIS_ST33ZP24_SPI is not set
# CONFIG_TELCLOCK is not set
CONFIG_XILLYBUS_CLASS=y
# CONFIG_XILLYBUS is not set
CONFIG_XILLYUSB=y
# end of Character devices

#
# I2C support
#
CONFIG_I2C=y
CONFIG_ACPI_I2C_OPREGION=y
CONFIG_I2C_BOARDINFO=y
CONFIG_I2C_CHARDEV=y
CONFIG_I2C_MUX=y

#
# Multiplexer I2C Chip support
#
# CONFIG_I2C_ARB_GPIO_CHALLENGE is not set
# CONFIG_I2C_MUX_GPIO is not set
# CONFIG_I2C_MUX_GPMUX is not set
# CONFIG_I2C_MUX_LTC4306 is not set
# CONFIG_I2C_MUX_PCA9541 is not set
# CONFIG_I2C_MUX_PCA954x is not set
CONFIG_I2C_MUX_REG=y
# CONFIG_I2C_MUX_MLXCPLD is not set
# end of Multiplexer I2C Chip support

CONFIG_I2C_HELPER_AUTO=y
CONFIG_I2C_SMBUS=y
CONFIG_I2C_ALGOBIT=y

#
# I2C Hardware Bus support
#

#
# PC SMBus host controller drivers
#
# CONFIG_I2C_ALI1535 is not set
# CONFIG_I2C_ALI1563 is not set
# CONFIG_I2C_ALI15X3 is not set
# CONFIG_I2C_AMD756 is not set
# CONFIG_I2C_AMD8111 is not set
# CONFIG_I2C_AMD_MP2 is not set
CONFIG_I2C_I801=y
# CONFIG_I2C_ISCH is not set
# CONFIG_I2C_ISMT is not set
# CONFIG_I2C_PIIX4 is not set
# CONFIG_I2C_CHT_WC is not set
# CONFIG_I2C_NFORCE2 is not set
# CONFIG_I2C_NVIDIA_GPU is not set
# CONFIG_I2C_SIS5595 is not set
# CONFIG_I2C_SIS630 is not set
# CONFIG_I2C_SIS96X is not set
# CONFIG_I2C_VIA is not set
# CONFIG_I2C_VIAPRO is not set
# CONFIG_I2C_ZHAOXIN is not set

#
# ACPI drivers
#
# CONFIG_I2C_SCMI is not set

#
# I2C system bus drivers (mostly embedded / system-on-chip)
#
# CONFIG_I2C_CBUS_GPIO is not set
CONFIG_I2C_DESIGNWARE_CORE=y
CONFIG_I2C_DESIGNWARE_PLATFORM=y
# CONFIG_I2C_DESIGNWARE_BAYTRAIL is not set
# CONFIG_I2C_DESIGNWARE_PCI is not set
# CONFIG_I2C_EMEV2 is not set
# CONFIG_I2C_GPIO is not set
# CONFIG_I2C_OCORES is not set
# CONFIG_I2C_PCA_PLATFORM is not set
# CONFIG_I2C_RK3X is not set
# CONFIG_I2C_SIMTEC is not set
# CONFIG_I2C_XILINX is not set

#
# External I2C/SMBus adapter drivers
#
CONFIG_I2C_DIOLAN_U2C=y
CONFIG_I2C_DLN2=y
CONFIG_I2C_LJCA=y
CONFIG_I2C_CP2615=y
# CONFIG_I2C_PARPORT is not set
# CONFIG_I2C_PCI1XXXX is not set
CONFIG_I2C_ROBOTFUZZ_OSIF=y
# CONFIG_I2C_TAOS_EVM is not set
CONFIG_I2C_TINY_USB=y
CONFIG_I2C_VIPERBOARD=y

#
# Other I2C/SMBus bus drivers
#
# CONFIG_I2C_MLXCPLD is not set
# CONFIG_I2C_VIRTIO is not set
# end of I2C Hardware Bus support

# CONFIG_I2C_STUB is not set
CONFIG_I2C_SLAVE=y
CONFIG_I2C_SLAVE_EEPROM=y
# CONFIG_I2C_SLAVE_TESTUNIT is not set
# CONFIG_I2C_DEBUG_CORE is not set
# CONFIG_I2C_DEBUG_ALGO is not set
# CONFIG_I2C_DEBUG_BUS is not set
# end of I2C support

# CONFIG_I3C is not set
CONFIG_I3C_OR_I2C=y
CONFIG_SPI=y
# CONFIG_SPI_DEBUG is not set
CONFIG_SPI_MASTER=y
# CONFIG_SPI_MEM is not set

#
# SPI Master Controller Drivers
#
# CONFIG_SPI_ALTERA is not set
# CONFIG_SPI_AXI_SPI_ENGINE is not set
# CONFIG_SPI_BITBANG is not set
# CONFIG_SPI_BUTTERFLY is not set
# CONFIG_SPI_CADENCE is not set
# CONFIG_SPI_CADENCE_QUADSPI is not set
# CONFIG_SPI_CH341 is not set
# CONFIG_SPI_DESIGNWARE is not set
CONFIG_SPI_DLN2=y
# CONFIG_SPI_GPIO is not set
# CONFIG_SPI_LM70_LLP is not set
# CONFIG_SPI_FSL_SPI is not set
CONFIG_SPI_LJCA=y
# CONFIG_SPI_MICROCHIP_CORE_QSPI is not set
# CONFIG_SPI_MICROCHIP_CORE_SPI is not set
# CONFIG_SPI_LANTIQ_SSC is not set
# CONFIG_SPI_OC_TINY is not set
# CONFIG_SPI_PCI1XXXX is not set
# CONFIG_SPI_PXA2XX is not set
# CONFIG_SPI_SC18IS602 is not set
# CONFIG_SPI_SIFIVE is not set
# CONFIG_SPI_MXIC is not set
# CONFIG_SPI_VIRTIO is not set
# CONFIG_SPI_XCOMM is not set
# CONFIG_SPI_XILINX is not set

#
# SPI Multiplexer support
#
# CONFIG_SPI_MUX is not set

#
# SPI Protocol Masters
#
# CONFIG_SPI_SPIDEV is not set
# CONFIG_SPI_LOOPBACK_TEST is not set
# CONFIG_SPI_TLE62X0 is not set
# CONFIG_SPI_SLAVE is not set
CONFIG_SPI_DYNAMIC=y
# CONFIG_SPMI is not set
# CONFIG_HSI is not set
CONFIG_PPS=y
# CONFIG_PPS_DEBUG is not set

#
# PPS clients support
#
# CONFIG_PPS_CLIENT_KTIMER is not set
# CONFIG_PPS_CLIENT_LDISC is not set
# CONFIG_PPS_CLIENT_PARPORT is not set
# CONFIG_PPS_CLIENT_GPIO is not set
# CONFIG_PPS_GENERATOR is not set

#
# PTP clock support
#
CONFIG_PTP_1588_CLOCK=y
CONFIG_PTP_1588_CLOCK_OPTIONAL=y

#
# Enable PHYLIB and NETWORK_PHY_TIMESTAMPING to see the additional clocks.
#
CONFIG_PTP_1588_CLOCK_KVM=y
CONFIG_PTP_1588_CLOCK_VMCLOCK=y
# CONFIG_PTP_1588_CLOCK_IDT82P33 is not set
# CONFIG_PTP_1588_CLOCK_IDTCM is not set
# CONFIG_PTP_1588_CLOCK_FC3W is not set
# CONFIG_PTP_1588_CLOCK_MOCK is not set
# CONFIG_PTP_1588_CLOCK_VMW is not set
# CONFIG_PTP_1588_CLOCK_OCP is not set
# CONFIG_PTP_NETC_V4_TIMER is not set
# end of PTP clock support

#
# DPLL device support
#
# CONFIG_ZL3073X_I2C is not set
# CONFIG_ZL3073X_SPI is not set
# end of DPLL device support

# CONFIG_PINCTRL is not set
CONFIG_GPIOLIB_LEGACY=y
CONFIG_GPIOLIB=y
CONFIG_GPIOLIB_FASTPATH_LIMIT=512
CONFIG_OF_GPIO=y
CONFIG_GPIO_ACPI=y
CONFIG_GPIOLIB_IRQCHIP=y
# CONFIG_DEBUG_GPIO is not set
# CONFIG_GPIO_SYSFS is not set
# CONFIG_GPIO_CDEV is not set

#
# Memory mapped GPIO drivers
#
# CONFIG_GPIO_74XX_MMIO is not set
# CONFIG_GPIO_ALTERA is not set
# CONFIG_GPIO_AMDPT is not set
# CONFIG_GPIO_BY_PINCTRL is not set
# CONFIG_GPIO_CADENCE is not set
# CONFIG_GPIO_DWAPB is not set
# CONFIG_GPIO_FTGPIO010 is not set
# CONFIG_GPIO_GENERIC_PLATFORM is not set
# CONFIG_GPIO_GRANITERAPIDS is not set
# CONFIG_GPIO_GRGPIO is not set
# CONFIG_GPIO_HLWD is not set
# CONFIG_GPIO_ICH is not set
# CONFIG_GPIO_LOGICVC is not set
# CONFIG_GPIO_MB86S7X is not set
# CONFIG_GPIO_POLARFIRE_SOC is not set
# CONFIG_GPIO_SIFIVE is not set
# CONFIG_GPIO_SYSCON is not set
# CONFIG_GPIO_XILINX is not set
# CONFIG_GPIO_AMD_FCH is not set
# end of Memory mapped GPIO drivers

#
# Port-mapped I/O GPIO drivers
#
# CONFIG_GPIO_VX855 is not set
# CONFIG_GPIO_F7188X is not set
# CONFIG_GPIO_IT87 is not set
# CONFIG_GPIO_NOVALAKE is not set
# CONFIG_GPIO_SCH311X is not set
# CONFIG_GPIO_WINBOND is not set
# CONFIG_GPIO_WS16C48 is not set
# end of Port-mapped I/O GPIO drivers

#
# I2C GPIO expanders
#
# CONFIG_GPIO_ADNP is not set
# CONFIG_GPIO_FXL6408 is not set
# CONFIG_GPIO_DS4520 is not set
# CONFIG_GPIO_GW_PLD is not set
# CONFIG_GPIO_MAX7300 is not set
# CONFIG_GPIO_MAX732X is not set
# CONFIG_GPIO_PCA953X is not set
# CONFIG_GPIO_PCA9570 is not set
# CONFIG_GPIO_PCF857X is not set
# CONFIG_GPIO_TPIC2810 is not set
# end of I2C GPIO expanders

#
# MFD GPIO expanders
#
CONFIG_GPIO_DLN2=y
CONFIG_GPIO_LJCA=y
# CONFIG_GPIO_TWL4030 is not set
# CONFIG_GPIO_WHISKEY_COVE is not set
# end of MFD GPIO expanders

#
# PCI GPIO expanders
#
# CONFIG_GPIO_AMD8111 is not set
# CONFIG_GPIO_BT8XX is not set
# CONFIG_GPIO_ML_IOH is not set
# CONFIG_GPIO_PCI_IDIO_16 is not set
# CONFIG_GPIO_PCIE_IDIO_24 is not set
# CONFIG_GPIO_RDC321X is not set
# CONFIG_GPIO_SODAVILLE is not set
# end of PCI GPIO expanders

#
# SPI GPIO expanders
#
# CONFIG_GPIO_74X164 is not set
# CONFIG_GPIO_MAX3191X is not set
# CONFIG_GPIO_MAX7301 is not set
# CONFIG_GPIO_MC33880 is not set
# CONFIG_GPIO_PISOSR is not set
# CONFIG_GPIO_XRA1403 is not set
# end of SPI GPIO expanders

#
# USB GPIO expanders
#
CONFIG_GPIO_VIPERBOARD=y
# CONFIG_GPIO_MPSSE is not set
# end of USB GPIO expanders

#
# Virtual GPIO drivers
#
# CONFIG_GPIO_AGGREGATOR is not set
# CONFIG_GPIO_LATCH is not set
# CONFIG_GPIO_LINE_MUX is not set
# CONFIG_GPIO_MOCKUP is not set
# CONFIG_GPIO_VIRTIO is not set
# CONFIG_GPIO_SIM is not set
# end of Virtual GPIO drivers

#
# GPIO Debugging utilities
#
# CONFIG_GPIO_SLOPPY_LOGIC_ANALYZER is not set
# CONFIG_GPIO_VIRTUSER is not set
# end of GPIO Debugging utilities

# CONFIG_W1 is not set
# CONFIG_POWER_RESET is not set
# CONFIG_POWER_SEQUENCING is not set
CONFIG_POWER_SUPPLY=y
# CONFIG_POWER_SUPPLY_DEBUG is not set
CONFIG_POWER_SUPPLY_HWMON=y
# CONFIG_GENERIC_ADC_BATTERY is not set
# CONFIG_IP5XXX_POWER is not set
# CONFIG_TEST_POWER is not set
# CONFIG_CHARGER_ADP5061 is not set
# CONFIG_BATTERY_CHAGALL is not set
# CONFIG_BATTERY_CW2015 is not set
# CONFIG_BATTERY_DS2780 is not set
# CONFIG_BATTERY_DS2781 is not set
# CONFIG_BATTERY_DS2782 is not set
# CONFIG_BATTERY_SAMSUNG_SDI is not set
# CONFIG_BATTERY_S2MU005 is not set
# CONFIG_BATTERY_SBS is not set
# CONFIG_CHARGER_SBS is not set
# CONFIG_MANAGER_SBS is not set
# CONFIG_BATTERY_BQ27XXX is not set
# CONFIG_BATTERY_MAX17040 is not set
# CONFIG_BATTERY_MAX17042 is not set
# CONFIG_BATTERY_MAX1720X is not set
CONFIG_CHARGER_ISP1704=y
# CONFIG_CHARGER_MAX8903 is not set
# CONFIG_CHARGER_TWL4030 is not set
# CONFIG_CHARGER_TWL6030 is not set
# CONFIG_CHARGER_LP8727 is not set
# CONFIG_CHARGER_GPIO is not set
# CONFIG_CHARGER_MANAGER is not set
# CONFIG_CHARGER_LT3651 is not set
# CONFIG_CHARGER_LTC4162L is not set
# CONFIG_CHARGER_DETECTOR_MAX14656 is not set
# CONFIG_CHARGER_MAX77976 is not set
# CONFIG_CHARGER_MAX8971 is not set
# CONFIG_CHARGER_MT6360 is not set
# CONFIG_CHARGER_MT6370 is not set
# CONFIG_CHARGER_BQ2415X is not set
CONFIG_CHARGER_BQ24190=y
# CONFIG_CHARGER_BQ24257 is not set
# CONFIG_CHARGER_BQ24735 is not set
# CONFIG_CHARGER_BQ2515X is not set
# CONFIG_CHARGER_BQ25890 is not set
# CONFIG_CHARGER_BQ25980 is not set
# CONFIG_CHARGER_BQ256XX is not set
# CONFIG_CHARGER_SMB347 is not set
# CONFIG_BATTERY_GAUGE_LTC2941 is not set
# CONFIG_BATTERY_GOLDFISH is not set
# CONFIG_BATTERY_RT5033 is not set
# CONFIG_CHARGER_RT9455 is not set
# CONFIG_CHARGER_RT9467 is not set
# CONFIG_CHARGER_RT9471 is not set
# CONFIG_CHARGER_RT9756 is not set
# CONFIG_FUEL_GAUGE_STC3117 is not set
# CONFIG_CHARGER_UCS1002 is not set
# CONFIG_CHARGER_BD99954 is not set
# CONFIG_BATTERY_SURFACE is not set
# CONFIG_CHARGER_SURFACE is not set
# CONFIG_BATTERY_UG3105 is not set
# CONFIG_FUEL_GAUGE_MM8013 is not set
CONFIG_HWMON=y
# CONFIG_HWMON_DEBUG_CHIP is not set

#
# Native drivers
#
# CONFIG_SENSORS_ABITUGURU is not set
# CONFIG_SENSORS_ABITUGURU3 is not set
# CONFIG_SENSORS_AD7314 is not set
# CONFIG_SENSORS_AD7414 is not set
# CONFIG_SENSORS_AD7418 is not set
# CONFIG_SENSORS_ADM1025 is not set
# CONFIG_SENSORS_ADM1026 is not set
# CONFIG_SENSORS_ADM1029 is not set
# CONFIG_SENSORS_ADM1031 is not set
# CONFIG_SENSORS_ADM1177 is not set
# CONFIG_SENSORS_ADM9240 is not set
# CONFIG_SENSORS_ADT7310 is not set
# CONFIG_SENSORS_ADT7410 is not set
# CONFIG_SENSORS_ADT7411 is not set
# CONFIG_SENSORS_ADT7462 is not set
# CONFIG_SENSORS_ADT7470 is not set
# CONFIG_SENSORS_ADT7475 is not set
# CONFIG_SENSORS_AHT10 is not set
CONFIG_SENSORS_AQUACOMPUTER_D5NEXT=y
# CONFIG_SENSORS_AS370 is not set
# CONFIG_SENSORS_ASC7621 is not set
# CONFIG_SENSORS_ASUS_ROG_RYUJIN is not set
# CONFIG_SENSORS_AXI_FAN_CONTROL is not set
# CONFIG_SENSORS_K8TEMP is not set
# CONFIG_SENSORS_K10TEMP is not set
# CONFIG_SENSORS_FAM15H_POWER is not set
# CONFIG_SENSORS_APPLESMC is not set
# CONFIG_SENSORS_ASB100 is not set
# CONFIG_SENSORS_ATXP1 is not set
# CONFIG_SENSORS_CHIPCAP2 is not set
CONFIG_SENSORS_CORSAIR_CPRO=y
CONFIG_SENSORS_CORSAIR_PSU=y
# CONFIG_SENSORS_DRIVETEMP is not set
# CONFIG_SENSORS_DS620 is not set
# CONFIG_SENSORS_DS1621 is not set
# CONFIG_SENSORS_DELL_SMM is not set
# CONFIG_SENSORS_I5K_AMB is not set
# CONFIG_SENSORS_F71805F is not set
# CONFIG_SENSORS_F71882FG is not set
# CONFIG_SENSORS_F75375S is not set
# CONFIG_SENSORS_FSCHMD is not set
# CONFIG_SENSORS_FTSTEUTATES is not set
CONFIG_SENSORS_GIGABYTE_WATERFORCE=y
# CONFIG_SENSORS_GL518SM is not set
# CONFIG_SENSORS_GL520SM is not set
# CONFIG_SENSORS_GPD is not set
# CONFIG_SENSORS_G760A is not set
# CONFIG_SENSORS_G762 is not set
# CONFIG_SENSORS_GPIO_FAN is not set
# CONFIG_SENSORS_HIH6130 is not set
# CONFIG_SENSORS_HS3001 is not set
# CONFIG_SENSORS_HTU31 is not set
# CONFIG_SENSORS_IIO_HWMON is not set
# CONFIG_SENSORS_I5500 is not set
# CONFIG_SENSORS_CORETEMP is not set
# CONFIG_SENSORS_ISL28022 is not set
# CONFIG_SENSORS_IT87 is not set
# CONFIG_SENSORS_JC42 is not set
CONFIG_SENSORS_POWERZ=y
# CONFIG_SENSORS_POWR1220 is not set
# CONFIG_SENSORS_LATTEPANDA_SIGMA_EC is not set
# CONFIG_SENSORS_LENOVO_EC is not set
# CONFIG_SENSORS_LINEAGE is not set
# CONFIG_SENSORS_LTC2945 is not set
# CONFIG_SENSORS_LTC2947_I2C is not set
# CONFIG_SENSORS_LTC2947_SPI is not set
# CONFIG_SENSORS_LTC2990 is not set
# CONFIG_SENSORS_LTC2991 is not set
# CONFIG_SENSORS_LTC2992 is not set
# CONFIG_SENSORS_LTC4151 is not set
# CONFIG_SENSORS_LTC4215 is not set
# CONFIG_SENSORS_LTC4222 is not set
# CONFIG_SENSORS_LTC4245 is not set
# CONFIG_SENSORS_LTC4260 is not set
# CONFIG_SENSORS_LTC4261 is not set
# CONFIG_SENSORS_LTC4282 is not set
# CONFIG_SENSORS_MAX1111 is not set
# CONFIG_SENSORS_MAX127 is not set
# CONFIG_SENSORS_MAX16065 is not set
# CONFIG_SENSORS_MAX1619 is not set
# CONFIG_SENSORS_MAX1668 is not set
# CONFIG_SENSORS_MAX197 is not set
# CONFIG_SENSORS_MAX31722 is not set
# CONFIG_SENSORS_MAX31730 is not set
# CONFIG_SENSORS_MAX31760 is not set
# CONFIG_MAX31827 is not set
# CONFIG_SENSORS_MAX6620 is not set
# CONFIG_SENSORS_MAX6621 is not set
# CONFIG_SENSORS_MAX6639 is not set
# CONFIG_SENSORS_MAX6650 is not set
# CONFIG_SENSORS_MAX6697 is not set
# CONFIG_SENSORS_MAX31790 is not set
# CONFIG_SENSORS_MC34VR500 is not set
# CONFIG_SENSORS_MCP3021 is not set
# CONFIG_SENSORS_MCP9982 is not set
# CONFIG_SENSORS_TC654 is not set
# CONFIG_SENSORS_TPS23861 is not set
# CONFIG_SENSORS_MR75203 is not set
# CONFIG_SENSORS_ADCXX is not set
# CONFIG_SENSORS_LM63 is not set
# CONFIG_SENSORS_LM70 is not set
# CONFIG_SENSORS_LM73 is not set
# CONFIG_SENSORS_LM75 is not set
# CONFIG_SENSORS_LM77 is not set
# CONFIG_SENSORS_LM78 is not set
# CONFIG_SENSORS_LM80 is not set
# CONFIG_SENSORS_LM83 is not set
# CONFIG_SENSORS_LM85 is not set
# CONFIG_SENSORS_LM87 is not set
# CONFIG_SENSORS_LM90 is not set
# CONFIG_SENSORS_LM92 is not set
# CONFIG_SENSORS_LM93 is not set
# CONFIG_SENSORS_LM95234 is not set
# CONFIG_SENSORS_LM95241 is not set
# CONFIG_SENSORS_LM95245 is not set
# CONFIG_SENSORS_PC87360 is not set
# CONFIG_SENSORS_PC87427 is not set
# CONFIG_SENSORS_NTC_THERMISTOR is not set
# CONFIG_SENSORS_NCT6683 is not set
# CONFIG_SENSORS_NCT6775 is not set
# CONFIG_SENSORS_NCT6775_I2C is not set
# CONFIG_SENSORS_NCT7363 is not set
# CONFIG_SENSORS_NCT7802 is not set
# CONFIG_SENSORS_NCT7904 is not set
# CONFIG_SENSORS_NPCM7XX is not set
CONFIG_SENSORS_NZXT_KRAKEN2=y
# CONFIG_SENSORS_NZXT_KRAKEN3 is not set
CONFIG_SENSORS_NZXT_SMART2=y
# CONFIG_SENSORS_OCC_P8_I2C is not set
# CONFIG_SENSORS_PCF8591 is not set
# CONFIG_PMBUS is not set
# CONFIG_SENSORS_PT5161L is not set
# CONFIG_SENSORS_SBTSI is not set
# CONFIG_SENSORS_SHT15 is not set
# CONFIG_SENSORS_SHT21 is not set
# CONFIG_SENSORS_SHT3x is not set
# CONFIG_SENSORS_SHT4x is not set
# CONFIG_SENSORS_SHTC1 is not set
# CONFIG_SENSORS_SIS5595 is not set
# CONFIG_SENSORS_DME1737 is not set
# CONFIG_SENSORS_EMC1403 is not set
# CONFIG_SENSORS_EMC2103 is not set
# CONFIG_SENSORS_EMC2305 is not set
# CONFIG_SENSORS_EMC6W201 is not set
# CONFIG_SENSORS_SMSC47M1 is not set
# CONFIG_SENSORS_SMSC47M192 is not set
# CONFIG_SENSORS_SMSC47B397 is not set
# CONFIG_SENSORS_SCH5627 is not set
# CONFIG_SENSORS_SCH5636 is not set
# CONFIG_SENSORS_STTS751 is not set
# CONFIG_SENSORS_SURFACE_FAN is not set
# CONFIG_SENSORS_SURFACE_TEMP is not set
# CONFIG_SENSORS_ADC128D818 is not set
# CONFIG_SENSORS_ADS7828 is not set
# CONFIG_SENSORS_ADS7871 is not set
# CONFIG_SENSORS_AMC6821 is not set
# CONFIG_SENSORS_INA209 is not set
# CONFIG_SENSORS_INA2XX is not set
# CONFIG_SENSORS_INA238 is not set
# CONFIG_SENSORS_INA3221 is not set
# CONFIG_SENSORS_SPD5118 is not set
# CONFIG_SENSORS_TC74 is not set
# CONFIG_SENSORS_THMC50 is not set
# CONFIG_SENSORS_TMP102 is not set
# CONFIG_SENSORS_TMP103 is not set
# CONFIG_SENSORS_TMP108 is not set
# CONFIG_SENSORS_TMP401 is not set
# CONFIG_SENSORS_TMP421 is not set
# CONFIG_SENSORS_TMP464 is not set
# CONFIG_SENSORS_TMP513 is not set
# CONFIG_SENSORS_TSC1641 is not set
# CONFIG_SENSORS_VIA_CPUTEMP is not set
# CONFIG_SENSORS_VIA686A is not set
# CONFIG_SENSORS_VT1211 is not set
# CONFIG_SENSORS_VT8231 is not set
# CONFIG_SENSORS_W83773G is not set
# CONFIG_SENSORS_W83781D is not set
# CONFIG_SENSORS_W83791D is not set
# CONFIG_SENSORS_W83792D is not set
# CONFIG_SENSORS_W83793 is not set
# CONFIG_SENSORS_W83795 is not set
# CONFIG_SENSORS_W83L785TS is not set
# CONFIG_SENSORS_W83L786NG is not set
# CONFIG_SENSORS_W83627HF is not set
# CONFIG_SENSORS_W83627EHF is not set
# CONFIG_SENSORS_XGENE is not set
# CONFIG_SENSORS_YOGAFAN is not set

#
# ACPI drivers
#
# CONFIG_SENSORS_ACPI_POWER is not set
# CONFIG_SENSORS_ATK0110 is not set
# CONFIG_SENSORS_ASUS_WMI is not set
# CONFIG_SENSORS_ASUS_EC is not set
# CONFIG_SENSORS_HP_WMI is not set
CONFIG_THERMAL=y
CONFIG_THERMAL_NETLINK=y
# CONFIG_THERMAL_STATISTICS is not set
# CONFIG_THERMAL_DEBUGFS is not set
# CONFIG_THERMAL_CORE_TESTING is not set
CONFIG_THERMAL_EMERGENCY_POWEROFF_DELAY_MS=0
CONFIG_THERMAL_HWMON=y
# CONFIG_THERMAL_OF is not set
CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y
# CONFIG_THERMAL_DEFAULT_GOV_FAIR_SHARE is not set
# CONFIG_THERMAL_DEFAULT_GOV_USER_SPACE is not set
# CONFIG_THERMAL_GOV_FAIR_SHARE is not set
CONFIG_THERMAL_GOV_STEP_WISE=y
# CONFIG_THERMAL_GOV_BANG_BANG is not set
# CONFIG_THERMAL_GOV_USER_SPACE is not set
# CONFIG_PCIE_THERMAL is not set
# CONFIG_THERMAL_EMULATION is not set
# CONFIG_THERMAL_MMIO is not set

#
# Intel thermal drivers
#
# CONFIG_INTEL_POWERCLAMP is not set
CONFIG_X86_THERMAL_VECTOR=y
# CONFIG_X86_PKG_TEMP_THERMAL is not set
# CONFIG_INTEL_SOC_DTS_THERMAL is not set

#
# ACPI INT340X thermal drivers
#
# CONFIG_INT340X_THERMAL is not set
# end of ACPI INT340X thermal drivers

# CONFIG_INTEL_BXT_PMIC_THERMAL is not set
# CONFIG_INTEL_PCH_THERMAL is not set
# CONFIG_INTEL_TCC_COOLING is not set
# CONFIG_INTEL_HFI_THERMAL is not set
# end of Intel thermal drivers

# CONFIG_GENERIC_ADC_THERMAL is not set
CONFIG_WATCHDOG=y
# CONFIG_WATCHDOG_CORE is not set
# CONFIG_WATCHDOG_NOWAYOUT is not set
CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y
CONFIG_WATCHDOG_OPEN_TIMEOUT=0
# CONFIG_WATCHDOG_SYSFS is not set
# CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT is not set

#
# Watchdog Pretimeout Governors
#

#
# Watchdog Device Drivers
#
# CONFIG_SOFT_WATCHDOG is not set
# CONFIG_GPIO_WATCHDOG is not set
# CONFIG_LENOVO_SE10_WDT is not set
# CONFIG_LENOVO_SE30_WDT is not set
# CONFIG_WDAT_WDT is not set
# CONFIG_XILINX_WATCHDOG is not set
# CONFIG_ZIIRAVE_WATCHDOG is not set
# CONFIG_CADENCE_WATCHDOG is not set
# CONFIG_DW_WATCHDOG is not set
# CONFIG_TWL4030_WATCHDOG is not set
# CONFIG_MAX63XX_WATCHDOG is not set
# CONFIG_RETU_WATCHDOG is not set
# CONFIG_ACQUIRE_WDT is not set
# CONFIG_ADVANTECH_WDT is not set
# CONFIG_ADVANTECH_EC_WDT is not set
# CONFIG_ALIM1535_WDT is not set
# CONFIG_ALIM7101_WDT is not set
# CONFIG_EBC_C384_WDT is not set
# CONFIG_EXAR_WDT is not set
# CONFIG_F71808E_WDT is not set
# CONFIG_SP5100_TCO is not set
# CONFIG_SBC_FITPC2_WATCHDOG is not set
# CONFIG_EUROTECH_WDT is not set
# CONFIG_IB700_WDT is not set
# CONFIG_IBMASR is not set
# CONFIG_WAFER_WDT is not set
# CONFIG_I6300ESB_WDT is not set
# CONFIG_IE6XX_WDT is not set
# CONFIG_INTEL_OC_WATCHDOG is not set
# CONFIG_ITCO_WDT is not set
# CONFIG_IT8712F_WDT is not set
# CONFIG_IT87_WDT is not set
# CONFIG_HP_WATCHDOG is not set
# CONFIG_SC1200_WDT is not set
# CONFIG_PC87413_WDT is not set
# CONFIG_NV_TCO is not set
# CONFIG_60XX_WDT is not set
# CONFIG_SMSC_SCH311X_WDT is not set
# CONFIG_SMSC37B787_WDT is not set
# CONFIG_TQMX86_WDT is not set
# CONFIG_VIA_WDT is not set
# CONFIG_W83627HF_WDT is not set
# CONFIG_W83877F_WDT is not set
# CONFIG_W83977F_WDT is not set
# CONFIG_MACHZ_WDT is not set
# CONFIG_SBC_EPX_C3_WATCHDOG is not set
# CONFIG_INTEL_MEI_WDT is not set
# CONFIG_NI903X_WDT is not set
# CONFIG_NIC7018_WDT is not set
# CONFIG_MEN_A21_WDT is not set

#
# PCI-based Watchdog Cards
#
# CONFIG_PCIPCWATCHDOG is not set
# CONFIG_WDTPCI is not set

#
# USB-based Watchdog Cards
#
CONFIG_USBPCWATCHDOG=y
CONFIG_SSB_POSSIBLE=y
CONFIG_SSB=y
CONFIG_SSB_PCIHOST_POSSIBLE=y
# CONFIG_SSB_PCIHOST is not set
CONFIG_SSB_PCMCIAHOST_POSSIBLE=y
# CONFIG_SSB_PCMCIAHOST is not set
CONFIG_SSB_SDIOHOST_POSSIBLE=y
# CONFIG_SSB_SDIOHOST is not set
# CONFIG_SSB_DRIVER_GPIO is not set
CONFIG_BCMA_POSSIBLE=y
CONFIG_BCMA=y
CONFIG_BCMA_HOST_PCI_POSSIBLE=y
# CONFIG_BCMA_HOST_PCI is not set
# CONFIG_BCMA_HOST_SOC is not set
# CONFIG_BCMA_DRIVER_PCI is not set
# CONFIG_BCMA_DRIVER_GMAC_CMN is not set
# CONFIG_BCMA_DRIVER_GPIO is not set
# CONFIG_BCMA_DEBUG is not set

#
# Multifunction device drivers
#
CONFIG_MFD_CORE=y
# CONFIG_MFD_ADP5585 is not set
# CONFIG_MFD_ACT8945A is not set
# CONFIG_MFD_AS3711 is not set
# CONFIG_MFD_SMPRO is not set
# CONFIG_MFD_AS3722 is not set
# CONFIG_PMIC_ADP5520 is not set
# CONFIG_MFD_AAT2870_CORE is not set
# CONFIG_MFD_ATMEL_FLEXCOM is not set
# CONFIG_MFD_ATMEL_HLCDC is not set
# CONFIG_MFD_BCM590XX is not set
# CONFIG_MFD_BD9571MWV is not set
# CONFIG_MFD_AXP20X_I2C is not set
# CONFIG_MFD_CGBC is not set
# CONFIG_MFD_CS40L50_I2C is not set
# CONFIG_MFD_CS40L50_SPI is not set
# CONFIG_MFD_CS42L43_I2C is not set
# CONFIG_MFD_CS42L43_SDW is not set
# CONFIG_MFD_LOCHNAGAR is not set
# CONFIG_MFD_MADERA is not set
# CONFIG_PMIC_DA903X is not set
# CONFIG_MFD_DA9052_SPI is not set
# CONFIG_MFD_DA9052_I2C is not set
# CONFIG_MFD_DA9055 is not set
# CONFIG_MFD_DA9062 is not set
# CONFIG_MFD_DA9063 is not set
# CONFIG_MFD_DA9150 is not set
CONFIG_MFD_DLN2=y
# CONFIG_MFD_GATEWORKS_GSC is not set
# CONFIG_MFD_MC13XXX_SPI is not set
# CONFIG_MFD_MC13XXX_I2C is not set
# CONFIG_MFD_MP2629 is not set
# CONFIG_MFD_PF1550 is not set
# CONFIG_MFD_HI6421_PMIC is not set
# CONFIG_MFD_INTEL_QUARK_I2C_GPIO is not set
CONFIG_LPC_ICH=y
# CONFIG_LPC_SCH is not set
# CONFIG_INTEL_SOC_PMIC is not set
CONFIG_INTEL_SOC_PMIC_BXTWC=y
CONFIG_INTEL_SOC_PMIC_CHTWC=y
# CONFIG_INTEL_SOC_PMIC_CHTDC_TI is not set
# CONFIG_MFD_INTEL_LPSS_ACPI is not set
# CONFIG_MFD_INTEL_LPSS_PCI is not set
CONFIG_MFD_INTEL_PMC_BXT=y
# CONFIG_MFD_IQS62X is not set
# CONFIG_MFD_JANZ_CMODIO is not set
# CONFIG_MFD_KEMPLD is not set
# CONFIG_MFD_88PM800 is not set
# CONFIG_MFD_88PM805 is not set
# CONFIG_MFD_88PM860X is not set
# CONFIG_MFD_88PM886_PMIC is not set
# CONFIG_MFD_MAX5970 is not set
# CONFIG_MFD_MAX14577 is not set
# CONFIG_MFD_MAX77541 is not set
# CONFIG_MFD_MAX77620 is not set
# CONFIG_MFD_MAX77650 is not set
# CONFIG_MFD_MAX77686 is not set
# CONFIG_MFD_MAX77693 is not set
# CONFIG_MFD_MAX77705 is not set
# CONFIG_MFD_MAX77714 is not set
# CONFIG_MFD_MAX77759 is not set
# CONFIG_MFD_MAX77843 is not set
# CONFIG_MFD_MAX8907 is not set
# CONFIG_MFD_MAX8925 is not set
# CONFIG_MFD_MAX8997 is not set
# CONFIG_MFD_MAX8998 is not set
CONFIG_MFD_MT6360=y
CONFIG_MFD_MT6370=y
# CONFIG_MFD_MT6397 is not set
# CONFIG_MFD_MENF21BMC is not set
# CONFIG_MFD_NCT6694 is not set
# CONFIG_MFD_OCELOT is not set
# CONFIG_EZX_PCAP is not set
# CONFIG_MFD_CPCAP is not set
CONFIG_MFD_VIPERBOARD=y
# CONFIG_MFD_NTXEC is not set
CONFIG_MFD_RETU=y
# CONFIG_MFD_SY7636A is not set
# CONFIG_MFD_RDC321X is not set
# CONFIG_MFD_RT4831 is not set
# CONFIG_MFD_RT5033 is not set
# CONFIG_MFD_RT5120 is not set
# CONFIG_MFD_RC5T583 is not set
# CONFIG_MFD_RK8XX_I2C is not set
# CONFIG_MFD_RK8XX_SPI is not set
# CONFIG_MFD_RN5T618 is not set
# CONFIG_MFD_SEC_I2C is not set
# CONFIG_MFD_SI476X_CORE is not set
# CONFIG_MFD_SM501 is not set
# CONFIG_MFD_SKY81452 is not set
# CONFIG_MFD_STMPE is not set
CONFIG_MFD_SYSCON=y
# CONFIG_MFD_LP3943 is not set
# CONFIG_MFD_LP8788 is not set
# CONFIG_MFD_TI_LMU is not set
# CONFIG_MFD_BQ257XX is not set
# CONFIG_MFD_PALMAS is not set
# CONFIG_TPS6105X is not set
# CONFIG_TPS65010 is not set
# CONFIG_TPS6507X is not set
# CONFIG_MFD_TPS65086 is not set
# CONFIG_MFD_TPS65090 is not set
# CONFIG_MFD_TPS65217 is not set
# CONFIG_MFD_TI_LP873X is not set
# CONFIG_MFD_TI_LP87565 is not set
# CONFIG_MFD_TPS65218 is not set
# CONFIG_MFD_TPS65219 is not set
# CONFIG_MFD_TPS6586X is not set
# CONFIG_MFD_TPS65910 is not set
# CONFIG_MFD_TPS65912_I2C is not set
# CONFIG_MFD_TPS65912_SPI is not set
# CONFIG_MFD_TPS6594_I2C is not set
# CONFIG_MFD_TPS6594_SPI is not set
CONFIG_TWL4030_CORE=y
# CONFIG_MFD_TWL4030_AUDIO is not set
# CONFIG_TWL6040_CORE is not set
# CONFIG_MFD_LM3533 is not set
# CONFIG_MFD_TC3589X is not set
# CONFIG_MFD_TQMX86 is not set
# CONFIG_MFD_VX855 is not set
# CONFIG_MFD_ARIZONA_I2C is not set
# CONFIG_MFD_ARIZONA_SPI is not set
# CONFIG_MFD_WM8400 is not set
# CONFIG_MFD_WM831X_I2C is not set
# CONFIG_MFD_WM831X_SPI is not set
# CONFIG_MFD_WM8350_I2C is not set
# CONFIG_MFD_WM8994 is not set
# CONFIG_MFD_ROHM_BD718XX is not set
# CONFIG_MFD_ROHM_BD71828 is not set
# CONFIG_MFD_ROHM_BD957XMUF is not set
# CONFIG_MFD_ROHM_BD96801 is not set
# CONFIG_MFD_STPMIC1 is not set
# CONFIG_MFD_STMFX is not set
# CONFIG_MFD_ATC260X_I2C is not set
# CONFIG_MFD_QCOM_PM8008 is not set
# CONFIG_RAVE_SP_CORE is not set
# CONFIG_MFD_INTEL_M10_BMC_SPI is not set
# CONFIG_MFD_QNAP_MCU is not set
# CONFIG_MFD_RSMU_I2C is not set
# CONFIG_MFD_RSMU_SPI is not set
# CONFIG_MFD_UPBOARD_FPGA is not set
# CONFIG_MFD_MAX7360 is not set
# end of Multifunction device drivers

CONFIG_REGULATOR=y
# CONFIG_REGULATOR_DEBUG is not set
CONFIG_REGULATOR_FIXED_VOLTAGE=y
# CONFIG_REGULATOR_VIRTUAL_CONSUMER is not set
# CONFIG_REGULATOR_USERSPACE_CONSUMER is not set
# CONFIG_REGULATOR_NETLINK_EVENTS is not set
# CONFIG_REGULATOR_88PG86X is not set
# CONFIG_REGULATOR_ACT8865 is not set
# CONFIG_REGULATOR_AD5398 is not set
# CONFIG_REGULATOR_ADP5055 is not set
# CONFIG_REGULATOR_AW37503 is not set
# CONFIG_REGULATOR_DA9121 is not set
# CONFIG_REGULATOR_DA9210 is not set
# CONFIG_REGULATOR_DA9211 is not set
# CONFIG_REGULATOR_FAN53555 is not set
# CONFIG_REGULATOR_FAN53880 is not set
# CONFIG_REGULATOR_GPIO is not set
# CONFIG_REGULATOR_ISL9305 is not set
# CONFIG_REGULATOR_ISL6271A is not set
# CONFIG_REGULATOR_FP9931 is not set
# CONFIG_REGULATOR_LP3971 is not set
# CONFIG_REGULATOR_LP3972 is not set
# CONFIG_REGULATOR_LP872X is not set
# CONFIG_REGULATOR_LP8755 is not set
# CONFIG_REGULATOR_LTC3589 is not set
# CONFIG_REGULATOR_LTC3676 is not set
# CONFIG_REGULATOR_MAX1586 is not set
# CONFIG_REGULATOR_MAX77503 is not set
# CONFIG_REGULATOR_MAX77675 is not set
# CONFIG_REGULATOR_MAX77857 is not set
# CONFIG_REGULATOR_MAX8649 is not set
# CONFIG_REGULATOR_MAX8660 is not set
# CONFIG_REGULATOR_MAX8893 is not set
# CONFIG_REGULATOR_MAX8952 is not set
# CONFIG_REGULATOR_MAX20086 is not set
# CONFIG_REGULATOR_MAX20411 is not set
# CONFIG_REGULATOR_MAX77826 is not set
# CONFIG_REGULATOR_MAX77838 is not set
# CONFIG_REGULATOR_MCP16502 is not set
# CONFIG_REGULATOR_MP5416 is not set
# CONFIG_REGULATOR_MP8859 is not set
# CONFIG_REGULATOR_MP886X is not set
# CONFIG_REGULATOR_MPQ7920 is not set
# CONFIG_REGULATOR_MT6311 is not set
# CONFIG_REGULATOR_MT6360 is not set
# CONFIG_REGULATOR_MT6370 is not set
# CONFIG_REGULATOR_PCA9450 is not set
# CONFIG_REGULATOR_PF9453 is not set
# CONFIG_REGULATOR_PF0900 is not set
# CONFIG_REGULATOR_PF530X is not set
# CONFIG_REGULATOR_PF8X00 is not set
# CONFIG_REGULATOR_PFUZE100 is not set
# CONFIG_REGULATOR_PV88060 is not set
# CONFIG_REGULATOR_PV88080 is not set
# CONFIG_REGULATOR_PV88090 is not set
# CONFIG_REGULATOR_RAA215300 is not set
# CONFIG_REGULATOR_RT4801 is not set
# CONFIG_REGULATOR_RT4803 is not set
# CONFIG_REGULATOR_RT5133 is not set
# CONFIG_REGULATOR_RT5190A is not set
# CONFIG_REGULATOR_RT5739 is not set
# CONFIG_REGULATOR_RT5759 is not set
# CONFIG_REGULATOR_RT6160 is not set
# CONFIG_REGULATOR_RT6190 is not set
# CONFIG_REGULATOR_RT6245 is not set
# CONFIG_REGULATOR_RT8092 is not set
# CONFIG_REGULATOR_RTQ2134 is not set
# CONFIG_REGULATOR_RTMV20 is not set
# CONFIG_REGULATOR_RTQ6752 is not set
# CONFIG_REGULATOR_RTQ2208 is not set
# CONFIG_REGULATOR_SLG51000 is not set
# CONFIG_REGULATOR_SY8106A is not set
# CONFIG_REGULATOR_SY8824X is not set
# CONFIG_REGULATOR_SY8827N is not set
# CONFIG_REGULATOR_TPS51632 is not set
# CONFIG_REGULATOR_TPS62360 is not set
# CONFIG_REGULATOR_TPS6286X is not set
# CONFIG_REGULATOR_TPS6287X is not set
# CONFIG_REGULATOR_TPS65023 is not set
# CONFIG_REGULATOR_TPS6507X is not set
# CONFIG_REGULATOR_TPS65132 is not set
# CONFIG_REGULATOR_TPS65185 is not set
# CONFIG_REGULATOR_TPS6524X is not set
CONFIG_REGULATOR_TWL4030=y
# CONFIG_REGULATOR_VCTRL is not set
CONFIG_RC_CORE=y
# CONFIG_LIRC is not set
# CONFIG_RC_MAP is not set
# CONFIG_RC_DECODERS is not set
CONFIG_RC_DEVICES=y
# CONFIG_IR_ENE is not set
# CONFIG_IR_FINTEK is not set
# CONFIG_IR_GPIO_CIR is not set
# CONFIG_IR_HIX5HD2 is not set
CONFIG_IR_IGORPLUGUSB=y
CONFIG_IR_IGUANA=y
CONFIG_IR_IMON=y
CONFIG_IR_IMON_RAW=y
# CONFIG_IR_ITE_CIR is not set
CONFIG_IR_MCEUSB=y
# CONFIG_IR_NUVOTON is not set
CONFIG_IR_REDRAT3=y
# CONFIG_IR_SERIAL is not set
CONFIG_IR_STREAMZAP=y
CONFIG_IR_TOY=y
CONFIG_IR_TTUSBIR=y
# CONFIG_IR_WINBOND_CIR is not set
CONFIG_RC_ATI_REMOTE=y
# CONFIG_RC_LOOPBACK is not set
CONFIG_RC_XBOX_DVD=y
CONFIG_CEC_CORE=y

#
# CEC support
#
# CONFIG_MEDIA_CEC_RC is not set
CONFIG_MEDIA_CEC_SUPPORT=y
# CONFIG_CEC_CH7322 is not set
# CONFIG_CEC_NXP_TDA9950 is not set
# CONFIG_CEC_GPIO is not set
# CONFIG_CEC_SECO is not set
# CONFIG_USB_EXTRON_DA_HD_4K_PLUS_CEC is not set
CONFIG_USB_PULSE8_CEC=y
CONFIG_USB_RAINSHADOW_CEC=y
# end of CEC support

CONFIG_MEDIA_SUPPORT=y
CONFIG_MEDIA_SUPPORT_FILTER=y
# CONFIG_MEDIA_SUBDRV_AUTOSELECT is not set

#
# Media device types
#
CONFIG_MEDIA_CAMERA_SUPPORT=y
CONFIG_MEDIA_ANALOG_TV_SUPPORT=y
CONFIG_MEDIA_DIGITAL_TV_SUPPORT=y
CONFIG_MEDIA_RADIO_SUPPORT=y
CONFIG_MEDIA_SDR_SUPPORT=y
CONFIG_MEDIA_PLATFORM_SUPPORT=y
CONFIG_MEDIA_TEST_SUPPORT=y
# end of Media device types

CONFIG_VIDEO_DEV=y
CONFIG_MEDIA_CONTROLLER=y
CONFIG_DVB_CORE=y

#
# Video4Linux options
#
CONFIG_VIDEO_V4L2_I2C=y
CONFIG_VIDEO_V4L2_SUBDEV_API=y
# CONFIG_VIDEO_ADV_DEBUG is not set
# CONFIG_VIDEO_FIXED_MINOR_RANGES is not set
CONFIG_VIDEO_TUNER=y
CONFIG_V4L2_MEM2MEM_DEV=y
# end of Video4Linux options

#
# Media controller options
#
CONFIG_MEDIA_CONTROLLER_DVB=y
# end of Media controller options

#
# Digital TV options
#
# CONFIG_DVB_MMAP is not set
# CONFIG_DVB_NET is not set
CONFIG_DVB_MAX_ADAPTERS=16
# CONFIG_DVB_DYNAMIC_MINORS is not set
# CONFIG_DVB_DEMUX_SECTION_LOSS_LOG is not set
# CONFIG_DVB_ULE_DEBUG is not set
# end of Digital TV options

#
# Media drivers
#

#
# Drivers filtered as selected at 'Filter media drivers'
#

#
# Media drivers
#
CONFIG_MEDIA_USB_SUPPORT=y

#
# Webcam devices
#
CONFIG_USB_GSPCA=y
CONFIG_USB_GSPCA_BENQ=y
CONFIG_USB_GSPCA_CONEX=y
CONFIG_USB_GSPCA_CPIA1=y
CONFIG_USB_GSPCA_DTCS033=y
CONFIG_USB_GSPCA_ETOMS=y
CONFIG_USB_GSPCA_FINEPIX=y
CONFIG_USB_GSPCA_JEILINJ=y
CONFIG_USB_GSPCA_JL2005BCD=y
CONFIG_USB_GSPCA_KINECT=y
CONFIG_USB_GSPCA_KONICA=y
CONFIG_USB_GSPCA_MARS=y
CONFIG_USB_GSPCA_MR97310A=y
CONFIG_USB_GSPCA_NW80X=y
CONFIG_USB_GSPCA_OV519=y
CONFIG_USB_GSPCA_OV534=y
CONFIG_USB_GSPCA_OV534_9=y
CONFIG_USB_GSPCA_PAC207=y
CONFIG_USB_GSPCA_PAC7302=y
CONFIG_USB_GSPCA_PAC7311=y
CONFIG_USB_GSPCA_SE401=y
CONFIG_USB_GSPCA_SN9C2028=y
CONFIG_USB_GSPCA_SN9C20X=y
CONFIG_USB_GSPCA_SONIXB=y
CONFIG_USB_GSPCA_SONIXJ=y
CONFIG_USB_GSPCA_SPCA1528=y
CONFIG_USB_GSPCA_SPCA500=y
CONFIG_USB_GSPCA_SPCA501=y
CONFIG_USB_GSPCA_SPCA505=y
CONFIG_USB_GSPCA_SPCA506=y
CONFIG_USB_GSPCA_SPCA508=y
CONFIG_USB_GSPCA_SPCA561=y
CONFIG_USB_GSPCA_SQ905=y
CONFIG_USB_GSPCA_SQ905C=y
CONFIG_USB_GSPCA_SQ930X=y
CONFIG_USB_GSPCA_STK014=y
CONFIG_USB_GSPCA_STK1135=y
CONFIG_USB_GSPCA_STV0680=y
CONFIG_USB_GSPCA_SUNPLUS=y
CONFIG_USB_GSPCA_T613=y
CONFIG_USB_GSPCA_TOPRO=y
CONFIG_USB_GSPCA_TOUPTEK=y
CONFIG_USB_GSPCA_TV8532=y
CONFIG_USB_GSPCA_VC032X=y
CONFIG_USB_GSPCA_VICAM=y
CONFIG_USB_GSPCA_XIRLINK_CIT=y
CONFIG_USB_GSPCA_ZC3XX=y
CONFIG_USB_GL860=y
CONFIG_USB_M5602=y
CONFIG_USB_STV06XX=y
CONFIG_USB_PWC=y
# CONFIG_USB_PWC_DEBUG is not set
CONFIG_USB_PWC_INPUT_EVDEV=y
CONFIG_USB_S2255=y
CONFIG_VIDEO_USBTV=y
CONFIG_USB_VIDEO_CLASS=y
CONFIG_USB_VIDEO_CLASS_INPUT_EVDEV=y

#
# Analog TV USB devices
#
CONFIG_VIDEO_GO7007=y
CONFIG_VIDEO_GO7007_USB=y
CONFIG_VIDEO_GO7007_LOADER=y
CONFIG_VIDEO_GO7007_USB_S2250_BOARD=y
CONFIG_VIDEO_HDPVR=y
CONFIG_VIDEO_PVRUSB2=y
CONFIG_VIDEO_PVRUSB2_SYSFS=y
CONFIG_VIDEO_PVRUSB2_DVB=y
# CONFIG_VIDEO_PVRUSB2_DEBUGIFC is not set
CONFIG_VIDEO_STK1160=y

#
# Analog/digital TV USB devices
#
CONFIG_VIDEO_AU0828=y
CONFIG_VIDEO_AU0828_V4L2=y
CONFIG_VIDEO_AU0828_RC=y
CONFIG_VIDEO_CX231XX=y
CONFIG_VIDEO_CX231XX_RC=y
CONFIG_VIDEO_CX231XX_ALSA=y
CONFIG_VIDEO_CX231XX_DVB=y

#
# Digital TV USB devices
#
CONFIG_DVB_AS102=y
CONFIG_DVB_B2C2_FLEXCOP_USB=y
# CONFIG_DVB_B2C2_FLEXCOP_USB_DEBUG is not set
CONFIG_DVB_USB_V2=y
CONFIG_DVB_USB_AF9015=y
CONFIG_DVB_USB_AF9035=y
CONFIG_DVB_USB_ANYSEE=y
CONFIG_DVB_USB_AU6610=y
CONFIG_DVB_USB_AZ6007=y
CONFIG_DVB_USB_CE6230=y
CONFIG_DVB_USB_DVBSKY=y
CONFIG_DVB_USB_EC168=y
CONFIG_DVB_USB_GL861=y
CONFIG_DVB_USB_LME2510=y
CONFIG_DVB_USB_MXL111SF=y
CONFIG_DVB_USB_RTL28XXU=y
CONFIG_DVB_USB_ZD1301=y
CONFIG_DVB_USB=y
# CONFIG_DVB_USB_DEBUG is not set
CONFIG_DVB_USB_A800=y
CONFIG_DVB_USB_AF9005=y
CONFIG_DVB_USB_AF9005_REMOTE=y
CONFIG_DVB_USB_AZ6027=y
CONFIG_DVB_USB_CINERGY_T2=y
CONFIG_DVB_USB_CXUSB=y
CONFIG_DVB_USB_CXUSB_ANALOG=y
CONFIG_DVB_USB_DIB0700=y
CONFIG_DVB_USB_DIB3000MC=y
CONFIG_DVB_USB_DIBUSB_MB=y
# CONFIG_DVB_USB_DIBUSB_MB_FAULTY is not set
CONFIG_DVB_USB_DIBUSB_MC=y
CONFIG_DVB_USB_DIGITV=y
CONFIG_DVB_USB_DTT200U=y
CONFIG_DVB_USB_DTV5100=y
CONFIG_DVB_USB_DW2102=y
CONFIG_DVB_USB_GP8PSK=y
CONFIG_DVB_USB_M920X=y
CONFIG_DVB_USB_NOVA_T_USB2=y
CONFIG_DVB_USB_OPERA1=y
CONFIG_DVB_USB_PCTV452E=y
CONFIG_DVB_USB_TECHNISAT_USB2=y
CONFIG_DVB_USB_TTUSB2=y
CONFIG_DVB_USB_UMT_010=y
CONFIG_DVB_USB_VP702X=y
CONFIG_DVB_USB_VP7045=y
CONFIG_SMS_USB_DRV=y
CONFIG_DVB_TTUSB_BUDGET=y
CONFIG_DVB_TTUSB_DEC=y

#
# Webcam, TV (analog/digital) USB devices
#
CONFIG_VIDEO_EM28XX=y
CONFIG_VIDEO_EM28XX_V4L2=y
CONFIG_VIDEO_EM28XX_ALSA=y
CONFIG_VIDEO_EM28XX_DVB=y
CONFIG_VIDEO_EM28XX_RC=y

#
# Software defined radio USB devices
#
CONFIG_USB_AIRSPY=y
CONFIG_USB_HACKRF=y
CONFIG_USB_MSI2500=y
# CONFIG_MEDIA_PCI_SUPPORT is not set
CONFIG_RADIO_ADAPTERS=y
# CONFIG_RADIO_MAXIRADIO is not set
# CONFIG_RADIO_SAA7706H is not set
CONFIG_RADIO_SHARK=y
CONFIG_RADIO_SHARK2=y
CONFIG_RADIO_SI4713=y
CONFIG_RADIO_TEA575X=y
# CONFIG_RADIO_TEA5764 is not set
# CONFIG_RADIO_TEF6862 is not set
CONFIG_USB_DSBR=y
CONFIG_USB_KEENE=y
CONFIG_USB_MA901=y
CONFIG_USB_MR800=y
CONFIG_USB_RAREMONO=y
CONFIG_RADIO_SI470X=y
CONFIG_USB_SI470X=y
# CONFIG_I2C_SI470X is not set
CONFIG_USB_SI4713=y
# CONFIG_PLATFORM_SI4713 is not set
CONFIG_I2C_SI4713=y
# CONFIG_MEDIA_PLATFORM_DRIVERS is not set

#
# MMC/SDIO DVB adapters
#
CONFIG_SMS_SDIO_DRV=y
CONFIG_V4L_TEST_DRIVERS=y
CONFIG_VIDEO_VIM2M=y
CONFIG_VIDEO_VICODEC=y
CONFIG_VIDEO_VIMC=y
CONFIG_VIDEO_VIVID=y
CONFIG_VIDEO_VIVID_CEC=y
# CONFIG_VIDEO_VIVID_OSD is not set
CONFIG_VIDEO_VIVID_MAX_DEVS=64
# CONFIG_VIDEO_VISL is not set
CONFIG_DVB_TEST_DRIVERS=y
CONFIG_DVB_VIDTV=y

#
# FireWire (IEEE 1394) Adapters
#
# CONFIG_DVB_FIREDTV is not set
CONFIG_MEDIA_COMMON_OPTIONS=y

#
# common driver options
#
CONFIG_CYPRESS_FIRMWARE=y
CONFIG_TTPCI_EEPROM=y
CONFIG_UVC_COMMON=y
CONFIG_VIDEO_CX2341X=y
CONFIG_VIDEO_TVEEPROM=y
CONFIG_DVB_B2C2_FLEXCOP=y
CONFIG_SMS_SIANO_MDTV=y
CONFIG_SMS_SIANO_RC=y
CONFIG_SMS_SIANO_DEBUGFS=y
CONFIG_VIDEO_V4L2_TPG=y
CONFIG_VIDEOBUF2_CORE=y
CONFIG_VIDEOBUF2_V4L2=y
CONFIG_VIDEOBUF2_MEMOPS=y
CONFIG_VIDEOBUF2_DMA_CONTIG=y
CONFIG_VIDEOBUF2_VMALLOC=y
CONFIG_VIDEOBUF2_DMA_SG=y
# end of Media drivers

#
# Media ancillary drivers
#
CONFIG_MEDIA_ATTACH=y
# CONFIG_VIDEO_IR_I2C is not set
# CONFIG_VIDEO_CAMERA_SENSOR is not set

#
# Camera ISPs
#
# CONFIG_VIDEO_THP7312 is not set
# end of Camera ISPs

# CONFIG_VIDEO_CAMERA_LENS is not set

#
# Flash devices
#
# CONFIG_VIDEO_ADP1653 is not set
# CONFIG_VIDEO_LM3560 is not set
# CONFIG_VIDEO_LM3646 is not set
# end of Flash devices

#
# Audio decoders, processors and mixers
#
# CONFIG_VIDEO_CS3308 is not set
# CONFIG_VIDEO_CS5345 is not set
CONFIG_VIDEO_CS53L32A=y
CONFIG_VIDEO_MSP3400=y
# CONFIG_VIDEO_SONY_BTF_MPX is not set
# CONFIG_VIDEO_TDA1997X is not set
# CONFIG_VIDEO_TDA7432 is not set
# CONFIG_VIDEO_TDA9840 is not set
# CONFIG_VIDEO_TEA6415C is not set
# CONFIG_VIDEO_TEA6420 is not set
# CONFIG_VIDEO_TLV320AIC23B is not set
# CONFIG_VIDEO_TVAUDIO is not set
# CONFIG_VIDEO_UDA1342 is not set
# CONFIG_VIDEO_VP27SMPX is not set
# CONFIG_VIDEO_WM8739 is not set
CONFIG_VIDEO_WM8775=y
# end of Audio decoders, processors and mixers

#
# RDS decoders
#
# CONFIG_VIDEO_SAA6588 is not set
# end of RDS decoders

#
# Video decoders
#
# CONFIG_VIDEO_ADV7180 is not set
# CONFIG_VIDEO_ADV7183 is not set
# CONFIG_VIDEO_ADV748X is not set
# CONFIG_VIDEO_ADV7604 is not set
# CONFIG_VIDEO_ADV7842 is not set
# CONFIG_VIDEO_BT819 is not set
# CONFIG_VIDEO_BT856 is not set
# CONFIG_VIDEO_BT866 is not set
# CONFIG_VIDEO_ISL7998X is not set
# CONFIG_VIDEO_LT6911UXE is not set
# CONFIG_VIDEO_KS0127 is not set
# CONFIG_VIDEO_MAX9286 is not set
# CONFIG_VIDEO_ML86V7667 is not set
# CONFIG_VIDEO_SAA7110 is not set
CONFIG_VIDEO_SAA711X=y
# CONFIG_VIDEO_TC358743 is not set
# CONFIG_VIDEO_TC358746 is not set
# CONFIG_VIDEO_TVP514X is not set
# CONFIG_VIDEO_TVP5150 is not set
# CONFIG_VIDEO_TVP7002 is not set
# CONFIG_VIDEO_TW2804 is not set
# CONFIG_VIDEO_TW9900 is not set
# CONFIG_VIDEO_TW9903 is not set
# CONFIG_VIDEO_TW9906 is not set
# CONFIG_VIDEO_TW9910 is not set
# CONFIG_VIDEO_VPX3220 is not set

#
# Video and audio decoders
#
# CONFIG_VIDEO_SAA717X is not set
CONFIG_VIDEO_CX25840=y
# end of Video decoders

#
# Video encoders
#
# CONFIG_VIDEO_ADV7170 is not set
# CONFIG_VIDEO_ADV7175 is not set
# CONFIG_VIDEO_ADV7343 is not set
# CONFIG_VIDEO_ADV7393 is not set
# CONFIG_VIDEO_ADV7511 is not set
# CONFIG_VIDEO_AK881X is not set
# CONFIG_VIDEO_SAA7127 is not set
# CONFIG_VIDEO_SAA7185 is not set
# CONFIG_VIDEO_THS8200 is not set
# end of Video encoders

#
# Video improvement chips
#
# CONFIG_VIDEO_UPD64031A is not set
# CONFIG_VIDEO_UPD64083 is not set
# end of Video improvement chips

#
# Audio/Video compression chips
#
# CONFIG_VIDEO_SAA6752HS is not set
# end of Audio/Video compression chips

#
# SDR tuner chips
#
# CONFIG_SDR_MAX2175 is not set
# end of SDR tuner chips

#
# Miscellaneous helper chips
#
# CONFIG_VIDEO_I2C is not set
# CONFIG_VIDEO_M52790 is not set
# CONFIG_VIDEO_ST_MIPID02 is not set
# CONFIG_VIDEO_THS7303 is not set
# end of Miscellaneous helper chips

#
# Video serializers and deserializers
#
# CONFIG_VIDEO_DS90UB913 is not set
# CONFIG_VIDEO_DS90UB953 is not set
# CONFIG_VIDEO_DS90UB960 is not set
# CONFIG_VIDEO_MAX96714 is not set
# CONFIG_VIDEO_MAX96717 is not set
# end of Video serializers and deserializers

#
# Media SPI Adapters
#
# CONFIG_CXD2880_SPI_DRV is not set
# CONFIG_VIDEO_GS1662 is not set
# end of Media SPI Adapters

CONFIG_MEDIA_TUNER=y

#
# Customize TV tuners
#
# CONFIG_MEDIA_TUNER_E4000 is not set
# CONFIG_MEDIA_TUNER_FC0011 is not set
# CONFIG_MEDIA_TUNER_FC0012 is not set
# CONFIG_MEDIA_TUNER_FC0013 is not set
# CONFIG_MEDIA_TUNER_FC2580 is not set
# CONFIG_MEDIA_TUNER_IT913X is not set
# CONFIG_MEDIA_TUNER_M88RS6000T is not set
# CONFIG_MEDIA_TUNER_MAX2165 is not set
# CONFIG_MEDIA_TUNER_MC44S803 is not set
CONFIG_MEDIA_TUNER_MSI001=y
# CONFIG_MEDIA_TUNER_MT2060 is not set
# CONFIG_MEDIA_TUNER_MT2063 is not set
# CONFIG_MEDIA_TUNER_MT20XX is not set
# CONFIG_MEDIA_TUNER_MT2131 is not set
# CONFIG_MEDIA_TUNER_MT2266 is not set
# CONFIG_MEDIA_TUNER_MXL301RF is not set
# CONFIG_MEDIA_TUNER_MXL5005S is not set
# CONFIG_MEDIA_TUNER_MXL5007T is not set
# CONFIG_MEDIA_TUNER_QM1D1B0004 is not set
# CONFIG_MEDIA_TUNER_QM1D1C0042 is not set
# CONFIG_MEDIA_TUNER_QT1010 is not set
# CONFIG_MEDIA_TUNER_R820T is not set
# CONFIG_MEDIA_TUNER_SI2157 is not set
# CONFIG_MEDIA_TUNER_SIMPLE is not set
# CONFIG_MEDIA_TUNER_TDA18212 is not set
# CONFIG_MEDIA_TUNER_TDA18218 is not set
# CONFIG_MEDIA_TUNER_TDA18250 is not set
# CONFIG_MEDIA_TUNER_TDA18271 is not set
# CONFIG_MEDIA_TUNER_TDA827X is not set
# CONFIG_MEDIA_TUNER_TDA8290 is not set
# CONFIG_MEDIA_TUNER_TDA9887 is not set
# CONFIG_MEDIA_TUNER_TEA5761 is not set
# CONFIG_MEDIA_TUNER_TEA5767 is not set
# CONFIG_MEDIA_TUNER_TUA9001 is not set
# CONFIG_MEDIA_TUNER_XC2028 is not set
# CONFIG_MEDIA_TUNER_XC4000 is not set
# CONFIG_MEDIA_TUNER_XC5000 is not set
# end of Customize TV tuners

#
# Customise DVB Frontends
#

#
# Multistandard (satellite) frontends
#
# CONFIG_DVB_M88DS3103 is not set
# CONFIG_DVB_MXL5XX is not set
# CONFIG_DVB_STB0899 is not set
# CONFIG_DVB_STB6100 is not set
# CONFIG_DVB_STV090x is not set
# CONFIG_DVB_STV0910 is not set
# CONFIG_DVB_STV6110x is not set
# CONFIG_DVB_STV6111 is not set

#
# Multistandard (cable + terrestrial) frontends
#
# CONFIG_DVB_DRXK is not set
# CONFIG_DVB_MN88472 is not set
# CONFIG_DVB_MN88473 is not set
# CONFIG_DVB_SI2165 is not set
# CONFIG_DVB_TDA18271C2DD is not set

#
# DVB-S (satellite) frontends
#
# CONFIG_DVB_CX24110 is not set
# CONFIG_DVB_CX24116 is not set
# CONFIG_DVB_CX24117 is not set
# CONFIG_DVB_CX24120 is not set
# CONFIG_DVB_CX24123 is not set
# CONFIG_DVB_DS3000 is not set
# CONFIG_DVB_MB86A16 is not set
# CONFIG_DVB_MT312 is not set
# CONFIG_DVB_S5H1420 is not set
# CONFIG_DVB_SI21XX is not set
# CONFIG_DVB_STB6000 is not set
# CONFIG_DVB_STV0288 is not set
# CONFIG_DVB_STV0299 is not set
# CONFIG_DVB_STV0900 is not set
# CONFIG_DVB_STV6110 is not set
# CONFIG_DVB_TDA10071 is not set
# CONFIG_DVB_TDA10086 is not set
# CONFIG_DVB_TDA8083 is not set
# CONFIG_DVB_TDA8261 is not set
# CONFIG_DVB_TDA826X is not set
# CONFIG_DVB_TS2020 is not set
# CONFIG_DVB_TUA6100 is not set
# CONFIG_DVB_TUNER_CX24113 is not set
# CONFIG_DVB_TUNER_ITD1000 is not set
# CONFIG_DVB_VES1X93 is not set
# CONFIG_DVB_ZL10036 is not set
# CONFIG_DVB_ZL10039 is not set

#
# DVB-T (terrestrial) frontends
#
CONFIG_DVB_AF9013=y
CONFIG_DVB_AS102_FE=y
# CONFIG_DVB_CX22700 is not set
# CONFIG_DVB_CX22702 is not set
# CONFIG_DVB_CXD2820R is not set
# CONFIG_DVB_CXD2841ER is not set
CONFIG_DVB_DIB3000MB=y
CONFIG_DVB_DIB3000MC=y
# CONFIG_DVB_DIB7000M is not set
# CONFIG_DVB_DIB7000P is not set
# CONFIG_DVB_DIB9000 is not set
# CONFIG_DVB_DRXD is not set
CONFIG_DVB_EC100=y
CONFIG_DVB_GP8PSK_FE=y
# CONFIG_DVB_L64781 is not set
# CONFIG_DVB_MT352 is not set
# CONFIG_DVB_NXT6000 is not set
CONFIG_DVB_RTL2830=y
CONFIG_DVB_RTL2832=y
CONFIG_DVB_RTL2832_SDR=y
# CONFIG_DVB_S5H1432 is not set
# CONFIG_DVB_SI2168 is not set
# CONFIG_DVB_SP887X is not set
# CONFIG_DVB_STV0367 is not set
# CONFIG_DVB_TDA10048 is not set
# CONFIG_DVB_TDA1004X is not set
# CONFIG_DVB_ZD1301_DEMOD is not set
CONFIG_DVB_ZL10353=y
# CONFIG_DVB_CXD2880 is not set

#
# DVB-C (cable) frontends
#
# CONFIG_DVB_STV0297 is not set
# CONFIG_DVB_TDA10021 is not set
# CONFIG_DVB_TDA10023 is not set
# CONFIG_DVB_VES1820 is not set

#
# ATSC (North American/Korean Terrestrial/Cable DTV) frontends
#
# CONFIG_DVB_AU8522_DTV is not set
# CONFIG_DVB_AU8522_V4L is not set
# CONFIG_DVB_BCM3510 is not set
# CONFIG_DVB_LG2160 is not set
# CONFIG_DVB_LGDT3305 is not set
# CONFIG_DVB_LGDT3306A is not set
# CONFIG_DVB_LGDT330X is not set
# CONFIG_DVB_MXL692 is not set
# CONFIG_DVB_NXT200X is not set
# CONFIG_DVB_OR51132 is not set
# CONFIG_DVB_OR51211 is not set
# CONFIG_DVB_S5H1409 is not set
# CONFIG_DVB_S5H1411 is not set

#
# ISDB-T (terrestrial) frontends
#
# CONFIG_DVB_DIB8000 is not set
# CONFIG_DVB_MB86A20S is not set
# CONFIG_DVB_S921 is not set

#
# ISDB-S (satellite) & ISDB-T (terrestrial) frontends
#
# CONFIG_DVB_MN88443X is not set
# CONFIG_DVB_TC90522 is not set

#
# Digital terrestrial only tuners/PLL
#
# CONFIG_DVB_PLL is not set
# CONFIG_DVB_TUNER_DIB0070 is not set
# CONFIG_DVB_TUNER_DIB0090 is not set

#
# SEC control devices for DVB-S
#
# CONFIG_DVB_A8293 is not set
CONFIG_DVB_AF9033=y
# CONFIG_DVB_ASCOT2E is not set
# CONFIG_DVB_ATBM8830 is not set
# CONFIG_DVB_HELENE is not set
# CONFIG_DVB_HORUS3A is not set
# CONFIG_DVB_ISL6405 is not set
# CONFIG_DVB_ISL6421 is not set
# CONFIG_DVB_ISL6423 is not set
# CONFIG_DVB_IX2505V is not set
# CONFIG_DVB_LGS8GL5 is not set
# CONFIG_DVB_LGS8GXX is not set
# CONFIG_DVB_LNBH25 is not set
# CONFIG_DVB_LNBH29 is not set
# CONFIG_DVB_LNBP21 is not set
# CONFIG_DVB_LNBP22 is not set
# CONFIG_DVB_M88RS2000 is not set
# CONFIG_DVB_TDA665x is not set
# CONFIG_DVB_DRX39XYJ is not set

#
# Common Interface (EN50221) controller drivers
#
# CONFIG_DVB_CXD2099 is not set
# CONFIG_DVB_SP2 is not set
# end of Customise DVB Frontends

#
# Tools to develop new frontends
#
# CONFIG_DVB_DUMMY_FE is not set
# end of Media ancillary drivers

#
# Graphics support
#
CONFIG_APERTURE_HELPERS=y
CONFIG_SCREEN_INFO=y
CONFIG_VIDEO=y
# CONFIG_AUXDISPLAY is not set
# CONFIG_PANEL is not set
CONFIG_AGP=y
CONFIG_AGP_AMD64=y
CONFIG_AGP_INTEL=y
# CONFIG_AGP_SIS is not set
# CONFIG_AGP_VIA is not set
CONFIG_INTEL_GTT=y
# CONFIG_VGA_SWITCHEROO is not set
CONFIG_GPU_BUDDY=y
CONFIG_DRM=y

#
# DRM debugging options
#
# CONFIG_DRM_WERROR is not set
CONFIG_DRM_DEBUG_MM=y
# end of DRM debugging options

CONFIG_DRM_MIPI_DSI=y
CONFIG_DRM_KMS_HELPER=y
# CONFIG_DRM_PANIC is not set
# CONFIG_DRM_RAS is not set
# CONFIG_DRM_DEBUG_DP_MST_TOPOLOGY_REFS is not set
# CONFIG_DRM_DEBUG_MODESET_LOCK is not set
CONFIG_DRM_CLIENT=y
CONFIG_DRM_CLIENT_LIB=y
CONFIG_DRM_CLIENT_SELECTION=y
CONFIG_DRM_CLIENT_SETUP=y

#
# Supported DRM clients
#
CONFIG_DRM_FBDEV_EMULATION=y
CONFIG_DRM_FBDEV_OVERALLOC=100
# CONFIG_DRM_FBDEV_LEAK_PHYS_SMEM is not set
# CONFIG_DRM_CLIENT_LOG is not set
CONFIG_DRM_CLIENT_DEFAULT_FBDEV=y
CONFIG_DRM_CLIENT_DEFAULT="fbdev"
# end of Supported DRM clients

# CONFIG_DRM_LOAD_EDID_FIRMWARE is not set
CONFIG_DRM_DISPLAY_DP_AUX_BUS=y
CONFIG_DRM_DISPLAY_HELPER=y
# CONFIG_DRM_DISPLAY_DP_AUX_CEC is not set
# CONFIG_DRM_DISPLAY_DP_AUX_CHARDEV is not set
CONFIG_DRM_DISPLAY_DP_HELPER=y
CONFIG_DRM_DISPLAY_DSC_HELPER=y
CONFIG_DRM_DISPLAY_HDCP_HELPER=y
CONFIG_DRM_DISPLAY_HDMI_HELPER=y
CONFIG_DRM_TTM=y
CONFIG_DRM_BUDDY=y
CONFIG_DRM_TTM_HELPER=y
CONFIG_DRM_GEM_SHMEM_HELPER=y
# CONFIG_DRM_AMDGPU is not set

#
# ARM devices
#
# CONFIG_DRM_KOMEDA is not set
# end of ARM devices

# CONFIG_DRM_AST is not set
CONFIG_DRM_BRIDGE=y
CONFIG_DRM_PANEL_BRIDGE=y
CONFIG_DRM_AUX_BRIDGE=y
CONFIG_DRM_AUX_HPD_BRIDGE=y

#
# Display Interface Bridges
#
# CONFIG_DRM_CHIPONE_ICN6211 is not set
# CONFIG_DRM_CHRONTEL_CH7033 is not set
# CONFIG_DRM_DISPLAY_CONNECTOR is not set
# CONFIG_DRM_I2C_NXP_TDA998X is not set
# CONFIG_DRM_ITE_IT6263 is not set
# CONFIG_DRM_ITE_IT6505 is not set
# CONFIG_DRM_LONTIUM_LT8912B is not set
# CONFIG_DRM_LONTIUM_LT9211 is not set
# CONFIG_DRM_LONTIUM_LT9611 is not set
# CONFIG_DRM_LONTIUM_LT9611UXC is not set
# CONFIG_DRM_LONTIUM_LT8713SX is not set
# CONFIG_DRM_ITE_IT66121 is not set
# CONFIG_DRM_LVDS_CODEC is not set
# CONFIG_DRM_MEGACHIPS_STDPXXXX_GE_B850V3_FW is not set
# CONFIG_DRM_NWL_MIPI_DSI is not set
# CONFIG_DRM_NXP_PTN3460 is not set
# CONFIG_DRM_PARADE_PS8622 is not set
# CONFIG_DRM_PARADE_PS8640 is not set
# CONFIG_DRM_SAMSUNG_DSIM is not set
# CONFIG_DRM_SIL_SII8620 is not set
# CONFIG_DRM_SII902X is not set
# CONFIG_DRM_SII9234 is not set
# CONFIG_DRM_SIMPLE_BRIDGE is not set
# CONFIG_DRM_SOLOMON_SSD2825 is not set
# CONFIG_DRM_THINE_THC63LVD1024 is not set
# CONFIG_DRM_TOSHIBA_TC358762 is not set
# CONFIG_DRM_TOSHIBA_TC358764 is not set
# CONFIG_DRM_TOSHIBA_TC358767 is not set
# CONFIG_DRM_TOSHIBA_TC358768 is not set
# CONFIG_DRM_TOSHIBA_TC358775 is not set
# CONFIG_DRM_TI_DLPC3433 is not set
# CONFIG_DRM_TI_TDP158 is not set
# CONFIG_DRM_TI_TFP410 is not set
# CONFIG_DRM_TI_SN65DSI83 is not set
# CONFIG_DRM_TI_SN65DSI86 is not set
# CONFIG_DRM_TI_TPD12S015 is not set
# CONFIG_DRM_WAVESHARE_BRIDGE is not set
# CONFIG_DRM_ANALOGIX_ANX6345 is not set
# CONFIG_DRM_ANALOGIX_ANX78XX is not set
# CONFIG_DRM_ANALOGIX_ANX7625 is not set
# CONFIG_DRM_I2C_ADV7511 is not set
# CONFIG_DRM_CDNS_DSI is not set
# CONFIG_DRM_CDNS_MHDP8546 is not set
# end of Display Interface Bridges

# CONFIG_DRM_ETNAVIV is not set
# CONFIG_DRM_GMA500 is not set
CONFIG_DRM_GUD=y
# CONFIG_DRM_HISI_HIBMC is not set
CONFIG_DRM_I915=y
CONFIG_DRM_I915_FORCE_PROBE=""
CONFIG_DRM_I915_CAPTURE_ERROR=y
CONFIG_DRM_I915_COMPRESS_ERROR=y
CONFIG_DRM_I915_USERPTR=y
# CONFIG_DRM_I915_GVT_KVMGT is not set
# CONFIG_DRM_I915_DP_TUNNEL is not set

#
# drm/i915 Debugging
#
# CONFIG_DRM_I915_WERROR is not set
# CONFIG_DRM_I915_REPLAY_GPU_HANGS_API is not set
# CONFIG_DRM_I915_DEBUG is not set
# CONFIG_DRM_I915_DEBUG_MMIO is not set
# CONFIG_DRM_I915_SW_FENCE_DEBUG_OBJECTS is not set
# CONFIG_DRM_I915_SW_FENCE_CHECK_DAG is not set
# CONFIG_DRM_I915_DEBUG_GUC is not set
# CONFIG_DRM_I915_SELFTEST is not set
# CONFIG_DRM_I915_LOW_LEVEL_TRACEPOINTS is not set
# CONFIG_DRM_I915_DEBUG_VBLANK_EVADE is not set
# CONFIG_DRM_I915_DEBUG_RUNTIME_PM is not set
# CONFIG_DRM_I915_DEBUG_WAKEREF is not set
# end of drm/i915 Debugging

#
# drm/i915 Profile Guided Optimisation
#
CONFIG_DRM_I915_REQUEST_TIMEOUT=20000
CONFIG_DRM_I915_FENCE_TIMEOUT=10000
CONFIG_DRM_I915_USERFAULT_AUTOSUSPEND=250
CONFIG_DRM_I915_HEARTBEAT_INTERVAL=2500
CONFIG_DRM_I915_PREEMPT_TIMEOUT=640
CONFIG_DRM_I915_PREEMPT_TIMEOUT_COMPUTE=7500
CONFIG_DRM_I915_MAX_REQUEST_BUSYWAIT=8000
CONFIG_DRM_I915_STOP_TIMEOUT=100
CONFIG_DRM_I915_TIMESLICE_DURATION=1
# end of drm/i915 Profile Guided Optimisation

# CONFIG_DRM_LOGICVC is not set
# CONFIG_DRM_MGAG200 is not set
# CONFIG_DRM_NOUVEAU is not set
CONFIG_DRM_PANEL=y

#
# Display Panels
#
# CONFIG_DRM_PANEL_ABT_Y030XX067A is not set
# CONFIG_DRM_PANEL_ARM_VERSATILE is not set
# CONFIG_DRM_PANEL_ASUS_Z00T_TM5P5_NT35596 is not set
# CONFIG_DRM_PANEL_AUO_A030JTN01 is not set
# CONFIG_DRM_PANEL_BOE_BF060Y8M_AJ0 is not set
# CONFIG_DRM_PANEL_BOE_HIMAX8279D is not set
# CONFIG_DRM_PANEL_BOE_TD4320 is not set
# CONFIG_DRM_PANEL_BOE_TH101MB31UIG002_28A is not set
# CONFIG_DRM_PANEL_BOE_TV101WUM_NL6 is not set
# CONFIG_DRM_PANEL_BOE_TV101WUM_LL2 is not set
# CONFIG_DRM_PANEL_EBBG_FT8719 is not set
# CONFIG_DRM_PANEL_ELIDA_KD35T133 is not set
# CONFIG_DRM_PANEL_FEIXIN_K101_IM2BA02 is not set
# CONFIG_DRM_PANEL_FEIYANG_FY07024DI26A30D is not set
# CONFIG_DRM_PANEL_DSI_CM is not set
# CONFIG_DRM_PANEL_LVDS is not set
# CONFIG_DRM_PANEL_HIMAX_HX8279 is not set
# CONFIG_DRM_PANEL_HIMAX_HX83102 is not set
# CONFIG_DRM_PANEL_HIMAX_HX83112A is not set
# CONFIG_DRM_PANEL_HIMAX_HX83112B is not set
# CONFIG_DRM_PANEL_HIMAX_HX83121A is not set
# CONFIG_DRM_PANEL_HIMAX_HX8394 is not set
# CONFIG_DRM_PANEL_HYDIS_HV101HD1 is not set
# CONFIG_DRM_PANEL_ILITEK_IL9322 is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9341 is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9805 is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9806E_DSI is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9806E_SPI is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9881C is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9882T is not set
# CONFIG_DRM_PANEL_INNOLUX_EJ030NA is not set
# CONFIG_DRM_PANEL_INNOLUX_P079ZCA is not set
# CONFIG_DRM_PANEL_JADARD_JD9365DA_H3 is not set
# CONFIG_DRM_PANEL_JDI_LPM102A188A is not set
# CONFIG_DRM_PANEL_JDI_LT070ME05000 is not set
# CONFIG_DRM_PANEL_JDI_R63452 is not set
# CONFIG_DRM_PANEL_KHADAS_TS050 is not set
# CONFIG_DRM_PANEL_KINGDISPLAY_KD097D04 is not set
# CONFIG_DRM_PANEL_LEADTEK_LTK050H3146W is not set
# CONFIG_DRM_PANEL_LEADTEK_LTK500HD1829 is not set
# CONFIG_DRM_PANEL_LINCOLNTECH_LCD197 is not set
# CONFIG_DRM_PANEL_LG_LB035Q02 is not set
# CONFIG_DRM_PANEL_LG_LD070WX3 is not set
# CONFIG_DRM_PANEL_LG_LG4573 is not set
# CONFIG_DRM_PANEL_LG_SW43408 is not set
# CONFIG_DRM_PANEL_LXD_M9189A is not set
# CONFIG_DRM_PANEL_MAGNACHIP_D53E6EA8966 is not set
# CONFIG_DRM_PANEL_MANTIX_MLAF057WE51 is not set
# CONFIG_DRM_PANEL_MOTOROLA_MOT is not set
# CONFIG_DRM_PANEL_NEC_NL8048HL11 is not set
# CONFIG_DRM_PANEL_NEWVISION_NV3051D is not set
# CONFIG_DRM_PANEL_NEWVISION_NV3052C is not set
# CONFIG_DRM_PANEL_NOVATEK_NT35510 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT35560 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT35950 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT36523 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT36672A is not set
# CONFIG_DRM_PANEL_NOVATEK_NT36672E is not set
# CONFIG_DRM_PANEL_NOVATEK_NT37700F is not set
# CONFIG_DRM_PANEL_NOVATEK_NT37801 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT39016 is not set
# CONFIG_DRM_PANEL_OLIMEX_LCD_OLINUXINO is not set
# CONFIG_DRM_PANEL_ORISETECH_OTA5601A is not set
# CONFIG_DRM_PANEL_ORISETECH_OTM8009A is not set
# CONFIG_DRM_PANEL_OSD_OSD101T2587_53TS is not set
# CONFIG_DRM_PANEL_PANASONIC_VVX10F034N00 is not set
# CONFIG_DRM_PANEL_RASPBERRYPI_TOUCHSCREEN is not set
# CONFIG_DRM_PANEL_RAYDIUM_RM67191 is not set
# CONFIG_DRM_PANEL_RAYDIUM_RM67200 is not set
# CONFIG_DRM_PANEL_RAYDIUM_RM68200 is not set
# CONFIG_DRM_PANEL_RAYDIUM_RM692E5 is not set
# CONFIG_DRM_PANEL_RAYDIUM_RM69380 is not set
# CONFIG_DRM_PANEL_RENESAS_R61307 is not set
# CONFIG_DRM_PANEL_RENESAS_R69328 is not set
# CONFIG_DRM_PANEL_RONBO_RB070D30 is not set
# CONFIG_DRM_PANEL_SAMSUNG_AMS581VF01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_AMS639RQ08 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E88A0_AMS427AP24 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E88A0_AMS452EF01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20 is not set
# CONFIG_DRM_PANEL_SAMSUNG_DB7430 is not set
# CONFIG_DRM_PANEL_SAMSUNG_LD9040 is not set
# CONFIG_DRM_PANEL_SAMSUNG_LTL106HL02 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3FA7 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6D16D0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6D27A1 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6D7AA0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3FC2X01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3HA2 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3HA8 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E63J0X03 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E63M0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E8AA0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E8AA5X01_AMS561RA01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E8FC0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_SOFEF00 is not set
# CONFIG_DRM_PANEL_SEIKO_43WVF1G is not set
# CONFIG_DRM_PANEL_SHARP_LQ079L1SX01 is not set
# CONFIG_DRM_PANEL_SHARP_LQ101R1SX01 is not set
# CONFIG_DRM_PANEL_SHARP_LS037V7DW01 is not set
# CONFIG_DRM_PANEL_SHARP_LS043T1LE01 is not set
# CONFIG_DRM_PANEL_SHARP_LS060T1SX01 is not set
# CONFIG_DRM_PANEL_SITRONIX_ST7701 is not set
# CONFIG_DRM_PANEL_SITRONIX_ST7703 is not set
# CONFIG_DRM_PANEL_SITRONIX_ST7789V is not set
# CONFIG_DRM_PANEL_SONY_ACX565AKM is not set
# CONFIG_DRM_PANEL_SONY_TD4353_JDI is not set
# CONFIG_DRM_PANEL_SONY_TULIP_TRULY_NT35521 is not set
# CONFIG_DRM_PANEL_STARTEK_KD070FHFID015 is not set
CONFIG_DRM_PANEL_EDP=y
# CONFIG_DRM_PANEL_SIMPLE is not set
# CONFIG_DRM_PANEL_SUMMIT is not set
# CONFIG_DRM_PANEL_SYNAPTICS_R63353 is not set
# CONFIG_DRM_PANEL_SYNAPTICS_TDDI is not set
# CONFIG_DRM_PANEL_TDO_TL070WSH30 is not set
# CONFIG_DRM_PANEL_TPO_TD028TTEC1 is not set
# CONFIG_DRM_PANEL_TPO_TD043MTEA1 is not set
# CONFIG_DRM_PANEL_TPO_TPG110 is not set
# CONFIG_DRM_PANEL_TRULY_NT35597_WQXGA is not set
# CONFIG_DRM_PANEL_VISIONOX_G2647FB105 is not set
# CONFIG_DRM_PANEL_VISIONOX_R66451 is not set
# CONFIG_DRM_PANEL_VISIONOX_RM69299 is not set
# CONFIG_DRM_PANEL_VISIONOX_RM692E5 is not set
# CONFIG_DRM_PANEL_VISIONOX_VTDR6130 is not set
# CONFIG_DRM_PANEL_WIDECHIPS_WS2401 is not set
# CONFIG_DRM_PANEL_XINPENG_XPP055C272 is not set
# end of Display Panels

# CONFIG_DRM_QXL is not set
# CONFIG_DRM_RADEON is not set
# CONFIG_DRM_ST7571 is not set
# CONFIG_DRM_ST7586 is not set
# CONFIG_DRM_ST7735R is not set
# CONFIG_DRM_ST7920 is not set
# CONFIG_DRM_SSD130X is not set

#
# Drivers for system framebuffers
#
CONFIG_DRM_SYSFB_HELPER=y
CONFIG_DRM_SIMPLEDRM=y
# CONFIG_DRM_VESADRM is not set
# end of Drivers for system framebuffers

# CONFIG_DRM_APPLETBDRM is not set
# CONFIG_DRM_ARCPGU is not set
CONFIG_DRM_BOCHS=y
CONFIG_DRM_CIRRUS_QEMU=y
CONFIG_DRM_GM12U320=y
# CONFIG_DRM_PANEL_MIPI_DBI is not set
# CONFIG_DRM_PIXPAPER is not set
# CONFIG_TINYDRM_HX8357D is not set
# CONFIG_TINYDRM_ILI9163 is not set
# CONFIG_TINYDRM_ILI9225 is not set
# CONFIG_TINYDRM_ILI9341 is not set
# CONFIG_TINYDRM_ILI9486 is not set
# CONFIG_TINYDRM_MI0283QT is not set
# CONFIG_TINYDRM_REPAPER is not set
# CONFIG_TINYDRM_SHARP_MEMORY is not set
CONFIG_DRM_UDL=y
# CONFIG_DRM_VBOXVIDEO is not set
CONFIG_DRM_VGEM=y
CONFIG_DRM_VIRTIO_GPU=y
CONFIG_DRM_VIRTIO_GPU_KMS=y
CONFIG_DRM_VKMS=y
CONFIG_DRM_VMWGFX=y
# CONFIG_DRM_VMWGFX_MKSSTATS is not set
# CONFIG_DRM_XE is not set
CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y

#
# Frame buffer Devices
#
CONFIG_FB=y
# CONFIG_FB_CIRRUS is not set
# CONFIG_FB_PM2 is not set
# CONFIG_FB_CYBER2000 is not set
# CONFIG_FB_ARC is not set
# CONFIG_FB_ASILIANT is not set
# CONFIG_FB_IMSTT is not set
CONFIG_FB_VGA16=y
# CONFIG_FB_UVESA is not set
CONFIG_FB_VESA=y
# CONFIG_FB_N411 is not set
# CONFIG_FB_HGA is not set
# CONFIG_FB_OPENCORES is not set
# CONFIG_FB_S1D13XXX is not set
# CONFIG_FB_NVIDIA is not set
# CONFIG_FB_RIVA is not set
# CONFIG_FB_I740 is not set
# CONFIG_FB_MATROX is not set
# CONFIG_FB_RADEON is not set
# CONFIG_FB_ATY128 is not set
# CONFIG_FB_ATY is not set
# CONFIG_FB_S3 is not set
# CONFIG_FB_SAVAGE is not set
# CONFIG_FB_SIS is not set
# CONFIG_FB_VIA is not set
# CONFIG_FB_NEOMAGIC is not set
# CONFIG_FB_KYRO is not set
# CONFIG_FB_3DFX is not set
# CONFIG_FB_VOODOO1 is not set
# CONFIG_FB_VT8623 is not set
# CONFIG_FB_TRIDENT is not set
# CONFIG_FB_ARK is not set
# CONFIG_FB_PM3 is not set
# CONFIG_FB_CARMINE is not set
# CONFIG_FB_SMSCUFX is not set
# CONFIG_FB_UDL is not set
# CONFIG_FB_IBM_GXT4500 is not set
CONFIG_FB_VIRTUAL=y
# CONFIG_FB_METRONOME is not set
# CONFIG_FB_MB862XX is not set
# CONFIG_FB_SSD1307 is not set
# CONFIG_FB_SM712 is not set
CONFIG_FB_CORE=y
CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_CFB_FILLRECT=y
CONFIG_FB_CFB_COPYAREA=y
CONFIG_FB_CFB_IMAGEBLIT=y
CONFIG_FB_SYS_FILLRECT=y
CONFIG_FB_SYS_COPYAREA=y
CONFIG_FB_SYS_IMAGEBLIT=y
# CONFIG_FB_FOREIGN_ENDIAN is not set
CONFIG_FB_SYSMEM_FOPS=y
CONFIG_FB_DEFERRED_IO=y
CONFIG_FB_IOMEM_FOPS=y
CONFIG_FB_IOMEM_HELPERS=y
CONFIG_FB_SYSMEM_HELPERS=y
CONFIG_FB_SYSMEM_HELPERS_DEFERRED=y
CONFIG_FB_TILEBLITTING=y
# end of Frame buffer Devices

#
# Backlight & LCD device support
#
CONFIG_LCD_CLASS_DEVICE=y
# CONFIG_LCD_L4F00242T03 is not set
# CONFIG_LCD_LMS283GF05 is not set
# CONFIG_LCD_LTV350QV is not set
# CONFIG_LCD_ILI922X is not set
# CONFIG_LCD_ILI9320 is not set
# CONFIG_LCD_TDO24M is not set
# CONFIG_LCD_VGG2432A4 is not set
# CONFIG_LCD_PLATFORM is not set
# CONFIG_LCD_AMS369FG06 is not set
# CONFIG_LCD_LMS501KF03 is not set
# CONFIG_LCD_HX8357 is not set
# CONFIG_LCD_OTM3225A is not set
CONFIG_BACKLIGHT_CLASS_DEVICE=y
# CONFIG_BACKLIGHT_AW99706 is not set
# CONFIG_BACKLIGHT_KTD253 is not set
# CONFIG_BACKLIGHT_KTD2801 is not set
# CONFIG_BACKLIGHT_KTZ8866 is not set
# CONFIG_BACKLIGHT_MT6370 is not set
# CONFIG_BACKLIGHT_APPLE is not set
# CONFIG_BACKLIGHT_QCOM_WLED is not set
# CONFIG_BACKLIGHT_SAHARA is not set
# CONFIG_BACKLIGHT_ADP8860 is not set
# CONFIG_BACKLIGHT_ADP8870 is not set
# CONFIG_BACKLIGHT_LM3509 is not set
# CONFIG_BACKLIGHT_LM3639 is not set
# CONFIG_BACKLIGHT_PANDORA is not set
# CONFIG_BACKLIGHT_GPIO is not set
# CONFIG_BACKLIGHT_LV5207LP is not set
# CONFIG_BACKLIGHT_BD6107 is not set
# CONFIG_BACKLIGHT_ARCXCNN is not set
# CONFIG_BACKLIGHT_LED is not set
# end of Backlight & LCD device support

CONFIG_VGASTATE=y
CONFIG_VIDEOMODE_HELPERS=y
CONFIG_HDMI=y
# CONFIG_FIRMWARE_EDID is not set

#
# Console display driver support
#
CONFIG_VGA_CONSOLE=y
CONFIG_DUMMY_CONSOLE=y
CONFIG_DUMMY_CONSOLE_COLUMNS=80
CONFIG_DUMMY_CONSOLE_ROWS=25
CONFIG_FRAMEBUFFER_CONSOLE=y
# CONFIG_FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION is not set
CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y
CONFIG_FRAMEBUFFER_CONSOLE_ROTATION=y
# CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER is not set
# end of Console display driver support

CONFIG_LOGO=y
CONFIG_LOGO_LINUX_MONO=y
CONFIG_LOGO_LINUX_MONO_FILE="drivers/video/logo/logo_linux_mono.pbm"
CONFIG_LOGO_LINUX_VGA16=y
CONFIG_LOGO_LINUX_VGA16_FILE="drivers/video/logo/logo_linux_vga16.ppm"
# CONFIG_LOGO_LINUX_CLUT224 is not set
# CONFIG_TRACE_GPU_MEM is not set
# end of Graphics support

# CONFIG_DRM_ACCEL is not set
CONFIG_SOUND=y
CONFIG_SOUND_OSS_CORE=y
CONFIG_SOUND_OSS_CORE_PRECLAIM=y
CONFIG_SND=y
CONFIG_SND_TIMER=y
CONFIG_SND_PCM=y
CONFIG_SND_HWDEP=y
CONFIG_SND_SEQ_DEVICE=y
CONFIG_SND_RAWMIDI=y
CONFIG_SND_UMP=y
CONFIG_SND_UMP_LEGACY_RAWMIDI=y
CONFIG_SND_JACK=y
CONFIG_SND_JACK_INPUT_DEV=y
CONFIG_SND_OSSEMUL=y
CONFIG_SND_MIXER_OSS=y
CONFIG_SND_PCM_OSS=y
CONFIG_SND_PCM_OSS_PLUGINS=y
CONFIG_SND_PCM_TIMER=y
CONFIG_SND_HRTIMER=y
# CONFIG_SND_DYNAMIC_MINORS is not set
# CONFIG_SND_SUPPORT_OLD_API is not set
CONFIG_SND_PROC_FS=y
CONFIG_SND_VERBOSE_PROCFS=y
CONFIG_SND_CTL_FAST_LOOKUP=y
CONFIG_SND_DEBUG=y
# CONFIG_SND_DEBUG_VERBOSE is not set
CONFIG_SND_PCM_XRUN_DEBUG=y
# CONFIG_SND_CTL_INPUT_VALIDATION is not set
# CONFIG_SND_CTL_DEBUG is not set
# CONFIG_SND_JACK_INJECTION_DEBUG is not set
# CONFIG_SND_UTIMER is not set
CONFIG_SND_VMASTER=y
CONFIG_SND_DMA_SGBUF=y
CONFIG_SND_CTL_LED=y
CONFIG_SND_SEQUENCER=y
CONFIG_SND_SEQ_DUMMY=y
CONFIG_SND_SEQUENCER_OSS=y
CONFIG_SND_SEQ_HRTIMER_DEFAULT=y
CONFIG_SND_SEQ_MIDI_EVENT=y
CONFIG_SND_SEQ_MIDI=y
CONFIG_SND_SEQ_VIRMIDI=y
# CONFIG_SND_SEQ_UMP is not set
CONFIG_SND_DRIVERS=y
# CONFIG_SND_PCSP is not set
CONFIG_SND_DUMMY=y
CONFIG_SND_ALOOP=y
# CONFIG_SND_PCMTEST is not set
CONFIG_SND_VIRMIDI=y
# CONFIG_SND_MTPAV is not set
# CONFIG_SND_MTS64 is not set
# CONFIG_SND_SERIAL_U16550 is not set
# CONFIG_SND_SERIAL_GENERIC is not set
# CONFIG_SND_MPU401 is not set
# CONFIG_SND_PORTMAN2X4 is not set
CONFIG_SND_PCI=y
# CONFIG_SND_AD1889 is not set
# CONFIG_SND_ALS300 is not set
# CONFIG_SND_ALS4000 is not set
# CONFIG_SND_ALI5451 is not set
# CONFIG_SND_ASIHPI is not set
# CONFIG_SND_ATIIXP is not set
# CONFIG_SND_ATIIXP_MODEM is not set
# CONFIG_SND_AU8810 is not set
# CONFIG_SND_AU8820 is not set
# CONFIG_SND_AU8830 is not set
# CONFIG_SND_AW2 is not set
# CONFIG_SND_AZT3328 is not set
# CONFIG_SND_BT87X is not set
# CONFIG_SND_CA0106 is not set
# CONFIG_SND_CMIPCI is not set
# CONFIG_SND_OXYGEN is not set
# CONFIG_SND_CS4281 is not set
# CONFIG_SND_CS46XX is not set
# CONFIG_SND_CTXFI is not set
# CONFIG_SND_DARLA20 is not set
# CONFIG_SND_GINA20 is not set
# CONFIG_SND_LAYLA20 is not set
# CONFIG_SND_DARLA24 is not set
# CONFIG_SND_GINA24 is not set
# CONFIG_SND_LAYLA24 is not set
# CONFIG_SND_MONA is not set
# CONFIG_SND_MIA is not set
# CONFIG_SND_ECHO3G is not set
# CONFIG_SND_INDIGO is not set
# CONFIG_SND_INDIGOIO is not set
# CONFIG_SND_INDIGODJ is not set
# CONFIG_SND_INDIGOIOX is not set
# CONFIG_SND_INDIGODJX is not set
# CONFIG_SND_EMU10K1 is not set
# CONFIG_SND_EMU10K1X is not set
# CONFIG_SND_ENS1370 is not set
# CONFIG_SND_ENS1371 is not set
# CONFIG_SND_ES1938 is not set
# CONFIG_SND_ES1968 is not set
# CONFIG_SND_FM801 is not set
# CONFIG_SND_HDSP is not set
# CONFIG_SND_HDSPM is not set
# CONFIG_SND_ICE1712 is not set
# CONFIG_SND_ICE1724 is not set
# CONFIG_SND_INTEL8X0 is not set
# CONFIG_SND_INTEL8X0M is not set
# CONFIG_SND_KORG1212 is not set
# CONFIG_SND_LOLA is not set
# CONFIG_SND_LX6464ES is not set
# CONFIG_SND_MAESTRO3 is not set
# CONFIG_SND_MIXART is not set
# CONFIG_SND_NM256 is not set
# CONFIG_SND_PCXHR is not set
# CONFIG_SND_RIPTIDE is not set
# CONFIG_SND_RME32 is not set
# CONFIG_SND_RME96 is not set
# CONFIG_SND_RME9652 is not set
# CONFIG_SND_SE6X is not set
# CONFIG_SND_SONICVIBES is not set
# CONFIG_SND_TRIDENT is not set
# CONFIG_SND_VIA82XX is not set
# CONFIG_SND_VIA82XX_MODEM is not set
# CONFIG_SND_VIRTUOSO is not set
# CONFIG_SND_VX222 is not set
# CONFIG_SND_YMFPCI is not set

#
# HD-Audio
#
CONFIG_SND_HDA=y
CONFIG_SND_HDA_HWDEP=y
CONFIG_SND_HDA_RECONFIG=y
CONFIG_SND_HDA_INPUT_BEEP=y
CONFIG_SND_HDA_INPUT_BEEP_MODE=1
CONFIG_SND_HDA_PATCH_LOADER=y
CONFIG_SND_HDA_POWER_SAVE_DEFAULT=0
# CONFIG_SND_HDA_CTL_DEV_ID is not set
CONFIG_SND_HDA_PREALLOC_SIZE=0
CONFIG_SND_HDA_INTEL=y
# CONFIG_SND_HDA_ACPI is not set
CONFIG_SND_HDA_GENERIC_LEDS=y
CONFIG_SND_HDA_CODEC_ANALOG=y
CONFIG_SND_HDA_CODEC_SIGMATEL=y
CONFIG_SND_HDA_CODEC_VIA=y
CONFIG_SND_HDA_CODEC_CONEXANT=y
# CONFIG_SND_HDA_CODEC_SENARYTECH is not set
CONFIG_SND_HDA_CODEC_CA0110=y
CONFIG_SND_HDA_CODEC_CA0132=y
# CONFIG_SND_HDA_CODEC_CA0132_DSP is not set
CONFIG_SND_HDA_CODEC_CMEDIA=y
# CONFIG_SND_HDA_CODEC_CM9825 is not set
CONFIG_SND_HDA_CODEC_SI3054=y
CONFIG_SND_HDA_GENERIC=y
CONFIG_SND_HDA_CODEC_REALTEK=y
# CONFIG_SND_HDA_CODEC_ALC260 is not set
# CONFIG_SND_HDA_CODEC_ALC262 is not set
# CONFIG_SND_HDA_CODEC_ALC268 is not set
# CONFIG_SND_HDA_CODEC_ALC269 is not set
# CONFIG_SND_HDA_CODEC_ALC662 is not set
# CONFIG_SND_HDA_CODEC_ALC680 is not set
# CONFIG_SND_HDA_CODEC_ALC861 is not set
# CONFIG_SND_HDA_CODEC_ALC861VD is not set
# CONFIG_SND_HDA_CODEC_ALC880 is not set
# CONFIG_SND_HDA_CODEC_ALC882 is not set
CONFIG_SND_HDA_CODEC_CIRRUS=y
# CONFIG_SND_HDA_CODEC_CS420X is not set
# CONFIG_SND_HDA_CODEC_CS421X is not set
# CONFIG_SND_HDA_CODEC_CS8409 is not set
CONFIG_SND_HDA_CODEC_HDMI=y
# CONFIG_SND_HDA_CODEC_HDMI_GENERIC is not set
# CONFIG_SND_HDA_CODEC_HDMI_SIMPLE is not set
# CONFIG_SND_HDA_CODEC_HDMI_INTEL is not set
# CONFIG_SND_HDA_CODEC_HDMI_ATI is not set
# CONFIG_SND_HDA_CODEC_HDMI_NVIDIA is not set
# CONFIG_SND_HDA_CODEC_HDMI_NVIDIA_MCP is not set
# CONFIG_SND_HDA_CODEC_HDMI_TEGRA is not set
# CONFIG_SND_HDA_SCODEC_CS35L56_I2C is not set
# CONFIG_SND_HDA_SCODEC_CS35L56_SPI is not set
CONFIG_SND_HDA_CORE=y
CONFIG_SND_HDA_COMPONENT=y
CONFIG_SND_HDA_I915=y
CONFIG_SND_INTEL_NHLT=y
CONFIG_SND_INTEL_DSP_CONFIG=y
CONFIG_SND_INTEL_SOUNDWIRE_ACPI=y
# end of HD-Audio

# CONFIG_SND_SPI is not set
CONFIG_SND_USB=y
CONFIG_SND_USB_AUDIO=y
CONFIG_SND_USB_AUDIO_MIDI_V2=y
CONFIG_SND_USB_AUDIO_USE_MEDIA_CONTROLLER=y
CONFIG_SND_USB_UA101=y
CONFIG_SND_USB_USX2Y=y
CONFIG_SND_USB_CAIAQ=y
CONFIG_SND_USB_CAIAQ_INPUT=y
CONFIG_SND_USB_US122L=y
# CONFIG_SND_USB_US144MKII is not set
CONFIG_SND_USB_6FIRE=y
CONFIG_SND_USB_HIFACE=y
CONFIG_SND_BCD2000=y
CONFIG_SND_USB_LINE6=y
CONFIG_SND_USB_POD=y
CONFIG_SND_USB_PODHD=y
CONFIG_SND_USB_TONEPORT=y
CONFIG_SND_USB_VARIAX=y
# CONFIG_SND_FIREWIRE is not set
CONFIG_SND_PCMCIA=y
# CONFIG_SND_VXPOCKET is not set
# CONFIG_SND_PDAUDIOCF is not set
CONFIG_SND_SOC=y
# CONFIG_SND_SOC_USB is not set

#
# Analog Devices
#
# CONFIG_SND_SOC_ADI_AXI_I2S is not set
# CONFIG_SND_SOC_ADI_AXI_SPDIF is not set
# end of Analog Devices

#
# AMD
#
# CONFIG_SND_SOC_AMD_ACP is not set
# CONFIG_SND_SOC_AMD_ACP3x is not set
# CONFIG_SND_SOC_AMD_RENOIR is not set
# CONFIG_SND_SOC_AMD_ACP5x is not set
# CONFIG_SND_SOC_AMD_ACP6x is not set
# CONFIG_SND_AMD_ACP_CONFIG is not set
# CONFIG_SND_SOC_AMD_ACP_COMMON is not set
# end of AMD

#
# Apple
#
# end of Apple

#
# Atmel
#
# CONFIG_SND_SOC_MIKROE_PROTO is not set
# end of Atmel

#
# Au1x
#
# end of Au1x

#
# Broadcom
#
# CONFIG_SND_BCM63XX_I2S_WHISTLER is not set
# end of Broadcom

#
# Cirrus Logic
#
# end of Cirrus Logic

#
# DesignWare
#
# CONFIG_SND_DESIGNWARE_I2S is not set
# end of DesignWare

#
# Freescale
#

#
# Common SoC Audio options for Freescale CPUs:
#
# CONFIG_SND_SOC_FSL_ASRC is not set
# CONFIG_SND_SOC_FSL_SAI is not set
# CONFIG_SND_SOC_FSL_AUDMIX is not set
# CONFIG_SND_SOC_FSL_SSI is not set
# CONFIG_SND_SOC_FSL_SPDIF is not set
# CONFIG_SND_SOC_FSL_ESAI is not set
# CONFIG_SND_SOC_FSL_MICFIL is not set
# CONFIG_SND_SOC_FSL_XCVR is not set
# CONFIG_SND_SOC_IMX_AUDMUX is not set
# end of Freescale

#
# Google
#
# CONFIG_SND_SOC_CHV3_I2S is not set
# end of Google

#
# Hisilicon
#
# CONFIG_SND_I2S_HI6210_I2S is not set
# end of Hisilicon

#
# JZ4740
#
# end of JZ4740

#
# Kirkwood
#
# end of Kirkwood

#
# Loongson
#
# end of Loongson

#
# Intel
#
# CONFIG_SND_SOC_INTEL_SST_TOPLEVEL is not set
# CONFIG_SND_SOC_INTEL_AVS is not set
# end of Intel

#
# Mediatek
#
# CONFIG_SND_SOC_MTK_BTCVSD is not set
# end of Mediatek

#
# PXA
#
# end of PXA

#
# SoundWire (SDCA)
#
CONFIG_SND_SOC_SDCA_OPTIONAL=y
# end of SoundWire (SDCA)

#
# ST SPEAr
#
# end of ST SPEAr

#
# Spreadtrum
#
# end of Spreadtrum

#
# STMicroelectronics STM32
#
# end of STMicroelectronics STM32

#
# Tegra
#
# end of Tegra

#
# Xilinx
#
# CONFIG_SND_SOC_XILINX_I2S is not set
# CONFIG_SND_SOC_XILINX_AUDIO_FORMATTER is not set
# CONFIG_SND_SOC_XILINX_SPDIF is not set
# end of Xilinx

#
# Xtensa
#
# CONFIG_SND_SOC_XTFPGA_I2S is not set
# end of Xtensa

# CONFIG_SND_SOC_SOF_TOPLEVEL is not set
CONFIG_SND_SOC_I2C_AND_SPI=y

#
# CODEC drivers
#
# CONFIG_SND_SOC_AC97_CODEC is not set
# CONFIG_SND_SOC_ADAU1372_I2C is not set
# CONFIG_SND_SOC_ADAU1372_SPI is not set
# CONFIG_SND_SOC_ADAU1373 is not set
# CONFIG_SND_SOC_ADAU1701 is not set
# CONFIG_SND_SOC_ADAU1761_I2C is not set
# CONFIG_SND_SOC_ADAU1761_SPI is not set
# CONFIG_SND_SOC_ADAU7002 is not set
# CONFIG_SND_SOC_ADAU7118_HW is not set
# CONFIG_SND_SOC_ADAU7118_I2C is not set
# CONFIG_SND_SOC_AK4104 is not set
# CONFIG_SND_SOC_AK4118 is not set
# CONFIG_SND_SOC_AK4375 is not set
# CONFIG_SND_SOC_AK4458 is not set
# CONFIG_SND_SOC_AK4554 is not set
# CONFIG_SND_SOC_AK4613 is not set
# CONFIG_SND_SOC_AK4619 is not set
# CONFIG_SND_SOC_AK4642 is not set
# CONFIG_SND_SOC_AK5386 is not set
# CONFIG_SND_SOC_AK5558 is not set
# CONFIG_SND_SOC_ALC5623 is not set
# CONFIG_SND_SOC_AUDIO_IIO_AUX is not set
# CONFIG_SND_SOC_AW8738 is not set
# CONFIG_SND_SOC_AW88395 is not set
# CONFIG_SND_SOC_AW88166 is not set
# CONFIG_SND_SOC_AW88261 is not set
# CONFIG_SND_SOC_AW88081 is not set
# CONFIG_SND_SOC_AW87390 is not set
# CONFIG_SND_SOC_AW88399 is not set
# CONFIG_SND_SOC_BD28623 is not set
# CONFIG_SND_SOC_BT_SCO is not set
# CONFIG_SND_SOC_CHV3_CODEC is not set
# CONFIG_SND_SOC_CS35L32 is not set
# CONFIG_SND_SOC_CS35L33 is not set
# CONFIG_SND_SOC_CS35L34 is not set
# CONFIG_SND_SOC_CS35L35 is not set
# CONFIG_SND_SOC_CS35L36 is not set
# CONFIG_SND_SOC_CS35L41_SPI is not set
# CONFIG_SND_SOC_CS35L41_I2C is not set
# CONFIG_SND_SOC_CS35L45_SPI is not set
# CONFIG_SND_SOC_CS35L45_I2C is not set
# CONFIG_SND_SOC_CS35L56_I2C is not set
# CONFIG_SND_SOC_CS35L56_SPI is not set
# CONFIG_SND_SOC_CS35L56_SDW is not set
# CONFIG_SND_SOC_CS42L42 is not set
# CONFIG_SND_SOC_CS42L42_SDW is not set
# CONFIG_SND_SOC_CS42L51_I2C is not set
# CONFIG_SND_SOC_CS42L52 is not set
# CONFIG_SND_SOC_CS42L56 is not set
# CONFIG_SND_SOC_CS42L73 is not set
# CONFIG_SND_SOC_CS42L83 is not set
# CONFIG_SND_SOC_CS42L84 is not set
# CONFIG_SND_SOC_CS4234 is not set
# CONFIG_SND_SOC_CS4265 is not set
# CONFIG_SND_SOC_CS4270 is not set
# CONFIG_SND_SOC_CS4271_I2C is not set
# CONFIG_SND_SOC_CS4271_SPI is not set
# CONFIG_SND_SOC_CS42XX8_I2C is not set
# CONFIG_SND_SOC_CS43130 is not set
# CONFIG_SND_SOC_CS4341 is not set
# CONFIG_SND_SOC_CS4349 is not set
# CONFIG_SND_SOC_CS48L32 is not set
# CONFIG_SND_SOC_CS53L30 is not set
# CONFIG_SND_SOC_CS530X_I2C is not set
# CONFIG_SND_SOC_CS530X_SPI is not set
# CONFIG_SND_SOC_CX2072X is not set
# CONFIG_SND_SOC_DA7213 is not set
# CONFIG_SND_SOC_DMIC is not set
# CONFIG_SND_SOC_ES7134 is not set
# CONFIG_SND_SOC_ES7241 is not set
# CONFIG_SND_SOC_ES8311 is not set
# CONFIG_SND_SOC_ES8316 is not set
# CONFIG_SND_SOC_ES8323 is not set
# CONFIG_SND_SOC_ES8326 is not set
# CONFIG_SND_SOC_ES8328_I2C is not set
# CONFIG_SND_SOC_ES8328_SPI is not set
# CONFIG_SND_SOC_ES8375 is not set
# CONFIG_SND_SOC_ES8389 is not set
# CONFIG_SND_SOC_FS210X is not set
# CONFIG_SND_SOC_GTM601 is not set
# CONFIG_SND_SOC_HDA is not set
# CONFIG_SND_SOC_ICS43432 is not set
# CONFIG_SND_SOC_IDT821034 is not set
# CONFIG_SND_SOC_MAX98088 is not set
# CONFIG_SND_SOC_MAX98090 is not set
# CONFIG_SND_SOC_MAX98357A is not set
# CONFIG_SND_SOC_MAX98504 is not set
# CONFIG_SND_SOC_MAX9867 is not set
# CONFIG_SND_SOC_MAX98927 is not set
# CONFIG_SND_SOC_MAX98520 is not set
# CONFIG_SND_SOC_MAX98363 is not set
# CONFIG_SND_SOC_MAX98373_I2C is not set
# CONFIG_SND_SOC_MAX98373_SDW is not set
# CONFIG_SND_SOC_MAX98388 is not set
# CONFIG_SND_SOC_MAX98390 is not set
# CONFIG_SND_SOC_MAX98396 is not set
# CONFIG_SND_SOC_MAX9860 is not set
# CONFIG_SND_SOC_MSM8916_WCD_DIGITAL is not set
# CONFIG_SND_SOC_PCM1681 is not set
# CONFIG_SND_SOC_PCM1754 is not set
# CONFIG_SND_SOC_PCM1789_I2C is not set
# CONFIG_SND_SOC_PCM179X_I2C is not set
# CONFIG_SND_SOC_PCM179X_SPI is not set
# CONFIG_SND_SOC_PCM186X_I2C is not set
# CONFIG_SND_SOC_PCM186X_SPI is not set
# CONFIG_SND_SOC_PCM3060_I2C is not set
# CONFIG_SND_SOC_PCM3060_SPI is not set
# CONFIG_SND_SOC_PCM3168A_I2C is not set
# CONFIG_SND_SOC_PCM3168A_SPI is not set
# CONFIG_SND_SOC_PCM5102A is not set
# CONFIG_SND_SOC_PCM512x_I2C is not set
# CONFIG_SND_SOC_PCM512x_SPI is not set
# CONFIG_SND_SOC_PCM6240 is not set
# CONFIG_SND_SOC_PEB2466 is not set
# CONFIG_SND_SOC_PM4125_SDW is not set
# CONFIG_SND_SOC_RT1017_SDCA_SDW is not set
# CONFIG_SND_SOC_RT1308_SDW is not set
# CONFIG_SND_SOC_RT1316_SDW is not set
# CONFIG_SND_SOC_RT1318_SDW is not set
# CONFIG_SND_SOC_RT1320_SDW is not set
# CONFIG_SND_SOC_RT5575 is not set
# CONFIG_SND_SOC_RT5616 is not set
# CONFIG_SND_SOC_RT5631 is not set
# CONFIG_SND_SOC_RT5640 is not set
# CONFIG_SND_SOC_RT5659 is not set
# CONFIG_SND_SOC_RT5682_SDW is not set
# CONFIG_SND_SOC_RT700_SDW is not set
# CONFIG_SND_SOC_RT711_SDW is not set
# CONFIG_SND_SOC_RT711_SDCA_SDW is not set
# CONFIG_SND_SOC_RT712_SDCA_SDW is not set
# CONFIG_SND_SOC_RT712_SDCA_DMIC_SDW is not set
# CONFIG_SND_SOC_RT721_SDCA_SDW is not set
# CONFIG_SND_SOC_RT722_SDCA_SDW is not set
# CONFIG_SND_SOC_RT715_SDW is not set
# CONFIG_SND_SOC_RT715_SDCA_SDW is not set
# CONFIG_SND_SOC_RT9120 is not set
# CONFIG_SND_SOC_RT9123 is not set
# CONFIG_SND_SOC_RT9123P is not set
# CONFIG_SND_SOC_RTQ9124 is not set
# CONFIG_SND_SOC_RTQ9128 is not set
# CONFIG_SND_SOC_SDW_MOCKUP is not set
# CONFIG_SND_SOC_SGTL5000 is not set
# CONFIG_SND_SOC_SIMPLE_AMPLIFIER is not set
# CONFIG_SND_SOC_SIMPLE_MUX is not set
# CONFIG_SND_SOC_SMA1303 is not set
# CONFIG_SND_SOC_SMA1307 is not set
# CONFIG_SND_SOC_SPDIF is not set
# CONFIG_SND_SOC_SRC4XXX_I2C is not set
# CONFIG_SND_SOC_SSM2305 is not set
# CONFIG_SND_SOC_SSM2518 is not set
# CONFIG_SND_SOC_SSM2602_SPI is not set
# CONFIG_SND_SOC_SSM2602_I2C is not set
# CONFIG_SND_SOC_SSM3515 is not set
# CONFIG_SND_SOC_SSM4567 is not set
# CONFIG_SND_SOC_STA32X is not set
# CONFIG_SND_SOC_STA350 is not set
# CONFIG_SND_SOC_STI_SAS is not set
# CONFIG_SND_SOC_TAS2552 is not set
# CONFIG_SND_SOC_TAS2562 is not set
# CONFIG_SND_SOC_TAS2764 is not set
# CONFIG_SND_SOC_TAS2770 is not set
# CONFIG_SND_SOC_TAS2780 is not set
# CONFIG_SND_SOC_TAS2781_I2C is not set
# CONFIG_SND_SOC_TAS5086 is not set
# CONFIG_SND_SOC_TAS571X is not set
# CONFIG_SND_SOC_TAS5720 is not set
# CONFIG_SND_SOC_TAS5805M is not set
# CONFIG_SND_SOC_TAS6424 is not set
# CONFIG_SND_SOC_TDA7419 is not set
# CONFIG_SND_SOC_TFA9879 is not set
# CONFIG_SND_SOC_TFA989X is not set
# CONFIG_SND_SOC_TLV320ADC3XXX is not set
# CONFIG_SND_SOC_TLV320AIC23_I2C is not set
# CONFIG_SND_SOC_TLV320AIC23_SPI is not set
# CONFIG_SND_SOC_TLV320AIC31XX is not set
# CONFIG_SND_SOC_TLV320AIC32X4_I2C is not set
# CONFIG_SND_SOC_TLV320AIC32X4_SPI is not set
# CONFIG_SND_SOC_TLV320AIC3X_I2C is not set
# CONFIG_SND_SOC_TLV320AIC3X_SPI is not set
# CONFIG_SND_SOC_TLV320ADCX140 is not set
# CONFIG_SND_SOC_TS3A227E is not set
# CONFIG_SND_SOC_TSCS42XX is not set
# CONFIG_SND_SOC_TSCS454 is not set
# CONFIG_SND_SOC_UDA1334 is not set
# CONFIG_SND_SOC_UDA1342 is not set
# CONFIG_SND_SOC_UDA1380 is not set
# CONFIG_SND_SOC_WCD937X_SDW is not set
# CONFIG_SND_SOC_WCD938X_SDW is not set
# CONFIG_SND_SOC_WCD939X_SDW is not set
# CONFIG_SND_SOC_WM8510 is not set
# CONFIG_SND_SOC_WM8523 is not set
# CONFIG_SND_SOC_WM8524 is not set
# CONFIG_SND_SOC_WM8580 is not set
# CONFIG_SND_SOC_WM8711 is not set
# CONFIG_SND_SOC_WM8728 is not set
# CONFIG_SND_SOC_WM8731_I2C is not set
# CONFIG_SND_SOC_WM8731_SPI is not set
# CONFIG_SND_SOC_WM8737 is not set
# CONFIG_SND_SOC_WM8741 is not set
# CONFIG_SND_SOC_WM8750 is not set
# CONFIG_SND_SOC_WM8753 is not set
# CONFIG_SND_SOC_WM8770 is not set
# CONFIG_SND_SOC_WM8776 is not set
# CONFIG_SND_SOC_WM8782 is not set
# CONFIG_SND_SOC_WM8804_I2C is not set
# CONFIG_SND_SOC_WM8804_SPI is not set
# CONFIG_SND_SOC_WM8903 is not set
# CONFIG_SND_SOC_WM8904 is not set
# CONFIG_SND_SOC_WM8940 is not set
# CONFIG_SND_SOC_WM8960 is not set
# CONFIG_SND_SOC_WM8961 is not set
# CONFIG_SND_SOC_WM8962 is not set
# CONFIG_SND_SOC_WM8974 is not set
# CONFIG_SND_SOC_WM8978 is not set
# CONFIG_SND_SOC_WM8985 is not set
# CONFIG_SND_SOC_WSA881X is not set
# CONFIG_SND_SOC_WSA883X is not set
# CONFIG_SND_SOC_WSA884X is not set
# CONFIG_SND_SOC_ZL38060 is not set
# CONFIG_SND_SOC_MAX9759 is not set
# CONFIG_SND_SOC_MT6351 is not set
# CONFIG_SND_SOC_MT6357 is not set
# CONFIG_SND_SOC_MT6358 is not set
# CONFIG_SND_SOC_MT6660 is not set
# CONFIG_SND_SOC_NAU8315 is not set
# CONFIG_SND_SOC_NAU8325 is not set
# CONFIG_SND_SOC_NAU8540 is not set
# CONFIG_SND_SOC_NAU8810 is not set
# CONFIG_SND_SOC_NAU8821 is not set
# CONFIG_SND_SOC_NAU8822 is not set
# CONFIG_SND_SOC_NAU8824 is not set
# CONFIG_SND_SOC_NTP8918 is not set
# CONFIG_SND_SOC_NTP8835 is not set
# CONFIG_SND_SOC_TPA6130A2 is not set
# CONFIG_SND_SOC_LPASS_WSA_MACRO is not set
# CONFIG_SND_SOC_LPASS_VA_MACRO is not set
# CONFIG_SND_SOC_LPASS_RX_MACRO is not set
# CONFIG_SND_SOC_LPASS_TX_MACRO is not set
# end of CODEC drivers

#
# Generic drivers
#
# CONFIG_SND_SIMPLE_CARD is not set
# CONFIG_SND_AUDIO_GRAPH_CARD is not set
# CONFIG_SND_AUDIO_GRAPH_CARD2 is not set
# CONFIG_SND_TEST_COMPONENT is not set
# end of Generic drivers

CONFIG_SND_X86=y
# CONFIG_HDMI_LPE_AUDIO is not set
CONFIG_SND_VIRTIO=y
CONFIG_HID_SUPPORT=y
CONFIG_HID=y
CONFIG_HID_BATTERY_STRENGTH=y
CONFIG_HIDRAW=y
CONFIG_UHID=y
CONFIG_HID_GENERIC=y
CONFIG_HID_HAPTIC=y

#
# Special HID drivers
#
CONFIG_HID_A4TECH=y
CONFIG_HID_ACCUTOUCH=y
CONFIG_HID_ACRUX=y
CONFIG_HID_ACRUX_FF=y
CONFIG_HID_APPLE=y
CONFIG_HID_APPLEIR=y
# CONFIG_HID_APPLETB_BL is not set
# CONFIG_HID_APPLETB_KBD is not set
CONFIG_HID_ASUS=y
CONFIG_HID_AUREAL=y
CONFIG_HID_BELKIN=y
CONFIG_HID_BETOP_FF=y
CONFIG_HID_BIGBEN_FF=y
CONFIG_HID_CHERRY=y
CONFIG_HID_CHICONY=y
CONFIG_HID_CORSAIR=y
CONFIG_HID_COUGAR=y
CONFIG_HID_MACALLY=y
CONFIG_HID_PRODIKEYS=y
CONFIG_HID_CMEDIA=y
CONFIG_HID_CP2112=y
CONFIG_HID_CREATIVE_SB0540=y
CONFIG_HID_CYPRESS=y
CONFIG_HID_DRAGONRISE=y
CONFIG_DRAGONRISE_FF=y
CONFIG_HID_EMS_FF=y
CONFIG_HID_ELAN=y
CONFIG_HID_ELECOM=y
CONFIG_HID_ELO=y
CONFIG_HID_EVISION=y
CONFIG_HID_EZKEY=y
CONFIG_HID_FT260=y
CONFIG_HID_GEMBIRD=y
CONFIG_HID_GFRM=y
CONFIG_HID_GLORIOUS=y
CONFIG_HID_HOLTEK=y
CONFIG_HOLTEK_FF=y
CONFIG_HID_VIVALDI_COMMON=y
# CONFIG_HID_GOODIX_SPI is not set
CONFIG_HID_GOOGLE_STADIA_FF=y
CONFIG_HID_VIVALDI=y
CONFIG_HID_GT683R=y
CONFIG_HID_KEYTOUCH=y
CONFIG_HID_KYE=y
# CONFIG_HID_KYSONA is not set
CONFIG_HID_UCLOGIC=y
CONFIG_HID_WALTOP=y
CONFIG_HID_VIEWSONIC=y
CONFIG_HID_VRC2=y
CONFIG_HID_XIAOMI=y
CONFIG_HID_GYRATION=y
CONFIG_HID_ICADE=y
CONFIG_HID_ITE=y
CONFIG_HID_JABRA=y
CONFIG_HID_TWINHAN=y
CONFIG_HID_KENSINGTON=y
CONFIG_HID_LCPOWER=y
CONFIG_HID_LED=y
CONFIG_HID_LENOVO=y
# CONFIG_HID_LENOVO_GO is not set
# CONFIG_HID_LENOVO_GO_S is not set
CONFIG_HID_LETSKETCH=y
CONFIG_HID_LOGITECH=y
CONFIG_HID_LOGITECH_DJ=y
CONFIG_HID_LOGITECH_HIDPP=y
CONFIG_LOGITECH_FF=y
CONFIG_LOGIRUMBLEPAD2_FF=y
CONFIG_LOGIG940_FF=y
CONFIG_LOGIWHEELS_FF=y
CONFIG_HID_MAGICMOUSE=y
CONFIG_HID_MALTRON=y
CONFIG_HID_MAYFLASH=y
CONFIG_HID_MEGAWORLD_FF=y
CONFIG_HID_REDRAGON=y
CONFIG_HID_MICROSOFT=y
CONFIG_HID_MONTEREY=y
CONFIG_HID_MULTITOUCH=y
CONFIG_HID_NINTENDO=y
CONFIG_NINTENDO_FF=y
CONFIG_HID_NTI=y
CONFIG_HID_NTRIG=y
CONFIG_HID_NVIDIA_SHIELD=y
CONFIG_NVIDIA_SHIELD_FF=y
CONFIG_HID_ORTEK=y
CONFIG_HID_PANTHERLORD=y
CONFIG_PANTHERLORD_FF=y
CONFIG_HID_PENMOUNT=y
CONFIG_HID_PETALYNX=y
CONFIG_HID_PICOLCD=y
CONFIG_HID_PICOLCD_FB=y
CONFIG_HID_PICOLCD_BACKLIGHT=y
CONFIG_HID_PICOLCD_LCD=y
CONFIG_HID_PICOLCD_LEDS=y
CONFIG_HID_PICOLCD_CIR=y
CONFIG_HID_PLANTRONICS=y
CONFIG_HID_PLAYSTATION=y
CONFIG_PLAYSTATION_FF=y
CONFIG_HID_PXRC=y
# CONFIG_HID_RAPOO is not set
CONFIG_HID_RAZER=y
CONFIG_HID_PRIMAX=y
CONFIG_HID_RETRODE=y
CONFIG_HID_ROCCAT=y
CONFIG_HID_SAITEK=y
CONFIG_HID_SAMSUNG=y
CONFIG_HID_SEMITEK=y
CONFIG_HID_SIGMAMICRO=y
CONFIG_HID_SONY=y
CONFIG_SONY_FF=y
CONFIG_HID_SPEEDLINK=y
CONFIG_HID_STEAM=y
CONFIG_STEAM_FF=y
CONFIG_HID_STEELSERIES=y
CONFIG_HID_SUNPLUS=y
CONFIG_HID_RMI=y
CONFIG_HID_GREENASIA=y
CONFIG_GREENASIA_FF=y
CONFIG_HID_SMARTJOYPLUS=y
CONFIG_SMARTJOYPLUS_FF=y
CONFIG_HID_TIVO=y
CONFIG_HID_TOPSEED=y
CONFIG_HID_TOPRE=y
CONFIG_HID_THINGM=y
CONFIG_HID_THRUSTMASTER=y
CONFIG_THRUSTMASTER_FF=y
CONFIG_HID_UDRAW_PS3=y
CONFIG_HID_U2FZERO=y
# CONFIG_HID_UNIVERSAL_PIDFF is not set
CONFIG_HID_WACOM=y
CONFIG_HID_WIIMOTE=y
# CONFIG_HID_WINWING is not set
CONFIG_HID_XINMO=y
CONFIG_HID_ZEROPLUS=y
CONFIG_ZEROPLUS_FF=y
CONFIG_HID_ZYDACRON=y
CONFIG_HID_SENSOR_HUB=y
CONFIG_HID_SENSOR_CUSTOM_SENSOR=y
CONFIG_HID_ALPS=y
CONFIG_HID_MCP2200=y
CONFIG_HID_MCP2221=y
CONFIG_HID_HUAWEI=y
# end of Special HID drivers

#
# HID-BPF support
#
# end of HID-BPF support

CONFIG_I2C_HID=y
CONFIG_I2C_HID_ACPI=y
CONFIG_I2C_HID_OF=y
# CONFIG_I2C_HID_OF_ELAN is not set
# CONFIG_I2C_HID_OF_GOODIX is not set
CONFIG_I2C_HID_CORE=y

#
# Intel ISH HID support
#
CONFIG_INTEL_ISH_HID=y
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER=y
# end of Intel ISH HID support

#
# AMD SFH HID Support
#
CONFIG_AMD_SFH_HID=y
# end of AMD SFH HID Support

#
# Surface System Aggregator Module HID support
#
CONFIG_SURFACE_HID=y
CONFIG_SURFACE_KBD=y
# end of Surface System Aggregator Module HID support

CONFIG_SURFACE_HID_CORE=y

#
# Intel THC HID Support
#
# CONFIG_INTEL_THC_HID is not set
# end of Intel THC HID Support

#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
# end of USB HID support

CONFIG_USB_OHCI_LITTLE_ENDIAN=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y
CONFIG_USB_LED_TRIG=y
CONFIG_USB_ULPI_BUS=y
CONFIG_USB_CONN_GPIO=y
CONFIG_USB_ARCH_HAS_HCD=y
CONFIG_USB=y
CONFIG_USB_PCI=y
CONFIG_USB_PCI_AMD=y
CONFIG_USB_ANNOUNCE_NEW_DEVICES=y

#
# Miscellaneous USB options
#
CONFIG_USB_DEFAULT_PERSIST=y
CONFIG_USB_FEW_INIT_RETRIES=y
CONFIG_USB_DYNAMIC_MINORS=y
CONFIG_USB_OTG=y
# CONFIG_USB_OTG_PRODUCTLIST is not set
# CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB is not set
CONFIG_USB_OTG_FSM=y
CONFIG_USB_LEDS_TRIGGER_USBPORT=y
CONFIG_USB_AUTOSUSPEND_DELAY=2
CONFIG_USB_DEFAULT_AUTHORIZATION_MODE=1
CONFIG_USB_MON=y

#
# USB Host Controller Drivers
#
CONFIG_USB_C67X00_HCD=y
CONFIG_USB_XHCI_HCD=y
CONFIG_USB_XHCI_DBGCAP=y
CONFIG_USB_XHCI_PCI=y
CONFIG_USB_XHCI_PCI_RENESAS=y
CONFIG_USB_XHCI_PLATFORM=y
# CONFIG_USB_XHCI_SIDEBAND is not set
CONFIG_USB_EHCI_HCD=y
CONFIG_USB_EHCI_ROOT_HUB_TT=y
CONFIG_USB_EHCI_TT_NEWSCHED=y
CONFIG_USB_EHCI_PCI=y
CONFIG_USB_EHCI_FSL=y
CONFIG_USB_EHCI_HCD_PLATFORM=y
CONFIG_USB_OXU210HP_HCD=y
CONFIG_USB_ISP116X_HCD=y
CONFIG_USB_MAX3421_HCD=y
CONFIG_USB_OHCI_HCD=y
CONFIG_USB_OHCI_HCD_PCI=y
# CONFIG_USB_OHCI_HCD_SSB is not set
CONFIG_USB_OHCI_HCD_PLATFORM=y
CONFIG_USB_UHCI_HCD=y
CONFIG_USB_SL811_HCD=y
CONFIG_USB_SL811_HCD_ISO=y
CONFIG_USB_SL811_CS=y
CONFIG_USB_R8A66597_HCD=y
CONFIG_USB_HCD_BCMA=y
CONFIG_USB_HCD_SSB=y
# CONFIG_USB_HCD_TEST_MODE is not set

#
# USB Device Class drivers
#
CONFIG_USB_ACM=y
CONFIG_USB_PRINTER=y
CONFIG_USB_WDM=y
CONFIG_USB_TMC=y

#
# NOTE: USB_STORAGE depends on SCSI but BLK_DEV_SD may also be needed; see USB_STORAGE Help for more info
#
CONFIG_USB_STORAGE=y
# CONFIG_USB_STORAGE_DEBUG is not set
CONFIG_USB_STORAGE_REALTEK=y
CONFIG_REALTEK_AUTOPM=y
CONFIG_USB_STORAGE_DATAFAB=y
CONFIG_USB_STORAGE_FREECOM=y
CONFIG_USB_STORAGE_ISD200=y
CONFIG_USB_STORAGE_USBAT=y
CONFIG_USB_STORAGE_SDDR09=y
CONFIG_USB_STORAGE_SDDR55=y
CONFIG_USB_STORAGE_JUMPSHOT=y
CONFIG_USB_STORAGE_ALAUDA=y
CONFIG_USB_STORAGE_ONETOUCH=y
CONFIG_USB_STORAGE_KARMA=y
CONFIG_USB_STORAGE_CYPRESS_ATACB=y
CONFIG_USB_STORAGE_ENE_UB6250=y
CONFIG_USB_UAS=y

#
# USB Imaging devices
#
CONFIG_USB_MDC800=y
CONFIG_USB_MICROTEK=y
CONFIG_USBIP_CORE=y
CONFIG_USBIP_VHCI_HCD=y
CONFIG_USBIP_VHCI_HC_PORTS=8
CONFIG_USBIP_VHCI_NR_HCS=16
CONFIG_USBIP_HOST=y
CONFIG_USBIP_VUDC=y
# CONFIG_USBIP_DEBUG is not set

#
# USB dual-mode controller drivers
#
CONFIG_USB_CDNS_SUPPORT=y
CONFIG_USB_CDNS_HOST=y
CONFIG_USB_CDNS3=y
CONFIG_USB_CDNS3_GADGET=y
CONFIG_USB_CDNS3_HOST=y
CONFIG_USB_CDNS3_PCI_WRAP=y
CONFIG_USB_CDNSP_PCI=y
# CONFIG_USB_CDNSP_GADGET is not set
# CONFIG_USB_CDNSP_HOST is not set
CONFIG_USB_MUSB_HDRC=y
# CONFIG_USB_MUSB_HOST is not set
# CONFIG_USB_MUSB_GADGET is not set
CONFIG_USB_MUSB_DUAL_ROLE=y

#
# Platform Glue Layer
#

#
# MUSB DMA mode
#
CONFIG_MUSB_PIO_ONLY=y
CONFIG_USB_DWC3=y
CONFIG_USB_DWC3_ULPI=y
# CONFIG_USB_DWC3_HOST is not set
CONFIG_USB_DWC3_GADGET=y
# CONFIG_USB_DWC3_DUAL_ROLE is not set

#
# Platform Glue Driver Support
#
CONFIG_USB_DWC3_PCI=y
CONFIG_USB_DWC3_HAPS=y
CONFIG_USB_DWC3_OF_SIMPLE=y
CONFIG_USB_DWC3_GENERIC_PLAT=y
# CONFIG_USB_DWC3_GOOGLE is not set
CONFIG_USB_DWC2=y
CONFIG_USB_DWC2_HOST=y

#
# Gadget/Dual-role mode requires USB Gadget support to be enabled
#
# CONFIG_USB_DWC2_PERIPHERAL is not set
# CONFIG_USB_DWC2_DUAL_ROLE is not set
CONFIG_USB_DWC2_PCI=y
# CONFIG_USB_DWC2_DEBUG is not set
# CONFIG_USB_DWC2_TRACK_MISSED_SOFS is not set
CONFIG_USB_CHIPIDEA=y
CONFIG_USB_CHIPIDEA_UDC=y
CONFIG_USB_CHIPIDEA_HOST=y
CONFIG_USB_CHIPIDEA_PCI=y
CONFIG_USB_CHIPIDEA_MSM=y
CONFIG_USB_CHIPIDEA_NPCM=y
# CONFIG_USB_CHIPIDEA_IMX is not set
CONFIG_USB_CHIPIDEA_GENERIC=y
# CONFIG_USB_CHIPIDEA_TEGRA is not set
CONFIG_USB_ISP1760=y
CONFIG_USB_ISP1760_HCD=y
CONFIG_USB_ISP1761_UDC=y
# CONFIG_USB_ISP1760_HOST_ROLE is not set
# CONFIG_USB_ISP1760_GADGET_ROLE is not set
CONFIG_USB_ISP1760_DUAL_ROLE=y

#
# USB port drivers
#
CONFIG_USB_SERIAL=y
CONFIG_USB_SERIAL_CONSOLE=y
CONFIG_USB_SERIAL_GENERIC=y
CONFIG_USB_SERIAL_SIMPLE=y
CONFIG_USB_SERIAL_AIRCABLE=y
CONFIG_USB_SERIAL_ARK3116=y
CONFIG_USB_SERIAL_BELKIN=y
CONFIG_USB_SERIAL_CH341=y
CONFIG_USB_SERIAL_WHITEHEAT=y
CONFIG_USB_SERIAL_DIGI_ACCELEPORT=y
CONFIG_USB_SERIAL_CP210X=y
CONFIG_USB_SERIAL_CYPRESS_M8=y
CONFIG_USB_SERIAL_EMPEG=y
CONFIG_USB_SERIAL_FTDI_SIO=y
CONFIG_USB_SERIAL_VISOR=y
CONFIG_USB_SERIAL_IPAQ=y
CONFIG_USB_SERIAL_IR=y
CONFIG_USB_SERIAL_EDGEPORT=y
CONFIG_USB_SERIAL_EDGEPORT_TI=y
CONFIG_USB_SERIAL_F81232=y
CONFIG_USB_SERIAL_F8153X=y
CONFIG_USB_SERIAL_GARMIN=y
CONFIG_USB_SERIAL_IPW=y
CONFIG_USB_SERIAL_IUU=y
CONFIG_USB_SERIAL_KEYSPAN_PDA=y
CONFIG_USB_SERIAL_KEYSPAN=y
CONFIG_USB_SERIAL_KLSI=y
CONFIG_USB_SERIAL_KOBIL_SCT=y
CONFIG_USB_SERIAL_MCT_U232=y
CONFIG_USB_SERIAL_METRO=y
CONFIG_USB_SERIAL_MOS7720=y
CONFIG_USB_SERIAL_MOS7715_PARPORT=y
CONFIG_USB_SERIAL_MOS7840=y
CONFIG_USB_SERIAL_MXUPORT=y
CONFIG_USB_SERIAL_NAVMAN=y
CONFIG_USB_SERIAL_PL2303=y
CONFIG_USB_SERIAL_OTI6858=y
CONFIG_USB_SERIAL_QCAUX=y
CONFIG_USB_SERIAL_QUALCOMM=y
CONFIG_USB_SERIAL_SPCP8X5=y
CONFIG_USB_SERIAL_SAFE=y
# CONFIG_USB_SERIAL_SAFE_PADDED is not set
CONFIG_USB_SERIAL_SIERRAWIRELESS=y
CONFIG_USB_SERIAL_SYMBOL=y
CONFIG_USB_SERIAL_TI=y
CONFIG_USB_SERIAL_CYBERJACK=y
CONFIG_USB_SERIAL_WWAN=y
CONFIG_USB_SERIAL_OPTION=y
CONFIG_USB_SERIAL_OMNINET=y
CONFIG_USB_SERIAL_OPTICON=y
CONFIG_USB_SERIAL_XSENS_MT=y
CONFIG_USB_SERIAL_WISHBONE=y
CONFIG_USB_SERIAL_SSU100=y
CONFIG_USB_SERIAL_QT2=y
CONFIG_USB_SERIAL_UPD78F0730=y
CONFIG_USB_SERIAL_XR=y
CONFIG_USB_SERIAL_DEBUG=y

#
# USB Miscellaneous drivers
#
CONFIG_USB_USS720=y
CONFIG_USB_EMI62=y
CONFIG_USB_EMI26=y
CONFIG_USB_ADUTUX=y
CONFIG_USB_SEVSEG=y
CONFIG_USB_LEGOTOWER=y
CONFIG_USB_LCD=y
CONFIG_USB_CYPRESS_CY7C63=y
CONFIG_USB_CYTHERM=y
CONFIG_USB_IDMOUSE=y
CONFIG_USB_APPLEDISPLAY=y
CONFIG_APPLE_MFI_FASTCHARGE=y
CONFIG_USB_LJCA=y
# CONFIG_USB_USBIO is not set
CONFIG_USB_SISUSBVGA=y
CONFIG_USB_LD=y
CONFIG_USB_TRANCEVIBRATOR=y
CONFIG_USB_IOWARRIOR=y
CONFIG_USB_TEST=y
CONFIG_USB_EHSET_TEST_FIXTURE=y
CONFIG_USB_ISIGHTFW=y
CONFIG_USB_YUREX=y
CONFIG_USB_EZUSB_FX2=y
CONFIG_USB_HUB_USB251XB=y
CONFIG_USB_HSIC_USB3503=y
CONFIG_USB_HSIC_USB4604=y
CONFIG_USB_LINK_LAYER_TEST=y
CONFIG_USB_CHAOSKEY=y
# CONFIG_USB_ONBOARD_DEV is not set
CONFIG_USB_ATM=y
CONFIG_USB_SPEEDTOUCH=y
CONFIG_USB_CXACRU=y
CONFIG_USB_UEAGLEATM=y
CONFIG_USB_XUSBATM=y

#
# USB Physical Layer drivers
#
CONFIG_USB_PHY=y
CONFIG_NOP_USB_XCEIV=y
CONFIG_TAHVO_USB=y
CONFIG_TAHVO_USB_HOST_BY_DEFAULT=y
CONFIG_USB_ISP1301=y
# end of USB Physical Layer drivers

CONFIG_USB_GADGET=y
# CONFIG_USB_GADGET_DEBUG is not set
CONFIG_USB_GADGET_DEBUG_FILES=y
CONFIG_USB_GADGET_DEBUG_FS=y
CONFIG_USB_GADGET_VBUS_DRAW=2
CONFIG_USB_GADGET_STORAGE_NUM_BUFFERS=2
CONFIG_U_SERIAL_CONSOLE=y

#
# USB Peripheral Controller
#
CONFIG_USB_GR_UDC=y
CONFIG_USB_R8A66597=y
CONFIG_USB_PXA27X=y
CONFIG_USB_SNP_CORE=y
# CONFIG_USB_SNP_UDC_PLAT is not set
# CONFIG_USB_M66592 is not set
CONFIG_USB_BDC_UDC=y
CONFIG_USB_AMD5536UDC=y
CONFIG_USB_NET2280=y
CONFIG_USB_GOKU=y
CONFIG_USB_EG20T=y
# CONFIG_USB_GADGET_XILINX is not set
CONFIG_USB_MAX3420_UDC=y
CONFIG_USB_CDNS2_UDC=y
CONFIG_USB_DUMMY_HCD=y
# end of USB Peripheral Controller

CONFIG_USB_LIBCOMPOSITE=y
CONFIG_USB_F_ACM=y
CONFIG_USB_F_SS_LB=y
CONFIG_USB_U_SERIAL=y
CONFIG_USB_U_ETHER=y
CONFIG_USB_U_AUDIO=y
CONFIG_USB_F_SERIAL=y
CONFIG_USB_F_OBEX=y
CONFIG_USB_F_NCM=y
CONFIG_USB_F_ECM=y
CONFIG_USB_F_PHONET=y
CONFIG_USB_F_EEM=y
CONFIG_USB_F_SUBSET=y
CONFIG_USB_F_RNDIS=y
CONFIG_USB_F_MASS_STORAGE=y
CONFIG_USB_F_FS=y
CONFIG_USB_F_UAC1=y
CONFIG_USB_F_UAC1_LEGACY=y
CONFIG_USB_F_UAC2=y
CONFIG_USB_F_UVC=y
CONFIG_USB_F_MIDI=y
CONFIG_USB_F_MIDI2=y
CONFIG_USB_F_HID=y
CONFIG_USB_F_PRINTER=y
CONFIG_USB_F_TCM=y
CONFIG_USB_CONFIGFS=y
CONFIG_USB_CONFIGFS_SERIAL=y
CONFIG_USB_CONFIGFS_ACM=y
CONFIG_USB_CONFIGFS_OBEX=y
CONFIG_USB_CONFIGFS_NCM=y
CONFIG_USB_CONFIGFS_ECM=y
CONFIG_USB_CONFIGFS_ECM_SUBSET=y
CONFIG_USB_CONFIGFS_RNDIS=y
CONFIG_USB_CONFIGFS_EEM=y
CONFIG_USB_CONFIGFS_PHONET=y
CONFIG_USB_CONFIGFS_MASS_STORAGE=y
CONFIG_USB_CONFIGFS_F_LB_SS=y
CONFIG_USB_CONFIGFS_F_FS=y
CONFIG_USB_CONFIGFS_F_UAC1=y
CONFIG_USB_CONFIGFS_F_UAC1_LEGACY=y
CONFIG_USB_CONFIGFS_F_UAC2=y
CONFIG_USB_CONFIGFS_F_MIDI=y
CONFIG_USB_CONFIGFS_F_MIDI2=y
CONFIG_USB_CONFIGFS_F_HID=y
CONFIG_USB_CONFIGFS_F_UVC=y
CONFIG_USB_CONFIGFS_F_PRINTER=y
CONFIG_USB_CONFIGFS_F_TCM=y

#
# USB Gadget precomposed configurations
#
# CONFIG_USB_ZERO is not set
# CONFIG_USB_AUDIO is not set
# CONFIG_USB_ETH is not set
# CONFIG_USB_G_NCM is not set
CONFIG_USB_GADGETFS=y
# CONFIG_USB_FUNCTIONFS is not set
# CONFIG_USB_MASS_STORAGE is not set
# CONFIG_USB_GADGET_TARGET is not set
# CONFIG_USB_G_SERIAL is not set
# CONFIG_USB_MIDI_GADGET is not set
# CONFIG_USB_G_PRINTER is not set
# CONFIG_USB_CDC_COMPOSITE is not set
# CONFIG_USB_G_NOKIA is not set
# CONFIG_USB_G_ACM_MS is not set
# CONFIG_USB_G_MULTI is not set
# CONFIG_USB_G_HID is not set
# CONFIG_USB_G_DBGP is not set
# CONFIG_USB_G_WEBCAM is not set
CONFIG_USB_RAW_GADGET=y
# end of USB Gadget precomposed configurations

CONFIG_TYPEC=y
CONFIG_TYPEC_TCPM=y
CONFIG_TYPEC_TCPCI=y
CONFIG_TYPEC_RT1711H=y
CONFIG_TYPEC_MT6360=y
CONFIG_TYPEC_TCPCI_MT6370=y
CONFIG_TYPEC_TCPCI_MAXIM=y
CONFIG_TYPEC_FUSB302=y
CONFIG_TYPEC_WCOVE=y
CONFIG_TYPEC_UCSI=y
CONFIG_UCSI_CCG=y
CONFIG_UCSI_ACPI=y
CONFIG_UCSI_STM32G0=y
CONFIG_TYPEC_TPS6598X=y
CONFIG_TYPEC_ANX7411=y
CONFIG_TYPEC_RT1719=y
CONFIG_TYPEC_HD3SS3220=y
CONFIG_TYPEC_STUSB160X=y
CONFIG_TYPEC_WUSB3801=y

#
# USB Type-C Multiplexer/DeMultiplexer Switch support
#
CONFIG_TYPEC_MUX_FSA4480=y
CONFIG_TYPEC_MUX_GPIO_SBU=y
CONFIG_TYPEC_MUX_PI3USB30532=y
CONFIG_TYPEC_MUX_INTEL_PMC=y
# CONFIG_TYPEC_MUX_IT5205 is not set
CONFIG_TYPEC_MUX_NB7VPQ904M=y
# CONFIG_TYPEC_MUX_PS883X is not set
CONFIG_TYPEC_MUX_PTN36502=y
# CONFIG_TYPEC_MUX_TUSB1046 is not set
CONFIG_TYPEC_MUX_WCD939X_USBSS=y
# end of USB Type-C Multiplexer/DeMultiplexer Switch support

#
# USB Type-C Alternate Mode drivers
#
CONFIG_TYPEC_DP_ALTMODE=y
CONFIG_TYPEC_NVIDIA_ALTMODE=y
# CONFIG_TYPEC_TBT_ALTMODE is not set
# end of USB Type-C Alternate Mode drivers

CONFIG_USB_ROLE_SWITCH=y
CONFIG_USB_ROLES_INTEL_XHCI=y
CONFIG_MMC=y
# CONFIG_PWRSEQ_EMMC is not set
# CONFIG_PWRSEQ_SD8787 is not set
# CONFIG_PWRSEQ_SIMPLE is not set
# CONFIG_MMC_BLOCK is not set
# CONFIG_SDIO_UART is not set
# CONFIG_MMC_TEST is not set
# CONFIG_MMC_CRYPTO is not set

#
# MMC/SD/SDIO Host Controller Drivers
#
# CONFIG_MMC_DEBUG is not set
# CONFIG_MMC_SDHCI is not set
# CONFIG_MMC_WBSD is not set
# CONFIG_MMC_TIFM_SD is not set
# CONFIG_MMC_SPI is not set
# CONFIG_MMC_SDRICOH_CS is not set
# CONFIG_MMC_CB710 is not set
# CONFIG_MMC_VIA_SDMMC is not set
CONFIG_MMC_VUB300=y
CONFIG_MMC_USHC=y
# CONFIG_MMC_USDHI6ROL0 is not set
CONFIG_MMC_REALTEK_USB=y
# CONFIG_MMC_CQHCI is not set
# CONFIG_MMC_HSQ is not set
# CONFIG_MMC_TOSHIBA_PCI is not set
# CONFIG_MMC_MTK is not set
# CONFIG_SCSI_UFSHCD is not set
CONFIG_MEMSTICK=y
# CONFIG_MEMSTICK_DEBUG is not set

#
# MemoryStick drivers
#
# CONFIG_MEMSTICK_UNSAFE_RESUME is not set
# CONFIG_MSPRO_BLOCK is not set
# CONFIG_MS_BLOCK is not set

#
# MemoryStick Host Controller Drivers
#
# CONFIG_MEMSTICK_TIFM_MS is not set
# CONFIG_MEMSTICK_JMICRON_38X is not set
# CONFIG_MEMSTICK_R592 is not set
CONFIG_MEMSTICK_REALTEK_USB=y
CONFIG_NEW_LEDS=y
CONFIG_LEDS_CLASS=y
# CONFIG_LEDS_CLASS_FLASH is not set
CONFIG_LEDS_CLASS_MULTICOLOR=y
# CONFIG_LEDS_BRIGHTNESS_HW_CHANGED is not set

#
# LED drivers
#
# CONFIG_LEDS_AN30259A is not set
# CONFIG_LEDS_APU is not set
# CONFIG_LEDS_OSRAM_AMS_AS3668 is not set
# CONFIG_LEDS_AW200XX is not set
# CONFIG_LEDS_AW2013 is not set
# CONFIG_LEDS_BCM6328 is not set
# CONFIG_LEDS_BCM6358 is not set
# CONFIG_LEDS_CHT_WCOVE is not set
# CONFIG_LEDS_CR0014114 is not set
# CONFIG_LEDS_EL15203000 is not set
# CONFIG_LEDS_LM3530 is not set
# CONFIG_LEDS_LM3532 is not set
# CONFIG_LEDS_LM3642 is not set
# CONFIG_LEDS_LM3692X is not set
# CONFIG_LEDS_PCA9532 is not set
# CONFIG_LEDS_GPIO is not set
# CONFIG_LEDS_LP3944 is not set
# CONFIG_LEDS_LP3952 is not set
# CONFIG_LEDS_LP50XX is not set
# CONFIG_LEDS_LP55XX_COMMON is not set
# CONFIG_LEDS_LP8860 is not set
# CONFIG_LEDS_LP8864 is not set
# CONFIG_LEDS_PCA955X is not set
# CONFIG_LEDS_PCA963X is not set
# CONFIG_LEDS_PCA995X is not set
# CONFIG_LEDS_DAC124S085 is not set
# CONFIG_LEDS_REGULATOR is not set
# CONFIG_LEDS_BD2606MVV is not set
# CONFIG_LEDS_BD2802 is not set
# CONFIG_LEDS_INTEL_SS4200 is not set
# CONFIG_LEDS_LT3593 is not set
# CONFIG_LEDS_TCA6507 is not set
# CONFIG_LEDS_TLC591XX is not set
# CONFIG_LEDS_LM355x is not set
# CONFIG_LEDS_IS31FL319X is not set
# CONFIG_LEDS_IS31FL32XX is not set

#
# LED driver for blink(1) USB RGB LED is under Special HID drivers (HID_THINGM)
#
# CONFIG_LEDS_BLINKM is not set
# CONFIG_LEDS_SYSCON is not set
# CONFIG_LEDS_MLXCPLD is not set
# CONFIG_LEDS_MLXREG is not set
# CONFIG_LEDS_USER is not set
# CONFIG_LEDS_NIC78BX is not set
# CONFIG_LEDS_SPI_BYTE is not set
# CONFIG_LEDS_LM3697 is not set
# CONFIG_LEDS_ST1202 is not set
# CONFIG_LEDS_LGM is not set

#
# Flash and Torch LED drivers
#

#
# RGB LED drivers
#
# CONFIG_LEDS_GROUP_MULTICOLOR is not set
# CONFIG_LEDS_KTD202X is not set
# CONFIG_LEDS_LP5812 is not set
# CONFIG_LEDS_NCP5623 is not set
# CONFIG_LEDS_MT6370_RGB is not set

#
# LED Triggers
#
CONFIG_LEDS_TRIGGERS=y
# CONFIG_LEDS_TRIGGER_TIMER is not set
# CONFIG_LEDS_TRIGGER_ONESHOT is not set
# CONFIG_LEDS_TRIGGER_DISK is not set
# CONFIG_LEDS_TRIGGER_MTD is not set
# CONFIG_LEDS_TRIGGER_HEARTBEAT is not set
# CONFIG_LEDS_TRIGGER_BACKLIGHT is not set
# CONFIG_LEDS_TRIGGER_CPU is not set
# CONFIG_LEDS_TRIGGER_ACTIVITY is not set
# CONFIG_LEDS_TRIGGER_GPIO is not set
# CONFIG_LEDS_TRIGGER_DEFAULT_ON is not set

#
# iptables trigger is under Netfilter config (LED target)
#
# CONFIG_LEDS_TRIGGER_TRANSIENT is not set
# CONFIG_LEDS_TRIGGER_CAMERA is not set
# CONFIG_LEDS_TRIGGER_PANIC is not set
# CONFIG_LEDS_TRIGGER_NETDEV is not set
# CONFIG_LEDS_TRIGGER_PATTERN is not set
# CONFIG_LEDS_TRIGGER_TTY is not set
# CONFIG_LEDS_TRIGGER_INPUT_EVENTS is not set

#
# Simatic LED drivers
#
# CONFIG_ACCESSIBILITY is not set
CONFIG_INFINIBAND=y
CONFIG_INFINIBAND_USER_MAD=y
CONFIG_INFINIBAND_USER_ACCESS=y
CONFIG_INFINIBAND_USER_MEM=y
CONFIG_INFINIBAND_ON_DEMAND_PAGING=y
CONFIG_INFINIBAND_ADDR_TRANS=y
CONFIG_INFINIBAND_ADDR_TRANS_CONFIGFS=y
CONFIG_INFINIBAND_VIRT_DMA=y
# CONFIG_INFINIBAND_EFA is not set
# CONFIG_INFINIBAND_ERDMA is not set
CONFIG_MLX4_INFINIBAND=y
# CONFIG_INFINIBAND_MTHCA is not set
# CONFIG_INFINIBAND_OCRDMA is not set
# CONFIG_INFINIBAND_USNIC is not set
# CONFIG_INFINIBAND_VMWARE_PVRDMA is not set
# CONFIG_INFINIBAND_RDMAVT is not set
CONFIG_RDMA_RXE=y
CONFIG_RDMA_SIW=y
CONFIG_INFINIBAND_IPOIB=y
CONFIG_INFINIBAND_IPOIB_CM=y
CONFIG_INFINIBAND_IPOIB_DEBUG=y
# CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set
CONFIG_INFINIBAND_SRP=y
# CONFIG_INFINIBAND_SRPT is not set
CONFIG_INFINIBAND_ISER=y
CONFIG_INFINIBAND_RTRS=y
CONFIG_INFINIBAND_RTRS_CLIENT=y
# CONFIG_INFINIBAND_RTRS_SERVER is not set
CONFIG_EDAC_ATOMIC_SCRUB=y
CONFIG_EDAC_SUPPORT=y
CONFIG_EDAC=y
# CONFIG_EDAC_DEBUG is not set
# CONFIG_EDAC_DECODE_MCE is not set
# CONFIG_EDAC_SCRUB is not set
# CONFIG_EDAC_ECS is not set
# CONFIG_EDAC_MEM_REPAIR is not set
# CONFIG_EDAC_E752X is not set
# CONFIG_EDAC_I82975X is not set
# CONFIG_EDAC_I3000 is not set
# CONFIG_EDAC_I3200 is not set
# CONFIG_EDAC_IE31200 is not set
# CONFIG_EDAC_X38 is not set
# CONFIG_EDAC_I5400 is not set
# CONFIG_EDAC_I7CORE is not set
# CONFIG_EDAC_I5100 is not set
# CONFIG_EDAC_I7300 is not set
# CONFIG_EDAC_SBRIDGE is not set
# CONFIG_EDAC_SKX is not set
# CONFIG_EDAC_I10NM is not set
# CONFIG_EDAC_IMH is not set
# CONFIG_EDAC_PND2 is not set
# CONFIG_EDAC_IGEN6 is not set
CONFIG_RTC_LIB=y
CONFIG_RTC_MC146818_LIB=y
CONFIG_RTC_CLASS=y
# CONFIG_RTC_HCTOSYS is not set
CONFIG_RTC_SYSTOHC=y
CONFIG_RTC_SYSTOHC_DEVICE="rtc0"
# CONFIG_RTC_DEBUG is not set
# CONFIG_RTC_NVMEM is not set

#
# RTC interfaces
#
CONFIG_RTC_INTF_SYSFS=y
CONFIG_RTC_INTF_PROC=y
CONFIG_RTC_INTF_DEV=y
# CONFIG_RTC_INTF_DEV_UIE_EMUL is not set
# CONFIG_RTC_DRV_TEST is not set

#
# I2C RTC drivers
#
# CONFIG_RTC_DRV_ABB5ZES3 is not set
# CONFIG_RTC_DRV_ABEOZ9 is not set
# CONFIG_RTC_DRV_ABX80X is not set
# CONFIG_RTC_DRV_DS1307 is not set
# CONFIG_RTC_DRV_DS1374 is not set
# CONFIG_RTC_DRV_DS1672 is not set
# CONFIG_RTC_DRV_HYM8563 is not set
# CONFIG_RTC_DRV_MAX6900 is not set
# CONFIG_RTC_DRV_MAX31335 is not set
# CONFIG_RTC_DRV_NCT3018Y is not set
# CONFIG_RTC_DRV_RS5C372 is not set
# CONFIG_RTC_DRV_ISL1208 is not set
# CONFIG_RTC_DRV_ISL12022 is not set
# CONFIG_RTC_DRV_ISL12026 is not set
# CONFIG_RTC_DRV_X1205 is not set
# CONFIG_RTC_DRV_PCF8523 is not set
# CONFIG_RTC_DRV_PCF85363 is not set
# CONFIG_RTC_DRV_PCF8563 is not set
# CONFIG_RTC_DRV_PCF8583 is not set
# CONFIG_RTC_DRV_M41T80 is not set
# CONFIG_RTC_DRV_BQ32K is not set
# CONFIG_RTC_DRV_TWL4030 is not set
# CONFIG_RTC_DRV_S35390A is not set
# CONFIG_RTC_DRV_FM3130 is not set
# CONFIG_RTC_DRV_RX8010 is not set
# CONFIG_RTC_DRV_RX8111 is not set
# CONFIG_RTC_DRV_RX8581 is not set
# CONFIG_RTC_DRV_RX8025 is not set
# CONFIG_RTC_DRV_EM3027 is not set
# CONFIG_RTC_DRV_RV3028 is not set
# CONFIG_RTC_DRV_RV3032 is not set
# CONFIG_RTC_DRV_RV8803 is not set
# CONFIG_RTC_DRV_SD2405AL is not set
# CONFIG_RTC_DRV_SD3078 is not set

#
# SPI RTC drivers
#
# CONFIG_RTC_DRV_M41T93 is not set
# CONFIG_RTC_DRV_M41T94 is not set
# CONFIG_RTC_DRV_DS1302 is not set
# CONFIG_RTC_DRV_DS1305 is not set
# CONFIG_RTC_DRV_DS1343 is not set
# CONFIG_RTC_DRV_DS1347 is not set
# CONFIG_RTC_DRV_DS1390 is not set
# CONFIG_RTC_DRV_MAX6916 is not set
# CONFIG_RTC_DRV_R9701 is not set
# CONFIG_RTC_DRV_RX4581 is not set
# CONFIG_RTC_DRV_RS5C348 is not set
# CONFIG_RTC_DRV_MAX6902 is not set
# CONFIG_RTC_DRV_PCF2123 is not set
# CONFIG_RTC_DRV_MCP795 is not set
CONFIG_RTC_I2C_AND_SPI=y

#
# SPI and I2C RTC drivers
#
# CONFIG_RTC_DRV_DS3232 is not set
# CONFIG_RTC_DRV_PCF2127 is not set
# CONFIG_RTC_DRV_PCF85063 is not set
# CONFIG_RTC_DRV_RV3029C2 is not set
# CONFIG_RTC_DRV_RX6110 is not set

#
# Platform RTC drivers
#
CONFIG_RTC_DRV_CMOS=y
# CONFIG_RTC_DRV_DS1286 is not set
# CONFIG_RTC_DRV_DS1511 is not set
# CONFIG_RTC_DRV_DS1553 is not set
# CONFIG_RTC_DRV_DS1685_FAMILY is not set
# CONFIG_RTC_DRV_DS1742 is not set
# CONFIG_RTC_DRV_DS2404 is not set
# CONFIG_RTC_DRV_STK17TA8 is not set
# CONFIG_RTC_DRV_M48T86 is not set
# CONFIG_RTC_DRV_M48T35 is not set
# CONFIG_RTC_DRV_M48T59 is not set
# CONFIG_RTC_DRV_MSM6242 is not set
# CONFIG_RTC_DRV_RP5C01 is not set
# CONFIG_RTC_DRV_ZYNQMP is not set

#
# on-CPU RTC drivers
#
# CONFIG_RTC_DRV_CADENCE is not set
# CONFIG_RTC_DRV_FTRTC010 is not set
# CONFIG_RTC_DRV_R7301 is not set
# CONFIG_RTC_DRV_GOLDFISH is not set

#
# HID Sensor RTC drivers
#
CONFIG_RTC_DRV_HID_SENSOR_TIME=y
CONFIG_DMADEVICES=y
# CONFIG_DMADEVICES_DEBUG is not set

#
# DMA Devices
#
CONFIG_DMA_ENGINE=y
CONFIG_DMA_VIRTUAL_CHANNELS=y
CONFIG_DMA_ACPI=y
CONFIG_DMA_OF=y
# CONFIG_ALTERA_MSGDMA is not set
# CONFIG_DW_AXI_DMAC is not set
# CONFIG_FSL_EDMA is not set
CONFIG_INTEL_IDMA64=y
# CONFIG_INTEL_IDXD is not set
# CONFIG_INTEL_IDXD_COMPAT is not set
CONFIG_INTEL_IOATDMA=y
# CONFIG_PLX_DMA is not set
# CONFIG_SWITCHTEC_DMA is not set
# CONFIG_XILINX_DMA is not set
# CONFIG_XILINX_XDMA is not set
# CONFIG_XILINX_ZYNQMP_DPDMA is not set
# CONFIG_AMD_PTDMA is not set
# CONFIG_AMD_QDMA is not set
# CONFIG_QCOM_HIDMA_MGMT is not set
# CONFIG_QCOM_HIDMA is not set
CONFIG_DW_DMAC_CORE=y
# CONFIG_DW_DMAC is not set
# CONFIG_DW_DMAC_PCI is not set
# CONFIG_DW_EDMA is not set
CONFIG_HSU_DMA=y
# CONFIG_SF_PDMA is not set
# CONFIG_INTEL_LDMA is not set

#
# DMA Clients
#
CONFIG_ASYNC_TX_DMA=y
# CONFIG_DMATEST is not set
CONFIG_DMA_ENGINE_RAID=y

#
# DMABUF options
#
CONFIG_SYNC_FILE=y
CONFIG_SW_SYNC=y
CONFIG_UDMABUF=y
# CONFIG_DMABUF_DEBUG is not set
# CONFIG_DMABUF_SELFTESTS is not set
CONFIG_DMABUF_HEAPS=y
CONFIG_DMABUF_HEAPS_SYSTEM=y
CONFIG_DMABUF_HEAPS_CMA=y
# end of DMABUF options

CONFIG_DCA=y
# CONFIG_UIO is not set
CONFIG_VFIO=y
CONFIG_VFIO_DEVICE_CDEV=y
# CONFIG_VFIO_GROUP is not set
CONFIG_VFIO_VIRQFD=y
# CONFIG_VFIO_DEBUGFS is not set

#
# VFIO support for PCI devices
#
CONFIG_VFIO_PCI_CORE=y
CONFIG_VFIO_PCI_INTX=y
CONFIG_VFIO_PCI=y
# CONFIG_VFIO_PCI_VGA is not set
# CONFIG_VFIO_PCI_IGD is not set
# CONFIG_VIRTIO_VFIO_PCI is not set
# end of VFIO support for PCI devices

CONFIG_IRQ_BYPASS_MANAGER=y
# CONFIG_VIRT_DRIVERS is not set
CONFIG_VIRTIO_ANCHOR=y
CONFIG_VIRTIO=y
CONFIG_VIRTIO_PCI_LIB=y
CONFIG_VIRTIO_PCI_LIB_LEGACY=y
CONFIG_VIRTIO_MENU=y
CONFIG_VIRTIO_PCI=y
CONFIG_VIRTIO_PCI_ADMIN_LEGACY=y
CONFIG_VIRTIO_PCI_LEGACY=y
CONFIG_VIRTIO_VDPA=y
CONFIG_VIRTIO_PMEM=y
CONFIG_VIRTIO_BALLOON=y
CONFIG_VIRTIO_MEM=y
CONFIG_VIRTIO_INPUT=y
CONFIG_VIRTIO_MMIO=y
CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
CONFIG_VIRTIO_DMA_SHARED_BUFFER=y
# CONFIG_VIRTIO_DEBUG is not set
# CONFIG_VIRTIO_RTC is not set
CONFIG_VDPA=y
CONFIG_VDPA_SIM=y
CONFIG_VDPA_SIM_NET=y
CONFIG_VDPA_SIM_BLOCK=y
# CONFIG_VDPA_USER is not set
# CONFIG_IFCVF is not set
# CONFIG_MLX5_VDPA_STEERING_DEBUG is not set
CONFIG_VP_VDPA=y
# CONFIG_ALIBABA_ENI_VDPA is not set
# CONFIG_SNET_VDPA is not set
# CONFIG_OCTEONEP_VDPA is not set
CONFIG_VHOST_IOTLB=y
CONFIG_VHOST_RING=y
CONFIG_VHOST_TASK=y
CONFIG_VHOST=y
CONFIG_VHOST_MENU=y
CONFIG_VHOST_NET=y
# CONFIG_VHOST_SCSI is not set
CONFIG_VHOST_VSOCK=y
CONFIG_VHOST_VDPA=y
CONFIG_VHOST_CROSS_ENDIAN_LEGACY=y
CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL=y

#
# Microsoft Hyper-V guest support
#
# CONFIG_HYPERV is not set
# end of Microsoft Hyper-V guest support

CONFIG_GREYBUS=y
# CONFIG_GREYBUS_BEAGLEPLAY is not set
CONFIG_GREYBUS_ES2=y
CONFIG_COMEDI=y
# CONFIG_COMEDI_DEBUG is not set
CONFIG_COMEDI_DEFAULT_BUF_SIZE_KB=2048
CONFIG_COMEDI_DEFAULT_BUF_MAXSIZE_KB=20480
CONFIG_COMEDI_MISC_DRIVERS=y
CONFIG_COMEDI_BOND=y
CONFIG_COMEDI_TEST=y
CONFIG_COMEDI_PARPORT=y
CONFIG_COMEDI_ISA_DRIVERS=y
CONFIG_COMEDI_PCL711=y
CONFIG_COMEDI_PCL724=y
CONFIG_COMEDI_PCL726=y
CONFIG_COMEDI_PCL730=y
CONFIG_COMEDI_PCL812=y
CONFIG_COMEDI_PCL816=y
CONFIG_COMEDI_PCL818=y
CONFIG_COMEDI_PCM3724=y
CONFIG_COMEDI_AMPLC_DIO200_ISA=y
CONFIG_COMEDI_AMPLC_PC236_ISA=y
CONFIG_COMEDI_AMPLC_PC263_ISA=y
CONFIG_COMEDI_RTI800=y
CONFIG_COMEDI_RTI802=y
CONFIG_COMEDI_DAC02=y
CONFIG_COMEDI_DAS16M1=y
CONFIG_COMEDI_DAS08_ISA=y
# CONFIG_COMEDI_DAS16 is not set
CONFIG_COMEDI_DAS800=y
CONFIG_COMEDI_DAS1800=y
CONFIG_COMEDI_DAS6402=y
CONFIG_COMEDI_DT2801=y
CONFIG_COMEDI_DT2811=y
CONFIG_COMEDI_DT2814=y
CONFIG_COMEDI_DT2815=y
CONFIG_COMEDI_DT2817=y
CONFIG_COMEDI_DT282X=y
CONFIG_COMEDI_DMM32AT=y
CONFIG_COMEDI_FL512=y
CONFIG_COMEDI_AIO_AIO12_8=y
CONFIG_COMEDI_AIO_IIRO_16=y
# CONFIG_COMEDI_II_PCI20KC is not set
CONFIG_COMEDI_C6XDIGIO=y
CONFIG_COMEDI_MPC624=y
CONFIG_COMEDI_ADQ12B=y
CONFIG_COMEDI_NI_AT_A2150=y
CONFIG_COMEDI_NI_AT_AO=y
# CONFIG_COMEDI_NI_ATMIO is not set
CONFIG_COMEDI_NI_ATMIO16D=y
CONFIG_COMEDI_NI_LABPC_ISA=y
CONFIG_COMEDI_PCMAD=y
CONFIG_COMEDI_PCMDA12=y
CONFIG_COMEDI_PCMMIO=y
CONFIG_COMEDI_PCMUIO=y
CONFIG_COMEDI_MULTIQ3=y
CONFIG_COMEDI_S526=y
CONFIG_COMEDI_PCI_DRIVERS=y
CONFIG_COMEDI_8255_PCI=y
# CONFIG_COMEDI_ADDI_APCI_1032 is not set
# CONFIG_COMEDI_ADDI_APCI_1500 is not set
# CONFIG_COMEDI_ADDI_APCI_1516 is not set
# CONFIG_COMEDI_ADDI_APCI_1564 is not set
# CONFIG_COMEDI_ADDI_APCI_16XX is not set
# CONFIG_COMEDI_ADDI_APCI_2032 is not set
# CONFIG_COMEDI_ADDI_APCI_2200 is not set
# CONFIG_COMEDI_ADDI_APCI_3120 is not set
# CONFIG_COMEDI_ADDI_APCI_3501 is not set
# CONFIG_COMEDI_ADDI_APCI_3XXX is not set
# CONFIG_COMEDI_ADL_PCI6208 is not set
# CONFIG_COMEDI_ADL_PCI7250 is not set
# CONFIG_COMEDI_ADL_PCI7X3X is not set
# CONFIG_COMEDI_ADL_PCI8164 is not set
# CONFIG_COMEDI_ADL_PCI9111 is not set
CONFIG_COMEDI_ADL_PCI9118=y
# CONFIG_COMEDI_ADV_PCI1710 is not set
# CONFIG_COMEDI_ADV_PCI1720 is not set
# CONFIG_COMEDI_ADV_PCI1723 is not set
# CONFIG_COMEDI_ADV_PCI1724 is not set
# CONFIG_COMEDI_ADV_PCI1760 is not set
# CONFIG_COMEDI_ADV_PCI_DIO is not set
# CONFIG_COMEDI_AMPLC_DIO200_PCI is not set
# CONFIG_COMEDI_AMPLC_PC236_PCI is not set
# CONFIG_COMEDI_AMPLC_PC263_PCI is not set
# CONFIG_COMEDI_AMPLC_PCI224 is not set
# CONFIG_COMEDI_AMPLC_PCI230 is not set
# CONFIG_COMEDI_CONTEC_PCI_DIO is not set
# CONFIG_COMEDI_DAS08_PCI is not set
# CONFIG_COMEDI_DT3000 is not set
# CONFIG_COMEDI_DYNA_PCI10XX is not set
# CONFIG_COMEDI_GSC_HPDI is not set
# CONFIG_COMEDI_MF6X4 is not set
# CONFIG_COMEDI_ICP_MULTI is not set
# CONFIG_COMEDI_DAQBOARD2000 is not set
# CONFIG_COMEDI_JR3_PCI is not set
# CONFIG_COMEDI_KE_COUNTER is not set
# CONFIG_COMEDI_CB_PCIDAS64 is not set
# CONFIG_COMEDI_CB_PCIDAS is not set
# CONFIG_COMEDI_CB_PCIDDA is not set
# CONFIG_COMEDI_CB_PCIMDAS is not set
# CONFIG_COMEDI_CB_PCIMDDA is not set
# CONFIG_COMEDI_ME4000 is not set
# CONFIG_COMEDI_ME_DAQ is not set
# CONFIG_COMEDI_NI_6527 is not set
# CONFIG_COMEDI_NI_65XX is not set
# CONFIG_COMEDI_NI_660X is not set
# CONFIG_COMEDI_NI_670X is not set
CONFIG_COMEDI_NI_LABPC_PCI=y
# CONFIG_COMEDI_NI_PCIDIO is not set
# CONFIG_COMEDI_NI_PCIMIO is not set
# CONFIG_COMEDI_RTD520 is not set
# CONFIG_COMEDI_S626 is not set
CONFIG_COMEDI_PCMCIA_DRIVERS=y
# CONFIG_COMEDI_CB_DAS16_CS is not set
# CONFIG_COMEDI_DAS08_CS is not set
CONFIG_COMEDI_NI_DAQ_700_CS=y
# CONFIG_COMEDI_NI_DAQ_DIO24_CS is not set
CONFIG_COMEDI_NI_LABPC_CS=y
# CONFIG_COMEDI_NI_MIO_CS is not set
# CONFIG_COMEDI_QUATECH_DAQP_CS is not set
CONFIG_COMEDI_USB_DRIVERS=y
CONFIG_COMEDI_DT9812=y
CONFIG_COMEDI_NI_USB6501=y
CONFIG_COMEDI_USBDUX=y
CONFIG_COMEDI_USBDUXFAST=y
CONFIG_COMEDI_USBDUXSIGMA=y
CONFIG_COMEDI_VMK80XX=y
CONFIG_COMEDI_8254=y
CONFIG_COMEDI_8255=y
CONFIG_COMEDI_8255_SA=y
CONFIG_COMEDI_KCOMEDILIB=y
CONFIG_COMEDI_AMPLC_DIO200=y
CONFIG_COMEDI_AMPLC_PC236=y
CONFIG_COMEDI_DAS08=y
CONFIG_COMEDI_ISADMA=y
CONFIG_COMEDI_NI_LABPC=y
CONFIG_COMEDI_NI_LABPC_ISADMA=y
# CONFIG_COMEDI_TESTS is not set
# CONFIG_GPIB is not set
CONFIG_STAGING=y
# CONFIG_RTL8723BS is not set

#
# IIO staging drivers
#

#
# Accelerometers
#
# CONFIG_ADIS16203 is not set
# end of Accelerometers

#
# Analog to digital converters
#
# CONFIG_AD7816 is not set
# end of Analog to digital converters

#
# Analog digital bi-direction converters
#
# CONFIG_ADT7316 is not set
# end of Analog digital bi-direction converters

#
# Direct Digital Synthesis
#
# CONFIG_AD9832 is not set
# CONFIG_AD9834 is not set
# end of Direct Digital Synthesis

#
# Network Analyzer, Impedance Converters
#
# CONFIG_AD5933 is not set
# end of Network Analyzer, Impedance Converters
# end of IIO staging drivers

# CONFIG_FB_SM750 is not set
# CONFIG_STAGING_MEDIA is not set
# CONFIG_FB_TFT is not set
# CONFIG_MOST_COMPONENTS is not set
# CONFIG_GREYBUS_AUDIO is not set
# CONFIG_GREYBUS_BOOTROM is not set
# CONFIG_GREYBUS_FIRMWARE is not set
CONFIG_GREYBUS_HID=y
# CONFIG_GREYBUS_LOG is not set
# CONFIG_GREYBUS_LOOPBACK is not set
# CONFIG_GREYBUS_POWER is not set
# CONFIG_GREYBUS_RAW is not set
# CONFIG_GREYBUS_VIBRATOR is not set
CONFIG_GREYBUS_BRIDGED_PHY=y
# CONFIG_GREYBUS_GPIO is not set
# CONFIG_GREYBUS_I2C is not set
# CONFIG_GREYBUS_SDIO is not set
# CONFIG_GREYBUS_SPI is not set
# CONFIG_GREYBUS_UART is not set
CONFIG_GREYBUS_USB=y
# CONFIG_XIL_AXIS_FIFO is not set
# CONFIG_VME_BUS is not set
# CONFIG_GOLDFISH is not set
# CONFIG_CHROME_PLATFORMS is not set
# CONFIG_MELLANOX_PLATFORM is not set
CONFIG_SURFACE_PLATFORMS=y
# CONFIG_SURFACE3_WMI is not set
# CONFIG_SURFACE_3_POWER_OPREGION is not set
# CONFIG_SURFACE_ACPI_NOTIFY is not set
# CONFIG_SURFACE_AGGREGATOR_CDEV is not set
# CONFIG_SURFACE_AGGREGATOR_HUB is not set
CONFIG_SURFACE_AGGREGATOR_REGISTRY=y
# CONFIG_SURFACE_AGGREGATOR_TABLET_SWITCH is not set
# CONFIG_SURFACE_DTX is not set
# CONFIG_SURFACE_GPE is not set
# CONFIG_SURFACE_HOTPLUG is not set
# CONFIG_SURFACE_PLATFORM_PROFILE is not set
# CONFIG_SURFACE_PRO3_BUTTON is not set
CONFIG_SURFACE_AGGREGATOR=y
CONFIG_SURFACE_AGGREGATOR_BUS=y
CONFIG_X86_PLATFORM_DEVICES=y
CONFIG_WMI_BMOF=y
# CONFIG_HUAWEI_WMI is not set
# CONFIG_X86_PLATFORM_DRIVERS_UNIWILL is not set
# CONFIG_MXM_WMI is not set
# CONFIG_NVIDIA_WMI_EC_BACKLIGHT is not set
# CONFIG_XIAOMI_WMI is not set
# CONFIG_REDMI_WMI is not set
# CONFIG_GIGABYTE_WMI is not set
# CONFIG_BITLAND_MIFS_WMI is not set
# CONFIG_ACERHDF is not set
# CONFIG_ACER_WIRELESS is not set
# CONFIG_ACER_WMI is not set

#
# AMD HSMP Driver
#
# CONFIG_AMD_HSMP_ACPI is not set
# CONFIG_AMD_HSMP_PLAT is not set
# end of AMD HSMP Driver

# CONFIG_AMD_PMC is not set
# CONFIG_AMD_HFI is not set
# CONFIG_AMD_3D_VCACHE is not set
# CONFIG_AMD_WBRF is not set
# CONFIG_AMD_ISP_PLATFORM is not set
# CONFIG_ADV_SWBUTTON is not set
# CONFIG_APPLE_GMUX is not set
# CONFIG_ASUS_LAPTOP is not set
# CONFIG_ASUS_WIRELESS is not set
# CONFIG_ASUS_ARMOURY is not set
CONFIG_ASUS_WMI=y
# CONFIG_ASUS_WMI_DEPRECATED_ATTRS is not set
# CONFIG_ASUS_NB_WMI is not set
CONFIG_ASUS_TF103C_DOCK=y
# CONFIG_AYANEO_EC is not set
CONFIG_EEEPC_LAPTOP=y
# CONFIG_EEEPC_WMI is not set
# CONFIG_X86_PLATFORM_DRIVERS_DELL is not set
# CONFIG_AMILO_RFKILL is not set
# CONFIG_FUJITSU_LAPTOP is not set
# CONFIG_FUJITSU_TABLET is not set
# CONFIG_GPD_POCKET_FAN is not set
# CONFIG_X86_PLATFORM_DRIVERS_HP is not set
# CONFIG_WIRELESS_HOTKEY is not set
# CONFIG_IBM_RTL is not set
# CONFIG_SENSORS_HDAPS is not set
# CONFIG_INTEL_ATOMISP2_PM is not set
# CONFIG_INTEL_IFS is not set
# CONFIG_INTEL_SAR_INT1092 is not set
# CONFIG_INTEL_SKL_INT3472 is not set

#
# Intel Speed Select Technology interface support
#
# CONFIG_INTEL_SPEED_SELECT_INTERFACE is not set
# end of Intel Speed Select Technology interface support

# CONFIG_INTEL_WMI_SBL_FW_UPDATE is not set
# CONFIG_INTEL_WMI_THUNDERBOLT is not set

#
# Intel Uncore Frequency Control
#
# CONFIG_INTEL_UNCORE_FREQ_CONTROL is not set
# end of Intel Uncore Frequency Control

# CONFIG_INTEL_HID_EVENT is not set
# CONFIG_INTEL_VBTN is not set
# CONFIG_INTEL_EHL_PSE_IO is not set
# CONFIG_INTEL_INT0002_VGPIO is not set
# CONFIG_INTEL_OAKTRAIL is not set
# CONFIG_INTEL_BXTWC_PMIC_TMU is not set
CONFIG_INTEL_CHTWC_INT33FE=y
CONFIG_INTEL_ISHTP_ECLITE=y
# CONFIG_INTEL_PUNIT_IPC is not set
# CONFIG_INTEL_RST is not set
# CONFIG_INTEL_SMARTCONNECT is not set
# CONFIG_INTEL_TURBO_MAX_3 is not set
# CONFIG_INTEL_VSEC is not set
# CONFIG_IDEAPAD_LAPTOP is not set
# CONFIG_LENOVO_WMI_HOTKEY_UTILITIES is not set
# CONFIG_LENOVO_WMI_CAMERA is not set
# CONFIG_THINKPAD_ACPI is not set
# CONFIG_THINKPAD_LMI is not set
# CONFIG_YOGABOOK is not set
# CONFIG_YT2_1380 is not set
# CONFIG_LENOVO_WMI_GAMEZONE is not set
# CONFIG_LENOVO_WMI_TUNING is not set
# CONFIG_ACPI_QUICKSTART is not set
# CONFIG_MEEGOPAD_ANX7428 is not set
# CONFIG_MSI_EC is not set
# CONFIG_MSI_LAPTOP is not set
# CONFIG_MSI_WMI is not set
# CONFIG_MSI_WMI_PLATFORM is not set
# CONFIG_PCENGINES_APU2 is not set
# CONFIG_PORTWELL_EC is not set
# CONFIG_BARCO_P50_GPIO is not set
# CONFIG_SAMSUNG_GALAXYBOOK is not set
# CONFIG_SAMSUNG_LAPTOP is not set
# CONFIG_SAMSUNG_Q10 is not set
# CONFIG_ACPI_TOSHIBA is not set
# CONFIG_TOSHIBA_BT_RFKILL is not set
# CONFIG_TOSHIBA_HAPS is not set
# CONFIG_TOSHIBA_WMI is not set
# CONFIG_ACPI_CMPC is not set
# CONFIG_COMPAL_LAPTOP is not set
# CONFIG_LG_LAPTOP is not set
# CONFIG_PANASONIC_LAPTOP is not set
# CONFIG_SONY_LAPTOP is not set
# CONFIG_SYSTEM76_ACPI is not set
# CONFIG_TOPSTAR_LAPTOP is not set
# CONFIG_SERIAL_MULTI_INSTANTIATE is not set
# CONFIG_INSPUR_PLATFORM_PROFILE is not set
# CONFIG_DASHARO_ACPI is not set
# CONFIG_INTEL_IPS is not set
CONFIG_INTEL_SCU_IPC=y
# CONFIG_INTEL_SCU_PCI is not set
# CONFIG_INTEL_SCU_PLATFORM is not set
# CONFIG_SIEMENS_SIMATIC_IPC is not set
# CONFIG_SILICOM_PLATFORM is not set
# CONFIG_WINMATE_FM07_KEYS is not set
# CONFIG_OXP_EC is not set
# CONFIG_TUXEDO_NB04_WMI_AB is not set
CONFIG_P2SB=y
CONFIG_ACPI_WMI=y
# CONFIG_ACPI_WMI_LEGACY_DEVICE_NAMES is not set
CONFIG_HAVE_CLK=y
CONFIG_HAVE_CLK_PREPARE=y
CONFIG_COMMON_CLK=y
# CONFIG_LMK04832 is not set
# CONFIG_COMMON_CLK_MAX9485 is not set
# CONFIG_COMMON_CLK_SI5341 is not set
# CONFIG_COMMON_CLK_SI5351 is not set
# CONFIG_COMMON_CLK_SI514 is not set
# CONFIG_COMMON_CLK_SI544 is not set
# CONFIG_COMMON_CLK_SI570 is not set
# CONFIG_COMMON_CLK_CDCE706 is not set
# CONFIG_COMMON_CLK_CDCE925 is not set
# CONFIG_COMMON_CLK_CS2000_CP is not set
# CONFIG_CLK_TWL is not set
# CONFIG_COMMON_CLK_AXI_CLKGEN is not set
# CONFIG_COMMON_CLK_RS9_PCIE is not set
# CONFIG_COMMON_CLK_SI521XX is not set
# CONFIG_COMMON_CLK_VC3 is not set
# CONFIG_COMMON_CLK_VC5 is not set
# CONFIG_COMMON_CLK_VC7 is not set
# CONFIG_COMMON_CLK_FIXED_MMIO is not set
# CONFIG_CLK_LGM_CGU is not set
# CONFIG_XILINX_VCU is not set
# CONFIG_COMMON_CLK_XLNX_CLKWZRD is not set
# CONFIG_HWSPINLOCK is not set

#
# Clock Source drivers
#
CONFIG_CLKEVT_I8253=y
CONFIG_I8253_LOCK=y
CONFIG_CLKBLD_I8253=y
# end of Clock Source drivers

CONFIG_MAILBOX=y
# CONFIG_PLATFORM_MHU is not set
CONFIG_PCC=y
# CONFIG_ALTERA_MBOX is not set
# CONFIG_MAILBOX_TEST is not set
CONFIG_IOMMU_IOVA=y
CONFIG_IOMMU_API=y
CONFIG_IOMMUFD_DRIVER=y
CONFIG_IOMMU_SUPPORT=y

#
# Generic IOMMU Pagetable Support
#
# end of Generic IOMMU Pagetable Support

# CONFIG_IOMMU_DEBUGFS is not set
# CONFIG_IOMMU_DEFAULT_DMA_STRICT is not set
CONFIG_IOMMU_DEFAULT_DMA_LAZY=y
# CONFIG_IOMMU_DEFAULT_PASSTHROUGH is not set
CONFIG_OF_IOMMU=y
CONFIG_IOMMU_DMA=y
CONFIG_IOMMU_SVA=y
CONFIG_IOMMU_IOPF=y
CONFIG_AMD_IOMMU=y
# CONFIG_AMD_IOMMU_IOMMUFD is not set
CONFIG_DMAR_TABLE=y
CONFIG_INTEL_IOMMU=y
CONFIG_INTEL_IOMMU_SVM=y
CONFIG_INTEL_IOMMU_DEFAULT_ON=y
CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON=y
CONFIG_INTEL_IOMMU_PERF_EVENTS=y
CONFIG_IOMMUFD_DRIVER_CORE=y
CONFIG_IOMMUFD=y
CONFIG_IOMMUFD_TEST=y
CONFIG_IRQ_REMAP=y
# CONFIG_VIRTIO_IOMMU is not set
CONFIG_GENERIC_PT=y
CONFIG_DEBUG_GENERIC_PT=y
CONFIG_IOMMU_PT=y
CONFIG_IOMMU_PT_AMDV1=y
CONFIG_IOMMU_PT_VTDSS=y
# CONFIG_IOMMU_PT_RISCV64 is not set
CONFIG_IOMMU_PT_X86_64=y

#
# Remoteproc drivers
#
# CONFIG_REMOTEPROC is not set
# end of Remoteproc drivers

#
# Rpmsg drivers
#
# CONFIG_RPMSG_QCOM_GLINK_RPM is not set
# CONFIG_RPMSG_VIRTIO is not set
# end of Rpmsg drivers

CONFIG_SOUNDWIRE=y

#
# SoundWire Devices
#
# CONFIG_SOUNDWIRE_AMD is not set
# CONFIG_SOUNDWIRE_INTEL is not set
# CONFIG_SOUNDWIRE_QCOM is not set

#
# SOC (System On Chip) specific Drivers
#

#
# Amlogic SoC drivers
#
# end of Amlogic SoC drivers

#
# Broadcom SoC drivers
#
# end of Broadcom SoC drivers

#
# NXP/Freescale QorIQ SoC drivers
#
# end of NXP/Freescale QorIQ SoC drivers

#
# fujitsu SoC drivers
#
# end of fujitsu SoC drivers

#
# i.MX SoC drivers
#
# end of i.MX SoC drivers

#
# Enable LiteX SoC Builder specific drivers
#
# CONFIG_LITEX_SOC_CONTROLLER is not set
# end of Enable LiteX SoC Builder specific drivers

# CONFIG_WPCM450_SOC is not set

#
# Qualcomm SoC drivers
#
CONFIG_QCOM_QMI_HELPERS=y
# end of Qualcomm SoC drivers

# CONFIG_SOC_TI is not set

#
# Xilinx SoC drivers
#
# end of Xilinx SoC drivers
# end of SOC (System On Chip) specific Drivers

#
# PM Domains
#

#
# Amlogic PM Domains
#
# end of Amlogic PM Domains

#
# Broadcom PM Domains
#
# end of Broadcom PM Domains

#
# i.MX PM Domains
#
# end of i.MX PM Domains

#
# Qualcomm PM Domains
#
# end of Qualcomm PM Domains
# end of PM Domains

# CONFIG_PM_DEVFREQ is not set
CONFIG_EXTCON=y

#
# Extcon Device Drivers
#
# CONFIG_EXTCON_ADC_JACK is not set
# CONFIG_EXTCON_FSA9480 is not set
# CONFIG_EXTCON_GPIO is not set
# CONFIG_EXTCON_INTEL_INT3496 is not set
CONFIG_EXTCON_INTEL_CHT_WC=y
# CONFIG_EXTCON_LC824206XA is not set
# CONFIG_EXTCON_MAX3355 is not set
# CONFIG_EXTCON_MAX14526 is not set
CONFIG_EXTCON_PTN5150=y
# CONFIG_EXTCON_RT8973A is not set
# CONFIG_EXTCON_SM5502 is not set
# CONFIG_EXTCON_USB_GPIO is not set
CONFIG_EXTCON_USBC_TUSB320=y
# CONFIG_MEMORY is not set
CONFIG_IIO=y
CONFIG_IIO_BUFFER=y
# CONFIG_IIO_BUFFER_CB is not set
# CONFIG_IIO_BUFFER_DMA is not set
# CONFIG_IIO_BUFFER_DMAENGINE is not set
# CONFIG_IIO_BUFFER_HW_CONSUMER is not set
CONFIG_IIO_KFIFO_BUF=y
CONFIG_IIO_TRIGGERED_BUFFER=y
# CONFIG_IIO_CONFIGFS is not set
CONFIG_IIO_TRIGGER=y
CONFIG_IIO_CONSUMERS_PER_TRIGGER=2
# CONFIG_IIO_SW_DEVICE is not set
# CONFIG_IIO_SW_TRIGGER is not set
# CONFIG_IIO_TRIGGERED_EVENT is not set

#
# Accelerometers
#
# CONFIG_ADIS16201 is not set
# CONFIG_ADIS16209 is not set
# CONFIG_ADXL313_I2C is not set
# CONFIG_ADXL313_SPI is not set
# CONFIG_ADXL345_I2C is not set
# CONFIG_ADXL345_SPI is not set
# CONFIG_ADXL355_I2C is not set
# CONFIG_ADXL355_SPI is not set
# CONFIG_ADXL367_SPI is not set
# CONFIG_ADXL367_I2C is not set
# CONFIG_ADXL372_SPI is not set
# CONFIG_ADXL372_I2C is not set
# CONFIG_ADXL380_SPI is not set
# CONFIG_ADXL380_I2C is not set
# CONFIG_BMA180 is not set
# CONFIG_BMA220 is not set
# CONFIG_BMA400 is not set
# CONFIG_BMC150_ACCEL is not set
# CONFIG_BMI088_ACCEL is not set
# CONFIG_DA280 is not set
# CONFIG_DA311 is not set
# CONFIG_DMARD06 is not set
# CONFIG_DMARD09 is not set
# CONFIG_DMARD10 is not set
# CONFIG_FXLS8962AF_I2C is not set
# CONFIG_FXLS8962AF_SPI is not set
CONFIG_HID_SENSOR_ACCEL_3D=y
# CONFIG_IIO_ST_ACCEL_3AXIS is not set
# CONFIG_IIO_KX022A_SPI is not set
# CONFIG_IIO_KX022A_I2C is not set
# CONFIG_KXSD9 is not set
# CONFIG_KXCJK1013 is not set
# CONFIG_MC3230 is not set
# CONFIG_MMA7455_I2C is not set
# CONFIG_MMA7455_SPI is not set
# CONFIG_MMA7660 is not set
# CONFIG_MMA8452 is not set
# CONFIG_MMA9551 is not set
# CONFIG_MMA9553 is not set
# CONFIG_MSA311 is not set
# CONFIG_MXC4005 is not set
# CONFIG_MXC6255 is not set
# CONFIG_SCA3000 is not set
# CONFIG_SCA3300 is not set
# CONFIG_STK8312 is not set
# CONFIG_STK8BA50 is not set
# end of Accelerometers

#
# Analog to digital converters
#
# CONFIG_AD4000 is not set
# CONFIG_AD4080 is not set
# CONFIG_AD4130 is not set
# CONFIG_AD4134 is not set
# CONFIG_AD4170_4 is not set
# CONFIG_AD4695 is not set
# CONFIG_AD7091R5 is not set
# CONFIG_AD7091R8 is not set
# CONFIG_AD7124 is not set
# CONFIG_AD7173 is not set
# CONFIG_AD7191 is not set
# CONFIG_AD7192 is not set
# CONFIG_AD7266 is not set
# CONFIG_AD7280 is not set
# CONFIG_AD7291 is not set
# CONFIG_AD7292 is not set
# CONFIG_AD7298 is not set
# CONFIG_AD7380 is not set
# CONFIG_AD7476 is not set
# CONFIG_AD7606_IFACE_PARALLEL is not set
# CONFIG_AD7606_IFACE_SPI is not set
# CONFIG_AD7766 is not set
# CONFIG_AD7768_1 is not set
# CONFIG_AD7779 is not set
# CONFIG_AD7780 is not set
# CONFIG_AD7791 is not set
# CONFIG_AD7793 is not set
# CONFIG_AD7887 is not set
# CONFIG_AD7923 is not set
# CONFIG_AD7944 is not set
# CONFIG_AD7949 is not set
# CONFIG_AD799X is not set
# CONFIG_AD9467 is not set
# CONFIG_ADE9000 is not set
# CONFIG_CC10001_ADC is not set
CONFIG_DLN2_ADC=y
# CONFIG_ENVELOPE_DETECTOR is not set
# CONFIG_GEHC_PMC_ADC is not set
# CONFIG_HI8435 is not set
# CONFIG_HX711 is not set
# CONFIG_INA2XX_ADC is not set
# CONFIG_LTC2309 is not set
# CONFIG_LTC2471 is not set
# CONFIG_LTC2485 is not set
# CONFIG_LTC2496 is not set
# CONFIG_LTC2497 is not set
# CONFIG_MAX1027 is not set
# CONFIG_MAX11100 is not set
# CONFIG_MAX1118 is not set
# CONFIG_MAX11205 is not set
# CONFIG_MAX11410 is not set
# CONFIG_MAX1241 is not set
# CONFIG_MAX1363 is not set
# CONFIG_MAX14001 is not set
# CONFIG_MAX34408 is not set
# CONFIG_MAX9611 is not set
# CONFIG_MCP320X is not set
# CONFIG_MCP3422 is not set
# CONFIG_MCP3564 is not set
# CONFIG_MCP3911 is not set
# CONFIG_MEDIATEK_MT6360_ADC is not set
# CONFIG_MEDIATEK_MT6370_ADC is not set
# CONFIG_NAU7802 is not set
# CONFIG_NCT7201 is not set
# CONFIG_PAC1921 is not set
# CONFIG_PAC1934 is not set
# CONFIG_ROHM_BD79112 is not set
# CONFIG_ROHM_BD79124 is not set
# CONFIG_RICHTEK_RTQ6056 is not set
# CONFIG_SD_ADC_MODULATOR is not set
# CONFIG_TI_ADC081C is not set
# CONFIG_TI_ADC0832 is not set
# CONFIG_TI_ADC084S021 is not set
# CONFIG_TI_ADC108S102 is not set
# CONFIG_TI_ADC12138 is not set
# CONFIG_TI_ADC128S052 is not set
# CONFIG_TI_ADC161S626 is not set
# CONFIG_TI_ADS1015 is not set
# CONFIG_TI_ADS1018 is not set
# CONFIG_TI_ADS1100 is not set
# CONFIG_TI_ADS1119 is not set
# CONFIG_TI_ADS124S08 is not set
# CONFIG_TI_ADS1298 is not set
# CONFIG_TI_ADS131E08 is not set
# CONFIG_TI_ADS131M02 is not set
# CONFIG_TI_ADS7138 is not set
# CONFIG_TI_ADS7924 is not set
# CONFIG_TI_ADS7950 is not set
# CONFIG_TI_ADS8344 is not set
# CONFIG_TI_ADS8688 is not set
# CONFIG_TI_LMP92064 is not set
# CONFIG_TI_TLC4541 is not set
# CONFIG_TI_TSC2046 is not set
# CONFIG_TWL4030_MADC is not set
# CONFIG_TWL6030_GPADC is not set
# CONFIG_VF610_ADC is not set
CONFIG_VIPERBOARD_ADC=y
# CONFIG_XILINX_XADC is not set
# end of Analog to digital converters

#
# Analog to digital and digital to analog converters
#
# CONFIG_AD74115 is not set
# CONFIG_AD74413R is not set
# end of Analog to digital and digital to analog converters

#
# Analog Front Ends
#
# CONFIG_IIO_RESCALE is not set
# end of Analog Front Ends

#
# Amplifiers
#
# CONFIG_AD8366 is not set
# CONFIG_ADA4250 is not set
# CONFIG_ADL8113 is not set
# CONFIG_HMC425 is not set
# end of Amplifiers

#
# Capacitance to digital converters
#
# CONFIG_AD7150 is not set
# CONFIG_AD7746 is not set
# end of Capacitance to digital converters

#
# Chemical Sensors
#
# CONFIG_AOSONG_AGS02MA is not set
# CONFIG_ATLAS_PH_SENSOR is not set
# CONFIG_ATLAS_EZO_SENSOR is not set
# CONFIG_BME680 is not set
# CONFIG_CCS811 is not set
# CONFIG_ENS160 is not set
# CONFIG_IAQCORE is not set
# CONFIG_MHZ19B is not set
# CONFIG_PMS7003 is not set
# CONFIG_SCD30_CORE is not set
# CONFIG_SCD4X is not set
# CONFIG_SEN0322 is not set
# CONFIG_SENSIRION_SGP30 is not set
# CONFIG_SENSIRION_SGP40 is not set
# CONFIG_SPS30_I2C is not set
# CONFIG_SPS30_SERIAL is not set
# CONFIG_SENSEAIR_SUNRISE_CO2 is not set
# CONFIG_VZ89X is not set
# end of Chemical Sensors

#
# Hid Sensor IIO Common
#
CONFIG_HID_SENSOR_IIO_COMMON=y
CONFIG_HID_SENSOR_IIO_TRIGGER=y
# end of Hid Sensor IIO Common

#
# IIO SCMI Sensors
#
# end of IIO SCMI Sensors

#
# SSP Sensor Common
#
# CONFIG_IIO_SSP_SENSORHUB is not set
# end of SSP Sensor Common

#
# Digital to analog converters
#
# CONFIG_AD3530R is not set
# CONFIG_AD3552R_HS is not set
# CONFIG_AD3552R is not set
# CONFIG_AD5064 is not set
# CONFIG_AD5360 is not set
# CONFIG_AD5380 is not set
# CONFIG_AD5421 is not set
# CONFIG_AD5446_SPI is not set
# CONFIG_AD5446_I2C is not set
# CONFIG_AD5449 is not set
# CONFIG_AD5592R is not set
# CONFIG_AD5593R is not set
# CONFIG_AD5504 is not set
# CONFIG_AD5624R_SPI is not set
# CONFIG_AD9739A is not set
# CONFIG_LTC2688 is not set
# CONFIG_AD5686_SPI is not set
# CONFIG_AD5696_I2C is not set
# CONFIG_AD5755 is not set
# CONFIG_AD5758 is not set
# CONFIG_AD5761 is not set
# CONFIG_AD5764 is not set
# CONFIG_AD5766 is not set
# CONFIG_AD5770R is not set
# CONFIG_AD5791 is not set
# CONFIG_AD7293 is not set
# CONFIG_AD7303 is not set
# CONFIG_AD8460 is not set
# CONFIG_AD8801 is not set
# CONFIG_BD79703 is not set
# CONFIG_CIO_DAC is not set
# CONFIG_DPOT_DAC is not set
# CONFIG_DS4424 is not set
# CONFIG_LTC1660 is not set
# CONFIG_LTC2632 is not set
# CONFIG_LTC2664 is not set
# CONFIG_M62332 is not set
# CONFIG_MAX517 is not set
# CONFIG_MAX22007 is not set
# CONFIG_MAX5522 is not set
# CONFIG_MAX5821 is not set
# CONFIG_MCP4725 is not set
# CONFIG_MCP4728 is not set
# CONFIG_MCP47FEB02 is not set
# CONFIG_MCP4821 is not set
# CONFIG_MCP4922 is not set
# CONFIG_TI_DAC082S085 is not set
# CONFIG_TI_DAC5571 is not set
# CONFIG_TI_DAC7311 is not set
# CONFIG_TI_DAC7612 is not set
# CONFIG_VF610_DAC is not set
# end of Digital to analog converters

#
# IIO dummy driver
#
# end of IIO dummy driver

#
# Filters
#
# CONFIG_ADMV8818 is not set
# end of Filters

#
# Frequency Synthesizers DDS/PLL
#

#
# Clock Generator/Distribution
#
# CONFIG_AD9523 is not set
# end of Clock Generator/Distribution

#
# Phase-Locked Loop (PLL) frequency synthesizers
#
# CONFIG_ADF4350 is not set
# CONFIG_ADF4371 is not set
# CONFIG_ADF4377 is not set
# CONFIG_ADMFM2000 is not set
# CONFIG_ADMV1013 is not set
# CONFIG_ADMV1014 is not set
# CONFIG_ADMV4420 is not set
# CONFIG_ADRF6780 is not set
# end of Phase-Locked Loop (PLL) frequency synthesizers
# end of Frequency Synthesizers DDS/PLL

#
# Digital gyroscope sensors
#
# CONFIG_ADIS16080 is not set
# CONFIG_ADIS16130 is not set
# CONFIG_ADIS16136 is not set
# CONFIG_ADIS16260 is not set
# CONFIG_ADXRS290 is not set
# CONFIG_ADXRS450 is not set
# CONFIG_BMG160 is not set
# CONFIG_FXAS21002C is not set
CONFIG_HID_SENSOR_GYRO_3D=y
# CONFIG_MPU3050_I2C is not set
# CONFIG_IIO_ST_GYRO_3AXIS is not set
# CONFIG_ITG3200 is not set
# end of Digital gyroscope sensors

#
# Health Sensors
#

#
# Heart Rate Monitors
#
# CONFIG_AFE4403 is not set
# CONFIG_AFE4404 is not set
# CONFIG_MAX30100 is not set
# CONFIG_MAX30102 is not set
# end of Heart Rate Monitors
# end of Health Sensors

#
# Humidity sensors
#
# CONFIG_AM2315 is not set
# CONFIG_DHT11 is not set
# CONFIG_ENS210 is not set
# CONFIG_HDC100X is not set
# CONFIG_HDC2010 is not set
# CONFIG_HDC3020 is not set
CONFIG_HID_SENSOR_HUMIDITY=y
# CONFIG_HTS221 is not set
# CONFIG_HTU21 is not set
# CONFIG_SI7005 is not set
# CONFIG_SI7020 is not set
# end of Humidity sensors

#
# Inertial measurement units
#
# CONFIG_ADIS16400 is not set
# CONFIG_ADIS16460 is not set
# CONFIG_ADIS16475 is not set
# CONFIG_ADIS16480 is not set
# CONFIG_ADIS16550 is not set
# CONFIG_BMI160_I2C is not set
# CONFIG_BMI160_SPI is not set
# CONFIG_BMI270_I2C is not set
# CONFIG_BMI270_SPI is not set
# CONFIG_BMI323_I2C is not set
# CONFIG_BMI323_SPI is not set
# CONFIG_BOSCH_BNO055_SERIAL is not set
# CONFIG_BOSCH_BNO055_I2C is not set
# CONFIG_FXOS8700_I2C is not set
# CONFIG_FXOS8700_SPI is not set
# CONFIG_KMX61 is not set
# CONFIG_INV_ICM42600_I2C is not set
# CONFIG_INV_ICM42600_SPI is not set
# CONFIG_INV_ICM45600_I2C is not set
# CONFIG_INV_ICM45600_SPI is not set
# CONFIG_INV_MPU6050_I2C is not set
# CONFIG_INV_MPU6050_SPI is not set
# CONFIG_SMI240 is not set
# CONFIG_SMI330_I2C is not set
# CONFIG_SMI330_SPI is not set
# CONFIG_IIO_ST_LSM6DSX is not set
# CONFIG_IIO_ST_LSM9DS0 is not set
# end of Inertial measurement units

#
# Light sensors
#
# CONFIG_ACPI_ALS is not set
# CONFIG_ADJD_S311 is not set
# CONFIG_ADUX1020 is not set
# CONFIG_AL3000A is not set
# CONFIG_AL3010 is not set
# CONFIG_AL3320A is not set
# CONFIG_APDS9160 is not set
# CONFIG_APDS9300 is not set
# CONFIG_APDS9306 is not set
# CONFIG_APDS9960 is not set
# CONFIG_AS73211 is not set
# CONFIG_BH1745 is not set
# CONFIG_BH1750 is not set
# CONFIG_BH1780 is not set
# CONFIG_CM32181 is not set
# CONFIG_CM3232 is not set
# CONFIG_CM3323 is not set
# CONFIG_CM3605 is not set
# CONFIG_CM36651 is not set
# CONFIG_GP2AP002 is not set
# CONFIG_GP2AP020A00F is not set
# CONFIG_SENSORS_ISL29018 is not set
# CONFIG_SENSORS_ISL29028 is not set
# CONFIG_ISL29125 is not set
# CONFIG_ISL76682 is not set
CONFIG_HID_SENSOR_ALS=y
CONFIG_HID_SENSOR_PROX=y
# CONFIG_JSA1212 is not set
# CONFIG_ROHM_BU27034 is not set
# CONFIG_RPR0521 is not set
# CONFIG_LTR390 is not set
# CONFIG_LTR501 is not set
# CONFIG_LTRF216A is not set
# CONFIG_LV0104CS is not set
# CONFIG_MAX44000 is not set
# CONFIG_MAX44009 is not set
# CONFIG_NOA1305 is not set
# CONFIG_OPT3001 is not set
# CONFIG_OPT4001 is not set
# CONFIG_OPT4060 is not set
# CONFIG_PA12203001 is not set
# CONFIG_SI1133 is not set
# CONFIG_SI1145 is not set
# CONFIG_STK3310 is not set
# CONFIG_ST_UVIS25 is not set
# CONFIG_TCS3414 is not set
# CONFIG_TCS3472 is not set
# CONFIG_SENSORS_TSL2563 is not set
# CONFIG_TSL2583 is not set
# CONFIG_TSL2591 is not set
# CONFIG_TSL2772 is not set
# CONFIG_TSL4531 is not set
# CONFIG_US5182D is not set
# CONFIG_VCNL4000 is not set
# CONFIG_VCNL4035 is not set
# CONFIG_VEML3235 is not set
# CONFIG_VEML6030 is not set
# CONFIG_VEML6040 is not set
# CONFIG_VEML6046X00 is not set
# CONFIG_VEML6070 is not set
# CONFIG_VEML6075 is not set
# CONFIG_VL6180 is not set
# CONFIG_ZOPT2201 is not set
# end of Light sensors

#
# Magnetometer sensors
#
# CONFIG_AF8133J is not set
# CONFIG_AK8974 is not set
# CONFIG_AK8975 is not set
# CONFIG_AK09911 is not set
# CONFIG_ALS31300 is not set
# CONFIG_BMC150_MAGN_I2C is not set
# CONFIG_BMC150_MAGN_SPI is not set
# CONFIG_MAG3110 is not set
CONFIG_HID_SENSOR_MAGNETOMETER_3D=y
# CONFIG_MMC35240 is not set
# CONFIG_MMC5633 is not set
# CONFIG_IIO_ST_MAGN_3AXIS is not set
# CONFIG_INFINEON_TLV493D is not set
# CONFIG_SENSORS_HMC5843_I2C is not set
# CONFIG_SENSORS_HMC5843_SPI is not set
# CONFIG_SENSORS_RM3100_I2C is not set
# CONFIG_SENSORS_RM3100_SPI is not set
# CONFIG_SI7210 is not set
# CONFIG_TI_TMAG5273 is not set
# CONFIG_YAMAHA_YAS530 is not set
# end of Magnetometer sensors

#
# Multiplexers
#
# CONFIG_IIO_MUX is not set
# end of Multiplexers

#
# Inclinometer sensors
#
CONFIG_HID_SENSOR_INCLINOMETER_3D=y
CONFIG_HID_SENSOR_DEVICE_ROTATION=y
# end of Inclinometer sensors

#
# Triggers - standalone
#
# CONFIG_IIO_INTERRUPT_TRIGGER is not set
# CONFIG_IIO_SYSFS_TRIGGER is not set
# end of Triggers - standalone

#
# Linear and angular position sensors
#
CONFIG_HID_SENSOR_CUSTOM_INTEL_HINGE=y
# end of Linear and angular position sensors

#
# Digital potentiometers
#
# CONFIG_AD5110 is not set
# CONFIG_AD5272 is not set
# CONFIG_DS1803 is not set
# CONFIG_MAX5432 is not set
# CONFIG_MAX5481 is not set
# CONFIG_MAX5487 is not set
# CONFIG_MCP4018 is not set
# CONFIG_MCP4131 is not set
# CONFIG_MCP4531 is not set
# CONFIG_MCP41010 is not set
# CONFIG_TPL0102 is not set
# CONFIG_X9250 is not set
# end of Digital potentiometers

#
# Digital potentiostats
#
# CONFIG_LMP91000 is not set
# end of Digital potentiostats

#
# Pressure sensors
#
# CONFIG_ABP060MG is not set
# CONFIG_ABP2030PA_I2C is not set
# CONFIG_ABP2030PA_SPI is not set
# CONFIG_ROHM_BM1390 is not set
# CONFIG_BMP280 is not set
# CONFIG_DLHL60D is not set
# CONFIG_DPS310 is not set
CONFIG_HID_SENSOR_PRESS=y
# CONFIG_HP03 is not set
# CONFIG_HSC030PA is not set
# CONFIG_ICP10100 is not set
# CONFIG_MPL115_I2C is not set
# CONFIG_MPL115_SPI is not set
# CONFIG_MPL3115 is not set
# CONFIG_MPRLS0025PA_I2C is not set
# CONFIG_MPRLS0025PA_SPI is not set
# CONFIG_MS5611 is not set
# CONFIG_MS5637 is not set
# CONFIG_SDP500 is not set
# CONFIG_IIO_ST_PRESS is not set
# CONFIG_T5403 is not set
# CONFIG_HP206C is not set
# CONFIG_ZPA2326 is not set
# CONFIG_ADP810 is not set
# end of Pressure sensors

#
# Lightning sensors
#
# CONFIG_AS3935 is not set
# end of Lightning sensors

#
# Proximity and distance sensors
#
# CONFIG_D3323AA is not set
# CONFIG_HX9023S is not set
# CONFIG_IRSD200 is not set
# CONFIG_ISL29501 is not set
# CONFIG_LIDAR_LITE_V2 is not set
# CONFIG_MB1232 is not set
# CONFIG_PING is not set
# CONFIG_RFD77402 is not set
# CONFIG_SRF04 is not set
# CONFIG_SX9310 is not set
# CONFIG_SX9324 is not set
# CONFIG_SX9360 is not set
# CONFIG_SX9500 is not set
# CONFIG_SRF08 is not set
# CONFIG_VCNL3020 is not set
# CONFIG_VL53L0X_I2C is not set
# CONFIG_VL53L1X_I2C is not set
# CONFIG_AW96103 is not set
# end of Proximity and distance sensors

#
# Resolver to digital converters
#
# CONFIG_AD2S90 is not set
# CONFIG_AD2S1200 is not set
# CONFIG_AD2S1210 is not set
# end of Resolver to digital converters

#
# Temperature sensors
#
# CONFIG_LTC2983 is not set
# CONFIG_MAXIM_THERMOCOUPLE is not set
CONFIG_HID_SENSOR_TEMP=y
# CONFIG_MLX90614 is not set
# CONFIG_MLX90632 is not set
# CONFIG_MLX90635 is not set
# CONFIG_TMP006 is not set
# CONFIG_TMP007 is not set
# CONFIG_TMP117 is not set
# CONFIG_TSYS01 is not set
# CONFIG_TSYS02D is not set
# CONFIG_MAX30208 is not set
# CONFIG_MAX31856 is not set
# CONFIG_MAX31865 is not set
# CONFIG_MCP9600 is not set
# end of Temperature sensors

# CONFIG_NTB is not set
# CONFIG_PWM is not set

#
# IRQ chip support
#
CONFIG_IRQCHIP=y
CONFIG_IRQ_MSI_LIB=y
# CONFIG_AL_FIC is not set
# CONFIG_XILINX_INTC is not set
# end of IRQ chip support

# CONFIG_IPACK_BUS is not set
CONFIG_RESET_CONTROLLER=y
# CONFIG_RESET_GPIO is not set
# CONFIG_RESET_INTEL_GW is not set
# CONFIG_RESET_SIMPLE is not set
# CONFIG_RESET_TI_SYSCON is not set
# CONFIG_RESET_TI_TPS380X is not set

#
# PHY Subsystem
#
CONFIG_GENERIC_PHY=y
# CONFIG_PHY_CAN_TRANSCEIVER is not set
CONFIG_PHY_GOOGLE_USB=y
CONFIG_USB_LGM_PHY=y
# CONFIG_PHY_NXP_PTN3222 is not set

#
# PHY drivers for Broadcom platforms
#
# CONFIG_BCM_KONA_USB2_PHY is not set
# end of PHY drivers for Broadcom platforms

# CONFIG_PHY_CADENCE_TORRENT is not set
# CONFIG_PHY_CADENCE_DPHY is not set
# CONFIG_PHY_CADENCE_DPHY_RX is not set
# CONFIG_PHY_CADENCE_SIERRA is not set
# CONFIG_PHY_CADENCE_SALVO is not set
# CONFIG_PHY_INTEL_LGM_COMBO is not set
# CONFIG_PHY_INTEL_LGM_EMMC is not set
# CONFIG_PHY_PXA_28NM_HSIC is not set
# CONFIG_PHY_PXA_28NM_USB2 is not set
CONFIG_PHY_CPCAP_USB=y
# CONFIG_PHY_MAPPHONE_MDM6600 is not set
# CONFIG_PHY_OCELOT_SERDES is not set
CONFIG_PHY_QCOM_USB_HS=y
CONFIG_PHY_QCOM_USB_HSIC=y
CONFIG_PHY_SAMSUNG_USB2=y
CONFIG_PHY_TUSB1210=y
# end of PHY Subsystem

# CONFIG_POWERCAP is not set
# CONFIG_MCB is not set

#
# Performance monitor support
#
# CONFIG_DWC_PCIE_PMU is not set
# end of Performance monitor support

CONFIG_RAS=y
CONFIG_USB4=y
# CONFIG_USB4_DEBUGFS_WRITE is not set
# CONFIG_USB4_DMA_TEST is not set

#
# Android
#
CONFIG_ANDROID_BINDER_IPC=y
CONFIG_ANDROID_BINDERFS=y
CONFIG_ANDROID_BINDER_DEVICES="binder0,binder1"
# end of Android

CONFIG_LIBNVDIMM=y
CONFIG_BLK_DEV_PMEM=y
CONFIG_ND_CLAIM=y
CONFIG_ND_BTT=y
CONFIG_BTT=y
CONFIG_ND_PFN=y
CONFIG_NVDIMM_PFN=y
CONFIG_NVDIMM_DAX=y
CONFIG_OF_PMEM=y
# CONFIG_RAMDAX is not set
CONFIG_NVDIMM_KEYS=y
# CONFIG_NVDIMM_SECURITY_TEST is not set
CONFIG_DAX=y
CONFIG_DEV_DAX=y
# CONFIG_DEV_DAX_PMEM is not set
CONFIG_DEV_DAX_FSDEV=y
# CONFIG_DEV_DAX_KMEM is not set
CONFIG_NVMEM=y
CONFIG_NVMEM_SYSFS=y
CONFIG_NVMEM_LAYOUTS=y

#
# Layout Types
#
# CONFIG_NVMEM_LAYOUT_SL28_VPD is not set
# CONFIG_NVMEM_LAYOUT_ONIE_TLV is not set
# CONFIG_NVMEM_LAYOUT_U_BOOT_ENV is not set
# end of Layout Types

# CONFIG_NVMEM_RMEM is not set
# CONFIG_NVMEM_U_BOOT_ENV is not set

#
# HW tracing support
#
# CONFIG_STM is not set
# CONFIG_INTEL_TH is not set
# end of HW tracing support

# CONFIG_FPGA is not set
# CONFIG_FSI is not set
CONFIG_TEE=y
CONFIG_TEE_DMABUF_HEAPS=y
CONFIG_OPTEE_STATIC_PROTMEM_POOL=y
# CONFIG_MUX_CORE is not set
# CONFIG_SIOX is not set
# CONFIG_SLIMBUS is not set
# CONFIG_INTERCONNECT is not set
CONFIG_COUNTER=y
# CONFIG_INTEL_QEP is not set
# CONFIG_INTERRUPT_CNT is not set
CONFIG_MOST=y
CONFIG_MOST_USB_HDM=y
# CONFIG_MOST_CDEV is not set
# CONFIG_MOST_SND is not set
# CONFIG_PECI is not set
# CONFIG_HTE is not set
# end of Device Drivers

#
# File systems
#
CONFIG_DCACHE_WORD_ACCESS=y
CONFIG_VALIDATE_FS_PARSER=y
CONFIG_FS_IOMAP=y
CONFIG_FS_STACK=y
CONFIG_BUFFER_HEAD=y
CONFIG_LEGACY_DIRECT_IO=y
# CONFIG_EXT2_FS is not set
CONFIG_EXT4_FS=y
CONFIG_EXT4_USE_FOR_EXT2=y
CONFIG_EXT4_FS_POSIX_ACL=y
CONFIG_EXT4_FS_SECURITY=y
# CONFIG_EXT4_DEBUG is not set
CONFIG_JBD2=y
# CONFIG_JBD2_DEBUG is not set
CONFIG_FS_MBCACHE=y
CONFIG_JFS_FS=y
CONFIG_JFS_POSIX_ACL=y
CONFIG_JFS_SECURITY=y
CONFIG_JFS_DEBUG=y
# CONFIG_JFS_STATISTICS is not set
CONFIG_XFS_FS=y
# CONFIG_XFS_SUPPORT_V4 is not set
# CONFIG_XFS_SUPPORT_ASCII_CI is not set
CONFIG_XFS_QUOTA=y
CONFIG_XFS_POSIX_ACL=y
CONFIG_XFS_RT=y
# CONFIG_XFS_ONLINE_SCRUB is not set
# CONFIG_XFS_WARN is not set
# CONFIG_XFS_DEBUG is not set
CONFIG_GFS2_FS=y
CONFIG_GFS2_FS_LOCKING_DLM=y
CONFIG_OCFS2_FS=y
CONFIG_OCFS2_FS_O2CB=y
CONFIG_OCFS2_FS_USERSPACE_CLUSTER=y
CONFIG_OCFS2_FS_STATS=y
# CONFIG_OCFS2_DEBUG_MASKLOG is not set
CONFIG_OCFS2_DEBUG_FS=y
CONFIG_BTRFS_FS=y
CONFIG_BTRFS_FS_POSIX_ACL=y
# CONFIG_BTRFS_FS_RUN_SANITY_TESTS is not set
# CONFIG_BTRFS_DEBUG is not set
CONFIG_BTRFS_ASSERT=y
# CONFIG_BTRFS_EXPERIMENTAL is not set
CONFIG_NILFS2_FS=y
CONFIG_F2FS_FS=y
CONFIG_F2FS_STAT_FS=y
CONFIG_F2FS_FS_XATTR=y
CONFIG_F2FS_FS_POSIX_ACL=y
CONFIG_F2FS_FS_SECURITY=y
CONFIG_F2FS_CHECK_FS=y
CONFIG_F2FS_FAULT_INJECTION=y
CONFIG_F2FS_FS_COMPRESSION=y
CONFIG_F2FS_FS_LZO=y
CONFIG_F2FS_FS_LZORLE=y
CONFIG_F2FS_FS_LZ4=y
CONFIG_F2FS_FS_LZ4HC=y
CONFIG_F2FS_FS_ZSTD=y
# CONFIG_F2FS_IOSTAT is not set
# CONFIG_F2FS_UNFAIR_RWSEM is not set
CONFIG_ZONEFS_FS=y
CONFIG_FS_DAX=y
CONFIG_FS_DAX_PMD=y
CONFIG_FS_POSIX_ACL=y
CONFIG_EXPORTFS=y
CONFIG_EXPORTFS_BLOCK_OPS=y
CONFIG_FILE_LOCKING=y
CONFIG_FS_ENCRYPTION=y
CONFIG_FS_ENCRYPTION_ALGS=y
# CONFIG_FS_ENCRYPTION_INLINE_CRYPT is not set
CONFIG_FS_VERITY=y
CONFIG_FS_VERITY_BUILTIN_SIGNATURES=y
CONFIG_FSNOTIFY=y
CONFIG_DNOTIFY=y
CONFIG_INOTIFY_USER=y
CONFIG_FANOTIFY=y
CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
CONFIG_QUOTA=y
CONFIG_QUOTA_NETLINK_INTERFACE=y
# CONFIG_QUOTA_DEBUG is not set
CONFIG_QUOTA_TREE=y
# CONFIG_QFMT_V1 is not set
CONFIG_QFMT_V2=y
CONFIG_QUOTACTL=y
CONFIG_AUTOFS_FS=y
CONFIG_FUSE_FS=y
CONFIG_CUSE=y
CONFIG_VIRTIO_FS=y
CONFIG_FUSE_DAX=y
# CONFIG_FUSE_PASSTHROUGH is not set
CONFIG_FUSE_IO_URING=y
CONFIG_OVERLAY_FS=y
CONFIG_OVERLAY_FS_REDIRECT_DIR=y
CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y
CONFIG_OVERLAY_FS_INDEX=y
# CONFIG_OVERLAY_FS_NFS_EXPORT is not set
# CONFIG_OVERLAY_FS_XINO_AUTO is not set
# CONFIG_OVERLAY_FS_METACOPY is not set
CONFIG_OVERLAY_FS_DEBUG=y

#
# Caches
#
CONFIG_NETFS_SUPPORT=y
# CONFIG_NETFS_STATS is not set
# CONFIG_NETFS_DEBUG is not set
CONFIG_FSCACHE=y
# CONFIG_FSCACHE_STATS is not set
CONFIG_CACHEFILES=y
# CONFIG_CACHEFILES_DEBUG is not set
# CONFIG_CACHEFILES_ERROR_INJECTION is not set
# CONFIG_CACHEFILES_ONDEMAND is not set
# end of Caches

#
# CD-ROM/DVD Filesystems
#
CONFIG_ISO9660_FS=y
CONFIG_JOLIET=y
CONFIG_ZISOFS=y
CONFIG_UDF_FS=y
# end of CD-ROM/DVD Filesystems

#
# DOS/FAT/EXFAT/NT Filesystems
#
CONFIG_FAT_FS=y
CONFIG_MSDOS_FS=y
CONFIG_VFAT_FS=y
CONFIG_FAT_DEFAULT_CODEPAGE=437
CONFIG_FAT_DEFAULT_IOCHARSET="iso8859-1"
# CONFIG_FAT_DEFAULT_UTF8 is not set
CONFIG_EXFAT_FS=y
CONFIG_EXFAT_DEFAULT_IOCHARSET="utf8"
# CONFIG_NTFS_FS is not set
CONFIG_NTFS3_FS=y
# CONFIG_NTFS3_64BIT_CLUSTER is not set
CONFIG_NTFS3_LZX_XPRESS=y
CONFIG_NTFS3_FS_POSIX_ACL=y
# end of DOS/FAT/EXFAT/NT Filesystems

#
# Pseudo filesystems
#
CONFIG_PROC_FS=y
CONFIG_PROC_KCORE=y
CONFIG_PROC_VMCORE=y
# CONFIG_PROC_VMCORE_DEVICE_DUMP is not set
CONFIG_PROC_SYSCTL=y
CONFIG_PROC_PAGE_MONITOR=y
CONFIG_PROC_CHILDREN=y
CONFIG_PROC_PID_ARCH_STATUS=y
CONFIG_KERNFS=y
CONFIG_SYSFS=y
CONFIG_TMPFS=y
CONFIG_TMPFS_POSIX_ACL=y
CONFIG_TMPFS_XATTR=y
# CONFIG_TMPFS_INODE64 is not set
CONFIG_TMPFS_QUOTA=y
CONFIG_ARCH_SUPPORTS_HUGETLBFS=y
CONFIG_HUGETLBFS=y
# CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP_DEFAULT_ON is not set
CONFIG_HUGETLB_PAGE=y
CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING=y
CONFIG_ARCH_HAS_GIGANTIC_PAGE=y
CONFIG_CONFIGFS_FS=y
# end of Pseudo filesystems

CONFIG_MISC_FILESYSTEMS=y
CONFIG_ORANGEFS_FS=y
CONFIG_ADFS_FS=y
# CONFIG_ADFS_FS_RW is not set
CONFIG_AFFS_FS=y
CONFIG_ECRYPT_FS=y
CONFIG_ECRYPT_FS_MESSAGING=y
CONFIG_HFS_FS=y
CONFIG_HFSPLUS_FS=y
CONFIG_BEFS_FS=y
# CONFIG_BEFS_DEBUG is not set
CONFIG_BFS_FS=y
CONFIG_EFS_FS=y
CONFIG_JFFS2_FS=y
CONFIG_JFFS2_FS_DEBUG=0
CONFIG_JFFS2_FS_WRITEBUFFER=y
# CONFIG_JFFS2_FS_WBUF_VERIFY is not set
CONFIG_JFFS2_SUMMARY=y
CONFIG_JFFS2_FS_XATTR=y
CONFIG_JFFS2_FS_POSIX_ACL=y
CONFIG_JFFS2_FS_SECURITY=y
CONFIG_JFFS2_COMPRESSION_OPTIONS=y
CONFIG_JFFS2_ZLIB=y
CONFIG_JFFS2_LZO=y
CONFIG_JFFS2_RTIME=y
CONFIG_JFFS2_RUBIN=y
# CONFIG_JFFS2_CMODE_NONE is not set
CONFIG_JFFS2_CMODE_PRIORITY=y
# CONFIG_JFFS2_CMODE_SIZE is not set
# CONFIG_JFFS2_CMODE_FAVOURLZO is not set
CONFIG_UBIFS_FS=y
CONFIG_UBIFS_FS_ADVANCED_COMPR=y
CONFIG_UBIFS_FS_LZO=y
CONFIG_UBIFS_FS_ZLIB=y
CONFIG_UBIFS_FS_ZSTD=y
CONFIG_UBIFS_ATIME_SUPPORT=y
CONFIG_UBIFS_FS_XATTR=y
CONFIG_UBIFS_FS_SECURITY=y
# CONFIG_UBIFS_FS_AUTHENTICATION is not set
CONFIG_CRAMFS=y
CONFIG_CRAMFS_BLOCKDEV=y
CONFIG_CRAMFS_MTD=y
CONFIG_SQUASHFS=y
# CONFIG_SQUASHFS_FILE_CACHE is not set
CONFIG_SQUASHFS_FILE_DIRECT=y
CONFIG_SQUASHFS_DECOMP_MULTI=y
# CONFIG_SQUASHFS_CHOICE_DECOMP_BY_MOUNT is not set
# CONFIG_SQUASHFS_COMPILE_DECOMP_SINGLE is not set
CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI=y
# CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI_PERCPU is not set
# CONFIG_SQUASHFS_MOUNT_DECOMP_THREADS is not set
CONFIG_SQUASHFS_XATTR=y
# CONFIG_SQUASHFS_COMP_CACHE_FULL is not set
CONFIG_SQUASHFS_ZLIB=y
CONFIG_SQUASHFS_LZ4=y
CONFIG_SQUASHFS_LZO=y
CONFIG_SQUASHFS_XZ=y
CONFIG_SQUASHFS_ZSTD=y
CONFIG_SQUASHFS_4K_DEVBLK_SIZE=y
# CONFIG_SQUASHFS_EMBEDDED is not set
CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE=3
CONFIG_VXFS_FS=y
CONFIG_MINIX_FS=y
CONFIG_OMFS_FS=y
CONFIG_HPFS_FS=y
CONFIG_QNX4FS_FS=y
CONFIG_QNX6FS_FS=y
# CONFIG_QNX6FS_DEBUG is not set
CONFIG_ROMFS_FS=y
# CONFIG_ROMFS_BACKED_BY_BLOCK is not set
# CONFIG_ROMFS_BACKED_BY_MTD is not set
CONFIG_ROMFS_BACKED_BY_BOTH=y
CONFIG_ROMFS_ON_BLOCK=y
CONFIG_ROMFS_ON_MTD=y
CONFIG_PSTORE=y
CONFIG_PSTORE_DEFAULT_KMSG_BYTES=10240
CONFIG_PSTORE_COMPRESS=y
# CONFIG_PSTORE_CONSOLE is not set
# CONFIG_PSTORE_PMSG is not set
# CONFIG_PSTORE_RAM is not set
# CONFIG_PSTORE_BLK is not set
CONFIG_UFS_FS=y
CONFIG_UFS_FS_WRITE=y
# CONFIG_UFS_DEBUG is not set
CONFIG_EROFS_FS=y
# CONFIG_EROFS_FS_DEBUG is not set
CONFIG_EROFS_FS_XATTR=y
CONFIG_EROFS_FS_POSIX_ACL=y
CONFIG_EROFS_FS_SECURITY=y
# CONFIG_EROFS_FS_BACKED_BY_FILE is not set
CONFIG_EROFS_FS_ZIP=y
# CONFIG_EROFS_FS_ZIP_LZMA is not set
# CONFIG_EROFS_FS_ZIP_DEFLATE is not set
# CONFIG_EROFS_FS_ZIP_ZSTD is not set
# CONFIG_EROFS_FS_ZIP_ACCEL is not set
# CONFIG_EROFS_FS_ONDEMAND is not set
# CONFIG_EROFS_FS_PCPU_KTHREAD is not set
# CONFIG_EROFS_FS_PAGE_CACHE_SHARE is not set
CONFIG_NETWORK_FILESYSTEMS=y
CONFIG_NFS_FS=y
# CONFIG_NFS_V2 is not set
CONFIG_NFS_V3=y
CONFIG_NFS_V3_ACL=y
CONFIG_NFS_V4=y
# CONFIG_NFS_SWAP is not set
CONFIG_NFS_V4_0=y
CONFIG_NFS_V4_2=y
CONFIG_PNFS_FILE_LAYOUT=y
CONFIG_PNFS_BLOCK=y
CONFIG_PNFS_FLEXFILE_LAYOUT=y
CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"
# CONFIG_NFS_V4_1_MIGRATION is not set
CONFIG_NFS_V4_SECURITY_LABEL=y
CONFIG_ROOT_NFS=y
CONFIG_NFS_FSCACHE=y
# CONFIG_NFS_USE_LEGACY_DNS is not set
CONFIG_NFS_USE_KERNEL_DNS=y
# CONFIG_NFS_DISABLE_UDP_SUPPORT is not set
CONFIG_NFS_V4_2_READ_PLUS=y
CONFIG_NFSD=y
# CONFIG_NFSD_V2 is not set
CONFIG_NFSD_V3_ACL=y
CONFIG_NFSD_V4=y
CONFIG_NFSD_PNFS=y
CONFIG_NFSD_BLOCKLAYOUT=y
CONFIG_NFSD_SCSILAYOUT=y
CONFIG_NFSD_FLEXFILELAYOUT=y
CONFIG_NFSD_V4_2_INTER_SSC=y
CONFIG_NFSD_V4_SECURITY_LABEL=y
# CONFIG_NFSD_LEGACY_CLIENT_TRACKING is not set
# CONFIG_NFSD_V4_POSIX_ACLS is not set
CONFIG_GRACE_PERIOD=y
CONFIG_LOCKD=y
CONFIG_LOCKD_V4=y
CONFIG_NFS_ACL_SUPPORT=y
CONFIG_NFS_COMMON=y
# CONFIG_NFS_LOCALIO is not set
CONFIG_NFS_V4_2_SSC_HELPER=y
CONFIG_SUNRPC=y
CONFIG_SUNRPC_GSS=y
CONFIG_SUNRPC_BACKCHANNEL=y
CONFIG_RPCSEC_GSS_KRB5=y
# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1 is not set
# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA is not set
# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 is not set
# CONFIG_SUNRPC_DEBUG is not set
# CONFIG_SUNRPC_XPRT_RDMA is not set
CONFIG_CEPH_FS=y
CONFIG_CEPH_FSCACHE=y
CONFIG_CEPH_FS_POSIX_ACL=y
# CONFIG_CEPH_FS_SECURITY_LABEL is not set
CONFIG_CIFS=y
# CONFIG_CIFS_STATS2 is not set
CONFIG_CIFS_ALLOW_INSECURE_LEGACY=y
CONFIG_CIFS_UPCALL=y
CONFIG_CIFS_XATTR=y
CONFIG_CIFS_POSIX=y
CONFIG_CIFS_DEBUG=y
# CONFIG_CIFS_DEBUG2 is not set
# CONFIG_CIFS_DEBUG_DUMP_KEYS is not set
CONFIG_CIFS_DFS_UPCALL=y
CONFIG_CIFS_SWN_UPCALL=y
CONFIG_CIFS_SMB_DIRECT=y
CONFIG_CIFS_FSCACHE=y
# CONFIG_CIFS_ROOT is not set
# CONFIG_CIFS_COMPRESSION is not set
CONFIG_SMB_SERVER=y
# CONFIG_SMB_SERVER_SMBDIRECT is not set
# CONFIG_SMB_SERVER_CHECK_CAP_NET_ADMIN is not set
# CONFIG_SMB_SERVER_KERBEROS5 is not set
CONFIG_SMBDIRECT=y
CONFIG_SMBFS=y
# CONFIG_CODA_FS is not set
CONFIG_AFS_FS=y
# CONFIG_AFS_DEBUG is not set
CONFIG_AFS_FSCACHE=y
# CONFIG_AFS_DEBUG_CURSOR is not set
CONFIG_9P_FS=y
CONFIG_9P_FSCACHE=y
CONFIG_9P_FS_POSIX_ACL=y
CONFIG_9P_FS_SECURITY=y
CONFIG_NLS=y
CONFIG_NLS_DEFAULT="utf8"
CONFIG_NLS_CODEPAGE_437=y
CONFIG_NLS_CODEPAGE_737=y
CONFIG_NLS_CODEPAGE_775=y
CONFIG_NLS_CODEPAGE_850=y
CONFIG_NLS_CODEPAGE_852=y
CONFIG_NLS_CODEPAGE_855=y
CONFIG_NLS_CODEPAGE_857=y
CONFIG_NLS_CODEPAGE_860=y
CONFIG_NLS_CODEPAGE_861=y
CONFIG_NLS_CODEPAGE_862=y
CONFIG_NLS_CODEPAGE_863=y
CONFIG_NLS_CODEPAGE_864=y
CONFIG_NLS_CODEPAGE_865=y
CONFIG_NLS_CODEPAGE_866=y
CONFIG_NLS_CODEPAGE_869=y
CONFIG_NLS_CODEPAGE_936=y
CONFIG_NLS_CODEPAGE_950=y
CONFIG_NLS_CODEPAGE_932=y
CONFIG_NLS_CODEPAGE_949=y
CONFIG_NLS_CODEPAGE_874=y
CONFIG_NLS_ISO8859_8=y
CONFIG_NLS_CODEPAGE_1250=y
CONFIG_NLS_CODEPAGE_1251=y
CONFIG_NLS_ASCII=y
CONFIG_NLS_ISO8859_1=y
CONFIG_NLS_ISO8859_2=y
CONFIG_NLS_ISO8859_3=y
CONFIG_NLS_ISO8859_4=y
CONFIG_NLS_ISO8859_5=y
CONFIG_NLS_ISO8859_6=y
CONFIG_NLS_ISO8859_7=y
CONFIG_NLS_ISO8859_9=y
CONFIG_NLS_ISO8859_13=y
CONFIG_NLS_ISO8859_14=y
CONFIG_NLS_ISO8859_15=y
CONFIG_NLS_KOI8_R=y
CONFIG_NLS_KOI8_U=y
CONFIG_NLS_MAC_ROMAN=y
CONFIG_NLS_MAC_CELTIC=y
CONFIG_NLS_MAC_CENTEURO=y
CONFIG_NLS_MAC_CROATIAN=y
CONFIG_NLS_MAC_CYRILLIC=y
CONFIG_NLS_MAC_GAELIC=y
CONFIG_NLS_MAC_GREEK=y
CONFIG_NLS_MAC_ICELAND=y
CONFIG_NLS_MAC_INUIT=y
CONFIG_NLS_MAC_ROMANIAN=y
CONFIG_NLS_MAC_TURKISH=y
CONFIG_NLS_UTF8=y
CONFIG_NLS_UCS2_UTILS=y
CONFIG_DLM=y
# CONFIG_DLM_DEBUG is not set
CONFIG_UNICODE=y
CONFIG_IO_WQ=y
# end of File systems

#
# Security options
#
CONFIG_KEYS=y
CONFIG_KEYS_REQUEST_CACHE=y
CONFIG_PERSISTENT_KEYRINGS=y
CONFIG_BIG_KEYS=y
CONFIG_TRUSTED_KEYS=y
# CONFIG_TRUSTED_KEYS_TPM is not set
# CONFIG_TRUSTED_KEYS_TEE is not set

#
# No trust source selected!
#
CONFIG_ENCRYPTED_KEYS=y
# CONFIG_USER_DECRYPTED_DATA is not set
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_KEY_NOTIFICATIONS=y
# CONFIG_SECURITY_DMESG_RESTRICT is not set
# CONFIG_PROC_MEM_ALWAYS_FORCE is not set
CONFIG_PROC_MEM_FORCE_PTRACE=y
# CONFIG_PROC_MEM_NO_FORCE is not set
CONFIG_SECURITY=y
CONFIG_HAS_SECURITY_AUDIT=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_INFINIBAND=y
CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
# CONFIG_INTEL_TXT is not set
# CONFIG_STATIC_USERMODEHELPER is not set
# CONFIG_SECURITY_SELINUX is not set
# CONFIG_SECURITY_SMACK is not set
CONFIG_SECURITY_TOMOYO=y
CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=64
CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=32
CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER=y
CONFIG_SECURITY_TOMOYO_INSECURE_BUILTIN_SETTING=y
CONFIG_SECURITY_APPARMOR=y
CONFIG_SECURITY_APPARMOR_DEBUG=y
CONFIG_SECURITY_APPARMOR_DEBUG_ASSERTS=y
# CONFIG_SECURITY_APPARMOR_DEBUG_MESSAGES is not set
CONFIG_SECURITY_APPARMOR_INTROSPECT_POLICY=y
CONFIG_SECURITY_APPARMOR_HASH=y
CONFIG_SECURITY_APPARMOR_HASH_DEFAULT=y
# CONFIG_SECURITY_APPARMOR_EXPORT_BINARY is not set
# CONFIG_SECURITY_APPARMOR_PARANOID_LOAD is not set
# CONFIG_SECURITY_LOADPIN is not set
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_SAFESETID=y
CONFIG_SECURITY_LOCKDOWN_LSM=y
CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_SECURITY_IPE is not set
CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
CONFIG_INTEGRITY_TRUSTED_KEYRING=y
CONFIG_INTEGRITY_AUDIT=y
CONFIG_IMA=y
CONFIG_IMA_MEASURE_PCR_IDX=10
CONFIG_IMA_LSM_RULES=y
CONFIG_IMA_NG_TEMPLATE=y
# CONFIG_IMA_SIG_TEMPLATE is not set
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
CONFIG_IMA_DEFAULT_HASH_SHA256=y
# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
CONFIG_IMA_DEFAULT_HASH="sha256"
CONFIG_IMA_WRITE_POLICY=y
CONFIG_IMA_READ_POLICY=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_ARCH_POLICY is not set
# CONFIG_IMA_APPRAISE_BUILD_POLICY is not set
# CONFIG_IMA_APPRAISE_BOOTPARAM is not set
CONFIG_IMA_APPRAISE_MODSIG=y
# CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA_LOAD_X509 is not set
CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS=y
CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y
# CONFIG_IMA_DISABLE_HTABLE is not set
CONFIG_EVM=y
CONFIG_EVM_ATTR_FSUUID=y
CONFIG_EVM_ADD_XATTRS=y
# CONFIG_EVM_LOAD_X509 is not set
# CONFIG_DEFAULT_SECURITY_TOMOYO is not set
CONFIG_DEFAULT_SECURITY_APPARMOR=y
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,apparmor,bpf"

#
# Kernel hardening options
#

#
# Memory initialization
#
CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
# CONFIG_INIT_STACK_NONE is not set
# CONFIG_INIT_STACK_ALL_PATTERN is not set
CONFIG_INIT_STACK_ALL_ZERO=y
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
# CONFIG_ZERO_CALL_USED_REGS is not set
# end of Memory initialization

#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
# CONFIG_HARDENED_USERCOPY_DEFAULT_ON is not set
# end of Bounds checking

#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y
CONFIG_BUG_ON_DATA_CORRUPTION=y
# end of Hardening of kernel data structures

CONFIG_RANDSTRUCT_NONE=y
# end of Kernel hardening options
# end of Security options

CONFIG_ASYNC_CORE=y
CONFIG_ASYNC_MEMCPY=y
CONFIG_ASYNC_XOR=y
CONFIG_ASYNC_PQ=y
CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_CRYPTO=y

#
# Crypto core or helper
#
CONFIG_CRYPTO_ALGAPI=y
CONFIG_CRYPTO_ALGAPI2=y
CONFIG_CRYPTO_AEAD=y
CONFIG_CRYPTO_AEAD2=y
CONFIG_CRYPTO_SIG=y
CONFIG_CRYPTO_SIG2=y
CONFIG_CRYPTO_SKCIPHER=y
CONFIG_CRYPTO_SKCIPHER2=y
CONFIG_CRYPTO_HASH=y
CONFIG_CRYPTO_HASH2=y
CONFIG_CRYPTO_RNG=y
CONFIG_CRYPTO_RNG2=y
CONFIG_CRYPTO_AKCIPHER2=y
CONFIG_CRYPTO_AKCIPHER=y
CONFIG_CRYPTO_KPP2=y
CONFIG_CRYPTO_KPP=y
CONFIG_CRYPTO_ACOMP2=y
CONFIG_CRYPTO_ACOMP=y
CONFIG_CRYPTO_MANAGER=y
CONFIG_CRYPTO_MANAGER2=y
CONFIG_CRYPTO_USER=y
# CONFIG_CRYPTO_SELFTESTS is not set
# CONFIG_CRYPTO_NULL is not set
CONFIG_CRYPTO_PCRYPT=y
# CONFIG_CRYPTO_CRYPTD is not set
CONFIG_CRYPTO_AUTHENC=y
CONFIG_CRYPTO_KRB5ENC=y
# CONFIG_CRYPTO_BENCHMARK is not set
CONFIG_CRYPTO_ENGINE=y
# end of Crypto core or helper

#
# Public-key cryptography
#
CONFIG_CRYPTO_RSA=y
CONFIG_CRYPTO_DH=y
# CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
CONFIG_CRYPTO_ECC=y
CONFIG_CRYPTO_ECDH=y
# CONFIG_CRYPTO_ECDSA is not set
CONFIG_CRYPTO_ECRDSA=y
CONFIG_CRYPTO_MLDSA=y
# end of Public-key cryptography

#
# Block ciphers
#
CONFIG_CRYPTO_AES=y
CONFIG_CRYPTO_ANUBIS=y
CONFIG_CRYPTO_ARIA=y
CONFIG_CRYPTO_BLOWFISH=y
CONFIG_CRYPTO_BLOWFISH_COMMON=y
CONFIG_CRYPTO_CAMELLIA=y
CONFIG_CRYPTO_CAST_COMMON=y
CONFIG_CRYPTO_CAST5=y
CONFIG_CRYPTO_CAST6=y
CONFIG_CRYPTO_DES=y
CONFIG_CRYPTO_FCRYPT=y
CONFIG_CRYPTO_KHAZAD=y
CONFIG_CRYPTO_SEED=y
CONFIG_CRYPTO_SERPENT=y
CONFIG_CRYPTO_SM4=y
CONFIG_CRYPTO_SM4_GENERIC=y
CONFIG_CRYPTO_TEA=y
CONFIG_CRYPTO_TWOFISH=y
CONFIG_CRYPTO_TWOFISH_COMMON=y
# end of Block ciphers

#
# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_ADIANTUM=y
CONFIG_CRYPTO_ARC4=y
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_CBC=y
CONFIG_CRYPTO_CTR=y
CONFIG_CRYPTO_CTS=y
CONFIG_CRYPTO_ECB=y
CONFIG_CRYPTO_HCTR2=y
CONFIG_CRYPTO_LRW=y
CONFIG_CRYPTO_PCBC=y
CONFIG_CRYPTO_XCTR=y
CONFIG_CRYPTO_XTS=y
# end of Length-preserving ciphers and modes

#
# AEAD (authenticated encryption with associated data) ciphers
#
CONFIG_CRYPTO_AEGIS128=y
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_CCM=y
CONFIG_CRYPTO_GCM=y
CONFIG_CRYPTO_GENIV=y
CONFIG_CRYPTO_SEQIV=y
CONFIG_CRYPTO_ECHAINIV=y
CONFIG_CRYPTO_ESSIV=y
# end of AEAD (authenticated encryption with associated data) ciphers

#
# Hashes, digests, and MACs
#
# CONFIG_CRYPTO_BLAKE2B is not set
CONFIG_CRYPTO_CMAC=y
CONFIG_CRYPTO_HMAC=y
# CONFIG_CRYPTO_MD4 is not set
# CONFIG_CRYPTO_MD5 is not set
CONFIG_CRYPTO_RMD160=y
CONFIG_CRYPTO_SHA1=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y
# CONFIG_CRYPTO_SM3 is not set
CONFIG_CRYPTO_STREEBOG=y
CONFIG_CRYPTO_WP512=y
CONFIG_CRYPTO_XCBC=y
# CONFIG_CRYPTO_XXHASH is not set
# end of Hashes, digests, and MACs

#
# CRCs (cyclic redundancy checks)
#
# CONFIG_CRYPTO_CRC32C is not set
# CONFIG_CRYPTO_CRC32 is not set
# end of CRCs (cyclic redundancy checks)

#
# Compression
#
CONFIG_CRYPTO_DEFLATE=y
CONFIG_CRYPTO_LZO=y
CONFIG_CRYPTO_842=y
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=y
CONFIG_CRYPTO_ZSTD=y
# end of Compression

#
# Random number generation
#
# CONFIG_CRYPTO_DRBG_MENU is not set
# CONFIG_CRYPTO_JITTERENTROPY is not set
CONFIG_CRYPTO_KDF800108_CTR=y
# end of Random number generation

#
# Userspace interface
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
CONFIG_CRYPTO_USER_API_RNG=y
CONFIG_CRYPTO_USER_API_AEAD=y
CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE=y
# end of Userspace interface

#
# Accelerated Cryptographic Algorithms for CPU (x86)
#
CONFIG_CRYPTO_AES_NI_INTEL=y
CONFIG_CRYPTO_BLOWFISH_X86_64=y
CONFIG_CRYPTO_CAMELLIA_X86_64=y
CONFIG_CRYPTO_CAMELLIA_AESNI_AVX_X86_64=y
CONFIG_CRYPTO_CAMELLIA_AESNI_AVX2_X86_64=y
CONFIG_CRYPTO_CAST5_AVX_X86_64=y
CONFIG_CRYPTO_CAST6_AVX_X86_64=y
CONFIG_CRYPTO_SERPENT_SSE2_X86_64=y
CONFIG_CRYPTO_SERPENT_AVX_X86_64=y
CONFIG_CRYPTO_SERPENT_AVX2_X86_64=y
CONFIG_CRYPTO_SM4_AESNI_AVX_X86_64=y
CONFIG_CRYPTO_SM4_AESNI_AVX2_X86_64=y
CONFIG_CRYPTO_TWOFISH_X86_64=y
CONFIG_CRYPTO_TWOFISH_X86_64_3WAY=y
CONFIG_CRYPTO_TWOFISH_AVX_X86_64=y
CONFIG_CRYPTO_ARIA_AESNI_AVX_X86_64=y
# CONFIG_CRYPTO_ARIA_AESNI_AVX2_X86_64 is not set
# CONFIG_CRYPTO_ARIA_GFNI_AVX512_X86_64 is not set
CONFIG_CRYPTO_AEGIS128_AESNI_SSE2=y
# end of Accelerated Cryptographic Algorithms for CPU (x86)

CONFIG_CRYPTO_HW=y
CONFIG_CRYPTO_DEV_PADLOCK=y
CONFIG_CRYPTO_DEV_PADLOCK_AES=y
CONFIG_CRYPTO_DEV_PADLOCK_SHA=y
# CONFIG_CRYPTO_DEV_ATMEL_ECC is not set
# CONFIG_CRYPTO_DEV_ATMEL_SHA204A is not set
CONFIG_CRYPTO_DEV_CCP=y
CONFIG_CRYPTO_DEV_CCP_DD=y
# CONFIG_CRYPTO_DEV_SP_CCP is not set
# CONFIG_CRYPTO_DEV_SP_PSP is not set
# CONFIG_CRYPTO_DEV_NITROX_CNN55XX is not set
CONFIG_CRYPTO_DEV_QAT=y
CONFIG_CRYPTO_DEV_QAT_DH895xCC=y
CONFIG_CRYPTO_DEV_QAT_C3XXX=y
CONFIG_CRYPTO_DEV_QAT_C62X=y
# CONFIG_CRYPTO_DEV_QAT_4XXX is not set
# CONFIG_CRYPTO_DEV_QAT_420XX is not set
# CONFIG_CRYPTO_DEV_QAT_6XXX is not set
CONFIG_CRYPTO_DEV_QAT_DH895xCCVF=y
CONFIG_CRYPTO_DEV_QAT_C3XXXVF=y
CONFIG_CRYPTO_DEV_QAT_C62XVF=y
# CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION is not set
CONFIG_CRYPTO_DEV_VIRTIO=y
# CONFIG_CRYPTO_DEV_SAFEXCEL is not set
# CONFIG_CRYPTO_DEV_CCREE is not set
# CONFIG_CRYPTO_DEV_AMLOGIC_GXL is not set
CONFIG_ASYMMETRIC_KEY_TYPE=y
CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
CONFIG_X509_CERTIFICATE_PARSER=y
CONFIG_PKCS8_PRIVATE_KEY_PARSER=y
CONFIG_PKCS7_MESSAGE_PARSER=y
# CONFIG_PKCS7_WAIVE_AUTHATTRS_REJECTION_FOR_MLDSA is not set
CONFIG_PKCS7_TEST_KEY=y
CONFIG_SIGNED_PE_FILE_VERIFICATION=y
# CONFIG_FIPS_SIGNATURE_SELFTEST is not set

#
# Certificates for signature checking
#
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44=y
# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set
# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set
CONFIG_SYSTEM_TRUSTED_KEYRING=y
CONFIG_SYSTEM_TRUSTED_KEYS=""
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
CONFIG_SECONDARY_TRUSTED_KEYRING=y
# CONFIG_SECONDARY_TRUSTED_KEYRING_SIGNED_BY_BUILTIN is not set
# CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
CONFIG_OPENSSL_SUPPORTS_ML_DSA=y
# end of Certificates for signature checking

CONFIG_CRYPTO_KRB5=y
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_BINARY_PRINTF=y

#
# Library routines
#
CONFIG_RAID6_PQ=y
# CONFIG_RAID6_PQ_BENCHMARK is not set
CONFIG_LINEAR_RANGES=y
# CONFIG_PACKING is not set
CONFIG_BITREVERSE=y
CONFIG_GENERIC_STRNCPY_FROM_USER=y
CONFIG_GENERIC_STRNLEN_USER=y
CONFIG_GENERIC_NET_UTILS=y
# CONFIG_CORDIC is not set
# CONFIG_PRIME_NUMBERS is not set
CONFIG_RATIONAL=y
CONFIG_GENERIC_IOMAP=y
CONFIG_ARCH_USE_CMPXCHG_LOCKREF=y
CONFIG_ARCH_HAS_FAST_MULTIPLIER=y
CONFIG_ARCH_USE_SYM_ANNOTATIONS=y
CONFIG_CRC8=y
CONFIG_CRC16=y
CONFIG_CRC_CCITT=y
CONFIG_CRC_ITU_T=y
CONFIG_CRC_T10DIF=y
CONFIG_CRC_T10DIF_ARCH=y
CONFIG_CRC32=y
CONFIG_CRC32_ARCH=y
CONFIG_CRC64=y
CONFIG_CRC64_ARCH=y
CONFIG_CRC_OPTIMIZATIONS=y
CONFIG_CRYPTO_HASH_INFO=y
CONFIG_CRYPTO_LIB_UTILS=y
CONFIG_CRYPTO_LIB_AES=y
CONFIG_CRYPTO_LIB_AES_ARCH=y
CONFIG_CRYPTO_LIB_AES_CBC_MACS=y
CONFIG_CRYPTO_LIB_ARC4=y
CONFIG_CRYPTO_LIB_GF128MUL=y
CONFIG_CRYPTO_LIB_BLAKE2B=y
CONFIG_CRYPTO_LIB_BLAKE2S_ARCH=y
CONFIG_CRYPTO_LIB_CHACHA=y
CONFIG_CRYPTO_LIB_CHACHA_ARCH=y
CONFIG_CRYPTO_LIB_CURVE25519=y
CONFIG_CRYPTO_LIB_CURVE25519_ARCH=y
CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=y
CONFIG_CRYPTO_LIB_DES=y
CONFIG_CRYPTO_LIB_GF128HASH=y
CONFIG_CRYPTO_LIB_GF128HASH_ARCH=y
CONFIG_CRYPTO_LIB_MD5=y
CONFIG_CRYPTO_LIB_MLDSA=y
CONFIG_CRYPTO_LIB_NH=y
CONFIG_CRYPTO_LIB_NH_ARCH=y
CONFIG_CRYPTO_LIB_POLY1305=y
CONFIG_CRYPTO_LIB_POLY1305_ARCH=y
CONFIG_CRYPTO_LIB_POLY1305_GENERIC=y
CONFIG_CRYPTO_LIB_POLY1305_RSIZE=11
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
CONFIG_CRYPTO_LIB_SHA1=y
CONFIG_CRYPTO_LIB_SHA1_ARCH=y
CONFIG_CRYPTO_LIB_SHA256=y
CONFIG_CRYPTO_LIB_SHA256_ARCH=y
CONFIG_CRYPTO_LIB_SHA512=y
CONFIG_CRYPTO_LIB_SHA512_ARCH=y
CONFIG_CRYPTO_LIB_SHA3=y
CONFIG_XOR_BLOCKS=y
CONFIG_XOR_BLOCKS_ARCH=y
CONFIG_XXHASH=y
# CONFIG_RANDOM32_SELFTEST is not set
CONFIG_842_COMPRESS=y
CONFIG_842_DECOMPRESS=y
CONFIG_ZLIB_INFLATE=y
CONFIG_ZLIB_DEFLATE=y
CONFIG_LZO_COMPRESS=y
CONFIG_LZO_DECOMPRESS=y
CONFIG_LZ4_COMPRESS=y
CONFIG_LZ4HC_COMPRESS=y
CONFIG_LZ4_DECOMPRESS=y
CONFIG_ZSTD_COMMON=y
CONFIG_ZSTD_COMPRESS=y
CONFIG_ZSTD_DECOMPRESS=y
CONFIG_XZ_DEC=y
CONFIG_XZ_DEC_X86=y
CONFIG_XZ_DEC_POWERPC=y
CONFIG_XZ_DEC_ARM=y
CONFIG_XZ_DEC_ARMTHUMB=y
CONFIG_XZ_DEC_ARM64=y
CONFIG_XZ_DEC_SPARC=y
CONFIG_XZ_DEC_RISCV=y
# CONFIG_XZ_DEC_MICROLZMA is not set
CONFIG_XZ_DEC_BCJ=y
# CONFIG_XZ_DEC_TEST is not set
CONFIG_DECOMPRESS_GZIP=y
CONFIG_DECOMPRESS_BZIP2=y
CONFIG_DECOMPRESS_LZMA=y
CONFIG_DECOMPRESS_XZ=y
CONFIG_DECOMPRESS_LZO=y
CONFIG_DECOMPRESS_LZ4=y
CONFIG_DECOMPRESS_ZSTD=y
CONFIG_GENERIC_ALLOCATOR=y
CONFIG_REED_SOLOMON=y
CONFIG_REED_SOLOMON_DEC8=y
CONFIG_TEXTSEARCH=y
CONFIG_TEXTSEARCH_KMP=y
CONFIG_TEXTSEARCH_BM=y
CONFIG_TEXTSEARCH_FSM=y
CONFIG_INTERVAL_TREE=y
CONFIG_INTERVAL_TREE_SPAN_ITER=y
CONFIG_XARRAY_MULTI=y
CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_CLOSURES=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
CONFIG_DMA_OPS_HELPERS=y
CONFIG_NEED_SG_DMA_FLAGS=y
CONFIG_NEED_SG_DMA_LENGTH=y
CONFIG_NEED_DMA_MAP_STATE=y
CONFIG_ARCH_DMA_ADDR_T_64BIT=y
CONFIG_DMA_DECLARE_COHERENT=y
CONFIG_SWIOTLB=y
# CONFIG_SWIOTLB_DYNAMIC is not set
CONFIG_DMA_NEED_SYNC=y
# CONFIG_DMA_RESTRICTED_POOL is not set
CONFIG_DMA_CMA=y
# CONFIG_DMA_NUMA_CMA is not set

#
# Default contiguous memory area size:
#
CONFIG_CMA_SIZE_MBYTES=0
CONFIG_CMA_SIZE_PERCENTAGE=0
# CONFIG_CMA_SIZE_SEL_MBYTES is not set
# CONFIG_CMA_SIZE_SEL_PERCENTAGE is not set
# CONFIG_CMA_SIZE_SEL_MIN is not set
CONFIG_CMA_SIZE_SEL_MAX=y
CONFIG_CMA_ALIGNMENT=8
# CONFIG_DMA_API_DEBUG is not set
# CONFIG_DMA_MAP_BENCHMARK is not set
CONFIG_SGL_ALLOC=y
CONFIG_CHECK_SIGNATURE=y
# CONFIG_CPUMASK_OFFSTACK is not set
CONFIG_CPU_RMAP=y
CONFIG_DQL=y
CONFIG_GLOB=y
CONFIG_NLATTR=y
CONFIG_CLZ_TAB=y
CONFIG_IRQ_POLL=y
CONFIG_MPILIB=y
CONFIG_SIGNATURE=y
CONFIG_DIMLIB=y
CONFIG_LIBFDT=y
CONFIG_OID_REGISTRY=y
CONFIG_HAVE_GENERIC_VDSO=y
CONFIG_GENERIC_GETTIMEOFDAY=y
CONFIG_GENERIC_VDSO_OVERFLOW_PROTECT=y
CONFIG_VDSO_GETRANDOM=y
CONFIG_FONT_SUPPORT=y
# CONFIG_FONTS is not set
CONFIG_FONT_8x8=y
CONFIG_FONT_8x16=y
CONFIG_SG_POOL=y
CONFIG_ARCH_HAS_PMEM_API=y
CONFIG_MEMREGION=y
CONFIG_ARCH_HAS_CPU_CACHE_INVALIDATE_MEMREGION=y
CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y
CONFIG_ARCH_HAS_COPY_MC=y
CONFIG_ARCH_STACKWALK=y
CONFIG_STACKDEPOT=y
CONFIG_STACKDEPOT_ALWAYS_INIT=y
CONFIG_STACKDEPOT_MAX_FRAMES=64
CONFIG_REF_TRACKER=y
CONFIG_SBITMAP=y
# CONFIG_LWQ_TEST is not set
# end of Library routines

CONFIG_FIRMWARE_TABLE=y
CONFIG_UNION_FIND=y

#
# Kernel hacking
#

#
# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_PRINTK_CALLER=y
# CONFIG_STACKTRACE_BUILD_ID is not set
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=7
CONFIG_CONSOLE_LOGLEVEL_QUIET=4
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
# CONFIG_BOOT_PRINTK_DELAY is not set
CONFIG_DYNAMIC_DEBUG=y
CONFIG_DYNAMIC_DEBUG_CORE=y
CONFIG_SYMBOLIC_ERRNAME=y
CONFIG_DEBUG_BUGVERBOSE=y
CONFIG_DEBUG_BUGVERBOSE_DETAILED=y
# end of printk and dmesg options

CONFIG_DEBUG_KERNEL=y
CONFIG_DEBUG_MISC=y

#
# Compile-time checks and compiler options
#
CONFIG_DEBUG_INFO=y
CONFIG_AS_HAS_NON_CONST_ULEB128=y
# CONFIG_DEBUG_INFO_NONE is not set
# CONFIG_DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT is not set
CONFIG_DEBUG_INFO_DWARF4=y
# CONFIG_DEBUG_INFO_DWARF5 is not set
# CONFIG_DEBUG_INFO_REDUCED is not set
CONFIG_DEBUG_INFO_COMPRESSED_NONE=y
# CONFIG_DEBUG_INFO_COMPRESSED_ZLIB is not set
# CONFIG_DEBUG_INFO_COMPRESSED_ZSTD is not set
# CONFIG_DEBUG_INFO_SPLIT is not set
# CONFIG_DEBUG_INFO_BTF is not set
CONFIG_PAHOLE_HAS_LANG_EXCLUDE=y
# CONFIG_GDB_SCRIPTS is not set
CONFIG_FRAME_WARN=2048
# CONFIG_STRIP_ASM_SYMS is not set
# CONFIG_READABLE_ASM is not set
# CONFIG_HEADERS_INSTALL is not set
# CONFIG_DEBUG_SECTION_MISMATCH is not set
CONFIG_SECTION_MISMATCH_WARN_ONLY=y
# CONFIG_DEBUG_FORCE_FUNCTION_ALIGN_64B is not set
CONFIG_OBJTOOL=y
# CONFIG_OBJTOOL_WERROR is not set
CONFIG_NOINSTR_VALIDATION=y
# CONFIG_VMLINUX_MAP is not set
# CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set
# end of Compile-time checks and compiler options

#
# Generic Kernel Debugging Instruments
#
# CONFIG_MAGIC_SYSRQ is not set
CONFIG_DEBUG_FS=y
CONFIG_DEBUG_FS_ALLOW_ALL=y
# CONFIG_DEBUG_FS_ALLOW_NONE is not set
CONFIG_HAVE_ARCH_KGDB=y
# CONFIG_KGDB is not set
CONFIG_ARCH_HAS_UBSAN=y
CONFIG_UBSAN=y
# CONFIG_UBSAN_TRAP is not set
CONFIG_CC_HAS_UBSAN_BOUNDS_STRICT=y
CONFIG_UBSAN_BOUNDS=y
CONFIG_UBSAN_BOUNDS_STRICT=y
CONFIG_UBSAN_SHIFT=y
# CONFIG_UBSAN_DIV_ZERO is not set
# CONFIG_UBSAN_BOOL is not set
# CONFIG_UBSAN_ENUM is not set
# CONFIG_UBSAN_ALIGNMENT is not set
# CONFIG_TEST_UBSAN is not set
CONFIG_HAVE_ARCH_KCSAN=y
CONFIG_HAVE_KCSAN_COMPILER=y
# end of Generic Kernel Debugging Instruments

#
# Networking Debugging
#
CONFIG_NET_DEV_REFCNT_TRACKER=y
CONFIG_NET_NS_REFCNT_TRACKER=y
CONFIG_DEBUG_NET=y
# CONFIG_DEBUG_NET_SMALL_RTNL is not set
# end of Networking Debugging

#
# Memory Debugging
#
CONFIG_PAGE_EXTENSION=y
# CONFIG_DEBUG_PAGEALLOC is not set
CONFIG_SLUB_DEBUG=y
# CONFIG_SLUB_DEBUG_ON is not set
CONFIG_SLUB_RCU_DEBUG=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_TABLE_CHECK=y
CONFIG_PAGE_TABLE_CHECK_ENFORCED=y
CONFIG_PAGE_POISONING=y
# CONFIG_DEBUG_PAGE_REF is not set
# CONFIG_DEBUG_RODATA_TEST is not set
CONFIG_ARCH_HAS_DEBUG_WX=y
CONFIG_DEBUG_WX=y
CONFIG_ARCH_HAS_PTDUMP=y
CONFIG_PTDUMP=y
CONFIG_PTDUMP_DEBUGFS=y
CONFIG_HAVE_DEBUG_KMEMLEAK=y
# CONFIG_DEBUG_KMEMLEAK is not set
# CONFIG_PER_VMA_LOCK_STATS is not set
CONFIG_DEBUG_OBJECTS=y
# CONFIG_DEBUG_OBJECTS_SELFTEST is not set
CONFIG_DEBUG_OBJECTS_FREE=y
CONFIG_DEBUG_OBJECTS_TIMERS=y
CONFIG_DEBUG_OBJECTS_WORK=y
CONFIG_DEBUG_OBJECTS_RCU_HEAD=y
CONFIG_DEBUG_OBJECTS_PERCPU_COUNTER=y
CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
# CONFIG_SHRINKER_DEBUG is not set
CONFIG_DEBUG_STACK_USAGE=y
CONFIG_SCHED_STACK_END_CHECK=y
CONFIG_ARCH_HAS_DEBUG_VM_PGTABLE=y
CONFIG_DEBUG_VFS=y
CONFIG_DEBUG_VM_IRQSOFF=y
CONFIG_DEBUG_VM=y
CONFIG_DEBUG_VM_MAPLE_TREE=y
CONFIG_DEBUG_VM_RB=y
CONFIG_DEBUG_VM_PGFLAGS=y
CONFIG_DEBUG_VM_PGTABLE=y
CONFIG_ARCH_HAS_DEBUG_VIRTUAL=y
CONFIG_DEBUG_VIRTUAL=y
CONFIG_DEBUG_MEMORY_INIT=y
CONFIG_DEBUG_PER_CPU_MAPS=y
CONFIG_DEBUG_KMAP_LOCAL=y
CONFIG_ARCH_SUPPORTS_KMAP_LOCAL_FORCE_MAP=y
CONFIG_DEBUG_KMAP_LOCAL_FORCE_MAP=y
# CONFIG_MEM_ALLOC_PROFILING is not set
CONFIG_HAVE_ARCH_KASAN=y
CONFIG_HAVE_ARCH_KASAN_VMALLOC=y
CONFIG_CC_HAS_KASAN_GENERIC=y
CONFIG_CC_HAS_KASAN_SW_TAGS=y
CONFIG_CC_HAS_WORKING_NOSANITIZE_ADDRESS=y
CONFIG_KASAN=y
CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX=y
CONFIG_KASAN_GENERIC=y
# CONFIG_KASAN_OUTLINE is not set
CONFIG_KASAN_INLINE=y
CONFIG_KASAN_STACK=y
CONFIG_KASAN_VMALLOC=y
# CONFIG_KASAN_EXTRA_INFO is not set
CONFIG_HAVE_ARCH_KFENCE=y
CONFIG_KFENCE=y
CONFIG_KFENCE_SAMPLE_INTERVAL=100
CONFIG_KFENCE_NUM_OBJECTS=255
# CONFIG_KFENCE_DEFERRABLE is not set
CONFIG_KFENCE_STATIC_KEYS=y
CONFIG_KFENCE_STRESS_TEST_FAULTS=0
CONFIG_HAVE_ARCH_KMSAN=y
# end of Memory Debugging

# CONFIG_DEBUG_SHIRQ is not set

#
# Debug Oops, Lockups and Hangs
#
CONFIG_PANIC_ON_OOPS=y
CONFIG_PANIC_TIMEOUT=86400
CONFIG_LOCKUP_DETECTOR=y
CONFIG_SOFTLOCKUP_DETECTOR=y
# CONFIG_SOFTLOCKUP_DETECTOR_INTR_STORM is not set
CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC=1
CONFIG_HAVE_HARDLOCKUP_DETECTOR_BUDDY=y
CONFIG_HARDLOCKUP_DETECTOR=y
# CONFIG_HARDLOCKUP_DETECTOR_PREFER_BUDDY is not set
CONFIG_HARDLOCKUP_DETECTOR_PERF=y
# CONFIG_HARDLOCKUP_DETECTOR_BUDDY is not set
# CONFIG_HARDLOCKUP_DETECTOR_ARCH is not set
CONFIG_HARDLOCKUP_DETECTOR_COUNTS_HRTIMER=y
CONFIG_HARDLOCKUP_CHECK_TIMESTAMP=y
CONFIG_BOOTPARAM_HARDLOCKUP_PANIC=y
CONFIG_DETECT_HUNG_TASK=y
CONFIG_DEFAULT_HUNG_TASK_TIMEOUT=140
CONFIG_BOOTPARAM_HUNG_TASK_PANIC=1
# CONFIG_DETECT_HUNG_TASK_BLOCKER is not set
CONFIG_WQ_WATCHDOG=y
CONFIG_BOOTPARAM_WQ_STALL_PANIC=0
# CONFIG_WQ_CPU_INTENSIVE_REPORT is not set
# CONFIG_TEST_LOCKUP is not set
# end of Debug Oops, Lockups and Hangs

#
# Scheduler Debugging
#
CONFIG_SCHED_INFO=y
CONFIG_SCHEDSTATS=y
# end of Scheduler Debugging

CONFIG_DEBUG_PREEMPT=y
# CONFIG_DEBUG_ATOMIC is not set

#
# Lock Debugging (spinlocks, mutexes, etc...)
#
CONFIG_LOCK_DEBUGGING_SUPPORT=y
CONFIG_PROVE_LOCKING=y
CONFIG_PROVE_RAW_LOCK_NESTING=y
# CONFIG_LOCK_STAT is not set
CONFIG_DEBUG_RT_MUTEXES=y
CONFIG_DEBUG_SPINLOCK=y
CONFIG_DEBUG_MUTEXES=y
CONFIG_DEBUG_WW_MUTEX_SLOWPATH=y
CONFIG_DEBUG_RWSEMS=y
CONFIG_DEBUG_LOCK_ALLOC=y
CONFIG_LOCKDEP=y
CONFIG_LOCKDEP_BITS=20
CONFIG_LOCKDEP_CHAINS_BITS=20
CONFIG_LOCKDEP_STACK_TRACE_BITS=20
CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14
CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12
# CONFIG_DEBUG_LOCKDEP is not set
CONFIG_DEBUG_ATOMIC_SLEEP=y
# CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set
# CONFIG_LOCK_TORTURE_TEST is not set
# CONFIG_WW_MUTEX_SELFTEST is not set
# CONFIG_SCF_TORTURE_TEST is not set
CONFIG_CSD_LOCK_WAIT_DEBUG=y
# CONFIG_CSD_LOCK_WAIT_DEBUG_DEFAULT is not set
# end of Lock Debugging (spinlocks, mutexes, etc...)

CONFIG_TRACE_IRQFLAGS=y
CONFIG_TRACE_IRQFLAGS_NMI=y
CONFIG_NMI_CHECK_CPU=y
CONFIG_DEBUG_IRQFLAGS=y
CONFIG_STACKTRACE=y
# CONFIG_DEBUG_KOBJECT is not set
# CONFIG_DEBUG_KOBJECT_RELEASE is not set

#
# Debug kernel data structures
#
CONFIG_DEBUG_LIST=y
CONFIG_DEBUG_PLIST=y
CONFIG_DEBUG_SG=y
CONFIG_DEBUG_NOTIFIERS=y
# CONFIG_DEBUG_CLOSURES is not set
CONFIG_DEBUG_MAPLE_TREE=y
# end of Debug kernel data structures

#
# RCU Debugging
#
CONFIG_PROVE_RCU=y
# CONFIG_RCU_SCALE_TEST is not set
# CONFIG_RCU_TORTURE_TEST is not set
# CONFIG_RCU_REF_SCALE_TEST is not set
CONFIG_RCU_CPU_STALL_TIMEOUT=100
CONFIG_RCU_EXP_CPU_STALL_TIMEOUT=0
# CONFIG_RCU_CPU_STALL_CPUTIME is not set
# CONFIG_RCU_TRACE is not set
CONFIG_RCU_EQS_DEBUG=y
# end of RCU Debugging

# CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
# CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
# CONFIG_LATENCYTOP is not set
CONFIG_USER_STACKTRACE_SUPPORT=y
CONFIG_NOP_TRACER=y
CONFIG_HAVE_RETHOOK=y
CONFIG_HAVE_FUNCTION_TRACER=y
CONFIG_HAVE_DYNAMIC_FTRACE=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_REGS=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_DIRECT_CALLS=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_ARGS=y
CONFIG_HAVE_FTRACE_REGS_HAVING_PT_REGS=y
CONFIG_HAVE_DYNAMIC_FTRACE_NO_PATCHABLE=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_JMP=y
CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
CONFIG_HAVE_FENTRY=y
CONFIG_HAVE_OBJTOOL_MCOUNT=y
CONFIG_HAVE_OBJTOOL_NOP_MCOUNT=y
CONFIG_HAVE_C_RECORDMCOUNT=y
CONFIG_HAVE_BUILDTIME_MCOUNT_SORT=y
CONFIG_TRACE_CLOCK=y
CONFIG_RING_BUFFER=y
CONFIG_EVENT_TRACING=y
CONFIG_CONTEXT_SWITCH_TRACER=y
CONFIG_PREEMPTIRQ_TRACEPOINTS=y
CONFIG_TRACING=y
CONFIG_GENERIC_TRACER=y
CONFIG_TRACING_SUPPORT=y
CONFIG_FTRACE=y
CONFIG_TRACEFS_AUTOMOUNT_DEPRECATED=y
# CONFIG_BOOTTIME_TRACING is not set
# CONFIG_FUNCTION_TRACER is not set
# CONFIG_STACK_TRACER is not set
# CONFIG_IRQSOFF_TRACER is not set
# CONFIG_PREEMPT_TRACER is not set
# CONFIG_SCHED_TRACER is not set
# CONFIG_HWLAT_TRACER is not set
# CONFIG_OSNOISE_TRACER is not set
# CONFIG_TIMERLAT_TRACER is not set
# CONFIG_MMIOTRACE is not set
# CONFIG_FTRACE_SYSCALLS is not set
# CONFIG_TRACER_SNAPSHOT is not set
CONFIG_BRANCH_PROFILE_NONE=y
# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
CONFIG_BLK_DEV_IO_TRACE=y
CONFIG_UPROBE_EVENTS=y
CONFIG_EPROBE_EVENTS=y
CONFIG_BPF_EVENTS=y
CONFIG_DYNAMIC_EVENTS=y
CONFIG_PROBE_EVENTS=y
# CONFIG_SYNTH_EVENTS is not set
# CONFIG_USER_EVENTS is not set
# CONFIG_HIST_TRIGGERS is not set
CONFIG_TRACE_EVENT_INJECT=y
# CONFIG_TRACEPOINT_BENCHMARK is not set
# CONFIG_RING_BUFFER_BENCHMARK is not set
# CONFIG_TRACE_EVAL_MAP_FILE is not set
# CONFIG_FTRACE_STARTUP_TEST is not set
# CONFIG_RING_BUFFER_STARTUP_TEST is not set
CONFIG_RING_BUFFER_VALIDATE_TIME_DELTAS=y
# CONFIG_PREEMPTIRQ_DELAY_TEST is not set
# CONFIG_RV is not set
# CONFIG_TRACE_REMOTE_TEST is not set
CONFIG_PROVIDE_OHCI1394_DMA_INIT=y
# CONFIG_SAMPLES is not set
CONFIG_HAVE_SAMPLE_FTRACE_DIRECT=y
CONFIG_HAVE_SAMPLE_FTRACE_DIRECT_MULTI=y
CONFIG_ARCH_HAS_DEVMEM_IS_ALLOWED=y
# CONFIG_STRICT_DEVMEM is not set

#
# x86 Debugging
#
CONFIG_EARLY_PRINTK_USB=y
CONFIG_X86_VERBOSE_BOOTUP=y
CONFIG_EARLY_PRINTK=y
CONFIG_EARLY_PRINTK_DBGP=y
# CONFIG_EARLY_PRINTK_USB_XDBC is not set
# CONFIG_DEBUG_TLBFLUSH is not set
CONFIG_HAVE_MMIOTRACE_SUPPORT=y
# CONFIG_X86_DECODER_SELFTEST is not set
CONFIG_IO_DELAY_0X80=y
# CONFIG_IO_DELAY_0XED is not set
# CONFIG_IO_DELAY_UDELAY is not set
# CONFIG_IO_DELAY_NONE is not set
CONFIG_DEBUG_BOOT_PARAMS=y
# CONFIG_CPA_DEBUG is not set
CONFIG_DEBUG_ENTRY=y
# CONFIG_DEBUG_NMI_SELFTEST is not set
CONFIG_X86_DEBUG_FPU=y
# CONFIG_PUNIT_ATOM_DEBUG is not set
CONFIG_UNWINDER_ORC=y
# CONFIG_UNWINDER_FRAME_POINTER is not set
# end of x86 Debugging

#
# Kernel Testing and Coverage
#
# CONFIG_KUNIT is not set
# CONFIG_NOTIFIER_ERROR_INJECTION is not set
CONFIG_FAULT_INJECTION=y
CONFIG_FAILSLAB=y
CONFIG_FAIL_PAGE_ALLOC=y
CONFIG_FAULT_INJECTION_USERCOPY=y
CONFIG_FAIL_MAKE_REQUEST=y
CONFIG_FAIL_IO_TIMEOUT=y
CONFIG_FAIL_FUTEX=y
CONFIG_FAULT_INJECTION_DEBUG_FS=y
# CONFIG_FAIL_MMC_REQUEST is not set
# CONFIG_FAIL_SKB_REALLOC is not set
CONFIG_FAULT_INJECTION_CONFIGFS=y
# CONFIG_FAULT_INJECTION_STACKTRACE_FILTER is not set
CONFIG_ARCH_HAS_KCOV=y
CONFIG_KCOV=y
CONFIG_KCOV_ENABLE_COMPARISONS=y
CONFIG_KCOV_INSTRUMENT_ALL=y
CONFIG_KCOV_IRQ_AREA_SIZE=0x40000
# CONFIG_KCOV_SELFTEST is not set
CONFIG_RUNTIME_TESTING_MENU=y
# CONFIG_TEST_DHRY is not set
# CONFIG_LKDTM is not set
# CONFIG_TEST_DIV64 is not set
# CONFIG_TEST_MULDIV64 is not set
# CONFIG_BACKTRACE_SELF_TEST is not set
# CONFIG_TEST_REF_TRACKER is not set
# CONFIG_RBTREE_TEST is not set
# CONFIG_REED_SOLOMON_TEST is not set
# CONFIG_INTERVAL_TREE_TEST is not set
# CONFIG_PERCPU_TEST is not set
# CONFIG_ATOMIC64_SELFTEST is not set
# CONFIG_ASYNC_RAID6_TEST is not set
# CONFIG_TEST_HEXDUMP is not set
# CONFIG_TEST_KSTRTOX is not set
# CONFIG_TEST_BITMAP is not set
# CONFIG_TEST_XARRAY is not set
# CONFIG_TEST_MAPLE_TREE is not set
# CONFIG_TEST_RHASHTABLE is not set
# CONFIG_TEST_IDA is not set
# CONFIG_TEST_LKM is not set
# CONFIG_TEST_BITOPS is not set
# CONFIG_TEST_VMALLOC is not set
# CONFIG_TEST_WORKQUEUE is not set
# CONFIG_TEST_BPF is not set
# CONFIG_FIND_BIT_BENCHMARK is not set
# CONFIG_TEST_FIRMWARE is not set
# CONFIG_TEST_SYSCTL is not set
# CONFIG_CONTEXT_ANALYSIS_TEST is not set
# CONFIG_TEST_UDELAY is not set
# CONFIG_TEST_STATIC_KEYS is not set
# CONFIG_TEST_DYNAMIC_DEBUG is not set
# CONFIG_TEST_KMOD is not set
# CONFIG_TEST_KALLSYMS is not set
# CONFIG_TEST_DEBUG_VIRTUAL is not set
# CONFIG_TEST_MEMCAT_P is not set
# CONFIG_TEST_MEMINIT is not set
# CONFIG_TEST_HMM is not set
# CONFIG_TEST_FREE_PAGES is not set
# CONFIG_TEST_CLOCKSOURCE_WATCHDOG is not set
# CONFIG_TEST_OBJPOOL is not set
CONFIG_ARCH_USE_MEMTEST=y
# CONFIG_MEMTEST is not set
# end of Kernel Testing and Coverage

#
# Rust hacking
#
# end of Rust hacking
# end of Kernel hacking

CONFIG_IO_URING_ZCRX=y
CONFIG_IO_URING_BPF=y
KernelRepo git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
ReproCID 0
ReproOpts
ReproSyzID 0
SyzkallerCommit 3c0d21318d6dfab26815664c8ad20eaac007b3f3
TargetArch amd64
TargetOS linux

Outputs:
DenialOfService
Exploitable
FilesystemTrigger
NetworkTrigger
PeripheralTrigger
RemoteTrigger
Unprivileged
UserNamespace
VMGuestTrigger
VMHostTrigger
Explanation
Based on the analysis of the bug report and the kernel source code, here is the
assessment of the security impact:

**Bug Mechanism:**
The bug is a use-after-free read in `ptdump_pte_entry` triggered by reading the
`/sys/kernel/debug/page_tables/kernel` file.
The page table page was originally allocated by `__pte_alloc_kernel` (e.g.,
during a `vmalloc` call like `kcov_ioctl` in the report). Later, the page was
freed asynchronously by `kernel_pgtable_work_func`. This typically happens when
`cpa_collapse_large_pages` (Change Page Attribute) collapses a PTE page into a
large PMD page and queues the old PTE page for freeing.
Because `ptdump_walk_pgd` walks the kernel page tables locklessly
(`walk_kernel_page_table_range_lockless`), it can race with the asynchronous
freeing of the page table page. If it reads the PMD before it is collapsed, and
then accesses the PTE page after it has been freed, it results in a
use-after-free read.

**Security Impact Assessment:**
1. **Access Restriction (Not Accessible to Unprivileged Users/Namespaces):** The
bug is triggered exclusively via the `ptdump` debugfs interface. Debugfs is
typically mounted with `0700` permissions (root only), and the specific files in
`/sys/kernel/debug/page_tables/` are created with `0400` permissions (read-only
for root). Debugfs cannot be mounted inside unprivileged user namespaces. Thus,
an attacker must already have full root privileges to trigger this code path.
2. **Not Exploitable:** The bug is strictly a read-only use-after-free. The
`ptdump` code only reads the freed page to parse PTEs and print their status to
the `seq_file`. It does not write to the freed memory, nor does it use the read
data as pointers for further memory accesses or control flow transfers. Since
the attacker must already be root (who can read arbitrary kernel memory anyway),
this provides no avenue for privilege escalation.
3. **No Denial of Service:** In a production kernel without debugging tools like
KASAN enabled, reading from the freed page will not cause a crash. The freed
page is returned to the page allocator but remains mapped in the kernel's direct
mapping (`PAGE_OFFSET`). Accessing it will simply read whatever garbage data
currently resides there, resulting in nonsensical output in the debugfs file,
but it will not trigger a page fault or kernel panic.

**Conclusion:**
This is a benign race condition in a root-only debugging tool (`ptdump`). It
poses no security risk, cannot be triggered by unprivileged users, cannot be
exploited for privilege escalation, and does not cause a denial of service in
production builds.

Crash report:
==================================================================
BUG: KASAN: use-after-free in ptep_get include/linux/pgtable.h:461 [inline]
BUG: KASAN: use-after-free in ptdump_pte_entry+0xec/0x100 mm/ptdump.c:124
Read of size 8 at addr ffff88806640f530 by task syz.1.2229/17788

CPU: 0 UID: 0 PID: 17788 Comm: syz.1.2229 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1d0 mm/kasan/report.c:595
 ptep_get include/linux/pgtable.h:461 [inline]
 ptdump_pte_entry+0xec/0x100 mm/ptdump.c:124
 walk_pte_range_inner+0x258/0x370 mm/pagewalk.c:49
 walk_pte_range mm/pagewalk.c:80 [inline]
 walk_pmd_range mm/pagewalk.c:173 [inline]
 walk_pud_range mm/pagewalk.c:239 [inline]
 walk_p4d_range mm/pagewalk.c:280 [inline]
 walk_pgd_range+0xee1/0x1dd0 mm/pagewalk.c:321
 walk_kernel_page_table_range_lockless mm/pagewalk.c:664 [inline]
 walk_kernel_page_table_range mm/pagewalk.c:638 [inline]
 walk_page_range_debug+0x2fd/0x370 mm/pagewalk.c:696
 ptdump_walk_pgd+0x129/0x330 mm/ptdump.c:182
 ptdump_walk_pgd_level_core+0x26c/0x300 arch/x86/mm/dump_pagetables.c:458
 ptdump_show+0x1e/0x30 arch/x86/mm/debug_pagetables.c:10
 seq_read_iter+0x32f/0x1270 fs/seq_file.c:231
 seq_read+0x33b/0x4c0 fs/seq_file.c:163
 full_proxy_read+0x135/0x1a0 fs/debugfs/file.c:378
 vfs_read+0x1e4/0xb30 fs/read_write.c:572
 ksys_read+0x12a/0x250 fs/read_write.c:717
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9f8859ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9f89458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f9f88815fa0 RCX: 00007f9f8859ce59
RDX: 000000000000001c RSI: 0000200000004c40 RDI: 0000000000000003
RBP: 00007f9f88632d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9f88816038 R14: 00007f9f88815fa0 R15: 00007fff37ecdda8
 </TASK>

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6640f
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000000000 ffffea00019900c8 ffffea00019902c8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as freed
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5628, tgid 5628 (syz-executor), ts 76048833593, free_ts 678067566484
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1853
 prep_new_page mm/page_alloc.c:1861 [inline]
 get_page_from_freelist+0x11a6/0x3410 mm/page_alloc.c:3941
 __alloc_frozen_pages_noprof+0x27c/0x2bc0 mm/page_alloc.c:5221
 alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
 alloc_pages_noprof+0x1a/0x160 mm/mempolicy.c:2581
 pagetable_alloc_noprof include/linux/mm.h:3651 [inline]
 __pte_alloc_one_kernel_noprof include/asm-generic/pgalloc.h:21 [inline]
 pte_alloc_one_kernel_noprof include/asm-generic/pgalloc.h:45 [inline]
 __pte_alloc_kernel+0x22/0x5c0 mm/memory.c:465
 vmap_pages_pte_range mm/vmalloc.c:537 [inline]
 vmap_pages_pmd_range mm/vmalloc.c:581 [inline]
 vmap_pages_pud_range mm/vmalloc.c:599 [inline]
 vmap_pages_p4d_range mm/vmalloc.c:617 [inline]
 vmap_small_pages_range_noflush+0x9d8/0xd50 mm/vmalloc.c:639
 __vmap_pages_range_noflush+0x601/0x660 mm/vmalloc.c:668
 vmap_pages_range_noflush mm/vmalloc.c:694 [inline]
 __vmap_pages_range mm/vmalloc.c:703 [inline]
 __vmalloc_area_node mm/vmalloc.c:3910 [inline]
 __vmalloc_node_range_noprof+0x9ed/0x1630 mm/vmalloc.c:4064
 vmalloc_user_noprof+0x9e/0xe0 mm/vmalloc.c:4218
 kcov_ioctl+0x4c/0x720 kernel/kcov.c:726
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 809 tgid 809 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0x794/0x10a0 mm/page_alloc.c:2938
 __pagetable_free include/linux/mm.h:3661 [inline]
 kernel_pgtable_work_func+0x21a/0x2f0 mm/pgtable-generic.c:438
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
 process_scheduled_works kernel/workqueue.c:3397 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Memory state around the buggy address:
 ffff88806640f400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88806640f480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff88806640f500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                                     ^
 ffff88806640f580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88806640f600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================

Trajectory: (Expand/Collapse All)
Seq Timestamp Type Name Duration
0/0 2026/06/09 20:30 flow assessment-security
1h02m Results:
map[DenialOfService:false Explanation:Based on the analysis of the bug report and the kernel source code, here is the
assessment of the security impact:

**Bug Mechanism:**
The bug is a use-after-free read in `ptdump_pte_entry` triggered by reading the
`/sys/kernel/debug/page_tables/kernel` file.
The page table page was originally allocated by `__pte_alloc_kernel` (e.g.,
during a `vmalloc` call like `kcov_ioctl` in the report). Later, the page was
freed asynchronously by `kernel_pgtable_work_func`. This typically happens when
`cpa_collapse_large_pages` (Change Page Attribute) collapses a PTE page into a
large PMD page and queues the old PTE page for freeing.
Because `ptdump_walk_pgd` walks the kernel page tables locklessly
(`walk_kernel_page_table_range_lockless`), it can race with the asynchronous
freeing of the page table page. If it reads the PMD before it is collapsed, and
then accesses the PTE page after it has been freed, it results in a
use-after-free read.

**Security Impact Assessment:**
1. **Access Restriction (Not Accessible to Unprivileged Users/Namespaces):** The
bug is triggered exclusively via the `ptdump` debugfs interface. Debugfs is
typically mounted with `0700` permissions (root only), and the specific files in
`/sys/kernel/debug/page_tables/` are created with `0400` permissions (read-only
for root). Debugfs cannot be mounted inside unprivileged user namespaces. Thus,
an attacker must already have full root privileges to trigger this code path.
2. **Not Exploitable:** The bug is strictly a read-only use-after-free. The
`ptdump` code only reads the freed page to parse PTEs and print their status to
the `seq_file`. It does not write to the freed memory, nor does it use the read
data as pointers for further memory accesses or control flow transfers. Since
the attacker must already be root (who can read arbitrary kernel memory anyway),
this provides no avenue for privilege escalation.
3. **No Denial of Service:** In a production kernel without debugging tools like
KASAN enabled, reading from the freed page will not cause a crash. The freed
page is returned to the page allocator but remains mapped in the kernel's direct
mapping (`PAGE_OFFSET`). Accessing it will simply read whatever garbage data
currently resides there, resulting in nonsensical output in the debugfs file,
but it will not trigger a page fault or kernel panic.

**Conclusion:**
This is a benign race condition in a root-only debugging tool (`ptdump`). It
poses no security risk, cannot be triggered by unprivileged users, cannot be
exploited for privilege escalation, and does not cause a denial of service in
production builds. Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:false RemoteTrigger:false Unprivileged:false UserNamespace:false VMGuestTrigger:false VMHostTrigger:false]

1/1 2026/06/09 20:30 action syz-repro-to-c-repro
0m Results:
map[SimplifiedCRepro:]

2/1 2026/06/09 20:30 action kernel-checkouter
1m Results:
map[KernelSrc:/app/workdir/cache/src/914387b894fa460a2af7636d60d98a7c4ba0ad97]

3/1 2026/06/09 20:31 action kernel-builder
26m Results:
map[KernelObj:/app/workdir/cache/build/79d4ef4d379c1f4f05ef7a17645fd5334866110f]

4/1 2026/06/09 20:58 action codesearch-prepare
18m Results:
map[Index:codesearch-index]

5/1 2026/06/09 21:16 agent expert
15m Model:
gemini-3.1-pro-preview

Results:
map[DenialOfService:false Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:false RemoteTrigger:false Unprivileged:false UserNamespace:false VMGuestTrigger:false VMHostTrigger:false]

Instruction:
You are an experienced Linux kernel security engineer. Your task is to analyze given kernel bug report
and determine its security impact based on the following dimensions.

Use the provided tools to examine the source code, check for capability checks (e.g., capable(), ns_capable()),
and understand the nature of the bug. Analyze the given kernel build and configuration.
You can check the kernel config by grepping ".config" file; you can check kernel cmdline by grepping
".config" file for "CONFIG_CMDLINE=". Assume sysctl parameters have default values.
But analyze for the corresponding production build w/o debugging tools enabled (like KASAN, KMSAN, UBSAN).

Try different strategies when analyzing the bug:
 - think of ways in which the vulnerable code is unreachable
 - or the other way around: try to come up with different ideas of how an unprivileged user can reach the bug
If still unsure err on the side of the bug being non-exploitable/not-accessible.
In the final reply, provide a reasoning for your assessment.

Analysis dimensions:

* Exploitable:
Determine if the bug can result in memory corruption or elevated privileges.
Memory safety issues are almost always exploitable (KASAN or UBSAN reports for use-after-free, out-of-bounds;
refcounting issues, corrupted lists, etc). When kernel is crashing on a completely wild pointer access
(e.g. user-space address, or non-canonical address, but not on NULL or address corresponding to KASAN shadow
for NULL address), including both data accesses and control transfers, that also usually implies possibility
of exploitation. Such reports usually say "unable to handle kernel paging request".
Uses of uninitialized values detected by KMSAN may be exploitable b/c attacker frequently can affect uninit
values with spraying techniques. However, for these exploitability depends on how exactly the uninit value
is used in the code, and what it affects.

Think of what happens after the bug is triggered. Some bugs cause kernel panic and halt execution,
they are harder to exploit. For example, BUG reports halts the kernel. However, WARNING reports don't halt
execution in production builds. Debug bug detection tools (like KASAN, KMSAN, KCSAN, UBSAN) are also not enabled
in production builds, so attacker can freely exploit these bugs w/o being detected by these tools.
If you see an integer overflow, think how the overflowed value used later (if it's used as allocation size,
or an array index). If you see an out-of-bounds read, think if it's followed by an out-of-bounds write as well.
Some KCSAN data-races may be exploitable by skilled attackers as well. Think what data structures got corrupted
as the result of data races and how. However, note that kernel has lots of "benign" data races that don't lead
to any runtime misbehavior at all.

* Denial Of Service:
Determine if the bug can result in denial-of-service. Most bugs can, since they cause system crash,
hangs, deadlocks, or resource leaks. This is mostly applicable to WARNING bugs that won't cause system crash
in production. For these think what will be consequences of the violation of the kernel assumptions flagged
by the WARNING. In some cases the unexpected condition is also properly handled by the normal control flow
(e.g. with "if (WARN_ON(...))"), these won't cause denial-of-service. If the condition is not handled,
then it may or may not cause denial-of-service.

* Accessible From Unprivileged Processes:
Determine if the bug can be reached from a typical (non-root) user process that does NOT have any special capabilities
(like CAP_SYS_ADMIN, CAP_NET_ADMIN, CAP_NET_RAW, CAP_PERFMON) or access to device nodes restricted to root.
Assume that unprivileged_bpf_disabled=1, that is eBPF loading is not accessible. However, cBPF (classical BPF)
is still accessible to non-root processes.
Assume that user namespaces are not accessible, that is, the process cannot get the mentioned capabilities even
within a new user namespace (checked by ns_capable() function in the kernel sources).

* Accessible From User Namespaces:
Determine if the bug can be reached within a user-namespace where the process has all capabilities
(including CAP_SYS_ADMIN, CAP_NET_ADMIN, CAP_NET_RAW, CAP_PERFMON). Such capabilities are checked with ns_capable()
function in the kernel sources.

* VM Guest Trigger:
Determine if the bug can be triggered from the context of a typical KVM guest (e.g., set up by a QEMU VMM).
Consider accesses to standard Linux host paravirtualized features (virtio-blk, virtio-net, etc.),
and handling of VM exits in the KVM code.

* VM Host Trigger in The Confidential Computing Context:
Determine if the bug can be triggered in a confidential computing guest kernel from the context of a KVM host.
Consider access to standard Linux guest paravirtualized features (virtio-blk, virtio-net, etc.).

* Ethernet Network Trigger:
Determine if the bug can be triggered by processing ingress network Ethernet traffic, either directly (network stack)
or via drivers exposed to network data.

* Other Remote Trigger:
Determine if the bug can be triggered by processing remote traffic other than Ethernet (Wifi, Bluetooth, NFC, etc).

* Peripheral Trigger:
Determine if the bug can be triggered via an untrusted peripheral device that can be physically plugged
into a system, such as a USB device or a niche hardware driver handling external hardware inputs.
This is particularly important for mobile and desktop environments where users can plug in unknown devices.

* Malicious Filesystem Trigger:
Determine if the bug can be triggered by the kernel mounting and parsing a malicious filesystem image.
This is highly critical for Desktop and Mobile environments where external media or downloaded images
might be auto-mounted.

Don't make assumptions about the kernel source code (it may be different from what you assume it is).
Extensively use the provided code access tools (codesearch-*, git-*, grepper, etc)
to examine the actual source code, and confirm any assumptions.
Prefer calling several tools at the same time to save round-trips.


Use set-results tool to provide results of the analysis.
It must be called exactly once before the final reply.
Ignore results of this tool.

Prompt:
The kernel bug report is:

==================================================================
BUG: KASAN: use-after-free in ptep_get include/linux/pgtable.h:461 [inline]
BUG: KASAN: use-after-free in ptdump_pte_entry+0xec/0x100 mm/ptdump.c:124
Read of size 8 at addr ffff88806640f530 by task syz.1.2229/17788

CPU: 0 UID: 0 PID: 17788 Comm: syz.1.2229 Tainted: G     U       L      syzkaller #0 PREEMPT(full) 
Tainted: [U]=USER, [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1d0 mm/kasan/report.c:595
 ptep_get include/linux/pgtable.h:461 [inline]
 ptdump_pte_entry+0xec/0x100 mm/ptdump.c:124
 walk_pte_range_inner+0x258/0x370 mm/pagewalk.c:49
 walk_pte_range mm/pagewalk.c:80 [inline]
 walk_pmd_range mm/pagewalk.c:173 [inline]
 walk_pud_range mm/pagewalk.c:239 [inline]
 walk_p4d_range mm/pagewalk.c:280 [inline]
 walk_pgd_range+0xee1/0x1dd0 mm/pagewalk.c:321
 walk_kernel_page_table_range_lockless mm/pagewalk.c:664 [inline]
 walk_kernel_page_table_range mm/pagewalk.c:638 [inline]
 walk_page_range_debug+0x2fd/0x370 mm/pagewalk.c:696
 ptdump_walk_pgd+0x129/0x330 mm/ptdump.c:182
 ptdump_walk_pgd_level_core+0x26c/0x300 arch/x86/mm/dump_pagetables.c:458
 ptdump_show+0x1e/0x30 arch/x86/mm/debug_pagetables.c:10
 seq_read_iter+0x32f/0x1270 fs/seq_file.c:231
 seq_read+0x33b/0x4c0 fs/seq_file.c:163
 full_proxy_read+0x135/0x1a0 fs/debugfs/file.c:378
 vfs_read+0x1e4/0xb30 fs/read_write.c:572
 ksys_read+0x12a/0x250 fs/read_write.c:717
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f9f8859ce59
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f9f89458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
RAX: ffffffffffffffda RBX: 00007f9f88815fa0 RCX: 00007f9f8859ce59
RDX: 000000000000001c RSI: 0000200000004c40 RDI: 0000000000000003
RBP: 00007f9f88632d6f R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f9f88816038 R14: 00007f9f88815fa0 R15: 00007fff37ecdda8
 </TASK>

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6640f
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
raw: 00fff00000000000 ffffea00019900c8 ffffea00019902c8 0000000000000000
raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as freed
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5628, tgid 5628 (syz-executor), ts 76048833593, free_ts 678067566484
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1853
 prep_new_page mm/page_alloc.c:1861 [inline]
 get_page_from_freelist+0x11a6/0x3410 mm/page_alloc.c:3941
 __alloc_frozen_pages_noprof+0x27c/0x2bc0 mm/page_alloc.c:5221
 alloc_pages_mpol+0x1fb/0x540 mm/mempolicy.c:2490
 alloc_pages_noprof+0x1a/0x160 mm/mempolicy.c:2581
 pagetable_alloc_noprof include/linux/mm.h:3651 [inline]
 __pte_alloc_one_kernel_noprof include/asm-generic/pgalloc.h:21 [inline]
 pte_alloc_one_kernel_noprof include/asm-generic/pgalloc.h:45 [inline]
 __pte_alloc_kernel+0x22/0x5c0 mm/memory.c:465
 vmap_pages_pte_range mm/vmalloc.c:537 [inline]
 vmap_pages_pmd_range mm/vmalloc.c:581 [inline]
 vmap_pages_pud_range mm/vmalloc.c:599 [inline]
 vmap_pages_p4d_range mm/vmalloc.c:617 [inline]
 vmap_small_pages_range_noflush+0x9d8/0xd50 mm/vmalloc.c:639
 __vmap_pages_range_noflush+0x601/0x660 mm/vmalloc.c:668
 vmap_pages_range_noflush mm/vmalloc.c:694 [inline]
 __vmap_pages_range mm/vmalloc.c:703 [inline]
 __vmalloc_area_node mm/vmalloc.c:3910 [inline]
 __vmalloc_node_range_noprof+0x9ed/0x1630 mm/vmalloc.c:4064
 vmalloc_user_noprof+0x9e/0xe0 mm/vmalloc.c:4218
 kcov_ioctl+0x4c/0x720 kernel/kcov.c:726
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl fs/ioctl.c:583 [inline]
 __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x840 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
page last free pid 809 tgid 809 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0x794/0x10a0 mm/page_alloc.c:2938
 __pagetable_free include/linux/mm.h:3661 [inline]
 kernel_pgtable_work_func+0x21a/0x2f0 mm/pgtable-generic.c:438
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
 process_scheduled_works kernel/workqueue.c:3397 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3478
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Memory state around the buggy address:
 ffff88806640f400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88806640f480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
>ffff88806640f500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                                     ^
 ffff88806640f580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
 ffff88806640f600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
==================================================================




Reply:
Based on the analysis of the bug report and the kernel source code, here is the assessment of the security impact:

**Bug Mechanism:**
The bug is a use-after-free read in `ptdump_pte_entry` triggered by reading the `/sys/kernel/debug/page_tables/kernel` file. 
The page table page was originally allocated by `__pte_alloc_kernel` (e.g., during a `vmalloc` call like `kcov_ioctl` in the report). Later, the page was freed asynchronously by `kernel_pgtable_work_func`. This typically happens when `cpa_collapse_large_pages` (Change Page Attribute) collapses a PTE page into a large PMD page and queues the old PTE page for freeing.
Because `ptdump_walk_pgd` walks the kernel page tables locklessly (`walk_kernel_page_table_range_lockless`), it can race with the asynchronous freeing of the page table page. If it reads the PMD before it is collapsed, and then accesses the PTE page after it has been freed, it results in a use-after-free read.

**Security Impact Assessment:**
1. **Access Restriction (Not Accessible to Unprivileged Users/Namespaces):** The bug is triggered exclusively via the `ptdump` debugfs interface. Debugfs is typically mounted with `0700` permissions (root only), and the specific files in `/sys/kernel/debug/page_tables/` are created with `0400` permissions (read-only for root). Debugfs cannot be mounted inside unprivileged user namespaces. Thus, an attacker must already have full root privileges to trigger this code path.
2. **Not Exploitable:** The bug is strictly a read-only use-after-free. The `ptdump` code only reads the freed page to parse PTEs and print their status to the `seq_file`. It does not write to the freed memory, nor does it use the read data as pointers for further memory accesses or control flow transfers. Since the attacker must already be root (who can read arbitrary kernel memory anyway), this provides no avenue for privilege escalation.
3. **No Denial of Service:** In a production kernel without debugging tools like KASAN enabled, reading from the freed page will not cause a crash. The freed page is returned to the page allocator but remains mapped in the kernel's direct mapping (`PAGE_OFFSET`). Accessing it will simply read whatever garbage data currently resides there, resulting in nonsensical output in the debugfs file, but it will not trigger a page fault or kernel panic.

**Conclusion:**
This is a benign race condition in a root-only debugging tool (`ptdump`). It poses no security risk, cannot be triggered by unprivileged users, cannot be exploited for privilege escalation, and does not cause a denial of service in production builds.

6/2 2026/06/09 21:16 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 8549
							output: 43
							thoughts: 655
						

Thoughts:
**KASAN Use-After-Free in Page Table Dumping**

Okay, so I've got a KASAN use-after-free situation on my hands. It seems to be happening in `ptep_get`, which is being called from `ptdump_pte_entry` within `mm/ptdump.c`. The trigger? Reading from a debugfs file. Likely `/sys/kernel/debug/page_tables` or something similar, judging by the context.

Looking at the call trace, I can see the flow pretty clearly: it's starting from `ptdump_show`, making its way down through a series of `walk_` functions in `mm/pagewalk.c` and then ultimately hitting the problematic `ptep_get`. The trace neatly maps out the page table traversal logic that's being used for this dump. This leads me to believe this is a classic race or memory corruption type of bug in the `page_walk` functionality.

*   `ptep_get include/linux/pgtable.h:461 [inline]`
*   `ptdump_pte_entry+0xec/0x100 mm/ptdump.c:124`
*   `walk_pte_range_inner+0x258/0x370 mm/pagewalk.c:49`
*   `walk_pte_range mm/pagewalk.c:80 [inline]`
*   `walk_pmd_range mm/pagewalk.c:173 [inline]`
*   `walk_pud_range mm/pagewalk.c:239 [inline]`
*   `walk_p4d_range mm/pagewalk.c:280 [inline]`
*   `walk_pgd_range+0xee1/0x1dd0 mm/pagewalk.c:321`
*   `walk_kernel_page_table_range_lockless mm/pagewalk.c:664 [inline]`
*   `walk_kernel_page_table_range mm/pagewalk.c:638 [inline]`
*   `walk_page_range_debug+0x2fd/0x370 mm/pagewalk.c:696`
*   `ptdump_walk_pgd+0x129/0x330 mm/ptdump.c:182`
*   `ptdump_walk_pgd_level_core+0x26c/0x300 arch/x86/mm/dump_pagetables.c:458`
*   `ptdump_show+0x1e/0x30 arch/x86/mm/debug_pagetables.c:10`
*   `seq_read_iter+0x32f/0x1270 fs/seq_file.c:231`
*   `seq_read+0x33b/0x4c0 fs/seq_file.c:163`
*   `full_proxy_read+0x135/0x1a0 fs/debugfs/file.c:378`
*   `vfs_read+0x1e4/0xb30 fs/read_write.c:572`
*   `ksys_read+0x12a/0x250 fs/read_write.c:717`

This is triggered by the debugfs read. Typically, debugfs is locked down to root access, requiring `CAP_SYS_ADMIN` or at least a root user. So, while it's a privilege escalation risk in theory, it's still fairly contained. I'll need to dig into `arch/x86/mm/debug_pagetables.c` to understand how `ptdump_show` is registered and exactly what data is being accessed, to get a better handle on the root cause and how to properly fix the bug.



7/2 2026/06/09 21:16 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/debug_pagetables.c Name:ptdump_show]

Results:
map[SourceCode:   8:	static int ptdump_show(struct seq_file *m, void *v)
   9:	{
  10:		ptdump_walk_pgd_level_debugfs(m, &init_mm, false);
  11:		return 0;
  12:	}
 SourceFile:arch/x86/mm/debug_pagetables.c]

8/2 2026/06/09 21:16 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 10260
							output: 56
							thoughts: 14
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience:

**Analyzing `ptdump_show` Usage**

Okay, let's dive into this. My first thought is to understand the context of `ptdump_show`. I'm going to look for examples of its practical application. I'll need to see how it's integrated within larger workflows, what kind of data it operates on, and what the expected outputs are. Are we talking about a debugging tool, a visualization component, or something else entirely? The name suggests it's related to program trace dumps, but I need to confirm that and then pinpoint the critical use cases. Knowing how it's *used* is paramount to understanding its value and limitations. I want to see how the arguments are set up, if there are any default behaviours, and generally get a handle on the interface. From there, I can begin to assess its effectiveness and think about how it might be improved or adapted for specific scenarios I'm working with.



9/2 2026/06/09 21:16 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/debug_pagetables.c IncludeSnippetLines:5 Name:ptdump_show SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:takes-address-of ReferencingEntityKind:function ReferencingEntityName:ptdump_open SourceFile:arch/x86/mm/debug_pagetables.c SourceLine:14 SourceSnippet:  14:	DEFINE_SHOW_ATTRIBUTE(ptdump);
]] TruncatedOutput:false]

10/2 2026/06/09 21:16 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 10643
							output: 57
							thoughts: 27
						

Thoughts:
Here's my understanding of the thought process, summarized as if I were having these thoughts:

**Analyzing the Macro and its Implications**

Okay, let me break this down. I see this macro, `DEFINE_SHOW_ATTRIBUTE(ptdump)`. The immediate implication, given my expertise, is that this macro is likely a kernel macro designed to create some form of sysfs attribute or similar. Thinking through it, it's defining `ptdump_fops` and `ptdump_open`. The fact that it's generating function pointers to *something* called `ptdump_fops` and `ptdump_open` is significant. Based on the naming, it's pretty clear that `ptdump_fops` refers to file operations, I.E. the set of functions that define what happens when a user reads, writes, opens, or closes this particular attribute in the filesystem, as defined in `fs/file_operations.h`. And `ptdump_open`, judging by the syntax, is probably defining a simple open method. It would likely initialize whatever structures are needed for the read or write calls. This confirms my initial hypothesis about how this `DEFINE_SHOW_ATTRIBUTE` works. It's essentially packaging up the necessary boilerplate for defining a sysfs attribute. Now I have a good framework to understand this code.



11/2 2026/06/09 21:16 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/debug_pagetables.c IncludeSnippetLines:5 Name:ptdump_fops SourceTreePrefix:]

Results:
map[References:<nil> TruncatedOutput:false]

12/2 2026/06/09 21:16 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 11024
							output: 42
							thoughts: 23
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience:

**Diving into `debug_pagetables.c`**

Okay, time to really dig into `arch/x86/mm/debug_pagetables.c`. I need to understand this module inside and out. It's crucial for understanding how the kernel handles debugging of the page table structures on x86. I'm thinking I'll start by systematically going through the entire file, line by line, really making sure I don't miss anything subtle. This means functions, data structures, macros... the works. I need to refresh myself on how the architecture handles memory mapping and the implications of this file's purpose. I should be able to then figure out where the kernel exposes this functionality to debuggers like `gdb` and what interfaces it provides to the user. I'll need to pay particularly close attention to any error handling or boundary checks within the code, that'll be key. Understanding the details of this file will give me a better handle on the underlying page table structure.



13/2 2026/06/09 21:17 tool read-file
0m Args:
map[File:arch/x86/mm/debug_pagetables.c FirstLine:1 LineCount:100]

Results:
map[Contents:   1:	// SPDX-License-Identifier: GPL-2.0-only
   2:	#include <linux/debugfs.h>
   3:	#include <linux/efi.h>
   4:	#include <linux/module.h>
   5:	#include <linux/seq_file.h>
   6:	#include <linux/pgtable.h>
   7:	
   8:	static int ptdump_show(struct seq_file *m, void *v)
   9:	{
  10:		ptdump_walk_pgd_level_debugfs(m, &init_mm, false);
  11:		return 0;
  12:	}
  13:	
  14:	DEFINE_SHOW_ATTRIBUTE(ptdump);
  15:	
  16:	static int ptdump_curknl_show(struct seq_file *m, void *v)
  17:	{
  18:		if (current->mm->pgd)
  19:			ptdump_walk_pgd_level_debugfs(m, current->mm, false);
  20:		return 0;
  21:	}
  22:	
  23:	DEFINE_SHOW_ATTRIBUTE(ptdump_curknl);
  24:	
  25:	#ifdef CONFIG_MITIGATION_PAGE_TABLE_ISOLATION
  26:	static int ptdump_curusr_show(struct seq_file *m, void *v)
  27:	{
  28:		if (current->mm->pgd)
  29:			ptdump_walk_pgd_level_debugfs(m, current->mm, true);
  30:		return 0;
  31:	}
  32:	
  33:	DEFINE_SHOW_ATTRIBUTE(ptdump_curusr);
  34:	#endif
  35:	
  36:	#if defined(CONFIG_EFI) && defined(CONFIG_X86_64)
  37:	static int ptdump_efi_show(struct seq_file *m, void *v)
  38:	{
  39:		if (efi_mm.pgd)
  40:			ptdump_walk_pgd_level_debugfs(m, &efi_mm, false);
  41:		return 0;
  42:	}
  43:	
  44:	DEFINE_SHOW_ATTRIBUTE(ptdump_efi);
  45:	#endif
  46:	
  47:	static struct dentry *dir;
  48:	
  49:	static int __init pt_dump_debug_init(void)
  50:	{
  51:		dir = debugfs_create_dir("page_tables", NULL);
  52:	
  53:		debugfs_create_file("kernel", 0400, dir, NULL, &ptdump_fops);
  54:		debugfs_create_file("current_kernel", 0400, dir, NULL,
  55:				    &ptdump_curknl_fops);
  56:	
  57:	#ifdef CONFIG_MITIGATION_PAGE_TABLE_ISOLATION
  58:		debugfs_create_file("current_user", 0400, dir, NULL,
  59:				    &ptdump_curusr_fops);
  60:	#endif
  61:	#if defined(CONFIG_EFI) && defined(CONFIG_X86_64)
  62:		debugfs_create_file("efi", 0400, dir, NULL, &ptdump_efi_fops);
  63:	#endif
  64:		return 0;
  65:	}
  66:	
  67:	static void __exit pt_dump_debug_exit(void)
  68:	{
  69:		debugfs_remove_recursive(dir);
  70:	}
  71:	
  72:	module_init(pt_dump_debug_init);
  73:	module_exit(pt_dump_debug_exit);
  74:	MODULE_AUTHOR("Arjan van de Ven <arjan@linux.intel.com>");
  75:	MODULE_DESCRIPTION("Kernel debugging helper that dumps pagetables");
]

14/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 12421
							output: 50
							thoughts: 251
						

Thoughts:
**Analyzing Page Table Access Restrictions**

Okay, so I'm looking at these files created under `/sys/kernel/debug/page_tables/`: `kernel`, `current_kernel`, `current_user`, and `efi`. The mode is set to `0400`, meaning read-only for root. Standard debugfs behavior, really. And `/sys/kernel/debug` itself is typically mounted as `0700`, root only. So, no direct access for unprivileged users, as expected. I wonder, though... can this even be accessed from within a user namespace? That's the real question. No, wait... debugfs *can't* be mounted in a user namespace, and even if it could, the files would still be owned by root in the init namespace.

But what if the bug I'm after isn't directly related to *accessing* these files, but something triggered *elsewhere*? Let's refocus on the core issue. Right, the bug is a use-after-free within `ptep_get` which is called from `ptdump_pte_entry`. Okay, so a page is being freed by `kernel_pgtable_work_func`, and I remember `kernel_pgtable_work_func` is a workqueue function that handles freeing page tables. So, I need to look closely at that. Specifically, I need to check: is `ptdump_walk_pgd_level_core` holding the correct locks? I need to go look in `arch/x86/mm/dump_pagetables.c`...



15/2 2026/06/09 21:17 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/dump_pagetables.c Name:ptdump_walk_pgd_level_core]

Results:
map[SourceCode: 423:	bool ptdump_walk_pgd_level_core(struct seq_file *m,
 424:					struct mm_struct *mm, pgd_t *pgd,
 425:					bool checkwx, bool dmesg)
 426:	{
 427:		const struct ptdump_range ptdump_ranges[] = {
 428:	#ifdef CONFIG_X86_64
 429:		{0, PTRS_PER_PGD * PGD_LEVEL_MULT / 2},
 430:		{GUARD_HOLE_END_ADDR, ~0UL},
 431:	#else
 432:		{0, ~0UL},
 433:	#endif
 434:		{0, 0}
 435:	};
 436:	
 437:		struct pg_state st = {
 438:			.ptdump = {
 439:				.note_page_pte = note_page_pte,
 440:				.note_page_pmd = note_page_pmd,
 441:				.note_page_pud = note_page_pud,
 442:				.note_page_p4d = note_page_p4d,
 443:				.note_page_pgd = note_page_pgd,
 444:				.note_page_flush = note_page_flush,
 445:				.effective_prot_pte = effective_prot_pte,
 446:				.effective_prot_pmd = effective_prot_pmd,
 447:				.effective_prot_pud = effective_prot_pud,
 448:				.effective_prot_p4d = effective_prot_p4d,
 449:				.effective_prot_pgd = effective_prot_pgd,
 450:				.range		= ptdump_ranges
 451:			},
 452:			.level = -1,
 453:			.to_dmesg	= dmesg,
 454:			.check_wx	= checkwx,
 455:			.seq		= m
 456:		};
 457:	
 458:		ptdump_walk_pgd(&st.ptdump, mm, pgd);
 459:	
 460:		if (!checkwx)
 461:			return true;
 462:		if (st.wx_pages) {
 463:			pr_info("x86/mm: Checked W+X mappings: FAILED, %lu W+X pages found.\n",
 464:				st.wx_pages);
 465:	
 466:			return false;
 467:		} else {
 468:			pr_info("x86/mm: Checked W+X mappings: passed, no W+X pages found.\n");
 469:	
 470:			return true;
 471:		}
 472:	}
 SourceFile:arch/x86/mm/dump_pagetables.c]

16/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 13903
							output: 37
							thoughts: 49
						

Thoughts:
Here's my take on the thought process:

**Diving into the Page Table Walker**

Okay, so I see `ptdump_walk_pgd_level_core` is calling `ptdump_walk_pgd`. That's the entry point to investigate. I need to understand how the PGD is walked. Time to jump over to `mm/ptdump.c` and check out the implementation of `ptdump_walk_pgd`. Let's see what that function is doing. I need to get a handle on the control flow here.



17/2 2026/06/09 21:17 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/ptdump.c Name:ptdump_walk_pgd]

Results:
map[SourceCode: 175:	void ptdump_walk_pgd(struct ptdump_state *st, struct mm_struct *mm, pgd_t *pgd)
 176:	{
 177:		const struct ptdump_range *range = st->range;
 178:	
 179:		get_online_mems();
 180:		mmap_write_lock(mm);
 181:		while (range->start != range->end) {
 182:			walk_page_range_debug(mm, range->start, range->end,
 183:					      &ptdump_ops, pgd, st);
 184:			range++;
 185:		}
 186:		mmap_write_unlock(mm);
 187:		put_online_mems();
 188:	
 189:		/* Flush out the last page */
 190:		st->note_page_flush(st);
 191:	}
 SourceFile:mm/ptdump.c]

18/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 14401
							output: 37
							thoughts: 116
						

Thoughts:
**Analyzing a Suspected Memory Management Issue**

Okay, so I'm looking at this bug report and it's pointing towards a potential problem in memory management, specifically with a lock. The report indicates it's supposed to take `mmap_write_lock(mm)`, but the call stack shows a different sequence: `walk_kernel_page_table_range_lockless`, then `walk_kernel_page_table_range`, and finally, `walk_page_range_debug`. Hmm, that's not what I'd expect to see.

My immediate next step is to drill down into `walk_page_range_debug`. I need to understand what this function is doing and, crucially, *why* it's being called in this context. Is it potentially bypassing the expected lock, or is it using a lockless approach within a guarded region? The key lies in understanding its exact behavior, its relationship to the page table walks, and whether it could be the source of any data races or synchronization issues that might be leading to this bug. I need to see what's happening within that `walk_page_range_debug` function.



19/2 2026/06/09 21:17 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/pagewalk.c Name:walk_page_range_debug]

Results:
map[SourceCode: 667:	/**
 668:	 * walk_page_range_debug - walk a range of pagetables not backed by a vma
 669:	 * @mm:		mm_struct representing the target process of page table walk
 670:	 * @start:	start address of the virtual address range
 671:	 * @end:	end address of the virtual address range
 672:	 * @ops:	operation to call during the walk
 673:	 * @pgd:	pgd to walk if different from mm->pgd
 674:	 * @private:	private data for callbacks' usage
 675:	 *
 676:	 * Similar to walk_page_range() but can walk any page tables even if they are
 677:	 * not backed by VMAs. Because 'unusual' entries may be walked this function
 678:	 * will also not lock the PTEs for the pte_entry() callback.
 679:	 *
 680:	 * This is for debugging purposes ONLY.
 681:	 */
 682:	int walk_page_range_debug(struct mm_struct *mm, unsigned long start,
 683:				  unsigned long end, const struct mm_walk_ops *ops,
 684:				  pgd_t *pgd, void *private)
 685:	{
 686:		struct mm_walk walk = {
 687:			.ops		= ops,
 688:			.mm		= mm,
 689:			.pgd		= pgd,
 690:			.private	= private,
 691:			.no_vma		= true
 692:		};
 693:	
 694:		/* For convenience, we allow traversal of kernel mappings. */
 695:		if (mm == &init_mm)
 696:			return walk_kernel_page_table_range(start, end, ops,
 697:							    pgd, private);
 698:		if (start >= end || !walk.mm)
 699:			return -EINVAL;
 700:		if (!check_ops_safe(ops))
 701:			return -EINVAL;
 702:	
 703:		/*
 704:		 * The mmap lock protects the page walker from changes to the page
 705:		 * tables during the walk.  However a read lock is insufficient to
 706:		 * protect those areas which don't have a VMA as munmap() detaches
 707:		 * the VMAs before downgrading to a read lock and actually tearing
 708:		 * down PTEs/page tables. In which case, the mmap write lock should
 709:		 * be held.
 710:		 */
 711:		mmap_assert_write_locked(mm);
 712:	
 713:		return walk_pgd_range(start, end, &walk);
 714:	}
 SourceFile:mm/pagewalk.c]

20/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 15609
							output: 39
							thoughts: 53
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience:

**Kernel Page Table Walk Analysis**

Alright, so I see we're dealing with a check: `if (mm == &init_mm)`. This immediately flags that we're potentially dealing with the kernel's initial memory map, and that likely means a specific page table traversal is happening. It's calling `walk_kernel_page_table_range(start, end, ops, pgd, private)`. My brain is already jumping ahead, thinking about the implications.

Now, my focus shifts to that function, `walk_kernel_page_table_range`. What's it *actually* doing? I need to understand the details of the arguments: the `start` and `end` addresses define the virtual address range we're examining, and `ops` is undoubtedly a set of function pointers— probably callback functions specifying *how* we want to handle each page table entry during the walk. I'm wondering what operations are being performed here. Is it just an examination, or is it modifying the entries? Then there’s `pgd`, which is the starting point for the page table, and `private` probably holds some context data, perhaps specific to the operation we're executing.

I'm thinking this likely involves iterating through the Page Global Directory (PGD), Page Upper Directory (PUD), Page Middle Directory (PMD), and Page Table (PT) levels, executing an operation on any relevant pages in the kernel. I'd need to examine this `walk_kernel_page_table_range` function, to determine the specifics of the walk. My gut tells me this could be for a variety of tasks, from memory map debugging to KPTI-related activities, or perhaps even a direct memory access function.



21/2 2026/06/09 21:17 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/pagewalk.c Name:walk_kernel_page_table_range]

Results:
map[SourceCode: 607:	/**
 608:	 * walk_kernel_page_table_range - walk a range of kernel pagetables.
 609:	 * @start:	start address of the virtual address range
 610:	 * @end:	end address of the virtual address range
 611:	 * @ops:	operation to call during the walk
 612:	 * @pgd:	pgd to walk if different from mm->pgd
 613:	 * @private:	private data for callbacks' usage
 614:	 *
 615:	 * Similar to walk_page_range() but can walk any page tables even if they are
 616:	 * not backed by VMAs. Because 'unusual' entries may be walked this function
 617:	 * will also not lock the PTEs for the pte_entry() callback. This is useful for
 618:	 * walking kernel pages tables or page tables for firmware.
 619:	 *
 620:	 * Note: Be careful to walk the kernel pages tables, the caller may be need to
 621:	 * take other effective approaches (mmap lock may be insufficient) to prevent
 622:	 * the intermediate kernel page tables belonging to the specified address range
 623:	 * from being freed (e.g. memory hot-remove).
 624:	 */
 625:	int walk_kernel_page_table_range(unsigned long start, unsigned long end,
 626:			const struct mm_walk_ops *ops, pgd_t *pgd, void *private)
 627:	{
 628:		/*
 629:		 * Kernel intermediate page tables are usually not freed, so the mmap
 630:		 * read lock is sufficient. But there are some exceptions.
 631:		 * E.g. memory hot-remove. In which case, the mmap lock is insufficient
 632:		 * to prevent the intermediate kernel pages tables belonging to the
 633:		 * specified address range from being freed. The caller should take
 634:		 * other actions to prevent this race.
 635:		 */
 636:		mmap_assert_locked(&init_mm);
 637:	
 638:		return walk_kernel_page_table_range_lockless(start, end, ops, pgd,
 639:							     private);
 640:	}
 SourceFile:mm/pagewalk.c]

22/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 16726
							output: 40
							thoughts: 129
						

Thoughts:
**Analyzing a Race Condition in Kernel Page Table Management**

Okay, so the comment brings up an interesting point. It says that the `mmap` read lock *usually* protects kernel intermediate page tables, but there are exceptions. Specifically, memory hot-remove. That's a classic race condition scenario, isn't it? The `mmap` lock alone isn't enough to prevent the kernel from freeing those intermediate tables under us. The caller has to take extra precautions, which is standard practice in these types of scenarios.

Now, the bug report says `kernel_pgtable_work_func` is the culprit, freeing the page. That triggers a red flag immediately. What *triggers* `kernel_pgtable_work_func`? I need to dig into the code and trace that function's call path to understand the underlying logic and pinpoint the vulnerability. This is where the real investigation begins. Gotta see what's leading to that function call and the conditions under which it frees those pages.



23/2 2026/06/09 21:17 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/pgtable-generic.c Name:kernel_pgtable_work_func]

Results:
map[SourceCode: 427:	static void kernel_pgtable_work_func(struct work_struct *work)
 428:	{
 429:		struct ptdesc *pt, *next;
 430:		LIST_HEAD(page_list);
 431:	
 432:		spin_lock(&kernel_pgtable_work.lock);
 433:		list_splice_tail_init(&kernel_pgtable_work.list, &page_list);
 434:		spin_unlock(&kernel_pgtable_work.lock);
 435:	
 436:		iommu_sva_invalidate_kva_range(PAGE_OFFSET, TLB_FLUSH_ALL);
 437:		list_for_each_entry_safe(pt, next, &page_list, pt_list)
 438:			__pagetable_free(pt);
 439:	}
 SourceFile:mm/pgtable-generic.c]

24/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 17369
							output: 51
							thoughts: 16
						

Thoughts:
Here's my thought process, as if I were analyzing that code:

**Diving into `kernel_pgtable_work`**

Alright, time to track down where this `kernel_pgtable_work` variable is actually getting its value set. Gotta understand its context if I'm going to make any meaningful analysis or modification. This is a crucial first step, right? Let's trace it back through the code and figure out how it's being populated. Knowing that will give me a solid foundation for understanding the bigger picture. I'll focus on how it's *used* and look for assignment operations. Gotta be methodical about this.



25/2 2026/06/09 21:17 tool codesearch-find-references
0m Args:
map[ContextFile:mm/pgtable-generic.c IncludeSnippetLines:5 Name:kernel_pgtable_work SourceTreePrefix:]

Results:
map[References:<nil> TruncatedOutput:false]

26/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 17591
							output: 37
							thoughts: 25
						

Thoughts:
Okay, here's my interpretation of that thought process, from an expert's perspective:

**Diving into the Kernel's Page Table Implementation**

Right, so I need to understand how the kernel handles page tables. The problem I'm dealing with is likely related to how the kernel manages its internal data structures for virtual memory mapping. Thinking about it, the phrase "kernel\_pgtable\_work" sounds familiar – like it points towards some background process or work queue related to page table management. My intuition tells me that the implementation for these kernel level table operations would be in one of the core memory management files. I should start by looking for that function definition in `mm/pgtable-generic.c`. That file's typically the best place to find the platform-agnostic, base implementation for these kinds of low-level routines. It's a solid starting point for tracing the code's path, and figuring out what's going on under the hood. It’ll almost certainly shed some light on the issue.



27/2 2026/06/09 21:17 tool read-file
0m Args:
map[File:mm/pgtable-generic.c FirstLine:400 LineCount:100]

Results:
map[Contents: 400:		pte = __pte_offset_map(pmd, addr, &pmdval);
 401:		if (unlikely(!pte))
 402:			return pte;
 403:		ptl = pte_lockptr(mm, &pmdval);
 404:		spin_lock(ptl);
 405:		if (likely(pmd_same(pmdval, pmdp_get_lockless(pmd)))) {
 406:			*ptlp = ptl;
 407:			return pte;
 408:		}
 409:		pte_unmap_unlock(pte, ptl);
 410:		goto again;
 411:	}
 412:	
 413:	#ifdef CONFIG_ASYNC_KERNEL_PGTABLE_FREE
 414:	static void kernel_pgtable_work_func(struct work_struct *work);
 415:	
 416:	static struct {
 417:		struct list_head list;
 418:		/* protect above ptdesc lists */
 419:		spinlock_t lock;
 420:		struct work_struct work;
 421:	} kernel_pgtable_work = {
 422:		.list = LIST_HEAD_INIT(kernel_pgtable_work.list),
 423:		.lock = __SPIN_LOCK_UNLOCKED(kernel_pgtable_work.lock),
 424:		.work = __WORK_INITIALIZER(kernel_pgtable_work.work, kernel_pgtable_work_func),
 425:	};
 426:	
 427:	static void kernel_pgtable_work_func(struct work_struct *work)
 428:	{
 429:		struct ptdesc *pt, *next;
 430:		LIST_HEAD(page_list);
 431:	
 432:		spin_lock(&kernel_pgtable_work.lock);
 433:		list_splice_tail_init(&kernel_pgtable_work.list, &page_list);
 434:		spin_unlock(&kernel_pgtable_work.lock);
 435:	
 436:		iommu_sva_invalidate_kva_range(PAGE_OFFSET, TLB_FLUSH_ALL);
 437:		list_for_each_entry_safe(pt, next, &page_list, pt_list)
 438:			__pagetable_free(pt);
 439:	}
 440:	
 441:	void pagetable_free_kernel(struct ptdesc *pt)
 442:	{
 443:		spin_lock(&kernel_pgtable_work.lock);
 444:		list_add(&pt->pt_list, &kernel_pgtable_work.list);
 445:		spin_unlock(&kernel_pgtable_work.lock);
 446:	
 447:		schedule_work(&kernel_pgtable_work.work);
 448:	}
 449:	#endif
]

28/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 18693
							output: 51
							thoughts: 37
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience:

**Analyzing `pagetable_free_kernel`'s Callers**

Alright, so `pagetable_free_kernel` essentially puts the page table onto some sort of queue or list and then schedules that work to be done later. That makes sense; deferred freeing is pretty standard for memory management, particularly when dealing with page tables. I need to understand the implications of this approach. The interesting part is *where* this function is being called from. I need to trace the call graph to see what events trigger a page table to be freed and understand the scenarios. I want to see if this is handling regular process exits, memory pressure, or something more specialized like kernel module unloading or fault handling. Knowing the callers will help me assess the potential contention points and understand the urgency with which freeing needs to be done. Let's see... I'll dive into the codebase and trace those calls.



29/2 2026/06/09 21:17 tool codesearch-find-references
0m Args:
map[ContextFile:mm/pgtable-generic.c IncludeSnippetLines:5 Name:pagetable_free_kernel SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:pagetable_free SourceFile:include/linux/mm.h SourceLine:3683 SourceSnippet:3678:	 */
3679:	static inline void pagetable_free(struct ptdesc *pt)
3680:	{
3681:		if (ptdesc_test_kernel(pt)) {
3682:			ptdesc_clear_kernel(pt);
3683:			pagetable_free_kernel(pt);
3684:		} else {
3685:			__pagetable_free(pt);
3686:		}
3687:	}
]] TruncatedOutput:false]

30/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 19188
							output: 52
							thoughts: 456
						

Thoughts:
**Analyzing Page Table Freeing in the Context of a Bug Report**

Okay, so I'm looking at this bug report and the call stack points towards `pagetable_free` being involved in freeing page tables. The allocation stack trace is interesting: it shows `kcov_ioctl` ultimately triggering a `vmalloc` allocation, which then leads to kernel page table allocations via `__pte_alloc_kernel`. So, `kcov` is allocating memory in the vmalloc area. Makes sense. When `kcov` is done, or if the memory gets explicitly freed, the vmalloc area will be freed. The question is, are the associated page tables also freed in this process?

My immediate understanding is that vmalloc usually *doesn't* free the page tables, right? It's generally a more persistent mapping. So, it's not a standard operation. The page tables are probably *only* freed when `free_vmap_area` is called, yeah? I need to verify that and see under what conditions this freeing happens. Let me go check if vmalloc actually frees page tables because that seems to be the crucial piece of information here.



31/2 2026/06/09 21:17 tool codesearch-find-references
0m Args:
map[ContextFile:mm/vmalloc.c IncludeSnippetLines:5 Name:vunmap_p4d_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:__vunmap_range_noflush SourceFile:mm/vmalloc.c SourceLine:496 SourceSnippet: 491:			next = pgd_addr_end(addr, end);
 492:			if (pgd_bad(*pgd))
 493:				mask |= PGTBL_PGD_MODIFIED;
 494:			if (pgd_none_or_clear_bad(pgd))
 495:				continue;
 496:			vunmap_p4d_range(pgd, addr, next, &mask);
 497:		} while (pgd++, addr = next, addr != end);
 498:	
 499:		if (mask & ARCH_PAGE_TABLE_SYNC_MASK)
 500:			arch_sync_kernel_mappings(start, end);
 501:	}
]] TruncatedOutput:false]

32/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 20209
							output: 37
							thoughts: 25
						

Thoughts:
Okay, here's my take on those functions, putting myself in the expert's shoes:

**Deconstructing Memory Unmapping: `vunmap_p4d_range` and `vunmap_pte_range`**

Alright, let's dive into these two. I see `vunmap_p4d_range` and `vunmap_pte_range`, and immediately, my mind starts to map out the implications. These are core functions, the bread and butter, for freeing up virtual address space. They're the critical components of the unmapping process, working at different levels of the page table hierarchy. `vunmap_pte_range` is clearly the more granular, working at the Page Table Entry level. It's the point where the actual physical page association is broken, the PTE's cleared and the page itself is potentially freed (depending on the refcount, of course). I'm thinking about TLB invalidation strategies here – how efficiently are we handling that? Are we doing it granularly, or flushing the entire TLB? Tradeoffs between speed and concurrency are definitely in play.

Now, `vunmap_p4d_range`, that's operating at the P4D level, or possibly a higher level page table in some architectures. It's handling larger chunks of virtual address space, potentially entire page table directories. This likely involves walking the P4D and, recursively, calling down to the lower-level `vunmap_pte_range` for the details, maybe `vunmap_pmd_range` first if we are doing P4D unmapping. I need to be concerned about the implications of large unmappings. How are we handling the locking? Is this a recursive walk? Are we avoiding deadlocks, especially when dealing with shared page tables? Any potential race conditions are immediately flagged.

I'm starting to think about the target architecture and the specifics of the page table layout. Are we dealing with 32-bit, 64-bit, or some other architecture? And what about the page size itself? 4KB, 2MB, 1GB... that totally changes the game in terms of efficiency and overhead. I am also thinking about how the function integrates with the memory management system, page allocator, and swap space. Finally, I need to know how these functions interact with each other and other parts of the memory management system, because they are so critical to the performance of the system.



33/2 2026/06/09 21:17 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:vunmap_pte_range]

Results:
map[SourceCode: 366:	static void vunmap_pte_range(pmd_t *pmd, unsigned long addr, unsigned long end,
 367:				     pgtbl_mod_mask *mask)
 368:	{
 369:		pte_t *pte;
 370:		pte_t ptent;
 371:		unsigned long size = PAGE_SIZE;
 372:	
 373:		pte = pte_offset_kernel(pmd, addr);
 374:		lazy_mmu_mode_enable();
 375:	
 376:		do {
 377:	#ifdef CONFIG_HUGETLB_PAGE
 378:			size = arch_vmap_pte_range_unmap_size(addr, pte);
 379:			if (size != PAGE_SIZE) {
 380:				if (WARN_ON(!IS_ALIGNED(addr, size))) {
 381:					addr = ALIGN_DOWN(addr, size);
 382:					pte = PTR_ALIGN_DOWN(pte, sizeof(*pte) * (size >> PAGE_SHIFT));
 383:				}
 384:				ptent = huge_ptep_get_and_clear(&init_mm, addr, pte, size);
 385:				if (WARN_ON(end - addr < size))
 386:					size = end - addr;
 387:			} else
 388:	#endif
 389:				ptent = ptep_get_and_clear(&init_mm, addr, pte);
 390:			WARN_ON(!pte_none(ptent) && !pte_present(ptent));
 391:		} while (pte += (size >> PAGE_SHIFT), addr += size, addr != end);
 392:	
 393:		lazy_mmu_mode_disable();
 394:		*mask |= PGTBL_PTE_MODIFIED;
 395:	}
 SourceFile:mm/vmalloc.c]

34/2 2026/06/09 21:17 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 21335
							output: 19
							thoughts: 127
						

Thoughts:
**Kernel Page Table Deallocation Deep Dive**

Okay, so I'm focusing on how the kernel handles deallocation of virtual memory, specifically the page tables. I was just looking at `vunmap_pte_range` and it dawned on me that simply clearing the Page Table Entries (PTEs) isn't the whole story. I need to understand where the actual *page tables* themselves get freed.

My initial thought was that perhaps this would be in `mm/vmalloc.c`, since that's where a lot of virtual memory allocation and freeing happens. I glanced at `free_vmap_area_noflush`, but that seems to be related to the PTE clearing with `vunmap_range_noflush`. So, it looks like that's not the right place.

I thought, is there maybe a `free_empty_tables` function or something similarly named? I need to track down the function that actually releases those page table structures. Time to do a more focused search. I'll search the relevant files, `mm/vmalloc.c` and `mm/memory.c` focusing on functions related to `pagetable_free` or `free_pte_range` - that's the next step. I'm going to find the real memory management function for page tables.



35/2 2026/06/09 21:18 tool grepper
0m Args:
map[Expression:free_pte_range]

Results:
map[Output:mm/madvise.c=627=static long madvise_pageout(struct madvise_behavior *madv_behavior)
--
mm/madvise.c-652-
mm/madvise.c:653:static int madvise_free_pte_range(pmd_t *pmd, unsigned long addr,
mm/madvise.c-654-				unsigned long end, struct mm_walk *walk)
--
mm/madvise.c=800=static int madvise_free_single_vma(struct madvise_behavior *madv_behavior)
--
mm/madvise.c-809-	struct mm_walk_ops walk_ops = {
mm/madvise.c:810:		.pmd_entry		= madvise_free_pte_range,
mm/madvise.c-811-	};
--
mm/memory.c=167=void mm_trace_rss_stat(struct mm_struct *mm, int member)
--
mm/memory.c-175- */
mm/memory.c:176:static void free_pte_range(struct mmu_gather *tlb, pmd_t *pmd,
mm/memory.c-177-			   unsigned long addr)
--
mm/memory.c=185=static inline void free_pmd_range(struct mmu_gather *tlb, pud_t *pud,
--
mm/memory.c-198-			continue;
mm/memory.c:199:		free_pte_range(tlb, pmd, addr);
mm/memory.c-200-	} while (pmd++, addr = next, addr != end);
]

36/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 22196
							output: 20
							thoughts: 56
						

Thoughts:
Okay, here's my thought process on that:

**Kernel Page Table Deallocation**

Alright, hang on a second. I'm thinking about memory management, specifically page tables. I remember `free_pte_range` - that's for freeing page table entries in *user* space. But what about kernel page tables? Where's the corresponding function to free those? I'm drawing a blank on the exact name.

Okay, let's get practical. I need to find the kernel-space counterpart to `free_pte_range`. My gut feeling is it would be called something similar - perhaps with "kernel" or "pagetable" in the name. So, I need to hunt down the function responsible for that. I need to search the kernel source code for something like `pagetable_free_kernel` or variations on that theme. And since this is core memory management, I'll start my search within the `mm/`, `kernel/`, and `arch/x86/` directories. Those are the most likely places it'll reside. Time to fire up the search tools!



37/2 2026/06/09 21:18 tool grepper
0m Args:
map[Expression:pagetable_free_kernel]

Results:
map[Output:include/linux/mm.h=3657=static inline void __pagetable_free(struct ptdesc *pt)
--
include/linux/mm.h-3664-#ifdef CONFIG_ASYNC_KERNEL_PGTABLE_FREE
include/linux/mm.h:3665:void pagetable_free_kernel(struct ptdesc *pt);
include/linux/mm.h-3666-#else
include/linux/mm.h:3667:static inline void pagetable_free_kernel(struct ptdesc *pt)
include/linux/mm.h-3668-{
--
include/linux/mm.h=3679=static inline void pagetable_free(struct ptdesc *pt)
--
include/linux/mm.h-3682-		ptdesc_clear_kernel(pt);
include/linux/mm.h:3683:		pagetable_free_kernel(pt);
include/linux/mm.h-3684-	} else {
--
mm/pgtable-generic.c=427=static void kernel_pgtable_work_func(struct work_struct *work)
--
mm/pgtable-generic.c-440-
mm/pgtable-generic.c:441:void pagetable_free_kernel(struct ptdesc *pt)
mm/pgtable-generic.c-442-{
]

38/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 22858
							output: 18
							thoughts: 97
						

Thoughts:
**Kernel Page Table Deallocation Deep Dive**

Okay, so I'm digging into how kernel page tables are freed in this system. I see that `pagetable_free` is the main entry point, and it calls `pagetable_free_kernel` if a check using `ptdesc_test_kernel(pt)` returns true. That's the key: if the page table is a kernel page table, the *actual* freeing is handled by `pagetable_free_kernel`.

Now, the obvious question is, where are we actually *using* `pagetable_free` to free kernel page tables? I need to understand the call flow. To figure that out, I think the best approach is to search the `mm/` directory for either `ptdesc_test_kernel` or `pagetable_free`. That should reveal all the places where this crucial function is involved in kernel page table management, and show how the free function is getting triggered. I'm hoping this will illuminate the higher-level logic and give me a clear picture of kernel memory deallocation. Let's see what the search uncovers.



39/2 2026/06/09 21:18 tool grepper
0m Args:
map[Expression:pagetable_free]

Results:
map[Output:arch/loongarch/include/asm/pgalloc.h=62=static inline pmd_t *pmd_alloc_one(struct mm_struct *mm, unsigned long address)
--
arch/loongarch/include/asm/pgalloc.h-71-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/loongarch/include/asm/pgalloc.h:72:		pagetable_free(ptdesc);
arch/loongarch/include/asm/pgalloc.h-73-		return NULL;
--
arch/m68k/include/asm/mcf_pgalloc.h=15=static inline pte_t *pte_alloc_one_kernel(struct mm_struct *mm)
--
arch/m68k/include/asm/mcf_pgalloc.h-22-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/m68k/include/asm/mcf_pgalloc.h:23:		pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-24-		return NULL;
--
arch/m68k/include/asm/mcf_pgalloc.h=39=static inline void __pte_free_tlb(struct mmu_gather *tlb, pgtable_t pgtable,
--
arch/m68k/include/asm/mcf_pgalloc.h-44-	pagetable_dtor(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h:45:	pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-46-}
--
arch/m68k/include/asm/mcf_pgalloc.h=48=static inline pgtable_t pte_alloc_one(struct mm_struct *mm)
--
arch/m68k/include/asm/mcf_pgalloc.h-55-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/m68k/include/asm/mcf_pgalloc.h:56:		pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-57-		return NULL;
--
arch/m68k/include/asm/mcf_pgalloc.h=64=static inline void pte_free(struct mm_struct *mm, pgtable_t pgtable)
--
arch/m68k/include/asm/mcf_pgalloc.h-68-	pagetable_dtor(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h:69:	pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-70-}
--
arch/mips/include/asm/pgalloc.h=55=static inline pmd_t *pmd_alloc_one(struct mm_struct *mm, unsigned long address)
--
arch/mips/include/asm/pgalloc.h-64-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/mips/include/asm/pgalloc.h:65:		pagetable_free(ptdesc);
arch/mips/include/asm/pgalloc.h-66-		return NULL;
--
arch/parisc/include/asm/pgalloc.h=32=static inline pmd_t *pmd_alloc_one(struct mm_struct *mm, unsigned long address)
--
arch/parisc/include/asm/pgalloc.h-42-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/parisc/include/asm/pgalloc.h:43:		pagetable_free(ptdesc);
arch/parisc/include/asm/pgalloc.h-44-		return NULL;
--
arch/powerpc/mm/book3s64/mmu_context.c=242=static void pmd_frag_destroy(void *pmd_frag)
--
arch/powerpc/mm/book3s64/mmu_context.c-252-		pagetable_dtor(ptdesc);
arch/powerpc/mm/book3s64/mmu_context.c:253:		pagetable_free(ptdesc);
arch/powerpc/mm/book3s64/mmu_context.c-254-	}
--
arch/powerpc/mm/book3s64/pgtable.c=392=static pmd_t *__alloc_for_pmdcache(struct mm_struct *mm)
--
arch/powerpc/mm/book3s64/pgtable.c-403-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/powerpc/mm/book3s64/pgtable.c:404:		pagetable_free(ptdesc);
arch/powerpc/mm/book3s64/pgtable.c-405-		return NULL;
--
arch/powerpc/mm/book3s64/pgtable.c=444=void pmd_fragment_free(unsigned long *pmd)
--
arch/powerpc/mm/book3s64/pgtable.c-453-		pagetable_dtor(ptdesc);
arch/powerpc/mm/book3s64/pgtable.c:454:		pagetable_free(ptdesc);
arch/powerpc/mm/book3s64/pgtable.c-455-	}
--
arch/powerpc/mm/pgtable-frag.c=18=void pte_frag_destroy(void *pte_frag)
--
arch/powerpc/mm/pgtable-frag.c-29-		pagetable_dtor(ptdesc);
arch/powerpc/mm/pgtable-frag.c:30:		pagetable_free(ptdesc);
arch/powerpc/mm/pgtable-frag.c-31-	}
--
arch/powerpc/mm/pgtable-frag.c=56=static pte_t *__alloc_for_ptecache(struct mm_struct *mm, int kernel)
--
arch/powerpc/mm/pgtable-frag.c-68-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/powerpc/mm/pgtable-frag.c:69:		pagetable_free(ptdesc);
arch/powerpc/mm/pgtable-frag.c-70-		return NULL;
--
arch/powerpc/mm/pgtable-frag.c=108=static void pte_free_now(struct rcu_head *head)
--
arch/powerpc/mm/pgtable-frag.c-113-	pagetable_dtor(ptdesc);
arch/powerpc/mm/pgtable-frag.c:114:	pagetable_free(ptdesc);
arch/powerpc/mm/pgtable-frag.c-115-}
--
arch/riscv/mm/init.c=1491=static void __meminit free_pte_table(pte_t *pte_start, pmd_t *pmd)
--
arch/riscv/mm/init.c-1507-	else
arch/riscv/mm/init.c:1508:		pagetable_free(ptdesc);
arch/riscv/mm/init.c-1509-	pmd_clear(pmd);
--
arch/riscv/mm/init.c=1512=static void __meminit free_pmd_table(pmd_t *pmd_start, pud_t *pud, bool is_vmemmap)
--
arch/riscv/mm/init.c-1529-	else
arch/riscv/mm/init.c:1530:		pagetable_free(ptdesc);
arch/riscv/mm/init.c-1531-	pud_clear(pud);
--
arch/s390/mm/pgalloc.c=33=void crst_table_free(struct mm_struct *mm, unsigned long *table)
--
arch/s390/mm/pgalloc.c-36-		return;
arch/s390/mm/pgalloc.c:37:	pagetable_free(virt_to_ptdesc(table));
arch/s390/mm/pgalloc.c-38-}
--
arch/s390/mm/pgalloc.c=117=unsigned long *page_table_alloc_noprof(struct mm_struct *mm)
--
arch/s390/mm/pgalloc.c-128-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/s390/mm/pgalloc.c:129:		pagetable_free(ptdesc);
arch/s390/mm/pgalloc.c-130-		return NULL;
--
arch/s390/mm/pgalloc.c=199=static void base_crst_free(unsigned long *table)
--
arch/s390/mm/pgalloc.c-202-		return;
arch/s390/mm/pgalloc.c:203:	pagetable_free(virt_to_ptdesc(table));
arch/s390/mm/pgalloc.c-204-}
--
arch/sparc/mm/init_64.c=2847=static pte_t *__pte_alloc_one(struct mm_struct *mm)
--
arch/sparc/mm/init_64.c-2853-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/sparc/mm/init_64.c:2854:		pagetable_free(ptdesc);
arch/sparc/mm/init_64.c-2855-		return NULL;
--
arch/sparc/mm/init_64.c=2870=static void __pte_free(pgtable_t pte)
--
arch/sparc/mm/init_64.c-2874-	pagetable_dtor(ptdesc);
arch/sparc/mm/init_64.c:2875:	pagetable_free(ptdesc);
arch/sparc/mm/init_64.c-2876-}
--
arch/x86/mm/init_64.c=1009=static void __meminit free_pagetable(struct page *page, int order)
--
arch/x86/mm/init_64.c-1026-	} else {
arch/x86/mm/init_64.c:1027:		pagetable_free(page_ptdesc(page));
arch/x86/mm/init_64.c-1028-	}
--
arch/x86/mm/pat/set_memory.c=413=static void cpa_collapse_large_pages(struct cpa_data *cpa)
--
arch/x86/mm/pat/set_memory.c-440-		list_del(&ptdesc->pt_list);
arch/x86/mm/pat/set_memory.c:441:		pagetable_free(ptdesc);
arch/x86/mm/pat/set_memory.c-442-	}
--
arch/x86/mm/pat/set_memory.c=1233=static int split_large_page(struct cpa_data *cpa, pte_t *kpte,
--
arch/x86/mm/pat/set_memory.c-1246-	if (__split_large_page(cpa, kpte, address, ptdesc))
arch/x86/mm/pat/set_memory.c:1247:		pagetable_free(ptdesc);
arch/x86/mm/pat/set_memory.c-1248-
--
arch/x86/mm/pgtable.c=161=static void free_pmds(struct mm_struct *mm, pmd_t *pmds[], int count)
--
arch/x86/mm/pgtable.c-170-			pagetable_dtor(ptdesc);
arch/x86/mm/pgtable.c:171:			pagetable_free(ptdesc);
arch/x86/mm/pgtable.c-172-			mm_dec_nr_pmds(mm);
--
arch/x86/mm/pgtable.c=176=static int preallocate_pmds(struct mm_struct *mm, pmd_t *pmds[], int count)
--
arch/x86/mm/pgtable.c-192-		if (ptdesc && !pagetable_pmd_ctor(mm, ptdesc)) {
arch/x86/mm/pgtable.c:193:			pagetable_free(ptdesc);
arch/x86/mm/pgtable.c-194-			ptdesc = NULL;
--
drivers/gpu/drm/msm/msm_iommu.c=381=msm_iommu_pagetable_alloc_pt(void *cookie, size_t size, gfp_t gfp)
--
drivers/gpu/drm/msm/msm_iommu.c-418-/**
drivers/gpu/drm/msm/msm_iommu.c:419: * msm_iommu_pagetable_free_pt() - Custom page table free function
drivers/gpu/drm/msm/msm_iommu.c-420- * @cookie: Cookie passed at page table allocation time.
--
drivers/gpu/drm/msm/msm_iommu.c=425=static void
drivers/gpu/drm/msm/msm_iommu.c:426:msm_iommu_pagetable_free_pt(void *cookie, void *data, size_t size)
drivers/gpu/drm/msm/msm_iommu.c-427-{
--
drivers/gpu/drm/msm/msm_iommu.c=504=struct msm_mmu *msm_iommu_pagetable_create(struct msm_mmu *parent, bool kernel_managed)
--
drivers/gpu/drm/msm/msm_iommu.c-547-		ttbr0_cfg.alloc = msm_iommu_pagetable_alloc_pt;
drivers/gpu/drm/msm/msm_iommu.c:548:		ttbr0_cfg.free  = msm_iommu_pagetable_free_pt;
drivers/gpu/drm/msm/msm_iommu.c-549-
--
include/asm-generic/pgalloc.h=19=static inline pte_t *__pte_alloc_one_kernel_noprof(struct mm_struct *mm)
--
include/asm-generic/pgalloc.h-25-	if (!pagetable_pte_ctor(mm, ptdesc)) {
include/asm-generic/pgalloc.h:26:		pagetable_free(ptdesc);
include/asm-generic/pgalloc.h-27-		return NULL;
--
include/asm-generic/pgalloc.h=72=static inline pgtable_t __pte_alloc_one_noprof(struct mm_struct *mm, gfp_t gfp)
--
include/asm-generic/pgalloc.h-79-	if (!pagetable_pte_ctor(mm, ptdesc)) {
include/asm-generic/pgalloc.h:80:		pagetable_free(ptdesc);
include/asm-generic/pgalloc.h-81-		return NULL;
--
include/asm-generic/pgalloc.h=136=static inline pmd_t *pmd_alloc_one_noprof(struct mm_struct *mm, unsigned long addr)
--
include/asm-generic/pgalloc.h-146-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
include/asm-generic/pgalloc.h:147:		pagetable_free(ptdesc);
include/asm-generic/pgalloc.h-148-		return NULL;
--
include/linux/mm.h=3649=static inline struct ptdesc *pagetable_alloc_noprof(gfp_t gfp, unsigned int order)
--
include/linux/mm.h-3656-
include/linux/mm.h:3657:static inline void __pagetable_free(struct ptdesc *pt)
include/linux/mm.h-3658-{
--
include/linux/mm.h-3664-#ifdef CONFIG_ASYNC_KERNEL_PGTABLE_FREE
include/linux/mm.h:3665:void pagetable_free_kernel(struct ptdesc *pt);
include/linux/mm.h-3666-#else
include/linux/mm.h:3667:static inline void pagetable_free_kernel(struct ptdesc *pt)
include/linux/mm.h-3668-{
include/linux/mm.h:3669:	__pagetable_free(pt);
include/linux/mm.h-3670-}
--
include/linux/mm.h-3672-/**
include/linux/mm.h:3673: * pagetable_free - Free pagetables
include/linux/mm.h-3674- * @pt:	The page table descriptor
include/linux/mm.h-3675- *
include/linux/mm.h:3676: * pagetable_free frees the memory of all page tables described by a page
include/linux/mm.h-3677- * table descriptor and the memory for the descriptor itself.
include/linux/mm.h-3678- */
include/linux/mm.h:3679:static inline void pagetable_free(struct ptdesc *pt)
include/linux/mm.h-3680-{
--
include/linux/mm.h-3682-		ptdesc_clear_kernel(pt);
include/linux/mm.h:3683:		pagetable_free_kernel(pt);
include/linux/mm.h-3684-	} else {
include/linux/mm.h:3685:		__pagetable_free(pt);
include/linux/mm.h-3686-	}
--
include/linux/mm.h=3781=static inline void pagetable_dtor_free(struct ptdesc *ptdesc)
--
include/linux/mm.h-3783-	pagetable_dtor(ptdesc);
include/linux/mm.h:3784:	pagetable_free(ptdesc);
include/linux/mm.h-3785-}
--
mm/pgtable-generic.c=427=static void kernel_pgtable_work_func(struct work_struct *work)
--
mm/pgtable-generic.c-437-	list_for_each_entry_safe(pt, next, &page_list, pt_list)
mm/pgtable-generic.c:438:		__pagetable_free(pt);
mm/pgtable-generic.c-439-}
mm/pgtable-generic.c-440-
mm/pgtable-generic.c:441:void pagetable_free_kernel(struct ptdesc *pt)
mm/pgtable-generic.c-442-{
]

40/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 28131
							output: 19
							thoughts: 41
						

Thoughts:
Here's my thought process, summarized as you requested:

**Deconstructing Memory Management**

Okay, so I'm digging into this memory management code, and I've hit a key point. It looks like `pagetable_dtor_free` is the function responsible for cleaning up page tables before they're destroyed. Hmm, and it calls `pagetable_free`. I know the naming conventions, but let's take a closer look and make sure there isn't some interaction that I need to be aware of. I need to understand the relationship and how both of these work, and which calls which to ensure there aren't any weird memory leaks or double-frees.

To drill down, I'm going to search for instances of `pagetable_dtor_free` and `pte_free_kernel` - that latter one is likely to be lower-level and related to freeing page table entries. I'll need to see where these functions are called, and *more importantly*, how they interact with each other. I'm looking for the overall flow of memory deallocation in this context. Time to pull up the IDE and start grepping the source!



41/2 2026/06/09 21:18 tool grepper
0m Args:
map[Expression:pte_free_kernel]

Results:
map[Output:arch/arm/mm/ioremap.c=173=static void unmap_area_sections(unsigned long virt, unsigned long size)
--
arch/arm/mm/ioremap.c-195-			if ((pmd_val(pmd) & PMD_TYPE_MASK) == PMD_TYPE_TABLE)
arch/arm/mm/ioremap.c:196:				pte_free_kernel(&init_mm, pmd_page_vaddr(pmd));
arch/arm/mm/ioremap.c-197-		}
--
arch/arm64/mm/mmu.c=1867=static int __pmd_free_pte_page(pmd_t *pmdp, unsigned long addr,
--
arch/arm64/mm/mmu.c-1888-
arch/arm64/mm/mmu.c:1889:	pte_free_kernel(NULL, table);
arch/arm64/mm/mmu.c-1890-	return 1;
--
arch/m68k/include/asm/mcf_pgalloc.h-7-
arch/m68k/include/asm/mcf_pgalloc.h:8:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/m68k/include/asm/mcf_pgalloc.h-9-{
--
arch/m68k/include/asm/motorola_pgalloc.h=27=static inline pte_t *pte_alloc_one_kernel(struct mm_struct *mm)
--
arch/m68k/include/asm/motorola_pgalloc.h-31-
arch/m68k/include/asm/motorola_pgalloc.h:32:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/m68k/include/asm/motorola_pgalloc.h-33-{
--
arch/mips/kvm/mmu.c=171=static bool kvm_mips_flush_gpa_pmd(pmd_t *pmd, unsigned long start_gpa,
--
arch/mips/kvm/mmu.c-190-			pmd_clear(pmd + i);
arch/mips/kvm/mmu.c:191:			pte_free_kernel(NULL, pte);
arch/mips/kvm/mmu.c-192-		} else {
--
arch/powerpc/include/asm/pgalloc.h=36=void pte_fragment_free(unsigned long *table, int kernel);
arch/powerpc/include/asm/pgalloc.h-37-
arch/powerpc/include/asm/pgalloc.h:38:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/powerpc/include/asm/pgalloc.h-39-{
--
arch/powerpc/mm/book3s64/radix_pgtable.c=693=static void free_pte_table(pte_t *pte_start, pmd_t *pmd)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-703-
arch/powerpc/mm/book3s64/radix_pgtable.c:704:	pte_free_kernel(&init_mm, pte_start);
arch/powerpc/mm/book3s64/radix_pgtable.c-705-	pmd_clear(pmd);
--
arch/powerpc/mm/book3s64/radix_pgtable.c=1638=int pud_free_pmd_page(pud_t *pud, unsigned long addr)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-1652-
arch/powerpc/mm/book3s64/radix_pgtable.c:1653:			pte_free_kernel(&init_mm, pte);
arch/powerpc/mm/book3s64/radix_pgtable.c-1654-		}
--
arch/powerpc/mm/book3s64/radix_pgtable.c=1685=int pmd_free_pte_page(pmd_t *pmd, unsigned long addr)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-1693-
arch/powerpc/mm/book3s64/radix_pgtable.c:1694:	pte_free_kernel(&init_mm, pte);
arch/powerpc/mm/book3s64/radix_pgtable.c-1695-
--
arch/riscv/mm/pgtable.c=87=int pud_free_pmd_page(pud_t *pud, unsigned long addr)
--
arch/riscv/mm/pgtable.c-99-
arch/riscv/mm/pgtable.c:100:			pte_free_kernel(NULL, pte);
arch/riscv/mm/pgtable.c-101-		}
--
arch/riscv/mm/pgtable.c=125=int pmd_free_pte_page(pmd_t *pmd, unsigned long addr)
--
arch/riscv/mm/pgtable.c-131-	flush_tlb_kernel_range(addr, addr + PMD_SIZE);
arch/riscv/mm/pgtable.c:132:	pte_free_kernel(NULL, pte);
arch/riscv/mm/pgtable.c-133-	return 1;
--
arch/s390/include/asm/pgalloc.h=151=static inline void pmd_populate(struct mm_struct *mm,
--
arch/s390/include/asm/pgalloc.h-164-
arch/s390/include/asm/pgalloc.h:165:#define pte_free_kernel(mm, pte) page_table_free(mm, (unsigned long *) pte)
arch/s390/include/asm/pgalloc.h-166-#define pte_free(mm, pte) page_table_free(mm, (unsigned long *) pte)
--
arch/sparc/include/asm/pgalloc_32.h=67=static inline void free_pte_fast(pte_t *pte)
--
arch/sparc/include/asm/pgalloc_32.h-71-
arch/sparc/include/asm/pgalloc_32.h:72:#define pte_free_kernel(mm, pte)	free_pte_fast(pte)
arch/sparc/include/asm/pgalloc_32.h-73-
--
arch/sparc/include/asm/pgalloc_64.h=64=pgtable_t pte_alloc_one(struct mm_struct *mm);
arch/sparc/include/asm/pgalloc_64.h:65:void pte_free_kernel(struct mm_struct *mm, pte_t *pte);
arch/sparc/include/asm/pgalloc_64.h-66-void pte_free(struct mm_struct *mm, pgtable_t ptepage);
--
arch/sparc/mm/init_64.c=2870=static void __pte_free(pgtable_t pte)
--
arch/sparc/mm/init_64.c-2877-
arch/sparc/mm/init_64.c:2878:void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/sparc/mm/init_64.c-2879-{
--
arch/x86/mm/pat/set_memory.c=1410=static bool try_to_free_pte_page(pte_t *pte)
--
arch/x86/mm/pat/set_memory.c-1417-
arch/x86/mm/pat/set_memory.c:1418:	pte_free_kernel(&init_mm, pte);
arch/x86/mm/pat/set_memory.c-1419-	return true;
--
include/asm-generic/pgalloc.h=43=static inline pte_t *pte_alloc_one_kernel_noprof(struct mm_struct *mm)
--
include/asm-generic/pgalloc.h-50-/**
include/asm-generic/pgalloc.h:51: * pte_free_kernel - free PTE-level kernel page table memory
include/asm-generic/pgalloc.h-52- * @mm: the mm_struct of the current context
--
include/asm-generic/pgalloc.h-54- */
include/asm-generic/pgalloc.h:55:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
include/asm-generic/pgalloc.h-56-{
--
mm/hugetlb_vmemmap.c=53=static int vmemmap_split_pmd(pmd_t *pmd, struct page *head, unsigned long start,
--
mm/hugetlb_vmemmap.c-91-	} else {
mm/hugetlb_vmemmap.c:92:		pte_free_kernel(&init_mm, pgtable);
mm/hugetlb_vmemmap.c-93-	}
--
mm/kasan/init.c=284=static void kasan_free_pte(pte_t *pte_start, pmd_t *pmd)
--
mm/kasan/init.c-294-
mm/kasan/init.c:295:	pte_free_kernel(&init_mm, pte_start);
mm/kasan/init.c-296-	pmd_clear(pmd);
--
mm/memory.c=463=int __pte_alloc_kernel(pmd_t *pmd)
--
mm/memory.c-476-	if (new)
mm/memory.c:477:		pte_free_kernel(&init_mm, new);
mm/memory.c-478-	return 0;
]

42/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 31037
							output: 39
							thoughts: 40
						

Thoughts:
Okay, here's my take on those thoughts, framed as an expert's internal monologue:

**Kernel Page Table Deallocation Deep Dive**

Alright, let's see... I'm a bit rusty on the specific kernel page table functions, but the question that immediately pops into my head is: when `pte_free_kernel` is invoked, exactly *what* is it calling to release the allocated page tables? Is it calling the generic `pagetable_free`, or the kernel-specific variant, `pagetable_free_kernel`? I need to be sure I understand the abstraction layers and memory management in play. The details here are critical when debugging a memory leak or an unexpected crash. If I'm working on a system with a custom page table implementation, this distinction is even more important. I need to refresh myself on how the architecture handles deallocation in the generic case, and whether it's delegating to `pagetable_free_kernel`, or if the architecture is calling it's custom version. I'd better double check the include files as a starting point.



43/2 2026/06/09 21:18 tool codesearch-definition-source
0m Args:
map[ContextFile:include/asm-generic/pgalloc.h Name:pte_free_kernel]

Results:
map[SourceCode:  50:	/**
  51:	 * pte_free_kernel - free PTE-level kernel page table memory
  52:	 * @mm: the mm_struct of the current context
  53:	 * @pte: pointer to the memory containing the page table
  54:	 */
  55:	static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
  56:	{
  57:		pagetable_dtor_free(virt_to_ptdesc(pte));
  58:	}
 SourceFile:include/asm-generic/pgalloc.h]

44/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 31516
							output: 19
							thoughts: 484
						

Thoughts:
**Tracing Page Table Deallocation in the Kernel**

Okay, so I'm diving into how these page tables are actually freed. I see that `pagetable_dtor_free` calls `pagetable_free`, which is a key starting point. I need to understand the whole call path. I'm trying to figure out where `pte_free_kernel` is called, specifically for vmalloc. My first instinct is to look in `mm/vmalloc.c`, and I know there's `free_vmap_area_noflush` in there, but I don't think that's it. Let's see... does `vunmap_range` handle the page table freeing? No.  Hmm, is `free_empty_tables` in `mm/vmalloc.c` related to it? No, that's not it either.

Alright, the bug report...that's helpful. This bug report shows `kernel_pgtable_work_func` being involved. Ah, so this confirms that `kernel_pgtable_work_func` is responsible for ultimately freeing the page tables in this scenario. Now, where does that come from? It's scheduled by `pagetable_free_kernel`. Got it. And `pagetable_free_kernel` is called by `pagetable_free` *when* `ptdesc_test_kernel(pt)` is true. That makes sense. And `pagetable_free` is called by `pagetable_dtor_free`. Okay, and finally, `pagetable_dtor_free` is called by `pte_free_kernel`.

So, the critical missing link is: what actually calls `pte_free_kernel`? I need to find that callsite. Let's search `mm/vmalloc.c`, `mm/memory.c`, `mm/ptdump.c`, and `mm/mmu_gather.c`. I'll have to comb through those files.



45/2 2026/06/09 21:18 tool grepper
0m Args:
map[Expression:pte_free_kernel]

Results:
map[Output:arch/arm/mm/ioremap.c=173=static void unmap_area_sections(unsigned long virt, unsigned long size)
--
arch/arm/mm/ioremap.c-195-			if ((pmd_val(pmd) & PMD_TYPE_MASK) == PMD_TYPE_TABLE)
arch/arm/mm/ioremap.c:196:				pte_free_kernel(&init_mm, pmd_page_vaddr(pmd));
arch/arm/mm/ioremap.c-197-		}
--
arch/arm64/mm/mmu.c=1867=static int __pmd_free_pte_page(pmd_t *pmdp, unsigned long addr,
--
arch/arm64/mm/mmu.c-1888-
arch/arm64/mm/mmu.c:1889:	pte_free_kernel(NULL, table);
arch/arm64/mm/mmu.c-1890-	return 1;
--
arch/m68k/include/asm/mcf_pgalloc.h-7-
arch/m68k/include/asm/mcf_pgalloc.h:8:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/m68k/include/asm/mcf_pgalloc.h-9-{
--
arch/m68k/include/asm/motorola_pgalloc.h=27=static inline pte_t *pte_alloc_one_kernel(struct mm_struct *mm)
--
arch/m68k/include/asm/motorola_pgalloc.h-31-
arch/m68k/include/asm/motorola_pgalloc.h:32:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/m68k/include/asm/motorola_pgalloc.h-33-{
--
arch/mips/kvm/mmu.c=171=static bool kvm_mips_flush_gpa_pmd(pmd_t *pmd, unsigned long start_gpa,
--
arch/mips/kvm/mmu.c-190-			pmd_clear(pmd + i);
arch/mips/kvm/mmu.c:191:			pte_free_kernel(NULL, pte);
arch/mips/kvm/mmu.c-192-		} else {
--
arch/powerpc/include/asm/pgalloc.h=36=void pte_fragment_free(unsigned long *table, int kernel);
arch/powerpc/include/asm/pgalloc.h-37-
arch/powerpc/include/asm/pgalloc.h:38:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/powerpc/include/asm/pgalloc.h-39-{
--
arch/powerpc/mm/book3s64/radix_pgtable.c=693=static void free_pte_table(pte_t *pte_start, pmd_t *pmd)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-703-
arch/powerpc/mm/book3s64/radix_pgtable.c:704:	pte_free_kernel(&init_mm, pte_start);
arch/powerpc/mm/book3s64/radix_pgtable.c-705-	pmd_clear(pmd);
--
arch/powerpc/mm/book3s64/radix_pgtable.c=1638=int pud_free_pmd_page(pud_t *pud, unsigned long addr)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-1652-
arch/powerpc/mm/book3s64/radix_pgtable.c:1653:			pte_free_kernel(&init_mm, pte);
arch/powerpc/mm/book3s64/radix_pgtable.c-1654-		}
--
arch/powerpc/mm/book3s64/radix_pgtable.c=1685=int pmd_free_pte_page(pmd_t *pmd, unsigned long addr)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-1693-
arch/powerpc/mm/book3s64/radix_pgtable.c:1694:	pte_free_kernel(&init_mm, pte);
arch/powerpc/mm/book3s64/radix_pgtable.c-1695-
--
arch/riscv/mm/pgtable.c=87=int pud_free_pmd_page(pud_t *pud, unsigned long addr)
--
arch/riscv/mm/pgtable.c-99-
arch/riscv/mm/pgtable.c:100:			pte_free_kernel(NULL, pte);
arch/riscv/mm/pgtable.c-101-		}
--
arch/riscv/mm/pgtable.c=125=int pmd_free_pte_page(pmd_t *pmd, unsigned long addr)
--
arch/riscv/mm/pgtable.c-131-	flush_tlb_kernel_range(addr, addr + PMD_SIZE);
arch/riscv/mm/pgtable.c:132:	pte_free_kernel(NULL, pte);
arch/riscv/mm/pgtable.c-133-	return 1;
--
arch/s390/include/asm/pgalloc.h=151=static inline void pmd_populate(struct mm_struct *mm,
--
arch/s390/include/asm/pgalloc.h-164-
arch/s390/include/asm/pgalloc.h:165:#define pte_free_kernel(mm, pte) page_table_free(mm, (unsigned long *) pte)
arch/s390/include/asm/pgalloc.h-166-#define pte_free(mm, pte) page_table_free(mm, (unsigned long *) pte)
--
arch/sparc/include/asm/pgalloc_32.h=67=static inline void free_pte_fast(pte_t *pte)
--
arch/sparc/include/asm/pgalloc_32.h-71-
arch/sparc/include/asm/pgalloc_32.h:72:#define pte_free_kernel(mm, pte)	free_pte_fast(pte)
arch/sparc/include/asm/pgalloc_32.h-73-
--
arch/sparc/include/asm/pgalloc_64.h=64=pgtable_t pte_alloc_one(struct mm_struct *mm);
arch/sparc/include/asm/pgalloc_64.h:65:void pte_free_kernel(struct mm_struct *mm, pte_t *pte);
arch/sparc/include/asm/pgalloc_64.h-66-void pte_free(struct mm_struct *mm, pgtable_t ptepage);
--
arch/sparc/mm/init_64.c=2870=static void __pte_free(pgtable_t pte)
--
arch/sparc/mm/init_64.c-2877-
arch/sparc/mm/init_64.c:2878:void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/sparc/mm/init_64.c-2879-{
--
arch/x86/mm/pat/set_memory.c=1410=static bool try_to_free_pte_page(pte_t *pte)
--
arch/x86/mm/pat/set_memory.c-1417-
arch/x86/mm/pat/set_memory.c:1418:	pte_free_kernel(&init_mm, pte);
arch/x86/mm/pat/set_memory.c-1419-	return true;
--
include/asm-generic/pgalloc.h=43=static inline pte_t *pte_alloc_one_kernel_noprof(struct mm_struct *mm)
--
include/asm-generic/pgalloc.h-50-/**
include/asm-generic/pgalloc.h:51: * pte_free_kernel - free PTE-level kernel page table memory
include/asm-generic/pgalloc.h-52- * @mm: the mm_struct of the current context
--
include/asm-generic/pgalloc.h-54- */
include/asm-generic/pgalloc.h:55:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
include/asm-generic/pgalloc.h-56-{
--
mm/hugetlb_vmemmap.c=53=static int vmemmap_split_pmd(pmd_t *pmd, struct page *head, unsigned long start,
--
mm/hugetlb_vmemmap.c-91-	} else {
mm/hugetlb_vmemmap.c:92:		pte_free_kernel(&init_mm, pgtable);
mm/hugetlb_vmemmap.c-93-	}
--
mm/kasan/init.c=284=static void kasan_free_pte(pte_t *pte_start, pmd_t *pmd)
--
mm/kasan/init.c-294-
mm/kasan/init.c:295:	pte_free_kernel(&init_mm, pte_start);
mm/kasan/init.c-296-	pmd_clear(pmd);
--
mm/memory.c=463=int __pte_alloc_kernel(pmd_t *pmd)
--
mm/memory.c-476-	if (new)
mm/memory.c:477:		pte_free_kernel(&init_mm, new);
mm/memory.c-478-	return 0;
]

46/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 35042
							output: 19
							thoughts: 198
						

Thoughts:
**VMalloc Page Table Management: A Deep Dive**

Okay, so I'm looking at this `free_vmap_area_noflush` function, and something's bugging me. It's supposed to free vmalloc areas, right? But wait a minute, it doesn't actually *free* page tables. It just...unmaps the virtual addresses.  Now, I recall that `vmap_pages_range_noflush` *does* allocate page tables using `__pte_alloc_kernel`.  And, if that allocation *fails*, it cleverly frees the partially allocated table immediately. Good. But where are those vmalloc page tables freed *after* successful allocation?

I know `free_vmap_area_noflush` exists in `mm/vmalloc.c`, and it calls `vunmap_range_noflush`. But then, `vunmap_range_noflush` only clears the PTEs; it *doesn't* actually deallocate the page tables themselves. So... are vmalloc page tables *never* freed? That can't be right!

Okay, time to dig deeper. There's probably something I'm missing. I need to refresh my memory, is there a `free_empty_tables` or a `free_pgd_range` function or something similar in `mm/vmalloc.c` that's responsible for the cleanup? I'm going to search for those exact function names within `mm/vmalloc.c` and figure out what's really happening.



47/2 2026/06/09 21:18 tool grepper
0m Args:
map[Expression:free_.*_range]

Results:
map[Output:
Full output is too long, showing 500 out of 1079 lines.
Use more precise expression if possible.

.clang-format=71=ForEachMacros:
--
.clang-format-297-  - 'for_each_file_lock'
.clang-format:298:  - 'for_each_free_mem_range'
.clang-format:299:  - 'for_each_free_mem_range_reverse'
.clang-format-300-  - 'for_each_func_rsrc'
--
arch/arm/include/asm/pgtable.h=49=extern void __pgd_error(const char *file, int line, pgd_t);
--
arch/arm/include/asm/pgtable.h-63- * Use TASK_SIZE as the ceiling argument for free_pgtables() and
arch/arm/include/asm/pgtable.h:64: * free_pgd_range() to avoid freeing the modules pmd when LPAE is enabled (pmd
arch/arm/include/asm/pgtable.h-65- * page shared between user and kernel).
--
arch/arm64/include/asm/kexec.h=86=extern void crash_post_resume(void);
arch/arm64/include/asm/kexec.h-87-
arch/arm64/include/asm/kexec.h:88:void crash_free_reserved_phys_range(unsigned long begin, unsigned long end);
arch/arm64/include/asm/kexec.h:89:#define crash_free_reserved_phys_range crash_free_reserved_phys_range
arch/arm64/include/asm/kexec.h-90-#else
--
arch/arm64/kernel/machine_kexec.c=255=bool crash_is_nosave(unsigned long pfn)
--
arch/arm64/kernel/machine_kexec.c-285-
arch/arm64/kernel/machine_kexec.c:286:void crash_free_reserved_phys_range(unsigned long begin, unsigned long end)
arch/arm64/kernel/machine_kexec.c-287-{
--
arch/arm64/mm/mmu.c=1420=void __init paging_init(void)
--
arch/arm64/mm/mmu.c-1430-#ifdef CONFIG_MEMORY_HOTPLUG
arch/arm64/mm/mmu.c:1431:static void free_hotplug_page_range(struct page *page, size_t size,
arch/arm64/mm/mmu.c-1432-				    struct vmem_altmap *altmap)
--
arch/arm64/mm/mmu.c=1442=static void free_hotplug_pgtable_page(struct page *page)
arch/arm64/mm/mmu.c-1443-{
arch/arm64/mm/mmu.c:1444:	free_hotplug_page_range(page, PAGE_SIZE, NULL);
arch/arm64/mm/mmu.c-1445-}
--
arch/arm64/mm/mmu.c=1466=static void unmap_hotplug_pte_range(pmd_t *pmdp, unsigned long addr,
--
arch/arm64/mm/mmu.c-1483-			flush_tlb_kernel_range(addr, addr + PAGE_SIZE);
arch/arm64/mm/mmu.c:1484:			free_hotplug_page_range(pte_page(pte),
arch/arm64/mm/mmu.c-1485-						PAGE_SIZE, altmap);
--
arch/arm64/mm/mmu.c=1491=static void unmap_hotplug_pmd_range(pud_t *pudp, unsigned long addr,
--
arch/arm64/mm/mmu.c-1511-				flush_tlb_kernel_range(addr, addr + PMD_SIZE);
arch/arm64/mm/mmu.c:1512:				free_hotplug_page_range(pmd_page(pmd),
arch/arm64/mm/mmu.c-1513-							PMD_SIZE, altmap);
--
arch/arm64/mm/mmu.c=1523=static void unmap_hotplug_pud_range(p4d_t *p4dp, unsigned long addr,
--
arch/arm64/mm/mmu.c-1541-				flush_tlb_kernel_range(addr, addr + PUD_SIZE);
arch/arm64/mm/mmu.c:1542:				free_hotplug_page_range(pud_page(pud),
arch/arm64/mm/mmu.c-1543-							PUD_SIZE, altmap);
--
arch/arm64/mm/mmu.c=2109=static bool can_unmap_without_split(unsigned long pfn, unsigned long nr_pages)
--
arch/arm64/mm/mmu.c-2142- * In future if and when boot memory could be removed, this notifier
arch/arm64/mm/mmu.c:2143: * should be dropped and free_hotplug_page_range() should handle any
arch/arm64/mm/mmu.c-2144- * reserved pages allocated during boot.
--
arch/powerpc/include/asm/kexec.h=175=bool is_kdump_kernel(void);
--
arch/powerpc/include/asm/kexec.h-177-#if defined(CONFIG_PPC_RTAS)
arch/powerpc/include/asm/kexec.h:178:void crash_free_reserved_phys_range(unsigned long begin, unsigned long end);
arch/powerpc/include/asm/kexec.h:179:#define crash_free_reserved_phys_range crash_free_reserved_phys_range
arch/powerpc/include/asm/kexec.h-180-#endif /* CONFIG_PPC_RTAS */
--
arch/powerpc/kernel/crash_dump.c=105=EXPORT_SYMBOL_GPL(is_kdump_kernel);
--
arch/powerpc/kernel/crash_dump.c-111- */
arch/powerpc/kernel/crash_dump.c:112:void crash_free_reserved_phys_range(unsigned long begin, unsigned long end)
arch/powerpc/kernel/crash_dump.c-113-{
--
arch/powerpc/kernel/fadump.c=518=static u64 __init fadump_locate_reserve_mem(u64 base, u64 size)
--
arch/powerpc/kernel/fadump.c-525-	mrngs = reserved_mrange_info.mem_ranges;
arch/powerpc/kernel/fadump.c:526:	for_each_free_mem_range(i, NUMA_NO_NODE, MEMBLOCK_NONE,
arch/powerpc/kernel/fadump.c-527-				&mstart, &mend, NULL) {
--
arch/powerpc/kernel/fadump.c=805=void fadump_free_cpu_notes_buf(void)
--
arch/powerpc/kernel/fadump.c-815-
arch/powerpc/kernel/fadump.c:816:static void fadump_free_mem_ranges(struct fadump_mrange_info *mrange_info)
arch/powerpc/kernel/fadump.c-817-{
--
arch/powerpc/kernel/fadump.c=832=static int fadump_alloc_mem_ranges(struct fadump_mrange_info *mrange_info)
--
arch/powerpc/kernel/fadump.c-844-		       mrange_info->name);
arch/powerpc/kernel/fadump.c:845:		fadump_free_mem_ranges(mrange_info);
arch/powerpc/kernel/fadump.c-846-		return -ENOMEM;
--
arch/powerpc/lib/code-patching.c=142=static void put_patching_mm(struct mm_struct *mm, unsigned long patching_addr)
--
arch/powerpc/lib/code-patching.c-146-	tlb_gather_mmu(&tlb, mm);
arch/powerpc/lib/code-patching.c:147:	free_pgd_range(&tlb, patching_addr, patching_addr + PAGE_SIZE, 0, 0);
arch/powerpc/lib/code-patching.c-148-	mmput(mm);
--
arch/powerpc/platforms/powernv/memtrace.c=197=static int memtrace_free(int nid, u64 start, u64 size)
--
arch/powerpc/platforms/powernv/memtrace.c-211-
arch/powerpc/platforms/powernv/memtrace.c:212:	free_contig_range(start_pfn, nr_pages);
arch/powerpc/platforms/powernv/memtrace.c-213-	return 0;
--
arch/s390/include/asm/kexec.h=86=extern const struct kexec_file_ops s390_kexec_elf_ops;
--
arch/s390/include/asm/kexec.h-88-#ifdef CONFIG_CRASH_DUMP
arch/s390/include/asm/kexec.h:89:void crash_free_reserved_phys_range(unsigned long begin, unsigned long end);
arch/s390/include/asm/kexec.h:90:#define crash_free_reserved_phys_range crash_free_reserved_phys_range
arch/s390/include/asm/kexec.h-91-
--
arch/s390/kernel/machine_kexec.c=124=static bool kdump_csum_valid(struct kimage *image)
--
arch/s390/kernel/machine_kexec.c-138-
arch/s390/kernel/machine_kexec.c:139:void crash_free_reserved_phys_range(unsigned long begin, unsigned long end)
arch/s390/kernel/machine_kexec.c-140-{
--
arch/x86/kernel/check.c=92=void __init setup_bios_corruption_check(void)
--
arch/x86/kernel/check.c-114-
arch/x86/kernel/check.c:115:	for_each_free_mem_range(i, NUMA_NO_NODE, MEMBLOCK_NONE, &start, &end,
arch/x86/kernel/check.c-116-				NULL) {
--
arch/x86/kernel/ldt.c=393=static void free_ldt_pgtables(struct mm_struct *mm)
--
arch/x86/kernel/ldt.c-403-	/*
arch/x86/kernel/ldt.c:404:	 * Although free_pgd_range() is intended for freeing user
arch/x86/kernel/ldt.c-405-	 * page-tables, it also works out for kernel mappings on x86.
--
arch/x86/kernel/ldt.c-409-	tlb_gather_mmu_fullmm(&tlb, mm);
arch/x86/kernel/ldt.c:410:	free_pgd_range(&tlb, start, end, start, end);
arch/x86/kernel/ldt.c-411-	tlb_finish_mmu(&tlb);
--
arch/x86/mm/pat/memtype.c=839=static int reserve_pfn_range(u64 paddr, unsigned long size, pgprot_t *vma_prot)
--
arch/x86/mm/pat/memtype.c-898- */
arch/x86/mm/pat/memtype.c:899:static void free_pfn_range(u64 paddr, unsigned long size)
arch/x86/mm/pat/memtype.c-900-{
--
arch/x86/mm/pat/memtype.c=937=void pfnmap_untrack(unsigned long pfn, unsigned long size)
--
arch/x86/mm/pat/memtype.c-940-
arch/x86/mm/pat/memtype.c:941:	free_pfn_range(paddr, size);
arch/x86/mm/pat/memtype.c-942-}
--
arch/x86/virt/vmx/tdx/tdx.c=670=static __init void free_pamt(unsigned long pamt_base, unsigned long pamt_size)
arch/x86/virt/vmx/tdx/tdx.c-671-{
arch/x86/virt/vmx/tdx/tdx.c:672:	free_contig_range(pamt_base >> PAGE_SHIFT, pamt_size >> PAGE_SHIFT);
arch/x86/virt/vmx/tdx/tdx.c-673-}
--
drivers/accel/habanalabs/common/memory.c=2598=static int vm_ctx_init_with_ranges(struct hl_ctx *ctx,
--
drivers/accel/habanalabs/common/memory.c-2616-			rc = -ENOMEM;
drivers/accel/habanalabs/common/memory.c:2617:			goto free_va_range;
drivers/accel/habanalabs/common/memory.c-2618-		}
--
drivers/accel/habanalabs/common/memory.c-2623-		dev_err(hdev->dev, "failed to init context %d\n", ctx->asid);
drivers/accel/habanalabs/common/memory.c:2624:		goto free_va_range;
drivers/accel/habanalabs/common/memory.c-2625-	}
--
drivers/accel/habanalabs/common/memory.c-2688-	hl_mmu_ctx_fini(ctx);
drivers/accel/habanalabs/common/memory.c:2689:free_va_range:
drivers/accel/habanalabs/common/memory.c-2690-	for (i = 0 ; i < HL_VA_RANGE_TYPE_MAX ; i++)
--
drivers/dax/bus.c=440=static void trim_dev_dax_range(struct dev_dax *dev_dax)
--
drivers/dax/bus.c-457-
drivers/dax/bus.c:458:static void free_dev_dax_ranges(struct dev_dax *dev_dax)
drivers/dax/bus.c-459-{
--
drivers/dax/bus.c=464=static void unregister_dev_dax(void *dev)
--
drivers/dax/bus.c-472-	device_del(dev);
drivers/dax/bus.c:473:	free_dev_dax_ranges(dev_dax);
drivers/dax/bus.c-474-	put_device(dev);
--
drivers/dax/bus.c=1452=static struct dev_dax *__devm_create_dev_dax(struct dev_dax_data *data)
--
drivers/dax/bus.c-1558-err_pgmap:
drivers/dax/bus.c:1559:	free_dev_dax_ranges(dev_dax);
drivers/dax/bus.c-1560-err_range:
--
drivers/dma/ti/k3-udma-glue.c=1232=void k3_udma_glue_release_rx_chn(struct k3_udma_glue_rx_channel *rx_chn)
--
drivers/dma/ti/k3-udma-glue.c-1249-	if (xudma_rflow_is_gp(rx_chn->common.udmax, rx_chn->flow_id_base))
drivers/dma/ti/k3-udma-glue.c:1250:		xudma_free_gp_rflow_range(rx_chn->common.udmax,
drivers/dma/ti/k3-udma-glue.c-1251-					  rx_chn->flow_id_base,
--
drivers/dma/ti/k3-udma-private.c=83=EXPORT_SYMBOL(xudma_alloc_gp_rflow_range);
drivers/dma/ti/k3-udma-private.c-84-
drivers/dma/ti/k3-udma-private.c:85:int xudma_free_gp_rflow_range(struct udma_dev *ud, int from, int cnt)
drivers/dma/ti/k3-udma-private.c-86-{
drivers/dma/ti/k3-udma-private.c:87:	return __udma_free_gp_rflow_range(ud, from, cnt);
drivers/dma/ti/k3-udma-private.c-88-}
drivers/dma/ti/k3-udma-private.c:89:EXPORT_SYMBOL(xudma_free_gp_rflow_range);
drivers/dma/ti/k3-udma-private.c-90-
--
drivers/dma/ti/k3-udma.c=1261=static int __udma_alloc_gp_rflow_range(struct udma_dev *ud, int from, int cnt)
--
drivers/dma/ti/k3-udma.c-1291-
drivers/dma/ti/k3-udma.c:1292:static int __udma_free_gp_rflow_range(struct udma_dev *ud, int from, int cnt)
drivers/dma/ti/k3-udma.c-1293-{
--
drivers/dma/ti/k3-udma.h=137=int xudma_alloc_gp_rflow_range(struct udma_dev *ud, int from, int cnt);
drivers/dma/ti/k3-udma.h:138:int xudma_free_gp_rflow_range(struct udma_dev *ud, int from, int cnt);
drivers/dma/ti/k3-udma.h-139-
--
drivers/iio/adc/ad7173.c=718=static int ad7173_load_config(struct ad7173_state *st,
--
drivers/iio/adc/ad7173.c-724-
drivers/iio/adc/ad7173.c:725:	free_cfg_slot = ida_alloc_range(&st->cfg_slots_status, 0,
drivers/iio/adc/ad7173.c-726-					st->info->num_configs - 1, GFP_KERNEL);
--
drivers/infiniband/hw/ocrdma/ocrdma_hw.h=155=void ocrdma_alloc_pd_pool(struct ocrdma_dev *dev);
drivers/infiniband/hw/ocrdma/ocrdma_hw.h:156:void ocrdma_free_pd_range(struct ocrdma_dev *dev);
drivers/infiniband/hw/ocrdma/ocrdma_hw.h-157-void ocrdma_update_link_state(struct ocrdma_dev *dev, u8 lstate);
--
drivers/irqchip/irq-gic-v3-its.c=2149=static void merge_lpi_ranges(struct lpi_range *a, struct lpi_range *b)
--
drivers/irqchip/irq-gic-v3-its.c-2160-
drivers/irqchip/irq-gic-v3-its.c:2161:static int free_lpi_range(u32 base, u32 nr_lpis)
drivers/irqchip/irq-gic-v3-its.c-2162-{
--
drivers/irqchip/irq-gic-v3-its.c=2194=static int __init its_lpi_init(u32 id_bits)
--
drivers/irqchip/irq-gic-v3-its.c-2211-	 */
drivers/irqchip/irq-gic-v3-its.c:2212:	err = free_lpi_range(8192, lpis);
drivers/irqchip/irq-gic-v3-its.c-2213-	pr_debug("ITS: Allocator initialized for %u LPIs\n", lpis);
--
drivers/irqchip/irq-gic-v3-its.c=2249=static void its_lpi_free(unsigned long *bitmap, u32 base, u32 nr_ids)
drivers/irqchip/irq-gic-v3-its.c-2250-{
drivers/irqchip/irq-gic-v3-its.c:2251:	WARN_ON(free_lpi_range(base, nr_ids));
drivers/irqchip/irq-gic-v3-its.c-2252-	bitmap_free(bitmap);
--
drivers/irqchip/irq-gic-v3-mbi.c=43=static int mbi_irq_gic_domain_alloc(struct irq_domain *domain,
--
drivers/irqchip/irq-gic-v3-mbi.c-76-
drivers/irqchip/irq-gic-v3-mbi.c:77:static void mbi_free_msi(struct mbi_range *mbi, unsigned int hwirq,
drivers/irqchip/irq-gic-v3-mbi.c-78-			 int nr_irqs)
--
drivers/irqchip/irq-gic-v3-mbi.c=86=static int mbi_irq_domain_alloc(struct irq_domain *domain, unsigned int virq,
--
drivers/irqchip/irq-gic-v3-mbi.c-94-	for (i = 0; i < mbi_range_nr; i++) {
drivers/irqchip/irq-gic-v3-mbi.c:95:		offset = bitmap_find_free_region(mbi_ranges[i].bm,
drivers/irqchip/irq-gic-v3-mbi.c-96-						 mbi_ranges[i].nr_spis,
--
drivers/net/ethernet/amazon/ena/ena_netdev.c=315=int ena_setup_tx_resources_in_range(struct ena_adapter *adapter,
--
drivers/net/ethernet/amazon/ena/ena_netdev.c-338-
drivers/net/ethernet/amazon/ena/ena_netdev.c:339:void ena_free_all_io_tx_resources_in_range(struct ena_adapter *adapter,
drivers/net/ethernet/amazon/ena/ena_netdev.c-340-					   int first_index, int count)
--
drivers/net/ethernet/amazon/ena/ena_netdev.c=353=void ena_free_all_io_tx_resources(struct ena_adapter *adapter)
drivers/net/ethernet/amazon/ena/ena_netdev.c-354-{
drivers/net/ethernet/amazon/ena/ena_netdev.c:355:	ena_free_all_io_tx_resources_in_range(adapter,
drivers/net/ethernet/amazon/ena/ena_netdev.c-356-					      0,
--
drivers/net/ethernet/amazon/ena/ena_netdev.h=459=int ena_setup_tx_resources_in_range(struct ena_adapter *adapter,
drivers/net/ethernet/amazon/ena/ena_netdev.h-460-				    int first_index, int count);
drivers/net/ethernet/amazon/ena/ena_netdev.h:461:void ena_free_all_io_tx_resources_in_range(struct ena_adapter *adapter,
drivers/net/ethernet/amazon/ena/ena_netdev.h-462-					   int first_index, int count);
--
drivers/net/ethernet/amazon/ena/ena_xdp.c=171=int ena_setup_and_create_all_xdp_queues(struct ena_adapter *adapter)
--
drivers/net/ethernet/amazon/ena/ena_xdp.c-187-create_err:
drivers/net/ethernet/amazon/ena/ena_xdp.c:188:	ena_free_all_io_tx_resources_in_range(adapter, xdp_first_ring, xdp_num_queues);
drivers/net/ethernet/amazon/ena/ena_xdp.c-189-setup_err:
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c=1411=void bnx2x_init_rx_rings(struct bnx2x *bp)
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c-1461-					/* Cleanup already allocated elements */
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c:1462:					bnx2x_free_rx_sge_range(bp, fp,
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c-1463-								ring_prod);
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c=2626=int bnx2x_nic_load(struct bnx2x *bp, int load_mode)
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c-2950-	for_each_rx_queue(bp, i)
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c:2951:		bnx2x_free_rx_sge_range(bp, bp->fp + i, NUM_RX_SGE);
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c-2952-
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c=2996=int bnx2x_nic_unload(struct bnx2x *bp, int unload_mode, bool keep_link)
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c-3137-	for_each_rx_queue(bp, i)
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c:3138:		bnx2x_free_rx_sge_range(bp, bp->fp + i, NUM_RX_SGE);
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c-3139-
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h=1002=static inline void bnx2x_free_rx_mem_pool(struct bnx2x *bp,
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h-1009-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h:1010:static inline void bnx2x_free_rx_sge_range(struct bnx2x *bp,
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h-1011-					   struct bnx2x_fastpath *fp, int last)
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c=14201=static pci_ers_result_t bnx2x_io_slot_reset(struct pci_dev *pdev)
--
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c-14265-		for_each_rx_queue(bp, i)
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c:14266:			bnx2x_free_rx_sge_range(bp, bp->fp + i, NUM_RX_SGE);
drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c-14267-		bnx2x_free_fp_mem(bp);
--
drivers/net/ethernet/mellanox/mlx4/mlx4.h=991=u32 __mlx4_alloc_mtt_range(struct mlx4_dev *dev, int order);
drivers/net/ethernet/mellanox/mlx4/mlx4.h:992:void __mlx4_free_mtt_range(struct mlx4_dev *dev, u32 first_seg, int order);
drivers/net/ethernet/mellanox/mlx4/mlx4.h-993-
--
drivers/net/ethernet/mellanox/mlx4/mr.c=215=EXPORT_SYMBOL_GPL(mlx4_mtt_init);
drivers/net/ethernet/mellanox/mlx4/mr.c-216-
drivers/net/ethernet/mellanox/mlx4/mr.c:217:void __mlx4_free_mtt_range(struct mlx4_dev *dev, u32 offset, int order)
drivers/net/ethernet/mellanox/mlx4/mr.c-218-{
--
drivers/net/ethernet/mellanox/mlx4/mr.c-230-
drivers/net/ethernet/mellanox/mlx4/mr.c:231:static void mlx4_free_mtt_range(struct mlx4_dev *dev, u32 offset, int order)
drivers/net/ethernet/mellanox/mlx4/mr.c-232-{
--
drivers/net/ethernet/mellanox/mlx4/mr.c-247-	}
drivers/net/ethernet/mellanox/mlx4/mr.c:248:	__mlx4_free_mtt_range(dev, offset, order);
drivers/net/ethernet/mellanox/mlx4/mr.c-249-}
--
drivers/net/ethernet/mellanox/mlx4/mr.c=251=void mlx4_mtt_cleanup(struct mlx4_dev *dev, struct mlx4_mtt *mtt)
--
drivers/net/ethernet/mellanox/mlx4/mr.c-255-
drivers/net/ethernet/mellanox/mlx4/mr.c:256:	mlx4_free_mtt_range(dev, mtt->offset, mtt->order);
drivers/net/ethernet/mellanox/mlx4/mr.c-257-}
--
drivers/net/ethernet/mellanox/mlx4/mr.c=955=void mlx4_cleanup_mr_table(struct mlx4_dev *dev)
--
drivers/net/ethernet/mellanox/mlx4/mr.c-962-	if (priv->reserved_mtts >= 0)
drivers/net/ethernet/mellanox/mlx4/mr.c:963:		mlx4_free_mtt_range(dev, priv->reserved_mtts,
drivers/net/ethernet/mellanox/mlx4/mr.c-964-				    fls(dev->caps.reserved_mtts - 1));
--
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c=1846=static int mtt_alloc_res(struct mlx4_dev *dev, int slave, int op, int cmd,
--
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c-1870-		mlx4_release_resource(dev, slave, RES_MTT, 1 << order, 0);
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c:1871:		__mlx4_free_mtt_range(dev, base, order);
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c-1872-	} else {
--
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c=2392=static int mtt_free_res(struct mlx4_dev *dev, int slave, int op, int cmd,
--
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c-2406-		mlx4_release_resource(dev, slave, RES_MTT, 1 << order, 0);
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c:2407:		__mlx4_free_mtt_range(dev, base, order);
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c-2408-	}
--
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c=4920=static void rem_slave_mtts(struct mlx4_dev *dev, int slave)
--
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c-4946-				case RES_MTT_ALLOCATED:
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c:4947:					__mlx4_free_mtt_range(dev, base,
drivers/net/ethernet/mellanox/mlx4/resource_tracker.c-4948-							      mtt->order);
--
drivers/net/ethernet/qlogic/qed/qed_cxt.c=2322=static int
drivers/net/ethernet/qlogic/qed/qed_cxt.c:2323:qed_cxt_free_ilt_range(struct qed_hwfn *p_hwfn,
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2324-		       enum qed_cxt_elem_type elem_type,
--
drivers/net/ethernet/qlogic/qed/qed_cxt.c=2413=int qed_cxt_free_proto_ilt(struct qed_hwfn *p_hwfn, enum protocol_type proto)
--
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2418-	/* Free Connection CXT */
drivers/net/ethernet/qlogic/qed/qed_cxt.c:2419:	rc = qed_cxt_free_ilt_range(p_hwfn, QED_ELEM_CXT,
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2420-				    qed_cxt_get_proto_cid_start(p_hwfn,
--
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2431-	proto = PROTOCOLID_ROCE;
drivers/net/ethernet/qlogic/qed/qed_cxt.c:2432:	rc = qed_cxt_free_ilt_range(p_hwfn, QED_ELEM_TASK, 0,
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2433-				    qed_cxt_get_proto_tid_count(p_hwfn, proto));
--
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2437-	/* Free TSDM CXT */
drivers/net/ethernet/qlogic/qed/qed_cxt.c:2438:	rc = qed_cxt_free_ilt_range(p_hwfn, QED_ELEM_XRC_SRQ, 0,
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2439-				    p_hwfn->p_cxt_mngr->xrc_srq_count);
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2440-
drivers/net/ethernet/qlogic/qed/qed_cxt.c:2441:	rc = qed_cxt_free_ilt_range(p_hwfn, QED_ELEM_SRQ,
drivers/net/ethernet/qlogic/qed/qed_cxt.c-2442-				    p_hwfn->p_cxt_mngr->xrc_srq_count,
--
drivers/pci/msi/api.c=171=void pci_msix_free_irq(struct pci_dev *dev, struct msi_map map)
--
drivers/pci/msi/api.c-176-		return;
drivers/pci/msi/api.c:177:	msi_domain_free_irqs_range(&dev->dev, MSI_DEFAULT_DOMAIN, map.index, map.index);
drivers/pci/msi/api.c-178-}
--
drivers/pci/probe.c=630=static void pci_release_host_bridge_dev(struct device *dev)
--
drivers/pci/probe.c-637-	pci_free_resource_list(&bridge->windows);
drivers/pci/probe.c:638:	pci_free_resource_list(&bridge->dma_ranges);
drivers/pci/probe.c-639-
--
drivers/soc/ti/knav_qmss.h=310=struct knav_range_ops {
drivers/soc/ti/knav_qmss.h-311-	int	(*init_range)(struct knav_range_info *range);
drivers/soc/ti/knav_qmss.h:312:	int	(*free_range)(struct knav_range_info *range);
drivers/soc/ti/knav_qmss.h-313-	int	(*init_queue)(struct knav_range_info *range,
--
drivers/soc/ti/knav_qmss_acc.c=419=static int knav_acc_close_queue(struct knav_range_info *range,
--
drivers/soc/ti/knav_qmss_acc.c-426-
drivers/soc/ti/knav_qmss_acc.c:427:static int knav_acc_free_range(struct knav_range_info *range)
drivers/soc/ti/knav_qmss_acc.c-428-{
--
drivers/soc/ti/knav_qmss_acc.c=453=static const struct knav_range_ops knav_acc_range_ops = {
--
drivers/soc/ti/knav_qmss_acc.c-458-	.init_range	= knav_acc_init_range,
drivers/soc/ti/knav_qmss_acc.c:459:	.free_range	= knav_acc_free_range,
drivers/soc/ti/knav_qmss_acc.c-460-};
--
drivers/soc/ti/knav_qmss_queue.c=1301=static int knav_setup_queue_pools(struct knav_device *kdev,
--
drivers/soc/ti/knav_qmss_queue.c-1325-
drivers/soc/ti/knav_qmss_queue.c:1326:static void knav_free_queue_range(struct knav_device *kdev,
drivers/soc/ti/knav_qmss_queue.c-1327-				  struct knav_range_info *range)
--
drivers/soc/ti/knav_qmss_queue.c-1334-
drivers/soc/ti/knav_qmss_queue.c:1335:static void knav_free_queue_ranges(struct knav_device *kdev)
drivers/soc/ti/knav_qmss_queue.c-1336-{
--
drivers/soc/ti/knav_qmss_queue.c-1342-			break;
drivers/soc/ti/knav_qmss_queue.c:1343:		knav_free_queue_range(kdev, range);
drivers/soc/ti/knav_qmss_queue.c-1344-	}
--
drivers/soc/ti/knav_qmss_queue.c=1772=static int knav_queue_probe(struct platform_device *pdev)
--
drivers/soc/ti/knav_qmss_queue.c-1867-	knav_queue_free_regions(kdev);
drivers/soc/ti/knav_qmss_queue.c:1868:	knav_free_queue_ranges(kdev);
drivers/soc/ti/knav_qmss_queue.c-1869-	pm_runtime_put_sync(&pdev->dev);
--
drivers/virtio/virtio_mem.c=1187=static void virtio_mem_fake_online(unsigned long pfn, unsigned long nr_pages)
--
drivers/virtio/virtio_mem.c-1213-			virtio_mem_clear_fake_offline(pfn + i, 1 << order, true);
drivers/virtio/virtio_mem.c:1214:			free_contig_range(pfn + i, 1 << order);
drivers/virtio/virtio_mem.c-1215-			adjust_managed_page_count(page, 1 << order);
--
fs/btrfs/block-group.c=1105=int btrfs_remove_block_group(struct btrfs_trans_handle *trans,
--
fs/btrfs/block-group.c-1138-	btrfs_free_excluded_extents(block_group);
fs/btrfs/block-group.c:1139:	btrfs_free_ref_tree_range(fs_info, block_group->start,
fs/btrfs/block-group.c-1140-				  block_group->length);
--
fs/btrfs/ref-verify.c=888=void btrfs_free_ref_cache(struct btrfs_fs_info *fs_info)
--
fs/btrfs/ref-verify.c-905-
fs/btrfs/ref-verify.c:906:void btrfs_free_ref_tree_range(struct btrfs_fs_info *fs_info, u64 start,
fs/btrfs/ref-verify.c-907-			       u64 len)
--
fs/btrfs/ref-verify.h=21=int btrfs_ref_tree_mod(struct btrfs_fs_info *fs_info,
fs/btrfs/ref-verify.h-22-		       const struct btrfs_ref *generic_ref);
fs/btrfs/ref-verify.h:23:void btrfs_free_ref_tree_range(struct btrfs_fs_info *fs_info, u64 start,
fs/btrfs/ref-verify.h-24-			       u64 len);
--
fs/btrfs/ref-verify.h=41=static inline int btrfs_ref_tree_mod(struct btrfs_fs_info *fs_info,
--
fs/btrfs/ref-verify.h-46-
fs/btrfs/ref-verify.h:47:static inline void btrfs_free_ref_tree_range(struct btrfs_fs_info *fs_info,
fs/btrfs/ref-verify.h-48-					     u64 start, u64 len)
--
fs/ext4/mballoc-test.c=513=static void
fs/ext4/mballoc-test.c:514:test_free_blocks_simple_range(struct kunit *test, ext4_group_t goal_group,
fs/ext4/mballoc-test.c-515-			      ext4_grpblk_t start, ext4_grpblk_t len)
--
fs/ext4/mballoc-test.c=537=static void test_free_blocks_simple(struct kunit *test)
--
fs/ext4/mballoc-test.c-548-	for (i = 0; i < TEST_RANGE_COUNT; i++)
fs/ext4/mballoc-test.c:549:		test_free_blocks_simple_range(test, TEST_GOAL_GROUP,
fs/ext4/mballoc-test.c-550-			ranges[i].start, ranges[i].len);
--
fs/ext4/mballoc-test.c=820=static void
fs/ext4/mballoc-test.c:821:test_mb_free_blocks_range(struct kunit *test, struct ext4_buddy *e4b,
fs/ext4/mballoc-test.c-822-			  ext4_grpblk_t start, ext4_grpblk_t len, void *bitmap,
--
fs/ext4/mballoc-test.c=850=static void test_mb_free_blocks(struct kunit *test)
--
fs/ext4/mballoc-test.c-890-	for (i = 0; i < TEST_RANGE_COUNT; i++)
fs/ext4/mballoc-test.c:891:		test_mb_free_blocks_range(test, &e4b, ranges[i].start,
fs/ext4/mballoc-test.c-892-					  ranges[i].len, bitmap, buddy, grp);
--
fs/ext4/mballoc.c=943=static inline int
fs/ext4/mballoc.c:944:ext4_mb_scan_groups_largest_free_order_range(struct ext4_allocation_context *ac,
fs/ext4/mballoc.c-945-					     int order, ext4_group_t start,
--
fs/ext4/mballoc.c=960=static int ext4_mb_scan_groups_p2_aligned(struct ext4_allocation_context *ac,
--
fs/ext4/mballoc.c-971-	for (i = ac->ac_2order; i < MB_NUM_ORDERS(ac->ac_sb); i++) {
fs/ext4/mballoc.c:972:		ret = ext4_mb_scan_groups_largest_free_order_range(ac, i,
fs/ext4/mballoc.c-973-								   start, end);
--
fs/f2fs/gc.c=2122=int f2fs_gc_range(struct f2fs_sb_info *sbi,
--
fs/f2fs/gc.c-2164-
fs/f2fs/gc.c:2165:static int free_segment_range(struct f2fs_sb_info *sbi,
fs/f2fs/gc.c-2166-				unsigned int secs, bool dry_run)
--
fs/f2fs/gc.c=2283=int f2fs_resize_fs(struct file *filp, __u64 block_count)
--
fs/f2fs/gc.c-2338-
fs/f2fs/gc.c:2339:	/* stop CP to protect MAIN_SEC in free_segment_range */
fs/f2fs/gc.c-2340-	f2fs_lock_op(sbi, &lc);
--
fs/f2fs/gc.c-2351-
fs/f2fs/gc.c:2352:	err = free_segment_range(sbi, secs, true);
fs/f2fs/gc.c-2353-
--
fs/f2fs/gc.c-2387-	set_sbi_flag(sbi, SBI_IS_RESIZEFS);
fs/f2fs/gc.c:2388:	err = free_segment_range(sbi, secs, false);
fs/f2fs/gc.c-2389-	if (err)
--
fs/fuse/dax.c=108=__kick_dmap_free_worker(struct fuse_conn_dax *fcd, unsigned long delay_ms)
--
fs/fuse/dax.c-112-	/* If number of free ranges are below threshold, start reclaim */
fs/fuse/dax.c:113:	free_threshold = max_t(unsigned long, fcd->nr_ranges * FUSE_DAX_RECLAIM_THRESHOLD / 100,
fs/fuse/dax.c-114-			     1);
--
fs/fuse/dax.c=1158=static void fuse_dax_free_mem_worker(struct work_struct *work)

]

48/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 48148
							output: 35
							thoughts: 38
						

Thoughts:
Okay, here's my interpretation of that thought process, assuming I'm well-versed in memory management within an operating system kernel:

**Examining Page Table Allocation**

Okay, I'm thinking about `vmap_pages_range_noflush`.  Ah, right, this function is responsible for mapping a range of virtual addresses to physical pages without flushing the TLB immediately, which is useful in various scenarios. Now, the key point is how it actually *allocates* those page tables. The code's using `__pte_alloc_kernel`.  That's my starting point. I need to understand this allocation path. Let me delve into the specifics of `__pte_alloc_kernel` and understand precisely how those page table entries are obtained. I need to see if it's using the standard kernel allocators, maybe special memory pools, or if there's any allocation optimization that I should know about. I also need to understand any side effects such as page fault latency.



49/2 2026/06/09 21:18 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/memory.c Name:__pte_alloc_kernel]

Results:
map[SourceCode: 463:	int __pte_alloc_kernel(pmd_t *pmd)
 464:	{
 465:		pte_t *new = pte_alloc_one_kernel(&init_mm);
 466:		if (!new)
 467:			return -ENOMEM;
 468:	
 469:		spin_lock(&init_mm.page_table_lock);
 470:		if (likely(pmd_none(*pmd))) {	/* Has another populated it ? */
 471:			smp_wmb(); /* See comment in pmd_install() */
 472:			pmd_populate_kernel(&init_mm, pmd, new);
 473:			new = NULL;
 474:		}
 475:		spin_unlock(&init_mm.page_table_lock);
 476:		if (new)
 477:			pte_free_kernel(&init_mm, new);
 478:		return 0;
 479:	}
 SourceFile:mm/memory.c]

50/2 2026/06/09 21:18 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 48730
							output: 47
							thoughts: 411
						

Thoughts:
**Kernel Page Table Allocation and Asynchronous Deallocation**

Okay, so `__pte_alloc_kernel` is allocating a new page table entry. The key thing here is the race condition. If another thread is ahead and has already populated the `pmd`, then this newly allocated page table is immediately freed via `pte_free_kernel`. That calls `pagetable_dtor_free`, which eventually calls `pagetable_free` and then `pagetable_free_kernel`, scheduling `kernel_pgtable_work`. So, the actual freeing of the memory happens asynchronously.

The immediate question is, if the freeing is asynchronous, is the page table unlinked from the overall page table tree *before* it's freed? No, in this specific race condition case, the page table was never linked in the first place! It was allocated, and then instantly freed because of this condition.

Now, here's the kicker that's got me thinking: if it was *never* linked, how can something like `ptdump_walk_pgd` even *find* it? `ptdump_walk_pgd` walks the page tables. It reads the `pmd` and gets a pointer to a `pte` page. If the `pte` page *was* freed, that means it *was* unlinked from the tree at some point. But wait, `__pte_alloc_kernel` frees the newly allocated page table only if `pmd_none(*pmd)` is *false*. This means `new` was NEVER linked. If it was never linked, `ptdump_walk_pgd` *cannot* find it!

So, the conclusion is: the page table that *was* freed must have been linked at some point, and then *unlinked* at some point. The question is, where are kernel page tables explicitly unlinked? Is there a case other than this race condition where the page table is unlinked?

I need to search for `pmd_clear`, `pud_clear`, `p4d_clear`, or `pgd_clear` being used on kernel page tables. Or, maybe `pte_free_kernel` is called in a different context. I should also check `free_pte_table` and `pmd_free_pte_page`. I have a feeling the answer lies in one of those functions.



51/2 2026/06/09 21:19 tool codesearch-find-references
0m Args:
map[ContextFile:mm/memory.c IncludeSnippetLines:5 Name:pte_free_kernel SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:__pte_alloc_kernel SourceFile:mm/memory.c SourceLine:477 SourceSnippet: 472:			pmd_populate_kernel(&init_mm, pmd, new);
 473:			new = NULL;
 474:		}
 475:		spin_unlock(&init_mm.page_table_lock);
 476:		if (new)
 477:			pte_free_kernel(&init_mm, new);
 478:		return 0;
 479:	}
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:kasan_free_pte SourceFile:mm/kasan/init.c SourceLine:295 SourceSnippet: 290:			pte = pte_start + i;
 291:			if (!pte_none(ptep_get(pte)))
 292:				return;
 293:		}
 294:	
 295:		pte_free_kernel(&init_mm, pte_start);
 296:		pmd_clear(pmd);
 297:	}
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:try_to_free_pte_page SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1418 SourceSnippet:1413:	
1414:		for (i = 0; i < PTRS_PER_PTE; i++)
1415:			if (!pte_none(pte[i]))
1416:				return false;
1417:	
1418:		pte_free_kernel(&init_mm, pte);
1419:		return true;
1420:	}
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:vmemmap_split_pmd SourceFile:mm/hugetlb_vmemmap.c SourceLine:92 SourceSnippet:  87:			smp_wmb();
  88:			pmd_populate_kernel(&init_mm, pmd, pgtable);
  89:			if (!(walk->flags & VMEMMAP_SPLIT_NO_TLB_FLUSH))
  90:				flush_tlb_kernel_range(start, start + PMD_SIZE);
  91:		} else {
  92:			pte_free_kernel(&init_mm, pgtable);
  93:		}
  94:		spin_unlock(&init_mm.page_table_lock);
  95:	
  96:		return 0;
  97:	}
]] TruncatedOutput:false]

52/2 2026/06/09 21:19 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 50437
							output: 48
							thoughts: 49
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience:

**Diving into `try_to_free_pte_page`**

Right, `try_to_free_pte_page` in `arch/x86/mm/pat/set_memory.c` has caught my eye. Let's dig in. I need to understand what's happening within this function, because I'm betting that it's dealing with freeing Page Table Entries (PTEs) when dealing with memory regions with PAT (Page Attribute Table) settings, and likely, how that impacts the process when memory is being freed or re-purposed. I need to refresh my understanding of where this sits in relation to the PAT, the MTRR, and the overall memory management infrastructure on x86. I know these issues often get hairy when dealing with hardware capabilities and page table management and access flags, so I'm expecting to potentially find nuances in how the caching attributes are handled during the free operation. I know that issues such as coherency and visibility across different CPUs, if not managed correctly, are the issues that can arise in the context of PAT.



53/2 2026/06/09 21:19 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c Name:try_to_free_pte_page]

Results:
map[SourceCode:1410:	static bool try_to_free_pte_page(pte_t *pte)
1411:	{
1412:		int i;
1413:	
1414:		for (i = 0; i < PTRS_PER_PTE; i++)
1415:			if (!pte_none(pte[i]))
1416:				return false;
1417:	
1418:		pte_free_kernel(&init_mm, pte);
1419:		return true;
1420:	}
 SourceFile:arch/x86/mm/pat/set_memory.c]

54/2 2026/06/09 21:19 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 50966
							output: 61
							thoughts: 52
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience:

**Memory Management Puzzle**

Hold on a second... `try_to_free_pte_page` actually *frees* the page associated with the page table entry, but it doesn't seem to touch the corresponding page middle directory entry! That's a potential leak, or at least a dangling pointer situation. We could end up with an orphaned pmd.

Let's trace this back. I need to understand the implications of this. I need to find all the call sites of `try_to_free_pte_page`. Let's dig into where this function is invoked. We must understand the larger context of this call to assess the correctness of this.



55/2 2026/06/09 21:19 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:try_to_free_pte_page SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pte_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1445 SourceSnippet:1440:	
1441:			start += PAGE_SIZE;
1442:			pte++;
1443:		}
1444:	
1445:		if (try_to_free_pte_page((pte_t *)pmd_page_vaddr(*pmd))) {
1446:			pmd_clear(pmd);
1447:			return true;
1448:		}
1449:		return false;
1450:	}
]] TruncatedOutput:false]

56/2 2026/06/09 21:19 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 51452
							output: 45
							thoughts: 349
						

Thoughts:
**Race Condition Suspected in Page Table Unmapping**

Okay, so I'm looking at `unmap_pte_range` in `arch/x86/mm/pat/set_memory.c`. I see it calls `try_to_free_pte_page`. If that function returns true, it proceeds to call `pmd_clear(pmd)`. That's where things get interesting. I remember that `try_to_free_pte_page` actually calls `pte_free_kernel`, which schedules `kernel_pgtable_work`. And hang on, `pmd_clear(pmd)` is *after* that call.

Right, so `try_to_free_pte_page` gets to `pte_free_kernel`, which in turn calls `pagetable_free_kernel`, adding the page to `kernel_pgtable_work.list` and scheduling the work. This work then runs *asynchronously* and handles the actual freeing of the page. Meanwhile, `pmd_clear(pmd)` just goes ahead and clears the `pmd`.

But that timing... wait, is there a race condition here? If `ptdump_walk_pgd` is walking the page tables, it's going to read the `pmd`. If it reads the `pmd` *before* `pmd_clear(pmd)` happens, it's going to get the pointer to the `pte` page. Then `try_to_free_pte_page` will free that `pte` page asynchronously. Now, if that asynchronous work decides to run and free the page *before* `ptdump_walk_pgd` gets a chance to read the `pte` page... boom, we have a classic use-after-free situation! This requires more investigation, I need to check `unmap_pte_range` in `arch/x86/mm/pat/set_memory.c` closely.



57/2 2026/06/09 21:19 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c Name:unmap_pte_range]

Results:
map[SourceCode:1434:	static bool unmap_pte_range(pmd_t *pmd, unsigned long start, unsigned long end)
1435:	{
1436:		pte_t *pte = pte_offset_kernel(pmd, start);
1437:	
1438:		while (start < end) {
1439:			set_pte(pte, __pte(0));
1440:	
1441:			start += PAGE_SIZE;
1442:			pte++;
1443:		}
1444:	
1445:		if (try_to_free_pte_page((pte_t *)pmd_page_vaddr(*pmd))) {
1446:			pmd_clear(pmd);
1447:			return true;
1448:		}
1449:		return false;
1450:	}
 SourceFile:arch/x86/mm/pat/set_memory.c]

58/2 2026/06/09 21:19 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 52539
							output: 58
							thoughts: 186
						

Thoughts:
**Analyzing Potential Race Conditions in Page Table Management**

Okay, so I'm tracking the potential for a race condition here, and it's starting to crystallize. It looks like `try_to_free_pte_page` *first* frees the page, and *then* `pmd_clear(pmd)` clears the `pmd` entry. That's a good start. But, I need to dig deeper. It seems `try_to_free_pte_page` calls `pte_free_kernel`, and *that* function schedules the freeing work, which creates an interesting point of contention.

The core of my concern: if that freeing work runs *immediately*, the page is gone, it's freed. And, at the same time, `ptdump_walk_pgd` is walking through the page tables. Importantly, `ptdump_walk_pgd` isn’t holding any locks that would *prevent* `unmap_pte_range` from running simultaneously. It has a window of opportunity to see a page table entry that is about to be deleted.

Hold on, I see `ptdump_walk_pgd` *does* hold `mmap_write_lock(mm)`. However, and this is where it gets interesting, with kernel page tables, we're talking about `init_mm`, not some arbitrary process' memory space. Therefore, the lock is held on the `init_mm` struct. Now, the key question, does `unmap_pte_range` (the function that's likely the culprit for unmapping and invalidating entries) *also* hold `mmap_write_lock(&init_mm)`? If it does, there's no race. If it doesn't, we have a significant problem.

I need to trace the call paths of `unmap_pte_range` now to see where it's called from and confirm whether the lock is held or not. That will give me the answer.



59/2 2026/06/09 21:19 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:unmap_pte_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:__unmap_pmd_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1455 SourceSnippet:1452:	static void __unmap_pmd_range(pud_t *pud, pmd_t *pmd,
1453:				      unsigned long start, unsigned long end)
1454:	{
1455:		if (unmap_pte_range(pmd, start, end))
1456:			if (try_to_free_pmd_page(pud_pgtable(*pud)))
1457:				pud_clear(pud);
1458:	}
]] TruncatedOutput:false]

60/2 2026/06/09 21:19 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 53428
							output: 60
							thoughts: 22
						

Thoughts:
Okay, here's my interpretation of that:

**My Perspective on `__unmap_pmd_range` and its Role**

Alright, so I'm thinking about memory management, and specifically how we're tearing down page mappings. `__unmap_pmd_range` is definitely a core function in this process. I see it's called *from* `unmap_pmd_range`. That immediately tells me a few things. First, `unmap_pmd_range` is likely the higher-level function, the public interface, if you will. It's the one probably called directly by other parts of the kernel when something needs to be unmapped. Then, `__unmap_pmd_range` is probably where the *real* work gets done. It's the implementation detail that `unmap_pmd_range` calls into.

This suggests a pattern I'm familiar with: a wrapper function handles some initial setup, potentially checking permissions, and then hands off the nitty-gritty to the internal function. `__unmap_pmd_range` is probably doing the actual dirty work of invalidating the TLB entries, zeroing out the page table entries, releasing any resources associated with the mapping and any required cleanup. I'd need to dig deeper, of course, to see the exact implementation, but this relationship is pretty standard for managing access to memory in the kernel. This also suggests the existence of other similar functions in the surrounding code.



61/2 2026/06/09 21:19 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:__unmap_pmd_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pmd_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1471 SourceSnippet:1466:		 */
1467:		if (start & (PMD_SIZE - 1)) {
1468:			unsigned long next_page = (start + PMD_SIZE) & PMD_MASK;
1469:			unsigned long pre_end = min_t(unsigned long, end, next_page);
1470:	
1471:			__unmap_pmd_range(pud, pmd, start, pre_end);
1472:	
1473:			start = pre_end;
1474:			pmd++;
1475:		}
1476:	
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pmd_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1484 SourceSnippet:1479:		 */
1480:		while (end - start >= PMD_SIZE) {
1481:			if (pmd_leaf(*pmd))
1482:				pmd_clear(pmd);
1483:			else
1484:				__unmap_pmd_range(pud, pmd, start, start + PMD_SIZE);
1485:	
1486:			start += PMD_SIZE;
1487:			pmd++;
1488:		}
1489:	
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pmd_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1494 SourceSnippet:1489:	
1490:		/*
1491:		 * 4K leftovers?
1492:		 */
1493:		if (start < end)
1494:			return __unmap_pmd_range(pud, pmd, start, end);
1495:	
1496:		/*
1497:		 * Try again to free the PMD page if haven't succeeded above.
1498:		 */
1499:		if (!pud_none(*pud))
]] TruncatedOutput:false]

62/2 2026/06/09 21:19 llm expert
6m Model:
gemini-3.1-pro-preview

Tokens:
							input: 54491
							output: 59
							thoughts: 106
						

Thoughts:
**Tracing the Memory Unmapping Process**

Okay, so I'm trying to follow the execution path of the memory unmapping functions here. It seems `unmap_pmd_range` is called from `unmap_pud_range`, and that function is, in turn, called by `unmap_p4d_range`. That’s all good. And `unmap_p4d_range` is called from `unmap_pgd_range`. So far, so good, a pretty standard hierarchical unmapping process. But then the question arises: where does it all *begin*? Is it `free_empty_pages` that kicks things off? Wait a second, the location of `free_empty_pages` is `arch/x86/mm/pat/set_memory.c`, which seems somewhat unusual for a function that starts a cascade of unmapping. Alright, I need to double-check where `unmap_pud_range` is actually called from to make sure I am tracing this accurately. Time to investigate that call graph.



63/2 2026/06/09 21:25 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:unmap_pmd_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pud_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1515 SourceSnippet:1510:		 */
1511:		if (start & (PUD_SIZE - 1)) {
1512:			unsigned long next_page = (start + PUD_SIZE) & PUD_MASK;
1513:			unsigned long pre_end	= min_t(unsigned long, end, next_page);
1514:	
1515:			unmap_pmd_range(pud, start, pre_end);
1516:	
1517:			start = pre_end;
1518:			pud++;
1519:		}
1520:	
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pud_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1529 SourceSnippet:1524:		while (end - start >= PUD_SIZE) {
1525:	
1526:			if (pud_leaf(*pud))
1527:				pud_clear(pud);
1528:			else
1529:				unmap_pmd_range(pud, start, start + PUD_SIZE);
1530:	
1531:			start += PUD_SIZE;
1532:			pud++;
1533:		}
1534:	
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:unmap_pud_range SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1539 SourceSnippet:1534:	
1535:		/*
1536:		 * 2M leftovers?
1537:		 */
1538:		if (start < end)
1539:			unmap_pmd_range(pud, start, end);
1540:	
1541:		/*
1542:		 * No need to try to free the PUD page because we'll free it in
1543:		 * populate_pgd's error path
1544:		 */
]] TruncatedOutput:false]

64/2 2026/06/09 21:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 55536
							output: 59
							thoughts: 56
						

Thoughts:
Here's my thought process, summarized as if I were considering the code sequence:

**Unraveling the Memory Unmapping Call Chain**

Okay, so I'm trying to trace the memory unmapping process, specifically the path from `cpa_process_alias`. My initial thought is that `unmap_pud_range` gets called from `unmap_p4d_range`, which in turn is called from `unmap_pgd_range`, and ultimately, `unmap_pgd_range` is called by `cpa_process_alias`. That seems like a reasonable sequence, given the typical paging structure. But I need to verify that; it's always best to be sure, even if it looks logical at first glance. I'm going to double-check that this is the exact calling sequence. Let's make sure.



65/2 2026/06/09 21:25 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:unmap_pud_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:populate_pgd SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1794 SourceSnippet:1789:			/*
1790:			 * Leave the PUD page in place in case some other CPU or thread
1791:			 * already found it, but remove any useless entries we just
1792:			 * added to it.
1793:			 */
1794:			unmap_pud_range(p4d, addr,
1795:					addr + (cpa->numpages << PAGE_SHIFT));
1796:			return ret;
1797:		}
1798:	
1799:		cpa->numpages = ret;
]] TruncatedOutput:false]

66/2 2026/06/09 21:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 56069
							output: 43
							thoughts: 34
						

Thoughts:
Okay, here's my interpretation of that thought process, from an expert's perspective:

**Debugging a Potential PGD Population Issue**

Right, so *that's* interesting. I've just realized something potentially significant: `populate_pgd` – that's a key function in page table setup – *specifically* calls `unmap_pud_range` on the error path! Why would it do that? That's a red flag. I need to understand why `unmap_pud_range` is being called there. It could mean something went wrong during PGD population, or potentially a resource leak is being prevented. This definitely warrants a closer look. Let's dig into the `populate_pgd` function and see what's going on, and why they're unmapping pud ranges on an error path. I want to understand the logic flow here.



67/2 2026/06/09 21:25 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c Name:populate_pgd]

Results:
map[SourceCode:1742:	/*
1743:	 * Restrictions for kernel page table do not necessarily apply when mapping in
1744:	 * an alternate PGD.
1745:	 */
1746:	static int populate_pgd(struct cpa_data *cpa, unsigned long addr)
1747:	{
1748:		pgprot_t pgprot = __pgprot(_KERNPG_TABLE);
1749:		pud_t *pud = NULL;	/* shut up gcc */
1750:		p4d_t *p4d;
1751:		pgd_t *pgd_entry;
1752:		long ret;
1753:	
1754:		pgd_entry = cpa->pgd + pgd_index(addr);
1755:	
1756:		if (pgd_none(*pgd_entry)) {
1757:			/*
1758:			 * Pass 0 as a placeholder for the second argument, since the
1759:			 * generic implementation of p4d_alloc_one() does not use it.
1760:			 */
1761:			p4d = p4d_alloc_one(&init_mm, 0);
1762:			if (!p4d)
1763:				return -1;
1764:	
1765:			set_pgd(pgd_entry, __pgd(__pa(p4d) | _KERNPG_TABLE));
1766:		}
1767:	
1768:		/*
1769:		 * Allocate a PUD page and hand it down for mapping.
1770:		 */
1771:		p4d = p4d_offset(pgd_entry, addr);
1772:		if (p4d_none(*p4d)) {
1773:			/*
1774:			 * Pass 0 as a placeholder for the second argument, since the
1775:			 * generic implementation of pud_alloc_one() does not use it.
1776:			 */
1777:			pud = pud_alloc_one(&init_mm, 0);
1778:			if (!pud)
1779:				return -1;
1780:	
1781:			set_p4d(p4d, __p4d(__pa(pud) | _KERNPG_TABLE));
1782:		}
1783:	
1784:		pgprot_val(pgprot) &= ~pgprot_val(cpa->mask_clr);
1785:		pgprot_val(pgprot) |=  pgprot_val(cpa->mask_set);
1786:	
1787:		ret = populate_pud(cpa, addr, p4d, pgprot);
1788:		if (ret < 0) {
1789:			/*
1790:			 * Leave the PUD page in place in case some other CPU or thread
1791:			 * already found it, but remove any useless entries we just
1792:			 * added to it.
1793:			 */
1794:			unmap_pud_range(p4d, addr,
1795:					addr + (cpa->numpages << PAGE_SHIFT));
1796:			return ret;
1797:		}
1798:	
1799:		cpa->numpages = ret;
1800:		return 0;
1801:	}
 SourceFile:arch/x86/mm/pat/set_memory.c]

68/2 2026/06/09 21:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 57291
							output: 56
							thoughts: 36
						

Thoughts:
Here's my take on the thought process:

**Investigating the `populate_pgd` Function's Call Location**

Okay, hold on a second. I thought `populate_pgd` was being directly called from `cpa_process_alias`, but that feels a little off. My intuition is telling me to double-check that. I need to make sure I'm not missing anything in the call stack. Let me quickly trace back the calls to `populate_pgd` to verify my assumption and build a more accurate mental model of its execution flow. This feels important for whatever I'm working on right now, as `populate_pgd` seems like a key piece of the puzzle. Better safe than sorry – let's get the call graph correct.



69/2 2026/06/09 21:25 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:populate_pgd SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:__cpa_process_fault SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1812 SourceSnippet:1807:			/*
1808:			 * Right now, we only execute this code path when mapping
1809:			 * the EFI virtual memory map regions, no other users
1810:			 * provide a ->pgd value. This may change in the future.
1811:			 */
1812:			return populate_pgd(cpa, vaddr);
1813:		}
1814:	
1815:		/*
1816:		 * Ignore all non primary paths.
1817:		 */
]] TruncatedOutput:false]

70/2 2026/06/09 21:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 57772
							output: 35
							thoughts: 737
						

Thoughts:
**Analyzing a Kernel Page Table Issue**

Okay, let's break this down. My initial thought was that `__cpa_process_fault` triggering `populate_pgd` was the issue, especially since the comment explicitly mentions this path being limited to EFI virtual memory map regions. So, I immediately focused on the EFI context, thinking this was page table related to EFI.

But, the bug report stack trace shifts the focus. It says the page was last freed, not allocated, by `kernel_pgtable_work_func`. The allocation trace clearly shows it was allocated via `kcov_ioctl` using `vmalloc_user`, ultimately leading to a call to `__pte_alloc_kernel`. So, we're dealing with a page allocated for user space via `vmalloc`, not EFI.

The core of the matter: it was allocated by `__pte_alloc_kernel` and freed by `kernel_pgtable_work_func`.  That allocation function is a huge clue.  Since allocation from the kernel generally results in a call to a corresponding "free" function, it follows that `kernel_pgtable_work_func` likely calls `pte_free_kernel`. Since `__pte_alloc_kernel` is the allocator, it is important to trace how it interacts with `pte_free_kernel`.

The key is in understanding *when* `__pte_alloc_kernel` will actually call `pte_free_kernel`.
Let me re-examine the `__pte_alloc_kernel` code to find out. The root cause lies there.



71/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/memory.c Name:__pte_alloc_kernel]

Results:
map[SourceCode: 463:	int __pte_alloc_kernel(pmd_t *pmd)
 464:	{
 465:		pte_t *new = pte_alloc_one_kernel(&init_mm);
 466:		if (!new)
 467:			return -ENOMEM;
 468:	
 469:		spin_lock(&init_mm.page_table_lock);
 470:		if (likely(pmd_none(*pmd))) {	/* Has another populated it ? */
 471:			smp_wmb(); /* See comment in pmd_install() */
 472:			pmd_populate_kernel(&init_mm, pmd, new);
 473:			new = NULL;
 474:		}
 475:		spin_unlock(&init_mm.page_table_lock);
 476:		if (new)
 477:			pte_free_kernel(&init_mm, new);
 478:		return 0;
 479:	}
 SourceFile:mm/memory.c]

72/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 59179
							output: 37
							thoughts: 452
						

Thoughts:
**My Analysis of a Potential Use-After-Free in Concurrent `vmalloc` Calls**

Okay, so I'm digging into this bug report about a KASAN use-after-free in the kernel, specifically within the page table code. My initial thought process revolves around the concurrency of `vmalloc` calls. It appears that if two threads hit `vmalloc` simultaneously and try to allocate a PTE page for the same PMD, one will succeed with its `pmd_none(*pmd)` check and the other will fail. The failing thread *should* call `pte_free_kernel` on the new page (`new`), freeing the memory. `pte_free_kernel` triggers a chain of functions ending with `kernel_pgtable_work`, making it an asynchronous freeing process.

The tricky part here is that if the allocation fails, the newly created page is *never* linked to the page table tree. The `new = NULL` assignment *only* happens when the PMD entry is initially empty. If the PMD is *not* empty, the new page is *not* linked and `pte_free_kernel` is called on it, and it's then freed. So, the page is freed asynchronously. This means, if there's a race condition where the failing thread frees the page while the other thread is still using it, we have a use-after-free!

But this is where things get interesting. The bug report points to a use-after-free in `ptdump_pte_entry`, accessing an address like `ffff88806640f530`. How did `ptdump_walk_pgd` – the starting point for this dump – even get a pointer to this freed memory if it was never linked into the page table structure? This part is perplexing. The structure is supposed to be linked in order to create a valid mapping in the page table tree.

I need to investigate `ptdump_walk_pgd` and its related functions. I need to understand if it's reading the page tables in a way that could lead to it picking up this unlinked, and therefore now freed, memory. Specifically, I'll need to look at `ptdump_pmd_entry` in `mm/ptdump.c` to see how it obtains the PTE entry. This will be key to understanding the full chain of events leading to this use-after-free.



73/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/ptdump.c Name:ptdump_pmd_entry]

Results:
map[SourceCode:  99:	static int ptdump_pmd_entry(pmd_t *pmd, unsigned long addr,
 100:				    unsigned long next, struct mm_walk *walk)
 101:	{
 102:		struct ptdump_state *st = walk->private;
 103:		pmd_t val = pmdp_get(pmd);
 104:	
 105:	#if defined(CONFIG_KASAN_GENERIC) || defined(CONFIG_KASAN_SW_TAGS)
 106:		if (pmd_page(val) == virt_to_page(lm_alias(kasan_early_shadow_pte)))
 107:			return note_kasan_page_table(walk, addr);
 108:	#endif
 109:	
 110:		if (st->effective_prot_pmd)
 111:			st->effective_prot_pmd(st, val);
 112:		if (pmd_leaf(val)) {
 113:			st->note_page_pmd(st, addr, val);
 114:			walk->action = ACTION_CONTINUE;
 115:		}
 116:	
 117:		return 0;
 118:	}
 SourceFile:mm/ptdump.c]

74/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 60550
							output: 36
							thoughts: 53
						

Thoughts:
Okay, here's my interpretation of those thoughts, speaking as an expert:

**Addressing a PMD Entry Oversight**

Hmm, hold on a second... It seems I was mistaken. The function `ptdump_pmd_entry` - no, that's *not* the function that's responsible for interacting with the Page Table Entry (PTE) page itself. I'm focusing on the wrong piece here. I've been so focused on debugging the direct PMD inspection that I missed a crucial step.

The *actual* work of fetching and handling the PTE page, the function that *reads* the PMD and pulls the PTE page, that's done inside `walk_pmd_range` – I should have known, it's right there in `mm/pagewalk.c`. I need to shift my debugging focus there immediately. My mental model was off; I need to retrace my steps and see how `walk_pmd_range` is being called and what its inputs are. That's where I'll find the information I need, I was just looking in the wrong location. I'll need to go back and figure out how it is calling `ptdump_pmd_entry`.



75/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/pagewalk.c Name:walk_pmd_range]

Results:
map[SourceCode:  96:	static int walk_pmd_range(pud_t *pud, unsigned long addr, unsigned long end,
  97:				  struct mm_walk *walk)
  98:	{
  99:		pud_t pudval = pudp_get(pud);
 100:		pmd_t *pmd;
 101:		unsigned long next;
 102:		const struct mm_walk_ops *ops = walk->ops;
 103:		bool has_handler = ops->pte_entry;
 104:		bool has_install = ops->install_pte;
 105:		int err = 0;
 106:		int depth = real_depth(3);
 107:	
 108:		/*
 109:		 * For PTE handling, pte_offset_map_lock() takes care of checking
 110:		 * whether there actually is a page table. But it also has to be
 111:		 * very careful about concurrent page table reclaim.
 112:		 *
 113:		 * Similarly, we have to be careful here - a PUD entry that points
 114:		 * to a PMD table cannot go away, so we can just walk it. But if
 115:		 * it's something else, we need to ensure we didn't race something,
 116:		 * so need to retry.
 117:		 *
 118:		 * A pertinent example of this is a PUD refault after PUD split -
 119:		 * we will need to split again or risk accessing invalid memory.
 120:		 */
 121:		if (!pud_present(pudval) || pud_leaf(pudval)) {
 122:			walk->action = ACTION_AGAIN;
 123:			return 0;
 124:		}
 125:	
 126:		pmd = pmd_offset(pud, addr);
 127:		do {
 128:	again:
 129:			next = pmd_addr_end(addr, end);
 130:			if (pmd_none(*pmd)) {
 131:				if (has_install)
 132:					err = __pte_alloc(walk->mm, pmd);
 133:				else if (ops->pte_hole)
 134:					err = ops->pte_hole(addr, next, depth, walk);
 135:				if (err)
 136:					break;
 137:				if (!has_install)
 138:					continue;
 139:			}
 140:	
 141:			walk->action = ACTION_SUBTREE;
 142:	
 143:			/*
 144:			 * This implies that each ->pmd_entry() handler
 145:			 * needs to know about pmd_trans_huge() pmds
 146:			 */
 147:			if (ops->pmd_entry)
 148:				err = ops->pmd_entry(pmd, addr, next, walk);
 149:			if (err)
 150:				break;
 151:	
 152:			if (walk->action == ACTION_AGAIN)
 153:				goto again;
 154:			if (walk->action == ACTION_CONTINUE)
 155:				continue;
 156:	
 157:			if (!has_handler) { /* No handlers for lower page tables. */
 158:				if (!has_install)
 159:					continue; /* Nothing to do. */
 160:				/*
 161:				 * We are ONLY installing, so avoid unnecessarily
 162:				 * splitting a present huge page.
 163:				 */
 164:				if (pmd_present(*pmd) && pmd_trans_huge(*pmd))
 165:					continue;
 166:			}
 167:	
 168:			if (walk->vma)
 169:				split_huge_pmd(walk->vma, pmd, addr);
 170:			else if (pmd_leaf(*pmd) || !pmd_present(*pmd))
 171:				continue; /* Nothing to do. */
 172:	
 173:			err = walk_pte_range(pmd, addr, next, walk);
 174:			if (err)
 175:				break;
 176:	
 177:			if (walk->action == ACTION_AGAIN)
 178:				goto again;
 179:	
 180:		} while (pmd++, addr = next, addr != end);
 181:	
 182:		return err;
 183:	}
 SourceFile:mm/pagewalk.c]

76/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 62201
							output: 35
							thoughts: 17
						

Thoughts:
Okay, here's my interpretation of that thought process, assuming I'm an expert in memory management and page tables:

**Diving into the `walk_pte_range` Function**

Alright, so I'm thinking about the low-level mechanics of page table manipulation in the kernel. Specifically, my mind is turning to the `walk_pte_range` function, found in the `mm/pagewalk.c` file. This is where the real nitty-gritty of traversing page tables happens. I need to understand this to debug a recent issue with memory allocation, and now understand how to fix it and potentially optimize it. I need to think through how it's structured, how it handles different page table levels, what locks it uses, and what edge cases it's designed to handle. This function is the workhorse. I'm imagining it moving through the page tables, one entry at a time, performing some action on each entry, potentially mapping, unmapping, or checking permissions. I'm going to have to review the surrounding code to determine how this function is integrated into the larger allocation and management processes, as well.



77/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/pagewalk.c Name:walk_pte_range]

Results:
map[SourceCode:  61:	static int walk_pte_range(pmd_t *pmd, unsigned long addr, unsigned long end,
  62:				  struct mm_walk *walk)
  63:	{
  64:		pte_t *pte;
  65:		int err = 0;
  66:		spinlock_t *ptl;
  67:	
  68:		if (walk->no_vma) {
  69:			/*
  70:			 * pte_offset_map() might apply user-specific validation.
  71:			 * Indeed, on x86_64 the pmd entries set up by init_espfix_ap()
  72:			 * fit its pmd_bad() check (_PAGE_NX set and _PAGE_RW clear),
  73:			 * and CONFIG_EFI_PGT_DUMP efi_mm goes so far as to walk them.
  74:			 */
  75:			if (walk->mm == &init_mm || addr >= TASK_SIZE)
  76:				pte = pte_offset_kernel(pmd, addr);
  77:			else
  78:				pte = pte_offset_map(pmd, addr);
  79:			if (pte) {
  80:				err = walk_pte_range_inner(pte, addr, end, walk);
  81:				if (walk->mm != &init_mm && addr < TASK_SIZE)
  82:					pte_unmap(pte);
  83:			}
  84:		} else {
  85:			pte = pte_offset_map_lock(walk->mm, pmd, addr, &ptl);
  86:			if (pte) {
  87:				err = walk_pte_range_inner(pte, addr, end, walk);
  88:				pte_unmap_unlock(pte, ptl);
  89:			}
  90:		}
  91:		if (!pte)
  92:			walk->action = ACTION_AGAIN;
  93:		return err;
  94:	}
 SourceFile:mm/pagewalk.c]

78/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 63048
							output: 38
							thoughts: 1182
						

Thoughts:
**Deconstructing the Use-After-Free in vmalloc Page Tables**

Okay, so `walk_pte_range` calls `pte_offset_kernel`, which gives us the PTE page pointer from the PMD. I see a potential race here: if the kernel reads the PMD, grabs the PTE page pointer, then `kernel_pgtable_work_func` frees that PTE page, and then later accesses that same PTE page, we've got a classic use-after-free.

But wait, `kernel_pgtable_work_func` *is* freeing the page; that confirms `pagetable_free_kernel` is being called. `pagetable_free_kernel` is called when `pte_free_kernel` is, which happens if `__pte_alloc_kernel` is called with `pmd_none(*pmd)` being false. But if `pmd_none(*pmd)` is false, that *should* mean the PMD already points to a valid PTE page! So, `__pte_alloc_kernel` actually *frees* the newly allocated PTE, not the existing one!

So, `pte_offset_kernel` won't return the newly allocated one! It will return the existing valid one! That means the initial theory of `walk_pte_range` accessing the newly allocated (and subsequently freed) page is wrong. So, how did this access happen? Let's check the bug report again.

The report says it's a KASAN use-after-free in `ptdump_pte_entry`. The trace shows the page was allocated by `__pte_alloc_kernel`, which is deeply involved in `vmalloc` via `vmap_small_pages_range_noflush` and so on. And it was freed by `kernel_pgtable_work_func`. We know the page was freed by `pagetable_free_kernel`.

Hmm... What if the freed page isn't the one that failed the `pmd_none` check? What if it's an existing page that *was* linked into the page table, and then *unlinked* and freed later? Where does this unlinking and freeing occur for `vmalloc`? Let's go to `mm/vmalloc.c`. Ah, there's `free_vmap_area_noflush`. Could this be the culprit? Let's check `vunmap_range_noflush`.



79/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:vunmap_range_noflush]

Results:
map[SourceCode: 503:	void vunmap_range_noflush(unsigned long start, unsigned long end)
 504:	{
 505:		kmsan_vunmap_range_noflush(start, end);
 506:		__vunmap_range_noflush(start, end);
 507:	}
 SourceFile:mm/vmalloc.c]

80/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 64904
							output: 39
							thoughts: 12
						

Thoughts:
Okay, here's my interpretation of those thoughts, tailored for an expert audience, presented in the first person:

**Navigating the `__vunmap_range_noflush` Landscape**

Right, so I'm thinking about `__vunmap_range_noflush`. It's a critical function in the kernel's memory management, and I need to really dig into its behavior. The "noflush" part is key, of course – it immediately flags the significance of the function. It means we're dealing with unmapping a virtual address range *without* a writeback to backing storage. That's a performance optimization, a trade-off that demands careful consideration of potential consequences.

I immediately start to consider the implications. We're potentially leaving dirty pages in the page cache unwritten to disk. That's fine for some use cases, but if the system crashes or a power failure hits, those modifications are lost. Therefore, context is crucial: what process called this? What state is it in? What's the acceptable level of data loss in this particular scenario?

I'm mentally running through the scenarios. Is this a temporary mapping? Is the data destined to be written later, perhaps through a checkpointing mechanism? Is it a short-lived mapping to a discarded region? The specific context is what determines if the optimization is appropriate and not just a ticking time bomb.

I'm asking myself, are we careful about race conditions with this approach? What guarantees does the kernel provide in relation to potential data visibility? And am I looking at all the correct code paths? I need to look deeper into related functions like `__vunmap_range` and its surrounding code, to compare implementations and ensure that the "noflush" behavior doesn't introduce vulnerabilities. This is vital to understanding the bigger picture and potential pitfalls.



81/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:__vunmap_range_noflush]

Results:
map[SourceCode: 469:	/*
 470:	 * vunmap_range_noflush is similar to vunmap_range, but does not
 471:	 * flush caches or TLBs.
 472:	 *
 473:	 * The caller is responsible for calling flush_cache_vmap() before calling
 474:	 * this function, and flush_tlb_kernel_range after it has returned
 475:	 * successfully (and before the addresses are expected to cause a page fault
 476:	 * or be re-mapped for something else, if TLB flushes are being delayed or
 477:	 * coalesced).
 478:	 *
 479:	 * This is an internal function only. Do not use outside mm/.
 480:	 */
 481:	void __vunmap_range_noflush(unsigned long start, unsigned long end)
 482:	{
 483:		unsigned long next;
 484:		pgd_t *pgd;
 485:		unsigned long addr = start;
 486:		pgtbl_mod_mask mask = 0;
 487:	
 488:		BUG_ON(addr >= end);
 489:		pgd = pgd_offset_k(addr);
 490:		do {
 491:			next = pgd_addr_end(addr, end);
 492:			if (pgd_bad(*pgd))
 493:				mask |= PGTBL_PGD_MODIFIED;
 494:			if (pgd_none_or_clear_bad(pgd))
 495:				continue;
 496:			vunmap_p4d_range(pgd, addr, next, &mask);
 497:		} while (pgd++, addr = next, addr != end);
 498:	
 499:		if (mask & ARCH_PAGE_TABLE_SYNC_MASK)
 500:			arch_sync_kernel_mappings(start, end);
 501:	}
 SourceFile:mm/vmalloc.c]

82/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 65900
							output: 39
							thoughts: 244
						

Thoughts:
**My Investigation into vmalloc Page Table Management**

Okay, so I'm tracing this `vunmap_range_noflush` function, and it's clear it's a multi-layered call: `vunmap_p4d_range` down to `vunmap_pte_range`. My concern here is around memory management and resource cleanup. `vunmap_pte_range` *clears* the PTEs – that's expected – but it doesn't actually *free* the PTE page itself. That's a red flag! So, it looks like `vmalloc` page tables are **not** directly freed by this routine.

Where are they being freed then? My initial thought is perhaps `free_empty_tables` or something similar, but that feels like a long shot. I need to keep digging.

I just had a thought... maybe the presence of features like `CONFIG_HAVE_BOOTMEM_INFO_NODE` or `CONFIG_MEMORY_HOTPLUG` have some effect on this. But that still doesn't get to the heart of how these `vmalloc` page tables are freed.

Hmm, this `kcov_ioctl` function… that uses `vmalloc_user`, and that's allocated memory. Now, where the hell is `pte_free_kernel` actually called for `vmalloc` page tables? Let me search for it...

Okay, I've got something! Looking at `mm/vmalloc.c`, I see a function called `vmap_pages_range_noflush`. Wait a minute, what is that function? Let me take a look at it...



83/2 2026/06/09 21:26 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:vmap_pages_range_noflush]

Results:
map[SourceCode: 685:	int vmap_pages_range_noflush(unsigned long addr, unsigned long end,
 686:			pgprot_t prot, struct page **pages, unsigned int page_shift,
 687:			gfp_t gfp_mask)
 688:	{
 689:		int ret = kmsan_vmap_pages_range_noflush(addr, end, prot, pages,
 690:							page_shift, gfp_mask);
 691:	
 692:		if (ret)
 693:			return ret;
 694:		return __vmap_pages_range_noflush(addr, end, prot, pages, page_shift);
 695:	}
 SourceFile:mm/vmalloc.c]

84/2 2026/06/09 21:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 66753
							output: 40
							thoughts: 13
						

Thoughts:
Okay, here's my interpretation of that thought process, tailored for an expert audience, and written in the first person:

**My Deep Dive into `__vmap_pages_range_noflush`**

Right, let me break this down. When I see `__vmap_pages_range_noflush`, my mind immediately goes to the heart of the virtual mapping subsystem within the kernel. It's that critical point where contiguous physical pages are being mapped into the virtual address space, specifically *without* triggering a cache flush. That "noflush" part is what really grabs my attention. It’s an optimization, yes, but it immediately raises questions.

I'm thinking: Why are we *skipping* the cache flush? What are the implications? Are we dealing with pages that are known to be "clean," or perhaps are they exclusively accessed via DMA? It’s probably a performance optimization. The flush operation can be a significant overhead, especially with large ranges or in scenarios where cache coherency isn't immediately critical. I'm wondering if this function might be used in a context where write-back activity will happen later or where the pages are initially mapped read-only.

Then I start mentally scanning the surrounding code. I need to understand the calling contexts. Where is this function being used? What kind of data structures are being mapped? Is it associated with specific device drivers, or is it more general-purpose? What are the hardware implications? Is it related to large pages, transparent huge pages (THP), or some kind of special memory allocation scheme? I need to understand the underlying architecture; is this being used on an architecture that relies more on cache coherency between multiple CPUs or NUMA nodes?

My immediate goal here is to understand the trade-off. We're trading off cache coherency for a potential performance gain. I need to see how carefully this optimization has been implemented, especially regarding the potential for data corruption or unexpected behavior. I am thinking, what safeguards are in place? Are memory barriers employed to ensure ordering? Are there any data consistency guarantees that must be explicitly managed elsewhere? I want to know about the locks used in this code path.

Ultimately, I am assuming this code is designed by a careful developer, but I am looking for potential weaknesses and possible scenarios where this might break down. Perhaps concurrent access is possible, or maybe it’s designed to be used serially. My immediate concern is that a subtle bug could manifest itself very rarely and that a test case might never detect the fault.



85/2 2026/06/09 21:27 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:__vmap_pages_range_noflush]

Results:
map[SourceCode: 650:	/*
 651:	 * vmap_pages_range_noflush is similar to vmap_pages_range, but does not
 652:	 * flush caches.
 653:	 *
 654:	 * The caller is responsible for calling flush_cache_vmap() after this
 655:	 * function returns successfully and before the addresses are accessed.
 656:	 *
 657:	 * This is an internal function only. Do not use outside mm/.
 658:	 */
 659:	int __vmap_pages_range_noflush(unsigned long addr, unsigned long end,
 660:			pgprot_t prot, struct page **pages, unsigned int page_shift)
 661:	{
 662:		unsigned int i, nr = (end - addr) >> PAGE_SHIFT;
 663:	
 664:		WARN_ON(page_shift < PAGE_SHIFT);
 665:	
 666:		if (!IS_ENABLED(CONFIG_HAVE_ARCH_HUGE_VMALLOC) ||
 667:				page_shift == PAGE_SHIFT)
 668:			return vmap_small_pages_range_noflush(addr, end, prot, pages);
 669:	
 670:		for (i = 0; i < nr; i += 1U << (page_shift - PAGE_SHIFT)) {
 671:			int err;
 672:	
 673:			err = vmap_range_noflush(addr, addr + (1UL << page_shift),
 674:						page_to_phys(pages[i]), prot,
 675:						page_shift);
 676:			if (err)
 677:				return err;
 678:	
 679:			addr += 1UL << page_shift;
 680:		}
 681:	
 682:		return 0;
 683:	}
 SourceFile:mm/vmalloc.c]

86/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 67877
							output: 41
							thoughts: 14
						

Thoughts:
Okay, here's my interpretation of that thought process, tailored for an expert audience, and presented as if it were my own internal monologue:

**Navigating `vmap_small_pages_range_noflush`**

Alright, so I'm looking at `vmap_small_pages_range_noflush`. Immediately, the name itself tells me a lot. We're dealing with virtual memory mapping, and specifically, we're mapping a range of small pages. The "noflush" part is crucial; it implies we're *not* flushing the TLB or any caches during this operation. This is likely an optimization, but it also flags a potential area for concern. I need to keep in mind the implications of not flushing – specifically, the risk of stale data or inconsistent views across different CPUs or contexts, if not handled meticulously.

My initial questions are: what's the purpose of this particular mapping? Is it for device memory, kernel-internal structures, or something else entirely? What context is this function called from? Knowing the *why* and *how* will be critical to fully understanding its design choices. Is this part of a larger memory management system? If so, what are its guarantees?

The "small pages" aspect is also significant. What's the size of these small pages? Is it 4KB, or are we dealing with something different? The choice of small pages vs. large pages (like huge pages) has implications on TLB pressure, memory fragmentation, and overall performance. Depending on the size, this will also affect the cache behavior. I have to consider the hardware characteristics.

Without digging deeper, I can already anticipate some potential challenges: managing page table entries, ensuring the correct permissions are set, handling potential conflicts with other memory mappings, and dealing with potential cache coherency issues. The lack of a flush means I need to pay close attention to the architecture's memory model.



87/2 2026/06/09 21:27 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:vmap_small_pages_range_noflush]

Results:
map[SourceCode: 623:	static int vmap_small_pages_range_noflush(unsigned long addr, unsigned long end,
 624:			pgprot_t prot, struct page **pages)
 625:	{
 626:		unsigned long start = addr;
 627:		pgd_t *pgd;
 628:		unsigned long next;
 629:		int err = 0;
 630:		int nr = 0;
 631:		pgtbl_mod_mask mask = 0;
 632:	
 633:		BUG_ON(addr >= end);
 634:		pgd = pgd_offset_k(addr);
 635:		do {
 636:			next = pgd_addr_end(addr, end);
 637:			if (pgd_bad(*pgd))
 638:				mask |= PGTBL_PGD_MODIFIED;
 639:			err = vmap_pages_p4d_range(pgd, addr, next, prot, pages, &nr, &mask);
 640:			if (err)
 641:				break;
 642:		} while (pgd++, addr = next, addr != end);
 643:	
 644:		if (mask & ARCH_PAGE_TABLE_SYNC_MASK)
 645:			arch_sync_kernel_mappings(start, end);
 646:	
 647:		return err;
 648:	}
 SourceFile:mm/vmalloc.c]

88/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 68757
							output: 38
							thoughts: 48
						

Thoughts:
Okay, here's my summary, expressed as though I'm the one thinking it:

**Deconstructing Virtual Mapping for Page Table Management**

Alright, let's break this down. When we're dealing with virtual mappings and specifically how we're translating virtual addresses to physical ones within a system, it boils down to navigating the page table hierarchy. I'm essentially tracing the function calls here, which represent how the kernel traverses the page table structure. It starts at the top, the P4D, and it drills down step by step: We have `vmap_pages_p4d_range`, which has to hand off to `vmap_pages_pud_range`. From there, it moves into `vmap_pages_pmd_range`, and ultimately the finest grain of control with `vmap_pages_pte_range`. This sequence encapsulates the core logic for mapping virtual memory, dealing with the page directory, page upper directory, page middle directory and page table entries respectively. This hierarchical approach is standard, giving us granular control over memory management. This is the bedrock to understand and this gives the kernel the ability to handle both large page and small page mappings.



89/2 2026/06/09 21:27 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:vmap_pages_pte_range]

Results:
map[SourceCode: 525:	static int vmap_pages_pte_range(pmd_t *pmd, unsigned long addr,
 526:			unsigned long end, pgprot_t prot, struct page **pages, int *nr,
 527:			pgtbl_mod_mask *mask)
 528:	{
 529:		int err = 0;
 530:		pte_t *pte;
 531:	
 532:		/*
 533:		 * nr is a running index into the array which helps higher level
 534:		 * callers keep track of where we're up to.
 535:		 */
 536:	
 537:		pte = pte_alloc_kernel_track(pmd, addr, mask);
 538:		if (!pte)
 539:			return -ENOMEM;
 540:	
 541:		lazy_mmu_mode_enable();
 542:	
 543:		do {
 544:			struct page *page = pages[*nr];
 545:	
 546:			if (WARN_ON(!pte_none(ptep_get(pte)))) {
 547:				err = -EBUSY;
 548:				break;
 549:			}
 550:			if (WARN_ON(!page)) {
 551:				err = -ENOMEM;
 552:				break;
 553:			}
 554:			if (WARN_ON(!pfn_valid(page_to_pfn(page)))) {
 555:				err = -EINVAL;
 556:				break;
 557:			}
 558:	
 559:			set_pte_at(&init_mm, addr, pte, mk_pte(page, prot));
 560:			(*nr)++;
 561:		} while (pte++, addr += PAGE_SIZE, addr != end);
 562:	
 563:		lazy_mmu_mode_disable();
 564:		*mask |= PGTBL_PTE_MODIFIED;
 565:	
 566:		return err;
 567:	}
 SourceFile:mm/vmalloc.c]

90/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 69704
							output: 35
							thoughts: 930
						

Thoughts:
**Debugging a Kernel Use-After-Free Vulnerability**

Okay, let's break this down. It looks like we've got a use-after-free bug, specifically with PTEs, and the KASAN report is screaming at us.  The core issue seems to be around `pte_alloc_kernel_track`, which calls `__pte_alloc_kernel`.  I see the problem immediately: `__pte_alloc_kernel` allocates a new page table, but if another thread concurrently populates the PMD, then `__pte_alloc_kernel` can *free* the newly allocated page table! That's bad.

The report says the code goes from `__pte_alloc_kernel` to `pte_free_kernel` to `kernel_pgtable_work_func`, and the KASAN report says the memory allocated by `__pte_alloc_kernel` is freed by `kernel_pgtable_work_func`. The KASAN report then points to an error in `ptdump_pte_entry`, which suggests something is accessing the freed page.

The `pte_free_kernel` function schedules `kernel_pgtable_work`, and the page is added to `kernel_pgtable_work.list`. The use-after-free occurs with `ptep_get` in `include/linux/pgtable.h` and the page was allocated by `__pte_alloc_kernel` and freed by `kernel_pgtable_work_func`. So if the page was freed by `kernel_pgtable_work_func`, it was added to `kernel_pgtable_work.list` by `pagetable_free_kernel`, and `pagetable_free_kernel` is called by `pte_free_kernel`. If `pte_free_kernel` was called by `__pte_alloc_kernel` because of the concurrent PMD population, then the page should NEVER be linked into the page table tree! So, how can `ptdump_walk_pgd` access it? It seems impossible if the page was never actually linked!

My mind is now thinking, where else does `pte_free_kernel` get called? Let's check `kasan_free_pte`, `try_to_free_pte_page`, and `vmemmap_split_pmd`. Then I think about `kcov_ioctl` allocates memory using `vmalloc_user`. Could `kcov_ioctl` trigger `try_to_free_pte_page`? No, `try_to_free_pte_page` is called by `unmap_pte_range`, which is used by `cpa` - change page attribute. Hmm, does `vmalloc` call `cpa`? Yes! `vmalloc` calls `set_memory_ro` or `set_memory_nx` or something similar.  `vmalloc` allocates pages, and then maps them. If `vfree` is called, it unmaps them. Does `vfree` call `cpa`? No, `vfree` calls `vunmap_range_noflush`, which clears the PTEs but doesn't free them.

Ah, wait! So `vfree` clears the PTEs, making the PTE page empty. Does anything free empty PTE pages in the kernel page table? Yes, something like `free_empty_tables`... That's a good lead!

So `ptdump_walk_pgd` is walking the page tables. If it reads a PMD that points to a PTE page, and *then* that PTE page is freed... That could be the race! However, if the page was NEVER linked, how could `ptdump_walk_pgd` even get there? Is it possible that `__pte_alloc_kernel` *did* link the page, and it was *later* freed?  I'll need to go back and carefully re-examine `__pte_alloc_kernel` to be sure.



91/2 2026/06/09 21:27 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/memory.c Name:__pte_alloc_kernel]

Results:
map[SourceCode: 463:	int __pte_alloc_kernel(pmd_t *pmd)
 464:	{
 465:		pte_t *new = pte_alloc_one_kernel(&init_mm);
 466:		if (!new)
 467:			return -ENOMEM;
 468:	
 469:		spin_lock(&init_mm.page_table_lock);
 470:		if (likely(pmd_none(*pmd))) {	/* Has another populated it ? */
 471:			smp_wmb(); /* See comment in pmd_install() */
 472:			pmd_populate_kernel(&init_mm, pmd, new);
 473:			new = NULL;
 474:		}
 475:		spin_unlock(&init_mm.page_table_lock);
 476:		if (new)
 477:			pte_free_kernel(&init_mm, new);
 478:		return 0;
 479:	}
 SourceFile:mm/memory.c]

92/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 71823
							output: 51
							thoughts: 528
						

Thoughts:
**Analyzing a Potential Page Table Corruption**

Okay, let's break this down. My understanding is, if `pmd_none(*pmd)` is true, the new page (`new`) is linked into the Page Map Directory (PMD), and then the `new` pointer is nulled. Crucially, in this scenario, `pte_free_kernel` is *not* called. Conversely, if `pmd_none(*pmd)` is false, another thread must have already put something there, so `new` *isn't* linked, and `pte_free_kernel` *is* called on `new`, effectively freeing it. The issue I'm grappling with is that in the latter case, `new` was NEVER in the PMD. So, how could `ptdump_walk_pgd` even *see* this page if it's supposed to walk the page tables, since this page wouldn't be linked in?

Wait a second, maybe `ptdump_walk_pgd` saw it *before* the free? No, I quickly dismiss that as a possibility. It can't have been in the PMD, because then `pmd_none(*pmd)` would have been true, and the pointer nulled, and `pte_free_kernel` would NOT have been called... and yet, the bug report says `pte_free_kernel` *was* called. So, the question remains: who freed it?

The bug report trace points to `pagetable_free_kernel` being called. We know `pte_free_kernel` calls this function. Are there any *other* callers? That's what I need to investigate.



93/2 2026/06/09 21:27 tool codesearch-find-references
0m Args:
map[ContextFile:mm/pgtable-generic.c IncludeSnippetLines:5 Name:pagetable_free_kernel SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:pagetable_free SourceFile:include/linux/mm.h SourceLine:3683 SourceSnippet:3678:	 */
3679:	static inline void pagetable_free(struct ptdesc *pt)
3680:	{
3681:		if (ptdesc_test_kernel(pt)) {
3682:			ptdesc_clear_kernel(pt);
3683:			pagetable_free_kernel(pt);
3684:		} else {
3685:			__pagetable_free(pt);
3686:		}
3687:	}
]] TruncatedOutput:false]

94/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 72967
							output: 20
							thoughts: 348
						

Thoughts:
**Analyzing the Memory Management Flow**

Okay, let's break this down. From what I'm seeing, `pagetable_free` is the main entry point for freeing page tables, and specifically, if `ptdesc_test_kernel(pt)` evaluates to true, which it does for kernel page tables, then it calls `pagetable_free_kernel`. That means *any* kernel page table freed via `pagetable_free` will route through `pagetable_free_kernel`. I need to figure out what calls `pagetable_free` in the first place. I've already noted calls from `pte_free_kernel`, through `pagetable_dtor_free`, and also from `pmd_free`, `pud_free`, `p4d_free`, and `pgd_free`.

Hold on... if a PMD page is freed, then it *also* goes through `pagetable_free_kernel`? That's good to keep in mind, and that's an important connection for me to recognize.

The bug report mentions a "use-after-free in `ptep_get`," which implies an issue with PTEs. `ptdump_pte_entry` is reading a PTE. Therefore, the freed page in question is a PTE page. Okay, so what frees a PTE page? Clearly it's either `pte_free_kernel` or `pte_free`. Let me retrace where `pte_free_kernel` is being called... I found a few: the error path from `__pte_alloc_kernel`, `kasan_free_pte`, `try_to_free_pte_page` (in `arch/x86/mm/pat/set_memory.c`), and `vmemmap_split_pmd`. Hmm, I wonder if there are any *other* calls to `pte_free_kernel` that are missed? I should probably do a global search in the code tree just to make sure I haven't missed anything.



95/2 2026/06/09 21:27 tool grepper
0m Args:
map[Expression:pte_free_kernel\(]

Results:
map[Output:arch/arm/mm/ioremap.c=173=static void unmap_area_sections(unsigned long virt, unsigned long size)
--
arch/arm/mm/ioremap.c-195-			if ((pmd_val(pmd) & PMD_TYPE_MASK) == PMD_TYPE_TABLE)
arch/arm/mm/ioremap.c:196:				pte_free_kernel(&init_mm, pmd_page_vaddr(pmd));
arch/arm/mm/ioremap.c-197-		}
--
arch/arm64/mm/mmu.c=1867=static int __pmd_free_pte_page(pmd_t *pmdp, unsigned long addr,
--
arch/arm64/mm/mmu.c-1888-
arch/arm64/mm/mmu.c:1889:	pte_free_kernel(NULL, table);
arch/arm64/mm/mmu.c-1890-	return 1;
--
arch/m68k/include/asm/mcf_pgalloc.h-7-
arch/m68k/include/asm/mcf_pgalloc.h:8:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/m68k/include/asm/mcf_pgalloc.h-9-{
--
arch/m68k/include/asm/motorola_pgalloc.h=27=static inline pte_t *pte_alloc_one_kernel(struct mm_struct *mm)
--
arch/m68k/include/asm/motorola_pgalloc.h-31-
arch/m68k/include/asm/motorola_pgalloc.h:32:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/m68k/include/asm/motorola_pgalloc.h-33-{
--
arch/mips/kvm/mmu.c=171=static bool kvm_mips_flush_gpa_pmd(pmd_t *pmd, unsigned long start_gpa,
--
arch/mips/kvm/mmu.c-190-			pmd_clear(pmd + i);
arch/mips/kvm/mmu.c:191:			pte_free_kernel(NULL, pte);
arch/mips/kvm/mmu.c-192-		} else {
--
arch/powerpc/include/asm/pgalloc.h=36=void pte_fragment_free(unsigned long *table, int kernel);
arch/powerpc/include/asm/pgalloc.h-37-
arch/powerpc/include/asm/pgalloc.h:38:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/powerpc/include/asm/pgalloc.h-39-{
--
arch/powerpc/mm/book3s64/radix_pgtable.c=693=static void free_pte_table(pte_t *pte_start, pmd_t *pmd)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-703-
arch/powerpc/mm/book3s64/radix_pgtable.c:704:	pte_free_kernel(&init_mm, pte_start);
arch/powerpc/mm/book3s64/radix_pgtable.c-705-	pmd_clear(pmd);
--
arch/powerpc/mm/book3s64/radix_pgtable.c=1638=int pud_free_pmd_page(pud_t *pud, unsigned long addr)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-1652-
arch/powerpc/mm/book3s64/radix_pgtable.c:1653:			pte_free_kernel(&init_mm, pte);
arch/powerpc/mm/book3s64/radix_pgtable.c-1654-		}
--
arch/powerpc/mm/book3s64/radix_pgtable.c=1685=int pmd_free_pte_page(pmd_t *pmd, unsigned long addr)
--
arch/powerpc/mm/book3s64/radix_pgtable.c-1693-
arch/powerpc/mm/book3s64/radix_pgtable.c:1694:	pte_free_kernel(&init_mm, pte);
arch/powerpc/mm/book3s64/radix_pgtable.c-1695-
--
arch/riscv/mm/pgtable.c=87=int pud_free_pmd_page(pud_t *pud, unsigned long addr)
--
arch/riscv/mm/pgtable.c-99-
arch/riscv/mm/pgtable.c:100:			pte_free_kernel(NULL, pte);
arch/riscv/mm/pgtable.c-101-		}
--
arch/riscv/mm/pgtable.c=125=int pmd_free_pte_page(pmd_t *pmd, unsigned long addr)
--
arch/riscv/mm/pgtable.c-131-	flush_tlb_kernel_range(addr, addr + PMD_SIZE);
arch/riscv/mm/pgtable.c:132:	pte_free_kernel(NULL, pte);
arch/riscv/mm/pgtable.c-133-	return 1;
--
arch/s390/include/asm/pgalloc.h=151=static inline void pmd_populate(struct mm_struct *mm,
--
arch/s390/include/asm/pgalloc.h-164-
arch/s390/include/asm/pgalloc.h:165:#define pte_free_kernel(mm, pte) page_table_free(mm, (unsigned long *) pte)
arch/s390/include/asm/pgalloc.h-166-#define pte_free(mm, pte) page_table_free(mm, (unsigned long *) pte)
--
arch/sparc/include/asm/pgalloc_32.h=67=static inline void free_pte_fast(pte_t *pte)
--
arch/sparc/include/asm/pgalloc_32.h-71-
arch/sparc/include/asm/pgalloc_32.h:72:#define pte_free_kernel(mm, pte)	free_pte_fast(pte)
arch/sparc/include/asm/pgalloc_32.h-73-
--
arch/sparc/include/asm/pgalloc_64.h=64=pgtable_t pte_alloc_one(struct mm_struct *mm);
arch/sparc/include/asm/pgalloc_64.h:65:void pte_free_kernel(struct mm_struct *mm, pte_t *pte);
arch/sparc/include/asm/pgalloc_64.h-66-void pte_free(struct mm_struct *mm, pgtable_t ptepage);
--
arch/sparc/mm/init_64.c=2870=static void __pte_free(pgtable_t pte)
--
arch/sparc/mm/init_64.c-2877-
arch/sparc/mm/init_64.c:2878:void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
arch/sparc/mm/init_64.c-2879-{
--
arch/x86/mm/pat/set_memory.c=1410=static bool try_to_free_pte_page(pte_t *pte)
--
arch/x86/mm/pat/set_memory.c-1417-
arch/x86/mm/pat/set_memory.c:1418:	pte_free_kernel(&init_mm, pte);
arch/x86/mm/pat/set_memory.c-1419-	return true;
--
include/asm-generic/pgalloc.h=43=static inline pte_t *pte_alloc_one_kernel_noprof(struct mm_struct *mm)
--
include/asm-generic/pgalloc.h-54- */
include/asm-generic/pgalloc.h:55:static inline void pte_free_kernel(struct mm_struct *mm, pte_t *pte)
include/asm-generic/pgalloc.h-56-{
--
mm/hugetlb_vmemmap.c=53=static int vmemmap_split_pmd(pmd_t *pmd, struct page *head, unsigned long start,
--
mm/hugetlb_vmemmap.c-91-	} else {
mm/hugetlb_vmemmap.c:92:		pte_free_kernel(&init_mm, pgtable);
mm/hugetlb_vmemmap.c-93-	}
--
mm/kasan/init.c=284=static void kasan_free_pte(pte_t *pte_start, pmd_t *pmd)
--
mm/kasan/init.c-294-
mm/kasan/init.c:295:	pte_free_kernel(&init_mm, pte_start);
mm/kasan/init.c-296-	pmd_clear(pmd);
--
mm/memory.c=463=int __pte_alloc_kernel(pmd_t *pmd)
--
mm/memory.c-476-	if (new)
mm/memory.c:477:		pte_free_kernel(&init_mm, new);
mm/memory.c-478-	return 0;
]

96/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 76291
							output: 59
							thoughts: 264
						

Thoughts:
**Digging into the Memory Management Error Path**

Okay, here's what's running through my mind as I trace this error path. It looks like `try_to_free_pte_page` in `arch/x86/mm/pat/set_memory.c` is calling `pte_free_kernel`. That's the key. I need to understand how we got there.

Right, so `try_to_free_pte_page` is being called from `unmap_pte_range`. And that, in turn, is called by `__unmap_pmd_range`. Got it. Let's see... `__unmap_pmd_range` is called by `unmap_pmd_range`, which is then called by `unmap_pud_range`. And, the big picture here, is that `unmap_pud_range` gets called by `populate_pgd` when something goes wrong. This looks like the unmapping sequence, specifically the error handling unmapping of page table entries.

But let's not jump to conclusions. I need to make sure this isn't getting used elsewhere. So, is `unmap_pte_range` called *anywhere* else? Let's check the callers of `unmap_pmd_range` - that seems like the next logical level. Ah, yes, `unmap_pud_range` does call it. Okay, that fits with the chain, and `unmap_pud_range` *also* seems to be called only by `populate_pgd` when things are going wrong.

Okay, let's keep going. Is `unmap_pud_range` called *anywhere* else? Let's check `unmap_pud_range` callers, just to be sure. Alright, `populate_pgd` calls it, too. Seems to be the main caller.

Let's do a more exhaustive check of `arch/x86/mm/pat/set_memory.c` for `unmap_pud_range`. Make sure there are no other subtle call sites or indirect uses. Want to cover all the bases here.



97/2 2026/06/09 21:27 tool codesearch-find-references
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c IncludeSnippetLines:5 Name:unmap_pud_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:populate_pgd SourceFile:arch/x86/mm/pat/set_memory.c SourceLine:1794 SourceSnippet:1789:			/*
1790:			 * Leave the PUD page in place in case some other CPU or thread
1791:			 * already found it, but remove any useless entries we just
1792:			 * added to it.
1793:			 */
1794:			unmap_pud_range(p4d, addr,
1795:					addr + (cpa->numpages << PAGE_SHIFT));
1796:			return ret;
1797:		}
1798:	
1799:		cpa->numpages = ret;
]] TruncatedOutput:false]

98/2 2026/06/09 21:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 77323
							output: 19
							thoughts: 1002
						

Thoughts:
**Debugging a Kernel Page Table Use-After-Free**

Okay, let's break this down systematically. The initial hunch that `try_to_free_pte_page` was the culprit is a dead end – it's only called in error paths during `populate_pgd`, and that's tied to EFI page table handling. So, not the issue.

Now, `vmemmap_split_pmd` caught my attention. It handles vmemmap PMD splitting. The critical check is `pmd_none(*pmd)`. If that's *false*, it implies another thread got there first. This means it has to free the *newly* allocated PTE page, because it wasn't linked in, similar to what happens in `__pte_alloc_kernel`. The page was never actually part of the table structure.

`kasan_free_pte` is just KASAN initialization noise, irrelevant here.

So, the key suspect seems to be `__pte_alloc_kernel` and, by association, `vmemmap_split_pmd`. This is where a PTE page can be freed *before* being linked into the page table. That's a huge clue! But, how can `ptdump_walk_pgd` touch a freed page?

Let's revisit `ptdump_walk_pgd`. It's walking the page tables, reading PMDs, and calculating PTE virtual addresses via `pte_offset_kernel`. If the PMD entry is valid (points to a real PTE page), `pte_offset_kernel` gives the right address. However, the bug report says it's a page from `__pte_alloc_kernel` that was freed by `kernel_pgtable_work_func`. Since `__pte_alloc_kernel` only *frees* if the `pmd_none` check *fails*... Ah, that's the key! `pmd_none(*pmd)` was false! That means the PMD *already* pointed to another PTE page. `__pte_alloc_kernel` allocated *a new one*, found the PMD was already set, and freed the *new* page it had just allocated. `ptdump_walk_pgd`, though, gets the address of the *original* PTE page because the PMD pointer was pointing at it.

But here is my question: why would it be accessing the newly allocated (and freed) PTE page? Could `pmd_populate_kernel` have used it and then overwritten it? No, `pmd_populate_kernel` only gets called if `pmd_none(*pmd)` is *true*. If so, `pmd_populate_kernel` sets `new = NULL` and so it doesn't free the page.

So, it seems we must eliminate other ways to get here.

Could `__pte_alloc_kernel` be called, `pmd_none(*pmd)` is true, the PMD is populated with *new*, it sets `new=NULL`, and returns 0. Later the PMD is cleared and the PTE page is freed?

We looked at all callers of `pte_free_kernel` and `pagetable_free_kernel` and found nothing. No linked PTE pages.

What about `free_pte_range`? That deals with *user* page tables. What about `vunmap_pud_range`? No, doesn't free.

Aha! `free_vm_area` and `remove_vm_area`… Are we freeing kernel page tables? No.

Wait, the clue is in `kernel_pgtable_work_func`. It's a workqueue function! It's freeing pages added to `kernel_pgtable_work.list`. Those are added by `pagetable_free_kernel`. `pagetable_free_kernel` is called by `pagetable_free` if `ptdesc_test_kernel(pt)` is true. What's calling `pagetable_free`? We have to find that. 



99/2 2026/06/09 21:28 tool grepper
0m Args:
map[Expression:pagetable_free\(]

Results:
map[Output:arch/loongarch/include/asm/pgalloc.h=62=static inline pmd_t *pmd_alloc_one(struct mm_struct *mm, unsigned long address)
--
arch/loongarch/include/asm/pgalloc.h-71-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/loongarch/include/asm/pgalloc.h:72:		pagetable_free(ptdesc);
arch/loongarch/include/asm/pgalloc.h-73-		return NULL;
--
arch/m68k/include/asm/mcf_pgalloc.h=15=static inline pte_t *pte_alloc_one_kernel(struct mm_struct *mm)
--
arch/m68k/include/asm/mcf_pgalloc.h-22-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/m68k/include/asm/mcf_pgalloc.h:23:		pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-24-		return NULL;
--
arch/m68k/include/asm/mcf_pgalloc.h=39=static inline void __pte_free_tlb(struct mmu_gather *tlb, pgtable_t pgtable,
--
arch/m68k/include/asm/mcf_pgalloc.h-44-	pagetable_dtor(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h:45:	pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-46-}
--
arch/m68k/include/asm/mcf_pgalloc.h=48=static inline pgtable_t pte_alloc_one(struct mm_struct *mm)
--
arch/m68k/include/asm/mcf_pgalloc.h-55-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/m68k/include/asm/mcf_pgalloc.h:56:		pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-57-		return NULL;
--
arch/m68k/include/asm/mcf_pgalloc.h=64=static inline void pte_free(struct mm_struct *mm, pgtable_t pgtable)
--
arch/m68k/include/asm/mcf_pgalloc.h-68-	pagetable_dtor(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h:69:	pagetable_free(ptdesc);
arch/m68k/include/asm/mcf_pgalloc.h-70-}
--
arch/mips/include/asm/pgalloc.h=55=static inline pmd_t *pmd_alloc_one(struct mm_struct *mm, unsigned long address)
--
arch/mips/include/asm/pgalloc.h-64-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/mips/include/asm/pgalloc.h:65:		pagetable_free(ptdesc);
arch/mips/include/asm/pgalloc.h-66-		return NULL;
--
arch/parisc/include/asm/pgalloc.h=32=static inline pmd_t *pmd_alloc_one(struct mm_struct *mm, unsigned long address)
--
arch/parisc/include/asm/pgalloc.h-42-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/parisc/include/asm/pgalloc.h:43:		pagetable_free(ptdesc);
arch/parisc/include/asm/pgalloc.h-44-		return NULL;
--
arch/powerpc/mm/book3s64/mmu_context.c=242=static void pmd_frag_destroy(void *pmd_frag)
--
arch/powerpc/mm/book3s64/mmu_context.c-252-		pagetable_dtor(ptdesc);
arch/powerpc/mm/book3s64/mmu_context.c:253:		pagetable_free(ptdesc);
arch/powerpc/mm/book3s64/mmu_context.c-254-	}
--
arch/powerpc/mm/book3s64/pgtable.c=392=static pmd_t *__alloc_for_pmdcache(struct mm_struct *mm)
--
arch/powerpc/mm/book3s64/pgtable.c-403-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
arch/powerpc/mm/book3s64/pgtable.c:404:		pagetable_free(ptdesc);
arch/powerpc/mm/book3s64/pgtable.c-405-		return NULL;
--
arch/powerpc/mm/book3s64/pgtable.c=444=void pmd_fragment_free(unsigned long *pmd)
--
arch/powerpc/mm/book3s64/pgtable.c-453-		pagetable_dtor(ptdesc);
arch/powerpc/mm/book3s64/pgtable.c:454:		pagetable_free(ptdesc);
arch/powerpc/mm/book3s64/pgtable.c-455-	}
--
arch/powerpc/mm/pgtable-frag.c=18=void pte_frag_destroy(void *pte_frag)
--
arch/powerpc/mm/pgtable-frag.c-29-		pagetable_dtor(ptdesc);
arch/powerpc/mm/pgtable-frag.c:30:		pagetable_free(ptdesc);
arch/powerpc/mm/pgtable-frag.c-31-	}
--
arch/powerpc/mm/pgtable-frag.c=56=static pte_t *__alloc_for_ptecache(struct mm_struct *mm, int kernel)
--
arch/powerpc/mm/pgtable-frag.c-68-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/powerpc/mm/pgtable-frag.c:69:		pagetable_free(ptdesc);
arch/powerpc/mm/pgtable-frag.c-70-		return NULL;
--
arch/powerpc/mm/pgtable-frag.c=108=static void pte_free_now(struct rcu_head *head)
--
arch/powerpc/mm/pgtable-frag.c-113-	pagetable_dtor(ptdesc);
arch/powerpc/mm/pgtable-frag.c:114:	pagetable_free(ptdesc);
arch/powerpc/mm/pgtable-frag.c-115-}
--
arch/riscv/mm/init.c=1491=static void __meminit free_pte_table(pte_t *pte_start, pmd_t *pmd)
--
arch/riscv/mm/init.c-1507-	else
arch/riscv/mm/init.c:1508:		pagetable_free(ptdesc);
arch/riscv/mm/init.c-1509-	pmd_clear(pmd);
--
arch/riscv/mm/init.c=1512=static void __meminit free_pmd_table(pmd_t *pmd_start, pud_t *pud, bool is_vmemmap)
--
arch/riscv/mm/init.c-1529-	else
arch/riscv/mm/init.c:1530:		pagetable_free(ptdesc);
arch/riscv/mm/init.c-1531-	pud_clear(pud);
--
arch/s390/mm/pgalloc.c=33=void crst_table_free(struct mm_struct *mm, unsigned long *table)
--
arch/s390/mm/pgalloc.c-36-		return;
arch/s390/mm/pgalloc.c:37:	pagetable_free(virt_to_ptdesc(table));
arch/s390/mm/pgalloc.c-38-}
--
arch/s390/mm/pgalloc.c=117=unsigned long *page_table_alloc_noprof(struct mm_struct *mm)
--
arch/s390/mm/pgalloc.c-128-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/s390/mm/pgalloc.c:129:		pagetable_free(ptdesc);
arch/s390/mm/pgalloc.c-130-		return NULL;
--
arch/s390/mm/pgalloc.c=199=static void base_crst_free(unsigned long *table)
--
arch/s390/mm/pgalloc.c-202-		return;
arch/s390/mm/pgalloc.c:203:	pagetable_free(virt_to_ptdesc(table));
arch/s390/mm/pgalloc.c-204-}
--
arch/sparc/mm/init_64.c=2847=static pte_t *__pte_alloc_one(struct mm_struct *mm)
--
arch/sparc/mm/init_64.c-2853-	if (!pagetable_pte_ctor(mm, ptdesc)) {
arch/sparc/mm/init_64.c:2854:		pagetable_free(ptdesc);
arch/sparc/mm/init_64.c-2855-		return NULL;
--
arch/sparc/mm/init_64.c=2870=static void __pte_free(pgtable_t pte)
--
arch/sparc/mm/init_64.c-2874-	pagetable_dtor(ptdesc);
arch/sparc/mm/init_64.c:2875:	pagetable_free(ptdesc);
arch/sparc/mm/init_64.c-2876-}
--
arch/x86/mm/init_64.c=1009=static void __meminit free_pagetable(struct page *page, int order)
--
arch/x86/mm/init_64.c-1026-	} else {
arch/x86/mm/init_64.c:1027:		pagetable_free(page_ptdesc(page));
arch/x86/mm/init_64.c-1028-	}
--
arch/x86/mm/pat/set_memory.c=413=static void cpa_collapse_large_pages(struct cpa_data *cpa)
--
arch/x86/mm/pat/set_memory.c-440-		list_del(&ptdesc->pt_list);
arch/x86/mm/pat/set_memory.c:441:		pagetable_free(ptdesc);
arch/x86/mm/pat/set_memory.c-442-	}
--
arch/x86/mm/pat/set_memory.c=1233=static int split_large_page(struct cpa_data *cpa, pte_t *kpte,
--
arch/x86/mm/pat/set_memory.c-1246-	if (__split_large_page(cpa, kpte, address, ptdesc))
arch/x86/mm/pat/set_memory.c:1247:		pagetable_free(ptdesc);
arch/x86/mm/pat/set_memory.c-1248-
--
arch/x86/mm/pgtable.c=161=static void free_pmds(struct mm_struct *mm, pmd_t *pmds[], int count)
--
arch/x86/mm/pgtable.c-170-			pagetable_dtor(ptdesc);
arch/x86/mm/pgtable.c:171:			pagetable_free(ptdesc);
arch/x86/mm/pgtable.c-172-			mm_dec_nr_pmds(mm);
--
arch/x86/mm/pgtable.c=176=static int preallocate_pmds(struct mm_struct *mm, pmd_t *pmds[], int count)
--
arch/x86/mm/pgtable.c-192-		if (ptdesc && !pagetable_pmd_ctor(mm, ptdesc)) {
arch/x86/mm/pgtable.c:193:			pagetable_free(ptdesc);
arch/x86/mm/pgtable.c-194-			ptdesc = NULL;
--
include/asm-generic/pgalloc.h=19=static inline pte_t *__pte_alloc_one_kernel_noprof(struct mm_struct *mm)
--
include/asm-generic/pgalloc.h-25-	if (!pagetable_pte_ctor(mm, ptdesc)) {
include/asm-generic/pgalloc.h:26:		pagetable_free(ptdesc);
include/asm-generic/pgalloc.h-27-		return NULL;
--
include/asm-generic/pgalloc.h=72=static inline pgtable_t __pte_alloc_one_noprof(struct mm_struct *mm, gfp_t gfp)
--
include/asm-generic/pgalloc.h-79-	if (!pagetable_pte_ctor(mm, ptdesc)) {
include/asm-generic/pgalloc.h:80:		pagetable_free(ptdesc);
include/asm-generic/pgalloc.h-81-		return NULL;
--
include/asm-generic/pgalloc.h=136=static inline pmd_t *pmd_alloc_one_noprof(struct mm_struct *mm, unsigned long addr)
--
include/asm-generic/pgalloc.h-146-	if (!pagetable_pmd_ctor(mm, ptdesc)) {
include/asm-generic/pgalloc.h:147:		pagetable_free(ptdesc);
include/asm-generic/pgalloc.h-148-		return NULL;
--
include/linux/mm.h=3649=static inline struct ptdesc *pagetable_alloc_noprof(gfp_t gfp, unsigned int order)
--
include/linux/mm.h-3656-
include/linux/mm.h:3657:static inline void __pagetable_free(struct ptdesc *pt)
include/linux/mm.h-3658-{
--
include/linux/mm.h=3667=static inline void pagetable_free_kernel(struct ptdesc *pt)
include/linux/mm.h-3668-{
include/linux/mm.h:3669:	__pagetable_free(pt);
include/linux/mm.h-3670-}
--
include/linux/mm.h-3678- */
include/linux/mm.h:3679:static inline void pagetable_free(struct ptdesc *pt)
include/linux/mm.h-3680-{
--
include/linux/mm.h-3684-	} else {
include/linux/mm.h:3685:		__pagetable_free(pt);
include/linux/mm.h-3686-	}
--
include/linux/mm.h=3781=static inline void pagetable_dtor_free(struct ptdesc *ptdesc)
--
include/linux/mm.h-3783-	pagetable_dtor(ptdesc);
include/linux/mm.h:3784:	pagetable_free(ptdesc);
include/linux/mm.h-3785-}
--
mm/pgtable-generic.c=427=static void kernel_pgtable_work_func(struct work_struct *work)
--
mm/pgtable-generic.c-437-	list_for_each_entry_safe(pt, next, &page_list, pt_list)
mm/pgtable-generic.c:438:		__pagetable_free(pt);
mm/pgtable-generic.c-439-}
]

100/2 2026/06/09 21:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 83394
							output: 47
							thoughts: 1408
						

Thoughts:
**Analyzing a Potential Race Condition in Kernel Page Table Management**

Okay, let's break this down. My initial thought is that `cpa_collapse_large_pages` in `arch/x86/mm/pat/set_memory.c` calls `pagetable_free(ptdesc)`, and also `split_large_page` calls `pagetable_free(ptdesc)`. So, `cpa_collapse_large_pages` is collapsing a PTE page into a large PMD page, which means it frees that PTE page, right? This function is triggered by `__change_page_attr_set_clr` or something similar, and I'm wondering if `vmalloc`, `vfree`, or `vunmap` have anything to do with it, but no, `vmalloc` just allocates and maps, so maybe it's the `vfree` or `vunmap`. It's actually triggered by `cpa_process_alias` or `change_page_attr_set_clr`.

If `cpa_collapse_large_pages` is freeing the PTE page, it calls `pagetable_free(ptdesc)`, which calls `pagetable_free_kernel`, which schedules `kernel_pgtable_work`. And importantly, `cpa_collapse_large_pages` clears the PMD (or sets it to a large page) *before* freeing the PTE page!

Now, if the PMD is set to a large page, `ptdump_walk_pgd` won't walk the PTE page. But wait... what if `ptdump_walk_pgd` reads the PMD *before* it's changed, and then `cpa_collapse_large_pages` changes the PMD and frees the PTE page? Bingo! `ptdump_walk_pgd` accesses the freed PTE page! Is this even possible? Absolutely. `ptdump_walk_pgd` walks the page tables without holding locks that prevent `cpa` from altering them.

But, `ptdump_walk_pgd` holds `mmap_write_lock(mm)`, and for kernel page tables, that's `init_mm`. Does `cpa` hold `mmap_write_lock(&init_mm)`? No, it uses `cpa_lock` (a spinlock). **So, there's a race here between `ptdump_walk_pgd` and `cpa_collapse_large_pages`!**

However, the bug report says the page was allocated by `__pte_alloc_kernel` via `vmalloc_user` in `kcov_ioctl` and freed by `kernel_pgtable_work_func`. If it was freed by `cpa_collapse_large_pages`, the free stack trace would be different. The actual stack trace shows `kernel_pgtable_work_func`. But this only shows the *actual free* and not who scheduled it. That's `pagetable_free_kernel`.

This means the page could have been scheduled by a number of paths, including `__pte_alloc_kernel`, `cpa_collapse_large_pages`, `try_to_free_pte_page`, or `vmemmap_split_pmd`. If it was `__pte_alloc_kernel`, then `pmd_none(*pmd)` should have been false. Why would it be false? Because another thread allocated the PTE page already. If another thread allocated the PTE page, `__pte_alloc_kernel` then frees the *newly* allocated page, but how does `ptdump_walk_pgd` access this page if it was never linked?

Wait... `pte_alloc_one_kernel` allocates a page, then `__pte_alloc_kernel` calls `pte_free_kernel(new)`. `pte_free_kernel` schedules for freeing, and it is freed. Then `ptdump_walk_pgd` accesses it? It can't have accessed this page. It was never linked!

So the page *must* have been linked, and thus it was not freed by `__pte_alloc_kernel`! It has to be freed by something that *unlinks* it. What unlinks a PTE page? Ah, `try_to_free_pte_page` in `arch/x86/mm/pat/set_memory.c`! This is called by `unmap_pte_range`, called by `__unmap_pmd_range`, which is called by `unmap_pmd_range`, which is called by `unmap_pud_range`, which is called by `populate_pgd` on the error path. And we need to double check `cpa


101/2 2026/06/09 21:28 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c Name:cpa_collapse_large_pages]

Results:
map[SourceCode: 413:	static void cpa_collapse_large_pages(struct cpa_data *cpa)
 414:	{
 415:		unsigned long start, addr, end;
 416:		struct ptdesc *ptdesc, *tmp;
 417:		LIST_HEAD(pgtables);
 418:		int collapsed = 0;
 419:		int i;
 420:	
 421:		if (cpa->flags & (CPA_PAGES_ARRAY | CPA_ARRAY)) {
 422:			for (i = 0; i < cpa->numpages; i++)
 423:				collapsed += collapse_large_pages(__cpa_addr(cpa, i),
 424:								  &pgtables);
 425:		} else {
 426:			addr = __cpa_addr(cpa, 0);
 427:			start = addr & PMD_MASK;
 428:			end = addr + PAGE_SIZE * cpa->numpages;
 429:	
 430:			for (addr = start; within(addr, start, end); addr += PMD_SIZE)
 431:				collapsed += collapse_large_pages(addr, &pgtables);
 432:		}
 433:	
 434:		if (!collapsed)
 435:			return;
 436:	
 437:		flush_tlb_all();
 438:	
 439:		list_for_each_entry_safe(ptdesc, tmp, &pgtables, pt_list) {
 440:			list_del(&ptdesc->pt_list);
 441:			pagetable_free(ptdesc);
 442:		}
 443:	}
 SourceFile:arch/x86/mm/pat/set_memory.c]

102/2 2026/06/09 21:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 86382
							output: 44
							thoughts: 8
						

Thoughts:
Okay, here's my interpretation of that thought process, tailored for an expert audience, and written in the first person:

**My Perspective on `collapse_large_pages`**

Right, so we're talking about `collapse_large_pages`. As an expert, I'm already thinking about the implications – memory management, specifically. When I see this flag, my mind immediately jumps to the trade-offs. We're essentially trying to *optimize* how we handle large memory regions. We know that on architectures with support for huge pages, there's a significant performance benefit to using them – reduced TLB misses, less overhead in the page table walks, the works. But it's not a silver bullet, is it?

The real question I'm asking myself is *why* we're considering this collapsing behavior. Is it driven by fragmentation? If so, what's the source? Are we dealing with a system that's been running for a while, and memory has become naturally scattered, or is the allocation pattern just plain inefficient? Or is this aimed at dealing with some other issues, perhaps resource limits where we are trying to force large page usage to reduce memory fragmentation, for instance?

I'm also considering the potential downsides. Collapsing pages introduces complexity. We're fundamentally changing the mapping between virtual and physical memory. This means we need to carefully consider the effects on things like NUMA affinity, and potential increases in memory latency if we end up crossing node boundaries as a result of the collapse. We have to consider how it interacts with other memory management strategies too – the page replacement algorithm, swap, all those details.

And then there's the debugging aspect. Collapsing pages can make things harder to track down. When something goes wrong, it’s not as straightforward to determine exactly where a fault originated, or why certain memory regions are behaving in unexpected ways.

Ultimately, I'm going to want to see the details of the implementation. Is it done efficiently? What are the heuristics driving the collapse? How do we prevent this from introducing an unexpected performance regression? The devil is always in the details, so I need to check the code! I want to understand the *why* as much as the *how* of `collapse_large_pages`.



103/2 2026/06/09 21:28 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c Name:collapse_large_pages]

Results:
map[SourceCode:1369:	/*
1370:	 * Collapse PMD and PUD pages in the kernel mapping around the address where
1371:	 * possible.
1372:	 *
1373:	 * Caller must flush TLB and free page tables queued on the list before
1374:	 * touching the new entries. CPU must not see TLB entries of different size
1375:	 * with different attributes.
1376:	 */
1377:	static int collapse_large_pages(unsigned long addr, struct list_head *pgtables)
1378:	{
1379:		int collapsed = 0;
1380:		pgd_t *pgd;
1381:		p4d_t *p4d;
1382:		pud_t *pud;
1383:		pmd_t *pmd;
1384:	
1385:		addr &= PMD_MASK;
1386:	
1387:		spin_lock(&pgd_lock);
1388:		pgd = pgd_offset_k(addr);
1389:		if (pgd_none(*pgd))
1390:			goto out;
1391:		p4d = p4d_offset(pgd, addr);
1392:		if (p4d_none(*p4d))
1393:			goto out;
1394:		pud = pud_offset(p4d, addr);
1395:		if (!pud_present(*pud) || pud_leaf(*pud))
1396:			goto out;
1397:		pmd = pmd_offset(pud, addr);
1398:		if (!pmd_present(*pmd) || pmd_leaf(*pmd))
1399:			goto out;
1400:	
1401:		collapsed = collapse_pmd_page(pmd, addr, pgtables);
1402:		if (collapsed)
1403:			collapsed += collapse_pud_page(pud, addr, pgtables);
1404:	
1405:	out:
1406:		spin_unlock(&pgd_lock);
1407:		return collapsed;
1408:	}
 SourceFile:arch/x86/mm/pat/set_memory.c]

104/2 2026/06/09 21:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 87541
							output: 45
							thoughts: 9
						

Thoughts:
Okay, here's my attempt at summarizing the thought process, tailored for an expert audience, and written in the first person:

**Analyzing the `collapse_pmd_page` Functionality**

Alright, let's dive into this `collapse_pmd_page` thing. My initial instinct is to break down the context: What's the *goal* here? Are we dealing with dynamic content, a specific UI element, or a data-binding scenario? The name suggests some sort of "collapsing" action related to a "PMD page," so I'm immediately picturing either a UI component that hides/reveals information or some kind of content transformation to improve performance or readability.

My first questions would center around the data structure. What's the input? Is this a DOM element, a JSON object representing the page's structure, or something else entirely? Understanding the data representation is *crucial* to grasping the logic. Are there specific attributes or classes that this function relies on to identify the elements it needs to manipulate?

Now I'm thinking about the implementation. Is this a JavaScript function, server-side code, or something else? If it's JS, is it vanilla or using a framework like React, Vue, or Angular? That impacts how I'd approach debugging and performance analysis. I'd be looking for potential bottlenecks. For example, are we doing a lot of DOM manipulation, which is usually slow? Are there any loops, recursive calls, or expensive calculations involved? Could we optimize by deferring tasks or using techniques like memoization?

The "collapse" part intrigues me. Is this a simple CSS class toggle (e.g., `display: none;` or `visibility: hidden;`)? Or is it more complex, involving animations or transitions? The complexity of the collapse effect could significantly impact performance and responsiveness. I’d want to examine the CSS interactions carefully.

Finally, I'd want to consider the edge cases. What happens if the input data is invalid or missing? Does the function handle errors gracefully, or does it throw an exception? What about accessibility? Is the collapsing behavior designed with screen readers and keyboard navigation in mind? I need to think beyond the happy path to ensure robustness. Ultimately, I would be looking for the impact of this function, from the users experience to system resources.



105/2 2026/06/09 21:28 tool codesearch-definition-source
0m Args:
map[ContextFile:arch/x86/mm/pat/set_memory.c Name:collapse_pmd_page]

Results:
map[SourceCode:1252:	static int collapse_pmd_page(pmd_t *pmd, unsigned long addr,
1253:				     struct list_head *pgtables)
1254:	{
1255:		pmd_t _pmd, old_pmd;
1256:		pte_t *pte, first;
1257:		unsigned long pfn;
1258:		pgprot_t pgprot;
1259:		int i = 0;
1260:	
1261:		if (!cpu_feature_enabled(X86_FEATURE_PSE))
1262:			return 0;
1263:	
1264:		addr &= PMD_MASK;
1265:		pte = pte_offset_kernel(pmd, addr);
1266:		first = *pte;
1267:		pfn = pte_pfn(first);
1268:	
1269:		/* Make sure alignment is suitable */
1270:		if (PFN_PHYS(pfn) & ~PMD_MASK)
1271:			return 0;
1272:	
1273:		/* The page is 4k intentionally */
1274:		if (pte_flags(first) & _PAGE_KERNEL_4K)
1275:			return 0;
1276:	
1277:		/* Check that the rest of PTEs are compatible with the first one */
1278:		for (i = 1, pte++; i < PTRS_PER_PTE; i++, pte++) {
1279:			pte_t entry = *pte;
1280:	
1281:			if (!pte_present(entry))
1282:				return 0;
1283:			if (pte_flags(entry) != pte_flags(first))
1284:				return 0;
1285:			if (pte_pfn(entry) != pte_pfn(first) + i)
1286:				return 0;
1287:		}
1288:	
1289:		old_pmd = *pmd;
1290:	
1291:		/* Success: set up a large page */
1292:		pgprot = pgprot_4k_2_large(pte_pgprot(first));
1293:		pgprot_val(pgprot) |= _PAGE_PSE;
1294:		_pmd = pfn_pmd(pfn, pgprot);
1295:		set_pmd(pmd, _pmd);
1296:	
1297:		/* Queue the page table to be freed after TLB flush */
1298:		list_add(&page_ptdesc(pmd_page(old_pmd))->pt_list, pgtables);
1299:	
1300:		if (IS_ENABLED(CONFIG_X86_32)) {
1301:			struct page *page;
1302:	
1303:			/* Update all PGD tables to use the same large page */
1304:			list_for_each_entry(page, &pgd_list, lru) {
1305:				pgd_t *pgd = (pgd_t *)page_address(page) + pgd_index(addr);
1306:				p4d_t *p4d = p4d_offset(pgd, addr);
1307:				pud_t *pud = pud_offset(p4d, addr);
1308:				pmd_t *pmd = pmd_offset(pud, addr);
1309:				/* Something is wrong if entries doesn't match */
1310:				if (WARN_ON(pmd_val(old_pmd) != pmd_val(*pmd)))
1311:					continue;
1312:				set_pmd(pmd, _pmd);
1313:			}
1314:		}
1315:	
1316:		if (virt_addr_valid(addr) && pfn_range_is_mapped(pfn, pfn + 1))
1317:			collapse_page_count(PG_LEVEL_2M);
1318:	
1319:		return 1;
1320:	}
 SourceFile:arch/x86/mm/pat/set_memory.c]

106/2 2026/06/09 21:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 89256
							output: 37
							thoughts: 1191
						

Thoughts:
**Analyzing the Kernel Memory Corruption Bug**

Okay, let's break this down. My initial thought was that `collapse_pmd_page` was the key, adding the PTE page to `pgtables`. Then, `cpa_collapse_large_pages` would flush the TLB and free these pages via `pagetable_free`, which eventually schedules `kernel_pgtable_work`. So, the PTE page is freed by `kernel_pgtable_work_func`. This lines up perfectly with the bug report! The report explicitly mentions the page being freed by `kernel_pgtable_work_func`, and it was allocated by `__pte_alloc_kernel` through `vmalloc_user` during `kcov_ioctl`.

But then, I need to understand the connection. `kcov_ioctl` uses `vmalloc_user`, which allocates and maps pages. Does `vmalloc_user` itself trigger `cpa_collapse_large_pages`? No, that's called by `__change_page_attr_set_clr`. Does `vmalloc_user` call that? Not directly. Maybe `kcov_ioctl` does something to change attributes? Not quite.

Maybe the vmalloc area is mapped, and then later `cpa_collapse_large_pages` is called on that area? Wait, does `cpa_collapse_large_pages` even work on vmalloc areas? Not exactly. It's called on the direct mapping, not vmalloc directly. But, does `change_page_attr_set_clr` work on vmalloc addresses? Yes, it can, potentially.

But wait, `kcov_ioctl` allocates memory via `vmalloc_user`, and then maps it to userspace using `remap_vmalloc_range`. It doesn't seem to explicitly change any page attributes.

So, if `cpa_collapse_large_pages` isn't the problem, what else could be? Could the page have been freed by `__pte_alloc_kernel` due to some sort of race condition? If it was freed *during* the allocation process, it would never have been linked into the page table. If it's never linked, then `ptdump_walk_pgd` shouldn't be able to access it!

But if `ptdump_walk_pgd` reads the PMD and it points to a valid PTE, then it can access the PTE page. The KASAN report indicates a use-after-free on a *newly allocated* and *freed* PTE page. So, how could `ptdump_walk_pgd` get at it?

I need to look closer at `__pte_alloc_kernel`.

```c
	pte_t *new = pte_alloc_one_kernel(&init_mm);
	if (!new)
		return -ENOMEM;

	spin_lock(&init_mm.page_table_lock);
	if (likely(pmd_none(*pmd))) {	/* Has another populated it ? */
		smp_wmb(); /* See comment in pmd_install() */
		pmd_populate_kernel(&init_mm, pmd, new);
		new = NULL;
	}
	spin_unlock(&init_mm.page_table_lock);
	if (new)
		pte_free_kernel(&init_mm, new);
```

If `pmd_none(*pmd)` is true, the PMD gets populated with the newly allocated PTE (`new`), and `new` is set to NULL. So, `pte_free_kernel` is not called in this case. But if `pmd_none(*pmd)` is false, it means another thread populated the PMD first, and `new` remains non-NULL. In that case, `pte_free_kernel` is called, and `new` is freed. However, in that case, `new` was *never* in the PMD, so `ptdump_walk_pgd` shouldn't have been able to read it! There's no way it was written into that PMD entry.

Is there any other scenario where `new` could be in the PMD? Could `pmd_populate_kernel` be called, and then the PMD get overwritten? No, that only happens when `pmd_none(*pmd)` is true. If `pmd_none(*pmd)` is true, then `new` gets set to NULL, and it's *not* freed. This means if `new` is freed by `__pte_alloc_kernel`, it was *never* in the PMD. So then, how could `ptdump_walk_pg


107/2 2026/06/09 21:28 tool codesearch-definition-source
0m Error:
requested entity does not exist

Args:
map[ContextFile:mm/vmalloc.c Name:pte_alloc_kernel_track]

Results:
map[SourceCode: SourceFile:]

108/2 2026/06/09 21:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 91530
							output: 21
							thoughts: 18
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience:

**Kernel Page Table Allocation: A Quick Check**

Hmm, hold on a second. I'm just quickly trying to recall the implementation of `pte_alloc_kernel_track`. Is that a macro, or an inline function defined somewhere in the kernel's memory management code? It feels like it *could* be one of the more performance-sensitive allocations, and I know kernel developers often use macros or inline functions for these frequently called functions to reduce overhead. Need to quickly refresh my memory of that specific allocation path.



109/2 2026/06/09 21:28 tool grepper
0m Args:
map[Expression:pte_alloc_kernel_track]

Results:
map[Output:mm/memory.c=3310=static int apply_to_pte_range(struct mm_struct *mm, pmd_t *pmd,
--
mm/memory.c-3320-		mapped_pte = pte = (mm == &init_mm) ?
mm/memory.c:3321:			pte_alloc_kernel_track(pmd, addr, mask) :
mm/memory.c-3322-			pte_alloc_map_lock(mm, pmd, addr, &ptl);
--
mm/pgalloc-track.h=32=static inline pmd_t *pmd_alloc_track(struct mm_struct *mm, pud_t *pud,
--
mm/pgalloc-track.h-45-
mm/pgalloc-track.h:46:#define pte_alloc_kernel_track(pmd, address, mask)			\
mm/pgalloc-track.h-47-	((unlikely(pmd_none(*(pmd))) &&					\
--
mm/vmalloc.c=94=static int vmap_pte_range(pmd_t *pmd, unsigned long addr, unsigned long end,
--
mm/vmalloc.c-106-	pfn = phys_addr >> PAGE_SHIFT;
mm/vmalloc.c:107:	pte = pte_alloc_kernel_track(pmd, addr, mask);
mm/vmalloc.c-108-	if (!pte)
--
mm/vmalloc.c=525=static int vmap_pages_pte_range(pmd_t *pmd, unsigned long addr,
--
mm/vmalloc.c-536-
mm/vmalloc.c:537:	pte = pte_alloc_kernel_track(pmd, addr, mask);
mm/vmalloc.c-538-	if (!pte)
]

110/2 2026/06/09 21:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 92166
							output: 39
							thoughts: 14
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience:

**Diving into `mm/pgalloc-track.h`**

Alright, let's take a look at `mm/pgalloc-track.h`. I'm specifically interested in this file because it's probably where the tracking mechanisms for page allocation are defined. I expect to find the core data structures and macros that are used to monitor how pages are allocated and deallocated within the kernel's memory management subsystem. This likely involves keeping track of allocation sites, maybe through stack traces or some kind of debugging information. I am probably looking to see what kind of instrumentation is in place, and what options there are for finer-grained tracking than what I currently have. I'm keen to see if this provides any more data than the standard tools or, perhaps, if it enables better integration with other memory debugging facilities. This is where the magic (or the headache!) of detailed page allocation accounting happens. Let's see what gems we can unearth.



111/2 2026/06/09 21:29 tool codesearch-definition-source
0m Error:
requested entity does not exist

Args:
map[ContextFile:mm/pgalloc-track.h Name:pte_alloc_kernel_track]

Results:
map[SourceCode: SourceFile:]

112/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 92457
							output: 35
							thoughts: 14
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience:

**Diving into `mm/pgalloc-track.h`**

Alright, let's take a look at `mm/pgalloc-track.h`. I'm guessing this file is related to tracking page allocations, likely for debugging or performance analysis. Knowing the kernel's memory management, this could be a crucial component for understanding memory usage patterns and potential leaks. I anticipate seeing macros or data structures used to instrument the page allocation paths. I'll be looking for any hints on how this tracking impacts performance, and if there are configurable options to toggle the tracing behavior. Perhaps there are hooks into the buddy allocator, or slab allocator, depending on how granular the tracking is. The goal is to figure out the methodology used to log or record details such as the caller, size of allocation, and the type of allocation. I hope it is using per cpu tracking for better performance. Let's see what we've got.



113/2 2026/06/09 21:29 tool read-file
0m Args:
map[File:mm/pgalloc-track.h FirstLine:1 LineCount:100]

Results:
map[Contents:   1:	/* SPDX-License-Identifier: GPL-2.0 */
   2:	#ifndef _LINUX_PGALLOC_TRACK_H
   3:	#define _LINUX_PGALLOC_TRACK_H
   4:	
   5:	#if defined(CONFIG_MMU)
   6:	static inline p4d_t *p4d_alloc_track(struct mm_struct *mm, pgd_t *pgd,
   7:					     unsigned long address,
   8:					     pgtbl_mod_mask *mod_mask)
   9:	{
  10:		if (unlikely(pgd_none(*pgd))) {
  11:			if (__p4d_alloc(mm, pgd, address))
  12:				return NULL;
  13:			*mod_mask |= PGTBL_PGD_MODIFIED;
  14:		}
  15:	
  16:		return p4d_offset(pgd, address);
  17:	}
  18:	
  19:	static inline pud_t *pud_alloc_track(struct mm_struct *mm, p4d_t *p4d,
  20:					     unsigned long address,
  21:					     pgtbl_mod_mask *mod_mask)
  22:	{
  23:		if (unlikely(p4d_none(*p4d))) {
  24:			if (__pud_alloc(mm, p4d, address))
  25:				return NULL;
  26:			*mod_mask |= PGTBL_P4D_MODIFIED;
  27:		}
  28:	
  29:		return pud_offset(p4d, address);
  30:	}
  31:	
  32:	static inline pmd_t *pmd_alloc_track(struct mm_struct *mm, pud_t *pud,
  33:					     unsigned long address,
  34:					     pgtbl_mod_mask *mod_mask)
  35:	{
  36:		if (unlikely(pud_none(*pud))) {
  37:			if (__pmd_alloc(mm, pud, address))
  38:				return NULL;
  39:			*mod_mask |= PGTBL_PUD_MODIFIED;
  40:		}
  41:	
  42:		return pmd_offset(pud, address);
  43:	}
  44:	#endif /* CONFIG_MMU */
  45:	
  46:	#define pte_alloc_kernel_track(pmd, address, mask)			\
  47:		((unlikely(pmd_none(*(pmd))) &&					\
  48:		  (__pte_alloc_kernel(pmd) || ({*(mask)|=PGTBL_PMD_MODIFIED;0;})))?\
  49:			NULL: pte_offset_kernel(pmd, address))
  50:	
  51:	#endif /* _LINUX_PGALLOC_TRACK_H */
]

114/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 93499
							output: 34
							thoughts: 1191
						

Thoughts:
**Analyzing a Potential Race Condition in Kernel Page Table Management**

Okay, let's break this down. First, I see `pte_alloc_kernel_track`, which is a macro. The macro's logic is this: it calls `__pte_alloc_kernel` if `pmd_none` is true. If `__pte_alloc_kernel` succeeds, it sets a mask and returns the address returned by `pte_offset_kernel`. My initial thought is, what if `__pte_alloc_kernel` allocates a page and then, due to a race, the check inside `__pte_alloc_kernel` has a different outcome? The allocation might return a page, which is then freed and return 0. The race here is not returning the freed page. So, if `pte_alloc_kernel_track` returns `pte_offset_kernel(pmd, address)`, it wouldn't be the freed page.

So, how can this trigger a bug? If `pte_alloc_kernel_track` never returns the freed page, how could it be written to? No, that's wrong. It will write to the valid page. So the issue is when we try to access the freed page.

The next question is, if the freed page isn't being used, how does a tool like `ptdump_walk_pgd` access it? It must be a concurrency issue. What if `__pte_alloc_kernel` links the page and something else frees it? We know that `cpa_collapse_large_pages` *can* free PTE pages. But the bug report says `kernel_pgtable_work_func` frees the page, and the stack trace:

```
 reset_page_owner include/linux/page_owner.h:25 [inline]
 __free_pages_prepare mm/page_alloc.c:1397 [inline]
 __free_frozen_pages+0x794/0x10a0 mm/page_alloc.c:2938
 __pagetable_free include/linux/mm.h:3661 [inline]
 kernel_pgtable_work_func+0x21a/0x2f0 mm/pgtable-generic.c:438
 process_one_work+0xa0e/0x1980 kernel/workqueue.c:3314
```

This *only* shows the worker thread freeing the page, but NOT the scheduler. Who scheduled it? `pagetable_free_kernel` schedules the work. And `pagetable_free_kernel` calls `pagetable_free` and that's called by `cpa_collapse_large_pages`. So the page could have been freed by `cpa_collapse_large_pages`!

But the bug report says it was allocated by `__pte_alloc_kernel` in `kcov_ioctl`. This is a clue. `kcov_ioctl` allocates a `vmalloc` area, which, in turn, allocates the PTE page!

So, the likely scenario is: `kcov_ioctl` allocates the vmalloc area, which leads to `__pte_alloc_kernel` being called, and the page being allocated, then `cpa_collapse_large_pages` collapses the PTE into a large PMD, freeing the PTE. If `ptdump_walk_pgd` is concurrent with this process, then it could read the PMD before it's collapsed, then attempt to access the freed PTE. That's a plausible race.

Can `cpa_collapse_large_pages` be called on vmalloc memory? It's called by `__change_page_attr_set_clr`. Does `kcov_ioctl` call `__change_page_attr_set_clr`? No, but maybe `vfree` does? However, `vfree` calls `vunmap_range_noflush`, which clears the PTEs. It doesn't call `cpa_collapse_large_pages`.

So, what calls `cpa_collapse_large_pages`? `change_page_attr_set_clr` and this is called by `set_memory_ro`, `set_memory_rw`, `set_memory_nx`, `set_memory_x`, etc. Does `vmalloc` call any of those? Yes, `vmalloc` can allocate executable memory and uses functions such as `module_alloc` and `bpf_jit_alloc`, which might call those functions. But the key here is, `kcov_ioctl` calls `vmalloc_user`, which allocates memory with `PAGE_KERNEL` and maps it to user space. Does `vmalloc_user


115/2 2026/06/09 21:29 tool codesearch-definition-source
0m Error:
requested entity does not exist

Args:
map[ContextFile:mm/vmalloc.c Name:vmalloc_user]

Results:
map[SourceCode: SourceFile:]

116/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 95770
							output: 38
							thoughts: 21
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience and written in the first person:

**Navigating the Virtual Memory Landscape**

Okay, let's see. My mind immediately jumped to `vmalloc_user_noprof` located within `mm/vmalloc.c`. This suggests a focus on the user-space virtual memory allocation within the kernel. I'm likely either looking into a specific allocation path, maybe a performance bottleneck around non-profiled memory mapping, or perhaps debugging some kind of memory-related issue that's leading me to this particular function. It seems that this function is important, enough to have triggered a mental association, indicating its significance in my line of investigation.



117/2 2026/06/09 21:29 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:vmalloc_user_noprof]

Results:
map[SourceCode:4207:	/**
4208:	 * vmalloc_user - allocate zeroed virtually contiguous memory for userspace
4209:	 * @size: allocation size
4210:	 *
4211:	 * The resulting memory area is zeroed so it can be mapped to userspace
4212:	 * without leaking data.
4213:	 *
4214:	 * Return: pointer to the allocated memory or %NULL on error
4215:	 */
4216:	void *vmalloc_user_noprof(unsigned long size)
4217:	{
4218:		return __vmalloc_node_range_noprof(size, SHMLBA,  VMALLOC_START, VMALLOC_END,
4219:					    GFP_KERNEL | __GFP_ZERO, PAGE_KERNEL,
4220:					    VM_USERMAP, NUMA_NO_NODE,
4221:					    __builtin_return_address(0));
4222:	}
 SourceFile:mm/vmalloc.c]

118/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 96264
							output: 39
							thoughts: 200
						

Thoughts:
**My Line of Inquiry: Page Table Entry (PTE) Management in Kernel Memory Allocation**

Okay, so I'm digging into this kernel memory allocation process and immediately hit `__vmalloc_node_range_noprof`. My first thought is whether this function touches the `set_memory_*` functions, but no, it seems to just handle allocation and mapping. However, a potential vulnerability in memory management is that the `kcov_ioctl` function can free this allocated memory. My concern is whether `vfree`, called by `kcov_ioctl` in turn, invokes any `set_memory_*` calls. Nope, no luck.

So, if that's not the path, how is this memory being freed? The code's call stack gets me looking at `cpa_collapse_large_pages` because I recall that it is called by `__change_page_attr_set_clr` when `cpa->force_split` is zero. 

That makes me consider: Is there ANY other scenario in which a PTE page could be freed? What if `vfree` *does* somehow free the PTE page? I need to check how `vfree` manages the PTEs by going into the details in `mm/vmalloc.c`, specifically `free_vmap_area_noflush`.



119/2 2026/06/09 21:29 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:free_vmap_area_noflush]

Results:
map[SourceCode:2434:	/*
2435:	 * Free a vmap area, caller ensuring that the area has been unmapped,
2436:	 * unlinked and flush_cache_vunmap had been called for the correct
2437:	 * range previously.
2438:	 */
2439:	static void free_vmap_area_noflush(struct vmap_area *va)
2440:	{
2441:		unsigned long nr_lazy_max = lazy_max_pages();
2442:		unsigned long va_start = va->va_start;
2443:		unsigned int vn_id = decode_vn_id(va->flags);
2444:		struct vmap_node *vn;
2445:		unsigned long nr_lazy;
2446:	
2447:		if (WARN_ON_ONCE(!list_empty(&va->list)))
2448:			return;
2449:	
2450:		nr_lazy = atomic_long_add_return_relaxed(va_size(va) >> PAGE_SHIFT,
2451:						 &vmap_lazy_nr);
2452:	
2453:		/*
2454:		 * If it was request by a certain node we would like to
2455:		 * return it to that node, i.e. its pool for later reuse.
2456:		 */
2457:		vn = is_vn_id_valid(vn_id) ?
2458:			id_to_node(vn_id):addr_to_node(va->va_start);
2459:	
2460:		spin_lock(&vn->lazy.lock);
2461:		insert_vmap_area(va, &vn->lazy.root, &vn->lazy.head);
2462:		spin_unlock(&vn->lazy.lock);
2463:	
2464:		trace_free_vmap_area_noflush(va_start, nr_lazy, nr_lazy_max);
2465:	
2466:		/* After this point, we may free va at any time */
2467:		if (unlikely(nr_lazy > nr_lazy_max))
2468:			schedule_work(&drain_vmap_work);
2469:	}
 SourceFile:mm/vmalloc.c]

120/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 97413
							output: 39
							thoughts: 102
						

Thoughts:
**Deconstructing the `vmap` Deallocation Process**

Okay, so I'm tracing the `vmap` area deallocation and trying to grasp the sequence. It looks like `free_vmap_area_noflush` just *queues* the `vmap_area` onto a lazy list. That's the first step; it doesn't immediately free anything. Then, `drain_vmap_work` gets called, and that kicks off `drain_vmap_area_work`. Which, in turn, leads us to `__purge_vmap_area_lazy`. Finally, `__purge_vmap_area_lazy` calls `free_vmap_area`.

The key question now is: does `free_vmap_area` *actually* release the page tables? I need to verify that. My instinct is telling me that this is where the real freeing happens, but I need to confirm the implementation within `__purge_vmap_area_lazy`. I'll have to dive into that function to be certain.



121/2 2026/06/09 21:29 tool codesearch-definition-source
0m Args:
map[ContextFile:mm/vmalloc.c Name:__purge_vmap_area_lazy]

Results:
map[SourceCode:2332:	/*
2333:	 * Purges all lazily-freed vmap areas.
2334:	 */
2335:	static bool __purge_vmap_area_lazy(unsigned long start, unsigned long end,
2336:			bool full_pool_decay)
2337:	{
2338:		unsigned long nr_purged_areas = 0;
2339:		unsigned int nr_purge_helpers;
2340:		static cpumask_t purge_nodes;
2341:		unsigned int nr_purge_nodes;
2342:		struct vmap_node *vn;
2343:		int i;
2344:	
2345:		lockdep_assert_held(&vmap_purge_lock);
2346:	
2347:		/*
2348:		 * Use cpumask to mark which node has to be processed.
2349:		 */
2350:		purge_nodes = CPU_MASK_NONE;
2351:	
2352:		for_each_vmap_node(vn) {
2353:			INIT_LIST_HEAD(&vn->purge_list);
2354:			vn->skip_populate = full_pool_decay;
2355:			decay_va_pool_node(vn, full_pool_decay);
2356:	
2357:			if (RB_EMPTY_ROOT(&vn->lazy.root))
2358:				continue;
2359:	
2360:			spin_lock(&vn->lazy.lock);
2361:			WRITE_ONCE(vn->lazy.root.rb_node, NULL);
2362:			list_replace_init(&vn->lazy.head, &vn->purge_list);
2363:			spin_unlock(&vn->lazy.lock);
2364:	
2365:			start = min(start, list_first_entry(&vn->purge_list,
2366:				struct vmap_area, list)->va_start);
2367:	
2368:			end = max(end, list_last_entry(&vn->purge_list,
2369:				struct vmap_area, list)->va_end);
2370:	
2371:			cpumask_set_cpu(node_to_id(vn), &purge_nodes);
2372:		}
2373:	
2374:		nr_purge_nodes = cpumask_weight(&purge_nodes);
2375:		if (nr_purge_nodes > 0) {
2376:			flush_tlb_kernel_range(start, end);
2377:	
2378:			/* One extra worker is per a lazy_max_pages() full set minus one. */
2379:			nr_purge_helpers = atomic_long_read(&vmap_lazy_nr) / lazy_max_pages();
2380:			nr_purge_helpers = clamp(nr_purge_helpers, 1U, nr_purge_nodes) - 1;
2381:	
2382:			for_each_cpu(i, &purge_nodes) {
2383:				vn = &vmap_nodes[i];
2384:	
2385:				if (nr_purge_helpers > 0) {
2386:					INIT_WORK(&vn->purge_work, purge_vmap_node);
2387:	
2388:					if (cpumask_test_cpu(i, cpu_online_mask))
2389:						schedule_work_on(i, &vn->purge_work);
2390:					else
2391:						schedule_work(&vn->purge_work);
2392:	
2393:					nr_purge_helpers--;
2394:				} else {
2395:					vn->purge_work.func = NULL;
2396:					purge_vmap_node(&vn->purge_work);
2397:					nr_purged_areas += vn->nr_purged;
2398:				}
2399:			}
2400:	
2401:			for_each_cpu(i, &purge_nodes) {
2402:				vn = &vmap_nodes[i];
2403:	
2404:				if (vn->purge_work.func) {
2405:					flush_work(&vn->purge_work);
2406:					nr_purged_areas += vn->nr_purged;
2407:				}
2408:			}
2409:		}
2410:	
2411:		trace_purge_vmap_area_lazy(start, end, nr_purged_areas);
2412:		return nr_purged_areas > 0;
2413:	}
 SourceFile:mm/vmalloc.c]

122/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 99076
							output: 18
							thoughts: 101
						

Thoughts:
**My Current Train of Thought**

Okay, so I'm digging into how `vfree` handles freeing virtual memory in the kernel. Right now, I'm tracing the execution path and it looks like `purge_vmap_node` calls `free_vmap_area`. Hmm, `free_vmap_area` itself just frees the `vmap_area` structure, which makes sense. But, it doesn't actually touch the page tables associated with the `vmalloc` region. That's... concerning. Does this mean the page tables are never truly freed with a standard `vfree`? That seems like a memory leak waiting to happen.

Wait a second, there *has* to be some mechanism to reclaim those page tables. Now I recall a function name like `free_empty_tables`, or something similar.  I need to check for a function like `free_empty_tables`! Let me search the code base for that, or something close to it, to see if there's a related function that handles that part of the cleanup.



123/2 2026/06/09 21:29 tool grepper
0m Args:
map[Expression:free_empty_]

Results:
map[Output:arch/arm64/mm/mmu.c=1572=static void unmap_hotplug_range(unsigned long addr, unsigned long end,
--
arch/arm64/mm/mmu.c-1601-
arch/arm64/mm/mmu.c:1602:static void free_empty_pte_table(pmd_t *pmdp, unsigned long addr,
arch/arm64/mm/mmu.c-1603-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1638-
arch/arm64/mm/mmu.c:1639:static void free_empty_pmd_table(pud_t *pudp, unsigned long addr,
arch/arm64/mm/mmu.c-1640-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1653-		WARN_ON(!pmd_present(pmd) || !pmd_table(pmd));
arch/arm64/mm/mmu.c:1654:		free_empty_pte_table(pmdp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1655-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c-1678-
arch/arm64/mm/mmu.c:1679:static void free_empty_pud_table(p4d_t *p4dp, unsigned long addr,
arch/arm64/mm/mmu.c-1680-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1693-		WARN_ON(!pud_present(pud) || !pud_table(pud));
arch/arm64/mm/mmu.c:1694:		free_empty_pmd_table(pudp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1695-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c-1718-
arch/arm64/mm/mmu.c:1719:static void free_empty_p4d_table(pgd_t *pgdp, unsigned long addr,
arch/arm64/mm/mmu.c-1720-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1733-		WARN_ON(!p4d_present(p4d));
arch/arm64/mm/mmu.c:1734:		free_empty_pud_table(p4dp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1735-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c-1758-
arch/arm64/mm/mmu.c:1759:static void free_empty_tables(unsigned long addr, unsigned long end,
arch/arm64/mm/mmu.c-1760-			      unsigned long floor, unsigned long ceiling)
--
arch/arm64/mm/mmu.c-1772-		WARN_ON(!pgd_present(pgd));
arch/arm64/mm/mmu.c:1773:		free_empty_p4d_table(pgdp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1774-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c=1807=void vmemmap_free(unsigned long start, unsigned long end,
--
arch/arm64/mm/mmu.c-1812-	unmap_hotplug_range(start, end, true, altmap);
arch/arm64/mm/mmu.c:1813:	free_empty_tables(start, end, VMEMMAP_START, VMEMMAP_END);
arch/arm64/mm/mmu.c-1814-}
--
arch/arm64/mm/mmu.c=1949=static void __remove_pgd_mapping(pgd_t *pgdir, unsigned long start, u64 size)
--
arch/arm64/mm/mmu.c-1956-	unmap_hotplug_range(start, end, false, NULL);
arch/arm64/mm/mmu.c:1957:	free_empty_tables(start, end, PAGE_OFFSET, PAGE_END);
arch/arm64/mm/mmu.c-1958-}
--
mm/slub.c=2780=static inline struct slab_sheaf *alloc_empty_sheaf(struct kmem_cache *s,
--
mm/slub.c-2785-
mm/slub.c:2786:static void free_empty_sheaf(struct kmem_cache *s, struct slab_sheaf *sheaf)
mm/slub.c-2787-{
--
mm/slub.c=2954=static void rcu_free_sheaf_nobarn(struct rcu_head *head)
--
mm/slub.c-2965-
mm/slub.c:2966:	free_empty_sheaf(s, sheaf);
mm/slub.c-2967-}
--
mm/slub.c=2978=static void pcs_flush_all(struct kmem_cache *s)
--
mm/slub.c-2995-		sheaf_flush_unused(s, spare);
mm/slub.c:2996:		free_empty_sheaf(s, spare);
mm/slub.c-2997-	}
--
mm/slub.c=3005=static void __pcs_flush_all_cpu(struct kmem_cache *s, unsigned int cpu)
--
mm/slub.c-3014-		sheaf_flush_unused(s, pcs->spare);
mm/slub.c:3015:		free_empty_sheaf(s, pcs->spare);
mm/slub.c-3016-		pcs->spare = NULL;
--
mm/slub.c=3025=static void pcs_destroy(struct kmem_cache *s)
--
mm/slub.c-3061-		if (!WARN_ON(pcs->main->size)) {
mm/slub.c:3062:			free_empty_sheaf(s, pcs->main);
mm/slub.c-3063-			pcs->main = NULL;
--
mm/slub.c=3236=static void barn_shrink(struct kmem_cache *s, struct node_barn *barn)
--
mm/slub.c-3253-		sheaf_flush_unused(s, sheaf);
mm/slub.c:3254:		free_empty_sheaf(s, sheaf);
mm/slub.c-3255-	}
--
mm/slub.c-3257-	list_for_each_entry_safe(sheaf, sheaf2, &empty_list, barn_list)
mm/slub.c:3258:		free_empty_sheaf(s, sheaf);
mm/slub.c-3259-}
--
mm/slub.c=4593=__pcs_replace_empty_main(struct kmem_cache *s, struct slub_percpu_sheaves *pcs, gfp_t gfp)
--
mm/slub.c-4657-		sheaf_flush_unused(s, empty);
mm/slub.c:4658:		free_empty_sheaf(s, empty);
mm/slub.c-4659-
--
mm/slub.c=4994=kmem_cache_prefill_sheaf(struct kmem_cache *s, gfp_t gfp, unsigned int size)
--
mm/slub.c-5059-			sheaf_flush_unused(s, sheaf);
mm/slub.c:5060:			free_empty_sheaf(s, sheaf);
mm/slub.c-5061-			sheaf = NULL;
--
mm/slub.c=5078=void kmem_cache_return_sheaf(struct kmem_cache *s, gfp_t gfp,
--
mm/slub.c-5114-		sheaf_flush_unused(s, sheaf);
mm/slub.c:5115:		free_empty_sheaf(s, sheaf);
mm/slub.c-5116-		return;
--
mm/slub.c=5829=static void rcu_free_sheaf(struct rcu_head *head)
--
mm/slub.c-5882-
mm/slub.c:5883:	free_empty_sheaf(s, sheaf);
mm/slub.c-5884-}
]

124/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 101764
							output: 18
							thoughts: 59
						

Thoughts:
**Investigating Memory Management Differences**

Okay, so I'm digging into memory management here. I just saw `free_empty_tables` in `arch/arm64/mm/mmu.c`, which is interesting. I'm trying to understand if a similar function or concept exists for the x86 architecture. The ARM implementation is pretty clear, and I'm curious if x86 handles it the same way. Therefore, I need to look around in the x86 memory management code. Let's start with a focused search. I'll search for `free_empty_` specifically within the `arch/x86/mm/` directory. That should be a good starting point to see how they manage their page tables. I suspect there may be a similar function, maybe with a slightly different naming convention or implementation details, and finding it is key to understanding the architectural similarities and differences.



125/2 2026/06/09 21:29 tool grepper
0m Args:
map[Expression:free_empty_]

Results:
map[Output:arch/arm64/mm/mmu.c=1572=static void unmap_hotplug_range(unsigned long addr, unsigned long end,
--
arch/arm64/mm/mmu.c-1601-
arch/arm64/mm/mmu.c:1602:static void free_empty_pte_table(pmd_t *pmdp, unsigned long addr,
arch/arm64/mm/mmu.c-1603-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1638-
arch/arm64/mm/mmu.c:1639:static void free_empty_pmd_table(pud_t *pudp, unsigned long addr,
arch/arm64/mm/mmu.c-1640-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1653-		WARN_ON(!pmd_present(pmd) || !pmd_table(pmd));
arch/arm64/mm/mmu.c:1654:		free_empty_pte_table(pmdp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1655-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c-1678-
arch/arm64/mm/mmu.c:1679:static void free_empty_pud_table(p4d_t *p4dp, unsigned long addr,
arch/arm64/mm/mmu.c-1680-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1693-		WARN_ON(!pud_present(pud) || !pud_table(pud));
arch/arm64/mm/mmu.c:1694:		free_empty_pmd_table(pudp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1695-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c-1718-
arch/arm64/mm/mmu.c:1719:static void free_empty_p4d_table(pgd_t *pgdp, unsigned long addr,
arch/arm64/mm/mmu.c-1720-				 unsigned long end, unsigned long floor,
--
arch/arm64/mm/mmu.c-1733-		WARN_ON(!p4d_present(p4d));
arch/arm64/mm/mmu.c:1734:		free_empty_pud_table(p4dp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1735-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c-1758-
arch/arm64/mm/mmu.c:1759:static void free_empty_tables(unsigned long addr, unsigned long end,
arch/arm64/mm/mmu.c-1760-			      unsigned long floor, unsigned long ceiling)
--
arch/arm64/mm/mmu.c-1772-		WARN_ON(!pgd_present(pgd));
arch/arm64/mm/mmu.c:1773:		free_empty_p4d_table(pgdp, addr, next, floor, ceiling);
arch/arm64/mm/mmu.c-1774-	} while (addr = next, addr < end);
--
arch/arm64/mm/mmu.c=1807=void vmemmap_free(unsigned long start, unsigned long end,
--
arch/arm64/mm/mmu.c-1812-	unmap_hotplug_range(start, end, true, altmap);
arch/arm64/mm/mmu.c:1813:	free_empty_tables(start, end, VMEMMAP_START, VMEMMAP_END);
arch/arm64/mm/mmu.c-1814-}
--
arch/arm64/mm/mmu.c=1949=static void __remove_pgd_mapping(pgd_t *pgdir, unsigned long start, u64 size)
--
arch/arm64/mm/mmu.c-1956-	unmap_hotplug_range(start, end, false, NULL);
arch/arm64/mm/mmu.c:1957:	free_empty_tables(start, end, PAGE_OFFSET, PAGE_END);
arch/arm64/mm/mmu.c-1958-}
--
mm/slub.c=2780=static inline struct slab_sheaf *alloc_empty_sheaf(struct kmem_cache *s,
--
mm/slub.c-2785-
mm/slub.c:2786:static void free_empty_sheaf(struct kmem_cache *s, struct slab_sheaf *sheaf)
mm/slub.c-2787-{
--
mm/slub.c=2954=static void rcu_free_sheaf_nobarn(struct rcu_head *head)
--
mm/slub.c-2965-
mm/slub.c:2966:	free_empty_sheaf(s, sheaf);
mm/slub.c-2967-}
--
mm/slub.c=2978=static void pcs_flush_all(struct kmem_cache *s)
--
mm/slub.c-2995-		sheaf_flush_unused(s, spare);
mm/slub.c:2996:		free_empty_sheaf(s, spare);
mm/slub.c-2997-	}
--
mm/slub.c=3005=static void __pcs_flush_all_cpu(struct kmem_cache *s, unsigned int cpu)
--
mm/slub.c-3014-		sheaf_flush_unused(s, pcs->spare);
mm/slub.c:3015:		free_empty_sheaf(s, pcs->spare);
mm/slub.c-3016-		pcs->spare = NULL;
--
mm/slub.c=3025=static void pcs_destroy(struct kmem_cache *s)
--
mm/slub.c-3061-		if (!WARN_ON(pcs->main->size)) {
mm/slub.c:3062:			free_empty_sheaf(s, pcs->main);
mm/slub.c-3063-			pcs->main = NULL;
--
mm/slub.c=3236=static void barn_shrink(struct kmem_cache *s, struct node_barn *barn)
--
mm/slub.c-3253-		sheaf_flush_unused(s, sheaf);
mm/slub.c:3254:		free_empty_sheaf(s, sheaf);
mm/slub.c-3255-	}
--
mm/slub.c-3257-	list_for_each_entry_safe(sheaf, sheaf2, &empty_list, barn_list)
mm/slub.c:3258:		free_empty_sheaf(s, sheaf);
mm/slub.c-3259-}
--
mm/slub.c=4593=__pcs_replace_empty_main(struct kmem_cache *s, struct slub_percpu_sheaves *pcs, gfp_t gfp)
--
mm/slub.c-4657-		sheaf_flush_unused(s, empty);
mm/slub.c:4658:		free_empty_sheaf(s, empty);
mm/slub.c-4659-
--
mm/slub.c=4994=kmem_cache_prefill_sheaf(struct kmem_cache *s, gfp_t gfp, unsigned int size)
--
mm/slub.c-5059-			sheaf_flush_unused(s, sheaf);
mm/slub.c:5060:			free_empty_sheaf(s, sheaf);
mm/slub.c-5061-			sheaf = NULL;
--
mm/slub.c=5078=void kmem_cache_return_sheaf(struct kmem_cache *s, gfp_t gfp,
--
mm/slub.c-5114-		sheaf_flush_unused(s, sheaf);
mm/slub.c:5115:		free_empty_sheaf(s, sheaf);
mm/slub.c-5116-		return;
--
mm/slub.c=5829=static void rcu_free_sheaf(struct rcu_head *head)
--
mm/slub.c-5882-
mm/slub.c:5883:	free_empty_sheaf(s, sheaf);
mm/slub.c-5884-}
]

126/2 2026/06/09 21:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 104375
							output: 50
							thoughts: 1786
						

Thoughts:
**The Page Table Conundrum**

Okay, let's break this down. No, there's no `free_empty_tables` function for x86 that's the starting point. But, could this be a PTE page allocation problem? If `vmap_pages_pte_range` allocates a PTE page, and then the check `pmd_none(*pmd)` fails, meaning the PMD *already* has something, would the system try to free the *newly* allocated PTE page. Could `ptdump_walk_pgd` then access this freed page? No, `pte_alloc_kernel_track` returns a pointer to the existing PTE page, not the new one. So, `vmap_pages_pte_range` writes to an existing PTE and `ptdump_walk_pgd` reads from the same. No access to a newly allocated and freed page in that scenario.

But, what if `pte_offset_kernel(pmd, address)` points to the *newly* allocated PTE page instead? If `__pte_alloc_kernel` is called and `pmd_none(*pmd)` is true, the function populates the PMD with the new PTE page. Then `pte_free_kernel` isn't called! So, the new PTE page is *not* freed. Wait, looking closer, when `pmd_none(*pmd)` is true, `new` is set to `NULL`, which ensures `pte_free_kernel` isn't called. So, the new PTE page remains allocated.

So, how can the report claim the page was allocated by `__pte_alloc_kernel` and freed by `kernel_pgtable_work_func`? Maybe the page *was* allocated by `__pte_alloc_kernel`, added to the PMD, and then freed *later* by `kernel_pgtable_work_func`? We know that `cpa_collapse_large_pages` can free PTE pages. If `cpa_collapse_large_pages` frees a PTE page, it calls `pagetable_free`, which calls `pagetable_free_kernel`, and that function schedules `kernel_pgtable_work_func`. Ah, so, `cpa_collapse_large_pages` must be the culprit!

But wait, `cpa_collapse_large_pages` is called by `change_page_attr_set_clr`. Does `kcov_ioctl` call `change_page_attr_set_clr`? No. But, could something else be calling `change_page_attr_set_clr` on the same address space? Thinking about this, `kcov_ioctl` allocates vmalloc memory. Can `cpa_collapse_large_pages` be called on vmalloc memory? Yes, functions like `set_memory_*` can be called on vmalloc addresses. BPF JIT and module loading use this pattern. However, `kcov_ioctl` uses `vmalloc_user` which allocates pages in the kernel but maps them to userspace and does not call `set_memory_*`.

But wait! What if the vmalloc area, allocated by `kcov_ioctl`, is freed (e.g., when the file descriptor is closed)? Then `vfree` is called, which calls `vunmap_range_noflush`. It clears the PTEs, but *doesn't* free the PTE pages themselves! So, the PTE pages are still in the page table, but are effectively empty. Then, another vmalloc allocation reuses the *same* virtual address range! This new allocation might be for a module or BPF JIT! And they *do* call `set_memory_ro` or `set_memory_x`! And that calls `cpa_collapse_large_pages`!

But `cpa_collapse_large_pages` needs to see compatible PTEs. It checks if the PTEs are empty? Not empty.  No, looking at `collapse_pmd_page`, it requires all PTEs to be *present*. Only if the PTE pages are all mapped and compatible, will `cpa_collapse_large_pages` collapse a PTE page into a large PMD page and *then* free the PTE page. This requires all PTE pages to be present.

A new vmalloc allocation uses the same range and allocates contiguous physical memory. It populates PTEs that are contiguous and have the same flags. `set_memory_*` is called, and `cpa_collapse_large_pages` collapses the PTE page into a large PMD page, which frees the PTE page!

Now, `ptdump_walk_pgd` was walking the page tables and read the PMD *before* it collapsed. Then


127/2 2026/06/09 21:30 tool codesearch-find-references
0m Args:
map[ContextFile:mm/ptdump.c IncludeSnippetLines:5 Name:ptdump_walk_pgd SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:ptdump_walk_pgd_level_core SourceFile:arch/x86/mm/dump_pagetables.c SourceLine:458 SourceSnippet: 453:			.to_dmesg	= dmesg,
 454:			.check_wx	= checkwx,
 455:			.seq		= m
 456:		};
 457:	
 458:		ptdump_walk_pgd(&st.ptdump, mm, pgd);
 459:	
 460:		if (!checkwx)
 461:			return true;
 462:		if (st.wx_pages) {
 463:			pr_info("x86/mm: Checked W+X mappings: FAILED, %lu W+X pages found.\n",
]] TruncatedOutput:false]

128/2 2026/06/09 21:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 107493
							output: 55
							thoughts: 627
						

Thoughts:
**Analyzing the Impact of a Use-After-Free in Page Table Walking**

Okay, so let's break this down. `ptdump_walk_pgd_level_core` is only accessible through `debugfs`, which is, of course, restricted to root. This means no unprivileged processes or user namespaces can touch it, since debugfs is root-owned and cannot be mounted in user namespaces.

The core of the issue is a use-after-free on a page table page. The page gets freed, and then `ptdump_walk_pgd` reads from it. But critically, it *only* reads. It grabs the PTEs and prints them to a `seq_file`. No writing occurs, so it’s simply an out-of-bounds read.

Can this be leveraged? An attacker with root privileges can read freed memory. However, root already has access to *all* memory through tools like `/dev/mem` or `/proc/kcore`. Reading freed memory isn't a privilege escalation in this context.

Now, could this cause a crash? If the page were unmapped, a read would trigger a page fault and panic. But that's not the case. The page *was* freed to the page allocator, but it remains mapped in the direct mapping. The code accesses the page via its direct mapping virtual address using `pte_offset_kernel`. So, the address *is* always mapped.

Therefore, it will just read whatever data currently resides on that page. It might print garbage to the debugfs file, as it misinterprets the data as PTEs, but it *won't* cause a crash unless it's a very rare case of memory hot-remove. Or, if KASAN is enabled, it would be detected and panic. But in a production build, with no KASAN, it will just read garbage.

So, this isn't a denial of service (no crash in production) and it's not exploitable, as it is a read-only access and it is only accessible by root.

I should double check if `ptdump_walk_pgd` is the *only* caller of `walk_kernel_page_table_range_lockless`. Let's search for all the callers.



129/2 2026/06/09 21:30 tool codesearch-find-references
0m Args:
map[ContextFile:mm/pagewalk.c IncludeSnippetLines:5 Name:walk_kernel_page_table_range_lockless SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:walk_kernel_page_table_range SourceFile:mm/pagewalk.c SourceLine:638 SourceSnippet: 633:		 * specified address range from being freed. The caller should take
 634:		 * other actions to prevent this race.
 635:		 */
 636:		mmap_assert_locked(&init_mm);
 637:	
 638:		return walk_kernel_page_table_range_lockless(start, end, ops, pgd,
 639:							     private);
 640:	}
]] TruncatedOutput:false]

130/2 2026/06/09 21:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 108853
							output: 52
							thoughts: 16
						

Thoughts:
Okay, here's my interpretation of that thought process, tailored for an expert audience, and written in the first person:

**Kernel Page Table Range Analysis**

Alright, so I'm thinking about this `walk_kernel_page_table_range` function. Immediately, my mind jumps to its purpose – it's designed to *traverse* a specific range of kernel virtual addresses. I'm visualizing the page table hierarchy in my head, remembering the implications of multi-level page tables, and considering that this likely involves a series of lookups and calculations based on the virtual address being examined. The function, in essence, is likely a critical tool for memory management within the kernel. I begin to think about the different data structures involved, the likely access patterns, and the potential performance bottlenecks that could arise in such a traversal.

Now, the natural follow-up is to determine how this function is used. I need to understand *why* the kernel would need to iterate through a range of kernel virtual addresses in this way. I immediately start mentally constructing a list of scenarios. Thinking this through helps me understand its impact and its purpose within the bigger picture. This also helps in debugging and profiling. So, the question is now what functions are actually *calling* this one? What is the *context* in which this traversal occurs? Knowing the calling functions is pivotal for a complete understanding. Knowing the call stack and context of this routine is key for determining the role it plays and optimizing it.



131/2 2026/06/09 21:31 tool codesearch-find-references
0m Args:
map[ContextFile:mm/pagewalk.c IncludeSnippetLines:5 Name:walk_kernel_page_table_range SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:vmemmap_remap_range SourceFile:mm/hugetlb_vmemmap.c SourceLine:164 SourceSnippet: 159:		int ret;
 160:	
 161:		VM_BUG_ON(!PAGE_ALIGNED(start | end));
 162:	
 163:		mmap_read_lock(&init_mm);
 164:		ret = walk_kernel_page_table_range(start, end, &vmemmap_remap_ops,
 165:					    NULL, walk);
 166:		mmap_read_unlock(&init_mm);
 167:		if (ret)
 168:			return ret;
 169:	
] map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:walk_page_range_debug SourceFile:mm/pagewalk.c SourceLine:696 SourceSnippet: 691:			.no_vma		= true
 692:		};
 693:	
 694:		/* For convenience, we allow traversal of kernel mappings. */
 695:		if (mm == &init_mm)
 696:			return walk_kernel_page_table_range(start, end, ops,
 697:							    pgd, private);
 698:		if (start >= end || !walk.mm)
 699:			return -EINVAL;
 700:		if (!check_ops_safe(ops))
 701:			return -EINVAL;
]] TruncatedOutput:false]

132/2 2026/06/09 21:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 109682
							output: 50
							thoughts: 299
						

Thoughts:
**Analyzing a Potential Race Condition**

Okay, so I'm digging into this bug related to `vmemmap_remap_range` and hugetlb optimization. My initial thought is that it's holding `mmap_read_lock(&init_mm)`. The key question is whether `cpa_collapse_large_pages` also holds `mmap_write_lock(&init_mm)`. I know that `cpa_collapse_large_pages` is working with the direct mapping, using `PAGE_OFFSET`, whereas `vmemmap_remap_range` works with `vmemmap` addresses. So, on the face of it, they *shouldn't* overlap, and there shouldn't be a lock contention problem.

Now, I remember `walk_page_range_debug` being used by `ptdump_walk_pgd`. And it looks like the *only* way to trigger this is through `ptdump_walk_pgd`, which, as far as I understand, is only accessible via debugfs.

But wait, I need to be *absolutely* sure. Is there another path into `ptdump_walk_pgd` that I'm missing? I need to re-examine all the callers of `ptdump_walk_pgd`. Right, I saw `ptdump_walk_pgd_level_core` in `arch/x86/mm/dump_pagetables.c`. Is there any architecture specific call to `ptdump_walk_pgd`? Actually, `ptdump_walk_pgd` itself is in `mm/ptdump.c`, it's generic, so that needs to be checked. Let me go through *every* caller of `ptdump_walk_pgd` and make sure I'm not missing something that might trigger a race condition with `vmemmap_remap_range`.



133/2 2026/06/09 21:31 tool codesearch-find-references
0m Args:
map[ContextFile:mm/ptdump.c IncludeSnippetLines:5 Name:ptdump_walk_pgd SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:ptdump_walk_pgd_level_core SourceFile:arch/x86/mm/dump_pagetables.c SourceLine:458 SourceSnippet: 453:			.to_dmesg	= dmesg,
 454:			.check_wx	= checkwx,
 455:			.seq		= m
 456:		};
 457:	
 458:		ptdump_walk_pgd(&st.ptdump, mm, pgd);
 459:	
 460:		if (!checkwx)
 461:			return true;
 462:		if (st.wx_pages) {
 463:			pr_info("x86/mm: Checked W+X mappings: FAILED, %lu W+X pages found.\n",
]] TruncatedOutput:false]

134/2 2026/06/09 21:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 110697
							output: 56
							thoughts: 84
						

Thoughts:
**Investigating the Page Table Dump Function**

Okay, so I'm trying to figure out the usage of this `dump_pagetables.c` function. It looks like the only direct call to it is coming from `arch/x86/mm/dump_pagetables.c`, which is a bit narrow. Hmmm, hold on...I think I remember something about `mm/ptdump.c` and a configuration option. Yes, here it is: `mm/ptdump.c` gets compiled in when `CONFIG_PTDUMP_CORE` is enabled. That makes more sense; it suggests a potential core implementation. Now the pieces are starting to fit...

The real question is, are other architectures, like ARM64 for example, leveraging this `ptdump` functionality? They might be using a specialized implementation of their own, or they could be sharing this core functionality. Let me quickly check `arch/arm64/mm/ptdump.c` and see what's going on there. I'll get a better picture of the broader usage this way.



135/2 2026/06/09 21:31 tool codesearch-find-references
0m Args:
map[ContextFile:arch/arm64/mm/ptdump.c IncludeSnippetLines:5 Name:ptdump_walk_pgd SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:ptdump_walk_pgd_level_core SourceFile:arch/x86/mm/dump_pagetables.c SourceLine:458 SourceSnippet: 453:			.to_dmesg	= dmesg,
 454:			.check_wx	= checkwx,
 455:			.seq		= m
 456:		};
 457:	
 458:		ptdump_walk_pgd(&st.ptdump, mm, pgd);
 459:	
 460:		if (!checkwx)
 461:			return true;
 462:		if (st.wx_pages) {
 463:			pr_info("x86/mm: Checked W+X mappings: FAILED, %lu W+X pages found.\n",
]] TruncatedOutput:false]

136/2 2026/06/09 21:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 111326
							output: 21
							thoughts: 38
						

Thoughts:
Okay, here's my take on those thoughts, framed as an expert's internal monologue:

**Investigating the `ptdump_walk_pgd` Function**

Hmm, `ptdump_walk_pgd` is exported? That's not what I expected. I could have sworn that was an internal function, or at least not something universally available. Okay, better to verify than assume, especially when digging into something potentially kernel-level. Time to do a quick search. Let's start with `arch/arm64/` - that's the most likely architecture where I'd encounter this, given my focus. I need to understand its context and how it's being used. Now, let me find that function...



137/2 2026/06/09 21:31 tool grepper
0m Args:
map[Expression:ptdump_walk_pgd]

Results:
map[Output:arch/arm/include/asm/ptdump.h=16=struct ptdump_info {
--
arch/arm/include/asm/ptdump.h-21-
arch/arm/include/asm/ptdump.h:22:void ptdump_walk_pgd(struct seq_file *s, struct ptdump_info *info);
arch/arm/include/asm/ptdump.h-23-#ifdef CONFIG_ARM_PTDUMP_DEBUGFS
--
arch/arm/mm/dump.c=398=static void walk_pgd(struct pg_state *st, struct mm_struct *mm,
--
arch/arm/mm/dump.c-414-
arch/arm/mm/dump.c:415:void ptdump_walk_pgd(struct seq_file *m, struct ptdump_info *info)
arch/arm/mm/dump.c-416-{
--
arch/arm/mm/ptdump_debugfs.c=7=static int ptdump_show(struct seq_file *m, void *v)
--
arch/arm/mm/ptdump_debugfs.c-10-
arch/arm/mm/ptdump_debugfs.c:11:	ptdump_walk_pgd(m, info);
arch/arm/mm/ptdump_debugfs.c-12-	return 0;
--
arch/arm64/mm/ptdump.c=279=void note_page_flush(struct ptdump_state *pt_st)
--
arch/arm64/mm/ptdump.c-285-
arch/arm64/mm/ptdump.c:286:static void arm64_ptdump_walk_pgd(struct ptdump_state *st, struct mm_struct *mm)
arch/arm64/mm/ptdump.c-287-{
arch/arm64/mm/ptdump.c-288-	static_branch_inc(&arm64_ptdump_lock_key);
arch/arm64/mm/ptdump.c:289:	ptdump_walk_pgd(st, mm, NULL);
arch/arm64/mm/ptdump.c-290-	static_branch_dec(&arm64_ptdump_lock_key);
--
arch/arm64/mm/ptdump.c=293=void ptdump_walk(struct seq_file *s, struct ptdump_info *info)
--
arch/arm64/mm/ptdump.c-320-
arch/arm64/mm/ptdump.c:321:	arm64_ptdump_walk_pgd(&st.ptdump, info->mm);
arch/arm64/mm/ptdump.c-322-}
--
arch/arm64/mm/ptdump.c=338=bool ptdump_check_wx(void)
--
arch/arm64/mm/ptdump.c-362-
arch/arm64/mm/ptdump.c:363:	arm64_ptdump_walk_pgd(&st.ptdump, &init_mm);
arch/arm64/mm/ptdump.c-364-
--
arch/powerpc/mm/ptdump/ptdump.c=334=static int ptdump_show(struct seq_file *m, void *v)
--
arch/powerpc/mm/ptdump/ptdump.c-351-	/* Traverse kernel page tables */
arch/powerpc/mm/ptdump/ptdump.c:352:	ptdump_walk_pgd(&st.ptdump, &init_mm, NULL);
arch/powerpc/mm/ptdump/ptdump.c-353-	return 0;
--
arch/powerpc/mm/ptdump/ptdump.c=368=bool ptdump_check_wx(void)
--
arch/powerpc/mm/ptdump/ptdump.c-391-
arch/powerpc/mm/ptdump/ptdump.c:392:	ptdump_walk_pgd(&st.ptdump, &init_mm, NULL);
arch/powerpc/mm/ptdump/ptdump.c-393-
--
arch/riscv/mm/ptdump.c=352=static void ptdump_walk(struct seq_file *s, struct ptd_mm_info *pinfo)
--
arch/riscv/mm/ptdump.c-371-
arch/riscv/mm/ptdump.c:372:	ptdump_walk_pgd(&st.ptdump, pinfo->mm, NULL);
arch/riscv/mm/ptdump.c-373-}
--
arch/riscv/mm/ptdump.c=375=bool ptdump_check_wx(void)
--
arch/riscv/mm/ptdump.c-398-
arch/riscv/mm/ptdump.c:399:	ptdump_walk_pgd(&st.ptdump, &init_mm, NULL);
arch/riscv/mm/ptdump.c-400-
--
arch/s390/mm/dump_pagetables.c=182=bool ptdump_check_wx(void)
--
arch/s390/mm/dump_pagetables.c-210-		return true;
arch/s390/mm/dump_pagetables.c:211:	ptdump_walk_pgd(&st.ptdump, &init_mm, NULL);
arch/s390/mm/dump_pagetables.c-212-	if (st.wx_pages) {
--
arch/s390/mm/dump_pagetables.c=226=static int ptdump_show(struct seq_file *m, void *v)
--
arch/s390/mm/dump_pagetables.c-250-	mutex_lock(&cpa_mutex);
arch/s390/mm/dump_pagetables.c:251:	ptdump_walk_pgd(&st.ptdump, &init_mm, NULL);
arch/s390/mm/dump_pagetables.c-252-	mutex_unlock(&cpa_mutex);
--
arch/x86/include/asm/pgtable.h=30=struct seq_file;
arch/x86/include/asm/pgtable.h:31:void ptdump_walk_pgd_level(struct seq_file *m, struct mm_struct *mm);
arch/x86/include/asm/pgtable.h:32:void ptdump_walk_pgd_level_debugfs(struct seq_file *m, struct mm_struct *mm,
arch/x86/include/asm/pgtable.h-33-				   bool user);
arch/x86/include/asm/pgtable.h:34:bool ptdump_walk_pgd_level_checkwx(void);
arch/x86/include/asm/pgtable.h:35:#define ptdump_check_wx ptdump_walk_pgd_level_checkwx
arch/x86/include/asm/pgtable.h-36-void ptdump_walk_user_pgd_level_checkwx(void);
--
arch/x86/mm/debug_pagetables.c=8=static int ptdump_show(struct seq_file *m, void *v)
arch/x86/mm/debug_pagetables.c-9-{
arch/x86/mm/debug_pagetables.c:10:	ptdump_walk_pgd_level_debugfs(m, &init_mm, false);
arch/x86/mm/debug_pagetables.c-11-	return 0;
--
arch/x86/mm/debug_pagetables.c=16=static int ptdump_curknl_show(struct seq_file *m, void *v)
--
arch/x86/mm/debug_pagetables.c-18-	if (current->mm->pgd)
arch/x86/mm/debug_pagetables.c:19:		ptdump_walk_pgd_level_debugfs(m, current->mm, false);
arch/x86/mm/debug_pagetables.c-20-	return 0;
--
arch/x86/mm/debug_pagetables.c=26=static int ptdump_curusr_show(struct seq_file *m, void *v)
--
arch/x86/mm/debug_pagetables.c-28-	if (current->mm->pgd)
arch/x86/mm/debug_pagetables.c:29:		ptdump_walk_pgd_level_debugfs(m, current->mm, true);
arch/x86/mm/debug_pagetables.c-30-	return 0;
--
arch/x86/mm/debug_pagetables.c=37=static int ptdump_efi_show(struct seq_file *m, void *v)
--
arch/x86/mm/debug_pagetables.c-39-	if (efi_mm.pgd)
arch/x86/mm/debug_pagetables.c:40:		ptdump_walk_pgd_level_debugfs(m, &efi_mm, false);
arch/x86/mm/debug_pagetables.c-41-	return 0;
--
arch/x86/mm/dump_pagetables.c=416=static void note_page_flush(struct ptdump_state *pt_st)
--
arch/x86/mm/dump_pagetables.c-422-
arch/x86/mm/dump_pagetables.c:423:bool ptdump_walk_pgd_level_core(struct seq_file *m,
arch/x86/mm/dump_pagetables.c-424-				struct mm_struct *mm, pgd_t *pgd,
--
arch/x86/mm/dump_pagetables.c-457-
arch/x86/mm/dump_pagetables.c:458:	ptdump_walk_pgd(&st.ptdump, mm, pgd);
arch/x86/mm/dump_pagetables.c-459-
--
arch/x86/mm/dump_pagetables.c-473-
arch/x86/mm/dump_pagetables.c:474:void ptdump_walk_pgd_level(struct seq_file *m, struct mm_struct *mm)
arch/x86/mm/dump_pagetables.c-475-{
arch/x86/mm/dump_pagetables.c:476:	ptdump_walk_pgd_level_core(m, mm, mm->pgd, false, true);
arch/x86/mm/dump_pagetables.c-477-}
arch/x86/mm/dump_pagetables.c-478-
arch/x86/mm/dump_pagetables.c:479:void ptdump_walk_pgd_level_debugfs(struct seq_file *m, struct mm_struct *mm,
arch/x86/mm/dump_pagetables.c-480-				   bool user)
--
arch/x86/mm/dump_pagetables.c-486-#endif
arch/x86/mm/dump_pagetables.c:487:	ptdump_walk_pgd_level_core(m, mm, pgd, false, false);
arch/x86/mm/dump_pagetables.c-488-}
--
arch/x86/mm/dump_pagetables.c=490=void ptdump_walk_user_pgd_level_checkwx(void)
--
arch/x86/mm/dump_pagetables.c-500-	pgd = kernel_to_user_pgdp(pgd);
arch/x86/mm/dump_pagetables.c:501:	ptdump_walk_pgd_level_core(NULL, &init_mm, pgd, true, false);
arch/x86/mm/dump_pagetables.c-502-#endif
--
arch/x86/mm/dump_pagetables.c-504-
arch/x86/mm/dump_pagetables.c:505:bool ptdump_walk_pgd_level_checkwx(void)
arch/x86/mm/dump_pagetables.c-506-{
--
arch/x86/mm/dump_pagetables.c-509-
arch/x86/mm/dump_pagetables.c:510:	return ptdump_walk_pgd_level_core(NULL, &init_mm, INIT_PGD, true, false);
arch/x86/mm/dump_pagetables.c-511-}
--
arch/x86/platform/efi/efi_32.c=75=void __init efi_dump_pagetable(void)
--
arch/x86/platform/efi/efi_32.c-77-#ifdef CONFIG_EFI_PGT_DUMP
arch/x86/platform/efi/efi_32.c:78:	ptdump_walk_pgd_level(NULL, &init_mm);
arch/x86/platform/efi/efi_32.c-79-#endif
--
arch/x86/platform/efi/efi_64.c=423=void __init efi_dump_pagetable(void)
--
arch/x86/platform/efi/efi_64.c-425-#ifdef CONFIG_EFI_PGT_DUMP
arch/x86/platform/efi/efi_64.c:426:	ptdump_walk_pgd_level(NULL, &efi_mm);
arch/x86/platform/efi/efi_64.c-427-#endif
--
include/linux/ptdump.h=13=struct ptdump_state {
--
include/linux/ptdump.h-27-
include/linux/ptdump.h:28:bool ptdump_walk_pgd_level_core(struct seq_file *m,
include/linux/ptdump.h-29-				struct mm_struct *mm, pgd_t *pgd,
include/linux/ptdump.h-30-				bool checkwx, bool dmesg);
include/linux/ptdump.h:31:void ptdump_walk_pgd(struct ptdump_state *st, struct mm_struct *mm, pgd_t *pgd);
include/linux/ptdump.h-32-bool ptdump_check_wx(void);
--
mm/ptdump.c=166=static const struct mm_walk_ops ptdump_ops = {
--
mm/ptdump.c-174-
mm/ptdump.c:175:void ptdump_walk_pgd(struct ptdump_state *st, struct mm_struct *mm, pgd_t *pgd)
mm/ptdump.c-176-{
]

138/2 2026/06/09 21:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 115391
							output: 50
							thoughts: 665
						

Thoughts:
**Analyzing the `ptdump_walk_pgd` Vulnerability**

Okay, so let's break this down. `ptdump_walk_pgd` has a few call sites. I see it's called from `ptdump_walk_pgd_level_debugfs` (which is debugfs, root only, got it), and then a few at boot time: `ptdump_walk_pgd_level_checkwx`, `ptdump_walk_user_pgd_level_checkwx`, and `efi_dump_pagetable`. Right. So, after boot, the *only* way this can be triggered is through debugfs. That's key.

And, looking closer, debugfs is mounted at `/sys/kernel/debug`, with mode `0700`—root only access. The specific files in `/sys/kernel/debug/page_tables/` are also mode `0400`, meaning read-only by root. So, a regular unprivileged user *cannot* trigger this. Alright. But what about from a user namespace? Nope. Debugfs can't be mounted in a user namespace, and even if the host somehow mounts it and hands over a file descriptor, the file is owned by root in the init namespace, so a user namespace root still can't open it. Therefore, completely inaccessible from user namespaces. Good.

Is this a denial-of-service? Let's consider the impact. If root reads this file, they might trigger the use-after-free. It's only a read-only use-after-free, however. If KASAN is enabled, it's going to panic the kernel if panic_on_warn is set or if KASAN is configured to panic. In a production kernel without KASAN, it will just read some garbage and print it to the debugfs file. It's not going to crash the kernel because the page was freed to the page allocator, so it's still mapped in the direct mapping, and it's not going to cause a page fault. So, no, it's *not* a denial of service in a production environment. That's a relief.

Is it exploitable? Nope. It's just reading garbage from a freed page and printing it to a root-only debugfs file. No exploit vector there.

Wait, what if the page *was* unmapped from the direct mapping? That's the only potential wrinkle. Pages are only unmapped from the direct mapping if they are hot-removed, or if they are used for something like secretmem or TDX/SEV. Even in those scenarios, it's still triggered by root, so not a security issue.

Okay, let's just make sure there's no other way `walk_kernel_page_table_range_lockless` is called. Ah, `vmemmap_remap_range` calls `walk_kernel_page_table_range`. But `vmemmap_remap_range` is used for hugetlb vmemmap optimization. It holds `mmap_read_lock(&init_mm)`. Does that race with `cpa_collapse_large_pages`? No. `cpa_collapse_large_pages` operates on the direct mapping, not vmemmap. They don't overlap, so no race there. And what about `walk_page_range_debug`? It's called by `ptdump_walk_pgd`. Is it called by anything else? I need to check. But so far, this looks like a very low-impact issue.



139/2 2026/06/09 21:31 tool codesearch-find-references
0m Args:
map[ContextFile:mm/pagewalk.c IncludeSnippetLines:5 Name:walk_page_range_debug SourceTreePrefix:]

Results:
map[References:[map[ReferenceKind:calls ReferencingEntityKind:function ReferencingEntityName:ptdump_walk_pgd SourceFile:mm/ptdump.c SourceLine:182 SourceSnippet: 177:		const struct ptdump_range *range = st->range;
 178:	
 179:		get_online_mems();
 180:		mmap_write_lock(mm);
 181:		while (range->start != range->end) {
 182:			walk_page_range_debug(mm, range->start, range->end,
 183:					      &ptdump_ops, pgd, st);
 184:			range++;
 185:		}
 186:		mmap_write_unlock(mm);
 187:		put_online_mems();
]] TruncatedOutput:false]

140/2 2026/06/09 21:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 117125
							output: 66
							thoughts: 756
						

Thoughts:
**Analyzing the Security Impact of the `ptdump` Debugfs Interface Bug**

Okay, let's break this down. My initial assessment is that this is a contained bug. The critical call to `ptdump_walk_pgd`—where the use-after-free occurs—seems to be isolated within the `ptdump` debugfs interface. That immediately tells me it's restricted to root access, which significantly limits the potential for exploitation.

Let's confirm. I'm seeing that this is a read-only debug interface.  Therefore it isn't exploitable, and it's restricted to root access. I can see that there's no way to trigger a crash in production. So, immediately, no Denial of Service.  It's not accessible from any unprivileged processes, user namespaces, any virtual machines or through network or peripherals or even malicious filesystems. The trigger is entirely internal, initiated only with root.

I need to circle back to the bug report to cross-check. Okay, I see the KASAN report pointing to a use-after-free in `ptdump_pte_entry`. The task is reading from debugfs, and it looks like the page was allocated via `vmalloc_user`, which is then freed asynchronously by `kernel_pgtable_work_func`. Ah, this is a textbook example of a race condition where `cpa_collapse_large_pages` is freeing the PTE page while `ptdump` is concurrently trying to read it. Again, since this is a read operation and within debugfs, it's not exploitable.  And since the page is in the direct mapping, it won't crash the kernel in production (without KASAN).

Wait, I should confirm the obvious: is there any way a non-root user could somehow trigger `ptdump_show`? Let's check the file creation: `debugfs_create_file("kernel", 0400, dir, NULL, &ptdump_fops)`. The permissions are `0400` – read-only for the owner. The owner of debugfs files is root. So that's locked down. Could a setuid binary open it and hand off the fd? Not likely. And no, you can't mount debugfs in a user namespace. The access is *definitely* root-only.

Let me think…Is there any way `ptdump_walk_pgd` can be triggered any other way? During boot, `ptdump_check_wx` and `efi_dump_pagetable` are called. So no way after boot.

Conclusion:  The security impact of this bug is negligible. It's a localized debugging feature, only accessible to root, and it doesn't even crash the kernel in a production environment (without KASAN). It's a bug, sure, but a very low-impact one.

Okay, let's fill out the results.
Exploitable: False
DenialOfService: False
Unprivileged: False
UserNamespace: False
VMGuestTrigger: False
VMHostTrigger: False
NetworkTrigger: False
RemoteTrigger: False
PeripheralTrigger: False
FilesystemTrigger: False



141/2 2026/06/09 21:31 tool set-results
0m Args:
map[DenialOfService:false Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:false RemoteTrigger:false Unprivileged:false UserNamespace:false VMGuestTrigger:false VMHostTrigger:false]

Results:
map[DenialOfService:false Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:false RemoteTrigger:false Unprivileged:false UserNamespace:false VMGuestTrigger:false VMHostTrigger:false]

142/2 2026/06/09 21:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 118695
							output: 607
							thoughts: 429
						

Thoughts:
**Final Reasoning on the PTDUMP Bug**

Alright, I've got the results locked down, time to articulate the final reasoning. The core issue here, as I understand it, is a use-after-free read within the `ptdump_pte_entry` function. It's triggered when someone reads from `/sys/kernel/debug/page_tables/kernel`. This is the crux of it: a page table page gets allocated via `__pte_alloc_kernel`, possibly during a `vmalloc` call. Later, this page gets asynchronously freed by `kernel_pgtable_work_func`, maybe due to `cpa_collapse_large_pages` merging that PTE page into a larger PMD page. The problem surfaces because `ptdump_walk_pgd` walks the kernel page tables without any locks, creating a race condition against this asynchronous freeing. This means the code can try to read PTEs from a page that’s already been freed, hence, the use-after-free read.

However, after a thorough review, I've concluded there's **no security impact here**. Here's the breakdown:

1.  **Access Restrictions**: It's all about access control. The `ptdump` interface, and specifically the files within `/sys/kernel/debug/page_tables/*`, is only accessible to root. The permissions on these files are set to `0400`, meaning read-only for root. No unprivileged user or user namespace can touch this stuff. So, this isn't something a normal user can trigger.

2.  **No Exploitation**: Even if someone *could* trigger this, it's a read-only bug. The vulnerable `ptdump` code only reads from the freed page. The code just reads and dumps the contents of the memory to a seq\_file. It doesn't write anything, nor does it attempt to dereference the freed memory as a pointer. Root can already read arbitrary kernel memory, so this is not a privilege escalation vector. The ability to read memory in a kernel module to a normal file is very valuable to exploit a security vulnerability, but this does not give an attacker anything they don't already have.

3.  **No Denial of Service**: In a production kernel without memory safety checks like KASAN, reading the freed page just means reading whatever junk happens to be there at the moment. The page has been returned to the page allocator, and it's still mapped in the direct mapping, but potentially with arbitrary data. It won't cause a page fault or a kernel crash. At worst, we'd see garbage output in the debugfs file. That's it.

In conclusion, it looks like a benign race condition in a root-only debugging tool. Worth noting, but not a critical concern.



143/1 2026/06/09 21:32 action format-explanation
0m Results:
map[Explanation:Based on the analysis of the bug report and the kernel source code, here is the
assessment of the security impact:

**Bug Mechanism:**
The bug is a use-after-free read in `ptdump_pte_entry` triggered by reading the
`/sys/kernel/debug/page_tables/kernel` file.
The page table page was originally allocated by `__pte_alloc_kernel` (e.g.,
during a `vmalloc` call like `kcov_ioctl` in the report). Later, the page was
freed asynchronously by `kernel_pgtable_work_func`. This typically happens when
`cpa_collapse_large_pages` (Change Page Attribute) collapses a PTE page into a
large PMD page and queues the old PTE page for freeing.
Because `ptdump_walk_pgd` walks the kernel page tables locklessly
(`walk_kernel_page_table_range_lockless`), it can race with the asynchronous
freeing of the page table page. If it reads the PMD before it is collapsed, and
then accesses the PTE page after it has been freed, it results in a
use-after-free read.

**Security Impact Assessment:**
1. **Access Restriction (Not Accessible to Unprivileged Users/Namespaces):** The
bug is triggered exclusively via the `ptdump` debugfs interface. Debugfs is
typically mounted with `0700` permissions (root only), and the specific files in
`/sys/kernel/debug/page_tables/` are created with `0400` permissions (read-only
for root). Debugfs cannot be mounted inside unprivileged user namespaces. Thus,
an attacker must already have full root privileges to trigger this code path.
2. **Not Exploitable:** The bug is strictly a read-only use-after-free. The
`ptdump` code only reads the freed page to parse PTEs and print their status to
the `seq_file`. It does not write to the freed memory, nor does it use the read
data as pointers for further memory accesses or control flow transfers. Since
the attacker must already be root (who can read arbitrary kernel memory anyway),
this provides no avenue for privilege escalation.
3. **No Denial of Service:** In a production kernel without debugging tools like
KASAN enabled, reading from the freed page will not cause a crash. The freed
page is returned to the page allocator but remains mapped in the kernel's direct
mapping (`PAGE_OFFSET`). Accessing it will simply read whatever garbage data
currently resides there, resulting in nonsensical output in the debugfs file,
but it will not trigger a page fault or kernel panic.

**Conclusion:**
This is a benign race condition in a root-only debugging tool (`ptdump`). It
poses no security risk, cannot be triggered by unprivileged users, cannot be
exploited for privilege escalation, and does not cause a denial of service in
production builds.]

LLM Calls Summary:
Total Calls Total Tokens Avg Tokens Total Duration (Seconds) Avg Duration (Seconds)
Tool Calls Summary:
Total Calls Total Duration (Seconds) Avg Duration (Seconds)