syzbot


ID Workflow Result Correct Bug Created Started Finished Revision Error
8ac20328-c99e-4cc9-81c5-cbff18e7704b assessment-security DenialOfService: ❌ Exploitable: ❌ FilesystemTrigger: ❌ NetworkTrigger: ❌ PeripheralTrigger: βœ… RemoteTrigger: ❌ Unprivileged: βœ… UserNamespace: βœ… VMGuestTrigger: ❌ VMHostTrigger: ❌ ❓ WARNING in hci_send_acl (4) 2026/06/01 19:23 2026/06/01 19:23 2026/06/01 19:32 386cc6dacdf7e3ebce9507beed6755d7e999554d

			
		
Agent: prod-syz-agent-5
External Bug ID: ---

Inputs:
BaseBranch master
BaseCommit RC
BaseRepository git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
BugTitle WARNING in hci_send_acl
CrashLogID 5501750804480000
CrashReportID 5187359198412800
KernelCommit 5cbb61bf4168859d97c068d88d364f4f1f440325
KernelConfig
Show (259165 bytes)
#
# Automatically generated file; DO NOT EDIT.
# Linux/arm64 syzkaller Kernel Configuration
#
CONFIG_CC_VERSION_TEXT="Debian clang version 21.1.8 (++20251221033036+2078da43e25a-1~exp1~20251221153213.50)"
CONFIG_GCC_VERSION=0
CONFIG_CC_IS_CLANG=y
CONFIG_CLANG_VERSION=210108
CONFIG_AS_IS_LLVM=y
CONFIG_AS_VERSION=210108
CONFIG_LD_VERSION=0
CONFIG_LD_IS_LLD=y
CONFIG_LLD_VERSION=210108
CONFIG_RUSTC_VERSION=109101
CONFIG_RUST_IS_AVAILABLE=y
CONFIG_RUSTC_LLVM_VERSION=210102
CONFIG_RUSTC_LLVM_MAJOR_VERSION=21
CONFIG_RUSTC_CLANG_LLVM_COMPATIBLE=y
CONFIG_CC_CAN_LINK=y
CONFIG_CC_HAS_ASM_GOTO_OUTPUT=y
CONFIG_CC_HAS_ASM_GOTO_TIED_OUTPUT=y
CONFIG_TOOLS_SUPPORT_RELR=y
CONFIG_CC_HAS_ASM_INLINE=y
CONFIG_CC_HAS_ASSUME=y
CONFIG_CC_HAS_NO_PROFILE_FN_ATTR=y
CONFIG_CC_HAS_COUNTED_BY=y
CONFIG_CC_HAS_BROKEN_COUNTED_BY_REF=y
CONFIG_CC_HAS_MULTIDIMENSIONAL_NONSTRING=y
CONFIG_LD_CAN_USE_KEEP_IN_OVERLAY=y
CONFIG_RUSTC_HAS_SPAN_FILE=y
CONFIG_RUSTC_HAS_UNNECESSARY_TRANSMUTES=y
CONFIG_RUSTC_HAS_FILE_WITH_NUL=y
CONFIG_RUSTC_HAS_FILE_AS_C_STR=y
CONFIG_PAHOLE_VERSION=130
CONFIG_CONSTRUCTORS=y
CONFIG_IRQ_WORK=y
CONFIG_BUILDTIME_TABLE_SORT=y
CONFIG_THREAD_INFO_IN_TASK=y

#
# General setup
#
CONFIG_INIT_ENV_ARG_LIMIT=32
# CONFIG_COMPILE_TEST is not set
# CONFIG_WERROR is not set
CONFIG_LOCALVERSION=""
CONFIG_LOCALVERSION_AUTO=y
CONFIG_BUILD_SALT=""
CONFIG_DEFAULT_INIT=""
CONFIG_DEFAULT_HOSTNAME="(none)"
CONFIG_SYSVIPC=y
CONFIG_SYSVIPC_SYSCTL=y
CONFIG_SYSVIPC_COMPAT=y
CONFIG_POSIX_MQUEUE=y
CONFIG_POSIX_MQUEUE_SYSCTL=y
CONFIG_WATCH_QUEUE=y
CONFIG_CROSS_MEMORY_ATTACH=y
CONFIG_AUDIT=y
CONFIG_HAVE_ARCH_AUDITSYSCALL=y
CONFIG_AUDITSYSCALL=y

#
# IRQ subsystem
#
CONFIG_GENERIC_IRQ_PROBE=y
CONFIG_GENERIC_IRQ_SHOW=y
CONFIG_GENERIC_IRQ_SHOW_LEVEL=y
CONFIG_GENERIC_IRQ_EFFECTIVE_AFF_MASK=y
CONFIG_GENERIC_IRQ_MIGRATION=y
CONFIG_HARDIRQS_SW_RESEND=y
CONFIG_IRQ_DOMAIN=y
CONFIG_IRQ_DOMAIN_HIERARCHY=y
CONFIG_GENERIC_IRQ_IPI=y
CONFIG_GENERIC_MSI_IRQ=y
CONFIG_IRQ_MSI_IOMMU=y
CONFIG_IRQ_FORCED_THREADING=y
CONFIG_SPARSE_IRQ=y
# CONFIG_GENERIC_IRQ_DEBUGFS is not set
CONFIG_GENERIC_IRQ_KEXEC_CLEAR_VM_FORWARD=y
# end of IRQ subsystem

CONFIG_GENERIC_TIME_VSYSCALL=y
CONFIG_GENERIC_CLOCKEVENTS=y
CONFIG_ARCH_HAS_TICK_BROADCAST=y
CONFIG_GENERIC_CLOCKEVENTS_BROADCAST=y
CONFIG_HAVE_POSIX_CPU_TIMERS_TASK_WORK=y
CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y
CONFIG_CONTEXT_TRACKING=y
CONFIG_CONTEXT_TRACKING_IDLE=y

#
# Timers subsystem
#
CONFIG_TICK_ONESHOT=y
CONFIG_NO_HZ_COMMON=y
# CONFIG_HZ_PERIODIC is not set
CONFIG_NO_HZ_IDLE=y
# CONFIG_NO_HZ_FULL is not set
CONFIG_CONTEXT_TRACKING_USER=y
# CONFIG_CONTEXT_TRACKING_USER_FORCE is not set
CONFIG_NO_HZ=y
CONFIG_HIGH_RES_TIMERS=y
CONFIG_POSIX_AUX_CLOCKS=y
# end of Timers subsystem

CONFIG_BPF=y
CONFIG_HAVE_EBPF_JIT=y
CONFIG_ARCH_WANT_DEFAULT_BPF_JIT=y

#
# BPF subsystem
#
CONFIG_BPF_SYSCALL=y
CONFIG_BPF_JIT=y
CONFIG_BPF_JIT_ALWAYS_ON=y
CONFIG_BPF_JIT_DEFAULT_ON=y
CONFIG_BPF_UNPRIV_DEFAULT_OFF=y
# CONFIG_BPF_PRELOAD is not set
# end of BPF subsystem

CONFIG_PREEMPT_BUILD=y
CONFIG_ARCH_HAS_PREEMPT_LAZY=y
CONFIG_PREEMPT=y
# CONFIG_PREEMPT_LAZY is not set
# CONFIG_PREEMPT_RT is not set
CONFIG_PREEMPT_COUNT=y
CONFIG_PREEMPTION=y
# CONFIG_PREEMPT_DYNAMIC is not set
# CONFIG_SCHED_CORE is not set

#
# CPU/Task time and stats accounting
#
CONFIG_VIRT_CPU_ACCOUNTING=y
# CONFIG_TICK_CPU_ACCOUNTING is not set
CONFIG_VIRT_CPU_ACCOUNTING_GEN=y
CONFIG_IRQ_TIME_ACCOUNTING=y
CONFIG_HAVE_SCHED_AVG_IRQ=y
CONFIG_SCHED_HW_PRESSURE=y
CONFIG_BSD_PROCESS_ACCT=y
CONFIG_BSD_PROCESS_ACCT_V3=y
CONFIG_TASKSTATS=y
# CONFIG_TASK_DELAY_ACCT is not set
CONFIG_TASK_XACCT=y
CONFIG_TASK_IO_ACCOUNTING=y
CONFIG_PSI=y
# CONFIG_PSI_DEFAULT_DISABLED is not set
# end of CPU/Task time and stats accounting

CONFIG_CPU_ISOLATION=y

#
# RCU Subsystem
#
CONFIG_TREE_RCU=y
CONFIG_PREEMPT_RCU=y
# CONFIG_RCU_EXPERT is not set
CONFIG_TREE_SRCU=y
CONFIG_TASKS_RCU_GENERIC=y
CONFIG_NEED_TASKS_RCU=y
CONFIG_TASKS_RCU=y
CONFIG_TASKS_TRACE_RCU=y
CONFIG_RCU_STALL_COMMON=y
CONFIG_RCU_NEED_SEGCBLIST=y
# end of RCU Subsystem

CONFIG_IKCONFIG=y
CONFIG_IKCONFIG_PROC=y
# CONFIG_IKHEADERS is not set
CONFIG_LOG_BUF_SHIFT=18
CONFIG_LOG_CPU_MAX_BUF_SHIFT=12
# CONFIG_PRINTK_INDEX is not set
CONFIG_GENERIC_SCHED_CLOCK=y

#
# Scheduler features
#
# CONFIG_UCLAMP_TASK is not set
# CONFIG_SCHED_PROXY_EXEC is not set
# end of Scheduler features

CONFIG_ARCH_SUPPORTS_NUMA_BALANCING=y
CONFIG_ARCH_WANT_BATCHED_UNMAP_TLB_FLUSH=y
CONFIG_CC_HAS_INT128=y
CONFIG_CC_IMPLICIT_FALLTHROUGH="-Wimplicit-fallthrough"
CONFIG_CC_MS_EXTENSIONS="-fms-extensions"
CONFIG_GCC10_NO_ARRAY_BOUNDS=y
CONFIG_GCC_NO_STRINGOP_OVERFLOW=y
CONFIG_ARCH_SUPPORTS_INT128=y
CONFIG_NUMA_BALANCING=y
CONFIG_NUMA_BALANCING_DEFAULT_ENABLED=y
CONFIG_SLAB_OBJ_EXT=y
CONFIG_CGROUPS=y
CONFIG_PAGE_COUNTER=y
# CONFIG_CGROUP_FAVOR_DYNMODS is not set
CONFIG_MEMCG=y
CONFIG_MEMCG_V1=y
CONFIG_BLK_CGROUP=y
CONFIG_CGROUP_WRITEBACK=y
CONFIG_CGROUP_SCHED=y
CONFIG_GROUP_SCHED_WEIGHT=y
CONFIG_GROUP_SCHED_BANDWIDTH=y
CONFIG_FAIR_GROUP_SCHED=y
CONFIG_CFS_BANDWIDTH=y
# CONFIG_RT_GROUP_SCHED is not set
CONFIG_SCHED_MM_CID=y
CONFIG_CGROUP_PIDS=y
CONFIG_CGROUP_RDMA=y
# CONFIG_CGROUP_DMEM is not set
CONFIG_CGROUP_FREEZER=y
CONFIG_CGROUP_HUGETLB=y
CONFIG_CPUSETS=y
# CONFIG_CPUSETS_V1 is not set
CONFIG_CGROUP_DEVICE=y
CONFIG_CGROUP_CPUACCT=y
CONFIG_CGROUP_PERF=y
CONFIG_CGROUP_BPF=y
# CONFIG_CGROUP_MISC is not set
# CONFIG_CGROUP_DEBUG is not set
CONFIG_SOCK_CGROUP_DATA=y
CONFIG_NAMESPACES=y
CONFIG_UTS_NS=y
CONFIG_TIME_NS=y
CONFIG_TIME_NS_VDSO=y
CONFIG_IPC_NS=y
CONFIG_USER_NS=y
CONFIG_PID_NS=y
CONFIG_NET_NS=y
CONFIG_CHECKPOINT_RESTORE=y
CONFIG_SCHED_AUTOGROUP=y
# CONFIG_RELAY is not set
CONFIG_BLK_DEV_INITRD=y
CONFIG_INITRAMFS_SOURCE=""
CONFIG_RD_GZIP=y
CONFIG_RD_BZIP2=y
CONFIG_RD_LZMA=y
CONFIG_RD_XZ=y
CONFIG_RD_LZO=y
CONFIG_RD_LZ4=y
CONFIG_RD_ZSTD=y
# CONFIG_BOOT_CONFIG is not set
CONFIG_CMDLINE_LOG_WRAP_IDEAL_LEN=1021
CONFIG_INITRAMFS_PRESERVE_MTIME=y
# CONFIG_CC_OPTIMIZE_FOR_PERFORMANCE is not set
CONFIG_CC_OPTIMIZE_FOR_SIZE=y
CONFIG_LD_ORPHAN_WARN=y
CONFIG_LD_ORPHAN_WARN_LEVEL="warn"
CONFIG_SYSCTL=y
CONFIG_HAVE_UID16=y
CONFIG_SYSCTL_EXCEPTION_TRACE=y
CONFIG_SYSFS_SYSCALL=y
CONFIG_EXPERT=y
CONFIG_UID16=y
CONFIG_MULTIUSER=y
# CONFIG_SGETMASK_SYSCALL is not set
CONFIG_FHANDLE=y
CONFIG_POSIX_TIMERS=y
CONFIG_PRINTK=y
CONFIG_BUG=y
CONFIG_ELF_CORE=y
# CONFIG_BASE_SMALL is not set
CONFIG_FUTEX=y
CONFIG_FUTEX_PI=y
CONFIG_FUTEX_PRIVATE_HASH=y
CONFIG_FUTEX_MPOL=y
CONFIG_EPOLL=y
CONFIG_SIGNALFD=y
CONFIG_TIMERFD=y
CONFIG_EVENTFD=y
CONFIG_SHMEM=y
CONFIG_AIO=y
CONFIG_IO_URING=y
CONFIG_IO_URING_MOCK_FILE=y
CONFIG_ADVISE_SYSCALLS=y
CONFIG_MEMBARRIER=y
CONFIG_KCMP=y
CONFIG_RSEQ=y
# CONFIG_RSEQ_STATS is not set
# CONFIG_RSEQ_DEBUG_DEFAULT_ENABLE is not set
# CONFIG_DEBUG_RSEQ is not set
CONFIG_CACHESTAT_SYSCALL=y
CONFIG_KALLSYMS=y
# CONFIG_KALLSYMS_SELFTEST is not set
CONFIG_KALLSYMS_ALL=y
CONFIG_ARCH_HAS_MEMBARRIER_SYNC_CORE=y
CONFIG_ARCH_SUPPORTS_MSEAL_SYSTEM_MAPPINGS=y
CONFIG_HAVE_PERF_EVENTS=y
CONFIG_GUEST_PERF_EVENTS=y

#
# Kernel Performance Events And Counters
#
CONFIG_PERF_EVENTS=y
# CONFIG_DEBUG_PERF_USE_VMALLOC is not set
# end of Kernel Performance Events And Counters

CONFIG_SYSTEM_DATA_VERIFICATION=y
CONFIG_PROFILING=y
# CONFIG_RUST is not set
CONFIG_TRACEPOINTS=y

#
# Kexec and crash features
#
CONFIG_CRASH_RESERVE=y
CONFIG_VMCORE_INFO=y
CONFIG_KEXEC_CORE=y
CONFIG_HAVE_IMA_KEXEC=y
CONFIG_KEXEC=y
CONFIG_KEXEC_FILE=y
# CONFIG_KEXEC_SIG is not set
CONFIG_CRASH_DUMP=y
# CONFIG_CRASH_DM_CRYPT is not set
# end of Kexec and crash features

#
# Live Update and Kexec HandOver
#
# CONFIG_KEXEC_HANDOVER is not set
# end of Live Update and Kexec HandOver
# end of General setup

CONFIG_ARM64=y
CONFIG_RUSTC_SUPPORTS_ARM64=y
CONFIG_CLANG_SUPPORTS_DYNAMIC_FTRACE_WITH_ARGS=y
CONFIG_64BIT=y
CONFIG_MMU=y
CONFIG_ARM64_CONT_PTE_SHIFT=4
CONFIG_ARM64_CONT_PMD_SHIFT=4
CONFIG_ARCH_MMAP_RND_BITS_MIN=18
CONFIG_ARCH_MMAP_RND_BITS_MAX=33
CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MIN=11
CONFIG_ARCH_MMAP_RND_COMPAT_BITS_MAX=16
CONFIG_STACKTRACE_SUPPORT=y
CONFIG_ILLEGAL_POINTER_VALUE=0xdead000000000000
CONFIG_LOCKDEP_SUPPORT=y
CONFIG_GENERIC_BUG=y
CONFIG_GENERIC_BUG_RELATIVE_POINTERS=y
CONFIG_GENERIC_HWEIGHT=y
CONFIG_GENERIC_CSUM=y
CONFIG_GENERIC_CALIBRATE_DELAY=y
CONFIG_SMP=y
CONFIG_KERNEL_MODE_NEON=y
CONFIG_FIX_EARLYCON_MEM=y
CONFIG_PGTABLE_LEVELS=5
CONFIG_ARCH_SUPPORTS_UPROBES=y
CONFIG_ARCH_PROC_KCORE_TEXT=y
CONFIG_BUILTIN_RETURN_ADDRESS_STRIPS_PAC=y
CONFIG_KASAN_SHADOW_OFFSET=0xdfff800000000000

#
# Platform selection
#
# CONFIG_ARCH_ACTIONS is not set
# CONFIG_ARCH_AIROHA is not set
# CONFIG_ARCH_SUNXI is not set
# CONFIG_ARCH_ALPINE is not set
# CONFIG_ARCH_APPLE is not set
# CONFIG_ARCH_AXIADO is not set
# CONFIG_ARCH_BCM is not set
# CONFIG_ARCH_BERLIN is not set
# CONFIG_ARCH_BITMAIN is not set
# CONFIG_ARCH_BLAIZE is not set
# CONFIG_ARCH_BST is not set
# CONFIG_ARCH_CIX is not set
# CONFIG_ARCH_EXYNOS is not set
# CONFIG_ARCH_K3 is not set
# CONFIG_ARCH_LG1K is not set
# CONFIG_ARCH_HISI is not set
# CONFIG_ARCH_KEEMBAY is not set
# CONFIG_ARCH_MEDIATEK is not set
# CONFIG_ARCH_MESON is not set
# CONFIG_ARCH_MICROCHIP is not set
# CONFIG_ARCH_MMP is not set
# CONFIG_ARCH_MVEBU is not set
# CONFIG_ARCH_NXP is not set
# CONFIG_ARCH_MA35 is not set
# CONFIG_ARCH_NPCM is not set
# CONFIG_ARCH_PENSANDO is not set
# CONFIG_ARCH_QCOM is not set
# CONFIG_ARCH_REALTEK is not set
# CONFIG_ARCH_RENESAS is not set
# CONFIG_ARCH_ROCKCHIP is not set
# CONFIG_ARCH_SEATTLE is not set
# CONFIG_ARCH_INTEL_SOCFPGA is not set
# CONFIG_ARCH_SOPHGO is not set
# CONFIG_ARCH_STM32 is not set
# CONFIG_ARCH_SYNQUACER is not set
# CONFIG_ARCH_TEGRA is not set
# CONFIG_ARCH_SPRD is not set
# CONFIG_ARCH_THUNDER is not set
# CONFIG_ARCH_THUNDER2 is not set
# CONFIG_ARCH_UNIPHIER is not set
CONFIG_ARCH_VEXPRESS=y
# CONFIG_ARCH_VISCONTI is not set
# CONFIG_ARCH_XGENE is not set
# CONFIG_ARCH_ZYNQMP is not set
# end of Platform selection

#
# Kernel Features
#

#
# ARM errata workarounds via the alternatives framework
#
CONFIG_AMPERE_ERRATUM_AC03_CPU_38=y
CONFIG_AMPERE_ERRATUM_AC04_CPU_23=y
CONFIG_ARM64_WORKAROUND_CLEAN_CACHE=y
CONFIG_ARM64_ERRATUM_826319=y
CONFIG_ARM64_ERRATUM_827319=y
CONFIG_ARM64_ERRATUM_824069=y
CONFIG_ARM64_ERRATUM_819472=y
CONFIG_ARM64_ERRATUM_832075=y
# CONFIG_ARM64_ERRATUM_834220 is not set
CONFIG_ARM64_ERRATUM_1742098=y
CONFIG_ARM64_ERRATUM_845719=y
CONFIG_ARM64_ERRATUM_843419=y
CONFIG_ARM64_ERRATUM_1024718=y
CONFIG_ARM64_ERRATUM_1418040=y
CONFIG_ARM64_WORKAROUND_SPECULATIVE_AT=y
CONFIG_ARM64_ERRATUM_1165522=y
CONFIG_ARM64_ERRATUM_1319367=y
CONFIG_ARM64_ERRATUM_1530923=y
CONFIG_ARM64_WORKAROUND_REPEAT_TLBI=y
# CONFIG_ARM64_ERRATUM_2441007 is not set
# CONFIG_ARM64_ERRATUM_1286807 is not set
CONFIG_ARM64_ERRATUM_1463225=y
# CONFIG_ARM64_ERRATUM_1542419 is not set
CONFIG_ARM64_ERRATUM_1508412=y
CONFIG_ARM64_ERRATUM_2051678=y
CONFIG_ARM64_ERRATUM_2077057=y
CONFIG_ARM64_ERRATUM_2658417=y
CONFIG_ARM64_WORKAROUND_TSB_FLUSH_FAILURE=y
CONFIG_ARM64_ERRATUM_2054223=y
CONFIG_ARM64_ERRATUM_2067961=y
# CONFIG_ARM64_ERRATUM_2441009 is not set
CONFIG_ARM64_ERRATUM_2457168=y
CONFIG_ARM64_ERRATUM_2645198=y
CONFIG_ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD=y
CONFIG_ARM64_ERRATUM_2966298=y
CONFIG_ARM64_ERRATUM_3117295=y
CONFIG_ARM64_ERRATUM_3194386=y
CONFIG_ARM64_ERRATUM_4311569=y
CONFIG_ARM64_ERRATUM_4193714=y
CONFIG_CAVIUM_ERRATUM_22375=y
CONFIG_CAVIUM_ERRATUM_23144=y
CONFIG_CAVIUM_ERRATUM_23154=y
CONFIG_CAVIUM_ERRATUM_27456=y
CONFIG_CAVIUM_ERRATUM_30115=y
CONFIG_CAVIUM_TX2_ERRATUM_219=y
CONFIG_FUJITSU_ERRATUM_010001=y
CONFIG_HISILICON_ERRATUM_161600802=y
CONFIG_HISILICON_ERRATUM_162100801=y
CONFIG_QCOM_FALKOR_ERRATUM_1003=y
CONFIG_QCOM_FALKOR_ERRATUM_1009=y
CONFIG_QCOM_QDF2400_ERRATUM_0065=y
CONFIG_QCOM_FALKOR_ERRATUM_E1041=y
CONFIG_NVIDIA_CARMEL_CNP_ERRATUM=y
CONFIG_ROCKCHIP_ERRATUM_3568002=y
CONFIG_ROCKCHIP_ERRATUM_3588001=y
CONFIG_SOCIONEXT_SYNQUACER_PREITS=y
# end of ARM errata workarounds via the alternatives framework

CONFIG_ARM64_4K_PAGES=y
# CONFIG_ARM64_16K_PAGES is not set
# CONFIG_ARM64_64K_PAGES is not set
# CONFIG_ARM64_VA_BITS_39 is not set
# CONFIG_ARM64_VA_BITS_48 is not set
CONFIG_ARM64_VA_BITS_52=y
# CONFIG_ARM64_FORCE_52BIT is not set
CONFIG_ARM64_VA_BITS=52
CONFIG_ARM64_PA_BITS_52=y
CONFIG_ARM64_PA_BITS=52
CONFIG_ARM64_LPA2=y
CONFIG_CPU_LITTLE_ENDIAN=y
CONFIG_NR_CPUS=8
CONFIG_HOTPLUG_CPU=y
CONFIG_NUMA=y
CONFIG_NODES_SHIFT=4
CONFIG_HZ_100=y
# CONFIG_HZ_250 is not set
# CONFIG_HZ_300 is not set
# CONFIG_HZ_1000 is not set
CONFIG_HZ=100
CONFIG_SCHED_HRTICK=y
CONFIG_ARCH_SPARSEMEM_ENABLE=y
CONFIG_HW_PERF_EVENTS=y
CONFIG_CC_HAVE_SHADOW_CALL_STACK=y
CONFIG_PARAVIRT=y
# CONFIG_PARAVIRT_TIME_ACCOUNTING is not set
CONFIG_ARCH_SUPPORTS_KEXEC=y
CONFIG_ARCH_SUPPORTS_KEXEC_FILE=y
CONFIG_ARCH_SELECTS_KEXEC_FILE=y
CONFIG_ARCH_SUPPORTS_KEXEC_SIG=y
CONFIG_ARCH_SUPPORTS_KEXEC_IMAGE_VERIFY_SIG=y
CONFIG_ARCH_DEFAULT_KEXEC_IMAGE_VERIFY_SIG=y
CONFIG_ARCH_SUPPORTS_KEXEC_HANDOVER=y
CONFIG_ARCH_SUPPORTS_CRASH_DUMP=y
CONFIG_ARCH_DEFAULT_CRASH_DUMP=y
CONFIG_ARCH_HAS_GENERIC_CRASHKERNEL_RESERVATION=y
CONFIG_TRANS_TABLE=y
# CONFIG_XEN is not set
CONFIG_ARCH_FORCE_MAX_ORDER=10
CONFIG_UNMAP_KERNEL_AT_EL0=y
CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY=y
# CONFIG_ARM64_SW_TTBR0_PAN is not set
CONFIG_ARM64_TAGGED_ADDR_ABI=y
CONFIG_COMPAT=y
CONFIG_KUSER_HELPERS=y
CONFIG_COMPAT_VDSO=y
CONFIG_THUMB2_COMPAT_VDSO=y
# CONFIG_COMPAT_ALIGNMENT_FIXUPS is not set
# CONFIG_ARMV8_DEPRECATED is not set

#
# ARMv8.1 architectural features
#
CONFIG_ARM64_HW_AFDBM=y
# end of ARMv8.1 architectural features

#
# ARMv8.2 architectural features
#
CONFIG_ARM64_PMEM=y
CONFIG_ARM64_RAS_EXTN=y
CONFIG_ARM64_CNP=y
# end of ARMv8.2 architectural features

#
# ARMv8.3 architectural features
#
CONFIG_ARM64_PTR_AUTH=y
CONFIG_ARM64_PTR_AUTH_KERNEL=y
CONFIG_CC_HAS_BRANCH_PROT_PAC_RET=y
CONFIG_AS_HAS_CFI_NEGATE_RA_STATE=y
# end of ARMv8.3 architectural features

#
# ARMv8.4 architectural features
#
CONFIG_ARM64_AMU_EXTN=y
CONFIG_ARM64_TLB_RANGE=y
# CONFIG_ARM64_MPAM is not set
# end of ARMv8.4 architectural features

#
# ARMv8.5 architectural features
#
CONFIG_AS_HAS_ARMV8_5=y
CONFIG_ARM64_BTI=y
CONFIG_ARM64_BTI_KERNEL=y
CONFIG_CC_HAS_BRANCH_PROT_PAC_RET_BTI=y
CONFIG_ARM64_E0PD=y
CONFIG_ARM64_AS_HAS_MTE=y
CONFIG_ARM64_MTE=y
# end of ARMv8.5 architectural features

#
# ARMv8.7 architectural features
#
CONFIG_ARM64_EPAN=y
# end of ARMv8.7 architectural features

CONFIG_AS_HAS_MOPS=y

#
# ARMv8.9 architectural features
#
CONFIG_ARM64_POE=y
CONFIG_ARCH_PKEY_BITS=3
CONFIG_ARM64_HAFT=y
# end of ARMv8.9 architectural features

#
# ARMv9.4 architectural features
#
CONFIG_ARM64_GCS=y
# end of ARMv9.4 architectural features

CONFIG_AS_HAS_LSUI=y

#
# ARMv9.6 architectural features
#
CONFIG_ARM64_LSUI=y
# end of ARMv9.6 architectural features

CONFIG_ARM64_SVE=y
CONFIG_ARM64_SME=y
# CONFIG_ARM64_PSEUDO_NMI is not set
# CONFIG_RELOCATABLE is not set
# CONFIG_RANDOMIZE_BASE is not set
CONFIG_CC_HAVE_STACKPROTECTOR_SYSREG=y
CONFIG_STACKPROTECTOR_PER_TASK=y
CONFIG_ARM64_CONTPTE=y
# end of Kernel Features

#
# Boot options
#
# CONFIG_ARM64_ACPI_PARKING_PROTOCOL is not set
CONFIG_CMDLINE="earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 rcupdate.rcu_cpu_stall_cputime=1 no_hash_pointers page_owner=on sysctl.vm.nr_hugepages=4 sysctl.vm.nr_overcommit_hugepages=4 secretmem.enable=1 sysctl.max_rcu_stall_to_panic=1 msr.allow_writes=off coredump_filter=0xffff root=/dev/vda console=ttyAMA0 smp.csd_lock_timeout=100000 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 dummy_hcd.num=32 max_loop=32 nbds_max=32 comedi.comedi_num_legacy_minors=4 panic_on_warn=1"
CONFIG_CMDLINE_FROM_BOOTLOADER=y
# CONFIG_CMDLINE_FORCE is not set
CONFIG_EFI_STUB=y
CONFIG_EFI=y
# CONFIG_COMPRESSED_INSTALL is not set
CONFIG_DMI=y
# end of Boot options

#
# Power management options
#
CONFIG_SUSPEND=y
CONFIG_SUSPEND_FREEZER=y
# CONFIG_SUSPEND_SKIP_SYNC is not set
CONFIG_HIBERNATE_CALLBACKS=y
CONFIG_HIBERNATION=y
CONFIG_HIBERNATION_SNAPSHOT_DEV=y
CONFIG_HIBERNATION_COMP_LZO=y
# CONFIG_HIBERNATION_COMP_LZ4 is not set
CONFIG_HIBERNATION_DEF_COMP="lzo"
CONFIG_PM_STD_PARTITION=""
CONFIG_PM_SLEEP=y
CONFIG_PM_SLEEP_SMP=y
# CONFIG_PM_AUTOSLEEP is not set
# CONFIG_PM_USERSPACE_AUTOSLEEP is not set
# CONFIG_PM_WAKELOCKS is not set
# CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP is not set
CONFIG_PM=y
CONFIG_PM_DEBUG=y
# CONFIG_PM_ADVANCED_DEBUG is not set
# CONFIG_PM_TEST_SUSPEND is not set
CONFIG_PM_SLEEP_DEBUG=y
# CONFIG_DPM_WATCHDOG is not set
CONFIG_PM_CLK=y
CONFIG_PM_GENERIC_DOMAINS=y
CONFIG_WQ_POWER_EFFICIENT_DEFAULT=y
CONFIG_PM_GENERIC_DOMAINS_SLEEP=y
CONFIG_PM_GENERIC_DOMAINS_OF=y
CONFIG_CPU_PM=y
CONFIG_ENERGY_MODEL=y
CONFIG_ARCH_HIBERNATION_POSSIBLE=y
CONFIG_ARCH_HIBERNATION_HEADER=y
CONFIG_ARCH_SUSPEND_POSSIBLE=y
# end of Power management options

#
# CPU Power Management
#

#
# CPU Idle
#
CONFIG_CPU_IDLE=y
CONFIG_CPU_IDLE_MULTIPLE_DRIVERS=y
# CONFIG_CPU_IDLE_GOV_LADDER is not set
CONFIG_CPU_IDLE_GOV_MENU=y
# CONFIG_CPU_IDLE_GOV_TEO is not set
CONFIG_DT_IDLE_STATES=y
CONFIG_DT_IDLE_GENPD=y

#
# ARM CPU Idle Drivers
#
CONFIG_ARM_PSCI_CPUIDLE=y
CONFIG_ARM_PSCI_CPUIDLE_DOMAIN=y
# end of ARM CPU Idle Drivers
# end of CPU Idle

#
# CPU Frequency scaling
#
CONFIG_CPU_FREQ=y
CONFIG_CPU_FREQ_GOV_ATTR_SET=y
CONFIG_CPU_FREQ_GOV_COMMON=y
CONFIG_CPU_FREQ_STAT=y
# CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_POWERSAVE is not set
CONFIG_CPU_FREQ_DEFAULT_GOV_USERSPACE=y
# CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_CONSERVATIVE is not set
# CONFIG_CPU_FREQ_DEFAULT_GOV_SCHEDUTIL is not set
CONFIG_CPU_FREQ_GOV_PERFORMANCE=y
CONFIG_CPU_FREQ_GOV_POWERSAVE=y
CONFIG_CPU_FREQ_GOV_USERSPACE=y
CONFIG_CPU_FREQ_GOV_ONDEMAND=y
CONFIG_CPU_FREQ_GOV_CONSERVATIVE=y
CONFIG_CPU_FREQ_GOV_SCHEDUTIL=y

#
# CPU frequency scaling drivers
#
CONFIG_CPUFREQ_DT=y
# CONFIG_CPUFREQ_VIRT is not set
CONFIG_CPUFREQ_DT_PLATDEV=y
CONFIG_ARM_SCMI_CPUFREQ=y
CONFIG_ACPI_CPPC_CPUFREQ=y
CONFIG_ACPI_CPPC_CPUFREQ_FIE=y
# end of CPU Frequency scaling
# end of CPU Power Management

CONFIG_ARCH_SUPPORTS_ACPI=y
CONFIG_ACPI=y
CONFIG_ACPI_GENERIC_GSI=y
CONFIG_ACPI_CCA_REQUIRED=y
CONFIG_ACPI_THERMAL_LIB=y
# CONFIG_ACPI_DEBUGGER is not set
CONFIG_ACPI_SPCR_TABLE=y
# CONFIG_ACPI_FPDT is not set
# CONFIG_ACPI_EC is not set
CONFIG_ACPI_AC=y
CONFIG_ACPI_BATTERY=y
CONFIG_ACPI_BUTTON=y
CONFIG_ACPI_VIDEO=y
CONFIG_ACPI_FAN=y
# CONFIG_ACPI_TAD is not set
CONFIG_ACPI_DOCK=y
CONFIG_ACPI_PROCESSOR_IDLE=y
CONFIG_ACPI_MCFG=y
CONFIG_ACPI_CPPC_LIB=y
CONFIG_ACPI_PROCESSOR=y
# CONFIG_ACPI_IPMI is not set
CONFIG_ACPI_HOTPLUG_CPU=y
CONFIG_ACPI_THERMAL=y
CONFIG_ARCH_HAS_ACPI_TABLE_UPGRADE=y
CONFIG_ACPI_TABLE_UPGRADE=y
CONFIG_ACPI_DEBUG=y
# CONFIG_ACPI_PCI_SLOT is not set
CONFIG_ACPI_CONTAINER=y
CONFIG_ACPI_HOTPLUG_MEMORY=y
CONFIG_ACPI_HED=y
# CONFIG_ACPI_BGRT is not set
CONFIG_ACPI_REDUCED_HARDWARE_ONLY=y
# CONFIG_ACPI_NFIT is not set
CONFIG_ACPI_NUMA=y
CONFIG_ACPI_HMAT=y
CONFIG_HAVE_ACPI_APEI=y
CONFIG_ACPI_APEI=y
CONFIG_ACPI_APEI_GHES=y
CONFIG_ACPI_APEI_PCIEAER=y
CONFIG_ACPI_APEI_SEA=y
CONFIG_ACPI_APEI_MEMORY_FAILURE=y
CONFIG_ACPI_APEI_EINJ=y
# CONFIG_ACPI_APEI_GHES_NVIDIA is not set
# CONFIG_ACPI_APEI_ERST_DEBUG is not set
# CONFIG_ACPI_CONFIGFS is not set
# CONFIG_ACPI_PFRUT is not set
CONFIG_ACPI_IORT=y
CONFIG_ACPI_GTDT=y
# CONFIG_ACPI_AGDI is not set
CONFIG_ACPI_APMT=y
CONFIG_ACPI_PPTT=y
CONFIG_ACPI_PCC=y
# CONFIG_ACPI_FFH is not set
CONFIG_PMIC_OPREGION=y
CONFIG_ACPI_PRMT=y
CONFIG_KVM_COMMON=y
CONFIG_HAVE_KVM_IRQCHIP=y
CONFIG_HAVE_KVM_IRQ_ROUTING=y
CONFIG_HAVE_KVM_DIRTY_RING=y
CONFIG_HAVE_KVM_DIRTY_RING_ACQ_REL=y
CONFIG_NEED_KVM_DIRTY_RING_WITH_BITMAP=y
CONFIG_KVM_MMIO=y
CONFIG_HAVE_KVM_MSI=y
CONFIG_HAVE_KVM_READONLY_MEM=y
CONFIG_HAVE_KVM_CPU_RELAX_INTERCEPT=y
CONFIG_KVM_VFIO=y
CONFIG_KVM_GENERIC_DIRTYLOG_READ_PROTECT=y
CONFIG_HAVE_KVM_IRQ_BYPASS=y
CONFIG_HAVE_KVM_VCPU_RUN_PID_CHANGE=y
CONFIG_VIRT_XFER_TO_GUEST_WORK=y
CONFIG_KVM_GENERIC_HARDWARE_ENABLING=y
CONFIG_KVM_GUEST_MEMFD=y
CONFIG_VIRTUALIZATION=y
CONFIG_KVM=y
# CONFIG_PTDUMP_STAGE2_DEBUGFS is not set
# CONFIG_NVHE_EL2_DEBUG is not set
CONFIG_HAVE_LIVEPATCH=y
CONFIG_CPU_MITIGATIONS=y

#
# General architecture-dependent options
#
CONFIG_ARCH_HAS_SUBPAGE_FAULTS=y
CONFIG_HOTPLUG_SMT=y
CONFIG_ARCH_SUPPORTS_SCHED_SMT=y
CONFIG_ARCH_SUPPORTS_SCHED_CLUSTER=y
CONFIG_ARCH_SUPPORTS_SCHED_MC=y
CONFIG_SCHED_SMT=y
CONFIG_SCHED_CLUSTER=y
CONFIG_SCHED_MC=y
CONFIG_HOTPLUG_CORE_SYNC=y
CONFIG_HOTPLUG_CORE_SYNC_DEAD=y
CONFIG_GENERIC_IRQ_ENTRY=y
# CONFIG_KPROBES is not set
CONFIG_JUMP_LABEL=y
# CONFIG_STATIC_KEYS_SELFTEST is not set
CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS=y
CONFIG_HAVE_IOREMAP_PROT=y
CONFIG_HAVE_KPROBES=y
CONFIG_HAVE_KRETPROBES=y
CONFIG_HAVE_FUNCTION_ERROR_INJECTION=y
CONFIG_HAVE_NMI=y
CONFIG_TRACE_IRQFLAGS_SUPPORT=y
CONFIG_TRACE_IRQFLAGS_NMI_SUPPORT=y
CONFIG_HAVE_ARCH_TRACEHOOK=y
CONFIG_HAVE_DMA_CONTIGUOUS=y
CONFIG_GENERIC_SMP_IDLE_THREAD=y
CONFIG_GENERIC_IDLE_POLL_SETUP=y
CONFIG_ARCH_HAS_FORTIFY_SOURCE=y
CONFIG_ARCH_HAS_KEEPINITRD=y
CONFIG_ARCH_HAS_SET_MEMORY=y
CONFIG_ARCH_HAS_SET_DIRECT_MAP=y
CONFIG_HAVE_ARCH_THREAD_STRUCT_WHITELIST=y
CONFIG_ARCH_WANTS_NO_INSTR=y
CONFIG_HAVE_ASM_MODVERSIONS=y
CONFIG_HAVE_REGS_AND_STACK_ACCESS_API=y
CONFIG_HAVE_RSEQ=y
CONFIG_HAVE_RUST=y
CONFIG_HAVE_FUNCTION_ARG_ACCESS_API=y
CONFIG_HAVE_HW_BREAKPOINT=y
CONFIG_HAVE_PERF_REGS=y
CONFIG_HAVE_PERF_USER_STACK_DUMP=y
CONFIG_HAVE_ARCH_JUMP_LABEL=y
CONFIG_HAVE_ARCH_JUMP_LABEL_RELATIVE=y
CONFIG_MMU_GATHER_TABLE_FREE=y
CONFIG_MMU_GATHER_RCU_TABLE_FREE=y
CONFIG_MMU_LAZY_TLB_REFCOUNT=y
CONFIG_ARCH_HAVE_NMI_SAFE_CMPXCHG=y
CONFIG_ARCH_HAS_NMI_SAFE_THIS_CPU_OPS=y
CONFIG_HAVE_ALIGNED_STRUCT_PAGE=y
CONFIG_HAVE_CMPXCHG_LOCAL=y
CONFIG_HAVE_CMPXCHG_DOUBLE=y
CONFIG_ARCH_WANT_COMPAT_IPC_PARSE_VERSION=y
CONFIG_HAVE_ARCH_SECCOMP=y
CONFIG_HAVE_ARCH_SECCOMP_FILTER=y
CONFIG_SECCOMP=y
CONFIG_SECCOMP_FILTER=y
# CONFIG_SECCOMP_CACHE_DEBUG is not set
CONFIG_HAVE_ARCH_KSTACK_ERASE=y
CONFIG_HAVE_STACKPROTECTOR=y
CONFIG_STACKPROTECTOR=y
CONFIG_STACKPROTECTOR_STRONG=y
CONFIG_ARCH_SUPPORTS_SHADOW_CALL_STACK=y
# CONFIG_SHADOW_CALL_STACK is not set
CONFIG_ARCH_SUPPORTS_LTO_CLANG=y
CONFIG_ARCH_SUPPORTS_LTO_CLANG_THIN=y
CONFIG_HAS_LTO_CLANG=y
CONFIG_LTO_NONE=y
# CONFIG_LTO_CLANG_FULL is not set
# CONFIG_LTO_CLANG_THIN is not set
CONFIG_ARCH_SUPPORTS_CFI=y
# CONFIG_CFI is not set
CONFIG_HAVE_CFI_ICALL_NORMALIZE_INTEGERS=y
CONFIG_HAVE_CFI_ICALL_NORMALIZE_INTEGERS_RUSTC=y
CONFIG_HAVE_CONTEXT_TRACKING_USER=y
CONFIG_HAVE_VIRT_CPU_ACCOUNTING_GEN=y
CONFIG_HAVE_IRQ_TIME_ACCOUNTING=y
CONFIG_HAVE_PV_STEAL_CLOCK_GEN=y
CONFIG_HAVE_MOVE_PUD=y
CONFIG_HAVE_MOVE_PMD=y
CONFIG_HAVE_ARCH_TRANSPARENT_HUGEPAGE=y
CONFIG_HAVE_ARCH_HUGE_VMAP=y
CONFIG_HAVE_ARCH_HUGE_VMALLOC=y
CONFIG_ARCH_WANT_HUGE_PMD_SHARE=y
CONFIG_ARCH_WANT_PMD_MKWRITE=y
CONFIG_HAVE_MOD_ARCH_SPECIFIC=y
CONFIG_MODULES_USE_ELF_RELA=y
CONFIG_ARCH_WANTS_EXECMEM_LATE=y
CONFIG_HAVE_SOFTIRQ_ON_OWN_STACK=y
CONFIG_SOFTIRQ_ON_OWN_STACK=y
CONFIG_ARCH_HAS_ELF_RANDOMIZE=y
CONFIG_HAVE_ARCH_MMAP_RND_BITS=y
CONFIG_ARCH_MMAP_RND_BITS=18
CONFIG_HAVE_ARCH_MMAP_RND_COMPAT_BITS=y
CONFIG_ARCH_MMAP_RND_COMPAT_BITS=11
CONFIG_HAVE_PAGE_SIZE_4KB=y
CONFIG_PAGE_SIZE_4KB=y
CONFIG_PAGE_SIZE_LESS_THAN_64KB=y
CONFIG_PAGE_SIZE_LESS_THAN_256KB=y
CONFIG_PAGE_SHIFT=12
CONFIG_ARCH_WANT_DEFAULT_TOPDOWN_MMAP_LAYOUT=y
CONFIG_HAVE_RELIABLE_STACKTRACE=y
CONFIG_CLONE_BACKWARDS=y
CONFIG_OLD_SIGSUSPEND3=y
CONFIG_COMPAT_OLD_SIGACTION=y
CONFIG_COMPAT_32BIT_TIME=y
CONFIG_ARCH_SUPPORTS_RT=y
CONFIG_HAVE_ARCH_VMAP_STACK=y
CONFIG_VMAP_STACK=y
CONFIG_HAVE_ARCH_RANDOMIZE_KSTACK_OFFSET=y
CONFIG_RANDOMIZE_KSTACK_OFFSET=y
# CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT is not set
CONFIG_ARCH_HAS_STRICT_KERNEL_RWX=y
CONFIG_STRICT_KERNEL_RWX=y
CONFIG_ARCH_HAS_STRICT_MODULE_RWX=y
CONFIG_STRICT_MODULE_RWX=y
CONFIG_HAVE_ARCH_COMPILER_H=y
CONFIG_HAVE_ARCH_PREL32_RELOCATIONS=y
CONFIG_ARCH_USE_MEMREMAP_PROT=y
# CONFIG_LOCK_EVENT_COUNTS is not set
CONFIG_ARCH_HAS_MEM_ENCRYPT=y
CONFIG_ARCH_HAS_CC_PLATFORM=y
CONFIG_HAVE_PREEMPT_DYNAMIC=y
CONFIG_HAVE_PREEMPT_DYNAMIC_KEY=y
CONFIG_ARCH_WANT_LD_ORPHAN_WARN=y
CONFIG_ARCH_SUPPORTS_DEBUG_PAGEALLOC=y
CONFIG_ARCH_SUPPORTS_PAGE_TABLE_CHECK=y
CONFIG_ARCH_HAVE_TRACE_MMIO_ACCESS=y
CONFIG_ARCH_HAS_HW_PTE_YOUNG=y
CONFIG_ARCH_HAS_NONLEAF_PMD_YOUNG=y
CONFIG_ARCH_HAS_KERNEL_FPU_SUPPORT=y

#
# GCOV-based kernel profiling
#
# CONFIG_GCOV_KERNEL is not set
CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
# end of GCOV-based kernel profiling

CONFIG_HAVE_GCC_PLUGINS=y
CONFIG_FUNCTION_ALIGNMENT_4B=y
CONFIG_FUNCTION_ALIGNMENT=4
CONFIG_CC_HAS_SANE_FUNCTION_ALIGNMENT=y
CONFIG_HAVE_ARCH_GET_SECUREBOOT=y
# end of General architecture-dependent options

CONFIG_RT_MUTEXES=y
CONFIG_MODULE_SIG_FORMAT=y
CONFIG_MODULES=y
# CONFIG_MODULE_DEBUG is not set
# CONFIG_MODULE_FORCE_LOAD is not set
CONFIG_MODULE_UNLOAD=y
CONFIG_MODULE_FORCE_UNLOAD=y
# CONFIG_MODULE_UNLOAD_TAINT_TRACKING is not set
CONFIG_MODVERSIONS=y
# CONFIG_GENKSYMS is not set
CONFIG_GENDWARFKSYMS=y
CONFIG_ASM_MODVERSIONS=y
# CONFIG_EXTENDED_MODVERSIONS is not set
# CONFIG_BASIC_MODVERSIONS is not set
CONFIG_MODULE_SRCVERSION_ALL=y
CONFIG_MODULE_SIG=y
# CONFIG_MODULE_SIG_FORCE is not set
# CONFIG_MODULE_SIG_ALL is not set
CONFIG_MODULE_SIG_SHA256=y
# CONFIG_MODULE_SIG_SHA384 is not set
# CONFIG_MODULE_SIG_SHA512 is not set
# CONFIG_MODULE_SIG_SHA3_256 is not set
# CONFIG_MODULE_SIG_SHA3_384 is not set
# CONFIG_MODULE_SIG_SHA3_512 is not set
CONFIG_MODULE_SIG_HASH="sha256"
# CONFIG_MODULE_COMPRESS is not set
# CONFIG_MODULE_ALLOW_MISSING_NAMESPACE_IMPORTS is not set
CONFIG_MODPROBE_PATH="/sbin/modprobe"
# CONFIG_TRIM_UNUSED_KSYMS is not set
CONFIG_MODULES_TREE_LOOKUP=y
CONFIG_BLOCK=y
CONFIG_BLOCK_LEGACY_AUTOLOAD=y
CONFIG_BLK_RQ_ALLOC_TIME=y
CONFIG_BLK_CGROUP_RWSTAT=y
CONFIG_BLK_DEV_BSG_COMMON=y
CONFIG_BLK_ICQ=y
CONFIG_BLK_DEV_BSGLIB=y
CONFIG_BLK_DEV_INTEGRITY=y
# CONFIG_BLK_DEV_WRITE_MOUNTED is not set
CONFIG_BLK_DEV_ZONED=y
CONFIG_BLK_DEV_THROTTLING=y
CONFIG_BLK_WBT=y
CONFIG_BLK_WBT_MQ=y
CONFIG_BLK_CGROUP_IOLATENCY=y
# CONFIG_BLK_CGROUP_FC_APPID is not set
CONFIG_BLK_CGROUP_IOCOST=y
# CONFIG_BLK_CGROUP_IOPRIO is not set
CONFIG_BLK_DEBUG_FS=y
# CONFIG_BLK_SED_OPAL is not set
CONFIG_BLK_INLINE_ENCRYPTION=y
CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK=y

#
# Partition Types
#
CONFIG_PARTITION_ADVANCED=y
CONFIG_ACORN_PARTITION=y
CONFIG_ACORN_PARTITION_CUMANA=y
CONFIG_ACORN_PARTITION_EESOX=y
CONFIG_ACORN_PARTITION_ICS=y
CONFIG_ACORN_PARTITION_ADFS=y
CONFIG_ACORN_PARTITION_POWERTEC=y
CONFIG_ACORN_PARTITION_RISCIX=y
CONFIG_AIX_PARTITION=y
CONFIG_OSF_PARTITION=y
CONFIG_AMIGA_PARTITION=y
CONFIG_ATARI_PARTITION=y
CONFIG_MAC_PARTITION=y
CONFIG_MSDOS_PARTITION=y
CONFIG_BSD_DISKLABEL=y
CONFIG_MINIX_SUBPARTITION=y
CONFIG_SOLARIS_X86_PARTITION=y
CONFIG_UNIXWARE_DISKLABEL=y
CONFIG_LDM_PARTITION=y
# CONFIG_LDM_DEBUG is not set
CONFIG_SGI_PARTITION=y
CONFIG_ULTRIX_PARTITION=y
CONFIG_SUN_PARTITION=y
CONFIG_KARMA_PARTITION=y
CONFIG_EFI_PARTITION=y
CONFIG_SYSV68_PARTITION=y
CONFIG_CMDLINE_PARTITION=y
# CONFIG_OF_PARTITION is not set
# end of Partition Types

CONFIG_BLK_PM=y
CONFIG_BLOCK_HOLDER_DEPRECATED=y
CONFIG_BLK_MQ_STACKING=y

#
# IO Schedulers
#
CONFIG_MQ_IOSCHED_DEADLINE=y
CONFIG_MQ_IOSCHED_KYBER=y
CONFIG_IOSCHED_BFQ=y
CONFIG_BFQ_GROUP_IOSCHED=y
CONFIG_BFQ_CGROUP_DEBUG=y
# end of IO Schedulers

CONFIG_PREEMPT_NOTIFIERS=y
CONFIG_PADATA=y
CONFIG_ASN1=y
CONFIG_UNINLINE_SPIN_UNLOCK=y
CONFIG_ARCH_SUPPORTS_ATOMIC_RMW=y
CONFIG_MUTEX_SPIN_ON_OWNER=y
CONFIG_RWSEM_SPIN_ON_OWNER=y
CONFIG_LOCK_SPIN_ON_OWNER=y
CONFIG_ARCH_USE_QUEUED_SPINLOCKS=y
CONFIG_QUEUED_SPINLOCKS=y
CONFIG_ARCH_USE_QUEUED_RWLOCKS=y
CONFIG_QUEUED_RWLOCKS=y
CONFIG_ARCH_HAS_NON_OVERLAPPING_ADDRESS_SPACE=y
CONFIG_ARCH_HAS_SYSCALL_WRAPPER=y
CONFIG_FREEZER=y

#
# Executable file formats
#
CONFIG_BINFMT_ELF=y
CONFIG_COMPAT_BINFMT_ELF=y
CONFIG_ARCH_BINFMT_ELF_STATE=y
CONFIG_ARCH_BINFMT_ELF_EXTRA_PHDRS=y
CONFIG_ARCH_HAVE_ELF_PROT=y
CONFIG_ARCH_USE_GNU_PROPERTY=y
CONFIG_ELFCORE=y
# CONFIG_CORE_DUMP_DEFAULT_ELF_HEADERS is not set
CONFIG_BINFMT_SCRIPT=y
CONFIG_BINFMT_MISC=y
CONFIG_COREDUMP=y
# end of Executable file formats

#
# Memory Management options
#
CONFIG_SWAP=y
CONFIG_ZSWAP=y
CONFIG_ZSWAP_DEFAULT_ON=y
CONFIG_ZSWAP_SHRINKER_DEFAULT_ON=y
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_DEFLATE is not set
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZO is not set
CONFIG_ZSWAP_COMPRESSOR_DEFAULT_842=y
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZ4 is not set
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_LZ4HC is not set
# CONFIG_ZSWAP_COMPRESSOR_DEFAULT_ZSTD is not set
CONFIG_ZSWAP_COMPRESSOR_DEFAULT="842"
CONFIG_ZSMALLOC=y

#
# Zsmalloc allocator options
#

#
# Zsmalloc is a common backend allocator for zswap & zram
#
# CONFIG_ZSMALLOC_STAT is not set
CONFIG_ZSMALLOC_CHAIN_SIZE=8
# end of Zsmalloc allocator options

#
# Slab allocator options
#
CONFIG_SLUB=y
CONFIG_KVFREE_RCU_BATCHED=y
# CONFIG_SLUB_TINY is not set
CONFIG_SLAB_MERGE_DEFAULT=y
# CONFIG_SLAB_FREELIST_RANDOM is not set
# CONFIG_SLAB_FREELIST_HARDENED is not set
# CONFIG_SLAB_BUCKETS is not set
# CONFIG_SLUB_STATS is not set
# CONFIG_RANDOM_KMALLOC_CACHES is not set
# end of Slab allocator options

# CONFIG_SHUFFLE_PAGE_ALLOCATOR is not set
# CONFIG_COMPAT_BRK is not set
CONFIG_SPARSEMEM=y
CONFIG_SPARSEMEM_EXTREME=y
CONFIG_SPARSEMEM_VMEMMAP_ENABLE=y
CONFIG_SPARSEMEM_VMEMMAP=y
CONFIG_HAVE_GUP_FAST=y
CONFIG_ARCH_KEEP_MEMBLOCK=y
CONFIG_NUMA_KEEP_MEMINFO=y
CONFIG_MEMORY_ISOLATION=y
CONFIG_EXCLUSIVE_SYSTEM_RAM=y
CONFIG_ARCH_ENABLE_MEMORY_HOTPLUG=y
CONFIG_MEMORY_HOTPLUG=y
# CONFIG_MHP_DEFAULT_ONLINE_TYPE_OFFLINE is not set
CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_AUTO=y
# CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_KERNEL is not set
# CONFIG_MHP_DEFAULT_ONLINE_TYPE_ONLINE_MOVABLE is not set
CONFIG_MEMORY_HOTREMOVE=y
CONFIG_MHP_MEMMAP_ON_MEMORY=y
CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE=y
CONFIG_SPLIT_PTE_PTLOCKS=y
CONFIG_ARCH_ENABLE_SPLIT_PMD_PTLOCK=y
CONFIG_SPLIT_PMD_PTLOCKS=y
CONFIG_BALLOON=y
CONFIG_BALLOON_MIGRATION=y
CONFIG_COMPACTION=y
CONFIG_COMPACT_UNEVICTABLE_DEFAULT=1
CONFIG_PAGE_REPORTING=y
CONFIG_NUMA_MIGRATION=y
CONFIG_MIGRATION=y
CONFIG_DEVICE_MIGRATION=y
CONFIG_ARCH_ENABLE_HUGEPAGE_MIGRATION=y
CONFIG_ARCH_ENABLE_THP_MIGRATION=y
CONFIG_CONTIG_ALLOC=y
CONFIG_PCP_BATCH_SCALE_MAX=5
CONFIG_PHYS_ADDR_T_64BIT=y
CONFIG_MMU_NOTIFIER=y
CONFIG_KSM=y
CONFIG_DEFAULT_MMAP_MIN_ADDR=4096
CONFIG_ARCH_SUPPORTS_MEMORY_FAILURE=y
CONFIG_MEMORY_FAILURE=y
# CONFIG_HWPOISON_INJECT is not set
CONFIG_ARCH_WANTS_THP_SWAP=y
# CONFIG_PERSISTENT_HUGE_ZERO_FOLIO is not set
CONFIG_MM_ID=y
CONFIG_TRANSPARENT_HUGEPAGE=y
# CONFIG_TRANSPARENT_HUGEPAGE_ALWAYS is not set
CONFIG_TRANSPARENT_HUGEPAGE_MADVISE=y
# CONFIG_TRANSPARENT_HUGEPAGE_NEVER is not set
CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_NEVER=y
# CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_ALWAYS is not set
# CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_WITHIN_SIZE is not set
# CONFIG_TRANSPARENT_HUGEPAGE_SHMEM_HUGE_ADVISE is not set
CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_NEVER=y
# CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_ALWAYS is not set
# CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_WITHIN_SIZE is not set
# CONFIG_TRANSPARENT_HUGEPAGE_TMPFS_HUGE_ADVISE is not set
CONFIG_THP_SWAP=y
CONFIG_READ_ONLY_THP_FOR_FS=y
# CONFIG_NO_PAGE_MAPCOUNT is not set
CONFIG_PAGE_MAPCOUNT=y
CONFIG_PGTABLE_HAS_HUGE_LEAVES=y
CONFIG_HAVE_GIGANTIC_FOLIOS=y
CONFIG_ARCH_SUPPORTS_HUGE_PFNMAP=y
CONFIG_ARCH_SUPPORTS_PMD_PFNMAP=y
CONFIG_NEED_PER_CPU_EMBED_FIRST_CHUNK=y
CONFIG_NEED_PER_CPU_PAGE_FIRST_CHUNK=y
CONFIG_USE_PERCPU_NUMA_NODE_ID=y
CONFIG_HAVE_SETUP_PER_CPU_AREA=y
CONFIG_CMA=y
# CONFIG_CMA_DEBUGFS is not set
# CONFIG_CMA_SYSFS is not set
CONFIG_CMA_AREAS=20
CONFIG_PAGE_BLOCK_MAX_ORDER=10
CONFIG_GENERIC_EARLY_IOREMAP=y
# CONFIG_DEFERRED_STRUCT_PAGE_INIT is not set
CONFIG_PAGE_IDLE_FLAG=y
# CONFIG_IDLE_PAGE_TRACKING is not set
CONFIG_ARCH_HAS_CACHE_LINE_SIZE=y
CONFIG_ARCH_HAS_CURRENT_STACK_POINTER=y
CONFIG_ARCH_HAS_ZONE_DMA_SET=y
CONFIG_ZONE_DMA=y
CONFIG_ZONE_DMA32=y
CONFIG_ZONE_DEVICE=y
CONFIG_HMM_MIRROR=y
CONFIG_GET_FREE_REGION=y
CONFIG_DEVICE_PRIVATE=y
CONFIG_ARCH_USES_HIGH_VMA_FLAGS=y
CONFIG_ARCH_HAS_PKEYS=y
CONFIG_ARCH_USES_PG_ARCH_2=y
CONFIG_ARCH_USES_PG_ARCH_3=y
CONFIG_VM_EVENT_COUNTERS=y
CONFIG_PERCPU_STATS=y
# CONFIG_GUP_TEST is not set
# CONFIG_DMAPOOL_TEST is not set
CONFIG_ARCH_HAS_PTE_SPECIAL=y
CONFIG_MEMFD_CREATE=y
CONFIG_SECRETMEM=y
CONFIG_ANON_VMA_NAME=y
CONFIG_HAVE_ARCH_USERFAULTFD_WP=y
CONFIG_HAVE_ARCH_USERFAULTFD_MINOR=y
CONFIG_USERFAULTFD=y
# CONFIG_PTE_MARKER_UFFD_WP is not set
# CONFIG_LRU_GEN is not set
CONFIG_ARCH_SUPPORTS_PER_VMA_LOCK=y
CONFIG_PER_VMA_LOCK=y
CONFIG_LOCK_MM_AND_FIND_VMA=y
CONFIG_EXECMEM=y
CONFIG_NUMA_MEMBLKS=y
# CONFIG_NUMA_EMU is not set
CONFIG_ARCH_HAS_USER_SHADOW_STACK=y
CONFIG_PT_RECLAIM=y
CONFIG_ARCH_HAS_LAZY_MMU_MODE=y

#
# Data Access Monitoring
#
CONFIG_DAMON=y
# CONFIG_DAMON_DEBUG_SANITY is not set
CONFIG_DAMON_VADDR=y
CONFIG_DAMON_PADDR=y
# CONFIG_DAMON_SYSFS is not set
CONFIG_DAMON_RECLAIM=y
# CONFIG_DAMON_LRU_SORT is not set
# CONFIG_DAMON_STAT is not set
# end of Data Access Monitoring
# end of Memory Management options

CONFIG_NET=y
CONFIG_COMPAT_NETLINK_MESSAGES=y
CONFIG_NET_INGRESS=y
CONFIG_NET_EGRESS=y
CONFIG_NET_XGRESS=y
CONFIG_NET_REDIRECT=y
CONFIG_SKB_DECRYPTED=y
CONFIG_SKB_EXTENSIONS=y
CONFIG_NET_DEVMEM=y
CONFIG_NET_SHAPER=y
CONFIG_NET_CRC32C=y

#
# Networking options
#
CONFIG_PACKET=y
CONFIG_PACKET_DIAG=y
CONFIG_INET_PSP=y
CONFIG_UNIX=y
CONFIG_AF_UNIX_OOB=y
CONFIG_UNIX_DIAG=y
CONFIG_TLS=y
CONFIG_TLS_DEVICE=y
CONFIG_TLS_TOE=y
CONFIG_XFRM=y
CONFIG_XFRM_OFFLOAD=y
CONFIG_XFRM_ALGO=y
CONFIG_XFRM_USER=y
CONFIG_XFRM_INTERFACE=y
CONFIG_XFRM_SUB_POLICY=y
CONFIG_XFRM_MIGRATE=y
CONFIG_XFRM_STATISTICS=y
CONFIG_XFRM_AH=y
CONFIG_XFRM_ESP=y
CONFIG_XFRM_IPCOMP=y
CONFIG_NET_KEY=y
CONFIG_NET_KEY_MIGRATE=y
# CONFIG_XFRM_IPTFS is not set
CONFIG_XFRM_ESPINTCP=y
CONFIG_SMC=y
CONFIG_SMC_DIAG=y
# CONFIG_SMC_HS_CTRL_BPF is not set
CONFIG_DIBS=y
CONFIG_DIBS_LO=y
CONFIG_XDP_SOCKETS=y
CONFIG_XDP_SOCKETS_DIAG=y
CONFIG_NET_HANDSHAKE=y
CONFIG_INET=y
CONFIG_IP_MULTICAST=y
CONFIG_IP_ADVANCED_ROUTER=y
CONFIG_IP_FIB_TRIE_STATS=y
CONFIG_IP_MULTIPLE_TABLES=y
CONFIG_IP_ROUTE_MULTIPATH=y
CONFIG_IP_ROUTE_VERBOSE=y
CONFIG_IP_ROUTE_CLASSID=y
CONFIG_IP_PNP=y
CONFIG_IP_PNP_DHCP=y
CONFIG_IP_PNP_BOOTP=y
CONFIG_IP_PNP_RARP=y
CONFIG_NET_IPIP=y
CONFIG_NET_IPGRE_DEMUX=y
CONFIG_NET_IP_TUNNEL=y
CONFIG_NET_IPGRE=y
CONFIG_NET_IPGRE_BROADCAST=y
CONFIG_IP_MROUTE_COMMON=y
CONFIG_IP_MROUTE=y
CONFIG_IP_MROUTE_MULTIPLE_TABLES=y
CONFIG_IP_PIMSM_V1=y
CONFIG_IP_PIMSM_V2=y
CONFIG_SYN_COOKIES=y
CONFIG_NET_IPVTI=y
CONFIG_NET_UDP_TUNNEL=y
CONFIG_NET_FOU=y
CONFIG_NET_FOU_IP_TUNNELS=y
CONFIG_INET_AH=y
CONFIG_INET_ESP=y
CONFIG_INET_ESP_OFFLOAD=y
CONFIG_INET_ESPINTCP=y
CONFIG_INET_IPCOMP=y
CONFIG_INET_TABLE_PERTURB_ORDER=16
CONFIG_INET_XFRM_TUNNEL=y
CONFIG_INET_TUNNEL=y
CONFIG_INET_DIAG=y
CONFIG_INET_TCP_DIAG=y
CONFIG_INET_UDP_DIAG=y
CONFIG_INET_RAW_DIAG=y
CONFIG_INET_DIAG_DESTROY=y
CONFIG_TCP_CONG_ADVANCED=y
CONFIG_TCP_CONG_BIC=y
CONFIG_TCP_CONG_CUBIC=y
CONFIG_TCP_CONG_WESTWOOD=y
CONFIG_TCP_CONG_HTCP=y
CONFIG_TCP_CONG_HSTCP=y
CONFIG_TCP_CONG_HYBLA=y
CONFIG_TCP_CONG_VEGAS=y
CONFIG_TCP_CONG_NV=y
CONFIG_TCP_CONG_SCALABLE=y
CONFIG_TCP_CONG_LP=y
CONFIG_TCP_CONG_VENO=y
CONFIG_TCP_CONG_YEAH=y
CONFIG_TCP_CONG_ILLINOIS=y
CONFIG_TCP_CONG_DCTCP=y
CONFIG_TCP_CONG_CDG=y
CONFIG_TCP_CONG_BBR=y
# CONFIG_DEFAULT_BIC is not set
# CONFIG_DEFAULT_CUBIC is not set
# CONFIG_DEFAULT_HTCP is not set
# CONFIG_DEFAULT_HYBLA is not set
# CONFIG_DEFAULT_VEGAS is not set
# CONFIG_DEFAULT_VENO is not set
# CONFIG_DEFAULT_WESTWOOD is not set
# CONFIG_DEFAULT_DCTCP is not set
# CONFIG_DEFAULT_CDG is not set
CONFIG_DEFAULT_BBR=y
# CONFIG_DEFAULT_RENO is not set
CONFIG_DEFAULT_TCP_CONG="bbr"
# CONFIG_TCP_AO is not set
CONFIG_TCP_MD5SIG=y
CONFIG_IPV6=y
CONFIG_IPV6_ROUTER_PREF=y
CONFIG_IPV6_ROUTE_INFO=y
CONFIG_IPV6_OPTIMISTIC_DAD=y
CONFIG_INET6_AH=y
CONFIG_INET6_ESP=y
CONFIG_INET6_ESP_OFFLOAD=y
CONFIG_INET6_ESPINTCP=y
CONFIG_INET6_IPCOMP=y
CONFIG_IPV6_MIP6=y
CONFIG_IPV6_ILA=y
CONFIG_INET6_XFRM_TUNNEL=y
CONFIG_INET6_TUNNEL=y
CONFIG_IPV6_VTI=y
CONFIG_IPV6_SIT=y
CONFIG_IPV6_SIT_6RD=y
CONFIG_IPV6_NDISC_NODETYPE=y
CONFIG_IPV6_TUNNEL=y
CONFIG_IPV6_GRE=y
CONFIG_IPV6_FOU=y
CONFIG_IPV6_FOU_TUNNEL=y
CONFIG_IPV6_MULTIPLE_TABLES=y
CONFIG_IPV6_SUBTREES=y
CONFIG_IPV6_MROUTE=y
CONFIG_IPV6_MROUTE_MULTIPLE_TABLES=y
CONFIG_IPV6_PIMSM_V2=y
CONFIG_IPV6_SEG6_LWTUNNEL=y
CONFIG_IPV6_SEG6_HMAC=y
CONFIG_IPV6_SEG6_BPF=y
CONFIG_IPV6_RPL_LWTUNNEL=y
# CONFIG_IPV6_IOAM6_LWTUNNEL is not set
CONFIG_NETLABEL=y
CONFIG_MPTCP=y
CONFIG_INET_MPTCP_DIAG=y
CONFIG_MPTCP_IPV6=y
CONFIG_NETWORK_SECMARK=y
CONFIG_NET_PTP_CLASSIFY=y
# CONFIG_NETWORK_PHY_TIMESTAMPING is not set
CONFIG_NETFILTER=y
CONFIG_NETFILTER_ADVANCED=y
CONFIG_BRIDGE_NETFILTER=y

#
# Core Netfilter Configuration
#
CONFIG_NETFILTER_INGRESS=y
CONFIG_NETFILTER_EGRESS=y
CONFIG_NETFILTER_SKIP_EGRESS=y
CONFIG_NETFILTER_NETLINK=y
CONFIG_NETFILTER_FAMILY_BRIDGE=y
CONFIG_NETFILTER_FAMILY_ARP=y
CONFIG_NETFILTER_BPF_LINK=y
# CONFIG_NETFILTER_NETLINK_HOOK is not set
CONFIG_NETFILTER_NETLINK_ACCT=y
CONFIG_NETFILTER_NETLINK_QUEUE=y
CONFIG_NETFILTER_NETLINK_LOG=y
CONFIG_NETFILTER_NETLINK_OSF=y
CONFIG_NF_CONNTRACK=y
CONFIG_NF_LOG_SYSLOG=y
CONFIG_NETFILTER_CONNCOUNT=y
CONFIG_NF_CONNTRACK_MARK=y
CONFIG_NF_CONNTRACK_SECMARK=y
CONFIG_NF_CONNTRACK_ZONES=y
# CONFIG_NF_CONNTRACK_PROCFS is not set
CONFIG_NF_CONNTRACK_EVENTS=y
CONFIG_NF_CONNTRACK_TIMEOUT=y
CONFIG_NF_CONNTRACK_TIMESTAMP=y
CONFIG_NF_CONNTRACK_LABELS=y
CONFIG_NF_CONNTRACK_OVS=y
CONFIG_NF_CT_PROTO_GRE=y
CONFIG_NF_CT_PROTO_SCTP=y
CONFIG_NF_CONNTRACK_AMANDA=y
CONFIG_NF_CONNTRACK_FTP=y
CONFIG_NF_CONNTRACK_H323=y
CONFIG_NF_CONNTRACK_IRC=y
CONFIG_NF_CONNTRACK_BROADCAST=y
CONFIG_NF_CONNTRACK_NETBIOS_NS=y
CONFIG_NF_CONNTRACK_SNMP=y
CONFIG_NF_CONNTRACK_PPTP=y
CONFIG_NF_CONNTRACK_SANE=y
CONFIG_NF_CONNTRACK_SIP=y
CONFIG_NF_CONNTRACK_TFTP=y
CONFIG_NF_CT_NETLINK=y
CONFIG_NF_CT_NETLINK_TIMEOUT=y
CONFIG_NF_CT_NETLINK_HELPER=y
CONFIG_NETFILTER_NETLINK_GLUE_CT=y
CONFIG_NF_NAT=y
CONFIG_NF_NAT_AMANDA=y
CONFIG_NF_NAT_FTP=y
CONFIG_NF_NAT_IRC=y
CONFIG_NF_NAT_SIP=y
CONFIG_NF_NAT_TFTP=y
CONFIG_NF_NAT_REDIRECT=y
CONFIG_NF_NAT_MASQUERADE=y
CONFIG_NF_NAT_OVS=y
CONFIG_NETFILTER_SYNPROXY=y
CONFIG_NF_TABLES=y
CONFIG_NF_TABLES_INET=y
CONFIG_NF_TABLES_NETDEV=y
CONFIG_NFT_NUMGEN=y
CONFIG_NFT_CT=y
CONFIG_NFT_EXTHDR_DCCP=y
CONFIG_NFT_FLOW_OFFLOAD=y
CONFIG_NFT_CONNLIMIT=y
CONFIG_NFT_LOG=y
CONFIG_NFT_LIMIT=y
CONFIG_NFT_MASQ=y
CONFIG_NFT_REDIR=y
CONFIG_NFT_NAT=y
CONFIG_NFT_TUNNEL=y
CONFIG_NFT_QUEUE=y
CONFIG_NFT_QUOTA=y
CONFIG_NFT_REJECT=y
CONFIG_NFT_REJECT_INET=y
CONFIG_NFT_COMPAT=y
CONFIG_NFT_HASH=y
CONFIG_NFT_FIB=y
CONFIG_NFT_FIB_INET=y
CONFIG_NFT_XFRM=y
CONFIG_NFT_SOCKET=y
CONFIG_NFT_OSF=y
CONFIG_NFT_TPROXY=y
CONFIG_NFT_SYNPROXY=y
CONFIG_NF_DUP_NETDEV=y
CONFIG_NFT_DUP_NETDEV=y
CONFIG_NFT_FWD_NETDEV=y
CONFIG_NFT_FIB_NETDEV=y
CONFIG_NFT_REJECT_NETDEV=y
CONFIG_NF_FLOW_TABLE_INET=y
CONFIG_NF_FLOW_TABLE=y
# CONFIG_NF_FLOW_TABLE_PROCFS is not set
CONFIG_NETFILTER_XTABLES=y
CONFIG_NETFILTER_XTABLES_COMPAT=y
CONFIG_NETFILTER_XTABLES_LEGACY=y

#
# Xtables combined modules
#
CONFIG_NETFILTER_XT_MARK=y
CONFIG_NETFILTER_XT_CONNMARK=y
CONFIG_NETFILTER_XT_SET=y

#
# Xtables targets
#
CONFIG_NETFILTER_XT_TARGET_AUDIT=y
CONFIG_NETFILTER_XT_TARGET_CHECKSUM=y
CONFIG_NETFILTER_XT_TARGET_CLASSIFY=y
CONFIG_NETFILTER_XT_TARGET_CONNMARK=y
CONFIG_NETFILTER_XT_TARGET_CONNSECMARK=y
CONFIG_NETFILTER_XT_TARGET_CT=y
CONFIG_NETFILTER_XT_TARGET_DSCP=y
CONFIG_NETFILTER_XT_TARGET_HL=y
CONFIG_NETFILTER_XT_TARGET_HMARK=y
CONFIG_NETFILTER_XT_TARGET_IDLETIMER=y
CONFIG_NETFILTER_XT_TARGET_LED=y
CONFIG_NETFILTER_XT_TARGET_LOG=y
CONFIG_NETFILTER_XT_TARGET_MARK=y
CONFIG_NETFILTER_XT_NAT=y
CONFIG_NETFILTER_XT_TARGET_NETMAP=y
CONFIG_NETFILTER_XT_TARGET_NFLOG=y
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=y
CONFIG_NETFILTER_XT_TARGET_NOTRACK=y
CONFIG_NETFILTER_XT_TARGET_RATEEST=y
CONFIG_NETFILTER_XT_TARGET_REDIRECT=y
CONFIG_NETFILTER_XT_TARGET_MASQUERADE=y
CONFIG_NETFILTER_XT_TARGET_TEE=y
CONFIG_NETFILTER_XT_TARGET_TPROXY=y
CONFIG_NETFILTER_XT_TARGET_TRACE=y
CONFIG_NETFILTER_XT_TARGET_SECMARK=y
CONFIG_NETFILTER_XT_TARGET_TCPMSS=y
CONFIG_NETFILTER_XT_TARGET_TCPOPTSTRIP=y

#
# Xtables matches
#
CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
CONFIG_NETFILTER_XT_MATCH_BPF=y
CONFIG_NETFILTER_XT_MATCH_CGROUP=y
CONFIG_NETFILTER_XT_MATCH_CLUSTER=y
CONFIG_NETFILTER_XT_MATCH_COMMENT=y
CONFIG_NETFILTER_XT_MATCH_CONNBYTES=y
CONFIG_NETFILTER_XT_MATCH_CONNLABEL=y
CONFIG_NETFILTER_XT_MATCH_CONNLIMIT=y
CONFIG_NETFILTER_XT_MATCH_CONNMARK=y
CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
CONFIG_NETFILTER_XT_MATCH_CPU=y
CONFIG_NETFILTER_XT_MATCH_DCCP=y
CONFIG_NETFILTER_XT_MATCH_DEVGROUP=y
CONFIG_NETFILTER_XT_MATCH_DSCP=y
CONFIG_NETFILTER_XT_MATCH_ECN=y
CONFIG_NETFILTER_XT_MATCH_ESP=y
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=y
CONFIG_NETFILTER_XT_MATCH_HELPER=y
CONFIG_NETFILTER_XT_MATCH_HL=y
CONFIG_NETFILTER_XT_MATCH_IPCOMP=y
CONFIG_NETFILTER_XT_MATCH_IPRANGE=y
CONFIG_NETFILTER_XT_MATCH_IPVS=y
CONFIG_NETFILTER_XT_MATCH_L2TP=y
CONFIG_NETFILTER_XT_MATCH_LENGTH=y
CONFIG_NETFILTER_XT_MATCH_LIMIT=y
CONFIG_NETFILTER_XT_MATCH_MAC=y
CONFIG_NETFILTER_XT_MATCH_MARK=y
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=y
CONFIG_NETFILTER_XT_MATCH_NFACCT=y
CONFIG_NETFILTER_XT_MATCH_OSF=y
CONFIG_NETFILTER_XT_MATCH_OWNER=y
CONFIG_NETFILTER_XT_MATCH_POLICY=y
CONFIG_NETFILTER_XT_MATCH_PHYSDEV=y
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=y
CONFIG_NETFILTER_XT_MATCH_QUOTA=y
CONFIG_NETFILTER_XT_MATCH_RATEEST=y
CONFIG_NETFILTER_XT_MATCH_REALM=y
CONFIG_NETFILTER_XT_MATCH_RECENT=y
CONFIG_NETFILTER_XT_MATCH_SCTP=y
CONFIG_NETFILTER_XT_MATCH_SOCKET=y
CONFIG_NETFILTER_XT_MATCH_STATE=y
CONFIG_NETFILTER_XT_MATCH_STATISTIC=y
CONFIG_NETFILTER_XT_MATCH_STRING=y
CONFIG_NETFILTER_XT_MATCH_TCPMSS=y
CONFIG_NETFILTER_XT_MATCH_TIME=y
CONFIG_NETFILTER_XT_MATCH_U32=y
# end of Core Netfilter Configuration

CONFIG_IP_SET=y
CONFIG_IP_SET_MAX=256
CONFIG_IP_SET_BITMAP_IP=y
CONFIG_IP_SET_BITMAP_IPMAC=y
CONFIG_IP_SET_BITMAP_PORT=y
CONFIG_IP_SET_HASH_IP=y
CONFIG_IP_SET_HASH_IPMARK=y
CONFIG_IP_SET_HASH_IPPORT=y
CONFIG_IP_SET_HASH_IPPORTIP=y
CONFIG_IP_SET_HASH_IPPORTNET=y
CONFIG_IP_SET_HASH_IPMAC=y
CONFIG_IP_SET_HASH_MAC=y
CONFIG_IP_SET_HASH_NETPORTNET=y
CONFIG_IP_SET_HASH_NET=y
CONFIG_IP_SET_HASH_NETNET=y
CONFIG_IP_SET_HASH_NETPORT=y
CONFIG_IP_SET_HASH_NETIFACE=y
CONFIG_IP_SET_LIST_SET=y
CONFIG_IP_VS=y
CONFIG_IP_VS_IPV6=y
# CONFIG_IP_VS_DEBUG is not set
CONFIG_IP_VS_TAB_BITS=12

#
# IPVS transport protocol load balancing support
#
CONFIG_IP_VS_PROTO_TCP=y
CONFIG_IP_VS_PROTO_UDP=y
CONFIG_IP_VS_PROTO_AH_ESP=y
CONFIG_IP_VS_PROTO_ESP=y
CONFIG_IP_VS_PROTO_AH=y
CONFIG_IP_VS_PROTO_SCTP=y

#
# IPVS scheduler
#
CONFIG_IP_VS_RR=y
CONFIG_IP_VS_WRR=y
CONFIG_IP_VS_LC=y
CONFIG_IP_VS_WLC=y
CONFIG_IP_VS_FO=y
CONFIG_IP_VS_OVF=y
CONFIG_IP_VS_LBLC=y
CONFIG_IP_VS_LBLCR=y
CONFIG_IP_VS_DH=y
CONFIG_IP_VS_SH=y
CONFIG_IP_VS_MH=y
CONFIG_IP_VS_SED=y
CONFIG_IP_VS_NQ=y
CONFIG_IP_VS_TWOS=y

#
# IPVS SH scheduler
#
CONFIG_IP_VS_SH_TAB_BITS=8

#
# IPVS MH scheduler
#
CONFIG_IP_VS_MH_TAB_INDEX=12

#
# IPVS application helper
#
CONFIG_IP_VS_FTP=y
CONFIG_IP_VS_NFCT=y
CONFIG_IP_VS_PE_SIP=y

#
# IP: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV4=y
CONFIG_IP_NF_IPTABLES_LEGACY=y
CONFIG_NF_SOCKET_IPV4=y
CONFIG_NF_TPROXY_IPV4=y
CONFIG_NF_TABLES_IPV4=y
CONFIG_NFT_REJECT_IPV4=y
CONFIG_NFT_DUP_IPV4=y
CONFIG_NFT_FIB_IPV4=y
CONFIG_NF_TABLES_ARP=y
CONFIG_NF_DUP_IPV4=y
CONFIG_NF_LOG_ARP=y
# CONFIG_NF_LOG_IPV4 is not set
CONFIG_NF_REJECT_IPV4=y
CONFIG_NF_NAT_SNMP_BASIC=y
CONFIG_NF_NAT_PPTP=y
CONFIG_NF_NAT_H323=y
CONFIG_IP_NF_IPTABLES=y
CONFIG_IP_NF_MATCH_AH=y
CONFIG_IP_NF_MATCH_ECN=y
CONFIG_IP_NF_MATCH_RPFILTER=y
CONFIG_IP_NF_MATCH_TTL=y
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_TARGET_REJECT=y
CONFIG_IP_NF_TARGET_SYNPROXY=y
CONFIG_IP_NF_NAT=y
CONFIG_IP_NF_TARGET_MASQUERADE=y
CONFIG_IP_NF_TARGET_NETMAP=y
CONFIG_IP_NF_TARGET_REDIRECT=y
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_TARGET_ECN=y
CONFIG_IP_NF_TARGET_TTL=y
CONFIG_IP_NF_RAW=y
CONFIG_IP_NF_SECURITY=y
CONFIG_IP_NF_ARPTABLES=y
CONFIG_NFT_COMPAT_ARP=y
CONFIG_IP_NF_ARPFILTER=y
CONFIG_IP_NF_ARP_MANGLE=y
# end of IP: Netfilter Configuration

#
# IPv6: Netfilter Configuration
#
CONFIG_IP6_NF_IPTABLES_LEGACY=y
CONFIG_NF_SOCKET_IPV6=y
CONFIG_NF_TPROXY_IPV6=y
CONFIG_NF_TABLES_IPV6=y
CONFIG_NFT_REJECT_IPV6=y
CONFIG_NFT_DUP_IPV6=y
CONFIG_NFT_FIB_IPV6=y
CONFIG_NF_DUP_IPV6=y
CONFIG_NF_REJECT_IPV6=y
CONFIG_NF_LOG_IPV6=y
CONFIG_IP6_NF_IPTABLES=y
CONFIG_IP6_NF_MATCH_AH=y
CONFIG_IP6_NF_MATCH_EUI64=y
CONFIG_IP6_NF_MATCH_FRAG=y
CONFIG_IP6_NF_MATCH_OPTS=y
CONFIG_IP6_NF_MATCH_HL=y
CONFIG_IP6_NF_MATCH_IPV6HEADER=y
CONFIG_IP6_NF_MATCH_MH=y
CONFIG_IP6_NF_MATCH_RPFILTER=y
CONFIG_IP6_NF_MATCH_RT=y
CONFIG_IP6_NF_MATCH_SRH=y
CONFIG_IP6_NF_TARGET_HL=y
CONFIG_IP6_NF_FILTER=y
CONFIG_IP6_NF_TARGET_REJECT=y
CONFIG_IP6_NF_TARGET_SYNPROXY=y
CONFIG_IP6_NF_MANGLE=y
CONFIG_IP6_NF_RAW=y
CONFIG_IP6_NF_SECURITY=y
CONFIG_IP6_NF_NAT=y
CONFIG_IP6_NF_TARGET_MASQUERADE=y
CONFIG_IP6_NF_TARGET_NPT=y
# end of IPv6: Netfilter Configuration

CONFIG_NF_DEFRAG_IPV6=y
CONFIG_NF_TABLES_BRIDGE=y
CONFIG_NFT_BRIDGE_META=y
CONFIG_NFT_BRIDGE_REJECT=y
CONFIG_NF_CONNTRACK_BRIDGE=y
CONFIG_BRIDGE_NF_EBTABLES_LEGACY=y
CONFIG_BRIDGE_NF_EBTABLES=y
CONFIG_BRIDGE_EBT_BROUTE=y
CONFIG_BRIDGE_EBT_T_FILTER=y
CONFIG_BRIDGE_EBT_T_NAT=y
CONFIG_BRIDGE_EBT_802_3=y
CONFIG_BRIDGE_EBT_AMONG=y
CONFIG_BRIDGE_EBT_ARP=y
CONFIG_BRIDGE_EBT_IP=y
CONFIG_BRIDGE_EBT_IP6=y
CONFIG_BRIDGE_EBT_LIMIT=y
CONFIG_BRIDGE_EBT_MARK=y
CONFIG_BRIDGE_EBT_PKTTYPE=y
CONFIG_BRIDGE_EBT_STP=y
CONFIG_BRIDGE_EBT_VLAN=y
CONFIG_BRIDGE_EBT_ARPREPLY=y
CONFIG_BRIDGE_EBT_DNAT=y
CONFIG_BRIDGE_EBT_MARK_T=y
CONFIG_BRIDGE_EBT_REDIRECT=y
CONFIG_BRIDGE_EBT_SNAT=y
CONFIG_BRIDGE_EBT_LOG=y
CONFIG_BRIDGE_EBT_NFLOG=y
CONFIG_IP_SCTP=y
# CONFIG_SCTP_DBG_OBJCNT is not set
CONFIG_SCTP_DEFAULT_COOKIE_HMAC_SHA256=y
# CONFIG_SCTP_DEFAULT_COOKIE_HMAC_NONE is not set
CONFIG_INET_SCTP_DIAG=y
CONFIG_RDS=y
CONFIG_RDS_RDMA=y
CONFIG_RDS_TCP=y
# CONFIG_RDS_DEBUG is not set
CONFIG_TIPC=y
CONFIG_TIPC_MEDIA_IB=y
CONFIG_TIPC_MEDIA_UDP=y
CONFIG_TIPC_CRYPTO=y
CONFIG_TIPC_DIAG=y
CONFIG_ATM=y
CONFIG_ATM_BR2684=y
# CONFIG_ATM_BR2684_IPFILTER is not set
CONFIG_L2TP=y
# CONFIG_L2TP_DEBUGFS is not set
CONFIG_L2TP_V3=y
CONFIG_L2TP_IP=y
CONFIG_L2TP_ETH=y
CONFIG_STP=y
CONFIG_GARP=y
CONFIG_MRP=y
CONFIG_BRIDGE=y
CONFIG_BRIDGE_IGMP_SNOOPING=y
CONFIG_BRIDGE_VLAN_FILTERING=y
CONFIG_BRIDGE_MRP=y
CONFIG_BRIDGE_CFM=y
CONFIG_NET_DSA=y
CONFIG_NET_DSA_TAG_NONE=y
# CONFIG_NET_DSA_TAG_AR9331 is not set
CONFIG_NET_DSA_TAG_BRCM_COMMON=y
CONFIG_NET_DSA_TAG_BRCM=y
CONFIG_NET_DSA_TAG_BRCM_LEGACY=y
CONFIG_NET_DSA_TAG_BRCM_LEGACY_FCS=y
CONFIG_NET_DSA_TAG_BRCM_PREPEND=y
# CONFIG_NET_DSA_TAG_HELLCREEK is not set
# CONFIG_NET_DSA_TAG_GSWIP is not set
# CONFIG_NET_DSA_TAG_DSA is not set
# CONFIG_NET_DSA_TAG_EDSA is not set
CONFIG_NET_DSA_TAG_MTK=y
# CONFIG_NET_DSA_TAG_MXL_862XX is not set
# CONFIG_NET_DSA_TAG_MXL_GSW1XX is not set
# CONFIG_NET_DSA_TAG_KSZ is not set
CONFIG_NET_DSA_TAG_OCELOT=y
CONFIG_NET_DSA_TAG_OCELOT_8021Q=y
CONFIG_NET_DSA_TAG_QCA=y
CONFIG_NET_DSA_TAG_RTL4_A=y
# CONFIG_NET_DSA_TAG_RTL8_4 is not set
# CONFIG_NET_DSA_TAG_RZN1_A5PSW is not set
# CONFIG_NET_DSA_TAG_LAN9303 is not set
# CONFIG_NET_DSA_TAG_SJA1105 is not set
# CONFIG_NET_DSA_TAG_TRAILER is not set
# CONFIG_NET_DSA_TAG_VSC73XX_8021Q is not set
# CONFIG_NET_DSA_TAG_XRS700X is not set
# CONFIG_NET_DSA_TAG_YT921X is not set
CONFIG_VLAN_8021Q=y
CONFIG_VLAN_8021Q_GVRP=y
CONFIG_VLAN_8021Q_MVRP=y
CONFIG_LLC=y
CONFIG_LLC2=y
# CONFIG_ATALK is not set
CONFIG_X25=y
CONFIG_LAPB=y
CONFIG_PHONET=y
CONFIG_6LOWPAN=y
# CONFIG_6LOWPAN_DEBUGFS is not set
CONFIG_6LOWPAN_NHC=y
CONFIG_6LOWPAN_NHC_DEST=y
CONFIG_6LOWPAN_NHC_FRAGMENT=y
CONFIG_6LOWPAN_NHC_HOP=y
CONFIG_6LOWPAN_NHC_IPV6=y
CONFIG_6LOWPAN_NHC_MOBILITY=y
CONFIG_6LOWPAN_NHC_ROUTING=y
CONFIG_6LOWPAN_NHC_UDP=y
CONFIG_6LOWPAN_GHC_EXT_HDR_HOP=y
CONFIG_6LOWPAN_GHC_UDP=y
CONFIG_6LOWPAN_GHC_ICMPV6=y
CONFIG_6LOWPAN_GHC_EXT_HDR_DEST=y
CONFIG_6LOWPAN_GHC_EXT_HDR_FRAG=y
CONFIG_6LOWPAN_GHC_EXT_HDR_ROUTE=y
CONFIG_IEEE802154=y
CONFIG_IEEE802154_NL802154_EXPERIMENTAL=y
CONFIG_IEEE802154_SOCKET=y
CONFIG_IEEE802154_6LOWPAN=y
CONFIG_MAC802154=y
CONFIG_NET_SCHED=y

#
# Queueing/Scheduling
#
CONFIG_NET_SCH_HTB=y
CONFIG_NET_SCH_HFSC=y
CONFIG_NET_SCH_PRIO=y
CONFIG_NET_SCH_MULTIQ=y
CONFIG_NET_SCH_RED=y
CONFIG_NET_SCH_SFB=y
CONFIG_NET_SCH_SFQ=y
CONFIG_NET_SCH_TEQL=y
CONFIG_NET_SCH_TBF=y
CONFIG_NET_SCH_CBS=y
CONFIG_NET_SCH_ETF=y
CONFIG_NET_SCH_MQPRIO_LIB=y
CONFIG_NET_SCH_TAPRIO=y
CONFIG_NET_SCH_GRED=y
CONFIG_NET_SCH_NETEM=y
CONFIG_NET_SCH_DRR=y
CONFIG_NET_SCH_MQPRIO=y
CONFIG_NET_SCH_SKBPRIO=y
CONFIG_NET_SCH_CHOKE=y
CONFIG_NET_SCH_QFQ=y
CONFIG_NET_SCH_CODEL=y
CONFIG_NET_SCH_FQ_CODEL=y
CONFIG_NET_SCH_CAKE=y
CONFIG_NET_SCH_FQ=y
CONFIG_NET_SCH_HHF=y
CONFIG_NET_SCH_PIE=y
CONFIG_NET_SCH_FQ_PIE=y
CONFIG_NET_SCH_INGRESS=y
CONFIG_NET_SCH_PLUG=y
CONFIG_NET_SCH_ETS=y
# CONFIG_NET_SCH_DUALPI2 is not set
CONFIG_NET_SCH_DEFAULT=y
# CONFIG_DEFAULT_FQ is not set
CONFIG_DEFAULT_CODEL=y
# CONFIG_DEFAULT_FQ_CODEL is not set
# CONFIG_DEFAULT_FQ_PIE is not set
# CONFIG_DEFAULT_SFQ is not set
# CONFIG_DEFAULT_PFIFO_FAST is not set
CONFIG_DEFAULT_NET_SCH="pfifo_fast"

#
# Classification
#
CONFIG_NET_CLS=y
CONFIG_NET_CLS_BASIC=y
CONFIG_NET_CLS_ROUTE4=y
CONFIG_NET_CLS_FW=y
CONFIG_NET_CLS_U32=y
CONFIG_CLS_U32_PERF=y
CONFIG_CLS_U32_MARK=y
CONFIG_NET_CLS_FLOW=y
CONFIG_NET_CLS_CGROUP=y
CONFIG_NET_CLS_BPF=y
CONFIG_NET_CLS_FLOWER=y
CONFIG_NET_CLS_MATCHALL=y
CONFIG_NET_EMATCH=y
CONFIG_NET_EMATCH_STACK=32
CONFIG_NET_EMATCH_CMP=y
CONFIG_NET_EMATCH_NBYTE=y
CONFIG_NET_EMATCH_U32=y
CONFIG_NET_EMATCH_META=y
CONFIG_NET_EMATCH_TEXT=y
CONFIG_NET_EMATCH_CANID=y
CONFIG_NET_EMATCH_IPSET=y
CONFIG_NET_EMATCH_IPT=y
CONFIG_NET_CLS_ACT=y
CONFIG_NET_ACT_POLICE=y
CONFIG_NET_ACT_GACT=y
CONFIG_GACT_PROB=y
CONFIG_NET_ACT_MIRRED=y
CONFIG_NET_ACT_SAMPLE=y
CONFIG_NET_ACT_NAT=y
CONFIG_NET_ACT_PEDIT=y
CONFIG_NET_ACT_SIMP=y
CONFIG_NET_ACT_SKBEDIT=y
CONFIG_NET_ACT_CSUM=y
CONFIG_NET_ACT_MPLS=y
CONFIG_NET_ACT_VLAN=y
CONFIG_NET_ACT_BPF=y
CONFIG_NET_ACT_CONNMARK=y
CONFIG_NET_ACT_CTINFO=y
CONFIG_NET_ACT_SKBMOD=y
CONFIG_NET_ACT_IFE=y
CONFIG_NET_ACT_TUNNEL_KEY=y
CONFIG_NET_ACT_CT=y
CONFIG_NET_ACT_GATE=y
CONFIG_NET_IFE_SKBMARK=y
CONFIG_NET_IFE_SKBPRIO=y
CONFIG_NET_IFE_SKBTCINDEX=y
CONFIG_NET_TC_SKB_EXT=y
CONFIG_NET_SCH_FIFO=y
CONFIG_DCB=y
CONFIG_DNS_RESOLVER=y
CONFIG_BATMAN_ADV=y
CONFIG_BATMAN_ADV_BATMAN_V=y
CONFIG_BATMAN_ADV_BLA=y
CONFIG_BATMAN_ADV_DAT=y
CONFIG_BATMAN_ADV_MCAST=y
# CONFIG_BATMAN_ADV_DEBUG is not set
# CONFIG_BATMAN_ADV_TRACING is not set
CONFIG_OPENVSWITCH=y
CONFIG_OPENVSWITCH_GRE=y
CONFIG_OPENVSWITCH_VXLAN=y
CONFIG_OPENVSWITCH_GENEVE=y
CONFIG_VSOCKETS=y
CONFIG_VSOCKETS_DIAG=y
CONFIG_VSOCKETS_LOOPBACK=y
CONFIG_VIRTIO_VSOCKETS=y
CONFIG_VIRTIO_VSOCKETS_COMMON=y
CONFIG_NETLINK_DIAG=y
CONFIG_MPLS=y
CONFIG_NET_MPLS_GSO=y
CONFIG_MPLS_ROUTING=y
CONFIG_MPLS_IPTUNNEL=y
CONFIG_NET_NSH=y
CONFIG_HSR=y
CONFIG_NET_SWITCHDEV=y
CONFIG_NET_L3_MASTER_DEV=y
CONFIG_QRTR=y
CONFIG_QRTR_SMD=y
CONFIG_QRTR_TUN=y
CONFIG_QRTR_MHI=y
CONFIG_NET_NCSI=y
# CONFIG_NCSI_OEM_CMD_GET_MAC is not set
# CONFIG_NCSI_OEM_CMD_KEEP_PHY is not set
# CONFIG_PCPU_DEV_REFCNT is not set
CONFIG_MAX_SKB_FRAGS=17
CONFIG_RPS=y
CONFIG_RFS_ACCEL=y
CONFIG_SOCK_RX_QUEUE_MAPPING=y
CONFIG_XPS=y
CONFIG_CGROUP_NET_PRIO=y
CONFIG_CGROUP_NET_CLASSID=y
CONFIG_NET_RX_BUSY_POLL=y
CONFIG_BQL=y
# CONFIG_BPF_STREAM_PARSER is not set
CONFIG_NET_FLOW_LIMIT=y

#
# Network testing
#
# CONFIG_NET_PKTGEN is not set
# CONFIG_NET_DROP_MONITOR is not set
# end of Network testing
# end of Networking options

CONFIG_CAN=y
CONFIG_CAN_RAW=y
CONFIG_CAN_BCM=y
CONFIG_CAN_GW=y
CONFIG_CAN_J1939=y
CONFIG_CAN_ISOTP=y
CONFIG_BT=y
CONFIG_BT_BREDR=y
CONFIG_BT_RFCOMM=y
CONFIG_BT_RFCOMM_TTY=y
CONFIG_BT_BNEP=y
CONFIG_BT_BNEP_MC_FILTER=y
CONFIG_BT_BNEP_PROTO_FILTER=y
CONFIG_BT_HIDP=y
CONFIG_BT_LE=y
CONFIG_BT_LE_L2CAP_ECRED=y
CONFIG_BT_6LOWPAN=y
CONFIG_BT_LEDS=y
CONFIG_BT_MSFTEXT=y
# CONFIG_BT_AOSPEXT is not set
# CONFIG_BT_DEBUGFS is not set
# CONFIG_BT_SELFTEST is not set

#
# Bluetooth device drivers
#
CONFIG_BT_INTEL=y
CONFIG_BT_BCM=y
CONFIG_BT_RTL=y
CONFIG_BT_QCA=y
CONFIG_BT_MTK=y
CONFIG_BT_HCIBTUSB=y
CONFIG_BT_HCIBTUSB_AUTOSUSPEND=y
CONFIG_BT_HCIBTUSB_POLL_SYNC=y
CONFIG_BT_HCIBTUSB_BCM=y
CONFIG_BT_HCIBTUSB_MTK=y
CONFIG_BT_HCIBTUSB_RTL=y
# CONFIG_BT_HCIBTSDIO is not set
CONFIG_BT_HCIUART=y
CONFIG_BT_HCIUART_SERDEV=y
CONFIG_BT_HCIUART_H4=y
# CONFIG_BT_HCIUART_NOKIA is not set
CONFIG_BT_HCIUART_BCSP=y
# CONFIG_BT_HCIUART_ATH3K is not set
CONFIG_BT_HCIUART_LL=y
CONFIG_BT_HCIUART_3WIRE=y
# CONFIG_BT_HCIUART_INTEL is not set
CONFIG_BT_HCIUART_BCM=y
# CONFIG_BT_HCIUART_RTL is not set
CONFIG_BT_HCIUART_QCA=y
CONFIG_BT_HCIUART_AG6XX=y
CONFIG_BT_HCIUART_MRVL=y
# CONFIG_BT_HCIUART_AML is not set
CONFIG_BT_HCIBCM203X=y
# CONFIG_BT_HCIBCM4377 is not set
CONFIG_BT_HCIBPA10X=y
CONFIG_BT_HCIBFUSB=y
# CONFIG_BT_HCIDTL1 is not set
# CONFIG_BT_HCIBT3C is not set
# CONFIG_BT_HCIBLUECARD is not set
CONFIG_BT_HCIVHCI=y
CONFIG_BT_MRVL=y
CONFIG_BT_MRVL_SDIO=y
CONFIG_BT_ATH3K=y
CONFIG_BT_MTKSDIO=y
CONFIG_BT_MTKUART=y
# CONFIG_BT_VIRTIO is not set
CONFIG_BT_NXPUART=y
# CONFIG_BT_INTEL_PCIE is not set
# end of Bluetooth device drivers

CONFIG_AF_RXRPC=y
CONFIG_AF_RXRPC_IPV6=y
# CONFIG_AF_RXRPC_INJECT_LOSS is not set
# CONFIG_AF_RXRPC_INJECT_RX_DELAY is not set
# CONFIG_AF_RXRPC_DEBUG is not set
CONFIG_RXKAD=y
# CONFIG_RXGK is not set
# CONFIG_RXPERF is not set
CONFIG_AF_KCM=y
CONFIG_STREAM_PARSER=y
CONFIG_MCTP=y
CONFIG_FIB_RULES=y
CONFIG_WIRELESS=y
CONFIG_WEXT_CORE=y
CONFIG_WEXT_PROC=y
CONFIG_CFG80211=y
# CONFIG_NL80211_TESTMODE is not set
# CONFIG_CFG80211_DEVELOPER_WARNINGS is not set
# CONFIG_CFG80211_CERTIFICATION_ONUS is not set
CONFIG_CFG80211_REQUIRE_SIGNED_REGDB=y
CONFIG_CFG80211_USE_KERNEL_REGDB_KEYS=y
CONFIG_CFG80211_DEFAULT_PS=y
CONFIG_CFG80211_DEBUGFS=y
CONFIG_CFG80211_CRDA_SUPPORT=y
CONFIG_CFG80211_WEXT=y
CONFIG_MAC80211=y
CONFIG_MAC80211_HAS_RC=y
CONFIG_MAC80211_RC_MINSTREL=y
CONFIG_MAC80211_RC_DEFAULT_MINSTREL=y
CONFIG_MAC80211_RC_DEFAULT="minstrel_ht"
CONFIG_MAC80211_MESH=y
CONFIG_MAC80211_LEDS=y
CONFIG_MAC80211_DEBUGFS=y
# CONFIG_MAC80211_MESSAGE_TRACING is not set
# CONFIG_MAC80211_DEBUG_MENU is not set
CONFIG_MAC80211_STA_HASH_MAX_SIZE=0
CONFIG_RFKILL=y
CONFIG_RFKILL_LEDS=y
CONFIG_RFKILL_INPUT=y
CONFIG_RFKILL_GPIO=y
CONFIG_NET_9P=y
CONFIG_NET_9P_FD=y
CONFIG_NET_9P_VIRTIO=y
# CONFIG_NET_9P_USBG is not set
CONFIG_NET_9P_RDMA=y
# CONFIG_NET_9P_DEBUG is not set
CONFIG_CEPH_LIB=y
# CONFIG_CEPH_LIB_PRETTYDEBUG is not set
CONFIG_CEPH_LIB_USE_DNS_RESOLVER=y
CONFIG_NFC=y
CONFIG_NFC_DIGITAL=y
CONFIG_NFC_NCI=y
# CONFIG_NFC_NCI_SPI is not set
CONFIG_NFC_NCI_UART=y
CONFIG_NFC_HCI=y
CONFIG_NFC_SHDLC=y

#
# Near Field Communication (NFC) devices
#
# CONFIG_NFC_TRF7970A is not set
CONFIG_NFC_SIM=y
CONFIG_NFC_PORT100=y
CONFIG_NFC_VIRTUAL_NCI=y
CONFIG_NFC_FDP=y
# CONFIG_NFC_FDP_I2C is not set
# CONFIG_NFC_PN544_I2C is not set
CONFIG_NFC_PN533=y
CONFIG_NFC_PN533_USB=y
# CONFIG_NFC_PN533_I2C is not set
# CONFIG_NFC_PN532_UART is not set
# CONFIG_NFC_MICROREAD_I2C is not set
CONFIG_NFC_MRVL=y
CONFIG_NFC_MRVL_USB=y
# CONFIG_NFC_MRVL_UART is not set
# CONFIG_NFC_MRVL_I2C is not set
# CONFIG_NFC_ST21NFCA_I2C is not set
# CONFIG_NFC_ST_NCI_I2C is not set
# CONFIG_NFC_ST_NCI_SPI is not set
CONFIG_NFC_NXP_NCI=y
CONFIG_NFC_NXP_NCI_I2C=y
CONFIG_NFC_S3FWRN5=y
CONFIG_NFC_S3FWRN5_I2C=y
# CONFIG_NFC_S3FWRN82_UART is not set
# CONFIG_NFC_ST95HF is not set
# end of Near Field Communication (NFC) devices

CONFIG_PSAMPLE=y
CONFIG_NET_IFE=y
CONFIG_LWTUNNEL=y
CONFIG_LWTUNNEL_BPF=y
CONFIG_DST_CACHE=y
CONFIG_GRO_CELLS=y
CONFIG_SOCK_VALIDATE_XMIT=y
CONFIG_NET_SELFTESTS=y
CONFIG_NET_SOCK_MSG=y
CONFIG_NET_DEVLINK=y
CONFIG_PAGE_POOL=y
CONFIG_PAGE_POOL_STATS=y
CONFIG_FAILOVER=y
CONFIG_ETHTOOL_NETLINK=y

#
# Device Drivers
#
CONFIG_ARM_AMBA=y
CONFIG_HAVE_PCI=y
CONFIG_GENERIC_PCI_IOMAP=y
CONFIG_PCI=y
CONFIG_PCI_DOMAINS=y
CONFIG_PCI_DOMAINS_GENERIC=y
CONFIG_PCI_SYSCALL=y
CONFIG_PCIEPORTBUS=y
CONFIG_HOTPLUG_PCI_PCIE=y
CONFIG_PCIEAER=y
# CONFIG_PCIEAER_INJECT is not set
# CONFIG_PCIE_ECRC is not set
CONFIG_PCIEASPM=y
CONFIG_PCIEASPM_DEFAULT=y
# CONFIG_PCIEASPM_POWERSAVE is not set
# CONFIG_PCIEASPM_POWER_SUPERSAVE is not set
# CONFIG_PCIEASPM_PERFORMANCE is not set
CONFIG_PCIE_PME=y
# CONFIG_PCIE_DPC is not set
# CONFIG_PCIE_PTM is not set
CONFIG_PCI_MSI=y
CONFIG_PCI_QUIRKS=y
# CONFIG_PCI_DEBUG is not set
# CONFIG_PCI_REALLOC_ENABLE_AUTO is not set
# CONFIG_PCI_STUB is not set
# CONFIG_PCI_PF_STUB is not set
CONFIG_PCI_ATS=y
# CONFIG_PCI_TSM is not set
# CONFIG_PCI_DOE is not set
CONFIG_PCI_ECAM=y
CONFIG_PCI_IOV=y
# CONFIG_PCI_NPEM is not set
# CONFIG_PCI_PRI is not set
CONFIG_PCI_PASID=y
# CONFIG_PCIE_TPH is not set
# CONFIG_PCI_P2PDMA is not set
CONFIG_PCI_LABEL=y
# CONFIG_PCI_DYNAMIC_OF_NODES is not set
# CONFIG_PCIE_BUS_TUNE_OFF is not set
CONFIG_PCIE_BUS_DEFAULT=y
# CONFIG_PCIE_BUS_SAFE is not set
# CONFIG_PCIE_BUS_PERFORMANCE is not set
# CONFIG_PCIE_BUS_PEER2PEER is not set
CONFIG_VGA_ARB=y
CONFIG_VGA_ARB_MAX_GPUS=16
CONFIG_HOTPLUG_PCI=y
CONFIG_HOTPLUG_PCI_ACPI=y
# CONFIG_HOTPLUG_PCI_ACPI_AMPERE_ALTRA is not set
# CONFIG_HOTPLUG_PCI_ACPI_IBM is not set
# CONFIG_HOTPLUG_PCI_CPCI is not set
# CONFIG_HOTPLUG_PCI_OCTEONEP is not set
# CONFIG_HOTPLUG_PCI_SHPC is not set

#
# PCI controller drivers
#
CONFIG_PCI_HOST_COMMON=y
CONFIG_PCIE_ALTERA=y
CONFIG_PCIE_ALTERA_MSI=y
CONFIG_PCI_HOST_THUNDER_PEM=y
CONFIG_PCI_HOST_THUNDER_ECAM=y
# CONFIG_PCI_FTPCI100 is not set
CONFIG_PCI_HOST_GENERIC=y
# CONFIG_PCIE_HISI_ERR is not set
CONFIG_PCI_XGENE=y
CONFIG_PCI_XGENE_MSI=y
# CONFIG_PCIE_XILINX is not set

#
# Cadence-based PCIe controllers
#
# CONFIG_PCIE_CADENCE_PLAT_HOST is not set
# CONFIG_PCIE_CADENCE_PLAT_EP is not set
# end of Cadence-based PCIe controllers

#
# DesignWare-based PCIe controllers
#
CONFIG_PCIE_DW=y
# CONFIG_PCIE_DW_DEBUGFS is not set
CONFIG_PCIE_DW_HOST=y
# CONFIG_PCIE_AL is not set
# CONFIG_PCIE_AMD_MDB is not set
CONFIG_PCI_MESON=y
CONFIG_PCI_HISI=y
CONFIG_PCIE_KIRIN=y
# CONFIG_PCIE_DW_PLAT_HOST is not set
# CONFIG_PCIE_DW_PLAT_EP is not set
# end of DesignWare-based PCIe controllers

#
# Mobiveil-based PCIe controllers
#
# end of Mobiveil-based PCIe controllers

#
# PLDA-based PCIe controllers
#
# CONFIG_PCIE_MICROCHIP_HOST is not set
# end of PLDA-based PCIe controllers
# end of PCI controller drivers

#
# PCI Endpoint
#
CONFIG_PCI_ENDPOINT=y
CONFIG_PCI_ENDPOINT_CONFIGFS=y
# CONFIG_PCI_ENDPOINT_MSI_DOORBELL is not set
CONFIG_PCI_EPF_TEST=y
# CONFIG_PCI_EPF_NTB is not set
# end of PCI Endpoint

#
# PCI switch controller drivers
#
# CONFIG_PCI_SW_SWITCHTEC is not set
# end of PCI switch controller drivers

CONFIG_PCI_PWRCTRL=y
# CONFIG_PCI_PWRCTRL_GENERIC is not set
CONFIG_PCI_PWRCTRL_TC9563=y
# CONFIG_CXL_BUS is not set
CONFIG_PCCARD=y
CONFIG_PCMCIA=y
# CONFIG_PCMCIA_LOAD_CIS is not set
# CONFIG_CARDBUS is not set

#
# PC-card bridges
#
# CONFIG_YENTA is not set
# CONFIG_PD6729 is not set
# CONFIG_RAPIDIO is not set
# CONFIG_PC104 is not set

#
# Generic Driver Options
#
CONFIG_AUXILIARY_BUS=y
CONFIG_UEVENT_HELPER=y
CONFIG_UEVENT_HELPER_PATH="/sbin/hotplug"
CONFIG_DEVTMPFS=y
CONFIG_DEVTMPFS_MOUNT=y
# CONFIG_DEVTMPFS_SAFE is not set
CONFIG_DRIVER_DEFERRED_PROBE_TIMEOUT=10
CONFIG_STANDALONE=y
CONFIG_PREVENT_FIRMWARE_BUILD=y

#
# Firmware loader
#
CONFIG_FW_LOADER=y
# CONFIG_FW_LOADER_DEBUG is not set
CONFIG_FW_LOADER_PAGED_BUF=y
CONFIG_FW_LOADER_SYSFS=y
CONFIG_EXTRA_FIRMWARE=""
CONFIG_FW_LOADER_USER_HELPER=y
CONFIG_FW_LOADER_USER_HELPER_FALLBACK=y
CONFIG_FW_LOADER_COMPRESS=y
# CONFIG_FW_LOADER_COMPRESS_XZ is not set
# CONFIG_FW_LOADER_COMPRESS_ZSTD is not set
CONFIG_FW_CACHE=y
CONFIG_FW_UPLOAD=y
# end of Firmware loader

CONFIG_WANT_DEV_COREDUMP=y
CONFIG_ALLOW_DEV_COREDUMP=y
CONFIG_DEV_COREDUMP=y
# CONFIG_DEBUG_DRIVER is not set
CONFIG_DEBUG_DEVRES=y
# CONFIG_DEBUG_TEST_DRIVER_REMOVE is not set
CONFIG_HMEM_REPORTING=y
# CONFIG_TEST_ASYNC_DRIVER_PROBE is not set
CONFIG_GENERIC_CPU_DEVICES=y
CONFIG_GENERIC_CPU_AUTOPROBE=y
CONFIG_GENERIC_CPU_VULNERABILITIES=y
CONFIG_SOC_BUS=y
CONFIG_REGMAP=y
CONFIG_REGMAP_I2C=y
CONFIG_REGMAP_SLIMBUS=y
CONFIG_REGMAP_SPI=y
CONFIG_REGMAP_SPMI=y
CONFIG_REGMAP_MMIO=y
CONFIG_REGMAP_IRQ=y
CONFIG_DMA_SHARED_BUFFER=y
# CONFIG_DMA_FENCE_TRACE is not set
CONFIG_GENERIC_ARCH_TOPOLOGY=y
CONFIG_GENERIC_ARCH_NUMA=y
# CONFIG_FW_DEVLINK_SYNC_STATE_TIMEOUT is not set
# end of Generic Driver Options

#
# Bus devices
#
CONFIG_ARM_CCI=y
CONFIG_ARM_CCI400_COMMON=y
# CONFIG_MOXTET is not set
CONFIG_VEXPRESS_CONFIG=y
CONFIG_MHI_BUS=y
# CONFIG_MHI_BUS_DEBUG is not set
CONFIG_MHI_BUS_PCI_GENERIC=y
# CONFIG_MHI_BUS_EP is not set
# end of Bus devices

# CONFIG_CACHEMAINT_FOR_HOTPLUG is not set
CONFIG_CONNECTOR=y
# CONFIG_PROC_EVENTS is not set

#
# Firmware Drivers
#

#
# ARM System Control and Management Interface Protocol
#
CONFIG_ARM_SCMI_PROTOCOL=y
# CONFIG_ARM_SCMI_RAW_MODE_SUPPORT is not set
# CONFIG_ARM_SCMI_DEBUG_COUNTERS is not set
CONFIG_ARM_SCMI_QUIRKS=y

#
# SCMI Transport Drivers
#
CONFIG_ARM_SCMI_HAVE_TRANSPORT=y
CONFIG_ARM_SCMI_HAVE_SHMEM=y
CONFIG_ARM_SCMI_HAVE_MSG=y
CONFIG_ARM_SCMI_TRANSPORT_MAILBOX=y
CONFIG_ARM_SCMI_TRANSPORT_SMC=y
# CONFIG_ARM_SCMI_TRANSPORT_SMC_ATOMIC_ENABLE is not set
CONFIG_ARM_SCMI_TRANSPORT_OPTEE=y
# CONFIG_ARM_SCMI_TRANSPORT_VIRTIO is not set
# end of SCMI Transport Drivers

#
# ARM SCMI NXP i.MX Vendor Protocols
#
CONFIG_IMX_SCMI_BBM_EXT=y
# end of ARM SCMI NXP i.MX Vendor Protocols

# CONFIG_ARM_SCMI_POWER_CONTROL is not set
# end of ARM System Control and Management Interface Protocol

CONFIG_ARM_SCPI_PROTOCOL=y
CONFIG_ARM_SDE_INTERFACE=y
# CONFIG_FIRMWARE_MEMMAP is not set
CONFIG_DMIID=y
# CONFIG_DMI_SYSFS is not set
# CONFIG_ISCSI_IBFT is not set
# CONFIG_FW_CFG_SYSFS is not set
CONFIG_SYSFB=y
# CONFIG_SYSFB_SIMPLEFB is not set
# CONFIG_ARM_FFA_TRANSPORT is not set
CONFIG_GOOGLE_FIRMWARE=y
CONFIG_GOOGLE_CBMEM=y
CONFIG_GOOGLE_COREBOOT_TABLE=y
CONFIG_GOOGLE_MEMCONSOLE=y
# CONFIG_GOOGLE_FRAMEBUFFER_COREBOOT is not set
CONFIG_GOOGLE_MEMCONSOLE_COREBOOT=y
CONFIG_GOOGLE_VPD=y

#
# EFI (Extensible Firmware Interface) Support
#
CONFIG_EFI_ESRT=y
CONFIG_EFI_VARS_PSTORE=y
# CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE is not set
CONFIG_EFI_SOFT_RESERVE=y
CONFIG_EFI_PARAMS_FROM_FDT=y
CONFIG_EFI_RUNTIME_WRAPPERS=y
CONFIG_EFI_GENERIC_STUB=y
# CONFIG_EFI_ZBOOT is not set
CONFIG_EFI_ARMSTUB_DTB_LOADER=y
# CONFIG_EFI_BOOTLOADER_CONTROL is not set
CONFIG_EFI_CAPSULE_LOADER=y
# CONFIG_EFI_TEST is not set
# CONFIG_RESET_ATTACK_MITIGATION is not set
# CONFIG_EFI_DISABLE_PCI_DMA is not set
CONFIG_EFI_EARLYCON=y
CONFIG_EFI_CUSTOM_SSDT_OVERLAYS=y
# CONFIG_EFI_DISABLE_RUNTIME is not set
# CONFIG_EFI_COCO_SECRET is not set
# CONFIG_OVMF_DEBUG_LOG is not set
# end of EFI (Extensible Firmware Interface) Support

CONFIG_UEFI_CPER=y
CONFIG_UEFI_CPER_ARM=y
# CONFIG_TEE_STMM_EFI is not set
CONFIG_ARM_PSCI_FW=y
# CONFIG_ARM_PSCI_CHECKER is not set

#
# Qualcomm firmware drivers
#
# end of Qualcomm firmware drivers

CONFIG_HAVE_ARM_SMCCC=y
CONFIG_HAVE_ARM_SMCCC_DISCOVERY=y
CONFIG_ARM_SMCCC_SOC_ID=y

#
# Tegra firmware driver
#
# end of Tegra firmware driver
# end of Firmware Drivers

# CONFIG_FWCTL is not set
CONFIG_GNSS=y
CONFIG_GNSS_SERIAL=y
CONFIG_GNSS_MTK_SERIAL=y
# CONFIG_GNSS_SIRF_SERIAL is not set
# CONFIG_GNSS_UBX_SERIAL is not set
CONFIG_GNSS_USB=y
CONFIG_MTD=y
# CONFIG_MTD_TESTS is not set

#
# Partition parsers
#
# CONFIG_MTD_CMDLINE_PARTS is not set
CONFIG_MTD_OF_PARTS=y
# CONFIG_MTD_AFS_PARTS is not set
# CONFIG_MTD_REDBOOT_PARTS is not set
# end of Partition parsers

#
# User Modules And Translation Layers
#
CONFIG_MTD_BLKDEVS=y
CONFIG_MTD_BLOCK=y

#
# Note that in some cases UBI block is preferred. See MTD_UBI_BLOCK.
#
CONFIG_FTL=y
# CONFIG_NFTL is not set
# CONFIG_INFTL is not set
# CONFIG_RFD_FTL is not set
# CONFIG_SSFDC is not set
# CONFIG_SM_FTL is not set
# CONFIG_MTD_OOPS is not set
# CONFIG_MTD_SWAP is not set
# CONFIG_MTD_PARTITIONED_MASTER is not set

#
# RAM/ROM/Flash chip drivers
#
CONFIG_MTD_CFI=y
# CONFIG_MTD_JEDECPROBE is not set
CONFIG_MTD_GEN_PROBE=y
CONFIG_MTD_CFI_ADV_OPTIONS=y
CONFIG_MTD_CFI_NOSWAP=y
# CONFIG_MTD_CFI_BE_BYTE_SWAP is not set
# CONFIG_MTD_CFI_LE_BYTE_SWAP is not set
# CONFIG_MTD_CFI_GEOMETRY is not set
CONFIG_MTD_MAP_BANK_WIDTH_1=y
CONFIG_MTD_MAP_BANK_WIDTH_2=y
CONFIG_MTD_MAP_BANK_WIDTH_4=y
CONFIG_MTD_CFI_I1=y
CONFIG_MTD_CFI_I2=y
# CONFIG_MTD_OTP is not set
CONFIG_MTD_CFI_INTELEXT=y
CONFIG_MTD_CFI_AMDSTD=y
CONFIG_MTD_CFI_STAA=y
CONFIG_MTD_CFI_UTIL=y
# CONFIG_MTD_RAM is not set
# CONFIG_MTD_ROM is not set
# CONFIG_MTD_ABSENT is not set
# end of RAM/ROM/Flash chip drivers

#
# Mapping drivers for chip access
#
CONFIG_MTD_COMPLEX_MAPPINGS=y
CONFIG_MTD_PHYSMAP=y
# CONFIG_MTD_PHYSMAP_COMPAT is not set
CONFIG_MTD_PHYSMAP_OF=y
# CONFIG_MTD_PHYSMAP_VERSATILE is not set
# CONFIG_MTD_PHYSMAP_GEMINI is not set
# CONFIG_MTD_PHYSMAP_GPIO_ADDR is not set
# CONFIG_MTD_PCI is not set
# CONFIG_MTD_PCMCIA is not set
# CONFIG_MTD_PLATRAM is not set
# end of Mapping drivers for chip access

#
# Self-contained MTD device drivers
#
# CONFIG_MTD_PMC551 is not set
CONFIG_MTD_DATAFLASH=y
# CONFIG_MTD_DATAFLASH_WRITE_VERIFY is not set
# CONFIG_MTD_DATAFLASH_OTP is not set
# CONFIG_MTD_MCHP23K256 is not set
# CONFIG_MTD_MCHP48L640 is not set
CONFIG_MTD_SST25L=y
CONFIG_MTD_SLRAM=y
CONFIG_MTD_PHRAM=y
CONFIG_MTD_MTDRAM=y
CONFIG_MTDRAM_TOTAL_SIZE=128
CONFIG_MTDRAM_ERASE_SIZE=4
CONFIG_MTD_BLOCK2MTD=y

#
# Disk-On-Chip Device Drivers
#
# CONFIG_MTD_DOCG3 is not set
# end of Self-contained MTD device drivers

#
# NAND
#
CONFIG_MTD_NAND_CORE=y
# CONFIG_MTD_ONENAND is not set
CONFIG_MTD_RAW_NAND=y

#
# Raw/parallel NAND flash controllers
#
CONFIG_MTD_NAND_DENALI=y
# CONFIG_MTD_NAND_DENALI_PCI is not set
CONFIG_MTD_NAND_DENALI_DT=y
# CONFIG_MTD_NAND_CAFE is not set
CONFIG_MTD_NAND_BRCMNAND=y
# CONFIG_MTD_NAND_BRCMNAND_BCM63XX is not set
CONFIG_MTD_NAND_BRCMNAND_BCMBCA=y
CONFIG_MTD_NAND_BRCMNAND_BRCMSTB=y
CONFIG_MTD_NAND_BRCMNAND_IPROC=y
# CONFIG_MTD_NAND_MXIC is not set
# CONFIG_MTD_NAND_GPIO is not set
# CONFIG_MTD_NAND_PLATFORM is not set
# CONFIG_MTD_NAND_CADENCE is not set
# CONFIG_MTD_NAND_ARASAN is not set
# CONFIG_MTD_NAND_INTEL_LGM is not set

#
# Misc
#
# CONFIG_MTD_NAND_NANDSIM is not set
# CONFIG_MTD_NAND_RICOH is not set
# CONFIG_MTD_NAND_DISKONCHIP is not set
CONFIG_MTD_SPI_NAND=y

#
# ECC engine support
#
CONFIG_MTD_NAND_ECC=y
CONFIG_MTD_NAND_ECC_SW_HAMMING=y
# CONFIG_MTD_NAND_ECC_SW_HAMMING_SMC is not set
# CONFIG_MTD_NAND_ECC_SW_BCH is not set
# CONFIG_MTD_NAND_ECC_MXIC is not set
# end of ECC engine support
# end of NAND

#
# LPDDR & LPDDR2 PCM memory drivers
#
# CONFIG_MTD_LPDDR is not set
# end of LPDDR & LPDDR2 PCM memory drivers

CONFIG_MTD_SPI_NOR=y
CONFIG_MTD_SPI_NOR_USE_4K_SECTORS=y
# CONFIG_MTD_SPI_NOR_SWP_DISABLE is not set
CONFIG_MTD_SPI_NOR_SWP_DISABLE_ON_VOLATILE=y
# CONFIG_MTD_SPI_NOR_SWP_KEEP is not set
CONFIG_MTD_UBI=y
CONFIG_MTD_UBI_WL_THRESHOLD=4096
CONFIG_MTD_UBI_BEB_LIMIT=20
# CONFIG_MTD_UBI_FASTMAP is not set
# CONFIG_MTD_UBI_GLUEBI is not set
# CONFIG_MTD_UBI_BLOCK is not set
# CONFIG_MTD_UBI_FAULT_INJECTION is not set
# CONFIG_MTD_UBI_NVMEM is not set
CONFIG_MTD_HYPERBUS=y
CONFIG_DTC=y
CONFIG_OF=y
# CONFIG_OF_UNITTEST is not set
CONFIG_OF_FLATTREE=y
CONFIG_OF_EARLY_FLATTREE=y
CONFIG_OF_KOBJ=y
CONFIG_OF_DYNAMIC=y
CONFIG_OF_ADDRESS=y
CONFIG_OF_IRQ=y
CONFIG_OF_RESERVED_MEM=y
CONFIG_OF_RESOLVE=y
CONFIG_OF_OVERLAY=y
CONFIG_OF_NUMA=y
CONFIG_PARPORT=y
# CONFIG_PARPORT_PC is not set
# CONFIG_PARPORT_1284 is not set
CONFIG_PARPORT_NOT_PC=y
CONFIG_PNP=y
CONFIG_PNP_DEBUG_MESSAGES=y

#
# Protocols
#
CONFIG_PNPACPI=y
CONFIG_BLK_DEV=y
CONFIG_BLK_DEV_NULL_BLK=y
CONFIG_BLK_DEV_NULL_BLK_FAULT_INJECTION=y
CONFIG_CDROM=y
# CONFIG_BLK_DEV_PCIESSD_MTIP32XX is not set
CONFIG_ZRAM=y
# CONFIG_ZRAM_BACKEND_LZ4 is not set
# CONFIG_ZRAM_BACKEND_LZ4HC is not set
# CONFIG_ZRAM_BACKEND_ZSTD is not set
# CONFIG_ZRAM_BACKEND_DEFLATE is not set
# CONFIG_ZRAM_BACKEND_842 is not set
CONFIG_ZRAM_BACKEND_FORCE_LZO=y
CONFIG_ZRAM_BACKEND_LZO=y
# CONFIG_ZRAM_DEF_COMP_LZORLE is not set
CONFIG_ZRAM_DEF_COMP_LZO=y
CONFIG_ZRAM_DEF_COMP="lzo"
# CONFIG_ZRAM_WRITEBACK is not set
# CONFIG_ZRAM_TRACK_ENTRY_ACTIME is not set
# CONFIG_ZRAM_MEMORY_TRACKING is not set
# CONFIG_ZRAM_MULTI_COMP is not set
CONFIG_BLK_DEV_LOOP=y
CONFIG_BLK_DEV_LOOP_MIN_COUNT=16
# CONFIG_BLK_DEV_DRBD is not set
CONFIG_BLK_DEV_NBD=y
CONFIG_BLK_DEV_RAM=y
CONFIG_BLK_DEV_RAM_COUNT=16
CONFIG_BLK_DEV_RAM_SIZE=4096
CONFIG_ATA_OVER_ETH=y
CONFIG_VIRTIO_BLK=y
# CONFIG_BLK_DEV_RBD is not set
# CONFIG_BLK_DEV_UBLK is not set
CONFIG_BLK_DEV_RNBD=y
CONFIG_BLK_DEV_RNBD_CLIENT=y
# CONFIG_BLK_DEV_ZONED_LOOP is not set

#
# NVME Support
#
CONFIG_NVME_CORE=y
CONFIG_BLK_DEV_NVME=y
CONFIG_NVME_MULTIPATH=y
# CONFIG_NVME_VERBOSE_ERRORS is not set
# CONFIG_NVME_HWMON is not set
CONFIG_NVME_FABRICS=y
CONFIG_NVME_RDMA=y
CONFIG_NVME_FC=y
CONFIG_NVME_TCP=y
# CONFIG_NVME_TCP_TLS is not set
# CONFIG_NVME_HOST_AUTH is not set
CONFIG_NVME_TARGET=y
# CONFIG_NVME_TARGET_DEBUGFS is not set
# CONFIG_NVME_TARGET_PASSTHRU is not set
CONFIG_NVME_TARGET_LOOP=y
CONFIG_NVME_TARGET_RDMA=y
CONFIG_NVME_TARGET_FC=y
CONFIG_NVME_TARGET_FCLOOP=y
CONFIG_NVME_TARGET_TCP=y
# CONFIG_NVME_TARGET_TCP_TLS is not set
# CONFIG_NVME_TARGET_AUTH is not set
# CONFIG_NVME_TARGET_PCI_EPF is not set
# end of NVME Support

#
# Misc devices
#
# CONFIG_AD525X_DPOT is not set
# CONFIG_DUMMY_IRQ is not set
# CONFIG_PHANTOM is not set
# CONFIG_RPMB is not set
# CONFIG_TI_FPC202 is not set
# CONFIG_TIFM_CORE is not set
# CONFIG_ICS932S401 is not set
# CONFIG_ENCLOSURE_SERVICES is not set
# CONFIG_HI6421V600_IRQ is not set
# CONFIG_HP_ILO is not set
# CONFIG_APDS9802ALS is not set
# CONFIG_ISL29003 is not set
# CONFIG_ISL29020 is not set
# CONFIG_SENSORS_TSL2550 is not set
# CONFIG_SENSORS_BH1770 is not set
# CONFIG_SENSORS_APDS990X is not set
# CONFIG_HMC6352 is not set
# CONFIG_DS1682 is not set
# CONFIG_LATTICE_ECP3_CONFIG is not set
CONFIG_SRAM=y
# CONFIG_DW_XDATA_PCIE is not set
CONFIG_PCI_ENDPOINT_TEST=y
# CONFIG_XILINX_SDFEC is not set
CONFIG_MISC_RTSX=y
# CONFIG_HISI_HIKEY_USB is not set
# CONFIG_OPEN_DICE is not set
# CONFIG_NTSYNC is not set
# CONFIG_VCPU_STALL_DETECTOR is not set
CONFIG_TPS6594_ESM=y
CONFIG_TPS6594_PFSM=y
# CONFIG_NSM is not set
# CONFIG_MCHP_LAN966X_PCI is not set
# CONFIG_C2PORT is not set

#
# EEPROM support
#
CONFIG_EEPROM_AT24=y
CONFIG_EEPROM_AT25=y
# CONFIG_EEPROM_MAX6875 is not set
CONFIG_EEPROM_93CX6=y
# CONFIG_EEPROM_93XX46 is not set
# CONFIG_EEPROM_IDT_89HPESX is not set
# CONFIG_EEPROM_EE1004 is not set
# CONFIG_EEPROM_M24LR is not set
# end of EEPROM support

# CONFIG_CB710_CORE is not set
# CONFIG_SENSORS_LIS3_I2C is not set
# CONFIG_ALTERA_STAPL is not set
# CONFIG_VMWARE_VMCI is not set
# CONFIG_GENWQE is not set
# CONFIG_BCM_VK is not set
# CONFIG_MISC_ALCOR_PCI is not set
# CONFIG_MISC_RTSX_PCI is not set
CONFIG_MISC_RTSX_USB=y
CONFIG_UACCE=y
# CONFIG_PVPANIC is not set
# CONFIG_GP_PCI1XXXX is not set
# CONFIG_KEBA_CP500 is not set
# CONFIG_AMD_SBRMI_I2C is not set
CONFIG_MISC_RP1=y
# end of Misc devices

#
# SCSI device support
#
CONFIG_SCSI_MOD=y
CONFIG_RAID_ATTRS=y
CONFIG_SCSI_COMMON=y
CONFIG_SCSI=y
CONFIG_SCSI_DMA=y
CONFIG_SCSI_NETLINK=y
# CONFIG_SCSI_PROC_FS is not set

#
# SCSI support type (disk, tape, CD-ROM)
#
CONFIG_BLK_DEV_SD=y
CONFIG_CHR_DEV_ST=y
CONFIG_BLK_DEV_SR=y
CONFIG_CHR_DEV_SG=y
CONFIG_BLK_DEV_BSG=y
# CONFIG_CHR_DEV_SCH is not set
CONFIG_SCSI_CONSTANTS=y
CONFIG_SCSI_LOGGING=y
CONFIG_SCSI_SCAN_ASYNC=y

#
# SCSI Transports
#
CONFIG_SCSI_SPI_ATTRS=y
CONFIG_SCSI_FC_ATTRS=y
CONFIG_SCSI_ISCSI_ATTRS=y
CONFIG_SCSI_SAS_ATTRS=y
CONFIG_SCSI_SAS_LIBSAS=y
CONFIG_SCSI_SAS_ATA=y
CONFIG_SCSI_SAS_HOST_SMP=y
CONFIG_SCSI_SRP_ATTRS=y
# end of SCSI Transports

CONFIG_SCSI_LOWLEVEL=y
# CONFIG_ISCSI_TCP is not set
# CONFIG_ISCSI_BOOT_SYSFS is not set
# CONFIG_SCSI_CXGB3_ISCSI is not set
# CONFIG_SCSI_CXGB4_ISCSI is not set
# CONFIG_SCSI_BNX2_ISCSI is not set
# CONFIG_BE2ISCSI is not set
# CONFIG_BLK_DEV_3W_XXXX_RAID is not set
CONFIG_SCSI_HPSA=y
# CONFIG_SCSI_3W_9XXX is not set
# CONFIG_SCSI_3W_SAS is not set
# CONFIG_SCSI_ACARD is not set
# CONFIG_SCSI_AACRAID is not set
# CONFIG_SCSI_AIC7XXX is not set
# CONFIG_SCSI_AIC79XX is not set
# CONFIG_SCSI_AIC94XX is not set
CONFIG_SCSI_HISI_SAS=y
CONFIG_SCSI_HISI_SAS_PCI=y
# CONFIG_SCSI_HISI_SAS_DEBUGFS_DEFAULT_ENABLE is not set
# CONFIG_SCSI_MVSAS is not set
# CONFIG_SCSI_MVUMI is not set
# CONFIG_SCSI_ADVANSYS is not set
# CONFIG_SCSI_ARCMSR is not set
# CONFIG_SCSI_ESAS2R is not set
# CONFIG_MEGARAID_NEWGEN is not set
# CONFIG_MEGARAID_LEGACY is not set
# CONFIG_MEGARAID_SAS is not set
# CONFIG_SCSI_MPT3SAS is not set
# CONFIG_SCSI_MPT2SAS is not set
# CONFIG_SCSI_MPI3MR is not set
# CONFIG_SCSI_SMARTPQI is not set
# CONFIG_SCSI_HPTIOP is not set
# CONFIG_SCSI_BUSLOGIC is not set
# CONFIG_SCSI_MYRB is not set
# CONFIG_SCSI_MYRS is not set
# CONFIG_LIBFC is not set
# CONFIG_SCSI_SNIC is not set
# CONFIG_SCSI_DMX3191D is not set
# CONFIG_SCSI_FDOMAIN_PCI is not set
# CONFIG_SCSI_IPS is not set
# CONFIG_SCSI_INITIO is not set
# CONFIG_SCSI_INIA100 is not set
# CONFIG_SCSI_STEX is not set
# CONFIG_SCSI_SYM53C8XX_2 is not set
# CONFIG_SCSI_IPR is not set
# CONFIG_SCSI_QLOGIC_1280 is not set
# CONFIG_SCSI_QLA_FC is not set
# CONFIG_SCSI_QLA_ISCSI is not set
# CONFIG_SCSI_LPFC is not set
# CONFIG_SCSI_EFCT is not set
# CONFIG_SCSI_DC395x is not set
# CONFIG_SCSI_AM53C974 is not set
# CONFIG_SCSI_WD719X is not set
# CONFIG_SCSI_DEBUG is not set
# CONFIG_SCSI_PMCRAID is not set
# CONFIG_SCSI_PM8001 is not set
# CONFIG_SCSI_BFA_FC is not set
CONFIG_SCSI_VIRTIO=y
# CONFIG_SCSI_CHELSIO_FCOE is not set
# CONFIG_SCSI_LOWLEVEL_PCMCIA is not set
# CONFIG_SCSI_DH is not set
# end of SCSI device support

CONFIG_ATA=y
CONFIG_SATA_HOST=y
CONFIG_PATA_TIMINGS=y
CONFIG_ATA_VERBOSE_ERROR=y
CONFIG_ATA_FORCE=y
CONFIG_ATA_ACPI=y
# CONFIG_SATA_ZPODD is not set
CONFIG_SATA_PMP=y

#
# Controllers with non-SFF native interface
#
CONFIG_SATA_AHCI=y
CONFIG_SATA_MOBILE_LPM_POLICY=3
CONFIG_SATA_AHCI_PLATFORM=y
CONFIG_AHCI_DWC=y
CONFIG_AHCI_CEVA=y
# CONFIG_SATA_INIC162X is not set
# CONFIG_SATA_ACARD_AHCI is not set
CONFIG_SATA_SIL24=y
CONFIG_ATA_SFF=y

#
# SFF controllers with custom DMA interface
#
# CONFIG_PDC_ADMA is not set
# CONFIG_SATA_QSTOR is not set
# CONFIG_SATA_SX4 is not set
CONFIG_ATA_BMDMA=y

#
# SATA SFF controllers with BMDMA
#
CONFIG_ATA_PIIX=y
# CONFIG_SATA_DWC is not set
# CONFIG_SATA_MV is not set
# CONFIG_SATA_NV is not set
# CONFIG_SATA_PROMISE is not set
# CONFIG_SATA_SIL is not set
# CONFIG_SATA_SIS is not set
# CONFIG_SATA_SVW is not set
# CONFIG_SATA_ULI is not set
# CONFIG_SATA_VIA is not set
# CONFIG_SATA_VITESSE is not set

#
# PATA SFF controllers with BMDMA
#
# CONFIG_PATA_ALI is not set
CONFIG_PATA_AMD=y
# CONFIG_PATA_ARTOP is not set
# CONFIG_PATA_ATIIXP is not set
# CONFIG_PATA_ATP867X is not set
# CONFIG_PATA_CMD64X is not set
# CONFIG_PATA_CYPRESS is not set
# CONFIG_PATA_EFAR is not set
# CONFIG_PATA_HPT366 is not set
# CONFIG_PATA_HPT37X is not set
# CONFIG_PATA_HPT3X2N is not set
# CONFIG_PATA_HPT3X3 is not set
# CONFIG_PATA_IT8213 is not set
# CONFIG_PATA_IT821X is not set
# CONFIG_PATA_JMICRON is not set
# CONFIG_PATA_MARVELL is not set
# CONFIG_PATA_NETCELL is not set
# CONFIG_PATA_NINJA32 is not set
# CONFIG_PATA_NS87415 is not set
CONFIG_PATA_OLDPIIX=y
# CONFIG_PATA_OPTIDMA is not set
# CONFIG_PATA_PDC2027X is not set
# CONFIG_PATA_PDC_OLD is not set
# CONFIG_PATA_RADISYS is not set
# CONFIG_PATA_RDC is not set
CONFIG_PATA_SCH=y
# CONFIG_PATA_SERVERWORKS is not set
# CONFIG_PATA_SIL680 is not set
# CONFIG_PATA_SIS is not set
# CONFIG_PATA_TOSHIBA is not set
# CONFIG_PATA_TRIFLEX is not set
# CONFIG_PATA_VIA is not set
# CONFIG_PATA_WINBOND is not set

#
# PIO-only SFF controllers
#
# CONFIG_PATA_CMD640_PCI is not set
# CONFIG_PATA_MPIIX is not set
# CONFIG_PATA_NS87410 is not set
# CONFIG_PATA_OPTI is not set
# CONFIG_PATA_PCMCIA is not set
CONFIG_PATA_PLATFORM=y
CONFIG_PATA_OF_PLATFORM=y
# CONFIG_PATA_RZ1000 is not set

#
# Generic fallback / legacy drivers
#
# CONFIG_PATA_ACPI is not set
CONFIG_ATA_GENERIC=y
# CONFIG_PATA_LEGACY is not set
CONFIG_MD=y
CONFIG_BLK_DEV_MD=y
CONFIG_MD_BITMAP=y
# CONFIG_MD_LLBITMAP is not set
# CONFIG_MD_AUTODETECT is not set
CONFIG_MD_BITMAP_FILE=y
# CONFIG_MD_LINEAR is not set
CONFIG_MD_RAID0=y
CONFIG_MD_RAID1=y
CONFIG_MD_RAID10=y
CONFIG_MD_RAID456=y
# CONFIG_MD_CLUSTER is not set
CONFIG_BCACHE=y
# CONFIG_BCACHE_DEBUG is not set
# CONFIG_BCACHE_ASYNC_REGISTRATION is not set
CONFIG_BLK_DEV_DM_BUILTIN=y
CONFIG_BLK_DEV_DM=y
# CONFIG_DM_DEBUG is not set
CONFIG_DM_BUFIO=y
# CONFIG_DM_DEBUG_BLOCK_MANAGER_LOCKING is not set
CONFIG_DM_BIO_PRISON=y
CONFIG_DM_PERSISTENT_DATA=y
# CONFIG_DM_UNSTRIPED is not set
CONFIG_DM_CRYPT=y
CONFIG_DM_SNAPSHOT=y
CONFIG_DM_THIN_PROVISIONING=y
CONFIG_DM_CACHE=y
CONFIG_DM_CACHE_SMQ=y
CONFIG_DM_WRITECACHE=y
# CONFIG_DM_EBS is not set
# CONFIG_DM_ERA is not set
CONFIG_DM_CLONE=y
CONFIG_DM_MIRROR=y
# CONFIG_DM_LOG_USERSPACE is not set
CONFIG_DM_RAID=y
CONFIG_DM_ZERO=y
CONFIG_DM_MULTIPATH=y
CONFIG_DM_MULTIPATH_QL=y
CONFIG_DM_MULTIPATH_ST=y
# CONFIG_DM_MULTIPATH_HST is not set
# CONFIG_DM_MULTIPATH_IOA is not set
# CONFIG_DM_DELAY is not set
# CONFIG_DM_DUST is not set
# CONFIG_DM_INIT is not set
CONFIG_DM_UEVENT=y
CONFIG_DM_FLAKEY=y
CONFIG_DM_VERITY=y
# CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG is not set
CONFIG_DM_VERITY_FEC=y
# CONFIG_DM_SWITCH is not set
# CONFIG_DM_LOG_WRITES is not set
CONFIG_DM_INTEGRITY=y
CONFIG_DM_ZONED=y
CONFIG_DM_AUDIT=y
# CONFIG_DM_VDO is not set
CONFIG_TARGET_CORE=y
# CONFIG_TCM_IBLOCK is not set
# CONFIG_TCM_FILEIO is not set
# CONFIG_TCM_PSCSI is not set
# CONFIG_LOOPBACK_TARGET is not set
# CONFIG_ISCSI_TARGET is not set
# CONFIG_SBP_TARGET is not set
# CONFIG_REMOTE_TARGET is not set
# CONFIG_FUSION is not set

#
# IEEE 1394 (FireWire) support
#
CONFIG_FIREWIRE=y
CONFIG_FIREWIRE_OHCI=y
CONFIG_FIREWIRE_SBP2=y
CONFIG_FIREWIRE_NET=y
# CONFIG_FIREWIRE_NOSY is not set
# end of IEEE 1394 (FireWire) support

CONFIG_NETDEVICES=y
CONFIG_MII=y
CONFIG_NET_CORE=y
CONFIG_BONDING=y
CONFIG_DUMMY=y
CONFIG_WIREGUARD=y
# CONFIG_WIREGUARD_DEBUG is not set
# CONFIG_OVPN is not set
CONFIG_EQUALIZER=y
CONFIG_NET_FC=y
CONFIG_IFB=y
CONFIG_NET_TEAM=y
CONFIG_NET_TEAM_MODE_BROADCAST=y
CONFIG_NET_TEAM_MODE_ROUNDROBIN=y
CONFIG_NET_TEAM_MODE_RANDOM=y
CONFIG_NET_TEAM_MODE_ACTIVEBACKUP=y
CONFIG_NET_TEAM_MODE_LOADBALANCE=y
CONFIG_MACVLAN=y
CONFIG_MACVTAP=y
CONFIG_IPVLAN_L3S=y
CONFIG_IPVLAN=y
CONFIG_IPVTAP=y
CONFIG_VXLAN=y
CONFIG_GENEVE=y
CONFIG_BAREUDP=y
CONFIG_GTP=y
# CONFIG_PFCP is not set
# CONFIG_AMT is not set
CONFIG_MACSEC=y
CONFIG_NETCONSOLE=y
# CONFIG_NETCONSOLE_DYNAMIC is not set
# CONFIG_NETCONSOLE_EXTENDED_LOG is not set
CONFIG_NETPOLL=y
CONFIG_NET_POLL_CONTROLLER=y
CONFIG_TUN=y
CONFIG_TAP=y
CONFIG_TUN_VNET_CROSS_LE=y
CONFIG_VETH=y
CONFIG_VIRTIO_NET=y
CONFIG_NLMON=y
# CONFIG_NETKIT is not set
CONFIG_NET_VRF=y
CONFIG_VSOCKMON=y
CONFIG_MHI_NET=y
# CONFIG_ARCNET is not set
CONFIG_ATM_DRIVERS=y
# CONFIG_ATM_SOLOS is not set

#
# Distributed Switch Architecture drivers
#
CONFIG_B53=y
# CONFIG_B53_SPI_DRIVER is not set
# CONFIG_B53_MDIO_DRIVER is not set
# CONFIG_B53_MMAP_DRIVER is not set
CONFIG_B53_SRAB_DRIVER=y
# CONFIG_B53_SERDES is not set
CONFIG_NET_DSA_BCM_SF2=y
# CONFIG_NET_DSA_LOOP is not set
# CONFIG_NET_DSA_HIRSCHMANN_HELLCREEK is not set
# CONFIG_NET_DSA_LANTIQ_GSWIP is not set
# CONFIG_NET_DSA_MXL_GSW1XX is not set
# CONFIG_NET_DSA_MT7530 is not set
# CONFIG_NET_DSA_MV88E6060 is not set
# CONFIG_NET_DSA_MICROCHIP_KSZ_COMMON is not set
# CONFIG_NET_DSA_MV88E6XXX is not set
# CONFIG_NET_DSA_MXL862 is not set
# CONFIG_NET_DSA_AR9331 is not set
# CONFIG_NET_DSA_QCA8K is not set
# CONFIG_NET_DSA_SJA1105 is not set
# CONFIG_NET_DSA_XRS700X_I2C is not set
# CONFIG_NET_DSA_XRS700X_MDIO is not set
# CONFIG_NET_DSA_REALTEK is not set
# CONFIG_NET_DSA_KS8995 is not set
# CONFIG_NET_DSA_SMSC_LAN9303_I2C is not set
# CONFIG_NET_DSA_SMSC_LAN9303_MDIO is not set
# CONFIG_NET_DSA_VITESSE_VSC73XX_SPI is not set
# CONFIG_NET_DSA_VITESSE_VSC73XX_PLATFORM is not set
# CONFIG_NET_DSA_YT921X is not set
# end of Distributed Switch Architecture drivers

CONFIG_ETHERNET=y
# CONFIG_NET_VENDOR_3COM is not set
# CONFIG_NET_VENDOR_ADAPTEC is not set
# CONFIG_NET_VENDOR_AGERE is not set
# CONFIG_NET_VENDOR_ALACRITECH is not set
# CONFIG_ALTERA_TSE is not set
CONFIG_NET_VENDOR_AMAZON=y
CONFIG_ENA_ETHERNET=y
# CONFIG_NET_VENDOR_AMD is not set
# CONFIG_NET_VENDOR_AQUANTIA is not set
# CONFIG_NET_VENDOR_ARC is not set
CONFIG_NET_VENDOR_ASIX=y
# CONFIG_SPI_AX88796C is not set
# CONFIG_NET_VENDOR_ATHEROS is not set
# CONFIG_NET_VENDOR_BROADCOM is not set
# CONFIG_NET_VENDOR_CADENCE is not set
# CONFIG_NET_VENDOR_CAVIUM is not set
# CONFIG_NET_VENDOR_CHELSIO is not set
CONFIG_NET_VENDOR_CISCO=y
# CONFIG_ENIC is not set
# CONFIG_NET_VENDOR_CORTINA is not set
CONFIG_NET_VENDOR_DAVICOM=y
# CONFIG_DM9051 is not set
# CONFIG_NET_VENDOR_DEC is not set
# CONFIG_NET_VENDOR_DLINK is not set
# CONFIG_NET_VENDOR_EMULEX is not set
CONFIG_NET_VENDOR_ENGLEDER=y
# CONFIG_TSNEP is not set
# CONFIG_NET_VENDOR_EZCHIP is not set
CONFIG_NET_VENDOR_FUNGIBLE=y
# CONFIG_FUN_ETH is not set
CONFIG_NET_VENDOR_GOOGLE=y
CONFIG_GVE=y
# CONFIG_NET_VENDOR_HISILICON is not set
# CONFIG_NET_VENDOR_HUAWEI is not set
# CONFIG_NET_VENDOR_INTEL is not set
# CONFIG_JME is not set
CONFIG_NET_VENDOR_ADI=y
# CONFIG_ADIN1110 is not set
CONFIG_NET_VENDOR_LITEX=y
# CONFIG_LITEX_LITEETH is not set
# CONFIG_NET_VENDOR_MARVELL is not set
# CONFIG_NET_VENDOR_MELLANOX is not set
CONFIG_NET_VENDOR_META=y
# CONFIG_FBNIC is not set
# CONFIG_NET_VENDOR_MICREL is not set
# CONFIG_NET_VENDOR_MICROCHIP is not set
# CONFIG_NET_VENDOR_MICROSEMI is not set
CONFIG_NET_VENDOR_MICROSOFT=y
CONFIG_NET_VENDOR_MUCSE=y
# CONFIG_MGBE is not set
# CONFIG_NET_VENDOR_MYRI is not set
# CONFIG_FEALNX is not set
# CONFIG_NET_VENDOR_NI is not set
# CONFIG_NET_VENDOR_NATSEMI is not set
# CONFIG_NET_VENDOR_NETRONOME is not set
# CONFIG_NET_VENDOR_NVIDIA is not set
# CONFIG_NET_VENDOR_OKI is not set
# CONFIG_ETHOC is not set
# CONFIG_NET_VENDOR_PENSANDO is not set
# CONFIG_NET_VENDOR_QLOGIC is not set
# CONFIG_NET_VENDOR_BROCADE is not set
# CONFIG_NET_VENDOR_QUALCOMM is not set
# CONFIG_NET_VENDOR_RDC is not set
# CONFIG_NET_VENDOR_REALTEK is not set
# CONFIG_NET_VENDOR_RENESAS is not set
# CONFIG_NET_VENDOR_ROCKER is not set
# CONFIG_NET_VENDOR_SAMSUNG is not set
# CONFIG_NET_VENDOR_SEEQ is not set
# CONFIG_NET_VENDOR_SILAN is not set
# CONFIG_NET_VENDOR_SIS is not set
# CONFIG_NET_VENDOR_SOLARFLARE is not set
# CONFIG_NET_VENDOR_SMSC is not set
# CONFIG_NET_VENDOR_SOCIONEXT is not set
# CONFIG_NET_VENDOR_STMICRO is not set
# CONFIG_NET_VENDOR_SUN is not set
# CONFIG_NET_VENDOR_SYNOPSYS is not set
# CONFIG_NET_VENDOR_TEHUTI is not set
# CONFIG_NET_VENDOR_TI is not set
CONFIG_NET_VENDOR_VERTEXCOM=y
# CONFIG_MSE102X is not set
# CONFIG_NET_VENDOR_VIA is not set
CONFIG_NET_VENDOR_WANGXUN=y
# CONFIG_NGBE is not set
# CONFIG_TXGBE is not set
# CONFIG_TXGBEVF is not set
# CONFIG_NGBEVF is not set
# CONFIG_NET_VENDOR_WIZNET is not set
# CONFIG_NET_VENDOR_XILINX is not set
# CONFIG_NET_VENDOR_XIRCOM is not set
CONFIG_FDDI=y
# CONFIG_DEFXX is not set
# CONFIG_SKFP is not set
CONFIG_PHYLINK=y
CONFIG_PHYLIB=y
CONFIG_SWPHY=y
CONFIG_PHY_PACKAGE=y
# CONFIG_LED_TRIGGER_PHY is not set
CONFIG_PHYLIB_LEDS=y
CONFIG_FIXED_PHY=y
# CONFIG_SFP is not set

#
# MII PHY device drivers
#
# CONFIG_AS21XXX_PHY is not set
# CONFIG_AIR_EN8811H_PHY is not set
# CONFIG_AMD_PHY is not set
# CONFIG_ADIN_PHY is not set
# CONFIG_ADIN1100_PHY is not set
CONFIG_AQUANTIA_PHY=y
CONFIG_AX88796B_PHY=y
CONFIG_BROADCOM_PHY=y
CONFIG_BCM54140_PHY=y
CONFIG_BCM7XXX_PHY=y
# CONFIG_BCM84881_PHY is not set
# CONFIG_BCM87XX_PHY is not set
CONFIG_BCM_NET_PHYLIB=y
# CONFIG_CICADA_PHY is not set
# CONFIG_CORTINA_PHY is not set
# CONFIG_DAVICOM_PHY is not set
# CONFIG_ICPLUS_PHY is not set
# CONFIG_LXT_PHY is not set
# CONFIG_INTEL_XWAY_PHY is not set
# CONFIG_LSI_ET1011C_PHY is not set
CONFIG_MARVELL_PHY=y
CONFIG_MARVELL_10G_PHY=y
CONFIG_MARVELL_88Q2XXX_PHY=y
# CONFIG_MARVELL_88X2222_PHY is not set
# CONFIG_MAXLINEAR_GPHY is not set
# CONFIG_MAXLINEAR_86110_PHY is not set
# CONFIG_MEDIATEK_GE_PHY is not set
CONFIG_MICREL_PHY=y
# CONFIG_MICROCHIP_T1S_PHY is not set
CONFIG_MICROCHIP_PHY=y
# CONFIG_MICROCHIP_T1_PHY is not set
CONFIG_MICROSEMI_PHY=y
# CONFIG_MOTORCOMM_PHY is not set
# CONFIG_NATIONAL_PHY is not set
# CONFIG_NXP_CBTX_PHY is not set
# CONFIG_NXP_C45_TJA11XX_PHY is not set
# CONFIG_NXP_TJA11XX_PHY is not set
# CONFIG_NCN26000_PHY is not set
CONFIG_QCOM_NET_PHYLIB=y
CONFIG_AT803X_PHY=y
# CONFIG_QCA83XX_PHY is not set
# CONFIG_QCA808X_PHY is not set
# CONFIG_QCA807X_PHY is not set
# CONFIG_QSEMI_PHY is not set
CONFIG_REALTEK_PHY=y
# CONFIG_REALTEK_PHY_HWMON is not set
# CONFIG_RENESAS_PHY is not set
CONFIG_ROCKCHIP_PHY=y
CONFIG_SMSC_PHY=y
# CONFIG_STE10XP is not set
# CONFIG_TERANETICS_PHY is not set
# CONFIG_DP83822_PHY is not set
# CONFIG_DP83TC811_PHY is not set
# CONFIG_DP83848_PHY is not set
CONFIG_DP83867_PHY=y
CONFIG_DP83869_PHY=y
CONFIG_DP83TD510_PHY=y
# CONFIG_DP83TG720_PHY is not set
CONFIG_VITESSE_PHY=y
# CONFIG_XILINX_GMII2RGMII is not set
# CONFIG_PSE_CONTROLLER is not set
CONFIG_CAN_DEV=y
CONFIG_CAN_VCAN=y
CONFIG_CAN_VXCAN=y
CONFIG_CAN_NETLINK=y
CONFIG_CAN_CALC_BITTIMING=y
CONFIG_CAN_RX_OFFLOAD=y
# CONFIG_CAN_CAN327 is not set
# CONFIG_CAN_DUMMY is not set
CONFIG_CAN_FLEXCAN=y
# CONFIG_CAN_GRCAN is not set
# CONFIG_CAN_KVASER_PCIEFD is not set
CONFIG_CAN_SLCAN=y
# CONFIG_CAN_XILINXCAN is not set
# CONFIG_CAN_C_CAN is not set
# CONFIG_CAN_CC770 is not set
# CONFIG_CAN_CTUCANFD_PCI is not set
# CONFIG_CAN_CTUCANFD_PLATFORM is not set
# CONFIG_CAN_ESD_402_PCI is not set
CONFIG_CAN_IFI_CANFD=y
CONFIG_CAN_M_CAN=y
# CONFIG_CAN_M_CAN_PCI is not set
CONFIG_CAN_M_CAN_PLATFORM=y
# CONFIG_CAN_M_CAN_TCAN4X5X is not set
# CONFIG_CAN_PEAK_PCIEFD is not set
# CONFIG_CAN_SJA1000 is not set
# CONFIG_CAN_SOFTING is not set

#
# CAN SPI interfaces
#
# CONFIG_CAN_HI311X is not set
# CONFIG_CAN_MCP251X is not set
CONFIG_CAN_MCP251XFD=y
# CONFIG_CAN_MCP251XFD_SANITY is not set
# end of CAN SPI interfaces

#
# CAN USB interfaces
#
CONFIG_CAN_8DEV_USB=y
CONFIG_CAN_EMS_USB=y
CONFIG_CAN_ESD_USB=y
CONFIG_CAN_ETAS_ES58X=y
CONFIG_CAN_F81604=y
CONFIG_CAN_GS_USB=y
CONFIG_CAN_KVASER_USB=y
CONFIG_CAN_MCBA_USB=y
CONFIG_CAN_PEAK_USB=y
CONFIG_CAN_UCAN=y
# end of CAN USB interfaces

# CONFIG_CAN_DEBUG_DEVICES is not set

#
# MCTP Device Drivers
#
# CONFIG_MCTP_SERIAL is not set
# CONFIG_MCTP_TRANSPORT_I2C is not set
# CONFIG_MCTP_TRANSPORT_USB is not set
# end of MCTP Device Drivers

CONFIG_FWNODE_MDIO=y
CONFIG_OF_MDIO=y
CONFIG_ACPI_MDIO=y
CONFIG_MDIO_BITBANG=y
CONFIG_MDIO_BCM_UNIMAC=y
CONFIG_MDIO_CAVIUM=y
CONFIG_MDIO_GPIO=y
# CONFIG_MDIO_HISI_FEMAC is not set
CONFIG_MDIO_MVUSB=y
# CONFIG_MDIO_MSCC_MIIM is not set
# CONFIG_MDIO_OCTEON is not set
# CONFIG_MDIO_IPQ4019 is not set
# CONFIG_MDIO_IPQ8064 is not set
CONFIG_MDIO_THUNDER=y

#
# MDIO Multiplexers
#
CONFIG_MDIO_BUS_MUX=y
# CONFIG_MDIO_BUS_MUX_GPIO is not set
CONFIG_MDIO_BUS_MUX_MULTIPLEXER=y
CONFIG_MDIO_BUS_MUX_MMIOREG=y

#
# PCS device drivers
#
CONFIG_PCS_XPCS=y
# end of PCS device drivers

# CONFIG_PLIP is not set
CONFIG_PPP=y
CONFIG_PPP_BSDCOMP=y
CONFIG_PPP_DEFLATE=y
CONFIG_PPP_FILTER=y
CONFIG_PPP_MPPE=y
CONFIG_PPP_MULTILINK=y
CONFIG_PPPOATM=y
CONFIG_PPPOE=y
CONFIG_PPPOE_HASH_BITS_1=y
# CONFIG_PPPOE_HASH_BITS_2 is not set
# CONFIG_PPPOE_HASH_BITS_4 is not set
# CONFIG_PPPOE_HASH_BITS_8 is not set
CONFIG_PPPOE_HASH_BITS=1
CONFIG_PPTP=y
CONFIG_PPPOL2TP=y
CONFIG_PPP_ASYNC=y
CONFIG_PPP_SYNC_TTY=y
CONFIG_SLIP=y
CONFIG_SLHC=y
CONFIG_SLIP_COMPRESSED=y
CONFIG_SLIP_SMART=y
CONFIG_SLIP_MODE_SLIP6=y
CONFIG_USB_NET_DRIVERS=y
CONFIG_USB_CATC=y
CONFIG_USB_KAWETH=y
CONFIG_USB_PEGASUS=y
CONFIG_USB_RTL8150=y
CONFIG_USB_RTL8152=y
CONFIG_USB_LAN78XX=y
CONFIG_USB_USBNET=y
CONFIG_USB_NET_AX8817X=y
CONFIG_USB_NET_AX88179_178A=y
CONFIG_USB_NET_CDCETHER=y
CONFIG_USB_NET_CDC_EEM=y
CONFIG_USB_NET_CDC_NCM=y
CONFIG_USB_NET_HUAWEI_CDC_NCM=y
CONFIG_USB_NET_CDC_MBIM=y
CONFIG_USB_NET_DM9601=y
CONFIG_USB_NET_SR9700=y
CONFIG_USB_NET_SR9800=y
CONFIG_USB_NET_SMSC75XX=y
CONFIG_USB_NET_SMSC95XX=y
CONFIG_USB_NET_GL620A=y
CONFIG_USB_NET_NET1080=y
CONFIG_USB_NET_PLUSB=y
CONFIG_USB_NET_MCS7830=y
CONFIG_USB_NET_RNDIS_HOST=y
CONFIG_USB_NET_CDC_SUBSET_ENABLE=y
CONFIG_USB_NET_CDC_SUBSET=y
CONFIG_USB_ALI_M5632=y
CONFIG_USB_AN2720=y
CONFIG_USB_BELKIN=y
CONFIG_USB_ARMLINUX=y
CONFIG_USB_EPSON2888=y
CONFIG_USB_KC2190=y
CONFIG_USB_NET_ZAURUS=y
CONFIG_USB_NET_CX82310_ETH=y
CONFIG_USB_NET_KALMIA=y
CONFIG_USB_NET_QMI_WWAN=y
CONFIG_USB_HSO=y
CONFIG_USB_NET_INT51X1=y
CONFIG_USB_CDC_PHONET=y
CONFIG_USB_IPHETH=y
CONFIG_USB_SIERRA_NET=y
CONFIG_USB_VL600=y
CONFIG_USB_NET_CH9200=y
CONFIG_USB_NET_AQC111=y
CONFIG_USB_RTL8153_ECM=y
CONFIG_WLAN=y
CONFIG_WLAN_VENDOR_ADMTEK=y
# CONFIG_ADM8211 is not set
# CONFIG_WLAN_VENDOR_ATH is not set
# CONFIG_WLAN_VENDOR_ATMEL is not set
# CONFIG_WLAN_VENDOR_BROADCOM is not set
# CONFIG_WLAN_VENDOR_INTEL is not set
# CONFIG_WLAN_VENDOR_INTERSIL is not set
# CONFIG_WLAN_VENDOR_MARVELL is not set
# CONFIG_WLAN_VENDOR_MEDIATEK is not set
# CONFIG_WLAN_VENDOR_MICROCHIP is not set
CONFIG_WLAN_VENDOR_PURELIFI=y
CONFIG_PLFXLC=y
# CONFIG_WLAN_VENDOR_RALINK is not set
# CONFIG_WLAN_VENDOR_REALTEK is not set
# CONFIG_WLAN_VENDOR_RSI is not set
CONFIG_WLAN_VENDOR_SILABS=y
# CONFIG_WFX is not set
# CONFIG_WLAN_VENDOR_ST is not set
# CONFIG_WLAN_VENDOR_TI is not set
# CONFIG_WLAN_VENDOR_ZYDAS is not set
# CONFIG_WLAN_VENDOR_QUANTENNA is not set
CONFIG_MAC80211_HWSIM=y
CONFIG_VIRT_WIFI=y
CONFIG_WAN=y
CONFIG_HDLC=y
CONFIG_HDLC_RAW=y
CONFIG_HDLC_RAW_ETH=y
CONFIG_HDLC_CISCO=y
CONFIG_HDLC_FR=y
CONFIG_HDLC_PPP=y
CONFIG_HDLC_X25=y
# CONFIG_FRAMER is not set
# CONFIG_PCI200SYN is not set
# CONFIG_WANXL is not set
# CONFIG_PC300TOO is not set
# CONFIG_FARSYNC is not set
CONFIG_LAPBETHER=y
CONFIG_IEEE802154_DRIVERS=y
# CONFIG_IEEE802154_FAKELB is not set
# CONFIG_IEEE802154_AT86RF230 is not set
# CONFIG_IEEE802154_MRF24J40 is not set
# CONFIG_IEEE802154_CC2520 is not set
CONFIG_IEEE802154_ATUSB=y
# CONFIG_IEEE802154_ADF7242 is not set
# CONFIG_IEEE802154_CA8210 is not set
# CONFIG_IEEE802154_MCR20A is not set
CONFIG_IEEE802154_HWSIM=y

#
# Wireless WAN
#
CONFIG_WWAN=y
CONFIG_WWAN_DEBUGFS=y
# CONFIG_WWAN_HWSIM is not set
CONFIG_MHI_WWAN_CTRL=y
CONFIG_MHI_WWAN_MBIM=y
# CONFIG_RPMSG_WWAN_CTRL is not set
# CONFIG_IOSM is not set
# CONFIG_MTK_T7XX is not set
# end of Wireless WAN

CONFIG_VMXNET3=y
# CONFIG_FUJITSU_ES is not set
CONFIG_USB4_NET=y
CONFIG_NETDEVSIM=y
CONFIG_NET_FAILOVER=y

#
# Input device support
#
CONFIG_INPUT=y
CONFIG_INPUT_LEDS=y
CONFIG_INPUT_FF_MEMLESS=y
# CONFIG_INPUT_SPARSEKMAP is not set
CONFIG_INPUT_MATRIXKMAP=y
CONFIG_INPUT_VIVALDIFMAP=y

#
# Userland interfaces
#
CONFIG_INPUT_MOUSEDEV=y
CONFIG_INPUT_MOUSEDEV_PSAUX=y
CONFIG_INPUT_MOUSEDEV_SCREEN_X=1024
CONFIG_INPUT_MOUSEDEV_SCREEN_Y=768
CONFIG_INPUT_JOYDEV=y
CONFIG_INPUT_EVDEV=y

#
# Input Device Drivers
#
CONFIG_INPUT_KEYBOARD=y
CONFIG_KEYBOARD_ADC=y
# CONFIG_KEYBOARD_ADP5585 is not set
# CONFIG_KEYBOARD_ADP5588 is not set
CONFIG_KEYBOARD_ATKBD=y
# CONFIG_KEYBOARD_QT1050 is not set
# CONFIG_KEYBOARD_QT1070 is not set
# CONFIG_KEYBOARD_QT2160 is not set
# CONFIG_KEYBOARD_DLINK_DIR685 is not set
# CONFIG_KEYBOARD_LKKBD is not set
CONFIG_KEYBOARD_GPIO=y
CONFIG_KEYBOARD_GPIO_POLLED=y
# CONFIG_KEYBOARD_TCA8418 is not set
# CONFIG_KEYBOARD_MATRIX is not set
# CONFIG_KEYBOARD_CHARLIEPLEX is not set
# CONFIG_KEYBOARD_LM8323 is not set
# CONFIG_KEYBOARD_LM8333 is not set
# CONFIG_KEYBOARD_MAX7359 is not set
# CONFIG_KEYBOARD_MPR121 is not set
CONFIG_KEYBOARD_IMX_BBM_SCMI=y
# CONFIG_KEYBOARD_NEWTON is not set
# CONFIG_KEYBOARD_OPENCORES is not set
# CONFIG_KEYBOARD_PINEPHONE is not set
# CONFIG_KEYBOARD_SAMSUNG is not set
# CONFIG_KEYBOARD_STOWAWAY is not set
# CONFIG_KEYBOARD_SUNKBD is not set
# CONFIG_KEYBOARD_OMAP4 is not set
# CONFIG_KEYBOARD_TM2_TOUCHKEY is not set
# CONFIG_KEYBOARD_TWL4030 is not set
# CONFIG_KEYBOARD_XTKBD is not set
# CONFIG_KEYBOARD_CAP11XX is not set
# CONFIG_KEYBOARD_BCM is not set
CONFIG_KEYBOARD_MTK_PMIC=y
# CONFIG_KEYBOARD_CYPRESS_SF is not set
CONFIG_INPUT_MOUSE=y
CONFIG_MOUSE_PS2=y
CONFIG_MOUSE_PS2_ALPS=y
CONFIG_MOUSE_PS2_BYD=y
CONFIG_MOUSE_PS2_LOGIPS2PP=y
CONFIG_MOUSE_PS2_SYNAPTICS=y
CONFIG_MOUSE_PS2_SYNAPTICS_SMBUS=y
CONFIG_MOUSE_PS2_CYPRESS=y
CONFIG_MOUSE_PS2_TRACKPOINT=y
# CONFIG_MOUSE_PS2_ELANTECH is not set
# CONFIG_MOUSE_PS2_SENTELIC is not set
# CONFIG_MOUSE_PS2_TOUCHKIT is not set
CONFIG_MOUSE_PS2_FOCALTECH=y
CONFIG_MOUSE_PS2_SMBUS=y
# CONFIG_MOUSE_SERIAL is not set
CONFIG_MOUSE_APPLETOUCH=y
CONFIG_MOUSE_BCM5974=y
# CONFIG_MOUSE_CYAPA is not set
CONFIG_MOUSE_ELAN_I2C=y
CONFIG_MOUSE_ELAN_I2C_I2C=y
# CONFIG_MOUSE_ELAN_I2C_SMBUS is not set
# CONFIG_MOUSE_VSXXXAA is not set
# CONFIG_MOUSE_GPIO is not set
# CONFIG_MOUSE_SYNAPTICS_I2C is not set
CONFIG_MOUSE_SYNAPTICS_USB=y
CONFIG_INPUT_JOYSTICK=y
# CONFIG_JOYSTICK_ANALOG is not set
# CONFIG_JOYSTICK_A3D is not set
# CONFIG_JOYSTICK_ADC is not set
# CONFIG_JOYSTICK_ADI is not set
# CONFIG_JOYSTICK_COBRA is not set
# CONFIG_JOYSTICK_GF2K is not set
# CONFIG_JOYSTICK_GRIP is not set
# CONFIG_JOYSTICK_GRIP_MP is not set
# CONFIG_JOYSTICK_GUILLEMOT is not set
# CONFIG_JOYSTICK_INTERACT is not set
# CONFIG_JOYSTICK_SIDEWINDER is not set
# CONFIG_JOYSTICK_TMDC is not set
CONFIG_JOYSTICK_IFORCE=y
CONFIG_JOYSTICK_IFORCE_USB=y
# CONFIG_JOYSTICK_IFORCE_232 is not set
# CONFIG_JOYSTICK_WARRIOR is not set
# CONFIG_JOYSTICK_MAGELLAN is not set
# CONFIG_JOYSTICK_SPACEORB is not set
# CONFIG_JOYSTICK_SPACEBALL is not set
# CONFIG_JOYSTICK_STINGER is not set
# CONFIG_JOYSTICK_TWIDJOY is not set
# CONFIG_JOYSTICK_ZHENHUA is not set
# CONFIG_JOYSTICK_DB9 is not set
# CONFIG_JOYSTICK_GAMECON is not set
# CONFIG_JOYSTICK_TURBOGRAFX is not set
# CONFIG_JOYSTICK_AS5011 is not set
# CONFIG_JOYSTICK_JOYDUMP is not set
CONFIG_JOYSTICK_XPAD=y
CONFIG_JOYSTICK_XPAD_FF=y
CONFIG_JOYSTICK_XPAD_LEDS=y
# CONFIG_JOYSTICK_WALKERA0701 is not set
# CONFIG_JOYSTICK_PSXPAD_SPI is not set
CONFIG_JOYSTICK_PXRC=y
# CONFIG_JOYSTICK_QWIIC is not set
# CONFIG_JOYSTICK_FSIA6B is not set
# CONFIG_JOYSTICK_SENSEHAT is not set
# CONFIG_JOYSTICK_SEESAW is not set
CONFIG_INPUT_TABLET=y
CONFIG_TABLET_USB_ACECAD=y
CONFIG_TABLET_USB_AIPTEK=y
CONFIG_TABLET_USB_HANWANG=y
CONFIG_TABLET_USB_KBTAB=y
CONFIG_TABLET_USB_PEGASUS=y
# CONFIG_TABLET_SERIAL_WACOM4 is not set
CONFIG_INPUT_TOUCHSCREEN=y
# CONFIG_TOUCHSCREEN_ADS7846 is not set
# CONFIG_TOUCHSCREEN_AD7877 is not set
# CONFIG_TOUCHSCREEN_AD7879 is not set
# CONFIG_TOUCHSCREEN_ADC is not set
# CONFIG_TOUCHSCREEN_AR1021_I2C is not set
CONFIG_TOUCHSCREEN_ATMEL_MXT=y
# CONFIG_TOUCHSCREEN_ATMEL_MXT_T37 is not set
# CONFIG_TOUCHSCREEN_AUO_PIXCIR is not set
# CONFIG_TOUCHSCREEN_BU21013 is not set
# CONFIG_TOUCHSCREEN_BU21029 is not set
# CONFIG_TOUCHSCREEN_CHIPONE_ICN8318 is not set
# CONFIG_TOUCHSCREEN_CHIPONE_ICN8505 is not set
# CONFIG_TOUCHSCREEN_CY8CTMA140 is not set
# CONFIG_TOUCHSCREEN_CY8CTMG110 is not set
# CONFIG_TOUCHSCREEN_CYTTSP_CORE is not set
# CONFIG_TOUCHSCREEN_CYTTSP5 is not set
# CONFIG_TOUCHSCREEN_DYNAPRO is not set
# CONFIG_TOUCHSCREEN_HAMPSHIRE is not set
# CONFIG_TOUCHSCREEN_EETI is not set
# CONFIG_TOUCHSCREEN_EGALAX is not set
# CONFIG_TOUCHSCREEN_EGALAX_SERIAL is not set
# CONFIG_TOUCHSCREEN_EXC3000 is not set
# CONFIG_TOUCHSCREEN_FUJITSU is not set
CONFIG_TOUCHSCREEN_GOODIX=y
CONFIG_TOUCHSCREEN_GOODIX_BERLIN_CORE=y
# CONFIG_TOUCHSCREEN_GOODIX_BERLIN_I2C is not set
CONFIG_TOUCHSCREEN_GOODIX_BERLIN_SPI=y
# CONFIG_TOUCHSCREEN_HIDEEP is not set
# CONFIG_TOUCHSCREEN_HIMAX_HX852X is not set
# CONFIG_TOUCHSCREEN_HYCON_HY46XX is not set
# CONFIG_TOUCHSCREEN_HYNITRON_CSTXXX is not set
# CONFIG_TOUCHSCREEN_HYNITRON_CST816X is not set
# CONFIG_TOUCHSCREEN_ILI210X is not set
# CONFIG_TOUCHSCREEN_ILITEK is not set
# CONFIG_TOUCHSCREEN_S6SY761 is not set
# CONFIG_TOUCHSCREEN_GUNZE is not set
# CONFIG_TOUCHSCREEN_EKTF2127 is not set
CONFIG_TOUCHSCREEN_ELAN=y
# CONFIG_TOUCHSCREEN_ELO is not set
# CONFIG_TOUCHSCREEN_WACOM_W8001 is not set
# CONFIG_TOUCHSCREEN_WACOM_I2C is not set
# CONFIG_TOUCHSCREEN_MAX11801 is not set
# CONFIG_TOUCHSCREEN_MMS114 is not set
# CONFIG_TOUCHSCREEN_MELFAS_MIP4 is not set
# CONFIG_TOUCHSCREEN_MSG2638 is not set
# CONFIG_TOUCHSCREEN_MTOUCH is not set
# CONFIG_TOUCHSCREEN_NOVATEK_NVT_TS is not set
# CONFIG_TOUCHSCREEN_IMAGIS is not set
# CONFIG_TOUCHSCREEN_IMX6UL_TSC is not set
# CONFIG_TOUCHSCREEN_INEXIO is not set
# CONFIG_TOUCHSCREEN_PENMOUNT is not set
CONFIG_TOUCHSCREEN_EDT_FT5X06=y
# CONFIG_TOUCHSCREEN_TOUCHRIGHT is not set
# CONFIG_TOUCHSCREEN_TOUCHWIN is not set
# CONFIG_TOUCHSCREEN_PIXCIR is not set
# CONFIG_TOUCHSCREEN_WDT87XX_I2C is not set
CONFIG_TOUCHSCREEN_USB_COMPOSITE=y
CONFIG_TOUCHSCREEN_USB_EGALAX=y
CONFIG_TOUCHSCREEN_USB_PANJIT=y
CONFIG_TOUCHSCREEN_USB_3M=y
CONFIG_TOUCHSCREEN_USB_ITM=y
CONFIG_TOUCHSCREEN_USB_ETURBO=y
CONFIG_TOUCHSCREEN_USB_GUNZE=y
CONFIG_TOUCHSCREEN_USB_DMC_TSC10=y
CONFIG_TOUCHSCREEN_USB_IRTOUCH=y
CONFIG_TOUCHSCREEN_USB_IDEALTEK=y
CONFIG_TOUCHSCREEN_USB_GENERAL_TOUCH=y
CONFIG_TOUCHSCREEN_USB_GOTOP=y
CONFIG_TOUCHSCREEN_USB_JASTEC=y
CONFIG_TOUCHSCREEN_USB_ELO=y
CONFIG_TOUCHSCREEN_USB_E2I=y
CONFIG_TOUCHSCREEN_USB_ZYTRONIC=y
CONFIG_TOUCHSCREEN_USB_ETT_TC45USB=y
CONFIG_TOUCHSCREEN_USB_NEXIO=y
CONFIG_TOUCHSCREEN_USB_EASYTOUCH=y
# CONFIG_TOUCHSCREEN_TOUCHIT213 is not set
# CONFIG_TOUCHSCREEN_TSC_SERIO is not set
# CONFIG_TOUCHSCREEN_TSC2004 is not set
# CONFIG_TOUCHSCREEN_TSC2005 is not set
# CONFIG_TOUCHSCREEN_TSC2007 is not set
# CONFIG_TOUCHSCREEN_RM_TS is not set
# CONFIG_TOUCHSCREEN_SILEAD is not set
# CONFIG_TOUCHSCREEN_SIS_I2C is not set
# CONFIG_TOUCHSCREEN_ST1232 is not set
# CONFIG_TOUCHSCREEN_STMFTS is not set
CONFIG_TOUCHSCREEN_SUR40=y
# CONFIG_TOUCHSCREEN_SURFACE3_SPI is not set
# CONFIG_TOUCHSCREEN_SX8654 is not set
# CONFIG_TOUCHSCREEN_TPS6507X is not set
# CONFIG_TOUCHSCREEN_ZET6223 is not set
# CONFIG_TOUCHSCREEN_ZFORCE is not set
# CONFIG_TOUCHSCREEN_COLIBRI_VF50 is not set
# CONFIG_TOUCHSCREEN_ROHM_BU21023 is not set
# CONFIG_TOUCHSCREEN_IQS5XX is not set
# CONFIG_TOUCHSCREEN_IQS7211 is not set
# CONFIG_TOUCHSCREEN_ZINITIX is not set
CONFIG_TOUCHSCREEN_HIMAX_HX83112B=y
CONFIG_INPUT_MISC=y
# CONFIG_INPUT_AD714X is not set
# CONFIG_INPUT_ATMEL_CAPTOUCH is not set
CONFIG_INPUT_AW86927=y
# CONFIG_INPUT_BMA150 is not set
# CONFIG_INPUT_E3X0_BUTTON is not set
# CONFIG_INPUT_MMA8450 is not set
# CONFIG_INPUT_GPIO_BEEPER is not set
# CONFIG_INPUT_GPIO_DECODER is not set
# CONFIG_INPUT_GPIO_VIBRA is not set
CONFIG_INPUT_ATI_REMOTE2=y
CONFIG_INPUT_KEYSPAN_REMOTE=y
# CONFIG_INPUT_KXTJ9 is not set
CONFIG_INPUT_POWERMATE=y
CONFIG_INPUT_YEALINK=y
CONFIG_INPUT_CM109=y
# CONFIG_INPUT_REGULATOR_HAPTIC is not set
# CONFIG_INPUT_RETU_PWRBUTTON is not set
CONFIG_INPUT_TPS65219_PWRBUTTON=y
# CONFIG_INPUT_TPS6594_PWRBUTTON is not set
# CONFIG_INPUT_AXP20X_PEK is not set
# CONFIG_INPUT_TWL4030_PWRBUTTON is not set
# CONFIG_INPUT_TWL4030_VIBRA is not set
CONFIG_INPUT_UINPUT=y
# CONFIG_INPUT_PCF8574 is not set
CONFIG_INPUT_PWM_BEEPER=y
CONFIG_INPUT_PWM_VIBRA=y
CONFIG_INPUT_RK805_PWRKEY=y
# CONFIG_INPUT_GPIO_ROTARY_ENCODER is not set
# CONFIG_INPUT_DA7280_HAPTICS is not set
CONFIG_INPUT_DA9063_ONKEY=y
# CONFIG_INPUT_ADXL34X is not set
# CONFIG_INPUT_IBM_PANEL is not set
CONFIG_INPUT_IMS_PCU=y
# CONFIG_INPUT_IQS269A is not set
# CONFIG_INPUT_IQS626A is not set
# CONFIG_INPUT_IQS7222 is not set
# CONFIG_INPUT_CMA3000 is not set
# CONFIG_INPUT_SOC_BUTTON_ARRAY is not set
# CONFIG_INPUT_DRV260X_HAPTICS is not set
# CONFIG_INPUT_DRV2665_HAPTICS is not set
# CONFIG_INPUT_DRV2667_HAPTICS is not set
CONFIG_RMI4_CORE=y
# CONFIG_RMI4_I2C is not set
# CONFIG_RMI4_SPI is not set
# CONFIG_RMI4_SMB is not set
CONFIG_RMI4_F03=y
CONFIG_RMI4_F03_SERIO=y
CONFIG_RMI4_2D_SENSOR=y
CONFIG_RMI4_F11=y
CONFIG_RMI4_F12=y
# CONFIG_RMI4_F1A is not set
# CONFIG_RMI4_F21 is not set
CONFIG_RMI4_F30=y
# CONFIG_RMI4_F34 is not set
CONFIG_RMI4_F3A=y
# CONFIG_RMI4_F54 is not set
# CONFIG_RMI4_F55 is not set

#
# Hardware I/O ports
#
CONFIG_SERIO=y
CONFIG_SERIO_SERPORT=y
# CONFIG_SERIO_PARKBD is not set
CONFIG_SERIO_AMBAKMI=y
# CONFIG_SERIO_PCIPS2 is not set
CONFIG_SERIO_LIBPS2=y
# CONFIG_SERIO_RAW is not set
# CONFIG_SERIO_ALTERA_PS2 is not set
# CONFIG_SERIO_PS2MULT is not set
# CONFIG_SERIO_ARC_PS2 is not set
# CONFIG_SERIO_APBPS2 is not set
# CONFIG_SERIO_GPIO_PS2 is not set
CONFIG_USERIO=y
# CONFIG_GAMEPORT is not set
# end of Hardware I/O ports
# end of Input device support

#
# Character devices
#
CONFIG_TTY=y
CONFIG_VT=y
CONFIG_CONSOLE_TRANSLATIONS=y
CONFIG_VT_CONSOLE=y
CONFIG_VT_CONSOLE_SLEEP=y
CONFIG_VT_HW_CONSOLE_BINDING=y
CONFIG_UNIX98_PTYS=y
CONFIG_LEGACY_PTYS=y
CONFIG_LEGACY_PTY_COUNT=256
CONFIG_LEGACY_TIOCSTI=y
CONFIG_LDISC_AUTOLOAD=y

#
# Serial drivers
#
CONFIG_SERIAL_EARLYCON=y
CONFIG_SERIAL_8250=y
CONFIG_SERIAL_8250_PNP=y
CONFIG_SERIAL_8250_16550A_VARIANTS=y
# CONFIG_SERIAL_8250_FINTEK is not set
CONFIG_SERIAL_8250_CONSOLE=y
CONFIG_SERIAL_8250_DMA=y
CONFIG_SERIAL_8250_PCILIB=y
CONFIG_SERIAL_8250_PCI=y
# CONFIG_SERIAL_8250_EXAR is not set
# CONFIG_SERIAL_8250_CS is not set
CONFIG_SERIAL_8250_NR_UARTS=32
CONFIG_SERIAL_8250_RUNTIME_UARTS=4
CONFIG_SERIAL_8250_EXTENDED=y
CONFIG_SERIAL_8250_SHARE_IRQ=y
CONFIG_SERIAL_8250_DETECT_IRQ=y
CONFIG_SERIAL_8250_RSA=y
CONFIG_SERIAL_8250_MANY_PORTS=y
# CONFIG_SERIAL_8250_PCI1XXXX is not set
CONFIG_SERIAL_8250_FSL=y
CONFIG_SERIAL_8250_DW=y
# CONFIG_SERIAL_8250_RT288X is not set
CONFIG_SERIAL_8250_PERICOM=y
CONFIG_SERIAL_OF_PLATFORM=y
CONFIG_SERIAL_8250_DWLIB=y

#
# Non-8250 serial port support
#
# CONFIG_SERIAL_AMBA_PL010 is not set
CONFIG_SERIAL_AMBA_PL011=y
CONFIG_SERIAL_AMBA_PL011_CONSOLE=y
# CONFIG_SERIAL_EARLYCON_SEMIHOST is not set
# CONFIG_SERIAL_MAX3100 is not set
# CONFIG_SERIAL_MAX310X is not set
# CONFIG_SERIAL_UARTLITE is not set
CONFIG_SERIAL_CORE=y
CONFIG_SERIAL_CORE_CONSOLE=y
# CONFIG_SERIAL_JSM is not set
# CONFIG_SERIAL_SIFIVE is not set
# CONFIG_SERIAL_SCCNXP is not set
# CONFIG_SERIAL_SC16IS7XX is not set
# CONFIG_SERIAL_ALTERA_JTAGUART is not set
# CONFIG_SERIAL_ALTERA_UART is not set
CONFIG_SERIAL_XILINX_PS_UART=y
CONFIG_SERIAL_XILINX_PS_UART_CONSOLE=y
# CONFIG_SERIAL_ARC is not set
# CONFIG_SERIAL_RP2 is not set
CONFIG_SERIAL_FSL_LPUART=y
CONFIG_SERIAL_FSL_LPUART_CONSOLE=y
CONFIG_SERIAL_FSL_LINFLEXUART=y
CONFIG_SERIAL_FSL_LINFLEXUART_CONSOLE=y
# CONFIG_SERIAL_CONEXANT_DIGICOLOR is not set
# CONFIG_SERIAL_SPRD is not set
# end of Serial drivers

CONFIG_SERIAL_MCTRL_GPIO=y
CONFIG_SERIAL_NONSTANDARD=y
# CONFIG_MOXA_INTELLIO is not set
# CONFIG_MOXA_SMARTIO is not set
CONFIG_N_HDLC=y
# CONFIG_IPWIRELESS is not set
CONFIG_N_GSM=y
CONFIG_NOZOMI=y
CONFIG_NULL_TTY=y
CONFIG_HVC_DRIVER=y
# CONFIG_HVC_DCC is not set
# CONFIG_RPMSG_TTY is not set
CONFIG_SERIAL_DEV_BUS=y
CONFIG_SERIAL_DEV_CTRL_TTYPORT=y
CONFIG_TTY_PRINTK=y
CONFIG_TTY_PRINTK_LEVEL=6
# CONFIG_PRINTER is not set
# CONFIG_PPDEV is not set
CONFIG_VIRTIO_CONSOLE=y
CONFIG_IPMI_HANDLER=y
CONFIG_IPMI_DMI_DECODE=y
CONFIG_IPMI_PLAT_DATA=y
# CONFIG_IPMI_PANIC_EVENT is not set
CONFIG_IPMI_DEVICE_INTERFACE=y
CONFIG_IPMI_SI=y
# CONFIG_IPMI_SSIF is not set
# CONFIG_IPMI_IPMB is not set
# CONFIG_IPMI_WATCHDOG is not set
# CONFIG_IPMI_POWEROFF is not set
# CONFIG_SSIF_IPMI_BMC is not set
# CONFIG_IPMB_DEVICE_INTERFACE is not set
CONFIG_HW_RANDOM=y
# CONFIG_HW_RANDOM_TIMERIOMEM is not set
# CONFIG_HW_RANDOM_BA431 is not set
CONFIG_HW_RANDOM_VIRTIO=y
CONFIG_HW_RANDOM_OPTEE=y
# CONFIG_HW_RANDOM_CCTRNG is not set
# CONFIG_HW_RANDOM_XIPHERA is not set
CONFIG_HW_RANDOM_ARM_SMCCC_TRNG=y
CONFIG_HW_RANDOM_CN10K=y
# CONFIG_APPLICOM is not set
# CONFIG_DEVMEM is not set
# CONFIG_DEVPORT is not set
CONFIG_TCG_TPM=y
# CONFIG_TCG_TPM2_HMAC is not set
CONFIG_HW_RANDOM_TPM=y
CONFIG_TCG_TIS_CORE=y
CONFIG_TCG_TIS=y
CONFIG_TCG_TIS_SPI=y
CONFIG_TCG_TIS_SPI_CR50=y
# CONFIG_TCG_TIS_I2C is not set
CONFIG_TCG_TIS_I2C_CR50=y
# CONFIG_TCG_TIS_I2C_ATMEL is not set
CONFIG_TCG_TIS_I2C_INFINEON=y
# CONFIG_TCG_TIS_I2C_NUVOTON is not set
# CONFIG_TCG_ATMEL is not set
# CONFIG_TCG_INFINEON is not set
CONFIG_TCG_CRB=y
# CONFIG_TCG_VTPM_PROXY is not set
# CONFIG_TCG_FTPM_TEE is not set
# CONFIG_TCG_TIS_ST33ZP24_I2C is not set
# CONFIG_TCG_TIS_ST33ZP24_SPI is not set
CONFIG_XILLYBUS_CLASS=y
# CONFIG_XILLYBUS is not set
CONFIG_XILLYUSB=y
# end of Character devices

#
# I2C support
#
CONFIG_I2C=y
CONFIG_ACPI_I2C_OPREGION=y
CONFIG_I2C_BOARDINFO=y
CONFIG_I2C_CHARDEV=y
CONFIG_I2C_MUX=y

#
# Multiplexer I2C Chip support
#
# CONFIG_I2C_ARB_GPIO_CHALLENGE is not set
# CONFIG_I2C_MUX_GPIO is not set
# CONFIG_I2C_MUX_GPMUX is not set
# CONFIG_I2C_MUX_LTC4306 is not set
# CONFIG_I2C_MUX_PCA9541 is not set
CONFIG_I2C_MUX_PCA954x=y
CONFIG_I2C_MUX_PINCTRL=y
CONFIG_I2C_MUX_REG=y
# CONFIG_I2C_DEMUX_PINCTRL is not set
# CONFIG_I2C_MUX_MLXCPLD is not set
# end of Multiplexer I2C Chip support

CONFIG_I2C_HELPER_AUTO=y
CONFIG_I2C_ALGOBIT=y

#
# I2C Hardware Bus support
#

#
# PC SMBus host controller drivers
#
# CONFIG_I2C_ALI1535 is not set
# CONFIG_I2C_ALI1563 is not set
# CONFIG_I2C_ALI15X3 is not set
# CONFIG_I2C_AMD756 is not set
# CONFIG_I2C_AMD8111 is not set
# CONFIG_I2C_AMD_MP2 is not set
# CONFIG_I2C_I801 is not set
# CONFIG_I2C_ISCH is not set
# CONFIG_I2C_PIIX4 is not set
# CONFIG_I2C_NFORCE2 is not set
# CONFIG_I2C_NVIDIA_GPU is not set
# CONFIG_I2C_SIS5595 is not set
# CONFIG_I2C_SIS630 is not set
# CONFIG_I2C_SIS96X is not set
# CONFIG_I2C_VIA is not set
# CONFIG_I2C_VIAPRO is not set
# CONFIG_I2C_ZHAOXIN is not set

#
# ACPI drivers
#
# CONFIG_I2C_SCMI is not set

#
# I2C system bus drivers (mostly embedded / system-on-chip)
#
CONFIG_I2C_CADENCE=y
# CONFIG_I2C_CBUS_GPIO is not set
CONFIG_I2C_DESIGNWARE_CORE=y
CONFIG_I2C_DESIGNWARE_PLATFORM=y
# CONFIG_I2C_DESIGNWARE_PCI is not set
# CONFIG_I2C_EMEV2 is not set
CONFIG_I2C_GPIO=y
# CONFIG_I2C_GPIO_FAULT_INJECTOR is not set
# CONFIG_I2C_HISI is not set
# CONFIG_I2C_NOMADIK is not set
# CONFIG_I2C_OCORES is not set
# CONFIG_I2C_PCA_PLATFORM is not set
CONFIG_I2C_RK3X=y
# CONFIG_I2C_SIMTEC is not set
# CONFIG_I2C_VERSATILE is not set
# CONFIG_I2C_THUNDERX is not set
# CONFIG_I2C_XILINX is not set

#
# External I2C/SMBus adapter drivers
#
CONFIG_I2C_DIOLAN_U2C=y
CONFIG_I2C_DLN2=y
CONFIG_I2C_LJCA=y
CONFIG_I2C_CP2615=y
# CONFIG_I2C_PARPORT is not set
# CONFIG_I2C_PCI1XXXX is not set
CONFIG_I2C_ROBOTFUZZ_OSIF=y
# CONFIG_I2C_TAOS_EVM is not set
CONFIG_I2C_TINY_USB=y
CONFIG_I2C_VIPERBOARD=y

#
# Other I2C/SMBus bus drivers
#
# CONFIG_I2C_MLXCPLD is not set
# CONFIG_I2C_VIRTIO is not set
# end of I2C Hardware Bus support

# CONFIG_I2C_STUB is not set
CONFIG_I2C_SLAVE=y
CONFIG_I2C_SLAVE_EEPROM=y
# CONFIG_I2C_SLAVE_TESTUNIT is not set
# CONFIG_I2C_DEBUG_CORE is not set
# CONFIG_I2C_DEBUG_ALGO is not set
# CONFIG_I2C_DEBUG_BUS is not set
# end of I2C support

# CONFIG_I3C is not set
CONFIG_I3C_OR_I2C=y
CONFIG_SPI=y
# CONFIG_SPI_DEBUG is not set
CONFIG_SPI_MASTER=y
CONFIG_SPI_MEM=y

#
# SPI Master Controller Drivers
#
# CONFIG_SPI_ALTERA is not set
# CONFIG_SPI_AXI_SPI_ENGINE is not set
# CONFIG_SPI_BITBANG is not set
# CONFIG_SPI_BUTTERFLY is not set
# CONFIG_SPI_CADENCE is not set
CONFIG_SPI_CADENCE_QUADSPI=y
# CONFIG_SPI_CADENCE_XSPI is not set
# CONFIG_SPI_CH341 is not set
CONFIG_SPI_DESIGNWARE=y
CONFIG_SPI_DW_DMA=y
# CONFIG_SPI_DW_PCI is not set
CONFIG_SPI_DW_MMIO=y
CONFIG_SPI_DLN2=y
# CONFIG_SPI_HISI_KUNPENG is not set
# CONFIG_SPI_HISI_SFC_V3XX is not set
# CONFIG_SPI_GPIO is not set
# CONFIG_SPI_LM70_LLP is not set
# CONFIG_SPI_FSL_SPI is not set
CONFIG_SPI_LJCA=y
# CONFIG_SPI_MICROCHIP_CORE_QSPI is not set
# CONFIG_SPI_MICROCHIP_CORE_SPI is not set
# CONFIG_SPI_OC_TINY is not set
# CONFIG_SPI_PCI1XXXX is not set
CONFIG_SPI_PL022=y
# CONFIG_SPI_SC18IS602 is not set
# CONFIG_SPI_SIFIVE is not set
# CONFIG_SPI_SN_F_OSPI is not set
# CONFIG_SPI_MXIC is not set
# CONFIG_SPI_THUNDERX is not set
# CONFIG_SPI_VIRTIO is not set
# CONFIG_SPI_XCOMM is not set
# CONFIG_SPI_XILINX is not set
# CONFIG_SPI_ZYNQMP_GQSPI is not set
# CONFIG_SPI_AMD is not set

#
# SPI Multiplexer support
#
# CONFIG_SPI_MUX is not set

#
# SPI Protocol Masters
#
CONFIG_SPI_SPIDEV=y
# CONFIG_SPI_LOOPBACK_TEST is not set
# CONFIG_SPI_TLE62X0 is not set
# CONFIG_SPI_SLAVE is not set
CONFIG_SPI_DYNAMIC=y
CONFIG_SPMI=y
# CONFIG_SPMI_HISI3670 is not set
# CONFIG_HSI is not set
CONFIG_PPS=y
# CONFIG_PPS_DEBUG is not set

#
# PPS clients support
#
# CONFIG_PPS_CLIENT_KTIMER is not set
# CONFIG_PPS_CLIENT_LDISC is not set
# CONFIG_PPS_CLIENT_PARPORT is not set
# CONFIG_PPS_CLIENT_GPIO is not set
# CONFIG_PPS_GENERATOR is not set

#
# PTP clock support
#
CONFIG_PTP_1588_CLOCK=y
CONFIG_PTP_1588_CLOCK_OPTIONAL=y

#
# Enable PHYLIB and NETWORK_PHY_TIMESTAMPING to see the additional clocks.
#
CONFIG_PTP_1588_CLOCK_KVM=y
CONFIG_PTP_1588_CLOCK_VMCLOCK=y
# CONFIG_PTP_1588_CLOCK_IDT82P33 is not set
# CONFIG_PTP_1588_CLOCK_IDTCM is not set
# CONFIG_PTP_1588_CLOCK_FC3W is not set
# CONFIG_PTP_1588_CLOCK_MOCK is not set
# CONFIG_PTP_1588_CLOCK_OCP is not set
# CONFIG_PTP_NETC_V4_TIMER is not set
# end of PTP clock support

#
# DPLL device support
#
# CONFIG_ZL3073X_I2C is not set
# CONFIG_ZL3073X_SPI is not set
# end of DPLL device support

CONFIG_PINCTRL=y
CONFIG_GENERIC_PINCTRL_GROUPS=y
CONFIG_PINMUX=y
CONFIG_GENERIC_PINMUX_FUNCTIONS=y
CONFIG_PINCONF=y
CONFIG_GENERIC_PINCONF=y
# CONFIG_DEBUG_PINCTRL is not set
# CONFIG_PINCTRL_AMD is not set
# CONFIG_PINCTRL_AXP209 is not set
# CONFIG_PINCTRL_AW9523 is not set
# CONFIG_PINCTRL_CY8C95X0 is not set
CONFIG_PINCTRL_DA9062=y
CONFIG_PINCTRL_MAX77620=y
# CONFIG_PINCTRL_MCP23S08 is not set
# CONFIG_PINCTRL_MICROCHIP_SGPIO is not set
# CONFIG_PINCTRL_OCELOT is not set
CONFIG_PINCTRL_RK805=y
# CONFIG_PINCTRL_SCMI is not set
CONFIG_PINCTRL_SINGLE=y
# CONFIG_PINCTRL_STMFX is not set
CONFIG_PINCTRL_SX150X=y
CONFIG_PINCTRL_TPS6594=y
CONFIG_PINCTRL_RP1=y

#
# Renesas pinctrl drivers
#
# end of Renesas pinctrl drivers

CONFIG_GPIOLIB_LEGACY=y
CONFIG_GPIOLIB=y
CONFIG_GPIOLIB_FASTPATH_LIMIT=512
CONFIG_OF_GPIO=y
CONFIG_GPIO_ACPI=y
CONFIG_GPIOLIB_IRQCHIP=y
# CONFIG_DEBUG_GPIO is not set
# CONFIG_GPIO_SYSFS is not set
CONFIG_GPIO_CDEV=y
CONFIG_GPIO_CDEV_V1=y
CONFIG_GPIO_GENERIC=y
CONFIG_GPIO_REGMAP=y

#
# Memory mapped GPIO drivers
#
# CONFIG_GPIO_74XX_MMIO is not set
CONFIG_GPIO_ALTERA=y
# CONFIG_GPIO_AMDPT is not set
# CONFIG_GPIO_BY_PINCTRL is not set
# CONFIG_GPIO_CADENCE is not set
CONFIG_GPIO_DWAPB=y
# CONFIG_GPIO_FTGPIO010 is not set
CONFIG_GPIO_GENERIC_PLATFORM=y
# CONFIG_GPIO_GRGPIO is not set
# CONFIG_GPIO_HISI is not set
# CONFIG_GPIO_HLWD is not set
# CONFIG_GPIO_LOGICVC is not set
CONFIG_GPIO_MB86S7X=y
CONFIG_GPIO_PL061=y
# CONFIG_GPIO_POLARFIRE_SOC is not set
# CONFIG_GPIO_SIFIVE is not set
CONFIG_GPIO_SYSCON=y
CONFIG_GPIO_WCD934X=y
CONFIG_GPIO_XGENE=y
# CONFIG_GPIO_XILINX is not set
# CONFIG_GPIO_AMD_FCH is not set
# end of Memory mapped GPIO drivers

#
# I2C GPIO expanders
#
# CONFIG_GPIO_ADNP is not set
# CONFIG_GPIO_FXL6408 is not set
# CONFIG_GPIO_DS4520 is not set
# CONFIG_GPIO_GW_PLD is not set
# CONFIG_GPIO_MAX7300 is not set
CONFIG_GPIO_MAX732X=y
# CONFIG_GPIO_MAX732X_IRQ is not set
CONFIG_GPIO_PCA953X=y
CONFIG_GPIO_PCA953X_IRQ=y
# CONFIG_GPIO_PCA9570 is not set
CONFIG_GPIO_PCF857X=y
CONFIG_GPIO_TPIC2810=y
# end of I2C GPIO expanders

#
# MFD GPIO expanders
#
CONFIG_GPIO_ADP5585=y
CONFIG_GPIO_BD9571MWV=y
CONFIG_GPIO_DLN2=y
CONFIG_GPIO_LJCA=y
# CONFIG_GPIO_LP873X is not set
CONFIG_GPIO_MAX77620=y
CONFIG_GPIO_MAX77759=y
CONFIG_GPIO_TPS65219=y
# CONFIG_GPIO_TWL4030 is not set
# CONFIG_GPIO_WM8994 is not set
# end of MFD GPIO expanders

#
# PCI GPIO expanders
#
# CONFIG_GPIO_BT8XX is not set
# CONFIG_GPIO_PCI_IDIO_16 is not set
# CONFIG_GPIO_PCIE_IDIO_24 is not set
# CONFIG_GPIO_RDC321X is not set
# end of PCI GPIO expanders

#
# SPI GPIO expanders
#
# CONFIG_GPIO_74X164 is not set
# CONFIG_GPIO_MAX3191X is not set
# CONFIG_GPIO_MAX7301 is not set
# CONFIG_GPIO_MC33880 is not set
# CONFIG_GPIO_PISOSR is not set
# CONFIG_GPIO_XRA1403 is not set
# end of SPI GPIO expanders

#
# USB GPIO expanders
#
CONFIG_GPIO_VIPERBOARD=y
# CONFIG_GPIO_MPSSE is not set
# end of USB GPIO expanders

#
# Virtual GPIO drivers
#
CONFIG_GPIO_AGGREGATOR=y
# CONFIG_GPIO_LATCH is not set
# CONFIG_GPIO_LINE_MUX is not set
# CONFIG_GPIO_MOCKUP is not set
# CONFIG_GPIO_VIRTIO is not set
# CONFIG_GPIO_SIM is not set
# end of Virtual GPIO drivers

#
# GPIO Debugging utilities
#
# CONFIG_GPIO_SLOPPY_LOGIC_ANALYZER is not set
# CONFIG_GPIO_VIRTUSER is not set
# end of GPIO Debugging utilities

# CONFIG_W1 is not set
CONFIG_POWER_RESET=y
# CONFIG_POWER_RESET_GPIO is not set
# CONFIG_POWER_RESET_GPIO_RESTART is not set
# CONFIG_POWER_RESET_LTC2952 is not set
# CONFIG_POWER_RESET_MT6323 is not set
# CONFIG_POWER_RESET_REGULATOR is not set
# CONFIG_POWER_RESET_RESTART is not set
# CONFIG_POWER_RESET_VEXPRESS is not set
CONFIG_POWER_RESET_XGENE=y
CONFIG_POWER_RESET_SYSCON=y
CONFIG_POWER_RESET_SYSCON_POWEROFF=y
CONFIG_REBOOT_MODE=y
CONFIG_SYSCON_REBOOT_MODE=y
CONFIG_NVMEM_REBOOT_MODE=y
# CONFIG_POWER_RESET_QEMU_VIRT_CTRL is not set
CONFIG_POWER_SEQUENCING=y
CONFIG_POWER_SEQUENCING_QCOM_WCN=y
# CONFIG_POWER_SEQUENCING_PCIE_M2 is not set
CONFIG_POWER_SUPPLY=y
# CONFIG_POWER_SUPPLY_DEBUG is not set
CONFIG_POWER_SUPPLY_HWMON=y
# CONFIG_GENERIC_ADC_BATTERY is not set
# CONFIG_IP5XXX_POWER is not set
# CONFIG_TEST_POWER is not set
# CONFIG_CHARGER_ADP5061 is not set
# CONFIG_BATTERY_CHAGALL is not set
# CONFIG_BATTERY_CW2015 is not set
# CONFIG_BATTERY_DS2780 is not set
# CONFIG_BATTERY_DS2781 is not set
# CONFIG_BATTERY_DS2782 is not set
CONFIG_BATTERY_QCOM_BATTMGR=y
# CONFIG_BATTERY_SAMSUNG_SDI is not set
# CONFIG_BATTERY_S2MU005 is not set
CONFIG_BATTERY_SBS=y
# CONFIG_CHARGER_SBS is not set
# CONFIG_MANAGER_SBS is not set
CONFIG_BATTERY_BQ27XXX=y
CONFIG_BATTERY_BQ27XXX_I2C=y
# CONFIG_BATTERY_BQ27XXX_DT_UPDATES_NVM is not set
# CONFIG_AXP20X_POWER is not set
# CONFIG_BATTERY_MAX17040 is not set
CONFIG_BATTERY_MAX17042=y
# CONFIG_BATTERY_MAX1720X is not set
CONFIG_CHARGER_ISP1704=y
# CONFIG_CHARGER_MAX8903 is not set
# CONFIG_CHARGER_TWL4030 is not set
# CONFIG_CHARGER_TWL6030 is not set
# CONFIG_CHARGER_LP8727 is not set
# CONFIG_CHARGER_GPIO is not set
# CONFIG_CHARGER_MANAGER is not set
# CONFIG_CHARGER_LT3651 is not set
# CONFIG_CHARGER_LTC4162L is not set
# CONFIG_CHARGER_DETECTOR_MAX14656 is not set
CONFIG_CHARGER_MAX77759=y
# CONFIG_CHARGER_MAX77976 is not set
# CONFIG_CHARGER_MAX8971 is not set
CONFIG_CHARGER_MT6360=y
# CONFIG_CHARGER_MT6370 is not set
# CONFIG_CHARGER_BQ2415X is not set
CONFIG_CHARGER_BQ24190=y
# CONFIG_CHARGER_BQ24257 is not set
# CONFIG_CHARGER_BQ24735 is not set
# CONFIG_CHARGER_BQ2515X is not set
CONFIG_CHARGER_BQ25890=y
CONFIG_CHARGER_BQ25980=y
# CONFIG_CHARGER_BQ256XX is not set
CONFIG_CHARGER_RK817=y
# CONFIG_CHARGER_SMB347 is not set
# CONFIG_BATTERY_GAUGE_LTC2941 is not set
# CONFIG_BATTERY_GOLDFISH is not set
# CONFIG_BATTERY_RT5033 is not set
# CONFIG_CHARGER_RT9455 is not set
# CONFIG_CHARGER_RT9467 is not set
# CONFIG_CHARGER_RT9471 is not set
# CONFIG_CHARGER_RT9756 is not set
# CONFIG_FUEL_GAUGE_STC3117 is not set
# CONFIG_CHARGER_UCS1002 is not set
# CONFIG_CHARGER_BD99954 is not set
# CONFIG_BATTERY_SURFACE is not set
# CONFIG_CHARGER_SURFACE is not set
# CONFIG_BATTERY_UG3105 is not set
# CONFIG_FUEL_GAUGE_MM8013 is not set
CONFIG_HWMON=y
# CONFIG_HWMON_DEBUG_CHIP is not set

#
# Native drivers
#
# CONFIG_SENSORS_AD7314 is not set
# CONFIG_SENSORS_AD7414 is not set
# CONFIG_SENSORS_AD7418 is not set
# CONFIG_SENSORS_ADM1025 is not set
# CONFIG_SENSORS_ADM1026 is not set
# CONFIG_SENSORS_ADM1029 is not set
# CONFIG_SENSORS_ADM1031 is not set
# CONFIG_SENSORS_ADM1177 is not set
# CONFIG_SENSORS_ADM9240 is not set
# CONFIG_SENSORS_ADT7310 is not set
# CONFIG_SENSORS_ADT7410 is not set
# CONFIG_SENSORS_ADT7411 is not set
# CONFIG_SENSORS_ADT7462 is not set
# CONFIG_SENSORS_ADT7470 is not set
# CONFIG_SENSORS_ADT7475 is not set
# CONFIG_SENSORS_AHT10 is not set
CONFIG_SENSORS_AQUACOMPUTER_D5NEXT=y
# CONFIG_SENSORS_AS370 is not set
# CONFIG_SENSORS_ASC7621 is not set
# CONFIG_SENSORS_ASUS_ROG_RYUJIN is not set
# CONFIG_SENSORS_AXI_FAN_CONTROL is not set
CONFIG_SENSORS_ARM_SCMI=y
CONFIG_SENSORS_ARM_SCPI=y
# CONFIG_SENSORS_ATXP1 is not set
# CONFIG_SENSORS_CHIPCAP2 is not set
CONFIG_SENSORS_CORSAIR_CPRO=y
CONFIG_SENSORS_CORSAIR_PSU=y
# CONFIG_SENSORS_DRIVETEMP is not set
# CONFIG_SENSORS_DS620 is not set
# CONFIG_SENSORS_DS1621 is not set
# CONFIG_SENSORS_I5K_AMB is not set
# CONFIG_SENSORS_F71805F is not set
# CONFIG_SENSORS_F71882FG is not set
# CONFIG_SENSORS_F75375S is not set
# CONFIG_SENSORS_FTSTEUTATES is not set
CONFIG_SENSORS_GIGABYTE_WATERFORCE=y
# CONFIG_SENSORS_GL518SM is not set
# CONFIG_SENSORS_GL520SM is not set
# CONFIG_SENSORS_G760A is not set
# CONFIG_SENSORS_G762 is not set
CONFIG_SENSORS_GPIO_FAN=y
# CONFIG_SENSORS_HIH6130 is not set
# CONFIG_SENSORS_HS3001 is not set
# CONFIG_SENSORS_HTU31 is not set
# CONFIG_SENSORS_IBMAEM is not set
# CONFIG_SENSORS_IBMPEX is not set
# CONFIG_SENSORS_IIO_HWMON is not set
# CONFIG_SENSORS_ISL28022 is not set
# CONFIG_SENSORS_IT87 is not set
CONFIG_SENSORS_JC42=y
CONFIG_SENSORS_POWERZ=y
# CONFIG_SENSORS_POWR1220 is not set
# CONFIG_SENSORS_LINEAGE is not set
# CONFIG_SENSORS_LTC2945 is not set
# CONFIG_SENSORS_LTC2947_I2C is not set
# CONFIG_SENSORS_LTC2947_SPI is not set
# CONFIG_SENSORS_LTC2990 is not set
# CONFIG_SENSORS_LTC2991 is not set
# CONFIG_SENSORS_LTC2992 is not set
# CONFIG_SENSORS_LTC4151 is not set
# CONFIG_SENSORS_LTC4215 is not set
# CONFIG_SENSORS_LTC4222 is not set
# CONFIG_SENSORS_LTC4245 is not set
# CONFIG_SENSORS_LTC4260 is not set
# CONFIG_SENSORS_LTC4261 is not set
# CONFIG_SENSORS_LTC4282 is not set
# CONFIG_SENSORS_MAX1111 is not set
# CONFIG_SENSORS_MAX127 is not set
# CONFIG_SENSORS_MAX16065 is not set
# CONFIG_SENSORS_MAX1619 is not set
# CONFIG_SENSORS_MAX1668 is not set
# CONFIG_SENSORS_MAX197 is not set
# CONFIG_SENSORS_MAX31722 is not set
# CONFIG_SENSORS_MAX31730 is not set
# CONFIG_SENSORS_MAX31760 is not set
# CONFIG_MAX31827 is not set
# CONFIG_SENSORS_MAX6620 is not set
# CONFIG_SENSORS_MAX6621 is not set
# CONFIG_SENSORS_MAX6639 is not set
# CONFIG_SENSORS_MAX6650 is not set
# CONFIG_SENSORS_MAX6697 is not set
# CONFIG_SENSORS_MAX31790 is not set
# CONFIG_SENSORS_MC34VR500 is not set
# CONFIG_SENSORS_MCP3021 is not set
# CONFIG_SENSORS_MCP9982 is not set
# CONFIG_SENSORS_TC654 is not set
# CONFIG_SENSORS_TPS23861 is not set
# CONFIG_SENSORS_MR75203 is not set
# CONFIG_SENSORS_ADCXX is not set
# CONFIG_SENSORS_LM63 is not set
# CONFIG_SENSORS_LM70 is not set
# CONFIG_SENSORS_LM73 is not set
CONFIG_SENSORS_LM75=y
# CONFIG_SENSORS_LM77 is not set
# CONFIG_SENSORS_LM78 is not set
# CONFIG_SENSORS_LM80 is not set
# CONFIG_SENSORS_LM83 is not set
# CONFIG_SENSORS_LM85 is not set
# CONFIG_SENSORS_LM87 is not set
CONFIG_SENSORS_LM90=y
# CONFIG_SENSORS_LM92 is not set
# CONFIG_SENSORS_LM93 is not set
# CONFIG_SENSORS_LM95234 is not set
# CONFIG_SENSORS_LM95241 is not set
# CONFIG_SENSORS_LM95245 is not set
# CONFIG_SENSORS_PC87360 is not set
# CONFIG_SENSORS_PC87427 is not set
# CONFIG_SENSORS_NTC_THERMISTOR is not set
# CONFIG_SENSORS_NCT6683 is not set
# CONFIG_SENSORS_NCT6775 is not set
# CONFIG_SENSORS_NCT6775_I2C is not set
# CONFIG_SENSORS_NCT7363 is not set
# CONFIG_SENSORS_NCT7802 is not set
# CONFIG_SENSORS_NCT7904 is not set
# CONFIG_SENSORS_NPCM7XX is not set
CONFIG_SENSORS_NZXT_KRAKEN2=y
# CONFIG_SENSORS_NZXT_KRAKEN3 is not set
CONFIG_SENSORS_NZXT_SMART2=y
# CONFIG_SENSORS_OCC_P8_I2C is not set
# CONFIG_SENSORS_PCF8591 is not set
# CONFIG_PMBUS is not set
# CONFIG_SENSORS_PT5161L is not set
CONFIG_SENSORS_PWM_FAN=y
# CONFIG_SENSORS_SBTSI is not set
# CONFIG_SENSORS_SHT15 is not set
# CONFIG_SENSORS_SHT21 is not set
# CONFIG_SENSORS_SHT3x is not set
# CONFIG_SENSORS_SHT4x is not set
# CONFIG_SENSORS_SHTC1 is not set
# CONFIG_SENSORS_SIS5595 is not set
# CONFIG_SENSORS_DME1737 is not set
# CONFIG_SENSORS_EMC1403 is not set
# CONFIG_SENSORS_EMC2103 is not set
# CONFIG_SENSORS_EMC2305 is not set
# CONFIG_SENSORS_EMC6W201 is not set
# CONFIG_SENSORS_SMSC47M1 is not set
# CONFIG_SENSORS_SMSC47M192 is not set
# CONFIG_SENSORS_SMSC47B397 is not set
# CONFIG_SENSORS_SCH5627 is not set
# CONFIG_SENSORS_SCH5636 is not set
# CONFIG_SENSORS_STTS751 is not set
# CONFIG_SENSORS_SURFACE_FAN is not set
# CONFIG_SENSORS_SURFACE_TEMP is not set
# CONFIG_SENSORS_ADC128D818 is not set
# CONFIG_SENSORS_ADS7828 is not set
# CONFIG_SENSORS_ADS7871 is not set
# CONFIG_SENSORS_AMC6821 is not set
# CONFIG_SENSORS_INA209 is not set
CONFIG_SENSORS_INA2XX=y
# CONFIG_SENSORS_INA238 is not set
CONFIG_SENSORS_INA3221=y
# CONFIG_SENSORS_SPD5118 is not set
# CONFIG_SENSORS_TC74 is not set
# CONFIG_SENSORS_THMC50 is not set
CONFIG_SENSORS_TMP102=y
# CONFIG_SENSORS_TMP103 is not set
# CONFIG_SENSORS_TMP108 is not set
# CONFIG_SENSORS_TMP401 is not set
# CONFIG_SENSORS_TMP421 is not set
# CONFIG_SENSORS_TMP464 is not set
# CONFIG_SENSORS_TMP513 is not set
# CONFIG_SENSORS_TSC1641 is not set
# CONFIG_SENSORS_VEXPRESS is not set
# CONFIG_SENSORS_VIA686A is not set
# CONFIG_SENSORS_VT1211 is not set
# CONFIG_SENSORS_VT8231 is not set
# CONFIG_SENSORS_W83773G is not set
# CONFIG_SENSORS_W83781D is not set
# CONFIG_SENSORS_W83791D is not set
# CONFIG_SENSORS_W83792D is not set
# CONFIG_SENSORS_W83793 is not set
# CONFIG_SENSORS_W83795 is not set
# CONFIG_SENSORS_W83L785TS is not set
# CONFIG_SENSORS_W83L786NG is not set
# CONFIG_SENSORS_W83627HF is not set
# CONFIG_SENSORS_W83627EHF is not set
# CONFIG_SENSORS_XGENE is not set
# CONFIG_SENSORS_YOGAFAN is not set

#
# ACPI drivers
#
# CONFIG_SENSORS_ACPI_POWER is not set
CONFIG_THERMAL=y
CONFIG_THERMAL_NETLINK=y
# CONFIG_THERMAL_STATISTICS is not set
# CONFIG_THERMAL_DEBUGFS is not set
# CONFIG_THERMAL_CORE_TESTING is not set
CONFIG_THERMAL_EMERGENCY_POWEROFF_DELAY_MS=0
CONFIG_THERMAL_HWMON=y
CONFIG_THERMAL_OF=y
CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE=y
# CONFIG_THERMAL_DEFAULT_GOV_FAIR_SHARE is not set
# CONFIG_THERMAL_DEFAULT_GOV_USER_SPACE is not set
# CONFIG_THERMAL_DEFAULT_GOV_POWER_ALLOCATOR is not set
# CONFIG_THERMAL_GOV_FAIR_SHARE is not set
CONFIG_THERMAL_GOV_STEP_WISE=y
# CONFIG_THERMAL_GOV_BANG_BANG is not set
# CONFIG_THERMAL_GOV_USER_SPACE is not set
CONFIG_THERMAL_GOV_POWER_ALLOCATOR=y
CONFIG_CPU_THERMAL=y
CONFIG_CPU_FREQ_THERMAL=y
CONFIG_DEVFREQ_THERMAL=y
# CONFIG_PCIE_THERMAL is not set
CONFIG_THERMAL_EMULATION=y
# CONFIG_THERMAL_MMIO is not set
# CONFIG_MAX77620_THERMAL is not set
# CONFIG_DA9062_THERMAL is not set
CONFIG_GENERIC_ADC_THERMAL=y
CONFIG_WATCHDOG=y
CONFIG_WATCHDOG_CORE=y
# CONFIG_WATCHDOG_NOWAYOUT is not set
CONFIG_WATCHDOG_HANDLE_BOOT_ENABLED=y
CONFIG_WATCHDOG_OPEN_TIMEOUT=0
# CONFIG_WATCHDOG_SYSFS is not set
# CONFIG_WATCHDOG_HRTIMER_PRETIMEOUT is not set

#
# Watchdog Pretimeout Governors
#
# CONFIG_WATCHDOG_PRETIMEOUT_GOV is not set

#
# Watchdog Device Drivers
#
# CONFIG_SOFT_WATCHDOG is not set
# CONFIG_DA9062_WATCHDOG is not set
# CONFIG_GPIO_WATCHDOG is not set
# CONFIG_WDAT_WDT is not set
# CONFIG_XILINX_WATCHDOG is not set
# CONFIG_XILINX_WINDOW_WATCHDOG is not set
# CONFIG_ZIIRAVE_WATCHDOG is not set
CONFIG_ARM_SP805_WATCHDOG=y
CONFIG_ARM_SBSA_WATCHDOG=y
# CONFIG_CADENCE_WATCHDOG is not set
CONFIG_DW_WATCHDOG=y
# CONFIG_TWL4030_WATCHDOG is not set
# CONFIG_MAX63XX_WATCHDOG is not set
# CONFIG_MAX77620_WATCHDOG is not set
# CONFIG_RETU_WATCHDOG is not set
CONFIG_ARM_SMC_WATCHDOG=y
# CONFIG_ALIM7101_WDT is not set
# CONFIG_I6300ESB_WDT is not set
# CONFIG_HP_WATCHDOG is not set
# CONFIG_NIC7018_WDT is not set
# CONFIG_MEN_A21_WDT is not set

#
# PCI-based Watchdog Cards
#
# CONFIG_PCIPCWATCHDOG is not set
# CONFIG_WDTPCI is not set

#
# USB-based Watchdog Cards
#
CONFIG_USBPCWATCHDOG=y
CONFIG_SSB_POSSIBLE=y
CONFIG_SSB=y
CONFIG_SSB_PCIHOST_POSSIBLE=y
# CONFIG_SSB_PCIHOST is not set
CONFIG_SSB_PCMCIAHOST_POSSIBLE=y
# CONFIG_SSB_PCMCIAHOST is not set
CONFIG_SSB_SDIOHOST_POSSIBLE=y
# CONFIG_SSB_SDIOHOST is not set
# CONFIG_SSB_DRIVER_GPIO is not set
CONFIG_BCMA_POSSIBLE=y
CONFIG_BCMA=y
CONFIG_BCMA_HOST_PCI_POSSIBLE=y
# CONFIG_BCMA_HOST_PCI is not set
# CONFIG_BCMA_HOST_SOC is not set
# CONFIG_BCMA_DRIVER_PCI is not set
# CONFIG_BCMA_DRIVER_GMAC_CMN is not set
# CONFIG_BCMA_DRIVER_GPIO is not set
# CONFIG_BCMA_DEBUG is not set

#
# Multifunction device drivers
#
CONFIG_MFD_CORE=y
CONFIG_MFD_ADP5585=y
# CONFIG_MFD_ACT8945A is not set
# CONFIG_MFD_AS3711 is not set
# CONFIG_MFD_SMPRO is not set
# CONFIG_MFD_AS3722 is not set
# CONFIG_PMIC_ADP5520 is not set
# CONFIG_MFD_AAT2870_CORE is not set
# CONFIG_MFD_ATMEL_FLEXCOM is not set
# CONFIG_MFD_ATMEL_HLCDC is not set
# CONFIG_MFD_BCM590XX is not set
CONFIG_MFD_BD9571MWV=y
CONFIG_MFD_AXP20X=y
CONFIG_MFD_AXP20X_I2C=y
# CONFIG_MFD_CS40L50_I2C is not set
# CONFIG_MFD_CS40L50_SPI is not set
# CONFIG_MFD_CS42L43_I2C is not set
# CONFIG_MFD_LOCHNAGAR is not set
# CONFIG_MFD_MADERA is not set
# CONFIG_PMIC_DA903X is not set
# CONFIG_MFD_DA9052_SPI is not set
# CONFIG_MFD_DA9052_I2C is not set
# CONFIG_MFD_DA9055 is not set
CONFIG_MFD_DA9062=y
# CONFIG_MFD_DA9063 is not set
# CONFIG_MFD_DA9150 is not set
CONFIG_MFD_DLN2=y
# CONFIG_MFD_GATEWORKS_GSC is not set
# CONFIG_MFD_MC13XXX_SPI is not set
# CONFIG_MFD_MC13XXX_I2C is not set
# CONFIG_MFD_MP2629 is not set
# CONFIG_MFD_PF1550 is not set
CONFIG_MFD_HI6421_PMIC=y
# CONFIG_MFD_HI6421_SPMI is not set
CONFIG_LPC_ICH=y
# CONFIG_LPC_SCH is not set
# CONFIG_MFD_IQS62X is not set
# CONFIG_MFD_JANZ_CMODIO is not set
# CONFIG_MFD_KEMPLD is not set
# CONFIG_MFD_88PM800 is not set
# CONFIG_MFD_88PM805 is not set
# CONFIG_MFD_88PM860X is not set
# CONFIG_MFD_88PM886_PMIC is not set
# CONFIG_MFD_MAX5970 is not set
# CONFIG_MFD_MAX14577 is not set
# CONFIG_MFD_MAX77541 is not set
CONFIG_MFD_MAX77620=y
# CONFIG_MFD_MAX77650 is not set
# CONFIG_MFD_MAX77686 is not set
# CONFIG_MFD_MAX77693 is not set
# CONFIG_MFD_MAX77705 is not set
# CONFIG_MFD_MAX77714 is not set
CONFIG_MFD_MAX77759=y
# CONFIG_MFD_MAX77843 is not set
# CONFIG_MFD_MAX8907 is not set
# CONFIG_MFD_MAX8925 is not set
# CONFIG_MFD_MAX8997 is not set
# CONFIG_MFD_MAX8998 is not set
CONFIG_MFD_MT6360=y
CONFIG_MFD_MT6370=y
CONFIG_MFD_MT6397=y
# CONFIG_MFD_MENF21BMC is not set
# CONFIG_MFD_NCT6694 is not set
# CONFIG_MFD_OCELOT is not set
# CONFIG_EZX_PCAP is not set
# CONFIG_MFD_CPCAP is not set
CONFIG_MFD_VIPERBOARD=y
# CONFIG_MFD_NTXEC is not set
CONFIG_MFD_RETU=y
# CONFIG_MFD_SY7636A is not set
# CONFIG_MFD_RDC321X is not set
# CONFIG_MFD_RT4831 is not set
# CONFIG_MFD_RT5033 is not set
# CONFIG_MFD_RT5120 is not set
# CONFIG_MFD_RC5T583 is not set
CONFIG_MFD_RK8XX=y
CONFIG_MFD_RK8XX_I2C=y
CONFIG_MFD_RK8XX_SPI=y
# CONFIG_MFD_RN5T618 is not set
CONFIG_MFD_SEC_CORE=y
CONFIG_MFD_SEC_I2C=y
# CONFIG_MFD_SI476X_CORE is not set
# CONFIG_MFD_SM501 is not set
# CONFIG_MFD_SKY81452 is not set
# CONFIG_MFD_STMPE is not set
CONFIG_MFD_SYSCON=y
# CONFIG_MFD_LP3943 is not set
# CONFIG_MFD_LP8788 is not set
# CONFIG_MFD_TI_LMU is not set
# CONFIG_MFD_BQ257XX is not set
# CONFIG_MFD_PALMAS is not set
# CONFIG_TPS6105X is not set
# CONFIG_TPS65010 is not set
# CONFIG_TPS6507X is not set
# CONFIG_MFD_TPS65086 is not set
# CONFIG_MFD_TPS65090 is not set
# CONFIG_MFD_TPS65217 is not set
CONFIG_MFD_TI_LP873X=y
# CONFIG_MFD_TI_LP87565 is not set
# CONFIG_MFD_TPS65218 is not set
CONFIG_MFD_TPS65219=y
# CONFIG_MFD_TPS6586X is not set
# CONFIG_MFD_TPS65910 is not set
# CONFIG_MFD_TPS65912_I2C is not set
# CONFIG_MFD_TPS65912_SPI is not set
CONFIG_MFD_TPS6594=y
CONFIG_MFD_TPS6594_I2C=y
# CONFIG_MFD_TPS6594_SPI is not set
CONFIG_TWL4030_CORE=y
# CONFIG_MFD_TWL4030_AUDIO is not set
# CONFIG_TWL6040_CORE is not set
# CONFIG_MFD_LM3533 is not set
# CONFIG_MFD_TC3589X is not set
# CONFIG_MFD_TQMX86 is not set
# CONFIG_MFD_VX855 is not set
# CONFIG_MFD_ARIZONA_I2C is not set
# CONFIG_MFD_ARIZONA_SPI is not set
# CONFIG_MFD_WM8400 is not set
# CONFIG_MFD_WM831X_I2C is not set
# CONFIG_MFD_WM831X_SPI is not set
# CONFIG_MFD_WM8350_I2C is not set
CONFIG_MFD_WM8994=y
CONFIG_MFD_ROHM_BD718XX=y
# CONFIG_MFD_ROHM_BD71828 is not set
# CONFIG_MFD_ROHM_BD957XMUF is not set
# CONFIG_MFD_ROHM_BD96801 is not set
# CONFIG_MFD_STPMIC1 is not set
# CONFIG_MFD_STMFX is not set
CONFIG_MFD_WCD934X=y
# CONFIG_MFD_ATC260X_I2C is not set
CONFIG_MFD_QCOM_PM8008=y
CONFIG_MFD_VEXPRESS_SYSREG=y
# CONFIG_RAVE_SP_CORE is not set
# CONFIG_MFD_INTEL_M10_BMC_SPI is not set
# CONFIG_MFD_LS2K_BMC_CORE is not set
# CONFIG_MFD_QNAP_MCU is not set
# CONFIG_MFD_RSMU_I2C is not set
# CONFIG_MFD_RSMU_SPI is not set
# CONFIG_MFD_MAX7360 is not set
# end of Multifunction device drivers

CONFIG_REGULATOR=y
# CONFIG_REGULATOR_DEBUG is not set
CONFIG_REGULATOR_FIXED_VOLTAGE=y
# CONFIG_REGULATOR_VIRTUAL_CONSUMER is not set
# CONFIG_REGULATOR_USERSPACE_CONSUMER is not set
# CONFIG_REGULATOR_NETLINK_EVENTS is not set
# CONFIG_REGULATOR_88PG86X is not set
# CONFIG_REGULATOR_ACT8865 is not set
# CONFIG_REGULATOR_AD5398 is not set
# CONFIG_REGULATOR_ADP5055 is not set
CONFIG_REGULATOR_ARM_SCMI=y
# CONFIG_REGULATOR_AW37503 is not set
CONFIG_REGULATOR_AXP20X=y
CONFIG_REGULATOR_BD718XX=y
CONFIG_REGULATOR_BD9571MWV=y
# CONFIG_REGULATOR_DA9062 is not set
# CONFIG_REGULATOR_DA9121 is not set
# CONFIG_REGULATOR_DA9210 is not set
CONFIG_REGULATOR_DA9211=y
CONFIG_REGULATOR_FAN53555=y
# CONFIG_REGULATOR_FAN53880 is not set
CONFIG_REGULATOR_GPIO=y
# CONFIG_REGULATOR_HI6421 is not set
CONFIG_REGULATOR_HI6421V530=y
# CONFIG_REGULATOR_ISL9305 is not set
# CONFIG_REGULATOR_ISL6271A is not set
# CONFIG_REGULATOR_FP9931 is not set
# CONFIG_REGULATOR_LP3971 is not set
# CONFIG_REGULATOR_LP3972 is not set
# CONFIG_REGULATOR_LP872X is not set
CONFIG_REGULATOR_LP873X=y
# CONFIG_REGULATOR_LP8755 is not set
# CONFIG_REGULATOR_LTC3589 is not set
# CONFIG_REGULATOR_LTC3676 is not set
# CONFIG_REGULATOR_MAX1586 is not set
# CONFIG_REGULATOR_MAX77503 is not set
CONFIG_REGULATOR_MAX77620=y
# CONFIG_REGULATOR_MAX77675 is not set
# CONFIG_REGULATOR_MAX77857 is not set
# CONFIG_REGULATOR_MAX8649 is not set
# CONFIG_REGULATOR_MAX8660 is not set
# CONFIG_REGULATOR_MAX8893 is not set
# CONFIG_REGULATOR_MAX8952 is not set
CONFIG_REGULATOR_MAX8973=y
# CONFIG_REGULATOR_MAX20086 is not set
CONFIG_REGULATOR_MAX20411=y
# CONFIG_REGULATOR_MAX77826 is not set
# CONFIG_REGULATOR_MAX77838 is not set
# CONFIG_REGULATOR_MCP16502 is not set
# CONFIG_REGULATOR_MP5416 is not set
CONFIG_REGULATOR_MP8859=y
# CONFIG_REGULATOR_MP886X is not set
# CONFIG_REGULATOR_MPQ7920 is not set
# CONFIG_REGULATOR_MT6311 is not set
CONFIG_REGULATOR_MT6315=y
# CONFIG_REGULATOR_MT6316 is not set
# CONFIG_REGULATOR_MT6323 is not set
# CONFIG_REGULATOR_MT6331 is not set
# CONFIG_REGULATOR_MT6332 is not set
CONFIG_REGULATOR_MT6357=y
CONFIG_REGULATOR_MT6358=y
CONFIG_REGULATOR_MT6359=y
CONFIG_REGULATOR_MT6360=y
# CONFIG_REGULATOR_MT6363 is not set
# CONFIG_REGULATOR_MT6370 is not set
CONFIG_REGULATOR_MT6397=y
CONFIG_REGULATOR_PCA9450=y
# CONFIG_REGULATOR_PF9453 is not set
# CONFIG_REGULATOR_PF0900 is not set
# CONFIG_REGULATOR_PF530X is not set
CONFIG_REGULATOR_PF8X00=y
CONFIG_REGULATOR_PFUZE100=y
# CONFIG_REGULATOR_PV88060 is not set
# CONFIG_REGULATOR_PV88080 is not set
# CONFIG_REGULATOR_PV88090 is not set
CONFIG_REGULATOR_PWM=y
CONFIG_REGULATOR_QCOM_PM8008=y
CONFIG_REGULATOR_QCOM_SPMI=y
CONFIG_REGULATOR_QCOM_USB_VBUS=y
CONFIG_REGULATOR_RAA215300=y
# CONFIG_REGULATOR_RASPBERRYPI_TOUCHSCREEN_ATTINY is not set
# CONFIG_REGULATOR_RASPBERRYPI_TOUCHSCREEN_V2 is not set
CONFIG_REGULATOR_RK808=y
CONFIG_REGULATOR_ROHM=y
# CONFIG_REGULATOR_RT4801 is not set
# CONFIG_REGULATOR_RT4803 is not set
# CONFIG_REGULATOR_RT5133 is not set
# CONFIG_REGULATOR_RT5190A is not set
# CONFIG_REGULATOR_RT5739 is not set
# CONFIG_REGULATOR_RT5759 is not set
# CONFIG_REGULATOR_RT6160 is not set
# CONFIG_REGULATOR_RT6190 is not set
# CONFIG_REGULATOR_RT6245 is not set
# CONFIG_REGULATOR_RT8092 is not set
# CONFIG_REGULATOR_RTQ2134 is not set
# CONFIG_REGULATOR_RTMV20 is not set
# CONFIG_REGULATOR_RTQ6752 is not set
# CONFIG_REGULATOR_RTQ2208 is not set
# CONFIG_REGULATOR_S2DOS05 is not set
# CONFIG_REGULATOR_S2MPA01 is not set
CONFIG_REGULATOR_S2MPS11=y
# CONFIG_REGULATOR_S5M8767 is not set
# CONFIG_REGULATOR_SLG51000 is not set
# CONFIG_REGULATOR_SY8106A is not set
# CONFIG_REGULATOR_SY8824X is not set
# CONFIG_REGULATOR_SY8827N is not set
# CONFIG_REGULATOR_TPS51632 is not set
# CONFIG_REGULATOR_TPS62360 is not set
# CONFIG_REGULATOR_TPS6286X is not set
# CONFIG_REGULATOR_TPS6287X is not set
# CONFIG_REGULATOR_TPS65023 is not set
# CONFIG_REGULATOR_TPS6507X is not set
CONFIG_REGULATOR_TPS65132=y
# CONFIG_REGULATOR_TPS65185 is not set
CONFIG_REGULATOR_TPS65219=y
CONFIG_REGULATOR_TPS6594=y
# CONFIG_REGULATOR_TPS6524X is not set
CONFIG_REGULATOR_TWL4030=y
CONFIG_REGULATOR_VCTRL=y
# CONFIG_REGULATOR_VEXPRESS is not set
# CONFIG_REGULATOR_WM8994 is not set
# CONFIG_REGULATOR_QCOM_LABIBB is not set
CONFIG_RC_CORE=y
# CONFIG_LIRC is not set
CONFIG_RC_MAP=y
CONFIG_RC_DECODERS=y
# CONFIG_IR_IMON_DECODER is not set
# CONFIG_IR_JVC_DECODER is not set
# CONFIG_IR_MCE_KBD_DECODER is not set
# CONFIG_IR_NEC_DECODER is not set
# CONFIG_IR_RC5_DECODER is not set
# CONFIG_IR_RC6_DECODER is not set
# CONFIG_IR_RCMM_DECODER is not set
# CONFIG_IR_SANYO_DECODER is not set
# CONFIG_IR_SHARP_DECODER is not set
# CONFIG_IR_SONY_DECODER is not set
# CONFIG_IR_XMP_DECODER is not set
CONFIG_RC_DEVICES=y
# CONFIG_IR_ENE is not set
# CONFIG_IR_FINTEK is not set
CONFIG_IR_GPIO_CIR=y
# CONFIG_IR_HIX5HD2 is not set
CONFIG_IR_IGORPLUGUSB=y
CONFIG_IR_IGUANA=y
CONFIG_IR_IMON=y
CONFIG_IR_IMON_RAW=y
# CONFIG_IR_ITE_CIR is not set
CONFIG_IR_MCEUSB=y
# CONFIG_IR_NUVOTON is not set
CONFIG_IR_REDRAT3=y
# CONFIG_IR_SERIAL is not set
CONFIG_IR_STREAMZAP=y
CONFIG_IR_TOY=y
CONFIG_IR_TTUSBIR=y
CONFIG_RC_ATI_REMOTE=y
# CONFIG_RC_LOOPBACK is not set
CONFIG_RC_XBOX_DVD=y
CONFIG_CEC_CORE=y
CONFIG_CEC_NOTIFIER=y

#
# CEC support
#
# CONFIG_MEDIA_CEC_RC is not set
CONFIG_MEDIA_CEC_SUPPORT=y
# CONFIG_CEC_CH7322 is not set
CONFIG_CEC_NXP_TDA9950=y
# CONFIG_CEC_GPIO is not set
# CONFIG_USB_EXTRON_DA_HD_4K_PLUS_CEC is not set
CONFIG_USB_PULSE8_CEC=y
CONFIG_USB_RAINSHADOW_CEC=y
# end of CEC support

CONFIG_MEDIA_SUPPORT=y
CONFIG_MEDIA_SUPPORT_FILTER=y
# CONFIG_MEDIA_SUBDRV_AUTOSELECT is not set

#
# Media device types
#
CONFIG_MEDIA_CAMERA_SUPPORT=y
CONFIG_MEDIA_ANALOG_TV_SUPPORT=y
CONFIG_MEDIA_DIGITAL_TV_SUPPORT=y
CONFIG_MEDIA_RADIO_SUPPORT=y
CONFIG_MEDIA_SDR_SUPPORT=y
CONFIG_MEDIA_PLATFORM_SUPPORT=y
CONFIG_MEDIA_TEST_SUPPORT=y
# end of Media device types

CONFIG_VIDEO_DEV=y
CONFIG_MEDIA_CONTROLLER=y
CONFIG_DVB_CORE=y

#
# Video4Linux options
#
CONFIG_VIDEO_V4L2_I2C=y
CONFIG_VIDEO_V4L2_SUBDEV_API=y
# CONFIG_VIDEO_ADV_DEBUG is not set
# CONFIG_VIDEO_FIXED_MINOR_RANGES is not set
CONFIG_VIDEO_TUNER=y
CONFIG_V4L2_MEM2MEM_DEV=y
# CONFIG_V4L2_FLASH_LED_CLASS is not set
CONFIG_V4L2_FWNODE=y
CONFIG_V4L2_ASYNC=y
CONFIG_V4L2_CCI=y
CONFIG_V4L2_CCI_I2C=y
# end of Video4Linux options

#
# Media controller options
#
CONFIG_MEDIA_CONTROLLER_DVB=y
# end of Media controller options

#
# Digital TV options
#
# CONFIG_DVB_MMAP is not set
# CONFIG_DVB_NET is not set
CONFIG_DVB_MAX_ADAPTERS=16
CONFIG_DVB_DYNAMIC_MINORS=y
# CONFIG_DVB_DEMUX_SECTION_LOSS_LOG is not set
# CONFIG_DVB_ULE_DEBUG is not set
# end of Digital TV options

#
# Media drivers
#

#
# Drivers filtered as selected at 'Filter media drivers'
#

#
# Media drivers
#
CONFIG_MEDIA_USB_SUPPORT=y

#
# Webcam devices
#
CONFIG_USB_GSPCA=y
CONFIG_USB_GSPCA_BENQ=y
CONFIG_USB_GSPCA_CONEX=y
CONFIG_USB_GSPCA_CPIA1=y
CONFIG_USB_GSPCA_DTCS033=y
CONFIG_USB_GSPCA_ETOMS=y
CONFIG_USB_GSPCA_FINEPIX=y
CONFIG_USB_GSPCA_JEILINJ=y
CONFIG_USB_GSPCA_JL2005BCD=y
CONFIG_USB_GSPCA_KINECT=y
CONFIG_USB_GSPCA_KONICA=y
CONFIG_USB_GSPCA_MARS=y
CONFIG_USB_GSPCA_MR97310A=y
CONFIG_USB_GSPCA_NW80X=y
CONFIG_USB_GSPCA_OV519=y
CONFIG_USB_GSPCA_OV534=y
CONFIG_USB_GSPCA_OV534_9=y
CONFIG_USB_GSPCA_PAC207=y
CONFIG_USB_GSPCA_PAC7302=y
CONFIG_USB_GSPCA_PAC7311=y
CONFIG_USB_GSPCA_SE401=y
CONFIG_USB_GSPCA_SN9C2028=y
CONFIG_USB_GSPCA_SN9C20X=y
CONFIG_USB_GSPCA_SONIXB=y
CONFIG_USB_GSPCA_SONIXJ=y
CONFIG_USB_GSPCA_SPCA1528=y
CONFIG_USB_GSPCA_SPCA500=y
CONFIG_USB_GSPCA_SPCA501=y
CONFIG_USB_GSPCA_SPCA505=y
CONFIG_USB_GSPCA_SPCA506=y
CONFIG_USB_GSPCA_SPCA508=y
CONFIG_USB_GSPCA_SPCA561=y
CONFIG_USB_GSPCA_SQ905=y
CONFIG_USB_GSPCA_SQ905C=y
CONFIG_USB_GSPCA_SQ930X=y
CONFIG_USB_GSPCA_STK014=y
CONFIG_USB_GSPCA_STK1135=y
CONFIG_USB_GSPCA_STV0680=y
CONFIG_USB_GSPCA_SUNPLUS=y
CONFIG_USB_GSPCA_T613=y
CONFIG_USB_GSPCA_TOPRO=y
CONFIG_USB_GSPCA_TOUPTEK=y
CONFIG_USB_GSPCA_TV8532=y
CONFIG_USB_GSPCA_VC032X=y
CONFIG_USB_GSPCA_VICAM=y
CONFIG_USB_GSPCA_XIRLINK_CIT=y
CONFIG_USB_GSPCA_ZC3XX=y
CONFIG_USB_GL860=y
CONFIG_USB_M5602=y
CONFIG_USB_STV06XX=y
CONFIG_USB_PWC=y
# CONFIG_USB_PWC_DEBUG is not set
CONFIG_USB_PWC_INPUT_EVDEV=y
CONFIG_USB_S2255=y
CONFIG_USB_VIDEO_CLASS=y
CONFIG_USB_VIDEO_CLASS_INPUT_EVDEV=y

#
# Analog TV USB devices
#
CONFIG_VIDEO_HDPVR=y
CONFIG_VIDEO_PVRUSB2=y
CONFIG_VIDEO_PVRUSB2_SYSFS=y
CONFIG_VIDEO_PVRUSB2_DVB=y
# CONFIG_VIDEO_PVRUSB2_DEBUGIFC is not set
CONFIG_VIDEO_STK1160=y

#
# Analog/digital TV USB devices
#
CONFIG_VIDEO_AU0828=y
CONFIG_VIDEO_AU0828_V4L2=y
CONFIG_VIDEO_AU0828_RC=y
CONFIG_VIDEO_CX231XX=y
CONFIG_VIDEO_CX231XX_RC=y
CONFIG_VIDEO_CX231XX_DVB=y

#
# Digital TV USB devices
#
CONFIG_DVB_AS102=y
CONFIG_DVB_B2C2_FLEXCOP_USB=y
# CONFIG_DVB_B2C2_FLEXCOP_USB_DEBUG is not set
CONFIG_DVB_USB_V2=y
CONFIG_DVB_USB_AF9015=y
CONFIG_DVB_USB_AF9035=y
CONFIG_DVB_USB_ANYSEE=y
CONFIG_DVB_USB_AU6610=y
CONFIG_DVB_USB_AZ6007=y
CONFIG_DVB_USB_CE6230=y
CONFIG_DVB_USB_DVBSKY=y
CONFIG_DVB_USB_EC168=y
CONFIG_DVB_USB_GL861=y
CONFIG_DVB_USB_LME2510=y
CONFIG_DVB_USB_MXL111SF=y
CONFIG_DVB_USB_RTL28XXU=y
CONFIG_DVB_USB_ZD1301=y
CONFIG_DVB_USB=y
# CONFIG_DVB_USB_DEBUG is not set
CONFIG_DVB_USB_A800=y
CONFIG_DVB_USB_AF9005=y
CONFIG_DVB_USB_AF9005_REMOTE=y
CONFIG_DVB_USB_AZ6027=y
CONFIG_DVB_USB_CINERGY_T2=y
CONFIG_DVB_USB_CXUSB=y
CONFIG_DVB_USB_CXUSB_ANALOG=y
CONFIG_DVB_USB_DIB0700=y
CONFIG_DVB_USB_DIB3000MC=y
CONFIG_DVB_USB_DIBUSB_MB=y
# CONFIG_DVB_USB_DIBUSB_MB_FAULTY is not set
CONFIG_DVB_USB_DIBUSB_MC=y
CONFIG_DVB_USB_DIGITV=y
CONFIG_DVB_USB_DTT200U=y
CONFIG_DVB_USB_DTV5100=y
CONFIG_DVB_USB_DW2102=y
CONFIG_DVB_USB_GP8PSK=y
CONFIG_DVB_USB_M920X=y
CONFIG_DVB_USB_NOVA_T_USB2=y
CONFIG_DVB_USB_OPERA1=y
CONFIG_DVB_USB_PCTV452E=y
CONFIG_DVB_USB_TECHNISAT_USB2=y
CONFIG_DVB_USB_TTUSB2=y
CONFIG_DVB_USB_UMT_010=y
CONFIG_DVB_USB_VP702X=y
CONFIG_DVB_USB_VP7045=y
CONFIG_SMS_USB_DRV=y
CONFIG_DVB_TTUSB_BUDGET=y
CONFIG_DVB_TTUSB_DEC=y

#
# Webcam, TV (analog/digital) USB devices
#
CONFIG_VIDEO_EM28XX=y
CONFIG_VIDEO_EM28XX_V4L2=y
CONFIG_VIDEO_EM28XX_DVB=y
CONFIG_VIDEO_EM28XX_RC=y

#
# Software defined radio USB devices
#
CONFIG_USB_AIRSPY=y
CONFIG_USB_HACKRF=y
CONFIG_USB_MSI2500=y
# CONFIG_MEDIA_PCI_SUPPORT is not set
CONFIG_RADIO_ADAPTERS=y
# CONFIG_RADIO_MAXIRADIO is not set
# CONFIG_RADIO_SAA7706H is not set
CONFIG_RADIO_SHARK=y
CONFIG_RADIO_SHARK2=y
CONFIG_RADIO_SI4713=y
CONFIG_RADIO_TEA575X=y
# CONFIG_RADIO_TEA5764 is not set
# CONFIG_RADIO_TEF6862 is not set
CONFIG_USB_DSBR=y
CONFIG_USB_KEENE=y
CONFIG_USB_MA901=y
CONFIG_USB_MR800=y
CONFIG_USB_RAREMONO=y
CONFIG_RADIO_SI470X=y
CONFIG_USB_SI470X=y
# CONFIG_I2C_SI470X is not set
CONFIG_USB_SI4713=y
# CONFIG_PLATFORM_SI4713 is not set
CONFIG_I2C_SI4713=y
CONFIG_MEDIA_PLATFORM_DRIVERS=y
CONFIG_V4L_PLATFORM_DRIVERS=y
CONFIG_SDR_PLATFORM_DRIVERS=y
# CONFIG_DVB_PLATFORM_DRIVERS is not set
CONFIG_V4L_MEM2MEM_DRIVERS=y
# CONFIG_VIDEO_MEM2MEM_DEINTERLACE is not set
# CONFIG_VIDEO_MUX is not set

#
# Allegro DVT media platform drivers
#

#
# Amlogic media platform drivers
#

#
# Amphion drivers
#

#
# ARM media platform drivers
#
# CONFIG_VIDEO_MALI_C55 is not set

#
# Aspeed media platform drivers
#

#
# Atmel media platform drivers
#

#
# Cadence media platform drivers
#
# CONFIG_VIDEO_CADENCE_CSI2RX is not set
# CONFIG_VIDEO_CADENCE_CSI2TX is not set

#
# Chips&Media media platform drivers
#

#
# Intel media platform drivers
#

#
# Marvell media platform drivers
#
# CONFIG_VIDEO_CAFE_CCIC is not set

#
# Mediatek media platform drivers
#

#
# Microchip Technology, Inc. media platform drivers
#

#
# Nuvoton media platform drivers
#

#
# NVidia media platform drivers
#

#
# NXP media platform drivers
#

#
# Qualcomm media platform drivers
#

#
# Raspberry Pi media platform drivers
#
# CONFIG_VIDEO_RP1_CFE is not set

#
# Renesas media platform drivers
#

#
# Rockchip media platform drivers
#

#
# Samsung media platform drivers
#

#
# STMicroelectronics media platform drivers
#

#
# Sunxi media platform drivers
#

#
# Texas Instruments drivers
#

#
# Verisilicon media platform drivers
#

#
# VIA media platform drivers
#

#
# Xilinx media platform drivers
#
# CONFIG_VIDEO_XILINX is not set

#
# MMC/SDIO DVB adapters
#
CONFIG_SMS_SDIO_DRV=y
CONFIG_V4L_TEST_DRIVERS=y
CONFIG_VIDEO_VIM2M=y
CONFIG_VIDEO_VICODEC=y
CONFIG_VIDEO_VIMC=y
CONFIG_VIDEO_VIVID=y
CONFIG_VIDEO_VIVID_CEC=y
# CONFIG_VIDEO_VIVID_OSD is not set
CONFIG_VIDEO_VIVID_MAX_DEVS=64
# CONFIG_VIDEO_VISL is not set
CONFIG_DVB_TEST_DRIVERS=y
CONFIG_DVB_VIDTV=y

#
# FireWire (IEEE 1394) Adapters
#
# CONFIG_DVB_FIREDTV is not set
CONFIG_MEDIA_COMMON_OPTIONS=y

#
# common driver options
#
CONFIG_CYPRESS_FIRMWARE=y
CONFIG_TTPCI_EEPROM=y
CONFIG_UVC_COMMON=y
CONFIG_VIDEO_CX2341X=y
CONFIG_VIDEO_TVEEPROM=y
CONFIG_DVB_B2C2_FLEXCOP=y
CONFIG_SMS_SIANO_MDTV=y
CONFIG_SMS_SIANO_RC=y
CONFIG_SMS_SIANO_DEBUGFS=y
CONFIG_VIDEO_V4L2_TPG=y
CONFIG_VIDEOBUF2_CORE=y
CONFIG_VIDEOBUF2_V4L2=y
CONFIG_VIDEOBUF2_MEMOPS=y
CONFIG_VIDEOBUF2_DMA_CONTIG=y
CONFIG_VIDEOBUF2_VMALLOC=y
CONFIG_VIDEOBUF2_DMA_SG=y
# end of Media drivers

#
# Media ancillary drivers
#
CONFIG_MEDIA_ATTACH=y
CONFIG_VIDEO_IR_I2C=y
CONFIG_VIDEO_CAMERA_SENSOR=y
# CONFIG_VIDEO_ALVIUM_CSI2 is not set
# CONFIG_VIDEO_AR0521 is not set
# CONFIG_VIDEO_GC0308 is not set
# CONFIG_VIDEO_GC0310 is not set
# CONFIG_VIDEO_GC05A2 is not set
# CONFIG_VIDEO_GC08A3 is not set
# CONFIG_VIDEO_GC2145 is not set
# CONFIG_VIDEO_HI556 is not set
# CONFIG_VIDEO_HI846 is not set
# CONFIG_VIDEO_HI847 is not set
# CONFIG_VIDEO_IMX111 is not set
# CONFIG_VIDEO_IMX208 is not set
# CONFIG_VIDEO_IMX214 is not set
CONFIG_VIDEO_IMX219=y
# CONFIG_VIDEO_IMX258 is not set
# CONFIG_VIDEO_IMX274 is not set
# CONFIG_VIDEO_IMX283 is not set
# CONFIG_VIDEO_IMX290 is not set
# CONFIG_VIDEO_IMX296 is not set
# CONFIG_VIDEO_IMX319 is not set
# CONFIG_VIDEO_IMX334 is not set
# CONFIG_VIDEO_IMX335 is not set
# CONFIG_VIDEO_IMX355 is not set
CONFIG_VIDEO_IMX412=y
# CONFIG_VIDEO_IMX415 is not set
# CONFIG_VIDEO_MT9M001 is not set
# CONFIG_VIDEO_MT9M111 is not set
# CONFIG_VIDEO_MT9M114 is not set
# CONFIG_VIDEO_MT9P031 is not set
# CONFIG_VIDEO_MT9T112 is not set
# CONFIG_VIDEO_MT9V011 is not set
# CONFIG_VIDEO_MT9V032 is not set
# CONFIG_VIDEO_MT9V111 is not set
# CONFIG_VIDEO_OG01A1B is not set
# CONFIG_VIDEO_OG0VE1B is not set
# CONFIG_VIDEO_OS05B10 is not set
# CONFIG_VIDEO_OV01A10 is not set
# CONFIG_VIDEO_OV02A10 is not set
# CONFIG_VIDEO_OV02E10 is not set
# CONFIG_VIDEO_OV02C10 is not set
# CONFIG_VIDEO_OV08D10 is not set
# CONFIG_VIDEO_OV08X40 is not set
# CONFIG_VIDEO_OV13858 is not set
# CONFIG_VIDEO_OV13B10 is not set
# CONFIG_VIDEO_OV2640 is not set
# CONFIG_VIDEO_OV2659 is not set
# CONFIG_VIDEO_OV2680 is not set
# CONFIG_VIDEO_OV2685 is not set
# CONFIG_VIDEO_OV2732 is not set
# CONFIG_VIDEO_OV2735 is not set
# CONFIG_VIDEO_OV2740 is not set
# CONFIG_VIDEO_OV4689 is not set
CONFIG_VIDEO_OV5640=y
CONFIG_VIDEO_OV5645=y
# CONFIG_VIDEO_OV5647 is not set
# CONFIG_VIDEO_OV5648 is not set
# CONFIG_VIDEO_OV5670 is not set
# CONFIG_VIDEO_OV5675 is not set
# CONFIG_VIDEO_OV5693 is not set
# CONFIG_VIDEO_OV5695 is not set
# CONFIG_VIDEO_OV6211 is not set
# CONFIG_VIDEO_OV64A40 is not set
# CONFIG_VIDEO_OV7251 is not set
# CONFIG_VIDEO_OV7640 is not set
# CONFIG_VIDEO_OV7670 is not set
# CONFIG_VIDEO_OV772X is not set
# CONFIG_VIDEO_OV7740 is not set
# CONFIG_VIDEO_OV8856 is not set
# CONFIG_VIDEO_OV8858 is not set
# CONFIG_VIDEO_OV8865 is not set
# CONFIG_VIDEO_OV9282 is not set
# CONFIG_VIDEO_OV9640 is not set
# CONFIG_VIDEO_OV9650 is not set
# CONFIG_VIDEO_OV9734 is not set
# CONFIG_VIDEO_RDACM20 is not set
# CONFIG_VIDEO_RDACM21 is not set
# CONFIG_VIDEO_RJ54N1 is not set
# CONFIG_VIDEO_S5C73M3 is not set
# CONFIG_VIDEO_S5K3M5 is not set
# CONFIG_VIDEO_S5K5BAF is not set
# CONFIG_VIDEO_S5K6A3 is not set
# CONFIG_VIDEO_S5KJN1 is not set
# CONFIG_VIDEO_T4KA3 is not set
# CONFIG_VIDEO_VD55G1 is not set
# CONFIG_VIDEO_VD56G3 is not set
# CONFIG_VIDEO_VGXY61 is not set
# CONFIG_VIDEO_CCS is not set
# CONFIG_VIDEO_ET8EK8 is not set

#
# Camera ISPs
#
# CONFIG_VIDEO_THP7312 is not set
# end of Camera ISPs

CONFIG_VIDEO_CAMERA_LENS=y
# CONFIG_VIDEO_AD5820 is not set
# CONFIG_VIDEO_AK7375 is not set
# CONFIG_VIDEO_DW9714 is not set
# CONFIG_VIDEO_DW9719 is not set
# CONFIG_VIDEO_DW9768 is not set
# CONFIG_VIDEO_DW9807_VCM is not set

#
# Flash devices
#
# CONFIG_VIDEO_ADP1653 is not set
# CONFIG_VIDEO_LM3560 is not set
# CONFIG_VIDEO_LM3646 is not set
# end of Flash devices

#
# Audio decoders, processors and mixers
#
# CONFIG_VIDEO_CS3308 is not set
# CONFIG_VIDEO_CS5345 is not set
CONFIG_VIDEO_CS53L32A=y
CONFIG_VIDEO_MSP3400=y
# CONFIG_VIDEO_SONY_BTF_MPX is not set
# CONFIG_VIDEO_TDA7432 is not set
# CONFIG_VIDEO_TDA9840 is not set
# CONFIG_VIDEO_TEA6415C is not set
# CONFIG_VIDEO_TEA6420 is not set
# CONFIG_VIDEO_TLV320AIC23B is not set
# CONFIG_VIDEO_TVAUDIO is not set
# CONFIG_VIDEO_UDA1342 is not set
# CONFIG_VIDEO_VP27SMPX is not set
# CONFIG_VIDEO_WM8739 is not set
CONFIG_VIDEO_WM8775=y
# end of Audio decoders, processors and mixers

#
# RDS decoders
#
# CONFIG_VIDEO_SAA6588 is not set
# end of RDS decoders

#
# Video decoders
#
# CONFIG_VIDEO_ADV7180 is not set
# CONFIG_VIDEO_ADV7183 is not set
# CONFIG_VIDEO_ADV748X is not set
# CONFIG_VIDEO_ADV7604 is not set
# CONFIG_VIDEO_ADV7842 is not set
# CONFIG_VIDEO_BT819 is not set
# CONFIG_VIDEO_BT856 is not set
# CONFIG_VIDEO_BT866 is not set
# CONFIG_VIDEO_ISL7998X is not set
# CONFIG_VIDEO_LT6911UXE is not set
# CONFIG_VIDEO_KS0127 is not set
# CONFIG_VIDEO_MAX9286 is not set
# CONFIG_VIDEO_ML86V7667 is not set
# CONFIG_VIDEO_SAA7110 is not set
CONFIG_VIDEO_SAA711X=y
# CONFIG_VIDEO_TC358743 is not set
# CONFIG_VIDEO_TC358746 is not set
# CONFIG_VIDEO_TVP514X is not set
# CONFIG_VIDEO_TVP5150 is not set
# CONFIG_VIDEO_TVP7002 is not set
# CONFIG_VIDEO_TW2804 is not set
# CONFIG_VIDEO_TW9900 is not set
# CONFIG_VIDEO_TW9903 is not set
# CONFIG_VIDEO_TW9906 is not set
# CONFIG_VIDEO_TW9910 is not set
# CONFIG_VIDEO_VPX3220 is not set

#
# Video and audio decoders
#
# CONFIG_VIDEO_SAA717X is not set
CONFIG_VIDEO_CX25840=y
# end of Video decoders

#
# Video encoders
#
# CONFIG_VIDEO_ADV7170 is not set
# CONFIG_VIDEO_ADV7175 is not set
# CONFIG_VIDEO_ADV7343 is not set
# CONFIG_VIDEO_ADV7393 is not set
# CONFIG_VIDEO_AK881X is not set
# CONFIG_VIDEO_SAA7127 is not set
# CONFIG_VIDEO_SAA7185 is not set
# CONFIG_VIDEO_THS8200 is not set
# end of Video encoders

#
# Video improvement chips
#
# CONFIG_VIDEO_UPD64031A is not set
# CONFIG_VIDEO_UPD64083 is not set
# end of Video improvement chips

#
# Audio/Video compression chips
#
# CONFIG_VIDEO_SAA6752HS is not set
# end of Audio/Video compression chips

#
# SDR tuner chips
#
# CONFIG_SDR_MAX2175 is not set
# end of SDR tuner chips

#
# Miscellaneous helper chips
#
# CONFIG_VIDEO_I2C is not set
# CONFIG_VIDEO_M52790 is not set
# CONFIG_VIDEO_ST_MIPID02 is not set
# CONFIG_VIDEO_THS7303 is not set
# end of Miscellaneous helper chips

#
# Video serializers and deserializers
#
# CONFIG_VIDEO_DS90UB913 is not set
# CONFIG_VIDEO_DS90UB953 is not set
# CONFIG_VIDEO_DS90UB960 is not set
# CONFIG_VIDEO_MAX96714 is not set
# CONFIG_VIDEO_MAX96717 is not set
# end of Video serializers and deserializers

#
# Media SPI Adapters
#
# CONFIG_CXD2880_SPI_DRV is not set
# CONFIG_VIDEO_GS1662 is not set
# end of Media SPI Adapters

CONFIG_MEDIA_TUNER=y

#
# Customize TV tuners
#
# CONFIG_MEDIA_TUNER_E4000 is not set
# CONFIG_MEDIA_TUNER_FC0011 is not set
# CONFIG_MEDIA_TUNER_FC0012 is not set
# CONFIG_MEDIA_TUNER_FC0013 is not set
# CONFIG_MEDIA_TUNER_FC2580 is not set
# CONFIG_MEDIA_TUNER_IT913X is not set
# CONFIG_MEDIA_TUNER_M88RS6000T is not set
# CONFIG_MEDIA_TUNER_MAX2165 is not set
CONFIG_MEDIA_TUNER_MC44S803=y
CONFIG_MEDIA_TUNER_MSI001=y
# CONFIG_MEDIA_TUNER_MT2060 is not set
# CONFIG_MEDIA_TUNER_MT2063 is not set
CONFIG_MEDIA_TUNER_MT20XX=y
# CONFIG_MEDIA_TUNER_MT2131 is not set
# CONFIG_MEDIA_TUNER_MT2266 is not set
# CONFIG_MEDIA_TUNER_MXL301RF is not set
# CONFIG_MEDIA_TUNER_MXL5005S is not set
# CONFIG_MEDIA_TUNER_MXL5007T is not set
# CONFIG_MEDIA_TUNER_QM1D1B0004 is not set
# CONFIG_MEDIA_TUNER_QM1D1C0042 is not set
# CONFIG_MEDIA_TUNER_QT1010 is not set
# CONFIG_MEDIA_TUNER_R820T is not set
# CONFIG_MEDIA_TUNER_SI2157 is not set
CONFIG_MEDIA_TUNER_SIMPLE=y
# CONFIG_MEDIA_TUNER_TDA18212 is not set
# CONFIG_MEDIA_TUNER_TDA18218 is not set
# CONFIG_MEDIA_TUNER_TDA18250 is not set
CONFIG_MEDIA_TUNER_TDA18271=y
CONFIG_MEDIA_TUNER_TDA827X=y
CONFIG_MEDIA_TUNER_TDA8290=y
CONFIG_MEDIA_TUNER_TDA9887=y
# CONFIG_MEDIA_TUNER_TEA5761 is not set
# CONFIG_MEDIA_TUNER_TEA5767 is not set
# CONFIG_MEDIA_TUNER_TUA9001 is not set
CONFIG_MEDIA_TUNER_XC2028=y
CONFIG_MEDIA_TUNER_XC4000=y
CONFIG_MEDIA_TUNER_XC5000=y
# end of Customize TV tuners

#
# Customise DVB Frontends
#

#
# Multistandard (satellite) frontends
#
# CONFIG_DVB_M88DS3103 is not set
# CONFIG_DVB_MXL5XX is not set
# CONFIG_DVB_STB0899 is not set
# CONFIG_DVB_STB6100 is not set
# CONFIG_DVB_STV090x is not set
# CONFIG_DVB_STV0910 is not set
# CONFIG_DVB_STV6110x is not set
# CONFIG_DVB_STV6111 is not set

#
# Multistandard (cable + terrestrial) frontends
#
# CONFIG_DVB_DRXK is not set
# CONFIG_DVB_MN88472 is not set
# CONFIG_DVB_MN88473 is not set
# CONFIG_DVB_SI2165 is not set
# CONFIG_DVB_TDA18271C2DD is not set

#
# DVB-S (satellite) frontends
#
# CONFIG_DVB_CX24110 is not set
# CONFIG_DVB_CX24116 is not set
# CONFIG_DVB_CX24117 is not set
# CONFIG_DVB_CX24120 is not set
# CONFIG_DVB_CX24123 is not set
# CONFIG_DVB_DS3000 is not set
# CONFIG_DVB_MB86A16 is not set
# CONFIG_DVB_MT312 is not set
# CONFIG_DVB_S5H1420 is not set
# CONFIG_DVB_SI21XX is not set
# CONFIG_DVB_STB6000 is not set
# CONFIG_DVB_STV0288 is not set
# CONFIG_DVB_STV0299 is not set
# CONFIG_DVB_STV0900 is not set
# CONFIG_DVB_STV6110 is not set
# CONFIG_DVB_TDA10071 is not set
# CONFIG_DVB_TDA10086 is not set
# CONFIG_DVB_TDA8083 is not set
# CONFIG_DVB_TDA8261 is not set
# CONFIG_DVB_TDA826X is not set
# CONFIG_DVB_TS2020 is not set
# CONFIG_DVB_TUA6100 is not set
# CONFIG_DVB_TUNER_CX24113 is not set
# CONFIG_DVB_TUNER_ITD1000 is not set
# CONFIG_DVB_VES1X93 is not set
# CONFIG_DVB_ZL10036 is not set
# CONFIG_DVB_ZL10039 is not set

#
# DVB-T (terrestrial) frontends
#
CONFIG_DVB_AF9013=y
CONFIG_DVB_AS102_FE=y
# CONFIG_DVB_CX22700 is not set
# CONFIG_DVB_CX22702 is not set
# CONFIG_DVB_CXD2820R is not set
# CONFIG_DVB_CXD2841ER is not set
CONFIG_DVB_DIB3000MB=y
CONFIG_DVB_DIB3000MC=y
# CONFIG_DVB_DIB7000M is not set
# CONFIG_DVB_DIB7000P is not set
# CONFIG_DVB_DIB9000 is not set
# CONFIG_DVB_DRXD is not set
CONFIG_DVB_EC100=y
CONFIG_DVB_GP8PSK_FE=y
# CONFIG_DVB_L64781 is not set
# CONFIG_DVB_MT352 is not set
# CONFIG_DVB_NXT6000 is not set
CONFIG_DVB_RTL2830=y
CONFIG_DVB_RTL2832=y
CONFIG_DVB_RTL2832_SDR=y
# CONFIG_DVB_S5H1432 is not set
# CONFIG_DVB_SI2168 is not set
# CONFIG_DVB_SP887X is not set
# CONFIG_DVB_STV0367 is not set
# CONFIG_DVB_TDA10048 is not set
# CONFIG_DVB_TDA1004X is not set
# CONFIG_DVB_ZD1301_DEMOD is not set
CONFIG_DVB_ZL10353=y
# CONFIG_DVB_CXD2880 is not set

#
# DVB-C (cable) frontends
#
# CONFIG_DVB_STV0297 is not set
# CONFIG_DVB_TDA10021 is not set
# CONFIG_DVB_TDA10023 is not set
# CONFIG_DVB_VES1820 is not set

#
# ATSC (North American/Korean Terrestrial/Cable DTV) frontends
#
# CONFIG_DVB_AU8522_DTV is not set
# CONFIG_DVB_AU8522_V4L is not set
# CONFIG_DVB_BCM3510 is not set
# CONFIG_DVB_LG2160 is not set
# CONFIG_DVB_LGDT3305 is not set
# CONFIG_DVB_LGDT3306A is not set
# CONFIG_DVB_LGDT330X is not set
# CONFIG_DVB_MXL692 is not set
# CONFIG_DVB_NXT200X is not set
# CONFIG_DVB_OR51132 is not set
# CONFIG_DVB_OR51211 is not set
# CONFIG_DVB_S5H1409 is not set
# CONFIG_DVB_S5H1411 is not set

#
# ISDB-T (terrestrial) frontends
#
# CONFIG_DVB_DIB8000 is not set
# CONFIG_DVB_MB86A20S is not set
# CONFIG_DVB_S921 is not set

#
# ISDB-S (satellite) & ISDB-T (terrestrial) frontends
#
# CONFIG_DVB_MN88443X is not set
# CONFIG_DVB_TC90522 is not set

#
# Digital terrestrial only tuners/PLL
#
# CONFIG_DVB_PLL is not set
# CONFIG_DVB_TUNER_DIB0070 is not set
# CONFIG_DVB_TUNER_DIB0090 is not set

#
# SEC control devices for DVB-S
#
# CONFIG_DVB_A8293 is not set
CONFIG_DVB_AF9033=y
# CONFIG_DVB_ASCOT2E is not set
# CONFIG_DVB_ATBM8830 is not set
# CONFIG_DVB_HELENE is not set
# CONFIG_DVB_HORUS3A is not set
# CONFIG_DVB_ISL6405 is not set
# CONFIG_DVB_ISL6421 is not set
# CONFIG_DVB_ISL6423 is not set
# CONFIG_DVB_IX2505V is not set
# CONFIG_DVB_LGS8GL5 is not set
# CONFIG_DVB_LGS8GXX is not set
# CONFIG_DVB_LNBH25 is not set
# CONFIG_DVB_LNBH29 is not set
# CONFIG_DVB_LNBP21 is not set
# CONFIG_DVB_LNBP22 is not set
# CONFIG_DVB_M88RS2000 is not set
# CONFIG_DVB_TDA665x is not set
# CONFIG_DVB_DRX39XYJ is not set

#
# Common Interface (EN50221) controller drivers
#
# CONFIG_DVB_CXD2099 is not set
# CONFIG_DVB_SP2 is not set
# end of Customise DVB Frontends

#
# Tools to develop new frontends
#
# CONFIG_DVB_DUMMY_FE is not set
# end of Media ancillary drivers

#
# Graphics support
#
CONFIG_APERTURE_HELPERS=y
CONFIG_SCREEN_INFO=y
CONFIG_VIDEO=y
# CONFIG_AUXDISPLAY is not set
# CONFIG_PANEL is not set
CONFIG_DRM=y

#
# DRM debugging options
#
# CONFIG_DRM_WERROR is not set
CONFIG_DRM_DEBUG_MM=y
# end of DRM debugging options

CONFIG_DRM_MIPI_DSI=y
CONFIG_DRM_KMS_HELPER=y
# CONFIG_DRM_PANIC is not set
# CONFIG_DRM_RAS is not set
# CONFIG_DRM_DEBUG_DP_MST_TOPOLOGY_REFS is not set
# CONFIG_DRM_DEBUG_MODESET_LOCK is not set
CONFIG_DRM_CLIENT=y
CONFIG_DRM_CLIENT_LIB=y
CONFIG_DRM_CLIENT_SELECTION=y
CONFIG_DRM_CLIENT_SETUP=y

#
# Supported DRM clients
#
CONFIG_DRM_FBDEV_EMULATION=y
CONFIG_DRM_FBDEV_OVERALLOC=100
# CONFIG_DRM_FBDEV_LEAK_PHYS_SMEM is not set
# CONFIG_DRM_CLIENT_LOG is not set
CONFIG_DRM_CLIENT_DEFAULT_FBDEV=y
CONFIG_DRM_CLIENT_DEFAULT="fbdev"
# end of Supported DRM clients

# CONFIG_DRM_LOAD_EDID_FIRMWARE is not set
CONFIG_DRM_DISPLAY_DP_AUX_BUS=y
CONFIG_DRM_DISPLAY_HELPER=y
CONFIG_DRM_BRIDGE_CONNECTOR=y
# CONFIG_DRM_DISPLAY_DP_AUX_CEC is not set
# CONFIG_DRM_DISPLAY_DP_AUX_CHARDEV is not set
CONFIG_DRM_DISPLAY_DP_HELPER=y
CONFIG_DRM_DISPLAY_DSC_HELPER=y
CONFIG_DRM_DISPLAY_HDCP_HELPER=y
CONFIG_DRM_DISPLAY_HDMI_AUDIO_HELPER=y
CONFIG_DRM_DISPLAY_HDMI_CEC_HELPER=y
CONFIG_DRM_DISPLAY_HDMI_CEC_NOTIFIER_HELPER=y
CONFIG_DRM_DISPLAY_HDMI_HELPER=y
CONFIG_DRM_DISPLAY_HDMI_STATE_HELPER=y
CONFIG_DRM_TTM=y
CONFIG_DRM_VRAM_HELPER=y
CONFIG_DRM_TTM_HELPER=y
CONFIG_DRM_GEM_DMA_HELPER=y
CONFIG_DRM_GEM_SHMEM_HELPER=y
# CONFIG_DRM_AMDGPU is not set

#
# ARM devices
#
CONFIG_DRM_HDLCD=y
# CONFIG_DRM_HDLCD_SHOW_UNDERRUN is not set
CONFIG_DRM_MALI_DISPLAY=y
CONFIG_DRM_KOMEDA=y
# end of ARM devices

# CONFIG_DRM_AST is not set
CONFIG_DRM_BRIDGE=y
CONFIG_DRM_PANEL_BRIDGE=y
CONFIG_DRM_AUX_BRIDGE=y
CONFIG_DRM_AUX_HPD_BRIDGE=y

#
# Display Interface Bridges
#
# CONFIG_DRM_CHIPONE_ICN6211 is not set
# CONFIG_DRM_CHRONTEL_CH7033 is not set
CONFIG_DRM_DISPLAY_CONNECTOR=y
CONFIG_DRM_I2C_NXP_TDA998X=y
CONFIG_DRM_ITE_IT6263=y
# CONFIG_DRM_ITE_IT6505 is not set
CONFIG_DRM_LONTIUM_LT8912B=y
# CONFIG_DRM_LONTIUM_LT9211 is not set
CONFIG_DRM_LONTIUM_LT9611=y
CONFIG_DRM_LONTIUM_LT9611UXC=y
# CONFIG_DRM_LONTIUM_LT8713SX is not set
CONFIG_DRM_ITE_IT66121=y
# CONFIG_DRM_LVDS_CODEC is not set
# CONFIG_DRM_MEGACHIPS_STDPXXXX_GE_B850V3_FW is not set
CONFIG_DRM_NWL_MIPI_DSI=y
# CONFIG_DRM_NXP_PTN3460 is not set
# CONFIG_DRM_PARADE_PS8622 is not set
CONFIG_DRM_PARADE_PS8640=y
CONFIG_DRM_SAMSUNG_DSIM=y
# CONFIG_DRM_SIL_SII8620 is not set
CONFIG_DRM_SII902X=y
# CONFIG_DRM_SII9234 is not set
CONFIG_DRM_SIMPLE_BRIDGE=y
# CONFIG_DRM_SOLOMON_SSD2825 is not set
CONFIG_DRM_THINE_THC63LVD1024=y
# CONFIG_DRM_TOSHIBA_TC358762 is not set
# CONFIG_DRM_TOSHIBA_TC358764 is not set
CONFIG_DRM_TOSHIBA_TC358767=y
CONFIG_DRM_TOSHIBA_TC358768=y
# CONFIG_DRM_TOSHIBA_TC358775 is not set
# CONFIG_DRM_TI_DLPC3433 is not set
# CONFIG_DRM_TI_TDP158 is not set
CONFIG_DRM_TI_TFP410=y
CONFIG_DRM_TI_SN65DSI83=y
CONFIG_DRM_TI_SN65DSI86=y
# CONFIG_DRM_TI_TPD12S015 is not set
# CONFIG_DRM_WAVESHARE_BRIDGE is not set
# CONFIG_DRM_ANALOGIX_ANX6345 is not set
# CONFIG_DRM_ANALOGIX_ANX78XX is not set
CONFIG_DRM_ANALOGIX_ANX7625=y
CONFIG_DRM_I2C_ADV7511=y
CONFIG_DRM_I2C_ADV7511_CEC=y
CONFIG_DRM_CDNS_DSI=y
CONFIG_DRM_CDNS_DSI_J721E=y
CONFIG_DRM_CDNS_MHDP8546=y
# end of Display Interface Bridges

# CONFIG_DRM_ETNAVIV is not set
CONFIG_DRM_GUD=y
CONFIG_DRM_HISI_HIBMC=y
CONFIG_DRM_HISI_KIRIN=y
# CONFIG_DRM_POWERVR is not set
# CONFIG_DRM_LIMA is not set
# CONFIG_DRM_LOGICVC is not set
# CONFIG_DRM_MGAG200 is not set
# CONFIG_DRM_NOUVEAU is not set
CONFIG_DRM_PANEL=y

#
# Display Panels
#
# CONFIG_DRM_PANEL_ABT_Y030XX067A is not set
# CONFIG_DRM_PANEL_ARM_VERSATILE is not set
# CONFIG_DRM_PANEL_ASUS_Z00T_TM5P5_NT35596 is not set
# CONFIG_DRM_PANEL_AUO_A030JTN01 is not set
# CONFIG_DRM_PANEL_BOE_BF060Y8M_AJ0 is not set
# CONFIG_DRM_PANEL_BOE_HIMAX8279D is not set
# CONFIG_DRM_PANEL_BOE_TD4320 is not set
# CONFIG_DRM_PANEL_BOE_TH101MB31UIG002_28A is not set
CONFIG_DRM_PANEL_BOE_TV101WUM_NL6=y
# CONFIG_DRM_PANEL_BOE_TV101WUM_LL2 is not set
# CONFIG_DRM_PANEL_EBBG_FT8719 is not set
# CONFIG_DRM_PANEL_ELIDA_KD35T133 is not set
# CONFIG_DRM_PANEL_FEIXIN_K101_IM2BA02 is not set
# CONFIG_DRM_PANEL_FEIYANG_FY07024DI26A30D is not set
# CONFIG_DRM_PANEL_DSI_CM is not set
CONFIG_DRM_PANEL_LVDS=y
CONFIG_DRM_PANEL_HIMAX_HX8279=y
# CONFIG_DRM_PANEL_HIMAX_HX83102 is not set
CONFIG_DRM_PANEL_HIMAX_HX83112A=y
CONFIG_DRM_PANEL_HIMAX_HX83112B=y
# CONFIG_DRM_PANEL_HIMAX_HX83121A is not set
# CONFIG_DRM_PANEL_HIMAX_HX8394 is not set
# CONFIG_DRM_PANEL_HYDIS_HV101HD1 is not set
# CONFIG_DRM_PANEL_ILITEK_IL9322 is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9341 is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9805 is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9806E_DSI is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9806E_SPI is not set
# CONFIG_DRM_PANEL_ILITEK_ILI9881C is not set
CONFIG_DRM_PANEL_ILITEK_ILI9882T=y
# CONFIG_DRM_PANEL_INNOLUX_EJ030NA is not set
# CONFIG_DRM_PANEL_INNOLUX_P079ZCA is not set
# CONFIG_DRM_PANEL_JADARD_JD9365DA_H3 is not set
# CONFIG_DRM_PANEL_JDI_LPM102A188A is not set
# CONFIG_DRM_PANEL_JDI_LT070ME05000 is not set
# CONFIG_DRM_PANEL_JDI_R63452 is not set
CONFIG_DRM_PANEL_KHADAS_TS050=y
# CONFIG_DRM_PANEL_KINGDISPLAY_KD097D04 is not set
# CONFIG_DRM_PANEL_LEADTEK_LTK050H3146W is not set
# CONFIG_DRM_PANEL_LEADTEK_LTK500HD1829 is not set
# CONFIG_DRM_PANEL_LINCOLNTECH_LCD197 is not set
# CONFIG_DRM_PANEL_LG_LB035Q02 is not set
# CONFIG_DRM_PANEL_LG_LD070WX3 is not set
# CONFIG_DRM_PANEL_LG_LG4573 is not set
# CONFIG_DRM_PANEL_LG_SW43408 is not set
# CONFIG_DRM_PANEL_LXD_M9189A is not set
# CONFIG_DRM_PANEL_MAGNACHIP_D53E6EA8966 is not set
CONFIG_DRM_PANEL_MANTIX_MLAF057WE51=y
# CONFIG_DRM_PANEL_MOTOROLA_MOT is not set
# CONFIG_DRM_PANEL_NEC_NL8048HL11 is not set
# CONFIG_DRM_PANEL_NEWVISION_NV3051D is not set
# CONFIG_DRM_PANEL_NEWVISION_NV3052C is not set
# CONFIG_DRM_PANEL_NOVATEK_NT35510 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT35560 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT35950 is not set
# CONFIG_DRM_PANEL_NOVATEK_NT36523 is not set
CONFIG_DRM_PANEL_NOVATEK_NT36672A=y
CONFIG_DRM_PANEL_NOVATEK_NT36672E=y
# CONFIG_DRM_PANEL_NOVATEK_NT37700F is not set
CONFIG_DRM_PANEL_NOVATEK_NT37801=y
# CONFIG_DRM_PANEL_NOVATEK_NT39016 is not set
# CONFIG_DRM_PANEL_OLIMEX_LCD_OLINUXINO is not set
# CONFIG_DRM_PANEL_ORISETECH_OTA5601A is not set
# CONFIG_DRM_PANEL_ORISETECH_OTM8009A is not set
# CONFIG_DRM_PANEL_OSD_OSD101T2587_53TS is not set
# CONFIG_DRM_PANEL_PANASONIC_VVX10F034N00 is not set
# CONFIG_DRM_PANEL_RASPBERRYPI_TOUCHSCREEN is not set
CONFIG_DRM_PANEL_RAYDIUM_RM67191=y
# CONFIG_DRM_PANEL_RAYDIUM_RM67200 is not set
# CONFIG_DRM_PANEL_RAYDIUM_RM68200 is not set
CONFIG_DRM_PANEL_RAYDIUM_RM692E5=y
# CONFIG_DRM_PANEL_RAYDIUM_RM69380 is not set
# CONFIG_DRM_PANEL_RENESAS_R61307 is not set
# CONFIG_DRM_PANEL_RENESAS_R69328 is not set
# CONFIG_DRM_PANEL_RONBO_RB070D30 is not set
# CONFIG_DRM_PANEL_SAMSUNG_AMS581VF01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_AMS639RQ08 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E88A0_AMS427AP24 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E88A0_AMS452EF01 is not set
CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y
# CONFIG_DRM_PANEL_SAMSUNG_DB7430 is not set
# CONFIG_DRM_PANEL_SAMSUNG_LD9040 is not set
# CONFIG_DRM_PANEL_SAMSUNG_LTL106HL02 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3FA7 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6D16D0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6D27A1 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6D7AA0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3FC2X01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3HA2 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E3HA8 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E63J0X03 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E63M0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E8AA0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E8AA5X01_AMS561RA01 is not set
# CONFIG_DRM_PANEL_SAMSUNG_S6E8FC0 is not set
# CONFIG_DRM_PANEL_SAMSUNG_SOFEF00 is not set
# CONFIG_DRM_PANEL_SEIKO_43WVF1G is not set
# CONFIG_DRM_PANEL_SHARP_LQ079L1SX01 is not set
# CONFIG_DRM_PANEL_SHARP_LQ101R1SX01 is not set
# CONFIG_DRM_PANEL_SHARP_LS037V7DW01 is not set
# CONFIG_DRM_PANEL_SHARP_LS043T1LE01 is not set
# CONFIG_DRM_PANEL_SHARP_LS060T1SX01 is not set
# CONFIG_DRM_PANEL_SITRONIX_ST7701 is not set
CONFIG_DRM_PANEL_SITRONIX_ST7703=y
# CONFIG_DRM_PANEL_SITRONIX_ST7789V is not set
# CONFIG_DRM_PANEL_SONY_ACX565AKM is not set
# CONFIG_DRM_PANEL_SONY_TD4353_JDI is not set
# CONFIG_DRM_PANEL_SONY_TULIP_TRULY_NT35521 is not set
CONFIG_DRM_PANEL_STARTEK_KD070FHFID015=y
CONFIG_DRM_PANEL_EDP=y
CONFIG_DRM_PANEL_SIMPLE=y
# CONFIG_DRM_PANEL_SUMMIT is not set
# CONFIG_DRM_PANEL_SYNAPTICS_R63353 is not set
# CONFIG_DRM_PANEL_SYNAPTICS_TDDI is not set
# CONFIG_DRM_PANEL_TDO_TL070WSH30 is not set
# CONFIG_DRM_PANEL_TPO_TD028TTEC1 is not set
# CONFIG_DRM_PANEL_TPO_TD043MTEA1 is not set
# CONFIG_DRM_PANEL_TPO_TPG110 is not set
CONFIG_DRM_PANEL_TRULY_NT35597_WQXGA=y
# CONFIG_DRM_PANEL_VISIONOX_G2647FB105 is not set
# CONFIG_DRM_PANEL_VISIONOX_R66451 is not set
# CONFIG_DRM_PANEL_VISIONOX_RM69299 is not set
# CONFIG_DRM_PANEL_VISIONOX_RM692E5 is not set
CONFIG_DRM_PANEL_VISIONOX_VTDR6130=y
# CONFIG_DRM_PANEL_WIDECHIPS_WS2401 is not set
# CONFIG_DRM_PANEL_XINPENG_XPP055C272 is not set
# end of Display Panels

# CONFIG_DRM_PANFROST is not set
# CONFIG_DRM_PANTHOR is not set
CONFIG_DRM_PL111=y
# CONFIG_DRM_QXL is not set
# CONFIG_DRM_RADEON is not set
# CONFIG_DRM_ST7571 is not set
# CONFIG_DRM_ST7586 is not set
# CONFIG_DRM_ST7735R is not set
# CONFIG_DRM_ST7920 is not set
# CONFIG_DRM_SSD130X is not set

#
# Drivers for system framebuffers
#
CONFIG_DRM_SYSFB_HELPER=y
# CONFIG_DRM_EFIDRM is not set
CONFIG_DRM_SIMPLEDRM=y
# end of Drivers for system framebuffers

CONFIG_DRM_TIDSS=y
# CONFIG_DRM_ARCPGU is not set
CONFIG_DRM_BOCHS=y
CONFIG_DRM_CIRRUS_QEMU=y
CONFIG_DRM_GM12U320=y
# CONFIG_DRM_PANEL_MIPI_DBI is not set
# CONFIG_DRM_PIXPAPER is not set
# CONFIG_TINYDRM_HX8357D is not set
# CONFIG_TINYDRM_ILI9163 is not set
# CONFIG_TINYDRM_ILI9225 is not set
# CONFIG_TINYDRM_ILI9341 is not set
# CONFIG_TINYDRM_ILI9486 is not set
# CONFIG_TINYDRM_MI0283QT is not set
# CONFIG_TINYDRM_REPAPER is not set
# CONFIG_TINYDRM_SHARP_MEMORY is not set
CONFIG_DRM_UDL=y
CONFIG_DRM_VGEM=y
CONFIG_DRM_VIRTIO_GPU=y
CONFIG_DRM_VIRTIO_GPU_KMS=y
CONFIG_DRM_VKMS=y
# CONFIG_DRM_VMWGFX is not set
# CONFIG_DRM_XE is not set
CONFIG_DRM_PANEL_ORIENTATION_QUIRKS=y

#
# Frame buffer Devices
#
CONFIG_FB=y
# CONFIG_FB_CIRRUS is not set
# CONFIG_FB_PM2 is not set
# CONFIG_FB_CYBER2000 is not set
# CONFIG_FB_ASILIANT is not set
# CONFIG_FB_IMSTT is not set
# CONFIG_FB_UVESA is not set
CONFIG_FB_EFI=y
# CONFIG_FB_OPENCORES is not set
# CONFIG_FB_S1D13XXX is not set
# CONFIG_FB_NVIDIA is not set
# CONFIG_FB_RIVA is not set
# CONFIG_FB_I740 is not set
# CONFIG_FB_MATROX is not set
# CONFIG_FB_RADEON is not set
# CONFIG_FB_ATY128 is not set
# CONFIG_FB_ATY is not set
# CONFIG_FB_S3 is not set
# CONFIG_FB_SAVAGE is not set
# CONFIG_FB_SIS is not set
# CONFIG_FB_NEOMAGIC is not set
# CONFIG_FB_KYRO is not set
# CONFIG_FB_3DFX is not set
# CONFIG_FB_VOODOO1 is not set
# CONFIG_FB_VT8623 is not set
# CONFIG_FB_TRIDENT is not set
# CONFIG_FB_ARK is not set
# CONFIG_FB_PM3 is not set
# CONFIG_FB_CARMINE is not set
# CONFIG_FB_SMSCUFX is not set
# CONFIG_FB_UDL is not set
# CONFIG_FB_IBM_GXT4500 is not set
CONFIG_FB_VIRTUAL=y
# CONFIG_FB_METRONOME is not set
# CONFIG_FB_MB862XX is not set
# CONFIG_FB_SSD1307 is not set
# CONFIG_FB_SM712 is not set
CONFIG_FB_CORE=y
CONFIG_FB_NOTIFY=y
CONFIG_FB_DEVICE=y
CONFIG_FB_CFB_FILLRECT=y
CONFIG_FB_CFB_COPYAREA=y
CONFIG_FB_CFB_IMAGEBLIT=y
CONFIG_FB_SYS_FILLRECT=y
CONFIG_FB_SYS_COPYAREA=y
CONFIG_FB_SYS_IMAGEBLIT=y
# CONFIG_FB_FOREIGN_ENDIAN is not set
CONFIG_FB_SYSMEM_FOPS=y
CONFIG_FB_DEFERRED_IO=y
CONFIG_FB_DMAMEM_HELPERS=y
CONFIG_FB_DMAMEM_HELPERS_DEFERRED=y
CONFIG_FB_IOMEM_FOPS=y
CONFIG_FB_IOMEM_HELPERS=y
CONFIG_FB_SYSMEM_HELPERS=y
CONFIG_FB_SYSMEM_HELPERS_DEFERRED=y
CONFIG_FB_TILEBLITTING=y
# end of Frame buffer Devices

#
# Backlight & LCD device support
#
CONFIG_LCD_CLASS_DEVICE=y
# CONFIG_LCD_L4F00242T03 is not set
# CONFIG_LCD_LMS283GF05 is not set
# CONFIG_LCD_LTV350QV is not set
# CONFIG_LCD_ILI922X is not set
# CONFIG_LCD_ILI9320 is not set
# CONFIG_LCD_TDO24M is not set
# CONFIG_LCD_VGG2432A4 is not set
# CONFIG_LCD_PLATFORM is not set
# CONFIG_LCD_AMS369FG06 is not set
# CONFIG_LCD_LMS501KF03 is not set
# CONFIG_LCD_HX8357 is not set
# CONFIG_LCD_OTM3225A is not set
CONFIG_BACKLIGHT_CLASS_DEVICE=y
# CONFIG_BACKLIGHT_AW99706 is not set
# CONFIG_BACKLIGHT_KTD253 is not set
# CONFIG_BACKLIGHT_KTD2801 is not set
# CONFIG_BACKLIGHT_KTZ8866 is not set
CONFIG_BACKLIGHT_PWM=y
# CONFIG_BACKLIGHT_MT6370 is not set
CONFIG_BACKLIGHT_QCOM_WLED=y
# CONFIG_BACKLIGHT_ADP8860 is not set
# CONFIG_BACKLIGHT_ADP8870 is not set
# CONFIG_BACKLIGHT_LM3509 is not set
# CONFIG_BACKLIGHT_LM3630A is not set
# CONFIG_BACKLIGHT_LM3639 is not set
CONFIG_BACKLIGHT_LP855X=y
# CONFIG_BACKLIGHT_MP3309C is not set
# CONFIG_BACKLIGHT_PANDORA is not set
# CONFIG_BACKLIGHT_GPIO is not set
# CONFIG_BACKLIGHT_LV5207LP is not set
# CONFIG_BACKLIGHT_BD6107 is not set
# CONFIG_BACKLIGHT_ARCXCNN is not set
# CONFIG_BACKLIGHT_LED is not set
# end of Backlight & LCD device support

CONFIG_VIDEOMODE_HELPERS=y
CONFIG_HDMI=y
# CONFIG_FIRMWARE_EDID is not set

#
# Console display driver support
#
CONFIG_DUMMY_CONSOLE=y
CONFIG_DUMMY_CONSOLE_COLUMNS=80
CONFIG_DUMMY_CONSOLE_ROWS=25
CONFIG_FRAMEBUFFER_CONSOLE=y
# CONFIG_FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION is not set
CONFIG_FRAMEBUFFER_CONSOLE_DETECT_PRIMARY=y
CONFIG_FRAMEBUFFER_CONSOLE_ROTATION=y
# CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER is not set
# end of Console display driver support

CONFIG_LOGO=y
CONFIG_LOGO_LINUX_MONO=y
CONFIG_LOGO_LINUX_MONO_FILE="drivers/video/logo/logo_linux_mono.pbm"
CONFIG_LOGO_LINUX_VGA16=y
CONFIG_LOGO_LINUX_VGA16_FILE="drivers/video/logo/logo_linux_vga16.ppm"
CONFIG_LOGO_LINUX_CLUT224=y
CONFIG_LOGO_LINUX_CLUT224_FILE="drivers/video/logo/logo_linux_clut224.ppm"
CONFIG_TRACE_GPU_MEM=y
# end of Graphics support

# CONFIG_DRM_ACCEL is not set
# CONFIG_SOUND is not set
CONFIG_HID_SUPPORT=y
CONFIG_HID=y
CONFIG_HID_BATTERY_STRENGTH=y
CONFIG_HIDRAW=y
CONFIG_UHID=y
CONFIG_HID_GENERIC=y
CONFIG_HID_HAPTIC=y

#
# Special HID drivers
#
CONFIG_HID_A4TECH=y
CONFIG_HID_ACCUTOUCH=y
CONFIG_HID_ACRUX=y
CONFIG_HID_ACRUX_FF=y
CONFIG_HID_APPLE=y
CONFIG_HID_APPLEIR=y
CONFIG_HID_ASUS=y
CONFIG_HID_AUREAL=y
CONFIG_HID_BELKIN=y
CONFIG_HID_BETOP_FF=y
CONFIG_HID_BIGBEN_FF=y
CONFIG_HID_CHERRY=y
CONFIG_HID_CHICONY=y
CONFIG_HID_CORSAIR=y
CONFIG_HID_COUGAR=y
CONFIG_HID_MACALLY=y
CONFIG_HID_CMEDIA=y
CONFIG_HID_CP2112=y
CONFIG_HID_CREATIVE_SB0540=y
CONFIG_HID_CYPRESS=y
CONFIG_HID_DRAGONRISE=y
CONFIG_DRAGONRISE_FF=y
CONFIG_HID_EMS_FF=y
CONFIG_HID_ELAN=y
CONFIG_HID_ELECOM=y
CONFIG_HID_ELO=y
CONFIG_HID_EVISION=y
CONFIG_HID_EZKEY=y
CONFIG_HID_FT260=y
CONFIG_HID_GEMBIRD=y
CONFIG_HID_GFRM=y
CONFIG_HID_GLORIOUS=y
CONFIG_HID_HOLTEK=y
CONFIG_HOLTEK_FF=y
CONFIG_HID_VIVALDI_COMMON=y
# CONFIG_HID_GOODIX_SPI is not set
CONFIG_HID_GOOGLE_STADIA_FF=y
CONFIG_HID_VIVALDI=y
CONFIG_HID_GT683R=y
CONFIG_HID_KEYTOUCH=y
CONFIG_HID_KYE=y
# CONFIG_HID_KYSONA is not set
CONFIG_HID_UCLOGIC=y
CONFIG_HID_WALTOP=y
CONFIG_HID_VIEWSONIC=y
CONFIG_HID_VRC2=y
CONFIG_HID_XIAOMI=y
CONFIG_HID_GYRATION=y
CONFIG_HID_ICADE=y
CONFIG_HID_ITE=y
CONFIG_HID_JABRA=y
CONFIG_HID_TWINHAN=y
CONFIG_HID_KENSINGTON=y
CONFIG_HID_LCPOWER=y
CONFIG_HID_LED=y
CONFIG_HID_LENOVO=y
# CONFIG_HID_LENOVO_GO is not set
# CONFIG_HID_LENOVO_GO_S is not set
CONFIG_HID_LETSKETCH=y
CONFIG_HID_LOGITECH=y
CONFIG_HID_LOGITECH_DJ=y
CONFIG_HID_LOGITECH_HIDPP=y
CONFIG_LOGITECH_FF=y
CONFIG_LOGIRUMBLEPAD2_FF=y
CONFIG_LOGIG940_FF=y
CONFIG_LOGIWHEELS_FF=y
CONFIG_HID_MAGICMOUSE=y
CONFIG_HID_MALTRON=y
CONFIG_HID_MAYFLASH=y
CONFIG_HID_MEGAWORLD_FF=y
CONFIG_HID_REDRAGON=y
CONFIG_HID_MICROSOFT=y
CONFIG_HID_MONTEREY=y
CONFIG_HID_MULTITOUCH=y
CONFIG_HID_NINTENDO=y
CONFIG_NINTENDO_FF=y
CONFIG_HID_NTI=y
CONFIG_HID_NTRIG=y
CONFIG_HID_NVIDIA_SHIELD=y
CONFIG_NVIDIA_SHIELD_FF=y
CONFIG_HID_ORTEK=y
CONFIG_HID_PANTHERLORD=y
CONFIG_PANTHERLORD_FF=y
CONFIG_HID_PENMOUNT=y
CONFIG_HID_PETALYNX=y
CONFIG_HID_PICOLCD=y
CONFIG_HID_PICOLCD_FB=y
CONFIG_HID_PICOLCD_BACKLIGHT=y
CONFIG_HID_PICOLCD_LCD=y
CONFIG_HID_PICOLCD_LEDS=y
CONFIG_HID_PICOLCD_CIR=y
CONFIG_HID_PLANTRONICS=y
CONFIG_HID_PLAYSTATION=y
CONFIG_PLAYSTATION_FF=y
CONFIG_HID_PXRC=y
# CONFIG_HID_RAPOO is not set
CONFIG_HID_RAZER=y
CONFIG_HID_PRIMAX=y
CONFIG_HID_RETRODE=y
CONFIG_HID_ROCCAT=y
CONFIG_HID_SAITEK=y
CONFIG_HID_SAMSUNG=y
CONFIG_HID_SEMITEK=y
CONFIG_HID_SIGMAMICRO=y
CONFIG_HID_SONY=y
CONFIG_SONY_FF=y
CONFIG_HID_SPEEDLINK=y
CONFIG_HID_STEAM=y
CONFIG_STEAM_FF=y
CONFIG_HID_STEELSERIES=y
CONFIG_HID_SUNPLUS=y
CONFIG_HID_RMI=y
CONFIG_HID_GREENASIA=y
CONFIG_GREENASIA_FF=y
CONFIG_HID_SMARTJOYPLUS=y
CONFIG_SMARTJOYPLUS_FF=y
CONFIG_HID_TIVO=y
CONFIG_HID_TOPSEED=y
CONFIG_HID_TOPRE=y
CONFIG_HID_THINGM=y
CONFIG_HID_THRUSTMASTER=y
CONFIG_THRUSTMASTER_FF=y
CONFIG_HID_UDRAW_PS3=y
CONFIG_HID_U2FZERO=y
# CONFIG_HID_UNIVERSAL_PIDFF is not set
CONFIG_HID_WACOM=y
CONFIG_HID_WIIMOTE=y
# CONFIG_HID_WINWING is not set
CONFIG_HID_XINMO=y
CONFIG_HID_ZEROPLUS=y
CONFIG_ZEROPLUS_FF=y
CONFIG_HID_ZYDACRON=y
CONFIG_HID_SENSOR_HUB=y
CONFIG_HID_SENSOR_CUSTOM_SENSOR=y
CONFIG_HID_ALPS=y
CONFIG_HID_MCP2200=y
CONFIG_HID_MCP2221=y
# CONFIG_HID_HUAWEI is not set
# end of Special HID drivers

#
# HID-BPF support
#
# end of HID-BPF support

CONFIG_I2C_HID=y
CONFIG_I2C_HID_ACPI=y
CONFIG_I2C_HID_OF=y
CONFIG_I2C_HID_OF_ELAN=y
# CONFIG_I2C_HID_OF_GOODIX is not set
CONFIG_I2C_HID_CORE=y

#
# Surface System Aggregator Module HID support
#
CONFIG_SURFACE_HID=y
CONFIG_SURFACE_KBD=y
# end of Surface System Aggregator Module HID support

CONFIG_SURFACE_HID_CORE=y

#
# USB HID support
#
CONFIG_USB_HID=y
CONFIG_HID_PID=y
CONFIG_USB_HIDDEV=y
# end of USB HID support

CONFIG_USB_OHCI_LITTLE_ENDIAN=y
CONFIG_USB_SUPPORT=y
CONFIG_USB_COMMON=y
CONFIG_USB_LED_TRIG=y
CONFIG_USB_ULPI_BUS=y
CONFIG_USB_CONN_GPIO=y
CONFIG_USB_ARCH_HAS_HCD=y
CONFIG_USB=y
CONFIG_USB_PCI=y
CONFIG_USB_PCI_AMD=y
CONFIG_USB_ANNOUNCE_NEW_DEVICES=y

#
# Miscellaneous USB options
#
CONFIG_USB_DEFAULT_PERSIST=y
CONFIG_USB_FEW_INIT_RETRIES=y
CONFIG_USB_DYNAMIC_MINORS=y
CONFIG_USB_OTG=y
# CONFIG_USB_OTG_PRODUCTLIST is not set
# CONFIG_USB_OTG_DISABLE_EXTERNAL_HUB is not set
CONFIG_USB_OTG_FSM=y
CONFIG_USB_LEDS_TRIGGER_USBPORT=y
CONFIG_USB_AUTOSUSPEND_DELAY=2
CONFIG_USB_DEFAULT_AUTHORIZATION_MODE=1
CONFIG_USB_MON=y

#
# USB Host Controller Drivers
#
CONFIG_USB_C67X00_HCD=y
CONFIG_USB_XHCI_HCD=y
CONFIG_USB_XHCI_DBGCAP=y
CONFIG_USB_XHCI_PCI=y
CONFIG_USB_XHCI_PCI_RENESAS=y
CONFIG_USB_XHCI_PLATFORM=y
CONFIG_USB_XHCI_SIDEBAND=y
CONFIG_USB_EHCI_HCD=y
CONFIG_USB_EHCI_ROOT_HUB_TT=y
CONFIG_USB_EHCI_TT_NEWSCHED=y
CONFIG_USB_EHCI_PCI=y
CONFIG_USB_EHCI_FSL=y
CONFIG_USB_EHCI_HCD_PLATFORM=y
CONFIG_USB_OXU210HP_HCD=y
CONFIG_USB_ISP116X_HCD=y
CONFIG_USB_MAX3421_HCD=y
CONFIG_USB_OHCI_HCD=y
CONFIG_USB_OHCI_HCD_PCI=y
# CONFIG_USB_OHCI_HCD_SSB is not set
CONFIG_USB_OHCI_HCD_PLATFORM=y
CONFIG_USB_UHCI_HCD=y
CONFIG_USB_SL811_HCD=y
CONFIG_USB_SL811_HCD_ISO=y
CONFIG_USB_SL811_CS=y
CONFIG_USB_R8A66597_HCD=y
CONFIG_USB_HCD_BCMA=y
CONFIG_USB_HCD_SSB=y
# CONFIG_USB_HCD_TEST_MODE is not set

#
# USB Device Class drivers
#
CONFIG_USB_ACM=y
CONFIG_USB_PRINTER=y
CONFIG_USB_WDM=y
CONFIG_USB_TMC=y

#
# NOTE: USB_STORAGE depends on SCSI but BLK_DEV_SD may also be needed; see USB_STORAGE Help for more info
#
CONFIG_USB_STORAGE=y
# CONFIG_USB_STORAGE_DEBUG is not set
CONFIG_USB_STORAGE_REALTEK=y
CONFIG_REALTEK_AUTOPM=y
CONFIG_USB_STORAGE_DATAFAB=y
CONFIG_USB_STORAGE_FREECOM=y
CONFIG_USB_STORAGE_ISD200=y
CONFIG_USB_STORAGE_USBAT=y
CONFIG_USB_STORAGE_SDDR09=y
CONFIG_USB_STORAGE_SDDR55=y
CONFIG_USB_STORAGE_JUMPSHOT=y
CONFIG_USB_STORAGE_ALAUDA=y
CONFIG_USB_STORAGE_ONETOUCH=y
CONFIG_USB_STORAGE_KARMA=y
CONFIG_USB_STORAGE_CYPRESS_ATACB=y
CONFIG_USB_STORAGE_ENE_UB6250=y
CONFIG_USB_UAS=y

#
# USB Imaging devices
#
CONFIG_USB_MDC800=y
CONFIG_USB_MICROTEK=y
CONFIG_USBIP_CORE=y
CONFIG_USBIP_VHCI_HCD=y
CONFIG_USBIP_VHCI_HC_PORTS=8
CONFIG_USBIP_VHCI_NR_HCS=16
CONFIG_USBIP_HOST=y
CONFIG_USBIP_VUDC=y
# CONFIG_USBIP_DEBUG is not set

#
# USB dual-mode controller drivers
#
CONFIG_USB_CDNS_SUPPORT=y
CONFIG_USB_CDNS_HOST=y
CONFIG_USB_CDNS3=y
CONFIG_USB_CDNS3_GADGET=y
CONFIG_USB_CDNS3_HOST=y
CONFIG_USB_CDNS3_PCI_WRAP=y
CONFIG_USB_CDNSP_PCI=y
CONFIG_USB_CDNSP_GADGET=y
CONFIG_USB_CDNSP_HOST=y
CONFIG_USB_MUSB_HDRC=y
# CONFIG_USB_MUSB_HOST is not set
# CONFIG_USB_MUSB_GADGET is not set
CONFIG_USB_MUSB_DUAL_ROLE=y

#
# Platform Glue Layer
#

#
# MUSB DMA mode
#
CONFIG_MUSB_PIO_ONLY=y
CONFIG_USB_DWC3=y
CONFIG_USB_DWC3_ULPI=y
# CONFIG_USB_DWC3_HOST is not set
CONFIG_USB_DWC3_GADGET=y
# CONFIG_USB_DWC3_DUAL_ROLE is not set

#
# Platform Glue Driver Support
#
CONFIG_USB_DWC3_PCI=y
CONFIG_USB_DWC3_HAPS=y
CONFIG_USB_DWC3_OF_SIMPLE=y
CONFIG_USB_DWC3_GENERIC_PLAT=y
# CONFIG_USB_DWC3_GOOGLE is not set
CONFIG_USB_DWC2=y
# CONFIG_USB_DWC2_HOST is not set

#
# Gadget/Dual-role mode requires USB Gadget support to be enabled
#
# CONFIG_USB_DWC2_PERIPHERAL is not set
CONFIG_USB_DWC2_DUAL_ROLE=y
CONFIG_USB_DWC2_PCI=y
# CONFIG_USB_DWC2_DEBUG is not set
# CONFIG_USB_DWC2_TRACK_MISSED_SOFS is not set
CONFIG_USB_CHIPIDEA=y
CONFIG_USB_CHIPIDEA_UDC=y
CONFIG_USB_CHIPIDEA_HOST=y
CONFIG_USB_CHIPIDEA_PCI=y
CONFIG_USB_CHIPIDEA_MSM=y
CONFIG_USB_CHIPIDEA_NPCM=y
CONFIG_USB_CHIPIDEA_IMX=y
CONFIG_USB_CHIPIDEA_GENERIC=y
CONFIG_USB_CHIPIDEA_TEGRA=y
CONFIG_USB_ISP1760=y
CONFIG_USB_ISP1760_HCD=y
CONFIG_USB_ISP1761_UDC=y
# CONFIG_USB_ISP1760_HOST_ROLE is not set
# CONFIG_USB_ISP1760_GADGET_ROLE is not set
CONFIG_USB_ISP1760_DUAL_ROLE=y

#
# USB port drivers
#
CONFIG_USB_SERIAL=y
CONFIG_USB_SERIAL_CONSOLE=y
CONFIG_USB_SERIAL_GENERIC=y
CONFIG_USB_SERIAL_SIMPLE=y
CONFIG_USB_SERIAL_AIRCABLE=y
CONFIG_USB_SERIAL_ARK3116=y
CONFIG_USB_SERIAL_BELKIN=y
CONFIG_USB_SERIAL_CH341=y
CONFIG_USB_SERIAL_WHITEHEAT=y
CONFIG_USB_SERIAL_DIGI_ACCELEPORT=y
CONFIG_USB_SERIAL_CP210X=y
CONFIG_USB_SERIAL_CYPRESS_M8=y
CONFIG_USB_SERIAL_EMPEG=y
CONFIG_USB_SERIAL_FTDI_SIO=y
CONFIG_USB_SERIAL_VISOR=y
CONFIG_USB_SERIAL_IPAQ=y
CONFIG_USB_SERIAL_IR=y
CONFIG_USB_SERIAL_EDGEPORT=y
CONFIG_USB_SERIAL_EDGEPORT_TI=y
CONFIG_USB_SERIAL_F81232=y
CONFIG_USB_SERIAL_F8153X=y
CONFIG_USB_SERIAL_GARMIN=y
CONFIG_USB_SERIAL_IPW=y
CONFIG_USB_SERIAL_IUU=y
CONFIG_USB_SERIAL_KEYSPAN_PDA=y
CONFIG_USB_SERIAL_KEYSPAN=y
CONFIG_USB_SERIAL_KLSI=y
CONFIG_USB_SERIAL_KOBIL_SCT=y
CONFIG_USB_SERIAL_MCT_U232=y
CONFIG_USB_SERIAL_METRO=y
CONFIG_USB_SERIAL_MOS7720=y
CONFIG_USB_SERIAL_MOS7715_PARPORT=y
CONFIG_USB_SERIAL_MOS7840=y
CONFIG_USB_SERIAL_MXUPORT=y
CONFIG_USB_SERIAL_NAVMAN=y
CONFIG_USB_SERIAL_PL2303=y
CONFIG_USB_SERIAL_OTI6858=y
CONFIG_USB_SERIAL_QCAUX=y
CONFIG_USB_SERIAL_QUALCOMM=y
CONFIG_USB_SERIAL_SPCP8X5=y
CONFIG_USB_SERIAL_SAFE=y
# CONFIG_USB_SERIAL_SAFE_PADDED is not set
CONFIG_USB_SERIAL_SIERRAWIRELESS=y
CONFIG_USB_SERIAL_SYMBOL=y
CONFIG_USB_SERIAL_TI=y
CONFIG_USB_SERIAL_CYBERJACK=y
CONFIG_USB_SERIAL_WWAN=y
CONFIG_USB_SERIAL_OPTION=y
CONFIG_USB_SERIAL_OMNINET=y
CONFIG_USB_SERIAL_OPTICON=y
CONFIG_USB_SERIAL_XSENS_MT=y
CONFIG_USB_SERIAL_WISHBONE=y
CONFIG_USB_SERIAL_SSU100=y
CONFIG_USB_SERIAL_QT2=y
CONFIG_USB_SERIAL_UPD78F0730=y
CONFIG_USB_SERIAL_XR=y
CONFIG_USB_SERIAL_DEBUG=y

#
# USB Miscellaneous drivers
#
CONFIG_USB_USS720=y
CONFIG_USB_EMI62=y
CONFIG_USB_EMI26=y
CONFIG_USB_ADUTUX=y
CONFIG_USB_SEVSEG=y
CONFIG_USB_LEGOTOWER=y
CONFIG_USB_LCD=y
CONFIG_USB_CYPRESS_CY7C63=y
CONFIG_USB_CYTHERM=y
CONFIG_USB_IDMOUSE=y
CONFIG_USB_APPLEDISPLAY=y
CONFIG_APPLE_MFI_FASTCHARGE=y
CONFIG_USB_LJCA=y
CONFIG_USB_SISUSBVGA=y
CONFIG_USB_LD=y
CONFIG_USB_TRANCEVIBRATOR=y
CONFIG_USB_IOWARRIOR=y
CONFIG_USB_TEST=y
CONFIG_USB_EHSET_TEST_FIXTURE=y
CONFIG_USB_ISIGHTFW=y
CONFIG_USB_YUREX=y
CONFIG_USB_EZUSB_FX2=y
CONFIG_USB_HUB_USB251XB=y
CONFIG_USB_HSIC_USB3503=y
CONFIG_USB_HSIC_USB4604=y
CONFIG_USB_LINK_LAYER_TEST=y
CONFIG_USB_CHAOSKEY=y
CONFIG_USB_ONBOARD_DEV=y
# CONFIG_USB_ONBOARD_DEV_USB5744 is not set
CONFIG_USB_ATM=y
CONFIG_USB_SPEEDTOUCH=y
CONFIG_USB_CXACRU=y
CONFIG_USB_UEAGLEATM=y
CONFIG_USB_XUSBATM=y

#
# USB Physical Layer drivers
#
CONFIG_USB_PHY=y
CONFIG_NOP_USB_XCEIV=y
CONFIG_TAHVO_USB=y
CONFIG_TAHVO_USB_HOST_BY_DEFAULT=y
CONFIG_USB_ISP1301=y
CONFIG_USB_ULPI=y
CONFIG_USB_ULPI_VIEWPORT=y
# end of USB Physical Layer drivers

CONFIG_USB_GADGET=y
# CONFIG_USB_GADGET_DEBUG is not set
CONFIG_USB_GADGET_DEBUG_FILES=y
CONFIG_USB_GADGET_DEBUG_FS=y
CONFIG_USB_GADGET_VBUS_DRAW=2
CONFIG_USB_GADGET_STORAGE_NUM_BUFFERS=2
CONFIG_U_SERIAL_CONSOLE=y

#
# USB Peripheral Controller
#
CONFIG_USB_GR_UDC=y
CONFIG_USB_R8A66597=y
CONFIG_USB_PXA27X=y
CONFIG_USB_SNP_CORE=y
CONFIG_USB_SNP_UDC_PLAT=y
# CONFIG_USB_M66592 is not set
CONFIG_USB_BDC_UDC=y
CONFIG_USB_AMD5536UDC=y
CONFIG_USB_NET2280=y
CONFIG_USB_GOKU=y
CONFIG_USB_EG20T=y
# CONFIG_USB_GADGET_XILINX is not set
CONFIG_USB_MAX3420_UDC=y
CONFIG_USB_CDNS2_UDC=y
CONFIG_USB_DUMMY_HCD=y
# end of USB Peripheral Controller

CONFIG_USB_LIBCOMPOSITE=y
CONFIG_USB_F_ACM=y
CONFIG_USB_F_SS_LB=y
CONFIG_USB_U_SERIAL=y
CONFIG_USB_U_ETHER=y
CONFIG_USB_F_SERIAL=y
CONFIG_USB_F_OBEX=y
CONFIG_USB_F_NCM=y
CONFIG_USB_F_ECM=y
CONFIG_USB_F_PHONET=y
CONFIG_USB_F_EEM=y
CONFIG_USB_F_SUBSET=y
CONFIG_USB_F_RNDIS=y
CONFIG_USB_F_MASS_STORAGE=y
CONFIG_USB_F_FS=y
CONFIG_USB_F_UVC=y
CONFIG_USB_F_HID=y
CONFIG_USB_F_PRINTER=y
CONFIG_USB_F_TCM=y
CONFIG_USB_CONFIGFS=y
CONFIG_USB_CONFIGFS_SERIAL=y
CONFIG_USB_CONFIGFS_ACM=y
CONFIG_USB_CONFIGFS_OBEX=y
CONFIG_USB_CONFIGFS_NCM=y
CONFIG_USB_CONFIGFS_ECM=y
CONFIG_USB_CONFIGFS_ECM_SUBSET=y
CONFIG_USB_CONFIGFS_RNDIS=y
CONFIG_USB_CONFIGFS_EEM=y
CONFIG_USB_CONFIGFS_PHONET=y
CONFIG_USB_CONFIGFS_MASS_STORAGE=y
CONFIG_USB_CONFIGFS_F_LB_SS=y
CONFIG_USB_CONFIGFS_F_FS=y
CONFIG_USB_CONFIGFS_F_HID=y
CONFIG_USB_CONFIGFS_F_UVC=y
CONFIG_USB_CONFIGFS_F_PRINTER=y
CONFIG_USB_CONFIGFS_F_TCM=y

#
# USB Gadget precomposed configurations
#
# CONFIG_USB_ZERO is not set
# CONFIG_USB_ETH is not set
# CONFIG_USB_G_NCM is not set
CONFIG_USB_GADGETFS=y
# CONFIG_USB_FUNCTIONFS is not set
# CONFIG_USB_MASS_STORAGE is not set
# CONFIG_USB_GADGET_TARGET is not set
# CONFIG_USB_G_SERIAL is not set
# CONFIG_USB_G_PRINTER is not set
# CONFIG_USB_CDC_COMPOSITE is not set
# CONFIG_USB_G_NOKIA is not set
# CONFIG_USB_G_ACM_MS is not set
# CONFIG_USB_G_MULTI is not set
# CONFIG_USB_G_HID is not set
# CONFIG_USB_G_DBGP is not set
# CONFIG_USB_G_WEBCAM is not set
CONFIG_USB_RAW_GADGET=y
# end of USB Gadget precomposed configurations

CONFIG_TYPEC=y
CONFIG_TYPEC_TCPM=y
CONFIG_TYPEC_TCPCI=y
CONFIG_TYPEC_RT1711H=y
CONFIG_TYPEC_MT6360=y
CONFIG_TYPEC_TCPCI_MT6370=y
CONFIG_TYPEC_TCPCI_MAXIM=y
CONFIG_TYPEC_FUSB302=y
CONFIG_TYPEC_UCSI=y
CONFIG_UCSI_CCG=y
CONFIG_UCSI_ACPI=y
CONFIG_UCSI_STM32G0=y
CONFIG_UCSI_PMIC_GLINK=y
CONFIG_TYPEC_TPS6598X=y
CONFIG_TYPEC_ANX7411=y
CONFIG_TYPEC_RT1719=y
CONFIG_TYPEC_HD3SS3220=y
CONFIG_TYPEC_STUSB160X=y
CONFIG_TYPEC_WUSB3801=y

#
# USB Type-C Multiplexer/DeMultiplexer Switch support
#
CONFIG_TYPEC_MUX_FSA4480=y
CONFIG_TYPEC_MUX_GPIO_SBU=y
CONFIG_TYPEC_MUX_PI3USB30532=y
CONFIG_TYPEC_MUX_IT5205=y
CONFIG_TYPEC_MUX_NB7VPQ904M=y
CONFIG_TYPEC_MUX_PS883X=y
CONFIG_TYPEC_MUX_PTN36502=y
# CONFIG_TYPEC_MUX_TUSB1046 is not set
CONFIG_TYPEC_MUX_WCD939X_USBSS=y
# end of USB Type-C Multiplexer/DeMultiplexer Switch support

#
# USB Type-C Alternate Mode drivers
#
CONFIG_TYPEC_DP_ALTMODE=y
CONFIG_TYPEC_NVIDIA_ALTMODE=y
# CONFIG_TYPEC_TBT_ALTMODE is not set
# end of USB Type-C Alternate Mode drivers

CONFIG_USB_ROLE_SWITCH=y
CONFIG_MMC=y
CONFIG_PWRSEQ_EMMC=y
# CONFIG_PWRSEQ_SD8787 is not set
CONFIG_PWRSEQ_SIMPLE=y
CONFIG_MMC_BLOCK=y
CONFIG_MMC_BLOCK_MINORS=32
# CONFIG_SDIO_UART is not set
# CONFIG_MMC_TEST is not set
# CONFIG_MMC_CRYPTO is not set

#
# MMC/SD/SDIO Host Controller Drivers
#
# CONFIG_MMC_DEBUG is not set
CONFIG_MMC_ARMMMCI=y
CONFIG_MMC_STM32_SDMMC=y
CONFIG_MMC_SDHCI=y
CONFIG_MMC_SDHCI_IO_ACCESSORS=y
# CONFIG_MMC_SDHCI_PCI is not set
CONFIG_MMC_SDHCI_ACPI=y
CONFIG_MMC_SDHCI_PLTFM=y
CONFIG_MMC_SDHCI_OF_ARASAN=y
# CONFIG_MMC_SDHCI_OF_AT91 is not set
CONFIG_MMC_SDHCI_OF_DWCMSHC=y
CONFIG_MMC_SDHCI_CADENCE=y
CONFIG_MMC_SDHCI_F_SDH30=y
# CONFIG_MMC_SDHCI_MILBEAUT is not set
# CONFIG_MMC_TIFM_SD is not set
CONFIG_MMC_SPI=y
# CONFIG_MMC_SDRICOH_CS is not set
# CONFIG_MMC_CB710 is not set
# CONFIG_MMC_VIA_SDMMC is not set
CONFIG_MMC_DW=y
CONFIG_MMC_DW_PLTFM=y
# CONFIG_MMC_DW_BLUEFIELD is not set
CONFIG_MMC_DW_EXYNOS=y
CONFIG_MMC_DW_HI3798CV200=y
# CONFIG_MMC_DW_HI3798MV200 is not set
CONFIG_MMC_DW_K3=y
# CONFIG_MMC_DW_PCI is not set
CONFIG_MMC_VUB300=y
CONFIG_MMC_USHC=y
# CONFIG_MMC_USDHI6ROL0 is not set
CONFIG_MMC_REALTEK_USB=y
CONFIG_MMC_CQHCI=y
CONFIG_MMC_HSQ=y
# CONFIG_MMC_TOSHIBA_PCI is not set
CONFIG_MMC_MTK=y
CONFIG_MMC_SDHCI_XENON=y
CONFIG_SCSI_UFSHCD=y
CONFIG_SCSI_UFS_BSG=y
CONFIG_SCSI_UFS_CRYPTO=y
# CONFIG_SCSI_UFS_FAULT_INJECTION is not set
# CONFIG_SCSI_UFS_HWMON is not set
# CONFIG_SCSI_UFSHCD_PCI is not set
CONFIG_SCSI_UFSHCD_PLATFORM=y
CONFIG_SCSI_UFS_CDNS_PLATFORM=y
# CONFIG_SCSI_UFS_DWC_TC_PLATFORM is not set
CONFIG_MEMSTICK=y
# CONFIG_MEMSTICK_DEBUG is not set

#
# MemoryStick drivers
#
# CONFIG_MEMSTICK_UNSAFE_RESUME is not set
# CONFIG_MSPRO_BLOCK is not set
# CONFIG_MS_BLOCK is not set

#
# MemoryStick Host Controller Drivers
#
# CONFIG_MEMSTICK_TIFM_MS is not set
# CONFIG_MEMSTICK_JMICRON_38X is not set
# CONFIG_MEMSTICK_R592 is not set
CONFIG_MEMSTICK_REALTEK_USB=y
CONFIG_NEW_LEDS=y
CONFIG_LEDS_CLASS=y
CONFIG_LEDS_CLASS_FLASH=y
CONFIG_LEDS_CLASS_MULTICOLOR=y
# CONFIG_LEDS_BRIGHTNESS_HW_CHANGED is not set

#
# LED drivers
#
# CONFIG_LEDS_AN30259A is not set
# CONFIG_LEDS_OSRAM_AMS_AS3668 is not set
# CONFIG_LEDS_AW200XX is not set
# CONFIG_LEDS_AW2013 is not set
# CONFIG_LEDS_BCM6328 is not set
# CONFIG_LEDS_BCM6358 is not set
# CONFIG_LEDS_CR0014114 is not set
# CONFIG_LEDS_EL15203000 is not set
# CONFIG_LEDS_LM3530 is not set
# CONFIG_LEDS_LM3532 is not set
# CONFIG_LEDS_LM3642 is not set
CONFIG_LEDS_LM3692X=y
# CONFIG_LEDS_MT6323 is not set
CONFIG_LEDS_PCA9532=y
# CONFIG_LEDS_PCA9532_GPIO is not set
CONFIG_LEDS_GPIO=y
# CONFIG_LEDS_LP3944 is not set
# CONFIG_LEDS_LP3952 is not set
# CONFIG_LEDS_LP50XX is not set
# CONFIG_LEDS_LP55XX_COMMON is not set
# CONFIG_LEDS_LP8860 is not set
# CONFIG_LEDS_LP8864 is not set
# CONFIG_LEDS_PCA955X is not set
# CONFIG_LEDS_PCA963X is not set
# CONFIG_LEDS_PCA995X is not set
# CONFIG_LEDS_DAC124S085 is not set
CONFIG_LEDS_PWM=y
# CONFIG_LEDS_REGULATOR is not set
# CONFIG_LEDS_BD2606MVV is not set
# CONFIG_LEDS_BD2802 is not set
# CONFIG_LEDS_LT3593 is not set
# CONFIG_LEDS_TCA6507 is not set
# CONFIG_LEDS_TLC591XX is not set
# CONFIG_LEDS_LM355x is not set
# CONFIG_LEDS_IS31FL319X is not set
# CONFIG_LEDS_IS31FL32XX is not set

#
# LED driver for blink(1) USB RGB LED is under Special HID drivers (HID_THINGM)
#
# CONFIG_LEDS_BLINKM is not set
CONFIG_LEDS_SYSCON=y
# CONFIG_LEDS_MLXREG is not set
# CONFIG_LEDS_USER is not set
# CONFIG_LEDS_SPI_BYTE is not set
# CONFIG_LEDS_LM3697 is not set
# CONFIG_LEDS_ST1202 is not set

#
# Flash and Torch LED drivers
#
# CONFIG_LEDS_AAT1290 is not set
# CONFIG_LEDS_AS3645A is not set
# CONFIG_LEDS_KTD2692 is not set
# CONFIG_LEDS_LM3601X is not set
# CONFIG_LEDS_MT6360 is not set
# CONFIG_LEDS_MT6370_FLASH is not set
# CONFIG_LEDS_RT4505 is not set
# CONFIG_LEDS_RT8515 is not set
# CONFIG_LEDS_SGM3140 is not set
# CONFIG_LEDS_SY7802 is not set
# CONFIG_LEDS_TPS6131X is not set

#
# RGB LED drivers
#
# CONFIG_LEDS_GROUP_MULTICOLOR is not set
# CONFIG_LEDS_KTD202X is not set
# CONFIG_LEDS_LP5812 is not set
# CONFIG_LEDS_NCP5623 is not set
# CONFIG_LEDS_PWM_MULTICOLOR is not set
CONFIG_LEDS_QCOM_LPG=y
# CONFIG_LEDS_MT6370_RGB is not set

#
# LED Triggers
#
CONFIG_LEDS_TRIGGERS=y
CONFIG_LEDS_TRIGGER_TIMER=y
# CONFIG_LEDS_TRIGGER_ONESHOT is not set
CONFIG_LEDS_TRIGGER_DISK=y
# CONFIG_LEDS_TRIGGER_MTD is not set
CONFIG_LEDS_TRIGGER_HEARTBEAT=y
# CONFIG_LEDS_TRIGGER_BACKLIGHT is not set
CONFIG_LEDS_TRIGGER_CPU=y
# CONFIG_LEDS_TRIGGER_ACTIVITY is not set
# CONFIG_LEDS_TRIGGER_GPIO is not set
CONFIG_LEDS_TRIGGER_DEFAULT_ON=y

#
# iptables trigger is under Netfilter config (LED target)
#
# CONFIG_LEDS_TRIGGER_TRANSIENT is not set
# CONFIG_LEDS_TRIGGER_CAMERA is not set
CONFIG_LEDS_TRIGGER_PANIC=y
# CONFIG_LEDS_TRIGGER_NETDEV is not set
# CONFIG_LEDS_TRIGGER_PATTERN is not set
# CONFIG_LEDS_TRIGGER_TTY is not set
# CONFIG_LEDS_TRIGGER_INPUT_EVENTS is not set

#
# Simatic LED drivers
#
# CONFIG_ACCESSIBILITY is not set
CONFIG_INFINIBAND=y
CONFIG_INFINIBAND_USER_MAD=y
CONFIG_INFINIBAND_USER_ACCESS=y
CONFIG_INFINIBAND_USER_MEM=y
CONFIG_INFINIBAND_ON_DEMAND_PAGING=y
CONFIG_INFINIBAND_ADDR_TRANS=y
CONFIG_INFINIBAND_ADDR_TRANS_CONFIGFS=y
CONFIG_INFINIBAND_VIRT_DMA=y
# CONFIG_INFINIBAND_EFA is not set
# CONFIG_INFINIBAND_ERDMA is not set
# CONFIG_MLX4_INFINIBAND is not set
# CONFIG_INFINIBAND_MTHCA is not set
# CONFIG_INFINIBAND_OCRDMA is not set
# CONFIG_INFINIBAND_VMWARE_PVRDMA is not set
CONFIG_RDMA_RXE=y
CONFIG_RDMA_SIW=y
CONFIG_INFINIBAND_IPOIB=y
CONFIG_INFINIBAND_IPOIB_CM=y
CONFIG_INFINIBAND_IPOIB_DEBUG=y
# CONFIG_INFINIBAND_IPOIB_DEBUG_DATA is not set
CONFIG_INFINIBAND_SRP=y
# CONFIG_INFINIBAND_SRPT is not set
CONFIG_INFINIBAND_ISER=y
CONFIG_INFINIBAND_RTRS=y
CONFIG_INFINIBAND_RTRS_CLIENT=y
# CONFIG_INFINIBAND_RTRS_SERVER is not set
CONFIG_EDAC_SUPPORT=y
CONFIG_EDAC=y
# CONFIG_EDAC_DEBUG is not set
CONFIG_EDAC_GHES=y
# CONFIG_EDAC_SCRUB is not set
# CONFIG_EDAC_ECS is not set
# CONFIG_EDAC_MEM_REPAIR is not set
# CONFIG_EDAC_THUNDERX is not set
# CONFIG_EDAC_XGENE is not set
# CONFIG_EDAC_DMC520 is not set
# CONFIG_EDAC_CORTEX_A72 is not set
CONFIG_RTC_LIB=y
CONFIG_RTC_CLASS=y
# CONFIG_RTC_HCTOSYS is not set
CONFIG_RTC_SYSTOHC=y
CONFIG_RTC_SYSTOHC_DEVICE="rtc0"
# CONFIG_RTC_DEBUG is not set
# CONFIG_RTC_NVMEM is not set

#
# RTC interfaces
#
CONFIG_RTC_INTF_SYSFS=y
CONFIG_RTC_INTF_PROC=y
CONFIG_RTC_INTF_DEV=y
# CONFIG_RTC_INTF_DEV_UIE_EMUL is not set
# CONFIG_RTC_DRV_TEST is not set

#
# I2C RTC drivers
#
# CONFIG_RTC_DRV_ABB5ZES3 is not set
# CONFIG_RTC_DRV_ABEOZ9 is not set
# CONFIG_RTC_DRV_ABX80X is not set
CONFIG_RTC_DRV_DS1307=y
# CONFIG_RTC_DRV_DS1307_CENTURY is not set
# CONFIG_RTC_DRV_DS1374 is not set
# CONFIG_RTC_DRV_DS1672 is not set
CONFIG_RTC_DRV_HYM8563=y
# CONFIG_RTC_DRV_MAX6900 is not set
# CONFIG_RTC_DRV_MAX31335 is not set
CONFIG_RTC_DRV_MAX77686=y
# CONFIG_RTC_DRV_NCT3018Y is not set
CONFIG_RTC_DRV_RK808=y
# CONFIG_RTC_DRV_RS5C372 is not set
CONFIG_RTC_DRV_ISL1208=y
# CONFIG_RTC_DRV_ISL12022 is not set
# CONFIG_RTC_DRV_ISL12026 is not set
# CONFIG_RTC_DRV_X1205 is not set
# CONFIG_RTC_DRV_PCF8523 is not set
CONFIG_RTC_DRV_PCF85363=y
CONFIG_RTC_DRV_PCF8563=y
# CONFIG_RTC_DRV_PCF8583 is not set
CONFIG_RTC_DRV_M41T80=y
# CONFIG_RTC_DRV_M41T80_WDT is not set
CONFIG_RTC_DRV_BQ32K=y
# CONFIG_RTC_DRV_TWL4030 is not set
CONFIG_RTC_DRV_TPS6594=y
# CONFIG_RTC_DRV_S35390A is not set
# CONFIG_RTC_DRV_FM3130 is not set
# CONFIG_RTC_DRV_RX8010 is not set
# CONFIG_RTC_DRV_RX8111 is not set
CONFIG_RTC_DRV_RX8581=y
# CONFIG_RTC_DRV_RX8025 is not set
# CONFIG_RTC_DRV_EM3027 is not set
CONFIG_RTC_DRV_RV3028=y
# CONFIG_RTC_DRV_RV3032 is not set
CONFIG_RTC_DRV_RV8803=y
CONFIG_RTC_DRV_S5M=y
# CONFIG_RTC_DRV_SD2405AL is not set
# CONFIG_RTC_DRV_SD3078 is not set

#
# SPI RTC drivers
#
# CONFIG_RTC_DRV_M41T93 is not set
# CONFIG_RTC_DRV_M41T94 is not set
# CONFIG_RTC_DRV_DS1302 is not set
# CONFIG_RTC_DRV_DS1305 is not set
# CONFIG_RTC_DRV_DS1343 is not set
# CONFIG_RTC_DRV_DS1347 is not set
# CONFIG_RTC_DRV_DS1390 is not set
# CONFIG_RTC_DRV_MAX6916 is not set
# CONFIG_RTC_DRV_R9701 is not set
# CONFIG_RTC_DRV_RX4581 is not set
# CONFIG_RTC_DRV_RS5C348 is not set
# CONFIG_RTC_DRV_MAX6902 is not set
# CONFIG_RTC_DRV_PCF2123 is not set
# CONFIG_RTC_DRV_MCP795 is not set
CONFIG_RTC_I2C_AND_SPI=y

#
# SPI and I2C RTC drivers
#
CONFIG_RTC_DRV_DS3232=y
CONFIG_RTC_DRV_DS3232_HWMON=y
CONFIG_RTC_DRV_PCF2127=y
CONFIG_RTC_DRV_PCF85063=y
# CONFIG_RTC_DRV_RV3029C2 is not set
# CONFIG_RTC_DRV_RX6110 is not set

#
# Platform RTC drivers
#
# CONFIG_RTC_DRV_DS1286 is not set
# CONFIG_RTC_DRV_DS1511 is not set
# CONFIG_RTC_DRV_DS1553 is not set
# CONFIG_RTC_DRV_DS1685_FAMILY is not set
# CONFIG_RTC_DRV_DS1742 is not set
# CONFIG_RTC_DRV_DS2404 is not set
CONFIG_RTC_DRV_DA9063=y
CONFIG_RTC_DRV_EFI=y
# CONFIG_RTC_DRV_STK17TA8 is not set
# CONFIG_RTC_DRV_M48T86 is not set
# CONFIG_RTC_DRV_M48T35 is not set
# CONFIG_RTC_DRV_M48T59 is not set
# CONFIG_RTC_DRV_MSM6242 is not set
# CONFIG_RTC_DRV_RP5C01 is not set
# CONFIG_RTC_DRV_OPTEE is not set
# CONFIG_RTC_DRV_ZYNQMP is not set

#
# on-CPU RTC drivers
#
# CONFIG_RTC_DRV_PL030 is not set
CONFIG_RTC_DRV_PL031=y
# CONFIG_RTC_DRV_CADENCE is not set
# CONFIG_RTC_DRV_FTRTC010 is not set
CONFIG_RTC_DRV_IMX_BBM_SCMI=y
CONFIG_RTC_DRV_MT6397=y
# CONFIG_RTC_DRV_R7301 is not set
# CONFIG_RTC_DRV_GOLDFISH is not set

#
# HID Sensor RTC drivers
#
CONFIG_RTC_DRV_HID_SENSOR_TIME=y
CONFIG_DMADEVICES=y
# CONFIG_DMADEVICES_DEBUG is not set

#
# DMA Devices
#
CONFIG_ASYNC_TX_ENABLE_CHANNEL_SWITCH=y
CONFIG_DMA_ENGINE=y
CONFIG_DMA_VIRTUAL_CHANNELS=y
CONFIG_DMA_ACPI=y
CONFIG_DMA_OF=y
# CONFIG_ALTERA_MSGDMA is not set
# CONFIG_AMBA_PL08X is not set
# CONFIG_ARM_DMA350 is not set
CONFIG_BCM_SBA_RAID=y
# CONFIG_DW_AXI_DMAC is not set
CONFIG_FSL_EDMA=y
# CONFIG_FSL_QDMA is not set
# CONFIG_INTEL_IDMA64 is not set
CONFIG_MV_XOR_V2=y
CONFIG_PL330_DMA=y
# CONFIG_PLX_DMA is not set
# CONFIG_SWITCHTEC_DMA is not set
# CONFIG_XILINX_DMA is not set
# CONFIG_XILINX_XDMA is not set
# CONFIG_XILINX_ZYNQMP_DMA is not set
# CONFIG_XILINX_ZYNQMP_DPDMA is not set
# CONFIG_AMD_QDMA is not set
CONFIG_QCOM_HIDMA_MGMT=y
CONFIG_QCOM_HIDMA=y
# CONFIG_DW_DMAC is not set
# CONFIG_DW_DMAC_PCI is not set
CONFIG_DW_EDMA=y
# CONFIG_DW_EDMA_PCIE is not set
# CONFIG_SF_PDMA is not set

#
# DMA Clients
#
CONFIG_ASYNC_TX_DMA=y
# CONFIG_DMATEST is not set
CONFIG_DMA_ENGINE_RAID=y

#
# DMABUF options
#
CONFIG_SYNC_FILE=y
CONFIG_SW_SYNC=y
CONFIG_UDMABUF=y
# CONFIG_DMABUF_DEBUG is not set
# CONFIG_DMABUF_SELFTESTS is not set
CONFIG_DMABUF_HEAPS=y
CONFIG_DMABUF_HEAPS_SYSTEM=y
CONFIG_DMABUF_HEAPS_CMA=y
# end of DMABUF options

# CONFIG_UIO is not set
CONFIG_VFIO=y
# CONFIG_VFIO_DEVICE_CDEV is not set
CONFIG_VFIO_GROUP=y
# CONFIG_VFIO_CONTAINER is not set
# CONFIG_VFIO_NOIOMMU is not set
CONFIG_VFIO_VIRQFD=y
# CONFIG_VFIO_DEBUGFS is not set

#
# VFIO support for PCI devices
#
CONFIG_VFIO_PCI_CORE=y
CONFIG_VFIO_PCI_INTX=y
CONFIG_VFIO_PCI=y
# CONFIG_HISI_ACC_VFIO_PCI is not set
# CONFIG_VIRTIO_VFIO_PCI is not set
# CONFIG_NVGRACE_GPU_VFIO_PCI is not set
# end of VFIO support for PCI devices

#
# VFIO support for platform devices
#
# CONFIG_VFIO_PLATFORM is not set
# CONFIG_VFIO_AMBA is not set
# end of VFIO support for platform devices

CONFIG_IRQ_BYPASS_MANAGER=y
# CONFIG_VIRT_DRIVERS is not set
CONFIG_VIRTIO_ANCHOR=y
CONFIG_VIRTIO=y
CONFIG_VIRTIO_PCI_LIB=y
CONFIG_VIRTIO_PCI_LIB_LEGACY=y
CONFIG_VIRTIO_MENU=y
CONFIG_VIRTIO_PCI=y
CONFIG_VIRTIO_PCI_LEGACY=y
CONFIG_VIRTIO_VDPA=y
CONFIG_VIRTIO_BALLOON=y
# CONFIG_VIRTIO_MEM is not set
CONFIG_VIRTIO_INPUT=y
CONFIG_VIRTIO_MMIO=y
CONFIG_VIRTIO_MMIO_CMDLINE_DEVICES=y
CONFIG_VIRTIO_DMA_SHARED_BUFFER=y
# CONFIG_VIRTIO_DEBUG is not set
# CONFIG_VIRTIO_RTC is not set
CONFIG_VDPA=y
CONFIG_VDPA_SIM=y
CONFIG_VDPA_SIM_NET=y
CONFIG_VDPA_SIM_BLOCK=y
# CONFIG_VDPA_USER is not set
# CONFIG_IFCVF is not set
# CONFIG_MLX5_VDPA_STEERING_DEBUG is not set
CONFIG_VP_VDPA=y
# CONFIG_SNET_VDPA is not set
# CONFIG_OCTEONEP_VDPA is not set
CONFIG_VHOST_IOTLB=y
CONFIG_VHOST_RING=y
CONFIG_VHOST_TASK=y
CONFIG_VHOST=y
CONFIG_VHOST_MENU=y
CONFIG_VHOST_NET=y
# CONFIG_VHOST_SCSI is not set
CONFIG_VHOST_VSOCK=y
CONFIG_VHOST_VDPA=y
CONFIG_VHOST_CROSS_ENDIAN_LEGACY=y
CONFIG_VHOST_ENABLE_FORK_OWNER_CONTROL=y

#
# Microsoft Hyper-V guest support
#
# CONFIG_HYPERV is not set
# end of Microsoft Hyper-V guest support

CONFIG_GREYBUS=y
CONFIG_GREYBUS_BEAGLEPLAY=y
CONFIG_GREYBUS_ES2=y
CONFIG_COMEDI=y
# CONFIG_COMEDI_DEBUG is not set
CONFIG_COMEDI_DEFAULT_BUF_SIZE_KB=2048
CONFIG_COMEDI_DEFAULT_BUF_MAXSIZE_KB=20480
CONFIG_COMEDI_MISC_DRIVERS=y
CONFIG_COMEDI_BOND=y
CONFIG_COMEDI_TEST=y
CONFIG_COMEDI_PARPORT=y
CONFIG_COMEDI_PCI_DRIVERS=y
CONFIG_COMEDI_8255_PCI=y
# CONFIG_COMEDI_ADDI_APCI_1032 is not set
# CONFIG_COMEDI_ADDI_APCI_1500 is not set
# CONFIG_COMEDI_ADDI_APCI_1516 is not set
# CONFIG_COMEDI_ADDI_APCI_1564 is not set
# CONFIG_COMEDI_ADDI_APCI_16XX is not set
# CONFIG_COMEDI_ADDI_APCI_2032 is not set
# CONFIG_COMEDI_ADDI_APCI_2200 is not set
# CONFIG_COMEDI_ADDI_APCI_3120 is not set
# CONFIG_COMEDI_ADDI_APCI_3501 is not set
# CONFIG_COMEDI_ADDI_APCI_3XXX is not set
# CONFIG_COMEDI_ADL_PCI6208 is not set
# CONFIG_COMEDI_ADL_PCI7250 is not set
# CONFIG_COMEDI_ADL_PCI7X3X is not set
# CONFIG_COMEDI_ADL_PCI8164 is not set
# CONFIG_COMEDI_ADL_PCI9111 is not set
CONFIG_COMEDI_ADL_PCI9118=y
# CONFIG_COMEDI_ADV_PCI1710 is not set
# CONFIG_COMEDI_ADV_PCI1720 is not set
# CONFIG_COMEDI_ADV_PCI1723 is not set
# CONFIG_COMEDI_ADV_PCI1724 is not set
# CONFIG_COMEDI_ADV_PCI1760 is not set
# CONFIG_COMEDI_ADV_PCI_DIO is not set
# CONFIG_COMEDI_AMPLC_DIO200_PCI is not set
# CONFIG_COMEDI_AMPLC_PC236_PCI is not set
# CONFIG_COMEDI_AMPLC_PC263_PCI is not set
# CONFIG_COMEDI_AMPLC_PCI224 is not set
# CONFIG_COMEDI_AMPLC_PCI230 is not set
# CONFIG_COMEDI_CONTEC_PCI_DIO is not set
# CONFIG_COMEDI_DAS08_PCI is not set
# CONFIG_COMEDI_DT3000 is not set
# CONFIG_COMEDI_DYNA_PCI10XX is not set
# CONFIG_COMEDI_GSC_HPDI is not set
# CONFIG_COMEDI_MF6X4 is not set
# CONFIG_COMEDI_ICP_MULTI is not set
# CONFIG_COMEDI_DAQBOARD2000 is not set
# CONFIG_COMEDI_JR3_PCI is not set
# CONFIG_COMEDI_KE_COUNTER is not set
# CONFIG_COMEDI_CB_PCIDAS64 is not set
# CONFIG_COMEDI_CB_PCIDAS is not set
# CONFIG_COMEDI_CB_PCIDDA is not set
# CONFIG_COMEDI_CB_PCIMDAS is not set
# CONFIG_COMEDI_CB_PCIMDDA is not set
# CONFIG_COMEDI_ME4000 is not set
# CONFIG_COMEDI_ME_DAQ is not set
# CONFIG_COMEDI_NI_6527 is not set
# CONFIG_COMEDI_NI_65XX is not set
# CONFIG_COMEDI_NI_660X is not set
# CONFIG_COMEDI_NI_670X is not set
CONFIG_COMEDI_NI_LABPC_PCI=y
# CONFIG_COMEDI_NI_PCIDIO is not set
# CONFIG_COMEDI_NI_PCIMIO is not set
# CONFIG_COMEDI_RTD520 is not set
# CONFIG_COMEDI_S626 is not set
CONFIG_COMEDI_PCMCIA_DRIVERS=y
# CONFIG_COMEDI_CB_DAS16_CS is not set
# CONFIG_COMEDI_DAS08_CS is not set
CONFIG_COMEDI_NI_DAQ_700_CS=y
# CONFIG_COMEDI_NI_DAQ_DIO24_CS is not set
CONFIG_COMEDI_NI_LABPC_CS=y
# CONFIG_COMEDI_NI_MIO_CS is not set
# CONFIG_COMEDI_QUATECH_DAQP_CS is not set
CONFIG_COMEDI_USB_DRIVERS=y
CONFIG_COMEDI_DT9812=y
CONFIG_COMEDI_NI_USB6501=y
CONFIG_COMEDI_USBDUX=y
CONFIG_COMEDI_USBDUXFAST=y
CONFIG_COMEDI_USBDUXSIGMA=y
CONFIG_COMEDI_VMK80XX=y
CONFIG_COMEDI_8254=y
CONFIG_COMEDI_8255=y
CONFIG_COMEDI_8255_SA=y
CONFIG_COMEDI_KCOMEDILIB=y
CONFIG_COMEDI_NI_LABPC=y
# CONFIG_COMEDI_TESTS is not set
# CONFIG_GPIB is not set
CONFIG_STAGING=y
# CONFIG_RTL8723BS is not set

#
# IIO staging drivers
#

#
# Accelerometers
#
# CONFIG_ADIS16203 is not set
# end of Accelerometers

#
# Analog to digital converters
#
# CONFIG_AD7816 is not set
# end of Analog to digital converters

#
# Analog digital bi-direction converters
#
# CONFIG_ADT7316 is not set
# end of Analog digital bi-direction converters

#
# Direct Digital Synthesis
#
# CONFIG_AD9832 is not set
# CONFIG_AD9834 is not set
# end of Direct Digital Synthesis

#
# Network Analyzer, Impedance Converters
#
# CONFIG_AD5933 is not set
# end of Network Analyzer, Impedance Converters
# end of IIO staging drivers

# CONFIG_FB_SM750 is not set
CONFIG_STAGING_MEDIA=y
# CONFIG_DVB_AV7110 is not set
CONFIG_VIDEO_MAX96712=y
# CONFIG_STAGING_MEDIA_DEPRECATED is not set
# CONFIG_FB_TFT is not set
# CONFIG_MOST_COMPONENTS is not set
# CONFIG_GREYBUS_BOOTROM is not set
# CONFIG_GREYBUS_FIRMWARE is not set
CONFIG_GREYBUS_HID=y
# CONFIG_GREYBUS_LIGHT is not set
# CONFIG_GREYBUS_LOG is not set
# CONFIG_GREYBUS_LOOPBACK is not set
# CONFIG_GREYBUS_POWER is not set
# CONFIG_GREYBUS_RAW is not set
# CONFIG_GREYBUS_VIBRATOR is not set
CONFIG_GREYBUS_BRIDGED_PHY=y
# CONFIG_GREYBUS_GPIO is not set
# CONFIG_GREYBUS_I2C is not set
# CONFIG_GREYBUS_PWM is not set
# CONFIG_GREYBUS_SDIO is not set
# CONFIG_GREYBUS_SPI is not set
# CONFIG_GREYBUS_UART is not set
CONFIG_GREYBUS_USB=y
# CONFIG_XIL_AXIS_FIFO is not set
# CONFIG_VME_BUS is not set
# CONFIG_GOLDFISH is not set
# CONFIG_CHROME_PLATFORMS is not set
# CONFIG_MELLANOX_PLATFORM is not set
CONFIG_SURFACE_PLATFORMS=y
# CONFIG_SURFACE_3_POWER_OPREGION is not set
# CONFIG_SURFACE_ACPI_NOTIFY is not set
# CONFIG_SURFACE_AGGREGATOR_CDEV is not set
# CONFIG_SURFACE_AGGREGATOR_HUB is not set
CONFIG_SURFACE_AGGREGATOR_REGISTRY=y
# CONFIG_SURFACE_AGGREGATOR_TABLET_SWITCH is not set
# CONFIG_SURFACE_DTX is not set
# CONFIG_SURFACE_GPE is not set
# CONFIG_SURFACE_HOTPLUG is not set
# CONFIG_SURFACE_PLATFORM_PROFILE is not set
# CONFIG_SURFACE_PRO3_BUTTON is not set
CONFIG_SURFACE_AGGREGATOR=y
CONFIG_SURFACE_AGGREGATOR_BUS=y
CONFIG_ARM64_PLATFORM_DEVICES=y
CONFIG_HAVE_CLK=y
CONFIG_HAVE_CLK_PREPARE=y
CONFIG_COMMON_CLK=y

#
# Clock driver for ARM Reference designs
#
# CONFIG_CLK_ICST is not set
# CONFIG_CLK_SP810 is not set
# CONFIG_CLK_VEXPRESS_OSC is not set
# end of Clock driver for ARM Reference designs

# CONFIG_LMK04832 is not set
# CONFIG_COMMON_CLK_MAX77686 is not set
# CONFIG_COMMON_CLK_MAX9485 is not set
# CONFIG_COMMON_CLK_RK808 is not set
# CONFIG_COMMON_CLK_RP1 is not set
CONFIG_COMMON_CLK_SCMI=y
# CONFIG_COMMON_CLK_SCPI is not set
# CONFIG_COMMON_CLK_SI5341 is not set
# CONFIG_COMMON_CLK_SI5351 is not set
# CONFIG_COMMON_CLK_SI514 is not set
# CONFIG_COMMON_CLK_SI544 is not set
# CONFIG_COMMON_CLK_SI570 is not set
# CONFIG_COMMON_CLK_CDCE706 is not set
# CONFIG_COMMON_CLK_CDCE925 is not set
# CONFIG_COMMON_CLK_CS2000_CP is not set
# CONFIG_COMMON_CLK_S2MPS11 is not set
# CONFIG_CLK_TWL is not set
# CONFIG_COMMON_CLK_AXI_CLKGEN is not set
# CONFIG_COMMON_CLK_XGENE is not set
# CONFIG_COMMON_CLK_PWM is not set
# CONFIG_COMMON_CLK_RS9_PCIE is not set
# CONFIG_COMMON_CLK_SI521XX is not set
# CONFIG_COMMON_CLK_VC3 is not set
# CONFIG_COMMON_CLK_VC5 is not set
# CONFIG_COMMON_CLK_VC7 is not set
# CONFIG_COMMON_CLK_BD718XX is not set
# CONFIG_COMMON_CLK_FIXED_MMIO is not set
# CONFIG_XILINX_VCU is not set
# CONFIG_COMMON_CLK_XLNX_CLKWZRD is not set
CONFIG_HWSPINLOCK=y

#
# Clock Source drivers
#
CONFIG_TIMER_OF=y
CONFIG_TIMER_ACPI=y
CONFIG_TIMER_PROBE=y
CONFIG_CLKSRC_MMIO=y
CONFIG_ARM_ARCH_TIMER=y
CONFIG_ARM_ARCH_TIMER_EVTSTREAM=y
CONFIG_ARM_ARCH_TIMER_OOL_WORKAROUND=y
CONFIG_FSL_ERRATUM_A008585=y
CONFIG_HISILICON_ERRATUM_161010101=y
CONFIG_ARM64_ERRATUM_858921=y
CONFIG_ARM_TIMER_SP804=y
# end of Clock Source drivers

CONFIG_MAILBOX=y
CONFIG_ARM_MHU=y
# CONFIG_ARM_MHU_V2 is not set
# CONFIG_ARM_MHU_V3 is not set
CONFIG_PLATFORM_MHU=y
# CONFIG_PL320_MBOX is not set
CONFIG_PCC=y
# CONFIG_ALTERA_MBOX is not set
# CONFIG_MAILBOX_TEST is not set
CONFIG_IOMMU_IOVA=y
CONFIG_IOMMU_API=y
CONFIG_IOMMUFD_DRIVER=y
CONFIG_IOMMU_SUPPORT=y

#
# Generic IOMMU Pagetable Support
#
CONFIG_IOMMU_IO_PGTABLE=y
CONFIG_IOMMU_IO_PGTABLE_LPAE=y
CONFIG_IOMMU_IO_PGTABLE_ARMV7S=y
# CONFIG_IOMMU_IO_PGTABLE_ARMV7S_SELFTEST is not set
# CONFIG_IOMMU_IO_PGTABLE_DART is not set
# end of Generic IOMMU Pagetable Support

# CONFIG_IOMMU_DEBUGFS is not set
CONFIG_IOMMU_DEFAULT_DMA_STRICT=y
# CONFIG_IOMMU_DEFAULT_DMA_LAZY is not set
# CONFIG_IOMMU_DEFAULT_PASSTHROUGH is not set
CONFIG_OF_IOMMU=y
CONFIG_IOMMU_DMA=y
CONFIG_ARM_SMMU=y
# CONFIG_ARM_SMMU_LEGACY_DT_BINDINGS is not set
CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT=y
CONFIG_ARM_SMMU_MMU_500_CPRE_ERRATA=y
CONFIG_ARM_SMMU_V3=y
# CONFIG_ARM_SMMU_V3_SVA is not set
# CONFIG_ARM_SMMU_V3_IOMMUFD is not set
# CONFIG_TEGRA241_CMDQV is not set
CONFIG_IOMMUFD_DRIVER_CORE=y
CONFIG_IOMMUFD=y
# CONFIG_IOMMUFD_VFIO_CONTAINER is not set
# CONFIG_VIRTIO_IOMMU is not set

#
# Remoteproc drivers
#
CONFIG_REMOTEPROC=y
# CONFIG_REMOTEPROC_CDEV is not set
# end of Remoteproc drivers

#
# Rpmsg drivers
#
CONFIG_RPMSG=y
CONFIG_RPMSG_CHAR=y
CONFIG_RPMSG_CTRL=y
CONFIG_RPMSG_NS=y
CONFIG_RPMSG_QCOM_GLINK=y
CONFIG_RPMSG_QCOM_GLINK_RPM=y
CONFIG_RPMSG_VIRTIO=y
# end of Rpmsg drivers

#
# SOC (System On Chip) specific Drivers
#

#
# Amlogic SoC drivers
#
# end of Amlogic SoC drivers

#
# Broadcom SoC drivers
#
# end of Broadcom SoC drivers

#
# NXP/Freescale QorIQ SoC drivers
#
# CONFIG_QUICC_ENGINE is not set
CONFIG_FSL_RCPM=y
# end of NXP/Freescale QorIQ SoC drivers

#
# fujitsu SoC drivers
#
# CONFIG_A64FX_DIAG is not set
# end of fujitsu SoC drivers

#
# i.MX SoC drivers
#
# end of i.MX SoC drivers

#
# Enable LiteX SoC Builder specific drivers
#
# CONFIG_LITEX_SOC_CONTROLLER is not set
# end of Enable LiteX SoC Builder specific drivers

# CONFIG_WPCM450_SOC is not set

#
# Qualcomm SoC drivers
#
CONFIG_QCOM_PDR_HELPERS=y
CONFIG_QCOM_PDR_MSG=y
# CONFIG_QCOM_PMIC_PDCHARGER_ULOG is not set
CONFIG_QCOM_PMIC_GLINK=y
CONFIG_QCOM_QMI_HELPERS=y
CONFIG_QCOM_PBS=y
# end of Qualcomm SoC drivers

CONFIG_SOC_TI=y

#
# Xilinx SoC drivers
#
# end of Xilinx SoC drivers
# end of SOC (System On Chip) specific Drivers

#
# PM Domains
#

#
# Amlogic PM Domains
#
# end of Amlogic PM Domains

CONFIG_ARM_SCMI_PERF_DOMAIN=y
CONFIG_ARM_SCMI_POWER_DOMAIN=y
CONFIG_ARM_SCPI_POWER_DOMAIN=y

#
# Broadcom PM Domains
#
# end of Broadcom PM Domains

#
# i.MX PM Domains
#
# end of i.MX PM Domains

#
# Qualcomm PM Domains
#
# end of Qualcomm PM Domains
# end of PM Domains

CONFIG_PM_DEVFREQ=y

#
# DEVFREQ Governors
#
CONFIG_DEVFREQ_GOV_SIMPLE_ONDEMAND=y
# CONFIG_DEVFREQ_GOV_PERFORMANCE is not set
# CONFIG_DEVFREQ_GOV_POWERSAVE is not set
CONFIG_DEVFREQ_GOV_USERSPACE=y
CONFIG_DEVFREQ_GOV_PASSIVE=y

#
# DEVFREQ Drivers
#
# CONFIG_ARM_HISI_UNCORE_DEVFREQ is not set
CONFIG_PM_DEVFREQ_EVENT=y
CONFIG_EXTCON=y

#
# Extcon Device Drivers
#
# CONFIG_EXTCON_ADC_JACK is not set
# CONFIG_EXTCON_FSA9480 is not set
# CONFIG_EXTCON_GPIO is not set
# CONFIG_EXTCON_LC824206XA is not set
# CONFIG_EXTCON_MAX3355 is not set
# CONFIG_EXTCON_MAX14526 is not set
CONFIG_EXTCON_PTN5150=y
# CONFIG_EXTCON_RT8973A is not set
# CONFIG_EXTCON_SM5502 is not set
CONFIG_EXTCON_USB_GPIO=y
CONFIG_EXTCON_USBC_TUSB320=y
CONFIG_MEMORY=y
# CONFIG_ARM_PL172_MPMC is not set
CONFIG_IIO=y
CONFIG_IIO_BUFFER=y
# CONFIG_IIO_BUFFER_CB is not set
# CONFIG_IIO_BUFFER_DMA is not set
# CONFIG_IIO_BUFFER_DMAENGINE is not set
# CONFIG_IIO_BUFFER_HW_CONSUMER is not set
CONFIG_IIO_KFIFO_BUF=y
CONFIG_IIO_TRIGGERED_BUFFER=y
# CONFIG_IIO_CONFIGFS is not set
CONFIG_IIO_TRIGGER=y
CONFIG_IIO_CONSUMERS_PER_TRIGGER=2
# CONFIG_IIO_SW_DEVICE is not set
# CONFIG_IIO_SW_TRIGGER is not set
# CONFIG_IIO_TRIGGERED_EVENT is not set

#
# Accelerometers
#
# CONFIG_ADIS16201 is not set
# CONFIG_ADIS16209 is not set
# CONFIG_ADXL313_I2C is not set
# CONFIG_ADXL313_SPI is not set
# CONFIG_ADXL345_I2C is not set
# CONFIG_ADXL345_SPI is not set
# CONFIG_ADXL355_I2C is not set
# CONFIG_ADXL355_SPI is not set
# CONFIG_ADXL367_SPI is not set
# CONFIG_ADXL367_I2C is not set
# CONFIG_ADXL372_SPI is not set
# CONFIG_ADXL372_I2C is not set
# CONFIG_ADXL380_SPI is not set
# CONFIG_ADXL380_I2C is not set
# CONFIG_BMA180 is not set
# CONFIG_BMA220 is not set
# CONFIG_BMA400 is not set
# CONFIG_BMC150_ACCEL is not set
# CONFIG_BMI088_ACCEL is not set
# CONFIG_DA280 is not set
# CONFIG_DA311 is not set
# CONFIG_DMARD06 is not set
# CONFIG_DMARD09 is not set
# CONFIG_DMARD10 is not set
# CONFIG_FXLS8962AF_I2C is not set
# CONFIG_FXLS8962AF_SPI is not set
CONFIG_HID_SENSOR_ACCEL_3D=y
# CONFIG_IIO_ST_ACCEL_3AXIS is not set
# CONFIG_IIO_KX022A_SPI is not set
# CONFIG_IIO_KX022A_I2C is not set
# CONFIG_KXSD9 is not set
# CONFIG_KXCJK1013 is not set
# CONFIG_MC3230 is not set
# CONFIG_MMA7455_I2C is not set
# CONFIG_MMA7455_SPI is not set
# CONFIG_MMA7660 is not set
# CONFIG_MMA8452 is not set
# CONFIG_MMA9551 is not set
# CONFIG_MMA9553 is not set
# CONFIG_MSA311 is not set
# CONFIG_MXC4005 is not set
# CONFIG_MXC6255 is not set
# CONFIG_SCA3000 is not set
# CONFIG_SCA3300 is not set
# CONFIG_STK8312 is not set
# CONFIG_STK8BA50 is not set
# end of Accelerometers

#
# Analog to digital converters
#
# CONFIG_AD4000 is not set
# CONFIG_AD4030 is not set
# CONFIG_AD4080 is not set
# CONFIG_AD4130 is not set
# CONFIG_AD4134 is not set
# CONFIG_AD4170_4 is not set
# CONFIG_AD4695 is not set
# CONFIG_AD4851 is not set
# CONFIG_AD7091R5 is not set
# CONFIG_AD7091R8 is not set
# CONFIG_AD7124 is not set
# CONFIG_AD7173 is not set
# CONFIG_AD7191 is not set
# CONFIG_AD7192 is not set
# CONFIG_AD7266 is not set
# CONFIG_AD7280 is not set
# CONFIG_AD7291 is not set
# CONFIG_AD7292 is not set
# CONFIG_AD7298 is not set
# CONFIG_AD7380 is not set
# CONFIG_AD7476 is not set
# CONFIG_AD7606_IFACE_PARALLEL is not set
# CONFIG_AD7606_IFACE_SPI is not set
# CONFIG_AD7625 is not set
# CONFIG_AD7766 is not set
# CONFIG_AD7768_1 is not set
# CONFIG_AD7779 is not set
# CONFIG_AD7780 is not set
# CONFIG_AD7791 is not set
# CONFIG_AD7793 is not set
# CONFIG_AD7887 is not set
# CONFIG_AD7923 is not set
# CONFIG_AD7944 is not set
# CONFIG_AD7949 is not set
# CONFIG_AD799X is not set
# CONFIG_AD9467 is not set
# CONFIG_ADE9000 is not set
# CONFIG_AXP20X_ADC is not set
# CONFIG_AXP288_ADC is not set
# CONFIG_CC10001_ADC is not set
CONFIG_DLN2_ADC=y
# CONFIG_ENVELOPE_DETECTOR is not set
# CONFIG_GEHC_PMC_ADC is not set
# CONFIG_HI8435 is not set
# CONFIG_HX711 is not set
# CONFIG_LTC2309 is not set
# CONFIG_LTC2471 is not set
# CONFIG_LTC2485 is not set
# CONFIG_LTC2496 is not set
# CONFIG_LTC2497 is not set
# CONFIG_MAX1027 is not set
# CONFIG_MAX11100 is not set
# CONFIG_MAX1118 is not set
# CONFIG_MAX11205 is not set
# CONFIG_MAX11410 is not set
# CONFIG_MAX1241 is not set
# CONFIG_MAX1363 is not set
# CONFIG_MAX14001 is not set
# CONFIG_MAX34408 is not set
CONFIG_MAX9611=y
# CONFIG_MCP320X is not set
# CONFIG_MCP3422 is not set
# CONFIG_MCP3564 is not set
# CONFIG_MCP3911 is not set
CONFIG_MEDIATEK_MT6359_AUXADC=y
# CONFIG_MEDIATEK_MT6360_ADC is not set
# CONFIG_MEDIATEK_MT6370_ADC is not set
# CONFIG_NAU7802 is not set
# CONFIG_NCT7201 is not set
# CONFIG_PAC1921 is not set
# CONFIG_PAC1934 is not set
CONFIG_QCOM_VADC_COMMON=y
# CONFIG_QCOM_SPMI_IADC is not set
CONFIG_QCOM_SPMI_VADC=y
CONFIG_QCOM_SPMI_ADC5=y
# CONFIG_QCOM_SPMI_ADC5_GEN3 is not set
# CONFIG_ROHM_BD79112 is not set
# CONFIG_ROHM_BD79124 is not set
# CONFIG_RICHTEK_RTQ6056 is not set
# CONFIG_SD_ADC_MODULATOR is not set
# CONFIG_TI_ADC081C is not set
# CONFIG_TI_ADC0832 is not set
# CONFIG_TI_ADC084S021 is not set
# CONFIG_TI_ADC108S102 is not set
# CONFIG_TI_ADC12138 is not set
# CONFIG_TI_ADC128S052 is not set
# CONFIG_TI_ADC161S626 is not set
CONFIG_TI_ADS1015=y
# CONFIG_TI_ADS1018 is not set
# CONFIG_TI_ADS1100 is not set
# CONFIG_TI_ADS1119 is not set
# CONFIG_TI_ADS124S08 is not set
# CONFIG_TI_ADS1298 is not set
# CONFIG_TI_ADS131E08 is not set
# CONFIG_TI_ADS131M02 is not set
# CONFIG_TI_ADS7138 is not set
# CONFIG_TI_ADS7924 is not set
# CONFIG_TI_ADS7950 is not set
# CONFIG_TI_ADS8344 is not set
# CONFIG_TI_ADS8688 is not set
# CONFIG_TI_LMP92064 is not set
# CONFIG_TI_TLC4541 is not set
# CONFIG_TI_TSC2046 is not set
# CONFIG_TWL4030_MADC is not set
# CONFIG_TWL6030_GPADC is not set
# CONFIG_VF610_ADC is not set
CONFIG_VIPERBOARD_ADC=y
# CONFIG_XILINX_XADC is not set
# end of Analog to digital converters

#
# Analog to digital and digital to analog converters
#
# CONFIG_AD74115 is not set
# CONFIG_AD74413R is not set
# end of Analog to digital and digital to analog converters

#
# Analog Front Ends
#
# CONFIG_IIO_RESCALE is not set
# end of Analog Front Ends

#
# Amplifiers
#
# CONFIG_AD8366 is not set
# CONFIG_ADA4250 is not set
# CONFIG_ADL8113 is not set
# CONFIG_HMC425 is not set
# end of Amplifiers

#
# Capacitance to digital converters
#
# CONFIG_AD7150 is not set
# CONFIG_AD7746 is not set
# end of Capacitance to digital converters

#
# Chemical Sensors
#
# CONFIG_AOSONG_AGS02MA is not set
# CONFIG_ATLAS_PH_SENSOR is not set
# CONFIG_ATLAS_EZO_SENSOR is not set
# CONFIG_BME680 is not set
# CONFIG_CCS811 is not set
# CONFIG_ENS160 is not set
# CONFIG_IAQCORE is not set
# CONFIG_MHZ19B is not set
# CONFIG_PMS7003 is not set
# CONFIG_SCD30_CORE is not set
# CONFIG_SCD4X is not set
# CONFIG_SEN0322 is not set
# CONFIG_SENSIRION_SGP30 is not set
# CONFIG_SENSIRION_SGP40 is not set
# CONFIG_SPS30_I2C is not set
# CONFIG_SPS30_SERIAL is not set
# CONFIG_SENSEAIR_SUNRISE_CO2 is not set
# CONFIG_VZ89X is not set
# end of Chemical Sensors

#
# Hid Sensor IIO Common
#
CONFIG_HID_SENSOR_IIO_COMMON=y
CONFIG_HID_SENSOR_IIO_TRIGGER=y
# end of Hid Sensor IIO Common

#
# IIO SCMI Sensors
#
# CONFIG_IIO_SCMI is not set
# end of IIO SCMI Sensors

#
# SSP Sensor Common
#
# CONFIG_IIO_SSP_SENSORHUB is not set
# end of SSP Sensor Common

CONFIG_IIO_ST_SENSORS_I2C=y
CONFIG_IIO_ST_SENSORS_SPI=y
CONFIG_IIO_ST_SENSORS_CORE=y

#
# Digital to analog converters
#
# CONFIG_AD3530R is not set
# CONFIG_AD3552R_HS is not set
# CONFIG_AD3552R is not set
# CONFIG_AD5064 is not set
# CONFIG_AD5360 is not set
# CONFIG_AD5380 is not set
# CONFIG_AD5421 is not set
# CONFIG_AD5446_SPI is not set
# CONFIG_AD5446_I2C is not set
# CONFIG_AD5449 is not set
# CONFIG_AD5592R is not set
# CONFIG_AD5593R is not set
# CONFIG_AD5504 is not set
# CONFIG_AD5624R_SPI is not set
# CONFIG_AD9739A is not set
# CONFIG_LTC2688 is not set
# CONFIG_AD5686_SPI is not set
# CONFIG_AD5696_I2C is not set
# CONFIG_AD5755 is not set
# CONFIG_AD5758 is not set
# CONFIG_AD5761 is not set
# CONFIG_AD5764 is not set
# CONFIG_AD5766 is not set
# CONFIG_AD5770R is not set
# CONFIG_AD5791 is not set
# CONFIG_AD7293 is not set
# CONFIG_AD7303 is not set
# CONFIG_AD8460 is not set
# CONFIG_AD8801 is not set
# CONFIG_BD79703 is not set
# CONFIG_DPOT_DAC is not set
# CONFIG_DS4424 is not set
# CONFIG_LTC1660 is not set
# CONFIG_LTC2632 is not set
# CONFIG_LTC2664 is not set
# CONFIG_M62332 is not set
# CONFIG_MAX517 is not set
# CONFIG_MAX22007 is not set
# CONFIG_MAX5522 is not set
# CONFIG_MAX5821 is not set
# CONFIG_MCP4725 is not set
# CONFIG_MCP4728 is not set
# CONFIG_MCP47FEB02 is not set
# CONFIG_MCP4821 is not set
# CONFIG_MCP4922 is not set
# CONFIG_TI_DAC082S085 is not set
# CONFIG_TI_DAC5571 is not set
# CONFIG_TI_DAC7311 is not set
# CONFIG_TI_DAC7612 is not set
# CONFIG_VF610_DAC is not set
# end of Digital to analog converters

#
# IIO dummy driver
#
# end of IIO dummy driver

#
# Filters
#
# CONFIG_ADMV8818 is not set
# end of Filters

#
# Frequency Synthesizers DDS/PLL
#

#
# Clock Generator/Distribution
#
# CONFIG_AD9523 is not set
# end of Clock Generator/Distribution

#
# Phase-Locked Loop (PLL) frequency synthesizers
#
# CONFIG_ADF4350 is not set
# CONFIG_ADF4371 is not set
# CONFIG_ADF4377 is not set
# CONFIG_ADMFM2000 is not set
# CONFIG_ADMV1013 is not set
# CONFIG_ADMV1014 is not set
# CONFIG_ADMV4420 is not set
# CONFIG_ADRF6780 is not set
# end of Phase-Locked Loop (PLL) frequency synthesizers
# end of Frequency Synthesizers DDS/PLL

#
# Digital gyroscope sensors
#
# CONFIG_ADIS16080 is not set
# CONFIG_ADIS16130 is not set
# CONFIG_ADIS16136 is not set
# CONFIG_ADIS16260 is not set
# CONFIG_ADXRS290 is not set
# CONFIG_ADXRS450 is not set
# CONFIG_BMG160 is not set
# CONFIG_FXAS21002C is not set
CONFIG_HID_SENSOR_GYRO_3D=y
# CONFIG_MPU3050_I2C is not set
# CONFIG_IIO_ST_GYRO_3AXIS is not set
# CONFIG_ITG3200 is not set
# end of Digital gyroscope sensors

#
# Health Sensors
#

#
# Heart Rate Monitors
#
# CONFIG_AFE4403 is not set
# CONFIG_AFE4404 is not set
# CONFIG_MAX30100 is not set
# CONFIG_MAX30102 is not set
# end of Heart Rate Monitors
# end of Health Sensors

#
# Humidity sensors
#
# CONFIG_AM2315 is not set
# CONFIG_DHT11 is not set
# CONFIG_ENS210 is not set
# CONFIG_HDC100X is not set
# CONFIG_HDC2010 is not set
# CONFIG_HDC3020 is not set
CONFIG_HID_SENSOR_HUMIDITY=y
# CONFIG_HTS221 is not set
# CONFIG_HTU21 is not set
# CONFIG_SI7005 is not set
# CONFIG_SI7020 is not set
# end of Humidity sensors

#
# Inertial measurement units
#
# CONFIG_ADIS16400 is not set
# CONFIG_ADIS16460 is not set
# CONFIG_ADIS16475 is not set
# CONFIG_ADIS16480 is not set
# CONFIG_ADIS16550 is not set
# CONFIG_BMI160_I2C is not set
# CONFIG_BMI160_SPI is not set
# CONFIG_BMI270_I2C is not set
# CONFIG_BMI270_SPI is not set
# CONFIG_BMI323_I2C is not set
# CONFIG_BMI323_SPI is not set
# CONFIG_BOSCH_BNO055_SERIAL is not set
# CONFIG_BOSCH_BNO055_I2C is not set
# CONFIG_FXOS8700_I2C is not set
# CONFIG_FXOS8700_SPI is not set
# CONFIG_KMX61 is not set
# CONFIG_INV_ICM42600_I2C is not set
# CONFIG_INV_ICM42600_SPI is not set
# CONFIG_INV_ICM45600_I2C is not set
# CONFIG_INV_ICM45600_SPI is not set
# CONFIG_INV_MPU6050_I2C is not set
# CONFIG_INV_MPU6050_SPI is not set
# CONFIG_SMI240 is not set
# CONFIG_SMI330_I2C is not set
# CONFIG_SMI330_SPI is not set
CONFIG_IIO_ST_LSM6DSX=y
CONFIG_IIO_ST_LSM6DSX_I2C=y
CONFIG_IIO_ST_LSM6DSX_SPI=y
# CONFIG_IIO_ST_LSM9DS0 is not set
# end of Inertial measurement units

#
# Light sensors
#
# CONFIG_ACPI_ALS is not set
# CONFIG_ADJD_S311 is not set
# CONFIG_ADUX1020 is not set
# CONFIG_AL3000A is not set
# CONFIG_AL3010 is not set
# CONFIG_AL3320A is not set
# CONFIG_APDS9160 is not set
# CONFIG_APDS9300 is not set
# CONFIG_APDS9306 is not set
# CONFIG_APDS9960 is not set
# CONFIG_AS73211 is not set
# CONFIG_BH1745 is not set
# CONFIG_BH1750 is not set
# CONFIG_BH1780 is not set
# CONFIG_CM32181 is not set
# CONFIG_CM3232 is not set
# CONFIG_CM3323 is not set
# CONFIG_CM3605 is not set
# CONFIG_CM36651 is not set
# CONFIG_GP2AP002 is not set
# CONFIG_GP2AP020A00F is not set
CONFIG_SENSORS_ISL29018=y
# CONFIG_SENSORS_ISL29028 is not set
# CONFIG_ISL29125 is not set
# CONFIG_ISL76682 is not set
CONFIG_HID_SENSOR_ALS=y
CONFIG_HID_SENSOR_PROX=y
# CONFIG_JSA1212 is not set
# CONFIG_ROHM_BU27034 is not set
# CONFIG_RPR0521 is not set
# CONFIG_LTR390 is not set
# CONFIG_LTR501 is not set
# CONFIG_LTRF216A is not set
# CONFIG_LV0104CS is not set
# CONFIG_MAX44000 is not set
# CONFIG_MAX44009 is not set
# CONFIG_NOA1305 is not set
# CONFIG_OPT3001 is not set
# CONFIG_OPT4001 is not set
# CONFIG_OPT4060 is not set
# CONFIG_PA12203001 is not set
# CONFIG_SI1133 is not set
# CONFIG_SI1145 is not set
# CONFIG_STK3310 is not set
# CONFIG_ST_UVIS25 is not set
# CONFIG_TCS3414 is not set
# CONFIG_TCS3472 is not set
# CONFIG_SENSORS_TSL2563 is not set
# CONFIG_TSL2583 is not set
# CONFIG_TSL2591 is not set
# CONFIG_TSL2772 is not set
# CONFIG_TSL4531 is not set
# CONFIG_US5182D is not set
CONFIG_VCNL4000=y
# CONFIG_VCNL4035 is not set
# CONFIG_VEML3235 is not set
# CONFIG_VEML6030 is not set
# CONFIG_VEML6040 is not set
# CONFIG_VEML6046X00 is not set
# CONFIG_VEML6070 is not set
# CONFIG_VEML6075 is not set
# CONFIG_VL6180 is not set
# CONFIG_ZOPT2201 is not set
# end of Light sensors

#
# Magnetometer sensors
#
# CONFIG_AF8133J is not set
# CONFIG_AK8974 is not set
# CONFIG_AK8975 is not set
# CONFIG_AK09911 is not set
# CONFIG_ALS31300 is not set
# CONFIG_BMC150_MAGN_I2C is not set
# CONFIG_BMC150_MAGN_SPI is not set
# CONFIG_MAG3110 is not set
CONFIG_HID_SENSOR_MAGNETOMETER_3D=y
# CONFIG_MMC35240 is not set
# CONFIG_MMC5633 is not set
CONFIG_IIO_ST_MAGN_3AXIS=y
CONFIG_IIO_ST_MAGN_I2C_3AXIS=y
CONFIG_IIO_ST_MAGN_SPI_3AXIS=y
# CONFIG_INFINEON_TLV493D is not set
# CONFIG_SENSORS_HMC5843_I2C is not set
# CONFIG_SENSORS_HMC5843_SPI is not set
# CONFIG_SENSORS_RM3100_I2C is not set
# CONFIG_SENSORS_RM3100_SPI is not set
# CONFIG_SI7210 is not set
# CONFIG_TI_TMAG5273 is not set
# CONFIG_YAMAHA_YAS530 is not set
# end of Magnetometer sensors

#
# Multiplexers
#
# CONFIG_IIO_MUX is not set
# end of Multiplexers

#
# Inclinometer sensors
#
CONFIG_HID_SENSOR_INCLINOMETER_3D=y
CONFIG_HID_SENSOR_DEVICE_ROTATION=y
# end of Inclinometer sensors

#
# Triggers - standalone
#
# CONFIG_IIO_INTERRUPT_TRIGGER is not set
# CONFIG_IIO_SYSFS_TRIGGER is not set
# end of Triggers - standalone

#
# Linear and angular position sensors
#
CONFIG_HID_SENSOR_CUSTOM_INTEL_HINGE=y
# end of Linear and angular position sensors

#
# Digital potentiometers
#
# CONFIG_AD5110 is not set
# CONFIG_AD5272 is not set
# CONFIG_DS1803 is not set
# CONFIG_MAX5432 is not set
# CONFIG_MAX5481 is not set
# CONFIG_MAX5487 is not set
# CONFIG_MCP4018 is not set
# CONFIG_MCP4131 is not set
# CONFIG_MCP4531 is not set
# CONFIG_MCP41010 is not set
# CONFIG_TPL0102 is not set
# CONFIG_X9250 is not set
# end of Digital potentiometers

#
# Digital potentiostats
#
# CONFIG_LMP91000 is not set
# end of Digital potentiostats

#
# Pressure sensors
#
# CONFIG_ABP060MG is not set
# CONFIG_ABP2030PA_I2C is not set
# CONFIG_ABP2030PA_SPI is not set
# CONFIG_ROHM_BM1390 is not set
# CONFIG_BMP280 is not set
# CONFIG_DLHL60D is not set
# CONFIG_DPS310 is not set
CONFIG_HID_SENSOR_PRESS=y
# CONFIG_HP03 is not set
# CONFIG_HSC030PA is not set
# CONFIG_ICP10100 is not set
# CONFIG_MPL115_I2C is not set
# CONFIG_MPL115_SPI is not set
CONFIG_MPL3115=y
# CONFIG_MPRLS0025PA_I2C is not set
# CONFIG_MPRLS0025PA_SPI is not set
# CONFIG_MS5611 is not set
# CONFIG_MS5637 is not set
# CONFIG_SDP500 is not set
# CONFIG_IIO_ST_PRESS is not set
# CONFIG_T5403 is not set
# CONFIG_HP206C is not set
# CONFIG_ZPA2326 is not set
# CONFIG_ADP810 is not set
# end of Pressure sensors

#
# Lightning sensors
#
# CONFIG_AS3935 is not set
# end of Lightning sensors

#
# Proximity and distance sensors
#
# CONFIG_D3323AA is not set
# CONFIG_HX9023S is not set
# CONFIG_IRSD200 is not set
# CONFIG_ISL29501 is not set
# CONFIG_LIDAR_LITE_V2 is not set
# CONFIG_MB1232 is not set
# CONFIG_PING is not set
# CONFIG_RFD77402 is not set
# CONFIG_SRF04 is not set
# CONFIG_SX9310 is not set
# CONFIG_SX9324 is not set
# CONFIG_SX9360 is not set
# CONFIG_SX9500 is not set
# CONFIG_SRF08 is not set
# CONFIG_VCNL3020 is not set
# CONFIG_VL53L0X_I2C is not set
# CONFIG_VL53L1X_I2C is not set
# CONFIG_AW96103 is not set
# end of Proximity and distance sensors

#
# Resolver to digital converters
#
# CONFIG_AD2S90 is not set
# CONFIG_AD2S1200 is not set
# CONFIG_AD2S1210 is not set
# end of Resolver to digital converters

#
# Temperature sensors
#
# CONFIG_LTC2983 is not set
# CONFIG_MAXIM_THERMOCOUPLE is not set
CONFIG_HID_SENSOR_TEMP=y
# CONFIG_MLX90614 is not set
# CONFIG_MLX90632 is not set
# CONFIG_MLX90635 is not set
# CONFIG_TMP006 is not set
# CONFIG_TMP007 is not set
# CONFIG_TMP117 is not set
# CONFIG_TSYS01 is not set
# CONFIG_TSYS02D is not set
# CONFIG_MAX30208 is not set
# CONFIG_MAX31856 is not set
# CONFIG_MAX31865 is not set
# CONFIG_MCP9600 is not set
# end of Temperature sensors

# CONFIG_NTB is not set
CONFIG_PWM=y
# CONFIG_PWM_DEBUG is not set
# CONFIG_PWM_PROVIDE_GPIO is not set
CONFIG_PWM_ADP5585=y
# CONFIG_PWM_ARGON_FAN_HAT is not set
# CONFIG_PWM_ATMEL_TCB is not set
# CONFIG_PWM_CLK is not set
# CONFIG_PWM_DWC is not set
# CONFIG_PWM_FSL_FTM is not set
# CONFIG_PWM_GPIO is not set
# CONFIG_PWM_MC33XS2410 is not set
# CONFIG_PWM_PCA9685 is not set
# CONFIG_PWM_TWL is not set
# CONFIG_PWM_TWL_LED is not set
# CONFIG_PWM_XILINX is not set

#
# IRQ chip support
#
CONFIG_IRQCHIP=y
CONFIG_ARM_GIC=y
CONFIG_ARM_GIC_MAX_NR=1
CONFIG_ARM_GIC_V2M=y
CONFIG_ARM_GIC_V3=y
CONFIG_ARM_GIC_ITS_PARENT=y
CONFIG_ARM_GIC_V3_ITS=y
CONFIG_ARM_GIC_V5=y
CONFIG_IRQ_MSI_LIB=y
# CONFIG_AL_FIC is not set
# CONFIG_XILINX_INTC is not set
# end of IRQ chip support

# CONFIG_IPACK_BUS is not set
CONFIG_RESET_CONTROLLER=y
CONFIG_RESET_GPIO=y
CONFIG_RESET_SCMI=y
CONFIG_RESET_SIMPLE=y
CONFIG_RESET_TI_SYSCON=y
# CONFIG_RESET_TI_TPS380X is not set

#
# PHY Subsystem
#
CONFIG_GENERIC_PHY=y
CONFIG_GENERIC_PHY_MIPI_DPHY=y
CONFIG_PHY_CAN_TRANSCEIVER=y
# CONFIG_PHY_GOOGLE_USB is not set
CONFIG_PHY_NXP_PTN3222=y

#
# PHY drivers for Broadcom platforms
#
# CONFIG_BCM_KONA_USB2_PHY is not set
# end of PHY drivers for Broadcom platforms

CONFIG_PHY_CADENCE_TORRENT=y
CONFIG_PHY_CADENCE_DPHY=y
CONFIG_PHY_CADENCE_DPHY_RX=y
CONFIG_PHY_CADENCE_SIERRA=y
CONFIG_PHY_CADENCE_SALVO=y
# CONFIG_PHY_PXA_28NM_HSIC is not set
# CONFIG_PHY_PXA_28NM_USB2 is not set
CONFIG_PHY_CPCAP_USB=y
# CONFIG_PHY_MAPPHONE_MDM6600 is not set
# CONFIG_PHY_OCELOT_SERDES is not set
CONFIG_PHY_QCOM_USB_HS=y
CONFIG_PHY_QCOM_USB_HSIC=y
CONFIG_PHY_SAMSUNG_USB2=y
CONFIG_PHY_TUSB1210=y
# end of PHY Subsystem

# CONFIG_POWERCAP is not set
# CONFIG_MCB is not set

#
# Performance monitor support
#
CONFIG_ARM_CCI_PMU=y
CONFIG_ARM_CCI400_PMU=y
CONFIG_ARM_CCI5xx_PMU=y
CONFIG_ARM_CCN=y
CONFIG_ARM_CMN=y
# CONFIG_ARM_NI is not set
CONFIG_ARM_PMU=y
CONFIG_ARM_PMU_ACPI=y
CONFIG_ARM_SMMU_V3_PMU=y
CONFIG_ARM_PMUV3=y
CONFIG_ARM_DSU_PMU=y
# CONFIG_FUJITSU_UNCORE_PMU is not set
CONFIG_ARM_SPE_PMU=y
CONFIG_ARM64_BRBE=y
CONFIG_ARM_DMC620_PMU=y
# CONFIG_ALIBABA_UNCORE_DRW_PMU is not set
CONFIG_HISI_PMU=y
# CONFIG_HISI_PCIE_PMU is not set
# CONFIG_HNS3_PMU is not set
# CONFIG_DWC_PCIE_PMU is not set
CONFIG_ARM_CORESIGHT_PMU_ARCH_SYSTEM_PMU=y
CONFIG_NVIDIA_CORESIGHT_PMU_ARCH_SYSTEM_PMU=y
# CONFIG_AMPERE_CORESIGHT_PMU_ARCH_SYSTEM_PMU is not set
# CONFIG_NVIDIA_TEGRA410_CMEM_LATENCY_PMU is not set
# CONFIG_NVIDIA_TEGRA410_C2C_PMU is not set
# end of Performance monitor support

CONFIG_RAS=y
CONFIG_USB4=y
# CONFIG_USB4_DEBUGFS_WRITE is not set
# CONFIG_USB4_DMA_TEST is not set

#
# Android
#
CONFIG_ANDROID_BINDER_IPC=y
CONFIG_ANDROID_BINDERFS=y
CONFIG_ANDROID_BINDER_DEVICES="binder0,binder1"
# end of Android

# CONFIG_LIBNVDIMM is not set
CONFIG_DAX=y
# CONFIG_DEV_DAX is not set
# CONFIG_DEV_DAX_HMEM is not set
CONFIG_NVMEM=y
CONFIG_NVMEM_SYSFS=y
CONFIG_NVMEM_LAYOUTS=y

#
# Layout Types
#
CONFIG_NVMEM_LAYOUT_SL28_VPD=y
# CONFIG_NVMEM_LAYOUT_ONIE_TLV is not set
# CONFIG_NVMEM_LAYOUT_U_BOOT_ENV is not set
# end of Layout Types

CONFIG_NVMEM_MAX77759=y
CONFIG_NVMEM_RMEM=y
CONFIG_NVMEM_SPMI_SDAM=y
# CONFIG_NVMEM_U_BOOT_ENV is not set

#
# HW tracing support
#
CONFIG_STM=y
# CONFIG_STM_PROTO_BASIC is not set
# CONFIG_STM_PROTO_SYS_T is not set
# CONFIG_STM_DUMMY is not set
# CONFIG_STM_SOURCE_CONSOLE is not set
# CONFIG_STM_SOURCE_HEARTBEAT is not set
# CONFIG_STM_SOURCE_FTRACE is not set
# CONFIG_INTEL_TH is not set
# CONFIG_HISI_PTT is not set
# end of HW tracing support

CONFIG_FPGA=y
# CONFIG_ALTERA_PR_IP_CORE is not set
# CONFIG_FPGA_MGR_ALTERA_PS_SPI is not set
CONFIG_FPGA_MGR_ALTERA_CVP=y
# CONFIG_FPGA_MGR_XILINX_SELECTMAP is not set
# CONFIG_FPGA_MGR_XILINX_SPI is not set
# CONFIG_FPGA_MGR_ICE40_SPI is not set
# CONFIG_FPGA_MGR_MACHXO2_SPI is not set
CONFIG_FPGA_BRIDGE=y
CONFIG_ALTERA_FREEZE_BRIDGE=y
# CONFIG_XILINX_PR_DECOUPLER is not set
CONFIG_FPGA_REGION=y
CONFIG_OF_FPGA_REGION=y
# CONFIG_FPGA_DFL is not set
# CONFIG_FPGA_MGR_MICROCHIP_SPI is not set
# CONFIG_FPGA_MGR_LATTICE_SYSCONFIG_SPI is not set
# CONFIG_FSI is not set
CONFIG_TEE=y
CONFIG_TEE_DMABUF_HEAPS=y
CONFIG_OPTEE=y
# CONFIG_OPTEE_INSECURE_LOAD_IMAGE is not set
CONFIG_OPTEE_STATIC_PROTMEM_POOL=y
CONFIG_MULTIPLEXER=y
# CONFIG_MUX_CORE is not set

#
# Multiplexer drivers
#
# CONFIG_MUX_ADG792A is not set
# CONFIG_MUX_ADGS1408 is not set
CONFIG_MUX_GPIO=y
CONFIG_MUX_MMIO=y
# end of Multiplexer drivers

CONFIG_PM_OPP=y
# CONFIG_SIOX is not set
CONFIG_SLIMBUS=y
CONFIG_INTERCONNECT=y
CONFIG_COUNTER=y
# CONFIG_INTERRUPT_CNT is not set
CONFIG_MOST=y
CONFIG_MOST_USB_HDM=y
# CONFIG_MOST_CDEV is not set
# CONFIG_PECI is not set
CONFIG_HTE=y
# CONFIG_CDX_BUS is not set
# end of Device Drivers

#
# File systems
#
CONFIG_DCACHE_WORD_ACCESS=y
CONFIG_VALIDATE_FS_PARSER=y
CONFIG_FS_IOMAP=y
CONFIG_FS_STACK=y
CONFIG_BUFFER_HEAD=y
CONFIG_LEGACY_DIRECT_IO=y
# CONFIG_EXT2_FS is not set
CONFIG_EXT4_FS=y
CONFIG_EXT4_USE_FOR_EXT2=y
CONFIG_EXT4_FS_POSIX_ACL=y
CONFIG_EXT4_FS_SECURITY=y
# CONFIG_EXT4_DEBUG is not set
CONFIG_JBD2=y
# CONFIG_JBD2_DEBUG is not set
CONFIG_FS_MBCACHE=y
# CONFIG_JFS_FS is not set
# CONFIG_XFS_FS is not set
# CONFIG_GFS2_FS is not set
# CONFIG_OCFS2_FS is not set
# CONFIG_BTRFS_FS is not set
# CONFIG_NILFS2_FS is not set
# CONFIG_F2FS_FS is not set
# CONFIG_ZONEFS_FS is not set
CONFIG_FS_DAX=y
CONFIG_FS_DAX_PMD=y
CONFIG_FS_POSIX_ACL=y
CONFIG_EXPORTFS=y
# CONFIG_EXPORTFS_BLOCK_OPS is not set
CONFIG_FILE_LOCKING=y
CONFIG_FS_ENCRYPTION=y
CONFIG_FS_ENCRYPTION_ALGS=y
# CONFIG_FS_ENCRYPTION_INLINE_CRYPT is not set
CONFIG_FS_VERITY=y
CONFIG_FS_VERITY_BUILTIN_SIGNATURES=y
CONFIG_FSNOTIFY=y
CONFIG_DNOTIFY=y
CONFIG_INOTIFY_USER=y
CONFIG_FANOTIFY=y
CONFIG_FANOTIFY_ACCESS_PERMISSIONS=y
CONFIG_QUOTA=y
CONFIG_QUOTA_NETLINK_INTERFACE=y
# CONFIG_QUOTA_DEBUG is not set
CONFIG_QUOTA_TREE=y
# CONFIG_QFMT_V1 is not set
CONFIG_QFMT_V2=y
CONFIG_QUOTACTL=y
CONFIG_AUTOFS_FS=y
CONFIG_FUSE_FS=y
CONFIG_CUSE=y
CONFIG_VIRTIO_FS=y
# CONFIG_FUSE_DAX is not set
CONFIG_FUSE_PASSTHROUGH=y
CONFIG_FUSE_IO_URING=y
CONFIG_OVERLAY_FS=y
# CONFIG_OVERLAY_FS_REDIRECT_DIR is not set
CONFIG_OVERLAY_FS_REDIRECT_ALWAYS_FOLLOW=y
# CONFIG_OVERLAY_FS_INDEX is not set
# CONFIG_OVERLAY_FS_XINO_AUTO is not set
# CONFIG_OVERLAY_FS_METACOPY is not set
# CONFIG_OVERLAY_FS_DEBUG is not set

#
# Caches
#
CONFIG_NETFS_SUPPORT=y
# CONFIG_NETFS_STATS is not set
# CONFIG_NETFS_DEBUG is not set
# CONFIG_FSCACHE is not set
# end of Caches

#
# CD-ROM/DVD Filesystems
#
# CONFIG_ISO9660_FS is not set
# CONFIG_UDF_FS is not set
# end of CD-ROM/DVD Filesystems

#
# DOS/FAT/EXFAT/NT Filesystems
#
CONFIG_FAT_FS=y
# CONFIG_MSDOS_FS is not set
CONFIG_VFAT_FS=y
CONFIG_FAT_DEFAULT_CODEPAGE=437
CONFIG_FAT_DEFAULT_IOCHARSET="iso8859-1"
# CONFIG_FAT_DEFAULT_UTF8 is not set
# CONFIG_EXFAT_FS is not set
# CONFIG_NTFS_FS is not set
# CONFIG_NTFS3_FS is not set
# end of DOS/FAT/EXFAT/NT Filesystems

#
# Pseudo filesystems
#
CONFIG_PROC_FS=y
CONFIG_PROC_KCORE=y
CONFIG_PROC_VMCORE=y
# CONFIG_PROC_VMCORE_DEVICE_DUMP is not set
CONFIG_PROC_SYSCTL=y
CONFIG_PROC_PAGE_MONITOR=y
CONFIG_PROC_CHILDREN=y
CONFIG_KERNFS=y
CONFIG_SYSFS=y
CONFIG_TMPFS=y
CONFIG_TMPFS_POSIX_ACL=y
CONFIG_TMPFS_XATTR=y
# CONFIG_TMPFS_INODE64 is not set
CONFIG_TMPFS_QUOTA=y
CONFIG_ARCH_SUPPORTS_HUGETLBFS=y
CONFIG_HUGETLBFS=y
CONFIG_HUGETLB_PAGE=y
CONFIG_HUGETLB_PMD_PAGE_TABLE_SHARING=y
CONFIG_ARCH_HAS_GIGANTIC_PAGE=y
CONFIG_CONFIGFS_FS=y
CONFIG_EFIVAR_FS=y
# end of Pseudo filesystems

CONFIG_MISC_FILESYSTEMS=y
# CONFIG_ORANGEFS_FS is not set
# CONFIG_ADFS_FS is not set
# CONFIG_AFFS_FS is not set
CONFIG_ECRYPT_FS=y
CONFIG_ECRYPT_FS_MESSAGING=y
# CONFIG_HFS_FS is not set
# CONFIG_HFSPLUS_FS is not set
# CONFIG_BEFS_FS is not set
# CONFIG_BFS_FS is not set
# CONFIG_EFS_FS is not set
# CONFIG_JFFS2_FS is not set
CONFIG_UBIFS_FS=y
# CONFIG_UBIFS_FS_ADVANCED_COMPR is not set
CONFIG_UBIFS_FS_LZO=y
CONFIG_UBIFS_FS_ZLIB=y
CONFIG_UBIFS_FS_ZSTD=y
# CONFIG_UBIFS_ATIME_SUPPORT is not set
CONFIG_UBIFS_FS_XATTR=y
CONFIG_UBIFS_FS_SECURITY=y
# CONFIG_UBIFS_FS_AUTHENTICATION is not set
# CONFIG_CRAMFS is not set
CONFIG_SQUASHFS=y
CONFIG_SQUASHFS_FILE_CACHE=y
# CONFIG_SQUASHFS_FILE_DIRECT is not set
CONFIG_SQUASHFS_DECOMP_SINGLE=y
# CONFIG_SQUASHFS_CHOICE_DECOMP_BY_MOUNT is not set
CONFIG_SQUASHFS_COMPILE_DECOMP_SINGLE=y
# CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI is not set
# CONFIG_SQUASHFS_COMPILE_DECOMP_MULTI_PERCPU is not set
# CONFIG_SQUASHFS_XATTR is not set
# CONFIG_SQUASHFS_COMP_CACHE_FULL is not set
CONFIG_SQUASHFS_ZLIB=y
# CONFIG_SQUASHFS_LZ4 is not set
# CONFIG_SQUASHFS_LZO is not set
# CONFIG_SQUASHFS_XZ is not set
# CONFIG_SQUASHFS_ZSTD is not set
# CONFIG_SQUASHFS_4K_DEVBLK_SIZE is not set
# CONFIG_SQUASHFS_EMBEDDED is not set
CONFIG_SQUASHFS_FRAGMENT_CACHE_SIZE=3
# CONFIG_VXFS_FS is not set
# CONFIG_MINIX_FS is not set
# CONFIG_OMFS_FS is not set
# CONFIG_HPFS_FS is not set
# CONFIG_QNX4FS_FS is not set
# CONFIG_QNX6FS_FS is not set
# CONFIG_ROMFS_FS is not set
CONFIG_PSTORE=y
CONFIG_PSTORE_DEFAULT_KMSG_BYTES=10240
CONFIG_PSTORE_COMPRESS=y
# CONFIG_PSTORE_CONSOLE is not set
# CONFIG_PSTORE_PMSG is not set
CONFIG_PSTORE_RAM=y
# CONFIG_PSTORE_BLK is not set
# CONFIG_UFS_FS is not set
# CONFIG_EROFS_FS is not set
CONFIG_NETWORK_FILESYSTEMS=y
CONFIG_NFS_FS=y
# CONFIG_NFS_V2 is not set
CONFIG_NFS_V3=y
# CONFIG_NFS_V3_ACL is not set
CONFIG_NFS_V4=y
# CONFIG_NFS_SWAP is not set
CONFIG_NFS_V4_0=y
CONFIG_NFS_V4_2=y
CONFIG_PNFS_FILE_LAYOUT=y
CONFIG_PNFS_BLOCK=y
CONFIG_PNFS_FLEXFILE_LAYOUT=y
CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"
# CONFIG_NFS_V4_1_MIGRATION is not set
CONFIG_NFS_V4_SECURITY_LABEL=y
CONFIG_ROOT_NFS=y
# CONFIG_NFS_FSCACHE is not set
# CONFIG_NFS_USE_LEGACY_DNS is not set
CONFIG_NFS_USE_KERNEL_DNS=y
CONFIG_NFS_DISABLE_UDP_SUPPORT=y
CONFIG_NFS_V4_2_READ_PLUS=y
# CONFIG_NFSD is not set
CONFIG_GRACE_PERIOD=y
CONFIG_LOCKD=y
CONFIG_LOCKD_V4=y
CONFIG_NFS_COMMON=y
CONFIG_NFS_V4_2_SSC_HELPER=y
CONFIG_SUNRPC=y
CONFIG_SUNRPC_GSS=y
CONFIG_SUNRPC_BACKCHANNEL=y
CONFIG_RPCSEC_GSS_KRB5=y
# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA1 is not set
# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_CAMELLIA is not set
# CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2 is not set
# CONFIG_SUNRPC_DEBUG is not set
# CONFIG_SUNRPC_XPRT_RDMA is not set
# CONFIG_CEPH_FS is not set
# CONFIG_CIFS is not set
# CONFIG_SMB_SERVER is not set
# CONFIG_CODA_FS is not set
# CONFIG_AFS_FS is not set
CONFIG_9P_FS=y
# CONFIG_9P_FS_POSIX_ACL is not set
# CONFIG_9P_FS_SECURITY is not set
CONFIG_NLS=y
CONFIG_NLS_DEFAULT="utf8"
CONFIG_NLS_CODEPAGE_437=y
CONFIG_NLS_CODEPAGE_737=y
CONFIG_NLS_CODEPAGE_775=y
CONFIG_NLS_CODEPAGE_850=y
CONFIG_NLS_CODEPAGE_852=y
CONFIG_NLS_CODEPAGE_855=y
CONFIG_NLS_CODEPAGE_857=y
CONFIG_NLS_CODEPAGE_860=y
CONFIG_NLS_CODEPAGE_861=y
CONFIG_NLS_CODEPAGE_862=y
CONFIG_NLS_CODEPAGE_863=y
CONFIG_NLS_CODEPAGE_864=y
CONFIG_NLS_CODEPAGE_865=y
CONFIG_NLS_CODEPAGE_866=y
CONFIG_NLS_CODEPAGE_869=y
CONFIG_NLS_CODEPAGE_936=y
CONFIG_NLS_CODEPAGE_950=y
CONFIG_NLS_CODEPAGE_932=y
CONFIG_NLS_CODEPAGE_949=y
CONFIG_NLS_CODEPAGE_874=y
CONFIG_NLS_ISO8859_8=y
CONFIG_NLS_CODEPAGE_1250=y
CONFIG_NLS_CODEPAGE_1251=y
CONFIG_NLS_ASCII=y
CONFIG_NLS_ISO8859_1=y
CONFIG_NLS_ISO8859_2=y
CONFIG_NLS_ISO8859_3=y
CONFIG_NLS_ISO8859_4=y
CONFIG_NLS_ISO8859_5=y
CONFIG_NLS_ISO8859_6=y
CONFIG_NLS_ISO8859_7=y
CONFIG_NLS_ISO8859_9=y
CONFIG_NLS_ISO8859_13=y
CONFIG_NLS_ISO8859_14=y
CONFIG_NLS_ISO8859_15=y
CONFIG_NLS_KOI8_R=y
CONFIG_NLS_KOI8_U=y
CONFIG_NLS_MAC_ROMAN=y
CONFIG_NLS_MAC_CELTIC=y
CONFIG_NLS_MAC_CENTEURO=y
CONFIG_NLS_MAC_CROATIAN=y
CONFIG_NLS_MAC_CYRILLIC=y
CONFIG_NLS_MAC_GAELIC=y
CONFIG_NLS_MAC_GREEK=y
CONFIG_NLS_MAC_ICELAND=y
CONFIG_NLS_MAC_INUIT=y
CONFIG_NLS_MAC_ROMANIAN=y
CONFIG_NLS_MAC_TURKISH=y
CONFIG_NLS_UTF8=y
CONFIG_DLM=y
# CONFIG_DLM_DEBUG is not set
CONFIG_UNICODE=y
CONFIG_IO_WQ=y
# end of File systems

#
# Security options
#
CONFIG_KEYS=y
CONFIG_KEYS_REQUEST_CACHE=y
CONFIG_PERSISTENT_KEYRINGS=y
CONFIG_BIG_KEYS=y
CONFIG_TRUSTED_KEYS=y
# CONFIG_TRUSTED_KEYS_TPM is not set
# CONFIG_TRUSTED_KEYS_TEE is not set

#
# No trust source selected!
#
CONFIG_ENCRYPTED_KEYS=y
# CONFIG_USER_DECRYPTED_DATA is not set
CONFIG_KEY_DH_OPERATIONS=y
CONFIG_KEY_NOTIFICATIONS=y
# CONFIG_SECURITY_DMESG_RESTRICT is not set
CONFIG_PROC_MEM_ALWAYS_FORCE=y
# CONFIG_PROC_MEM_FORCE_PTRACE is not set
# CONFIG_PROC_MEM_NO_FORCE is not set
CONFIG_SECURITY=y
CONFIG_HAS_SECURITY_AUDIT=y
CONFIG_SECURITYFS=y
CONFIG_SECURITY_NETWORK=y
CONFIG_SECURITY_INFINIBAND=y
CONFIG_SECURITY_NETWORK_XFRM=y
CONFIG_SECURITY_PATH=y
# CONFIG_STATIC_USERMODEHELPER is not set
# CONFIG_SECURITY_SELINUX is not set
CONFIG_SECURITY_SMACK=y
# CONFIG_SECURITY_SMACK_BRINGUP is not set
CONFIG_SECURITY_SMACK_NETFILTER=y
# CONFIG_SECURITY_SMACK_APPEND_SIGNALS is not set
CONFIG_SECURITY_TOMOYO=y
CONFIG_SECURITY_TOMOYO_MAX_ACCEPT_ENTRY=64
CONFIG_SECURITY_TOMOYO_MAX_AUDIT_LOG=32
CONFIG_SECURITY_TOMOYO_OMIT_USERSPACE_LOADER=y
CONFIG_SECURITY_TOMOYO_INSECURE_BUILTIN_SETTING=y
# CONFIG_SECURITY_APPARMOR is not set
# CONFIG_SECURITY_LOADPIN is not set
CONFIG_SECURITY_YAMA=y
CONFIG_SECURITY_SAFESETID=y
CONFIG_SECURITY_LOCKDOWN_LSM=y
CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
CONFIG_SECURITY_LANDLOCK=y
# CONFIG_SECURITY_IPE is not set
CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
CONFIG_INTEGRITY_TRUSTED_KEYRING=y
CONFIG_INTEGRITY_AUDIT=y
CONFIG_IMA=y
# CONFIG_IMA_KEXEC is not set
CONFIG_IMA_MEASURE_PCR_IDX=10
CONFIG_IMA_LSM_RULES=y
CONFIG_IMA_NG_TEMPLATE=y
# CONFIG_IMA_SIG_TEMPLATE is not set
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
CONFIG_IMA_DEFAULT_HASH_SHA256=y
# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
# CONFIG_IMA_DEFAULT_HASH_WP512 is not set
# CONFIG_IMA_DEFAULT_HASH_SM3 is not set
CONFIG_IMA_DEFAULT_HASH="sha256"
CONFIG_IMA_WRITE_POLICY=y
CONFIG_IMA_READ_POLICY=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_ARCH_POLICY is not set
# CONFIG_IMA_APPRAISE_BUILD_POLICY is not set
# CONFIG_IMA_APPRAISE_BOOTPARAM is not set
CONFIG_IMA_APPRAISE_MODSIG=y
# CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA_LOAD_X509 is not set
CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS=y
CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y
# CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT is not set
# CONFIG_IMA_DISABLE_HTABLE is not set
CONFIG_EVM=y
CONFIG_EVM_ATTR_FSUUID=y
CONFIG_EVM_EXTRA_SMACK_XATTRS=y
CONFIG_EVM_ADD_XATTRS=y
# CONFIG_EVM_LOAD_X509 is not set
CONFIG_DEFAULT_SECURITY_SMACK=y
# CONFIG_DEFAULT_SECURITY_TOMOYO is not set
# CONFIG_DEFAULT_SECURITY_DAC is not set
CONFIG_LSM="landlock,lockdown,yama,safesetid,integrity,tomoyo,smack,bpf"

#
# Kernel hardening options
#

#
# Memory initialization
#
CONFIG_CC_HAS_AUTO_VAR_INIT_PATTERN=y
CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO_BARE=y
CONFIG_CC_HAS_AUTO_VAR_INIT_ZERO=y
# CONFIG_INIT_STACK_NONE is not set
# CONFIG_INIT_STACK_ALL_PATTERN is not set
CONFIG_INIT_STACK_ALL_ZERO=y
CONFIG_CC_HAS_SANCOV_STACK_DEPTH_CALLBACK=y
# CONFIG_KSTACK_ERASE is not set
CONFIG_INIT_ON_ALLOC_DEFAULT_ON=y
# CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
CONFIG_CC_HAS_ZERO_CALL_USED_REGS=y
# CONFIG_ZERO_CALL_USED_REGS is not set
# end of Memory initialization

#
# Bounds checking
#
CONFIG_FORTIFY_SOURCE=y
CONFIG_HARDENED_USERCOPY=y
# CONFIG_HARDENED_USERCOPY_DEFAULT_ON is not set
# end of Bounds checking

#
# Hardening of kernel data structures
#
CONFIG_LIST_HARDENED=y
CONFIG_BUG_ON_DATA_CORRUPTION=y
# end of Hardening of kernel data structures

CONFIG_CC_HAS_RANDSTRUCT=y
CONFIG_RANDSTRUCT_NONE=y
# CONFIG_RANDSTRUCT_FULL is not set
# end of Kernel hardening options
# end of Security options

CONFIG_ASYNC_CORE=y
CONFIG_ASYNC_MEMCPY=y
CONFIG_ASYNC_XOR=y
CONFIG_ASYNC_PQ=y
CONFIG_ASYNC_RAID6_RECOV=y
CONFIG_ASYNC_TX_DISABLE_PQ_VAL_DMA=y
CONFIG_ASYNC_TX_DISABLE_XOR_VAL_DMA=y
CONFIG_CRYPTO=y

#
# Crypto core or helper
#
CONFIG_CRYPTO_ALGAPI=y
CONFIG_CRYPTO_ALGAPI2=y
CONFIG_CRYPTO_AEAD=y
CONFIG_CRYPTO_AEAD2=y
CONFIG_CRYPTO_SIG=y
CONFIG_CRYPTO_SIG2=y
CONFIG_CRYPTO_SKCIPHER=y
CONFIG_CRYPTO_SKCIPHER2=y
CONFIG_CRYPTO_HASH=y
CONFIG_CRYPTO_HASH2=y
CONFIG_CRYPTO_RNG=y
CONFIG_CRYPTO_RNG2=y
CONFIG_CRYPTO_AKCIPHER2=y
CONFIG_CRYPTO_AKCIPHER=y
CONFIG_CRYPTO_KPP2=y
CONFIG_CRYPTO_KPP=y
CONFIG_CRYPTO_ACOMP2=y
CONFIG_CRYPTO_MANAGER=y
CONFIG_CRYPTO_MANAGER2=y
CONFIG_CRYPTO_USER=y
# CONFIG_CRYPTO_SELFTESTS is not set
# CONFIG_CRYPTO_NULL is not set
CONFIG_CRYPTO_PCRYPT=y
# CONFIG_CRYPTO_CRYPTD is not set
CONFIG_CRYPTO_AUTHENC=y
CONFIG_CRYPTO_KRB5ENC=y
CONFIG_CRYPTO_BENCHMARK=y
CONFIG_CRYPTO_ENGINE=y
# end of Crypto core or helper

#
# Public-key cryptography
#
CONFIG_CRYPTO_RSA=y
CONFIG_CRYPTO_DH=y
# CONFIG_CRYPTO_DH_RFC7919_GROUPS is not set
CONFIG_CRYPTO_ECC=y
CONFIG_CRYPTO_ECDH=y
CONFIG_CRYPTO_ECDSA=y
CONFIG_CRYPTO_ECRDSA=y
CONFIG_CRYPTO_MLDSA=y
# end of Public-key cryptography

#
# Block ciphers
#
CONFIG_CRYPTO_AES=y
CONFIG_CRYPTO_ANUBIS=y
CONFIG_CRYPTO_ARIA=y
CONFIG_CRYPTO_BLOWFISH=y
CONFIG_CRYPTO_BLOWFISH_COMMON=y
CONFIG_CRYPTO_CAMELLIA=y
# CONFIG_CRYPTO_CAST5 is not set
# CONFIG_CRYPTO_CAST6 is not set
CONFIG_CRYPTO_DES=y
CONFIG_CRYPTO_FCRYPT=y
CONFIG_CRYPTO_KHAZAD=y
CONFIG_CRYPTO_SEED=y
# CONFIG_CRYPTO_SERPENT is not set
CONFIG_CRYPTO_SM4=y
CONFIG_CRYPTO_SM4_GENERIC=y
CONFIG_CRYPTO_TEA=y
CONFIG_CRYPTO_TWOFISH=y
CONFIG_CRYPTO_TWOFISH_COMMON=y
# end of Block ciphers

#
# Length-preserving ciphers and modes
#
CONFIG_CRYPTO_ADIANTUM=y
CONFIG_CRYPTO_ARC4=y
CONFIG_CRYPTO_CHACHA20=y
CONFIG_CRYPTO_CBC=y
CONFIG_CRYPTO_CTR=y
CONFIG_CRYPTO_CTS=y
CONFIG_CRYPTO_ECB=y
CONFIG_CRYPTO_HCTR2=y
CONFIG_CRYPTO_LRW=y
CONFIG_CRYPTO_PCBC=y
CONFIG_CRYPTO_XCTR=y
CONFIG_CRYPTO_XTS=y
# end of Length-preserving ciphers and modes

#
# AEAD (authenticated encryption with associated data) ciphers
#
CONFIG_CRYPTO_AEGIS128=y
# CONFIG_CRYPTO_AEGIS128_SIMD is not set
CONFIG_CRYPTO_CHACHA20POLY1305=y
CONFIG_CRYPTO_CCM=y
CONFIG_CRYPTO_GCM=y
CONFIG_CRYPTO_GENIV=y
CONFIG_CRYPTO_SEQIV=y
CONFIG_CRYPTO_ECHAINIV=y
CONFIG_CRYPTO_ESSIV=y
# end of AEAD (authenticated encryption with associated data) ciphers

#
# Hashes, digests, and MACs
#
CONFIG_CRYPTO_BLAKE2B=y
CONFIG_CRYPTO_CMAC=y
CONFIG_CRYPTO_HMAC=y
# CONFIG_CRYPTO_MD4 is not set
CONFIG_CRYPTO_MD5=y
CONFIG_CRYPTO_RMD160=y
CONFIG_CRYPTO_SHA1=y
CONFIG_CRYPTO_SHA256=y
CONFIG_CRYPTO_SHA512=y
CONFIG_CRYPTO_SHA3=y
CONFIG_CRYPTO_SM3=y
CONFIG_CRYPTO_STREEBOG=y
CONFIG_CRYPTO_WP512=y
CONFIG_CRYPTO_XCBC=y
CONFIG_CRYPTO_XXHASH=y
# end of Hashes, digests, and MACs

#
# CRCs (cyclic redundancy checks)
#
CONFIG_CRYPTO_CRC32C=y
# CONFIG_CRYPTO_CRC32 is not set
# end of CRCs (cyclic redundancy checks)

#
# Compression
#
CONFIG_CRYPTO_DEFLATE=y
CONFIG_CRYPTO_LZO=y
CONFIG_CRYPTO_842=y
CONFIG_CRYPTO_LZ4=y
CONFIG_CRYPTO_LZ4HC=y
CONFIG_CRYPTO_ZSTD=y
# end of Compression

#
# Random number generation
#
CONFIG_CRYPTO_DRBG_MENU=y
CONFIG_CRYPTO_DRBG_HMAC=y
CONFIG_CRYPTO_DRBG_HASH=y
CONFIG_CRYPTO_DRBG_CTR=y
CONFIG_CRYPTO_DRBG=y
CONFIG_CRYPTO_JITTERENTROPY=y
CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKS=64
CONFIG_CRYPTO_JITTERENTROPY_MEMORY_BLOCKSIZE=32
CONFIG_CRYPTO_JITTERENTROPY_OSR=1
CONFIG_CRYPTO_KDF800108_CTR=y
CONFIG_CRYPTO_DF80090A=y
# end of Random number generation

#
# Userspace interface
#
CONFIG_CRYPTO_USER_API=y
CONFIG_CRYPTO_USER_API_HASH=y
CONFIG_CRYPTO_USER_API_SKCIPHER=y
CONFIG_CRYPTO_USER_API_RNG=y
# CONFIG_CRYPTO_USER_API_RNG_CAVP is not set
CONFIG_CRYPTO_USER_API_AEAD=y
CONFIG_CRYPTO_USER_API_ENABLE_OBSOLETE=y
# end of Userspace interface

#
# Accelerated Cryptographic Algorithms for CPU (arm64)
#
CONFIG_CRYPTO_GHASH_ARM64_CE=y
CONFIG_CRYPTO_AES_ARM64_CE_BLK=y
CONFIG_CRYPTO_AES_ARM64_NEON_BLK=y
CONFIG_CRYPTO_AES_ARM64_BS=y
CONFIG_CRYPTO_SM4_ARM64_CE=y
CONFIG_CRYPTO_SM4_ARM64_CE_BLK=y
CONFIG_CRYPTO_SM4_ARM64_NEON_BLK=y
CONFIG_CRYPTO_AES_ARM64_CE_CCM=y
# CONFIG_CRYPTO_SM4_ARM64_CE_CCM is not set
# CONFIG_CRYPTO_SM4_ARM64_CE_GCM is not set
# end of Accelerated Cryptographic Algorithms for CPU (arm64)

CONFIG_CRYPTO_HW=y
# CONFIG_CRYPTO_DEV_ATMEL_ECC is not set
# CONFIG_CRYPTO_DEV_ATMEL_SHA204A is not set
CONFIG_CRYPTO_DEV_CCP=y
CONFIG_CRYPTO_DEV_CCP_DD=y
# CONFIG_CRYPTO_DEV_SP_CCP is not set
# CONFIG_CRYPTO_DEV_NITROX_CNN55XX is not set
# CONFIG_CRYPTO_DEV_QAT_DH895xCC is not set
# CONFIG_CRYPTO_DEV_QAT_C3XXX is not set
# CONFIG_CRYPTO_DEV_QAT_C62X is not set
# CONFIG_CRYPTO_DEV_QAT_4XXX is not set
# CONFIG_CRYPTO_DEV_QAT_420XX is not set
# CONFIG_CRYPTO_DEV_QAT_DH895xCCVF is not set
# CONFIG_CRYPTO_DEV_QAT_C3XXXVF is not set
# CONFIG_CRYPTO_DEV_QAT_C62XVF is not set
CONFIG_CRYPTO_DEV_VIRTIO=y
# CONFIG_CRYPTO_DEV_SAFEXCEL is not set
CONFIG_CRYPTO_DEV_CCREE=y
# CONFIG_CRYPTO_DEV_HISI_SEC is not set
CONFIG_CRYPTO_DEV_HISI_SEC2=y
CONFIG_CRYPTO_DEV_HISI_QM=y
CONFIG_CRYPTO_DEV_HISI_ZIP=y
CONFIG_CRYPTO_DEV_HISI_HPRE=y
CONFIG_CRYPTO_DEV_HISI_TRNG=y
CONFIG_CRYPTO_DEV_AMLOGIC_GXL=y
# CONFIG_CRYPTO_DEV_AMLOGIC_GXL_DEBUG is not set
CONFIG_ASYMMETRIC_KEY_TYPE=y
CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y
CONFIG_X509_CERTIFICATE_PARSER=y
CONFIG_PKCS8_PRIVATE_KEY_PARSER=y
CONFIG_PKCS7_MESSAGE_PARSER=y
# CONFIG_PKCS7_WAIVE_AUTHATTRS_REJECTION_FOR_MLDSA is not set
CONFIG_PKCS7_TEST_KEY=y
CONFIG_SIGNED_PE_FILE_VERIFICATION=y
# CONFIG_FIPS_SIGNATURE_SELFTEST is not set

#
# Certificates for signature checking
#
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
# CONFIG_MODULE_SIG_KEY_TYPE_RSA is not set
CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_44=y
# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_65 is not set
# CONFIG_MODULE_SIG_KEY_TYPE_MLDSA_87 is not set
CONFIG_SYSTEM_TRUSTED_KEYRING=y
CONFIG_SYSTEM_TRUSTED_KEYS=""
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set
CONFIG_SECONDARY_TRUSTED_KEYRING=y
# CONFIG_SECONDARY_TRUSTED_KEYRING_SIGNED_BY_BUILTIN is not set
# CONFIG_SYSTEM_BLACKLIST_KEYRING is not set
CONFIG_OPENSSL_SUPPORTS_ML_DSA=y
# end of Certificates for signature checking

CONFIG_CRYPTO_KRB5=y
# CONFIG_CRYPTO_KRB5_SELFTESTS is not set
CONFIG_BINARY_PRINTF=y

#
# Library routines
#
CONFIG_RAID6_PQ=y
CONFIG_RAID6_PQ_BENCHMARK=y
CONFIG_LINEAR_RANGES=y
CONFIG_PACKING=y
CONFIG_BITREVERSE=y
CONFIG_HAVE_ARCH_BITREVERSE=y
CONFIG_GENERIC_STRNCPY_FROM_USER=y
CONFIG_GENERIC_STRNLEN_USER=y
CONFIG_GENERIC_NET_UTILS=y
# CONFIG_CORDIC is not set
# CONFIG_PRIME_NUMBERS is not set
CONFIG_RATIONAL=y
CONFIG_ARCH_USE_CMPXCHG_LOCKREF=y
CONFIG_ARCH_HAS_FAST_MULTIPLIER=y
CONFIG_ARCH_USE_SYM_ANNOTATIONS=y
CONFIG_INDIRECT_PIO=y
# CONFIG_TRACE_MMIO_ACCESS is not set
CONFIG_CRC7=y
CONFIG_CRC8=y
CONFIG_CRC16=y
CONFIG_CRC_CCITT=y
CONFIG_CRC_ITU_T=y
CONFIG_CRC_T10DIF=y
CONFIG_CRC_T10DIF_ARCH=y
CONFIG_CRC32=y
CONFIG_CRC32_ARCH=y
CONFIG_CRC64=y
CONFIG_CRC64_ARCH=y
CONFIG_CRC_OPTIMIZATIONS=y
CONFIG_CRYPTO_HASH_INFO=y
CONFIG_CRYPTO_LIB_UTILS=y
CONFIG_CRYPTO_LIB_AES=y
CONFIG_CRYPTO_LIB_AES_ARCH=y
CONFIG_CRYPTO_LIB_AES_CBC_MACS=y
CONFIG_CRYPTO_LIB_ARC4=y
CONFIG_CRYPTO_LIB_GF128MUL=y
CONFIG_CRYPTO_LIB_BLAKE2B=y
CONFIG_CRYPTO_LIB_CHACHA=y
CONFIG_CRYPTO_LIB_CHACHA_ARCH=y
CONFIG_CRYPTO_LIB_CURVE25519=y
CONFIG_CRYPTO_LIB_CURVE25519_GENERIC=y
CONFIG_CRYPTO_LIB_DES=y
CONFIG_CRYPTO_LIB_GF128HASH=y
CONFIG_CRYPTO_LIB_GF128HASH_ARCH=y
CONFIG_CRYPTO_LIB_MD5=y
CONFIG_CRYPTO_LIB_MLDSA=y
CONFIG_CRYPTO_LIB_NH=y
CONFIG_CRYPTO_LIB_NH_ARCH=y
CONFIG_CRYPTO_LIB_POLY1305=y
CONFIG_CRYPTO_LIB_POLY1305_ARCH=y
CONFIG_CRYPTO_LIB_POLY1305_GENERIC=y
CONFIG_CRYPTO_LIB_POLY1305_RSIZE=9
CONFIG_CRYPTO_LIB_CHACHA20POLY1305=y
CONFIG_CRYPTO_LIB_SHA1=y
CONFIG_CRYPTO_LIB_SHA1_ARCH=y
CONFIG_CRYPTO_LIB_SHA256=y
CONFIG_CRYPTO_LIB_SHA256_ARCH=y
CONFIG_CRYPTO_LIB_SHA512=y
CONFIG_CRYPTO_LIB_SHA512_ARCH=y
CONFIG_CRYPTO_LIB_SHA3=y
CONFIG_CRYPTO_LIB_SHA3_ARCH=y
CONFIG_CRYPTO_LIB_SM3=y
CONFIG_CRYPTO_LIB_SM3_ARCH=y
CONFIG_XOR_BLOCKS=y
CONFIG_XOR_BLOCKS_ARCH=y
CONFIG_XXHASH=y
CONFIG_AUDIT_GENERIC=y
CONFIG_AUDIT_ARCH_COMPAT_GENERIC=y
CONFIG_AUDIT_COMPAT_GENERIC=y
# CONFIG_RANDOM32_SELFTEST is not set
CONFIG_842_COMPRESS=y
CONFIG_842_DECOMPRESS=y
CONFIG_ZLIB_INFLATE=y
CONFIG_ZLIB_DEFLATE=y
CONFIG_LZO_COMPRESS=y
CONFIG_LZO_DECOMPRESS=y
CONFIG_LZ4_COMPRESS=y
CONFIG_LZ4HC_COMPRESS=y
CONFIG_LZ4_DECOMPRESS=y
CONFIG_ZSTD_COMMON=y
CONFIG_ZSTD_COMPRESS=y
CONFIG_ZSTD_DECOMPRESS=y
CONFIG_XZ_DEC=y
CONFIG_XZ_DEC_X86=y
CONFIG_XZ_DEC_POWERPC=y
CONFIG_XZ_DEC_ARM=y
CONFIG_XZ_DEC_ARMTHUMB=y
CONFIG_XZ_DEC_ARM64=y
CONFIG_XZ_DEC_SPARC=y
CONFIG_XZ_DEC_RISCV=y
# CONFIG_XZ_DEC_MICROLZMA is not set
CONFIG_XZ_DEC_BCJ=y
# CONFIG_XZ_DEC_TEST is not set
CONFIG_DECOMPRESS_GZIP=y
CONFIG_DECOMPRESS_BZIP2=y
CONFIG_DECOMPRESS_LZMA=y
CONFIG_DECOMPRESS_XZ=y
CONFIG_DECOMPRESS_LZO=y
CONFIG_DECOMPRESS_LZ4=y
CONFIG_DECOMPRESS_ZSTD=y
CONFIG_GENERIC_ALLOCATOR=y
CONFIG_REED_SOLOMON=y
CONFIG_REED_SOLOMON_ENC8=y
CONFIG_REED_SOLOMON_DEC8=y
CONFIG_TEXTSEARCH=y
CONFIG_TEXTSEARCH_KMP=y
CONFIG_TEXTSEARCH_BM=y
CONFIG_TEXTSEARCH_FSM=y
CONFIG_INTERVAL_TREE=y
CONFIG_INTERVAL_TREE_SPAN_ITER=y
CONFIG_XARRAY_MULTI=y
CONFIG_ASSOCIATIVE_ARRAY=y
CONFIG_CLOSURES=y
CONFIG_HAS_IOMEM=y
CONFIG_HAS_IOPORT=y
CONFIG_HAS_IOPORT_MAP=y
CONFIG_HAS_DMA=y
CONFIG_DMA_OPS_HELPERS=y
CONFIG_NEED_SG_DMA_FLAGS=y
CONFIG_NEED_SG_DMA_LENGTH=y
CONFIG_NEED_DMA_MAP_STATE=y
CONFIG_ARCH_DMA_ADDR_T_64BIT=y
CONFIG_DMA_DECLARE_COHERENT=y
CONFIG_ARCH_HAS_SETUP_DMA_OPS=y
CONFIG_ARCH_HAS_SYNC_DMA_FOR_DEVICE=y
CONFIG_ARCH_HAS_SYNC_DMA_FOR_CPU=y
CONFIG_ARCH_HAS_DMA_PREP_COHERENT=y
CONFIG_ARCH_HAS_FORCE_DMA_UNENCRYPTED=y
CONFIG_ARCH_HAS_BATCHED_DMA_SYNC=y
CONFIG_SWIOTLB=y
# CONFIG_SWIOTLB_DYNAMIC is not set
CONFIG_DMA_BOUNCE_UNALIGNED_KMALLOC=y
CONFIG_DMA_NEED_SYNC=y
CONFIG_DMA_RESTRICTED_POOL=y
CONFIG_DMA_NONCOHERENT_MMAP=y
CONFIG_DMA_COHERENT_POOL=y
CONFIG_DMA_DIRECT_REMAP=y
CONFIG_DMA_CMA=y
# CONFIG_DMA_NUMA_CMA is not set

#
# Default contiguous memory area size:
#
CONFIG_CMA_SIZE_MBYTES=32
CONFIG_CMA_SIZE_SEL_MBYTES=y
# CONFIG_CMA_SIZE_SEL_PERCENTAGE is not set
# CONFIG_CMA_SIZE_SEL_MIN is not set
# CONFIG_CMA_SIZE_SEL_MAX is not set
CONFIG_CMA_ALIGNMENT=8
# CONFIG_DMA_API_DEBUG is not set
# CONFIG_DMA_MAP_BENCHMARK is not set
CONFIG_SGL_ALLOC=y
CONFIG_CHECK_SIGNATURE=y
CONFIG_CPUMASK_OFFSTACK=y
CONFIG_CPU_RMAP=y
CONFIG_DQL=y
CONFIG_GLOB=y
CONFIG_NLATTR=y
CONFIG_CLZ_TAB=y
CONFIG_IRQ_POLL=y
CONFIG_MPILIB=y
CONFIG_SIGNATURE=y
CONFIG_DIMLIB=y
CONFIG_LIBFDT=y
CONFIG_OID_REGISTRY=y
CONFIG_UCS2_STRING=y
CONFIG_HAVE_GENERIC_VDSO=y
CONFIG_GENERIC_GETTIMEOFDAY=y
CONFIG_VDSO_GETRANDOM=y
CONFIG_FONT_SUPPORT=y
# CONFIG_FONTS is not set
CONFIG_FONT_8x8=y
CONFIG_FONT_8x16=y
CONFIG_SG_POOL=y
CONFIG_ARCH_HAS_PMEM_API=y
CONFIG_MEMREGION=y
CONFIG_ARCH_HAS_CPU_CACHE_INVALIDATE_MEMREGION=y
CONFIG_GENERIC_CPU_CACHE_MAINTENANCE=y
CONFIG_ARCH_HAS_UACCESS_FLUSHCACHE=y
CONFIG_ARCH_STACKWALK=y
CONFIG_STACKDEPOT=y
CONFIG_STACKDEPOT_ALWAYS_INIT=y
CONFIG_STACKDEPOT_MAX_FRAMES=64
CONFIG_REF_TRACKER=y
CONFIG_SBITMAP=y
# CONFIG_LWQ_TEST is not set
# end of Library routines

CONFIG_GENERIC_IOREMAP=y
CONFIG_GENERIC_LIB_DEVMEM_IS_ALLOWED=y
CONFIG_FIRMWARE_TABLE=y
CONFIG_UNION_FIND=y

#
# Kernel hacking
#

#
# printk and dmesg options
#
CONFIG_PRINTK_TIME=y
CONFIG_PRINTK_CALLER=y
# CONFIG_STACKTRACE_BUILD_ID is not set
CONFIG_CONSOLE_LOGLEVEL_DEFAULT=7
CONFIG_CONSOLE_LOGLEVEL_QUIET=4
CONFIG_MESSAGE_LOGLEVEL_DEFAULT=4
# CONFIG_BOOT_PRINTK_DELAY is not set
CONFIG_DYNAMIC_DEBUG=y
CONFIG_DYNAMIC_DEBUG_CORE=y
CONFIG_SYMBOLIC_ERRNAME=y
CONFIG_DEBUG_BUGVERBOSE=y
CONFIG_DEBUG_BUGVERBOSE_DETAILED=y
# end of printk and dmesg options

CONFIG_DEBUG_KERNEL=y
CONFIG_DEBUG_MISC=y

#
# Compile-time checks and compiler options
#
CONFIG_DEBUG_INFO=y
CONFIG_AS_HAS_NON_CONST_ULEB128=y
# CONFIG_DEBUG_INFO_NONE is not set
# CONFIG_DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT is not set
CONFIG_DEBUG_INFO_DWARF4=y
# CONFIG_DEBUG_INFO_DWARF5 is not set
# CONFIG_DEBUG_INFO_REDUCED is not set
CONFIG_DEBUG_INFO_COMPRESSED_NONE=y
# CONFIG_DEBUG_INFO_COMPRESSED_ZLIB is not set
# CONFIG_DEBUG_INFO_COMPRESSED_ZSTD is not set
# CONFIG_DEBUG_INFO_SPLIT is not set
# CONFIG_DEBUG_INFO_BTF is not set
CONFIG_PAHOLE_HAS_BTF_TAG=y
CONFIG_PAHOLE_HAS_LANG_EXCLUDE=y
# CONFIG_GDB_SCRIPTS is not set
CONFIG_FRAME_WARN=2048
# CONFIG_STRIP_ASM_SYMS is not set
# CONFIG_HEADERS_INSTALL is not set
CONFIG_SECTION_MISMATCH_WARN_ONLY=y
# CONFIG_DEBUG_FORCE_FUNCTION_ALIGN_64B is not set
CONFIG_ARCH_WANT_FRAME_POINTERS=y
CONFIG_FRAME_POINTER=y
# CONFIG_VMLINUX_MAP is not set
# CONFIG_DEBUG_FORCE_WEAK_PER_CPU is not set
# end of Compile-time checks and compiler options

#
# Generic Kernel Debugging Instruments
#
# CONFIG_MAGIC_SYSRQ is not set
CONFIG_DEBUG_FS=y
CONFIG_DEBUG_FS_ALLOW_ALL=y
# CONFIG_DEBUG_FS_ALLOW_NONE is not set
CONFIG_HAVE_ARCH_KGDB=y
# CONFIG_KGDB is not set
CONFIG_ARCH_HAS_UBSAN=y
CONFIG_UBSAN=y
# CONFIG_UBSAN_TRAP is not set
CONFIG_CC_HAS_UBSAN_ARRAY_BOUNDS=y
CONFIG_UBSAN_BOUNDS=y
CONFIG_UBSAN_ARRAY_BOUNDS=y
CONFIG_UBSAN_SHIFT=y
# CONFIG_UBSAN_UNREACHABLE is not set
# CONFIG_UBSAN_BOOL is not set
# CONFIG_UBSAN_ENUM is not set
# CONFIG_UBSAN_ALIGNMENT is not set
# CONFIG_TEST_UBSAN is not set
# CONFIG_UBSAN_KVM_EL2 is not set
CONFIG_HAVE_ARCH_KCSAN=y
CONFIG_HAVE_KCSAN_COMPILER=y
# end of Generic Kernel Debugging Instruments

#
# Networking Debugging
#
CONFIG_NET_DEV_REFCNT_TRACKER=y
CONFIG_NET_NS_REFCNT_TRACKER=y
CONFIG_DEBUG_NET=y
# CONFIG_DEBUG_NET_SMALL_RTNL is not set
# end of Networking Debugging

#
# Memory Debugging
#
CONFIG_PAGE_EXTENSION=y
# CONFIG_DEBUG_PAGEALLOC is not set
CONFIG_SLUB_DEBUG=y
# CONFIG_SLUB_DEBUG_ON is not set
CONFIG_SLUB_RCU_DEBUG=y
CONFIG_PAGE_OWNER=y
CONFIG_PAGE_TABLE_CHECK=y
CONFIG_PAGE_TABLE_CHECK_ENFORCED=y
CONFIG_PAGE_POISONING=y
# CONFIG_DEBUG_PAGE_REF is not set
# CONFIG_DEBUG_RODATA_TEST is not set
CONFIG_ARCH_HAS_DEBUG_WX=y
# CONFIG_DEBUG_WX is not set
CONFIG_ARCH_HAS_PTDUMP=y
CONFIG_PTDUMP=y
CONFIG_PTDUMP_DEBUGFS=y
CONFIG_HAVE_DEBUG_KMEMLEAK=y
# CONFIG_DEBUG_KMEMLEAK is not set
# CONFIG_PER_VMA_LOCK_STATS is not set
CONFIG_DEBUG_OBJECTS=y
# CONFIG_DEBUG_OBJECTS_SELFTEST is not set
CONFIG_DEBUG_OBJECTS_FREE=y
CONFIG_DEBUG_OBJECTS_TIMERS=y
CONFIG_DEBUG_OBJECTS_WORK=y
CONFIG_DEBUG_OBJECTS_RCU_HEAD=y
CONFIG_DEBUG_OBJECTS_PERCPU_COUNTER=y
CONFIG_DEBUG_OBJECTS_ENABLE_DEFAULT=1
# CONFIG_SHRINKER_DEBUG is not set
# CONFIG_DEBUG_STACK_USAGE is not set
CONFIG_SCHED_STACK_END_CHECK=y
CONFIG_ARCH_HAS_DEBUG_VM_PGTABLE=y
CONFIG_DEBUG_VFS=y
CONFIG_DEBUG_VM_IRQSOFF=y
CONFIG_DEBUG_VM=y
CONFIG_DEBUG_VM_MAPLE_TREE=y
CONFIG_DEBUG_VM_RB=y
CONFIG_DEBUG_VM_PGFLAGS=y
CONFIG_DEBUG_VM_PGTABLE=y
CONFIG_ARCH_HAS_DEBUG_VIRTUAL=y
CONFIG_DEBUG_VIRTUAL=y
CONFIG_DEBUG_MEMORY_INIT=y
CONFIG_DEBUG_PER_CPU_MAPS=y
# CONFIG_MEM_ALLOC_PROFILING is not set
CONFIG_HAVE_ARCH_KASAN=y
CONFIG_HAVE_ARCH_KASAN_SW_TAGS=y
CONFIG_HAVE_ARCH_KASAN_HW_TAGS=y
CONFIG_HAVE_ARCH_KASAN_VMALLOC=y
CONFIG_CC_HAS_KASAN_GENERIC=y
CONFIG_CC_HAS_KASAN_SW_TAGS=y
CONFIG_CC_HAS_WORKING_NOSANITIZE_ADDRESS=y
CONFIG_KASAN=y
CONFIG_CC_HAS_KASAN_MEMINTRINSIC_PREFIX=y
CONFIG_KASAN_GENERIC=y
# CONFIG_KASAN_SW_TAGS is not set
# CONFIG_KASAN_HW_TAGS is not set
# CONFIG_KASAN_OUTLINE is not set
CONFIG_KASAN_INLINE=y
CONFIG_KASAN_STACK=y
CONFIG_KASAN_VMALLOC=y
# CONFIG_KASAN_EXTRA_INFO is not set
CONFIG_HAVE_ARCH_KFENCE=y
CONFIG_KFENCE=y
CONFIG_KFENCE_SAMPLE_INTERVAL=100
CONFIG_KFENCE_NUM_OBJECTS=255
# CONFIG_KFENCE_DEFERRABLE is not set
CONFIG_KFENCE_STATIC_KEYS=y
CONFIG_KFENCE_STRESS_TEST_FAULTS=0
# end of Memory Debugging

# CONFIG_DEBUG_SHIRQ is not set

#
# Debug Oops, Lockups and Hangs
#
CONFIG_PANIC_ON_OOPS=y
CONFIG_PANIC_TIMEOUT=86400
CONFIG_LOCKUP_DETECTOR=y
CONFIG_SOFTLOCKUP_DETECTOR=y
# CONFIG_SOFTLOCKUP_DETECTOR_INTR_STORM is not set
CONFIG_BOOTPARAM_SOFTLOCKUP_PANIC=0
CONFIG_HAVE_HARDLOCKUP_DETECTOR_BUDDY=y
# CONFIG_HARDLOCKUP_DETECTOR is not set
CONFIG_DETECT_HUNG_TASK=y
CONFIG_DEFAULT_HUNG_TASK_TIMEOUT=140
CONFIG_BOOTPARAM_HUNG_TASK_PANIC=1
# CONFIG_DETECT_HUNG_TASK_BLOCKER is not set
CONFIG_WQ_WATCHDOG=y
CONFIG_BOOTPARAM_WQ_STALL_PANIC=0
# CONFIG_WQ_CPU_INTENSIVE_REPORT is not set
# CONFIG_TEST_LOCKUP is not set
# end of Debug Oops, Lockups and Hangs

#
# Scheduler Debugging
#
CONFIG_SCHED_INFO=y
CONFIG_SCHEDSTATS=y
# end of Scheduler Debugging

CONFIG_DEBUG_PREEMPT=y
# CONFIG_DEBUG_ATOMIC is not set

#
# Lock Debugging (spinlocks, mutexes, etc...)
#
CONFIG_LOCK_DEBUGGING_SUPPORT=y
CONFIG_PROVE_LOCKING=y
CONFIG_PROVE_RAW_LOCK_NESTING=y
# CONFIG_LOCK_STAT is not set
CONFIG_DEBUG_RT_MUTEXES=y
CONFIG_DEBUG_SPINLOCK=y
CONFIG_DEBUG_MUTEXES=y
CONFIG_DEBUG_WW_MUTEX_SLOWPATH=y
CONFIG_DEBUG_RWSEMS=y
CONFIG_DEBUG_LOCK_ALLOC=y
CONFIG_LOCKDEP=y
CONFIG_LOCKDEP_BITS=20
CONFIG_LOCKDEP_CHAINS_BITS=16
CONFIG_LOCKDEP_STACK_TRACE_BITS=20
CONFIG_LOCKDEP_STACK_TRACE_HASH_BITS=14
CONFIG_LOCKDEP_CIRCULAR_QUEUE_BITS=12
# CONFIG_DEBUG_LOCKDEP is not set
CONFIG_DEBUG_ATOMIC_SLEEP=y
# CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set
# CONFIG_LOCK_TORTURE_TEST is not set
# CONFIG_WW_MUTEX_SELFTEST is not set
# CONFIG_SCF_TORTURE_TEST is not set
CONFIG_CSD_LOCK_WAIT_DEBUG=y
# CONFIG_CSD_LOCK_WAIT_DEBUG_DEFAULT is not set
# end of Lock Debugging (spinlocks, mutexes, etc...)

CONFIG_TRACE_IRQFLAGS=y
CONFIG_TRACE_IRQFLAGS_NMI=y
CONFIG_DEBUG_IRQFLAGS=y
CONFIG_STACKTRACE=y
# CONFIG_DEBUG_KOBJECT is not set
# CONFIG_DEBUG_KOBJECT_RELEASE is not set

#
# Debug kernel data structures
#
CONFIG_DEBUG_LIST=y
CONFIG_DEBUG_PLIST=y
CONFIG_DEBUG_SG=y
CONFIG_DEBUG_NOTIFIERS=y
# CONFIG_DEBUG_CLOSURES is not set
CONFIG_DEBUG_MAPLE_TREE=y
# end of Debug kernel data structures

#
# RCU Debugging
#
CONFIG_PROVE_RCU=y
# CONFIG_RCU_SCALE_TEST is not set
# CONFIG_RCU_TORTURE_TEST is not set
# CONFIG_RCU_REF_SCALE_TEST is not set
CONFIG_RCU_CPU_STALL_TIMEOUT=100
CONFIG_RCU_EXP_CPU_STALL_TIMEOUT=0
# CONFIG_RCU_CPU_STALL_CPUTIME is not set
# CONFIG_RCU_TRACE is not set
CONFIG_RCU_EQS_DEBUG=y
# end of RCU Debugging

# CONFIG_DEBUG_WQ_FORCE_RR_CPU is not set
# CONFIG_CPU_HOTPLUG_STATE_CONTROL is not set
# CONFIG_LATENCYTOP is not set
CONFIG_USER_STACKTRACE_SUPPORT=y
CONFIG_NOP_TRACER=y
CONFIG_HAVE_FUNCTION_TRACER=y
CONFIG_HAVE_FUNCTION_GRAPH_TRACER=y
CONFIG_HAVE_FUNCTION_GRAPH_FREGS=y
CONFIG_HAVE_FTRACE_GRAPH_FUNC=y
CONFIG_HAVE_DYNAMIC_FTRACE=y
CONFIG_HAVE_EXTRA_IPI_TRACEPOINTS=y
CONFIG_HAVE_DYNAMIC_FTRACE_WITH_ARGS=y
CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
CONFIG_HAVE_C_RECORDMCOUNT=y
CONFIG_HAVE_BUILDTIME_MCOUNT_SORT=y
CONFIG_TRACE_CLOCK=y
CONFIG_RING_BUFFER=y
CONFIG_EVENT_TRACING=y
CONFIG_CONTEXT_SWITCH_TRACER=y
CONFIG_PREEMPTIRQ_TRACEPOINTS=y
CONFIG_TRACING=y
CONFIG_TRACING_SUPPORT=y
CONFIG_FTRACE=y
# CONFIG_TRACEFS_AUTOMOUNT_DEPRECATED is not set
# CONFIG_BOOTTIME_TRACING is not set
# CONFIG_FUNCTION_TRACER is not set
# CONFIG_STACK_TRACER is not set
# CONFIG_IRQSOFF_TRACER is not set
# CONFIG_PREEMPT_TRACER is not set
# CONFIG_SCHED_TRACER is not set
# CONFIG_HWLAT_TRACER is not set
# CONFIG_OSNOISE_TRACER is not set
# CONFIG_TIMERLAT_TRACER is not set
# CONFIG_ENABLE_DEFAULT_TRACERS is not set
# CONFIG_FTRACE_SYSCALLS is not set
# CONFIG_TRACER_SNAPSHOT is not set
CONFIG_BRANCH_PROFILE_NONE=y
# CONFIG_PROFILE_ANNOTATED_BRANCHES is not set
# CONFIG_BLK_DEV_IO_TRACE is not set
# CONFIG_UPROBE_EVENTS is not set
# CONFIG_EPROBE_EVENTS is not set
# CONFIG_SYNTH_EVENTS is not set
# CONFIG_USER_EVENTS is not set
# CONFIG_HIST_TRIGGERS is not set
# CONFIG_TRACE_EVENT_INJECT is not set
# CONFIG_TRACEPOINT_BENCHMARK is not set
# CONFIG_RING_BUFFER_BENCHMARK is not set
# CONFIG_TRACE_EVAL_MAP_FILE is not set
# CONFIG_RING_BUFFER_STARTUP_TEST is not set
# CONFIG_RING_BUFFER_VALIDATE_TIME_DELTAS is not set
# CONFIG_PREEMPTIRQ_DELAY_TEST is not set
# CONFIG_RV is not set
# CONFIG_TRACE_REMOTE_TEST is not set
# CONFIG_SAMPLES is not set
CONFIG_HAVE_SAMPLE_FTRACE_DIRECT=y
CONFIG_HAVE_SAMPLE_FTRACE_DIRECT_MULTI=y
# CONFIG_STRICT_DEVMEM is not set

#
# arm64 Debugging
#
# CONFIG_PID_IN_CONTEXTIDR is not set
# CONFIG_DEBUG_EFI is not set
# CONFIG_ARM64_RELOC_TEST is not set
CONFIG_CORESIGHT=y
CONFIG_CORESIGHT_LINKS_AND_SINKS=y
CONFIG_CORESIGHT_LINK_AND_SINK_TMC=y
CONFIG_CORESIGHT_CATU=y
CONFIG_CORESIGHT_SINK_TPIU=y
CONFIG_CORESIGHT_SINK_ETBV10=y
# CONFIG_CORESIGHT_SOURCE_ETM4X is not set
CONFIG_CORESIGHT_STM=y
# CONFIG_CORESIGHT_CTCU is not set
CONFIG_CORESIGHT_CPU_DEBUG=y
# CONFIG_CORESIGHT_CPU_DEBUG_DEFAULT_ON is not set
CONFIG_CORESIGHT_CTI=y
# CONFIG_CORESIGHT_CTI_INTEGRATION_REGS is not set
# CONFIG_ULTRASOC_SMB is not set
# CONFIG_CORESIGHT_TPDM is not set
# CONFIG_CORESIGHT_TPDA is not set
# CONFIG_CORESIGHT_DUMMY is not set
# CONFIG_CORESIGHT_TNOC is not set
# end of arm64 Debugging

#
# Kernel Testing and Coverage
#
# CONFIG_KUNIT is not set
# CONFIG_NOTIFIER_ERROR_INJECTION is not set
CONFIG_FAULT_INJECTION=y
CONFIG_FAILSLAB=y
CONFIG_FAIL_PAGE_ALLOC=y
CONFIG_FAULT_INJECTION_USERCOPY=y
CONFIG_FAIL_MAKE_REQUEST=y
CONFIG_FAIL_IO_TIMEOUT=y
CONFIG_FAIL_FUTEX=y
CONFIG_FAULT_INJECTION_DEBUG_FS=y
# CONFIG_FAIL_MMC_REQUEST is not set
# CONFIG_FAIL_SKB_REALLOC is not set
CONFIG_FAULT_INJECTION_CONFIGFS=y
# CONFIG_FAULT_INJECTION_STACKTRACE_FILTER is not set
CONFIG_ARCH_HAS_KCOV=y
CONFIG_KCOV=y
CONFIG_KCOV_ENABLE_COMPARISONS=y
CONFIG_KCOV_INSTRUMENT_ALL=y
CONFIG_KCOV_IRQ_AREA_SIZE=0x40000
# CONFIG_KCOV_SELFTEST is not set
CONFIG_RUNTIME_TESTING_MENU=y
# CONFIG_TEST_DHRY is not set
# CONFIG_LKDTM is not set
# CONFIG_TEST_DIV64 is not set
# CONFIG_TEST_MULDIV64 is not set
# CONFIG_BACKTRACE_SELF_TEST is not set
# CONFIG_TEST_REF_TRACKER is not set
# CONFIG_RBTREE_TEST is not set
# CONFIG_REED_SOLOMON_TEST is not set
# CONFIG_INTERVAL_TREE_TEST is not set
# CONFIG_PERCPU_TEST is not set
# CONFIG_ATOMIC64_SELFTEST is not set
# CONFIG_ASYNC_RAID6_TEST is not set
# CONFIG_TEST_HEXDUMP is not set
# CONFIG_TEST_KSTRTOX is not set
# CONFIG_TEST_BITMAP is not set
# CONFIG_TEST_XARRAY is not set
# CONFIG_TEST_MAPLE_TREE is not set
# CONFIG_TEST_RHASHTABLE is not set
# CONFIG_TEST_IDA is not set
# CONFIG_TEST_LKM is not set
# CONFIG_TEST_BITOPS is not set
# CONFIG_TEST_VMALLOC is not set
# CONFIG_TEST_WORKQUEUE is not set
# CONFIG_TEST_BPF is not set
# CONFIG_FIND_BIT_BENCHMARK is not set
# CONFIG_TEST_FIRMWARE is not set
# CONFIG_TEST_SYSCTL is not set
# CONFIG_CONTEXT_ANALYSIS_TEST is not set
# CONFIG_TEST_UDELAY is not set
# CONFIG_TEST_STATIC_KEYS is not set
# CONFIG_TEST_DYNAMIC_DEBUG is not set
# CONFIG_TEST_KMOD is not set
# CONFIG_TEST_KALLSYMS is not set
# CONFIG_TEST_DEBUG_VIRTUAL is not set
# CONFIG_TEST_MEMCAT_P is not set
# CONFIG_TEST_MEMINIT is not set
# CONFIG_TEST_HMM is not set
# CONFIG_TEST_FREE_PAGES is not set
# CONFIG_TEST_OBJPOOL is not set
CONFIG_ARCH_USE_MEMTEST=y
CONFIG_MEMTEST=y
# end of Kernel Testing and Coverage

#
# Rust hacking
#
# end of Rust hacking
# end of Kernel hacking

CONFIG_IO_URING_ZCRX=y
CONFIG_IO_URING_BPF=y
KernelRepo git://git.kernel.org/pub/scm/linux/kernel/git/arm64/linux.git
ReproCID 0
ReproOpts
ReproSyzID 0
SyzkallerCommit de5aae85e5f28e2fa1c7deefcc24fe286abe5140
TargetArch arm64
TargetOS linux

Outputs:
DenialOfService ❌
Exploitable ❌
FilesystemTrigger ❌
NetworkTrigger ❌
PeripheralTrigger βœ…
RemoteTrigger ❌
Unprivileged βœ…
UserNamespace βœ…
VMGuestTrigger ❌
VMHostTrigger ❌
Explanation
Based on the analysis of the bug report and the kernel source code, here is the
assessment of the issue:

**Root Cause Analysis:**
The WARNING is triggered in `__queue_work` when attempting to queue a work item
on a workqueue that is currently in the process of being drained
(`__WQ_DRAINING` flag is set).
In the provided trace, a Bluetooth network encapsulation (`bnep_session`) or a
standard L2CAP socket is actively sending data. The transmission path goes
through `kernel_sendmsg` -> `l2cap_sock_sendmsg` -> `l2cap_chan_send` ->
`hci_send_acl`. Finally, `hci_send_acl` attempts to schedule the transmission by
calling `queue_work(hdev->workqueue, &hdev->tx_work)`.

Concurrently, the underlying Bluetooth device is being unregistered (for
example, a USB Bluetooth dongle is physically unplugged, or a `vhci` device is
destroyed). The unregistration path calls `hci_unregister_dev` ->
`hci_dev_do_close` -> `hci_dev_close_sync`. Inside `hci_dev_close_sync`, the
kernel calls `drain_workqueue(hdev->workqueue)` to ensure all pending works are
completed before tearing down the device state.

Because `sendmsg` holds the `l2cap_chan_lock`, the device teardown path (which
also needs this lock to destroy the L2CAP channel and drop the `hdev` reference)
is temporarily blocked. Thus, the `hdev` and its workqueue are guaranteed to
still be alive in memory. However, because `drain_workqueue` has already marked
the workqueue with `__WQ_DRAINING`, the concurrent `queue_work` call safely
catches this state, emits a `WARN_ONCE`, and aborts queueing the work.

**Security Impact:**
- **Exploitable:** **No.** There is no use-after-free, memory corruption, or
deadlock. The workqueue code safely rejects the work item. The socket buffer
(skb) that was supposed to be transmitted is safely appended to the channel's
`data_q` and will be properly purged and freed without memory leaks when the
channel teardown resumes.
- **Denial Of Service:** **No.** In production environments (where
`panic_on_warn` is disabled), this is just a noisy WARNING message in the kernel
log. The system will continue to operate normally.
- **Accessible From Unprivileged Processes / User Namespaces:** **Yes.** While
BNEP connections require `CAP_NET_ADMIN`, the exact same code path can be
reached by an unprivileged user creating a standard L2CAP socket
(`AF_BLUETOOTH`, `BTPROTO_L2CAP`), sending data in a loop, and concurrently
unplugging the Bluetooth USB dongle.
- **Peripheral Trigger:** **Yes.** Physically unplugging a USB Bluetooth adapter
while it is processing outgoing traffic is the primary hardware trigger for this
race condition.

Crash report:
------------[ cut here ]------------
workqueue: cannot queue hci_tx_work on wq hci2
WARNING: kernel/workqueue.c:2298 at __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296, CPU#0: kbnepd /10362
Modules linked in:
CPU: 0 UID: 0 PID: 10362 Comm: kbnepd  Tainted: G             L      syzkaller #0 PREEMPT 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296
lr : __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296
sp : ffff8000971a7560
x29: ffff8000971a75a0 x28: ffff0000ed3e98c0 x27: ffff0000ed3e9990
x26: ffff0000ca68f800 x25: 0000000000000008 x24: ffff0000ca68f9c0
x23: dfff800000000000 x22: ffff0000d8bb002c x21: 0000000000208040
x20: ffff800089f06000 x19: ffff0000ce2d0c50 x18: 1fffe00035c20e20
x17: ffff8000888db000 x16: ffff80008898cfc0 x15: ffff0001ae10710c
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000001c1f x10: 0000000000ff0100 x9 : 2106f328601d6d00
x8 : 2106f328601d6d00 x7 : ffff8000804886d0 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f13b0
x2 : 0000000100000000 x1 : ffff0000d8bb0000 x0 : 0000000000000000
Call trace:
 __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296 (P)
 queue_work_on+0xc0/0x130 kernel/workqueue.c:2432
 queue_work include/linux/workqueue.h:696 [inline]
 hci_send_acl+0x4a4/0x7c4 net/bluetooth/hci_core.c:3283
 l2cap_do_send+0x18c/0x2b4 net/bluetooth/l2cap_core.c:1019
 l2cap_chan_send+0x108c/0x1dc4 net/bluetooth/l2cap_core.c:-1
 l2cap_sock_sendmsg+0x284/0x428 net/bluetooth/l2cap_sock.c:1164
 sock_sendmsg_nosec net/socket.c:787 [inline]
 __sock_sendmsg+0xc8/0x138 net/socket.c:802
 sock_sendmsg+0x154/0x228 net/socket.c:825
 kernel_sendmsg+0x54/0x6c net/socket.c:849
 bnep_tx_frame net/bluetooth/bnep/core.c:466 [inline]
 bnep_session+0x1ce0/0x2298 net/bluetooth/bnep/core.c:509
 kthread+0x2f0/0x3c0 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:842
irq event stamp: 284
hardirqs last  enabled at (283): [<ffff8000803bd554>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1644 [inline]
hardirqs last  enabled at (283): [<ffff8000803bd554>] finish_lock_switch+0x160/0x204 kernel/sched/core.c:5124
hardirqs last disabled at (284): [<ffff80008034c854>] queue_work_on+0x4c/0x130 kernel/workqueue.c:2428
softirqs last  enabled at (236): [<ffff800084ab928c>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (232): [<ffff800084ab9258>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

Trajectory: (Expand/Collapse All)
Seq Timestamp Type Name Duration
0/0 2026/06/01 19:23 flow assessment-security
8m Results:
map[DenialOfService:false Explanation:Based on the analysis of the bug report and the kernel source code, here is the
assessment of the issue:

**Root Cause Analysis:**
The WARNING is triggered in `__queue_work` when attempting to queue a work item
on a workqueue that is currently in the process of being drained
(`__WQ_DRAINING` flag is set).
In the provided trace, a Bluetooth network encapsulation (`bnep_session`) or a
standard L2CAP socket is actively sending data. The transmission path goes
through `kernel_sendmsg` -> `l2cap_sock_sendmsg` -> `l2cap_chan_send` ->
`hci_send_acl`. Finally, `hci_send_acl` attempts to schedule the transmission by
calling `queue_work(hdev->workqueue, &hdev->tx_work)`.

Concurrently, the underlying Bluetooth device is being unregistered (for
example, a USB Bluetooth dongle is physically unplugged, or a `vhci` device is
destroyed). The unregistration path calls `hci_unregister_dev` ->
`hci_dev_do_close` -> `hci_dev_close_sync`. Inside `hci_dev_close_sync`, the
kernel calls `drain_workqueue(hdev->workqueue)` to ensure all pending works are
completed before tearing down the device state.

Because `sendmsg` holds the `l2cap_chan_lock`, the device teardown path (which
also needs this lock to destroy the L2CAP channel and drop the `hdev` reference)
is temporarily blocked. Thus, the `hdev` and its workqueue are guaranteed to
still be alive in memory. However, because `drain_workqueue` has already marked
the workqueue with `__WQ_DRAINING`, the concurrent `queue_work` call safely
catches this state, emits a `WARN_ONCE`, and aborts queueing the work.

**Security Impact:**
- **Exploitable:** **No.** There is no use-after-free, memory corruption, or
deadlock. The workqueue code safely rejects the work item. The socket buffer
(skb) that was supposed to be transmitted is safely appended to the channel's
`data_q` and will be properly purged and freed without memory leaks when the
channel teardown resumes.
- **Denial Of Service:** **No.** In production environments (where
`panic_on_warn` is disabled), this is just a noisy WARNING message in the kernel
log. The system will continue to operate normally.
- **Accessible From Unprivileged Processes / User Namespaces:** **Yes.** While
BNEP connections require `CAP_NET_ADMIN`, the exact same code path can be
reached by an unprivileged user creating a standard L2CAP socket
(`AF_BLUETOOTH`, `BTPROTO_L2CAP`), sending data in a loop, and concurrently
unplugging the Bluetooth USB dongle.
- **Peripheral Trigger:** **Yes.** Physically unplugging a USB Bluetooth adapter
while it is processing outgoing traffic is the primary hardware trigger for this
race condition. Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:true RemoteTrigger:false Unprivileged:true UserNamespace:true VMGuestTrigger:false VMHostTrigger:false]

1/1 2026/06/01 19:23 action syz-repro-to-c-repro
0m Results:
map[SimplifiedCRepro:]

2/1 2026/06/01 19:23 action kernel-checkouter
0m Results:
map[KernelSrc:/app/workdir/cache/src/2a496228761e87cb26e37902b7c59a1cebfbe9ee]

3/1 2026/06/01 19:23 action kernel-builder
0m Results:
map[KernelObj:/app/workdir/cache/build/6e82845ce4544bb06037638953c5592dd500fcd1]

4/1 2026/06/01 19:23 action codesearch-prepare
0m Results:
map[Index:codesearch-index]

5/1 2026/06/01 19:23 agent expert
8m Model:
gemini-3.1-pro-preview

Results:
map[DenialOfService:false Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:true RemoteTrigger:false Unprivileged:true UserNamespace:true VMGuestTrigger:false VMHostTrigger:false]

Instruction:
You are an experienced Linux kernel security engineer. Your task is to analyze given kernel bug report
and determine its security impact based on the following dimensions.

Use the provided tools to examine the source code, check for capability checks (e.g., capable(), ns_capable()),
and understand the nature of the bug. Analyze the given kernel build and configuration.
You can check the kernel config by grepping ".config" file; you can check kernel cmdline by grepping
".config" file for "CONFIG_CMDLINE=". Assume sysctl parameters have default values.
But analyze for the corresponding production build w/o debugging tools enabled (like KASAN, KMSAN, UBSAN).

Try different strategies when analyzing the bug:
 - think of ways in which the vulnerable code is unreachable
 - or the other way around: try to come up with different ideas of how an unprivileged user can reach the bug
If still unsure err on the side of the bug being non-exploitable/not-accessible.
In the final reply, provide a reasoning for your assessment.

Analysis dimensions:

* Exploitable:
Determine if the bug can result in memory corruption or elevated privileges.
Memory safety issues are almost always exploitable (KASAN or UBSAN reports for use-after-free, out-of-bounds;
refcounting issues, corrupted lists, etc). When kernel is crashing on a completely wild pointer access
(e.g. user-space address, or non-canonical address, but not on NULL or address corresponding to KASAN shadow
for NULL address), including both data accesses and control transfers, that also usually implies possibility
of exploitation. Such reports usually say "unable to handle kernel paging request".
Uses of uninitialized values detected by KMSAN may be exploitable b/c attacker frequently can affect uninit
values with spraying techniques. However, for these exploitability depends on how exactly the uninit value
is used in the code, and what it affects.

Think of what happens after the bug is triggered. Some bugs cause kernel panic and halt execution,
they are harder to exploit. For example, BUG reports halts the kernel. However, WARNING reports don't halt
execution in production builds. Debug bug detection tools (like KASAN, KMSAN, KCSAN, UBSAN) are also not enabled
in production builds, so attacker can freely exploit these bugs w/o being detected by these tools.
If you see an integer overflow, think how the overflowed value used later (if it's used as allocation size,
or an array index). If you see an out-of-bounds read, think if it's followed by an out-of-bounds write as well.
Some KCSAN data-races may be exploitable by skilled attackers as well. Think what data structures got corrupted
as the result of data races and how. However, note that kernel has lots of "benign" data races that don't lead
to any runtime misbehavior at all.

* Denial Of Service:
Determine if the bug can result in denial-of-service. Most bugs can, since they cause system crash,
hangs, deadlocks, or resource leaks. This is mostly applicable to WARNING bugs that won't cause system crash
in production. For these think what will be consequences of the violation of the kernel assumptions flagged
by the WARNING. In some cases the unexpected condition is also properly handled by the normal control flow
(e.g. with "if (WARN_ON(...))"), these won't cause denial-of-service. If the condition is not handled,
then it may or may not cause denial-of-service.

* Accessible From Unprivileged Processes:
Determine if the bug can be reached from a typical (non-root) user process that does NOT have any special capabilities
(like CAP_SYS_ADMIN, CAP_NET_ADMIN, CAP_NET_RAW, CAP_PERFMON) or access to device nodes restricted to root.
Assume that unprivileged_bpf_disabled=1, that is eBPF loading is not accessible. However, cBPF (classical BPF)
is still accessible to non-root processes.
Assume that user namespaces are not accessible, that is, the process cannot get the mentioned capabilities even
within a new user namespace (checked by ns_capable() function in the kernel sources).

* Accessible From User Namespaces:
Determine if the bug can be reached within a user-namespace where the process has all capabilities
(including CAP_SYS_ADMIN, CAP_NET_ADMIN, CAP_NET_RAW, CAP_PERFMON). Such capabilities are checked with ns_capable()
function in the kernel sources.

* VM Guest Trigger:
Determine if the bug can be triggered from the context of a typical KVM guest (e.g., set up by a QEMU VMM).
Consider accesses to standard Linux host paravirtualized features (virtio-blk, virtio-net, etc.),
and handling of VM exits in the KVM code.

* VM Host Trigger in The Confidential Computing Context:
Determine if the bug can be triggered in a confidential computing guest kernel from the context of a KVM host.
Consider access to standard Linux guest paravirtualized features (virtio-blk, virtio-net, etc.).

* Ethernet Network Trigger:
Determine if the bug can be triggered by processing ingress network Ethernet traffic, either directly (network stack)
or via drivers exposed to network data.

* Other Remote Trigger:
Determine if the bug can be triggered by processing remote traffic other than Ethernet (Wifi, Bluetooth, NFC, etc).

* Peripheral Trigger:
Determine if the bug can be triggered via an untrusted peripheral device that can be physically plugged
into a system, such as a USB device or a niche hardware driver handling external hardware inputs.
This is particularly important for mobile and desktop environments where users can plug in unknown devices.

* Malicious Filesystem Trigger:
Determine if the bug can be triggered by the kernel mounting and parsing a malicious filesystem image.
This is highly critical for Desktop and Mobile environments where external media or downloaded images
might be auto-mounted.

Don't make assumptions about the kernel source code (it may be different from what you assume it is).
Extensively use the provided code access tools (codesearch-*, git-*, grepper, etc)
to examine the actual source code, and confirm any assumptions.
Prefer calling several tools at the same time to save round-trips.


Use set-results tool to provide results of the analysis.
It must be called exactly once before the final reply.
Ignore results of this tool.

Prompt:
The kernel bug report is:

------------[ cut here ]------------
workqueue: cannot queue hci_tx_work on wq hci2
WARNING: kernel/workqueue.c:2298 at __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296, CPU#0: kbnepd /10362
Modules linked in:
CPU: 0 UID: 0 PID: 10362 Comm: kbnepd  Tainted: G             L      syzkaller #0 PREEMPT 
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
pstate: 634000c5 (nZCv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296
lr : __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296
sp : ffff8000971a7560
x29: ffff8000971a75a0 x28: ffff0000ed3e98c0 x27: ffff0000ed3e9990
x26: ffff0000ca68f800 x25: 0000000000000008 x24: ffff0000ca68f9c0
x23: dfff800000000000 x22: ffff0000d8bb002c x21: 0000000000208040
x20: ffff800089f06000 x19: ffff0000ce2d0c50 x18: 1fffe00035c20e20
x17: ffff8000888db000 x16: ffff80008898cfc0 x15: ffff0001ae10710c
x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000
x11: 0000000000001c1f x10: 0000000000ff0100 x9 : 2106f328601d6d00
x8 : 2106f328601d6d00 x7 : ffff8000804886d0 x6 : 0000000000000000
x5 : 0000000000000001 x4 : 0000000000000000 x3 : ffff8000802f13b0
x2 : 0000000100000000 x1 : ffff0000d8bb0000 x0 : 0000000000000000
Call trace:
 __queue_work+0xf6c/0x12f8 kernel/workqueue.c:2296 (P)
 queue_work_on+0xc0/0x130 kernel/workqueue.c:2432
 queue_work include/linux/workqueue.h:696 [inline]
 hci_send_acl+0x4a4/0x7c4 net/bluetooth/hci_core.c:3283
 l2cap_do_send+0x18c/0x2b4 net/bluetooth/l2cap_core.c:1019
 l2cap_chan_send+0x108c/0x1dc4 net/bluetooth/l2cap_core.c:-1
 l2cap_sock_sendmsg+0x284/0x428 net/bluetooth/l2cap_sock.c:1164
 sock_sendmsg_nosec net/socket.c:787 [inline]
 __sock_sendmsg+0xc8/0x138 net/socket.c:802
 sock_sendmsg+0x154/0x228 net/socket.c:825
 kernel_sendmsg+0x54/0x6c net/socket.c:849
 bnep_tx_frame net/bluetooth/bnep/core.c:466 [inline]
 bnep_session+0x1ce0/0x2298 net/bluetooth/bnep/core.c:509
 kthread+0x2f0/0x3c0 kernel/kthread.c:436
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:842
irq event stamp: 284
hardirqs last  enabled at (283): [<ffff8000803bd554>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1644 [inline]
hardirqs last  enabled at (283): [<ffff8000803bd554>] finish_lock_switch+0x160/0x204 kernel/sched/core.c:5124
hardirqs last disabled at (284): [<ffff80008034c854>] queue_work_on+0x4c/0x130 kernel/workqueue.c:2428
softirqs last  enabled at (236): [<ffff800084ab928c>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (232): [<ffff800084ab9258>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---




Reply:
Based on the analysis of the bug report and the kernel source code, here is the assessment of the issue:

**Root Cause Analysis:**
The WARNING is triggered in `__queue_work` when attempting to queue a work item on a workqueue that is currently in the process of being drained (`__WQ_DRAINING` flag is set). 
In the provided trace, a Bluetooth network encapsulation (`bnep_session`) or a standard L2CAP socket is actively sending data. The transmission path goes through `kernel_sendmsg` -> `l2cap_sock_sendmsg` -> `l2cap_chan_send` -> `hci_send_acl`. Finally, `hci_send_acl` attempts to schedule the transmission by calling `queue_work(hdev->workqueue, &hdev->tx_work)`.

Concurrently, the underlying Bluetooth device is being unregistered (for example, a USB Bluetooth dongle is physically unplugged, or a `vhci` device is destroyed). The unregistration path calls `hci_unregister_dev` -> `hci_dev_do_close` -> `hci_dev_close_sync`. Inside `hci_dev_close_sync`, the kernel calls `drain_workqueue(hdev->workqueue)` to ensure all pending works are completed before tearing down the device state. 

Because `sendmsg` holds the `l2cap_chan_lock`, the device teardown path (which also needs this lock to destroy the L2CAP channel and drop the `hdev` reference) is temporarily blocked. Thus, the `hdev` and its workqueue are guaranteed to still be alive in memory. However, because `drain_workqueue` has already marked the workqueue with `__WQ_DRAINING`, the concurrent `queue_work` call safely catches this state, emits a `WARN_ONCE`, and aborts queueing the work. 

**Security Impact:**
- **Exploitable:** **No.** There is no use-after-free, memory corruption, or deadlock. The workqueue code safely rejects the work item. The socket buffer (skb) that was supposed to be transmitted is safely appended to the channel's `data_q` and will be properly purged and freed without memory leaks when the channel teardown resumes.
- **Denial Of Service:** **No.** In production environments (where `panic_on_warn` is disabled), this is just a noisy WARNING message in the kernel log. The system will continue to operate normally.
- **Accessible From Unprivileged Processes / User Namespaces:** **Yes.** While BNEP connections require `CAP_NET_ADMIN`, the exact same code path can be reached by an unprivileged user creating a standard L2CAP socket (`AF_BLUETOOTH`, `BTPROTO_L2CAP`), sending data in a loop, and concurrently unplugging the Bluetooth USB dongle.
- **Peripheral Trigger:** **Yes.** Physically unplugging a USB Bluetooth adapter while it is processing outgoing traffic is the primary hardware trigger for this race condition.

6/2 2026/06/01 19:23 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 7027
							output: 19
							thoughts: 184
						

Thoughts:
**Analyzing a Workqueue Issue**

Okay, so I'm seeing a warning, specifically about the workqueue system. It's flagging an issue within `__queue_work` in `kernel/workqueue.c:2296`. The message is pretty explicit: "workqueue: cannot queue hci_tx_work on wq hci2." That's a strong hint that something's not quite right with how we're queuing work related to HCI transmission on a specific workqueue, `hci2`.

The call trace gives me a clear path to trace this down: `__queue_work`, which is, of course, the heart of workqueue queueing, then `queue_work_on`, and then the standard `queue_work`. This is followed by `hci_send_acl` and subsequently, `l2cap_do_send`, so it's clearly related to Bluetooth Low Energy. The trace goes through `l2cap_chan_send`, `l2cap_sock_sendmsg`, then the more generic socket functions: `sock_sendmsg_nosec`, `__sock_sendmsg`, `sock_sendmsg`, and `kernel_sendmsg`. Then it jumps to `bnep_tx_frame`, indicating a BNEP interaction, which then triggers the call to the kernel thread, `bnep_session`.

This sequence immediately tells me this involves the Bluetooth stack and specifically ACL data transmission, ultimately stemming from a BNEP session that's trying to send something. I need to dive into `kernel/workqueue.c:2296` to understand the conditions that trigger this particular warning. I need to understand why this specific work isn't being queued on this specific workqueue. There is an issue here, which demands an investigation, given that it concerns a core function, HCI communication, and could impact the performance of the Bluetooth stack.



7/2 2026/06/01 19:23 tool grepper
0m Args:
map[Expression:workqueue: cannot queue]

Results:
map[Output:kernel/workqueue.c=2275=static void __queue_work(int cpu, struct workqueue_struct *wq,
--
kernel/workqueue.c-2296-	if (unlikely(wq->flags & (__WQ_DESTROYING | __WQ_DRAINING) &&
kernel/workqueue.c:2297:		     WARN_ONCE(!is_chained_work(wq), "workqueue: cannot queue %ps on wq %s\n",
kernel/workqueue.c-2298-			       work->func, wq->name))) {
]

8/2 2026/06/01 19:23 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 7781
							output: 19
							thoughts: 205
						

Thoughts:
**Analyzing a Workqueue Concurrency Issue**

Okay, so I've got this warning message popping up: a workqueue, specifically one named in the warning, is in the process of being destroyed or drained, and someone's trying to queue a non-chained work item onto it. The code snippet flags this with `WARN_ONCE`, and the specific functions and workqueue names are extremely helpful here. I've got a good handle on workqueue internals, so I can see this means there's a concurrency issue.

The function trying to queue the work is `hci_send_acl`, and it's trying to queue `hci_tx_work` onto the `hdev->workqueue`, which seems to be named `hci2`. That tells me that a Bluetooth device, `hdev`, is likely going through the unregistration or destruction process, which is why its associated workqueue is also being taken down. However, the `bnep_session` module still seems to be active and trying to send frames.

My next step is clear: I need to dig into the `hci_send_acl` function, which I know is in `net/bluetooth/hci_core.c`, to pinpoint *why* it's trying to send something at this point. I need to understand the logic that leads to this call and identify the race condition that's causing this work item to be scheduled after the workqueue is already being taken down. I'll be looking for where the `bnep_session`'s attempt to send frames is not properly synchronized with the `hdev` destruction. This probably involves investigating the state of the device, its registration/unregistration lifecycle, and the synchronization primitives being used.



9/2 2026/06/01 19:24 tool grepper
0m Args:
map[Expression:hci_send_acl]

Results:
map[Output:include/net/bluetooth/hci_core.h=2335=int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
include/net/bluetooth/hci_core.h-2336-		 const void *param);
include/net/bluetooth/hci_core.h:2337:void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
include/net/bluetooth/hci_core.h-2338-void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
--
net/bluetooth/hci_core.c=3221=static void hci_queue_acl(struct hci_chan *chan, struct sk_buff_head *queue,
--
net/bluetooth/hci_core.c-3274-
net/bluetooth/hci_core.c:3275:void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags)
net/bluetooth/hci_core.c-3276-{
--
net/bluetooth/l2cap_core.c=964=static void l2cap_send_acl(struct l2cap_conn *conn, struct sk_buff *skb,
--
net/bluetooth/l2cap_core.c-968-	if (hci_conn_valid(conn->hcon->hdev, conn->hcon))
net/bluetooth/l2cap_core.c:969:		hci_send_acl(conn->hchan, skb, flags);
net/bluetooth/l2cap_core.c-970-	else
--
net/bluetooth/l2cap_core.c=999=static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb)
--
net/bluetooth/l2cap_core.c-1018-	bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags);
net/bluetooth/l2cap_core.c:1019:	hci_send_acl(chan->conn->hchan, skb, flags);
net/bluetooth/l2cap_core.c-1020-}
]

10/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 8942
							output: 38
							thoughts: 13
						

Thoughts:
Okay, let's dive into this. Here's my take on those thoughts, as if they're my own:

**Analyzing the HCI Send ACL Implementation**

Right, let's get into this. My mind immediately goes to the `hci_send_acl` implementation. I need to understand its core function, its flow, and how it handles the complexities of sending ACL (Asynchronous Connection-Less) data over the HCI (Host Controller Interface) layer. I'm thinking about the low-level details, the buffer management, potential race conditions, error handling, and how it integrates with the underlying hardware or driver. I want to dissect the critical path; where the data comes from, what happens to it, how the fragmentation or reassembly works if at all, and finally, how it's ultimately transmitted. I'm looking for the bottlenecks, potential points of failure, and opportunities for optimization. I'll need to consider this from a systems perspective, thinking of this function as a module and how it fits into the Bluetooth architecture overall.



11/2 2026/06/01 19:24 tool read-file
0m Args:
map[File:net/bluetooth/hci_core.c FirstLine:3275 LineCount:50]

Results:
map[Contents:3275:	void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags)
3276:	{
3277:		struct hci_dev *hdev = chan->conn->hdev;
3278:	
3279:		BT_DBG("%s chan %p flags 0x%4.4x", hdev->name, chan, flags);
3280:	
3281:		hci_queue_acl(chan, &chan->data_q, skb, flags);
3282:	
3283:		queue_work(hdev->workqueue, &hdev->tx_work);
3284:	}
3285:	
3286:	/* Send SCO data */
3287:	void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb)
3288:	{
3289:		struct hci_dev *hdev = conn->hdev;
3290:		struct hci_sco_hdr hdr;
3291:	
3292:		BT_DBG("%s len %d", hdev->name, skb->len);
3293:	
3294:		hdr.handle = cpu_to_le16(conn->handle);
3295:		hdr.dlen   = skb->len;
3296:	
3297:		skb_push(skb, HCI_SCO_HDR_SIZE);
3298:		skb_reset_transport_header(skb);
3299:		memcpy(skb_transport_header(skb), &hdr, HCI_SCO_HDR_SIZE);
3300:	
3301:		hci_skb_pkt_type(skb) = HCI_SCODATA_PKT;
3302:	
3303:		skb_queue_tail(&conn->data_q, skb);
3304:	
3305:		bt_dev_dbg(hdev, "hcon %p queued %d", conn,
3306:			   skb_queue_len(&conn->data_q));
3307:	
3308:		queue_work(hdev->workqueue, &hdev->tx_work);
3309:	}
3310:	
3311:	/* Send ISO data */
3312:	static void hci_add_iso_hdr(struct sk_buff *skb, __u16 handle, __u8 flags)
3313:	{
3314:		struct hci_iso_hdr *hdr;
3315:		int len = skb->len;
3316:	
3317:		skb_push(skb, HCI_ISO_HDR_SIZE);
3318:		skb_reset_transport_header(skb);
3319:		hdr = (struct hci_iso_hdr *)skb_transport_header(skb);
3320:		hdr->handle = cpu_to_le16(hci_handle_pack(handle, flags));
3321:		hdr->dlen   = cpu_to_le16(len);
3322:	}
3323:	
3324:	static void hci_queue_iso(struct hci_conn *conn, struct sk_buff_head *queue,
]

12/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 10084
							output: 21
							thoughts: 77
						

Thoughts:
Okay, let me break this down.

**My Analysis of the `hci_send_acl` Function**

Right, so `hci_send_acl` is deceptively simple. It basically just hands off the actual work of sending an ACL packet to a workqueue, specifically `hdev->workqueue`, by calling `queue_work`. Nothing particularly groundbreaking there. The interesting bit comes from what happens when `hdev->workqueue` is no longer valid. If that workqueue is in the process of being destroyed *while* `hci_send_acl` is trying to enqueue work, we get a WARNING. That's a classic race condition scenario, and those are always fun to debug.

So, the next obvious question is, when *is* `hdev->workqueue` destroyed? We're dealing with Bluetooth device management here, so my immediate thought is that it's likely handled during device unregistration or release. It's probably being cleaned up in either `hci_unregister_dev` or `hci_release_dev`. Those would be the logical places to look for the culprit. Time to dig into those functions and trace the lifecycle of `hdev->workqueue` to see what's going on. I'll need to figure out the exact sequence of events that leads to its destruction and how that interacts with the `hci_send_acl` calls. Gotta make sure we're properly synchronizing access to that workqueue.



13/2 2026/06/01 19:24 tool grepper
0m Args:
map[Expression:destroy_workqueue.*workqueue]

Results:
map[Output:
Full output is too long, showing 500 out of 1086 lines.
Use more precise expression if possible.

block/bio.c=1897=void bioset_exit(struct bio_set *bs)
--
block/bio.c-1900-	if (bs->rescue_workqueue)
block/bio.c:1901:		destroy_workqueue(bs->rescue_workqueue);
block/bio.c-1902-	bs->rescue_workqueue = NULL;
--
drivers/auxdisplay/cfag12864b.c=354=static void __exit cfag12864b_exit(void)
--
drivers/auxdisplay/cfag12864b.c-357-	cfag12864b_off();
drivers/auxdisplay/cfag12864b.c:358:	destroy_workqueue(cfag12864b_workqueue);
drivers/auxdisplay/cfag12864b.c-359-	kfree(cfag12864b_cache);
--
drivers/block/loop.c=1754=static void lo_free_disk(struct gendisk *disk)
--
drivers/block/loop.c-1758-	if (lo->workqueue)
drivers/block/loop.c:1759:		destroy_workqueue(lo->workqueue);
drivers/block/loop.c-1760-	loop_free_idle_workers(lo, true);
--
drivers/block/zloop.c=986=static void zloop_free_disk(struct gendisk *disk)
--
drivers/block/zloop.c-1001-	fput(zlo->data_dir);
drivers/block/zloop.c:1002:	destroy_workqueue(zlo->workqueue);
drivers/block/zloop.c-1003-	kfree(zlo->base_dir);
--
drivers/block/zloop.c=1173=static int zloop_ctl_add(struct zloop_options *opts)
--
drivers/block/zloop.c-1350-out_destroy_workqueue:
drivers/block/zloop.c:1351:	destroy_workqueue(zlo->workqueue);
drivers/block/zloop.c-1352-out_free_idr:
--
drivers/bluetooth/btintel_pcie.c=2561=static void btintel_pcie_remove(struct pci_dev *pdev)
--
drivers/bluetooth/btintel_pcie.c-2584-
drivers/bluetooth/btintel_pcie.c:2585:	destroy_workqueue(data->workqueue);
drivers/bluetooth/btintel_pcie.c-2586-
--
drivers/bluetooth/hci_qca.c=719=static int qca_close(struct hci_uart *hu)
--
drivers/bluetooth/hci_qca.c-741-	timer_shutdown_sync(&qca->wake_retrans_timer);
drivers/bluetooth/hci_qca.c:742:	destroy_workqueue(qca->workqueue);
drivers/bluetooth/hci_qca.c-743-	qca->hu = NULL;
--
drivers/cdx/controller/mcdi.c=155=void cdx_mcdi_finish(struct cdx_mcdi *cdx)
--
drivers/cdx/controller/mcdi.c-164-
drivers/cdx/controller/mcdi.c:165:	destroy_workqueue(mcdi->workqueue);
drivers/cdx/controller/mcdi.c-166-	kfree(cdx->mcdi);
--
drivers/char/tpm/tpm_vtpm_proxy.c=687=static int __init vtpm_module_init(void)
--
drivers/char/tpm/tpm_vtpm_proxy.c-699-		pr_err("couldn't create vtpmx device\n");
drivers/char/tpm/tpm_vtpm_proxy.c:700:		destroy_workqueue(workqueue);
drivers/char/tpm/tpm_vtpm_proxy.c-701-	}
--
drivers/char/tpm/tpm_vtpm_proxy.c=706=static void __exit vtpm_module_exit(void)
drivers/char/tpm/tpm_vtpm_proxy.c-707-{
drivers/char/tpm/tpm_vtpm_proxy.c:708:	destroy_workqueue(workqueue);
drivers/char/tpm/tpm_vtpm_proxy.c-709-	misc_deregister(&vtpmx_miscdev);
--
drivers/crypto/inside-secure/safexcel.c=1393=static int safexcel_probe_generic(void *pdev,
--
drivers/crypto/inside-secure/safexcel.c-1708-		if (priv->ring[i].workqueue)
drivers/crypto/inside-secure/safexcel.c:1709:			destroy_workqueue(priv->ring[i].workqueue);
drivers/crypto/inside-secure/safexcel.c-1710-	}
--
drivers/crypto/inside-secure/safexcel.c=1803=static void safexcel_remove(struct platform_device *pdev)
--
drivers/crypto/inside-secure/safexcel.c-1815-		irq_set_affinity_hint(priv->ring[i].irq, NULL);
drivers/crypto/inside-secure/safexcel.c:1816:		destroy_workqueue(priv->ring[i].workqueue);
drivers/crypto/inside-secure/safexcel.c-1817-	}
--
drivers/crypto/inside-secure/safexcel.c=1971=static void safexcel_pci_remove(struct pci_dev *pdev)
--
drivers/crypto/inside-secure/safexcel.c-1978-	for (i = 0; i < priv->config.rings; i++)
drivers/crypto/inside-secure/safexcel.c:1979:		destroy_workqueue(priv->ring[i].workqueue);
drivers/crypto/inside-secure/safexcel.c-1980-
--
drivers/firewire/core-transaction.c=1468=static int __init fw_core_init(void)
--
drivers/firewire/core-transaction.c-1478-	if (ret < 0) {
drivers/firewire/core-transaction.c:1479:		destroy_workqueue(fw_workqueue);
drivers/firewire/core-transaction.c-1480-		return ret;
--
drivers/firewire/core-transaction.c-1485-		bus_unregister(&fw_bus_type);
drivers/firewire/core-transaction.c:1486:		destroy_workqueue(fw_workqueue);
drivers/firewire/core-transaction.c-1487-		return fw_cdev_major;
--
drivers/firewire/core-transaction.c=1499=static void __exit fw_core_cleanup(void)
--
drivers/firewire/core-transaction.c-1502-	bus_unregister(&fw_bus_type);
drivers/firewire/core-transaction.c:1503:	destroy_workqueue(fw_workqueue);
drivers/firewire/core-transaction.c-1504-	xa_destroy(&fw_device_xa);
--
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c=2240=static void amdgpu_dm_fini(struct amdgpu_device *adev)
--
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c-2244-	if (adev->dm.vblank_control_workqueue) {
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c:2245:		destroy_workqueue(adev->dm.vblank_control_workqueue);
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c-2246-		adev->dm.vblank_control_workqueue = NULL;
--
drivers/gpu/drm/bridge/analogix/anx7625.c=2801=static int anx7625_i2c_probe(struct i2c_client *client)
--
drivers/gpu/drm/bridge/analogix/anx7625.c-2961-	if (platform->workqueue)
drivers/gpu/drm/bridge/analogix/anx7625.c:2962:		destroy_workqueue(platform->workqueue);
drivers/gpu/drm/bridge/analogix/anx7625.c-2963-
--
drivers/gpu/drm/bridge/analogix/anx7625.c-2965-	if (platform->hdcp_workqueue)
drivers/gpu/drm/bridge/analogix/anx7625.c:2966:		destroy_workqueue(platform->hdcp_workqueue);
drivers/gpu/drm/bridge/analogix/anx7625.c-2967-
--
drivers/gpu/drm/bridge/analogix/anx7625.c=2971=static void anx7625_i2c_remove(struct i2c_client *client)
--
drivers/gpu/drm/bridge/analogix/anx7625.c-2979-	if (platform->pdata.intp_irq)
drivers/gpu/drm/bridge/analogix/anx7625.c:2980:		destroy_workqueue(platform->workqueue);
drivers/gpu/drm/bridge/analogix/anx7625.c-2981-
--
drivers/gpu/drm/bridge/analogix/anx7625.c-2983-		cancel_delayed_work(&platform->hdcp_work);
drivers/gpu/drm/bridge/analogix/anx7625.c:2984:		destroy_workqueue(platform->hdcp_workqueue);
drivers/gpu/drm/bridge/analogix/anx7625.c-2985-	}
--
drivers/gpu/drm/msm/dsi/dsi_host.c=2090=void msm_dsi_host_destroy(struct mipi_dsi_host *host)
--
drivers/gpu/drm/msm/dsi/dsi_host.c-2095-	if (msm_host->workqueue) {
drivers/gpu/drm/msm/dsi/dsi_host.c:2096:		destroy_workqueue(msm_host->workqueue);
drivers/gpu/drm/msm/dsi/dsi_host.c-2097-		msm_host->workqueue = NULL;
--
drivers/infiniband/hw/hfi1/init.c=736=static int create_workqueues(struct hfi1_devdata *dd)
--
drivers/infiniband/hw/hfi1/init.c-786-/**
drivers/infiniband/hw/hfi1/init.c:787: * destroy_workqueues - destroy per port workqueues
drivers/infiniband/hw/hfi1/init.c-788- * @dd: the hfi1_ib device
--
drivers/infiniband/ulp/ipoib/ipoib_main.c=2722=static int __init ipoib_init_module(void)
--
drivers/infiniband/ulp/ipoib/ipoib_main.c-2781-	ib_sa_unregister_client(&ipoib_sa_client);
drivers/infiniband/ulp/ipoib/ipoib_main.c:2782:	destroy_workqueue(ipoib_workqueue);
drivers/infiniband/ulp/ipoib/ipoib_main.c-2783-
--
drivers/infiniband/ulp/ipoib/ipoib_main.c=2790=static void __exit ipoib_cleanup_module(void)
--
drivers/infiniband/ulp/ipoib/ipoib_main.c-2798-	ipoib_unregister_debugfs();
drivers/infiniband/ulp/ipoib/ipoib_main.c:2799:	destroy_workqueue(ipoib_workqueue);
drivers/infiniband/ulp/ipoib/ipoib_main.c-2800-}
--
drivers/input/rmi4/rmi_f54.c=659=static int rmi_f54_probe(struct rmi_function *fn)
--
drivers/input/rmi4/rmi_f54.c-733-	cancel_delayed_work_sync(&f54->work);
drivers/input/rmi4/rmi_f54.c:734:	destroy_workqueue(f54->workqueue);
drivers/input/rmi4/rmi_f54.c-735-	return ret;
--
drivers/input/rmi4/rmi_f54.c=738=static void rmi_f54_remove(struct rmi_function *fn)
--
drivers/input/rmi4/rmi_f54.c-743-	v4l2_device_unregister(&f54->v4l2);
drivers/input/rmi4/rmi_f54.c:744:	destroy_workqueue(f54->workqueue);
drivers/input/rmi4/rmi_f54.c-745-}
--
drivers/md/dm.c=203=static int __init local_init(void)
--
drivers/md/dm.c-227-out_free_workqueue:
drivers/md/dm.c:228:	destroy_workqueue(deferred_remove_workqueue);
drivers/md/dm.c-229-out_uevent_exit:
--
drivers/md/dm.c=235=static void local_exit(void)
drivers/md/dm.c-236-{
drivers/md/dm.c:237:	destroy_workqueue(deferred_remove_workqueue);
drivers/md/dm.c-238-
--
drivers/media/platform/amphion/vpu_core.c=249=static int vpu_core_register(struct device *dev, struct vpu_core *core)
--
drivers/media/platform/amphion/vpu_core.c-286-	if (core->workqueue) {
drivers/media/platform/amphion/vpu_core.c:287:		destroy_workqueue(core->workqueue);
drivers/media/platform/amphion/vpu_core.c-288-		core->workqueue = NULL;
--
drivers/media/platform/amphion/vpu_core.c=302=static int vpu_core_unregister(struct device *dev, struct vpu_core *core)
--
drivers/media/platform/amphion/vpu_core.c-313-		cancel_delayed_work_sync(&core->msg_delayed_work);
drivers/media/platform/amphion/vpu_core.c:314:		destroy_workqueue(core->workqueue);
drivers/media/platform/amphion/vpu_core.c-315-		core->workqueue = NULL;
--
drivers/media/platform/amphion/vpu_v4l2.c=696=static int vpu_v4l2_release(struct vpu_inst *inst)
--
drivers/media/platform/amphion/vpu_v4l2.c-701-		cancel_work_sync(&inst->msg_work);
drivers/media/platform/amphion/vpu_v4l2.c:702:		destroy_workqueue(inst->workqueue);
drivers/media/platform/amphion/vpu_v4l2.c-703-		inst->workqueue = NULL;
--
drivers/media/platform/amphion/vpu_v4l2.c=717=int vpu_v4l2_open(struct file *file, struct vpu_inst *inst)
--
drivers/media/platform/amphion/vpu_v4l2.c-768-		if (ret) {
drivers/media/platform/amphion/vpu_v4l2.c:769:			destroy_workqueue(inst->workqueue);
drivers/media/platform/amphion/vpu_v4l2.c-770-			inst->workqueue = NULL;
--
drivers/media/platform/chips-media/coda/coda-common.c=3145=static int coda_probe(struct platform_device *pdev)
--
drivers/media/platform/chips-media/coda/coda-common.c-3294-	pm_runtime_put_noidle(&pdev->dev);
drivers/media/platform/chips-media/coda/coda-common.c:3295:	destroy_workqueue(dev->workqueue);
drivers/media/platform/chips-media/coda/coda-common.c-3296-err_v4l2_register:
--
drivers/media/platform/chips-media/coda/coda-common.c=3301=static void coda_remove(struct platform_device *pdev)
--
drivers/media/platform/chips-media/coda/coda-common.c-3313-	v4l2_device_unregister(&dev->v4l2_dev);
drivers/media/platform/chips-media/coda/coda-common.c:3314:	destroy_workqueue(dev->workqueue);
drivers/media/platform/chips-media/coda/coda-common.c-3315-	if (dev->iram.vaddr)
--
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c=354=static int mtk_vcodec_probe(struct platform_device *pdev)
--
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c-521-		media_device_cleanup(&dev->mdev_dec);
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c:522:	destroy_workqueue(dev->decode_workqueue);
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c-523-err_event_workq:
--
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c-528-	if (IS_VDEC_LAT_ARCH(dev->vdec_pdata->hw_arch))
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c:529:		destroy_workqueue(dev->core_workqueue);
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c-530-err_res:
--
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c=568=static void mtk_vcodec_dec_remove(struct platform_device *pdev)
--
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c-571-
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c:572:	destroy_workqueue(dev->decode_workqueue);
drivers/media/platform/mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c-573-
--
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c=244=static int mtk_vcodec_probe(struct platform_device *pdev)
--
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c-374-err_enc_reg:
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c:375:	destroy_workqueue(dev->encode_workqueue);
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c-376-err_event_workq:
--
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c=467=static void mtk_vcodec_enc_remove(struct platform_device *pdev)
--
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c-470-
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c:471:	destroy_workqueue(dev->encode_workqueue);
drivers/media/platform/mediatek/vcodec/encoder/mtk_vcodec_enc_drv.c-472-	if (dev->m2m_dev_enc)
--
drivers/media/test-drivers/vivid/vivid-core.c=2246=static int __init vivid_init(void)
--
drivers/media/test-drivers/vivid/vivid-core.c-2311-destroy_hdmi_wq:
drivers/media/test-drivers/vivid/vivid-core.c:2312:	destroy_workqueue(update_hdmi_ctrls_workqueue);
drivers/media/test-drivers/vivid/vivid-core.c-2313-unreg_driver:
--
drivers/media/test-drivers/vivid/vivid-core.c=2325=static void __exit vivid_exit(void)
--
drivers/media/test-drivers/vivid/vivid-core.c-2330-	}
drivers/media/test-drivers/vivid/vivid-core.c:2331:	destroy_workqueue(update_svid_ctrls_workqueue);
drivers/media/test-drivers/vivid/vivid-core.c:2332:	destroy_workqueue(update_hdmi_ctrls_workqueue);
drivers/media/test-drivers/vivid/vivid-core.c-2333-	platform_driver_unregister(&vivid_pdrv);
--
drivers/memstick/core/memstick.c=632=static int __init memstick_init(void)
--
drivers/memstick/core/memstick.c-652-error_destroy_workqueue:
drivers/memstick/core/memstick.c:653:	destroy_workqueue(workqueue);
drivers/memstick/core/memstick.c-654-
--
drivers/memstick/core/memstick.c=658=static void __exit memstick_exit(void)
--
drivers/memstick/core/memstick.c-661-	bus_unregister(&memstick_bus_type);
drivers/memstick/core/memstick.c:662:	destroy_workqueue(workqueue);
drivers/memstick/core/memstick.c-663-	idr_destroy(&memstick_host_idr);
--
drivers/misc/tifm_core.c=327=static int __init tifm_init(void)
--
drivers/misc/tifm_core.c-346-err_out_wq:
drivers/misc/tifm_core.c:347:	destroy_workqueue(workqueue);
drivers/misc/tifm_core.c-348-
--
drivers/misc/tifm_core.c=352=static void __exit tifm_exit(void)
--
drivers/misc/tifm_core.c-355-	bus_unregister(&tifm_bus_type);
drivers/misc/tifm_core.c:356:	destroy_workqueue(workqueue);
drivers/misc/tifm_core.c-357-}
--
drivers/mmc/host/vub300.c=2426=static int __init vub300_init(void)
--
drivers/mmc/host/vub300.c-2455-err_destroy_deadwq:
drivers/mmc/host/vub300.c:2456:	destroy_workqueue(deadworkqueue);
drivers/mmc/host/vub300.c-2457-err_destroy_pollwq:
drivers/mmc/host/vub300.c:2458:	destroy_workqueue(pollworkqueue);
drivers/mmc/host/vub300.c-2459-err_destroy_cmdwq:
drivers/mmc/host/vub300.c:2460:	destroy_workqueue(cmndworkqueue);
drivers/mmc/host/vub300.c-2461-
--
drivers/mmc/host/vub300.c=2465=static void __exit vub300_exit(void)
--
drivers/mmc/host/vub300.c-2470-	flush_workqueue(deadworkqueue);
drivers/mmc/host/vub300.c:2471:	destroy_workqueue(cmndworkqueue);
drivers/mmc/host/vub300.c:2472:	destroy_workqueue(pollworkqueue);
drivers/mmc/host/vub300.c:2473:	destroy_workqueue(deadworkqueue);
drivers/mmc/host/vub300.c-2474-}
--
drivers/mtd/nand/raw/r852.c=844=static int  r852_probe(struct pci_dev *pci_dev, const struct pci_device_id *id)
--
drivers/mtd/nand/raw/r852.c-954-error10:
drivers/mtd/nand/raw/r852.c:955:	destroy_workqueue(dev->card_workqueue);
drivers/mtd/nand/raw/r852.c-956-error9:
--
drivers/mtd/nand/raw/r852.c=976=static void r852_remove(struct pci_dev *pci_dev)
--
drivers/mtd/nand/raw/r852.c-982-	cancel_delayed_work_sync(&dev->card_detect_work);
drivers/mtd/nand/raw/r852.c:983:	destroy_workqueue(dev->card_workqueue);
drivers/mtd/nand/raw/r852.c-984-
--
drivers/mtd/sm_ftl.c=1270=static __init int sm_module_init(void)
--
drivers/mtd/sm_ftl.c-1279-	if (error)
drivers/mtd/sm_ftl.c:1280:		destroy_workqueue(cache_flush_workqueue);
drivers/mtd/sm_ftl.c-1281-	return error;
--
drivers/mtd/sm_ftl.c=1285=static void __exit sm_module_exit(void)
drivers/mtd/sm_ftl.c-1286-{
drivers/mtd/sm_ftl.c:1287:	destroy_workqueue(cache_flush_workqueue);
drivers/mtd/sm_ftl.c-1288-	deregister_mtd_blktrans(&sm_ftl_ops);
--
drivers/net/ethernet/amd/xgbe/xgbe-drv.c=1592=static int xgbe_open(struct net_device *netdev)
--
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1665-err_an_wq:
drivers/net/ethernet/amd/xgbe/xgbe-drv.c:1666:	destroy_workqueue(pdata->an_workqueue);
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1667-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1668-err_dev_wq:
drivers/net/ethernet/amd/xgbe/xgbe-drv.c:1669:	destroy_workqueue(pdata->dev_workqueue);
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1670-
--
drivers/net/ethernet/amd/xgbe/xgbe-drv.c=1674=static int xgbe_close(struct net_device *netdev)
--
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1686-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c:1687:	destroy_workqueue(pdata->an_workqueue);
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1688-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c:1689:	destroy_workqueue(pdata->dev_workqueue);
drivers/net/ethernet/amd/xgbe/xgbe-drv.c-1690-
--
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c=3007=static int dpaa2_switch_init(struct fsl_mc_device *sw_dev)
--
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c-3146-err_destroy_ordered_workqueue:
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c:3147:	destroy_workqueue(ethsw->workqueue);
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c-3148-
--
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c=3266=static void dpaa2_switch_teardown(struct fsl_mc_device *sw_dev)
--
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c-3273-
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c:3274:	destroy_workqueue(ethsw->workqueue);
drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c-3275-
--
drivers/net/ethernet/freescale/enetc/enetc4_pf.c=1026=static int enetc4_pf_netdev_create(struct enetc_si *si)
--
drivers/net/ethernet/freescale/enetc/enetc4_pf.c-1080-err_reg_netdev:
drivers/net/ethernet/freescale/enetc/enetc4_pf.c:1081:	destroy_workqueue(si->workqueue);
drivers/net/ethernet/freescale/enetc/enetc4_pf.c-1082-err_wq_init:
--
drivers/net/ethernet/freescale/enetc/enetc4_pf.c=1094=static void enetc4_pf_netdev_destroy(struct enetc_si *si)
--
drivers/net/ethernet/freescale/enetc/enetc4_pf.c-1100-	cancel_work(&si->rx_mode_task);
drivers/net/ethernet/freescale/enetc/enetc4_pf.c:1101:	destroy_workqueue(si->workqueue);
drivers/net/ethernet/freescale/enetc/enetc4_pf.c-1102-	enetc4_link_deinit(priv);
--
drivers/net/ethernet/intel/fm10k/fm10k_main.c=32=static int __init fm10k_init_module(void)
--
drivers/net/ethernet/intel/fm10k/fm10k_main.c-49-		fm10k_dbg_exit();
drivers/net/ethernet/intel/fm10k/fm10k_main.c:50:		destroy_workqueue(fm10k_workqueue);
drivers/net/ethernet/intel/fm10k/fm10k_main.c-51-	}
--
drivers/net/ethernet/intel/fm10k/fm10k_main.c=63=static void __exit fm10k_exit_module(void)
--
drivers/net/ethernet/intel/fm10k/fm10k_main.c-69-	/* destroy driver workqueue */
drivers/net/ethernet/intel/fm10k/fm10k_main.c:70:	destroy_workqueue(fm10k_workqueue);
drivers/net/ethernet/intel/fm10k/fm10k_main.c-71-}
--
drivers/net/ethernet/mellanox/mlx4/en_main.c=237=static void mlx4_en_remove(struct auxiliary_device *adev)
--
drivers/net/ethernet/mellanox/mlx4/en_main.c-253-
drivers/net/ethernet/mellanox/mlx4/en_main.c:254:	destroy_workqueue(mdev->workqueue);
drivers/net/ethernet/mellanox/mlx4/en_main.c-255-	(void) mlx4_mr_free(dev, &mdev->mr);
--
drivers/net/ethernet/qlogic/qla3xxx.c=3900=static void ql3xxx_remove(struct pci_dev *pdev)
--
drivers/net/ethernet/qlogic/qla3xxx.c-3911-		cancel_delayed_work(&qdev->tx_timeout_work);
drivers/net/ethernet/qlogic/qla3xxx.c:3912:		destroy_workqueue(qdev->workqueue);
drivers/net/ethernet/qlogic/qla3xxx.c-3913-		qdev->workqueue = NULL;
--
drivers/net/ethernet/sfc/efx_common.c=130=void efx_destroy_reset_workqueue(void)
--
drivers/net/ethernet/sfc/efx_common.c-132-	if (reset_workqueue) {
drivers/net/ethernet/sfc/efx_common.c:133:		destroy_workqueue(reset_workqueue);
drivers/net/ethernet/sfc/efx_common.c-134-		reset_workqueue = NULL;
--
drivers/net/ethernet/sfc/efx_common.c=1034=void efx_fini_struct(struct efx_nic *efx)
--
drivers/net/ethernet/sfc/efx_common.c-1044-	if (efx->workqueue) {
drivers/net/ethernet/sfc/efx_common.c:1045:		destroy_workqueue(efx->workqueue);
drivers/net/ethernet/sfc/efx_common.c-1046-		efx->workqueue = NULL;
--
drivers/net/ethernet/sfc/falcon/efx.c=2676=static void ef4_fini_struct(struct ef4_nic *efx)
--
drivers/net/ethernet/sfc/falcon/efx.c-2685-	if (efx->workqueue) {
drivers/net/ethernet/sfc/falcon/efx.c:2686:		destroy_workqueue(efx->workqueue);
drivers/net/ethernet/sfc/falcon/efx.c-2687-		efx->workqueue = NULL;
--
drivers/net/ethernet/sfc/falcon/efx.c=3156=static int __init ef4_init_module(void)
--
drivers/net/ethernet/sfc/falcon/efx.c-3178- err_pci:
drivers/net/ethernet/sfc/falcon/efx.c:3179:	destroy_workqueue(reset_workqueue);
drivers/net/ethernet/sfc/falcon/efx.c-3180- err_reset:
--
drivers/net/ethernet/sfc/falcon/efx.c=3186=static void __exit ef4_exit_module(void)
--
drivers/net/ethernet/sfc/falcon/efx.c-3190-	pci_unregister_driver(&ef4_pci_driver);
drivers/net/ethernet/sfc/falcon/efx.c:3191:	destroy_workqueue(reset_workqueue);
drivers/net/ethernet/sfc/falcon/efx.c-3192-	unregister_netdevice_notifier(&ef4_netdev_notifier);
--
drivers/net/ethernet/sfc/siena/efx_common.c=134=void efx_siena_destroy_reset_workqueue(void)
--
drivers/net/ethernet/sfc/siena/efx_common.c-136-	if (reset_workqueue) {
drivers/net/ethernet/sfc/siena/efx_common.c:137:		destroy_workqueue(reset_workqueue);
drivers/net/ethernet/sfc/siena/efx_common.c-138-		reset_workqueue = NULL;
--
drivers/net/ethernet/sfc/siena/efx_common.c=1059=void efx_siena_fini_struct(struct efx_nic *efx)
--
drivers/net/ethernet/sfc/siena/efx_common.c-1069-	if (efx->workqueue) {
drivers/net/ethernet/sfc/siena/efx_common.c:1070:		destroy_workqueue(efx->workqueue);
drivers/net/ethernet/sfc/siena/efx_common.c-1071-		efx->workqueue = NULL;
--
drivers/net/ethernet/sfc/siena/siena_sriov.c=1589=void efx_fini_sriov(void)
drivers/net/ethernet/sfc/siena/siena_sriov.c-1590-{
drivers/net/ethernet/sfc/siena/siena_sriov.c:1591:	destroy_workqueue(vfdi_workqueue);
drivers/net/ethernet/sfc/siena/siena_sriov.c-1592-}
--
drivers/net/ieee802154/ca8210.c=2841=static int ca8210_dev_com_init(struct ca8210_priv *priv)
--
drivers/net/ieee802154/ca8210.c-2851-		dev_crit(&priv->spi->dev, "alloc of irq_workqueue failed!\n");
drivers/net/ieee802154/ca8210.c:2852:		destroy_workqueue(priv->mlme_workqueue);
drivers/net/ieee802154/ca8210.c-2853-		return -ENOMEM;
--
drivers/net/ieee802154/ca8210.c=2863=static void ca8210_dev_com_clear(struct ca8210_priv *priv)
drivers/net/ieee802154/ca8210.c-2864-{
drivers/net/ieee802154/ca8210.c:2865:	destroy_workqueue(priv->mlme_workqueue);
drivers/net/ieee802154/ca8210.c:2866:	destroy_workqueue(priv->irq_workqueue);
drivers/net/ieee802154/ca8210.c-2867-}
--
drivers/net/wireless/ath/ath10k/core.c=3617=struct ath10k *ath10k_core_create(size_t priv_size, struct device *dev,
--
drivers/net/wireless/ath/ath10k/core.c-3752-err_free_tx_complete:
drivers/net/wireless/ath/ath10k/core.c:3753:	destroy_workqueue(ar->workqueue_tx_complete);
drivers/net/wireless/ath/ath10k/core.c-3754-err_free_aux_wq:
drivers/net/wireless/ath/ath10k/core.c:3755:	destroy_workqueue(ar->workqueue_aux);
drivers/net/wireless/ath/ath10k/core.c-3756-err_free_wq:
drivers/net/wireless/ath/ath10k/core.c:3757:	destroy_workqueue(ar->workqueue);
drivers/net/wireless/ath/ath10k/core.c-3758-err_free_mac:
--
drivers/net/wireless/ath/ath10k/core.c=3765=void ath10k_core_destroy(struct ath10k *ar)
drivers/net/wireless/ath/ath10k/core.c-3766-{
drivers/net/wireless/ath/ath10k/core.c:3767:	destroy_workqueue(ar->workqueue);
drivers/net/wireless/ath/ath10k/core.c-3768-
drivers/net/wireless/ath/ath10k/core.c:3769:	destroy_workqueue(ar->workqueue_aux);
drivers/net/wireless/ath/ath10k/core.c-3770-
drivers/net/wireless/ath/ath10k/core.c:3771:	destroy_workqueue(ar->workqueue_tx_complete);
drivers/net/wireless/ath/ath10k/core.c-3772-
--
drivers/net/wireless/ath/ath10k/sdio.c=2517=static int ath10k_sdio_probe(struct sdio_func *func,
--
drivers/net/wireless/ath/ath10k/sdio.c-2637-err_free_wq:
drivers/net/wireless/ath/ath10k/sdio.c:2638:	destroy_workqueue(ar_sdio->workqueue);
drivers/net/wireless/ath/ath10k/sdio.c-2639-err_core_destroy:
--
drivers/net/wireless/ath/ath10k/sdio.c=2645=static void ath10k_sdio_remove(struct sdio_func *func)
--
drivers/net/wireless/ath/ath10k/sdio.c-2657-
drivers/net/wireless/ath/ath10k/sdio.c:2658:	destroy_workqueue(ar_sdio->workqueue);
drivers/net/wireless/ath/ath10k/sdio.c-2659-
--
drivers/net/wireless/ath/ath11k/core.c=2736=void ath11k_core_free(struct ath11k_base *ab)
drivers/net/wireless/ath/ath11k/core.c-2737-{
drivers/net/wireless/ath/ath11k/core.c:2738:	destroy_workqueue(ab->workqueue_aux);
drivers/net/wireless/ath/ath11k/core.c:2739:	destroy_workqueue(ab->workqueue);
drivers/net/wireless/ath/ath11k/core.c-2740-
--
drivers/net/wireless/ath/ath11k/core.c=2745=struct ath11k_base *ath11k_core_alloc(struct device *dev, size_t priv_size,
--
drivers/net/wireless/ath/ath11k/core.c-2790-err_free_wq:
drivers/net/wireless/ath/ath11k/core.c:2791:	destroy_workqueue(ab->workqueue);
drivers/net/wireless/ath/ath11k/core.c-2792-err_sc_free:
--
drivers/net/wireless/ath/ath12k/core.c=2256=void ath12k_core_free(struct ath12k_base *ab)
--
drivers/net/wireless/ath/ath12k/core.c-2258-	timer_delete_sync(&ab->rx_replenish_retry);
drivers/net/wireless/ath/ath12k/core.c:2259:	destroy_workqueue(ab->workqueue_aux);
drivers/net/wireless/ath/ath12k/core.c:2260:	destroy_workqueue(ab->workqueue);
drivers/net/wireless/ath/ath12k/core.c-2261-	kfree(ab);
--
drivers/net/wireless/ath/ath12k/core.c=2264=struct ath12k_base *ath12k_core_alloc(struct device *dev, size_t priv_size,
--
drivers/net/wireless/ath/ath12k/core.c-2317-err_free_wq:
drivers/net/wireless/ath/ath12k/core.c:2318:	destroy_workqueue(ab->workqueue);
drivers/net/wireless/ath/ath12k/core.c-2319-err_sc_free:
--
drivers/net/wireless/intel/iwlegacy/3945-mac.c=3540=il3945_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
--
drivers/net/wireless/intel/iwlegacy/3945-mac.c-3712-out_destroy_workqueue:
drivers/net/wireless/intel/iwlegacy/3945-mac.c:3713:	destroy_workqueue(il->workqueue);
drivers/net/wireless/intel/iwlegacy/3945-mac.c-3714-	il->workqueue = NULL;
--
drivers/net/wireless/intel/iwlegacy/3945-mac.c=3740=il3945_pci_remove(struct pci_dev *pdev)
--
drivers/net/wireless/intel/iwlegacy/3945-mac.c-3797-	 * until now... */
drivers/net/wireless/intel/iwlegacy/3945-mac.c:3798:	destroy_workqueue(il->workqueue);
drivers/net/wireless/intel/iwlegacy/3945-mac.c-3799-	il->workqueue = NULL;
--

]

14/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 22500
							output: 36
							thoughts: 32
						

Thoughts:
Okay, here's my take on those thoughts, framed as an expert's internal monologue:

**Investigating Workqueue Destruction in HCI Device Release**

Alright, so the workqueue related to the HCI driver is getting destroyed, and I need to figure out exactly when and how. Let's dig into the code… where does this happen? The most likely candidates for unregistering and releasing a device are `hci_release_dev` and `hci_unregister_dev`. My intuition leans toward `hci_release_dev` as the more common cleanup path, especially given the context of device release. Therefore, let's start by scrutinizing the implementation of `hci_release_dev`. I need to ensure the destruction is handled correctly and that there are no dangling pointers or race conditions lurking. Let's see what's actually going on in there. I'm looking for the specific function calls, the locking mechanisms, and the sequencing involved in the workqueue's destruction within `hci_release_dev`.



15/2 2026/06/01 19:24 tool grepper
0m Args:
map[Expression:destroy_workqueue.*workqueue PathPrefix:net/bluetooth/hci_core.c]

Results:
map[Output:net/bluetooth/hci_core.c=2585=int hci_register_dev(struct hci_dev *hdev)
--
net/bluetooth/hci_core.c-2613-	if (!hdev->req_workqueue) {
net/bluetooth/hci_core.c:2614:		destroy_workqueue(hdev->workqueue);
net/bluetooth/hci_core.c-2615-		error = -ENOMEM;
--
net/bluetooth/hci_core.c-2680-	debugfs_remove_recursive(hdev->debugfs);
net/bluetooth/hci_core.c:2681:	destroy_workqueue(hdev->workqueue);
net/bluetooth/hci_core.c:2682:	destroy_workqueue(hdev->req_workqueue);
net/bluetooth/hci_core.c-2683-err:
--
net/bluetooth/hci_core.c=2744=void hci_release_dev(struct hci_dev *hdev)
--
net/bluetooth/hci_core.c-2749-
net/bluetooth/hci_core.c:2750:	destroy_workqueue(hdev->workqueue);
net/bluetooth/hci_core.c:2751:	destroy_workqueue(hdev->req_workqueue);
net/bluetooth/hci_core.c-2752-
]

16/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 23139
							output: 34
							thoughts: 49
						

Thoughts:
Okay, here's my take on those thoughts, framed as my own mental processing:

**Analyzing Bluetooth Device Release**

Alright, let's break this down. It looks like `hci_release_dev` is responsible for destroying the `hdev->workqueue`. That's standard practice, cleaning up resources. But hold on a second… isn’t `hci_unregister_dev` supposed to be called *before* `hci_release_dev` in the typical shutdown sequence? That seems counterintuitive. I need to verify this order to be sure we are not facing a race condition or a memory leak. I'd better double-check the implementation of `hci_unregister_dev` to understand the dependencies and the expected state of the device. Let's see what's actually going on there.



17/2 2026/06/01 19:24 tool grepper
0m Args:
map[Expression:hci_unregister_dev PathPrefix:net/bluetooth/hci_core.c]

Results:
map[Output:net/bluetooth/hci_core.c=2404=static int hci_suspend_notifier(struct notifier_block *nb, unsigned long action,
--
net/bluetooth/hci_core.c-2414-
net/bluetooth/hci_core.c:2415:	/* To avoid a potential race with hci_unregister_dev. */
net/bluetooth/hci_core.c-2416-	hci_dev_hold(hdev);
--
net/bluetooth/hci_core.c=2688=EXPORT_SYMBOL(hci_register_dev);
--
net/bluetooth/hci_core.c-2690-/* Unregister HCI device */
net/bluetooth/hci_core.c:2691:void hci_unregister_dev(struct hci_dev *hdev)
net/bluetooth/hci_core.c-2692-{
--
net/bluetooth/hci_core.c-2740-}
net/bluetooth/hci_core.c:2741:EXPORT_SYMBOL(hci_unregister_dev);
net/bluetooth/hci_core.c-2742-
]

18/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 23675
							output: 38
							thoughts: 11
						

Thoughts:
Okay, let's dive into this. Here's my take on `hci_unregister_dev`, as if I'm mentally processing it:

**Deconstructing hci_unregister_dev**

Alright, `hci_unregister_dev`. Let's see what's going on under the hood here. My immediate assumption is that this function is the counterpart to `hci_register_dev`. It's likely involved in cleaning up a Bluetooth HCI device that's no longer needed, maybe because the driver is unloading or the device is being unplugged. I expect it to involve removing the device from some internal lists or data structures within the HCI layer. I'm picturing a chain of actions - deallocating resources, unregistering event handlers, and notifying other parts of the system that the device is going away. I'm going to pay close attention to the order of operations. Order here is critical to avoid any race conditions or dangling pointers. The whole thing should be thread-safe too, I assume. I'll be looking for mutexes or other synchronization primitives. I need to understand the implications of this function because any mistakes here can lead to kernel crashes or memory leaks. Let's see how they handled the complexities in this function.



19/2 2026/06/01 19:24 tool read-file
0m Args:
map[File:net/bluetooth/hci_core.c FirstLine:2691 LineCount:50]

Results:
map[Contents:2691:	void hci_unregister_dev(struct hci_dev *hdev)
2692:	{
2693:		BT_DBG("%p name %s bus %d", hdev, hdev->name, hdev->bus);
2694:	
2695:		mutex_lock(&hdev->unregister_lock);
2696:		hci_dev_set_flag(hdev, HCI_UNREGISTER);
2697:		mutex_unlock(&hdev->unregister_lock);
2698:	
2699:		write_lock(&hci_dev_list_lock);
2700:		list_del(&hdev->list);
2701:		write_unlock(&hci_dev_list_lock);
2702:	
2703:		synchronize_srcu(&hdev->srcu);
2704:		cleanup_srcu_struct(&hdev->srcu);
2705:	
2706:		disable_work_sync(&hdev->rx_work);
2707:		disable_work_sync(&hdev->cmd_work);
2708:		disable_work_sync(&hdev->tx_work);
2709:		disable_work_sync(&hdev->power_on);
2710:		disable_work_sync(&hdev->error_reset);
2711:	
2712:		hci_cmd_sync_clear(hdev);
2713:	
2714:		hci_unregister_suspend_notifier(hdev);
2715:	
2716:		hci_dev_do_close(hdev);
2717:	
2718:		if (!test_bit(HCI_INIT, &hdev->flags) &&
2719:		    !hci_dev_test_flag(hdev, HCI_SETUP) &&
2720:		    !hci_dev_test_flag(hdev, HCI_CONFIG)) {
2721:			hci_dev_lock(hdev);
2722:			mgmt_index_removed(hdev);
2723:			hci_dev_unlock(hdev);
2724:		}
2725:	
2726:		/* mgmt_index_removed should take care of emptying the
2727:		 * pending list */
2728:		BUG_ON(!list_empty(&hdev->mgmt_pending));
2729:	
2730:		hci_sock_dev_event(hdev, HCI_DEV_UNREG);
2731:	
2732:		if (hdev->rfkill) {
2733:			rfkill_unregister(hdev->rfkill);
2734:			rfkill_destroy(hdev->rfkill);
2735:		}
2736:	
2737:		device_del(&hdev->dev);
2738:		/* Actual cleanup is deferred until hci_release_dev(). */
2739:		hci_dev_put(hdev);
2740:	}
]

20/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 24779
							output: 31
							thoughts: 205
						

Thoughts:
**Analyzing the Bluetooth Device Unregistration Process**

Okay, so I'm looking at `hci_unregister_dev`. The first thing it does is call `disable_work_sync(&hdev->tx_work)` and `hci_dev_do_close(hdev)`.  Then, the code calls `hci_dev_put(hdev)`.  That's standard, but it immediately raises a flag: `hci_release_dev` is the function that's actually called when the reference count hits zero. The implication is that if *anyone* still has a reference to `hdev`, `hci_release_dev` won't be called right away.

But here's the kicker: `hci_release_dev` is the function that *destroys* the workqueue! If the workqueue is destroyed, that means the refcount must have dropped to zero, right?  The device should be gone...

Wait a minute, I've got a problem.  `bnep_session` is still running, trying to send data. That's a huge issue.  If `bnep_session` is actually running, it *should* be holding a reference to `hdev`, or maybe even the underlying socket associated with it. That's the only way it could still be trying to send data!

So, the critical next step is to carefully trace how `bnep_session` obtains its socket and, crucially, whether it maintains a reference to `hdev` itself. This is where I need to dig in and understand the reference counting in that specific module. If `bnep_session` *isn't* holding a reference, then we've got a serious race condition or memory management issue, leading to potential use-after-free scenarios. This is definitely something that requires immediate attention!



21/2 2026/06/01 19:24 tool grepper
0m Args:
map[Expression:bnep_session PathPrefix:net/bluetooth/bnep/]

Results:
map[Output:net/bluetooth/bnep/bnep.h=142=int bnep_get_conninfo(struct bnep_conninfo *ci);
--
net/bluetooth/bnep/bnep.h-144-/* BNEP sessions */
net/bluetooth/bnep/bnep.h:145:struct bnep_session {
net/bluetooth/bnep/bnep.h-146-	struct list_head list;
--
net/bluetooth/bnep/core.c=43=static bool compress_dst = true;
net/bluetooth/bnep/core.c-44-
net/bluetooth/bnep/core.c:45:static LIST_HEAD(bnep_session_list);
net/bluetooth/bnep/core.c:46:static DECLARE_RWSEM(bnep_session_sem);
net/bluetooth/bnep/core.c-47-
net/bluetooth/bnep/core.c:48:static struct bnep_session *__bnep_get_session(u8 *dst)
net/bluetooth/bnep/core.c-49-{
net/bluetooth/bnep/core.c:50:	struct bnep_session *s;
net/bluetooth/bnep/core.c-51-
--
net/bluetooth/bnep/core.c-53-
net/bluetooth/bnep/core.c:54:	list_for_each_entry(s, &bnep_session_list, list)
net/bluetooth/bnep/core.c-55-		if (ether_addr_equal(dst, s->eh.h_source))
--
net/bluetooth/bnep/core.c-60-
net/bluetooth/bnep/core.c:61:static void __bnep_link_session(struct bnep_session *s)
net/bluetooth/bnep/core.c-62-{
net/bluetooth/bnep/core.c:63:	list_add(&s->list, &bnep_session_list);
net/bluetooth/bnep/core.c-64-}
net/bluetooth/bnep/core.c-65-
net/bluetooth/bnep/core.c:66:static void __bnep_unlink_session(struct bnep_session *s)
net/bluetooth/bnep/core.c-67-{
--
net/bluetooth/bnep/core.c-70-
net/bluetooth/bnep/core.c:71:static int bnep_send(struct bnep_session *s, void *data, size_t len)
net/bluetooth/bnep/core.c-72-{
--
net/bluetooth/bnep/core.c-78-
net/bluetooth/bnep/core.c:79:static int bnep_send_rsp(struct bnep_session *s, u8 ctrl, u16 resp)
net/bluetooth/bnep/core.c-80-{
--
net/bluetooth/bnep/core.c-88-#ifdef CONFIG_BT_BNEP_PROTO_FILTER
net/bluetooth/bnep/core.c:89:static inline void bnep_set_default_proto_filter(struct bnep_session *s)
net/bluetooth/bnep/core.c-90-{
--
net/bluetooth/bnep/core.c-102-
net/bluetooth/bnep/core.c:103:static int bnep_ctrl_set_netfilter(struct bnep_session *s, __be16 *data, int len)
net/bluetooth/bnep/core.c-104-{
--
net/bluetooth/bnep/core.c-148-
net/bluetooth/bnep/core.c:149:static int bnep_ctrl_set_mcfilter(struct bnep_session *s, u8 *data, int len)
net/bluetooth/bnep/core.c-150-{
--
net/bluetooth/bnep/core.c-208-
net/bluetooth/bnep/core.c:209:static int bnep_rx_control(struct bnep_session *s, void *data, int len)
net/bluetooth/bnep/core.c-210-{
--
net/bluetooth/bnep/core.c-256-
net/bluetooth/bnep/core.c:257:static int bnep_rx_extension(struct bnep_session *s, struct sk_buff *skb)
net/bluetooth/bnep/core.c-258-{
--
net/bluetooth/bnep/core.c=290=static u8 __bnep_rx_hlen[] = {
--
net/bluetooth/bnep/core.c-297-
net/bluetooth/bnep/core.c:298:static int bnep_rx_frame(struct bnep_session *s, struct sk_buff *skb)
net/bluetooth/bnep/core.c-299-{
--
net/bluetooth/bnep/core.c=413=static u8 __bnep_tx_types[] = {
--
net/bluetooth/bnep/core.c-419-
net/bluetooth/bnep/core.c:420:static int bnep_tx_frame(struct bnep_session *s, struct sk_buff *skb)
net/bluetooth/bnep/core.c-421-{
--
net/bluetooth/bnep/core.c-478-
net/bluetooth/bnep/core.c:479:static int bnep_session(void *arg)
net/bluetooth/bnep/core.c-480-{
net/bluetooth/bnep/core.c:481:	struct bnep_session *s = arg;
net/bluetooth/bnep/core.c-482-	struct net_device *dev = s->dev;
--
net/bluetooth/bnep/core.c-521-	/* Cleanup session */
net/bluetooth/bnep/core.c:522:	down_write(&bnep_session_sem);
net/bluetooth/bnep/core.c-523-
--
net/bluetooth/bnep/core.c-536-
net/bluetooth/bnep/core.c:537:	up_write(&bnep_session_sem);
net/bluetooth/bnep/core.c-538-	free_netdev(dev);
--
net/bluetooth/bnep/core.c-542-
net/bluetooth/bnep/core.c:543:static struct device *bnep_get_device(struct bnep_session *session)
net/bluetooth/bnep/core.c-544-{
--
net/bluetooth/bnep/core.c=557=int bnep_add_connection(struct bnep_connadd_req *req, struct socket *sock)
--
net/bluetooth/bnep/core.c-560-	struct net_device *dev;
net/bluetooth/bnep/core.c:561:	struct bnep_session *s, *ss;
net/bluetooth/bnep/core.c-562-	u8 dst[ETH_ALEN], src[ETH_ALEN];
--
net/bluetooth/bnep/core.c-576-	/* session struct allocated as private part of net_device */
net/bluetooth/bnep/core.c:577:	dev = alloc_netdev(sizeof(struct bnep_session),
net/bluetooth/bnep/core.c-578-			   (*req->device) ? req->device : "bnep%d",
--
net/bluetooth/bnep/core.c-583-
net/bluetooth/bnep/core.c:584:	down_write(&bnep_session_sem);
net/bluetooth/bnep/core.c-585-
--
net/bluetooth/bnep/core.c-630-	__module_get(THIS_MODULE);
net/bluetooth/bnep/core.c:631:	s->task = kthread_run(bnep_session, s, "kbnepd %s", dev->name);
net/bluetooth/bnep/core.c-632-	if (IS_ERR(s->task)) {
--
net/bluetooth/bnep/core.c-640-
net/bluetooth/bnep/core.c:641:	up_write(&bnep_session_sem);
net/bluetooth/bnep/core.c-642-	strcpy(req->device, dev->name);
--
net/bluetooth/bnep/core.c-645-failed:
net/bluetooth/bnep/core.c:646:	up_write(&bnep_session_sem);
net/bluetooth/bnep/core.c-647-	free_netdev(dev);
--
net/bluetooth/bnep/core.c=651=int bnep_del_connection(struct bnep_conndel_req *req)
--
net/bluetooth/bnep/core.c-653-	u32 valid_flags = 0;
net/bluetooth/bnep/core.c:654:	struct bnep_session *s;
net/bluetooth/bnep/core.c-655-	int  err = 0;
--
net/bluetooth/bnep/core.c-661-
net/bluetooth/bnep/core.c:662:	down_read(&bnep_session_sem);
net/bluetooth/bnep/core.c-663-
--
net/bluetooth/bnep/core.c-670-
net/bluetooth/bnep/core.c:671:	up_read(&bnep_session_sem);
net/bluetooth/bnep/core.c-672-	return err;
--
net/bluetooth/bnep/core.c-674-
net/bluetooth/bnep/core.c:675:static void __bnep_copy_ci(struct bnep_conninfo *ci, struct bnep_session *s)
net/bluetooth/bnep/core.c-676-{
--
net/bluetooth/bnep/core.c=687=int bnep_get_connlist(struct bnep_connlist_req *req)
net/bluetooth/bnep/core.c-688-{
net/bluetooth/bnep/core.c:689:	struct bnep_session *s;
net/bluetooth/bnep/core.c-690-	int err = 0, n = 0;
net/bluetooth/bnep/core.c-691-
net/bluetooth/bnep/core.c:692:	down_read(&bnep_session_sem);
net/bluetooth/bnep/core.c-693-
net/bluetooth/bnep/core.c:694:	list_for_each_entry(s, &bnep_session_list, list) {
net/bluetooth/bnep/core.c-695-		struct bnep_conninfo ci;
--
net/bluetooth/bnep/core.c-710-
net/bluetooth/bnep/core.c:711:	up_read(&bnep_session_sem);
net/bluetooth/bnep/core.c-712-	return err;
--
net/bluetooth/bnep/core.c=715=int bnep_get_conninfo(struct bnep_conninfo *ci)
net/bluetooth/bnep/core.c-716-{
net/bluetooth/bnep/core.c:717:	struct bnep_session *s;
net/bluetooth/bnep/core.c-718-	int err = 0;
net/bluetooth/bnep/core.c-719-
net/bluetooth/bnep/core.c:720:	down_read(&bnep_session_sem);
net/bluetooth/bnep/core.c-721-
--
net/bluetooth/bnep/core.c-727-
net/bluetooth/bnep/core.c:728:	up_read(&bnep_session_sem);
net/bluetooth/bnep/core.c-729-	return err;
--
net/bluetooth/bnep/netdev.c=50=static void bnep_net_set_mc_list(struct net_device *dev)
--
net/bluetooth/bnep/netdev.c-52-#ifdef CONFIG_BT_BNEP_MC_FILTER
net/bluetooth/bnep/netdev.c:53:	struct bnep_session *s = netdev_priv(dev);
net/bluetooth/bnep/netdev.c-54-	struct sock *sk = s->sock->sk;
--
net/bluetooth/bnep/netdev.c=115=static void bnep_net_timeout(struct net_device *dev, unsigned int txqueue)
--
net/bluetooth/bnep/netdev.c-121-#ifdef CONFIG_BT_BNEP_MC_FILTER
net/bluetooth/bnep/netdev.c:122:static int bnep_net_mc_filter(struct sk_buff *skb, struct bnep_session *s)
net/bluetooth/bnep/netdev.c-123-{
--
net/bluetooth/bnep/netdev.c=134=static u16 bnep_net_eth_proto(struct sk_buff *skb)
--
net/bluetooth/bnep/netdev.c-147-
net/bluetooth/bnep/netdev.c:148:static int bnep_net_proto_filter(struct sk_buff *skb, struct bnep_session *s)
net/bluetooth/bnep/netdev.c-149-{
--
net/bluetooth/bnep/netdev.c=164=static netdev_tx_t bnep_net_xmit(struct sk_buff *skb,
--
net/bluetooth/bnep/netdev.c-166-{
net/bluetooth/bnep/netdev.c:167:	struct bnep_session *s = netdev_priv(dev);
net/bluetooth/bnep/netdev.c-168-	struct sock *sk = s->sock->sk;
]

22/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 28931
							output: 38
							thoughts: 23
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience and written in the first person:

**Diving into `bnep_session`**

Okay, so I'm looking at `bnep_session` and immediately thinking, alright, this is the core of the BNEP implementation within the Bluetooth networking stack. Time to get my bearings and understand how it's managing sessions within the `net/bluetooth/bnep/core.c` context. My intuition tells me this is where the meat of the connection handling, data flow control, and perhaps even some of the security aspects related to BNEP are going to reside. Let's see what interesting tidbits and gotchas I can find here. I'm especially keen on how it's handling the details of the L2CAP layer interaction, as that's often a source of subtle bugs. I expect to be digging into its data structures and how it maps to the underlying network sockets.



23/2 2026/06/01 19:24 tool read-file
0m Args:
map[File:net/bluetooth/bnep/core.c FirstLine:479 LineCount:50]

Results:
map[Contents: 479:	static int bnep_session(void *arg)
 480:	{
 481:		struct bnep_session *s = arg;
 482:		struct net_device *dev = s->dev;
 483:		struct sock *sk = s->sock->sk;
 484:		struct sk_buff *skb;
 485:		DEFINE_WAIT_FUNC(wait, woken_wake_function);
 486:	
 487:		BT_DBG("");
 488:	
 489:		set_user_nice(current, -15);
 490:	
 491:		add_wait_queue(sk_sleep(sk), &wait);
 492:		while (1) {
 493:			if (atomic_read(&s->terminate))
 494:				break;
 495:			/* RX */
 496:			while ((skb = skb_dequeue(&sk->sk_receive_queue))) {
 497:				skb_orphan(skb);
 498:				if (!skb_linearize(skb))
 499:					bnep_rx_frame(s, skb);
 500:				else
 501:					kfree_skb(skb);
 502:			}
 503:	
 504:			if (sk->sk_state != BT_CONNECTED)
 505:				break;
 506:	
 507:			/* TX */
 508:			while ((skb = skb_dequeue(&sk->sk_write_queue)))
 509:				if (bnep_tx_frame(s, skb))
 510:					break;
 511:			netif_wake_queue(dev);
 512:	
 513:			/*
 514:			 * wait_woken() performs the necessary memory barriers
 515:			 * for us; see the header comment for this primitive.
 516:			 */
 517:			wait_woken(&wait, TASK_INTERRUPTIBLE, MAX_SCHEDULE_TIMEOUT);
 518:		}
 519:		remove_wait_queue(sk_sleep(sk), &wait);
 520:	
 521:		/* Cleanup session */
 522:		down_write(&bnep_session_sem);
 523:	
 524:		/* Delete network device */
 525:		unregister_netdev(dev);
 526:	
 527:		/* Wakeup user-space polling for socket errors */
 528:		s->sock->sk->sk_err = EUNATCH;
]

24/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 29911
							output: 38
							thoughts: 131
						

Thoughts:
**Tracing the BNEP Packet Flow**

Okay, so I'm digging into this `bnep_session` function. It seems that when a BNEP session needs to transmit, it calls `bnep_tx_frame` with the session and the socket buffer (`skb`). `bnep_tx_frame` then hands things off to `kernel_sendmsg`.  From there, it looks like `kernel_sendmsg` goes through `l2cap_sock_sendmsg`, then `l2cap_chan_send`, followed by `l2cap_do_send` and finally, down to the HCI layer with `hci_send_acl`. That's the core path.

Wait a second... it's just hitting me, `bnep_session` holds a reference to `s->sock`? That's what I'm seeing as I trace back. Let me confirm... Yes, `bnep_add_connection` acquires that socket and stores it in `s->sock`! Okay, I need to take a closer look at `bnep_add_connection` now to get the full picture.



25/2 2026/06/01 19:24 tool read-file
0m Args:
map[File:net/bluetooth/bnep/core.c FirstLine:557 LineCount:50]

Results:
map[Contents: 557:	int bnep_add_connection(struct bnep_connadd_req *req, struct socket *sock)
 558:	{
 559:		u32 valid_flags = BIT(BNEP_SETUP_RESPONSE);
 560:		struct net_device *dev;
 561:		struct bnep_session *s, *ss;
 562:		u8 dst[ETH_ALEN], src[ETH_ALEN];
 563:		int err;
 564:	
 565:		BT_DBG("");
 566:	
 567:		if (!l2cap_is_socket(sock))
 568:			return -EBADFD;
 569:	
 570:		if (req->flags & ~valid_flags)
 571:			return -EINVAL;
 572:	
 573:		baswap((void *) dst, &l2cap_pi(sock->sk)->chan->dst);
 574:		baswap((void *) src, &l2cap_pi(sock->sk)->chan->src);
 575:	
 576:		/* session struct allocated as private part of net_device */
 577:		dev = alloc_netdev(sizeof(struct bnep_session),
 578:				   (*req->device) ? req->device : "bnep%d",
 579:				   NET_NAME_UNKNOWN,
 580:				   bnep_net_setup);
 581:		if (!dev)
 582:			return -ENOMEM;
 583:	
 584:		down_write(&bnep_session_sem);
 585:	
 586:		ss = __bnep_get_session(dst);
 587:		if (ss && ss->state == BT_CONNECTED) {
 588:			err = -EEXIST;
 589:			goto failed;
 590:		}
 591:	
 592:		s = netdev_priv(dev);
 593:	
 594:		/* This is rx header therefore addresses are swapped.
 595:		 * ie. eh.h_dest is our local address. */
 596:		memcpy(s->eh.h_dest,   &src, ETH_ALEN);
 597:		memcpy(s->eh.h_source, &dst, ETH_ALEN);
 598:		eth_hw_addr_set(dev, s->eh.h_dest);
 599:	
 600:		s->dev   = dev;
 601:		s->sock  = sock;
 602:		s->role  = req->role;
 603:		s->state = BT_CONNECTED;
 604:		s->flags = req->flags;
 605:	
 606:		s->msg.msg_flags = MSG_NOSIGNAL;
]

26/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 31103
							output: 20
							thoughts: 36
						

Thoughts:
Okay, here's my interpretation of those thoughts, presented as a personal thought process, as requested:

**Deconstructing the `bnep_add_connection` Function**

Alright, I'm digging into this `bnep_add_connection` function. The key question I'm trying to nail down is how it interacts with the underlying sockets or the Bluetooth device itself. Does it operate directly on the socket structure, or is it more abstract, maybe using a device handle (`hdev`) as its primary point of contact? I need to understand this to grasp the overall data flow and resource management.

The code seems to be receiving `sock` from `bnep_sock_ioctl`. So it looks like `bnep_sock_ioctl` is the one providing `sock`, and now I must determine how to determine the use of either. This implies the socket is central to the connection. I'm going to follow the trail from `bnep_sock_ioctl` to understand how `sock` is created, populated, and passed. That'll illuminate the connection between the socket and the Bluetooth device in this context, and, more importantly, whether the device handle is used or not.



27/2 2026/06/01 19:24 tool grepper
0m Args:
map[Expression:bnep_add_connection]

Results:
map[Output:net/bluetooth/bnep/bnep.h=134=struct bnep_proto_filter {
--
net/bluetooth/bnep/bnep.h-138-
net/bluetooth/bnep/bnep.h:139:int bnep_add_connection(struct bnep_connadd_req *req, struct socket *sock);
net/bluetooth/bnep/bnep.h-140-int bnep_del_connection(struct bnep_conndel_req *req);
--
net/bluetooth/bnep/core.c=553=static const struct device_type bnep_type = {
--
net/bluetooth/bnep/core.c-556-
net/bluetooth/bnep/core.c:557:int bnep_add_connection(struct bnep_connadd_req *req, struct socket *sock)
net/bluetooth/bnep/core.c-558-{
--
net/bluetooth/bnep/sock.c=53=static int do_bnep_sock_ioctl(struct socket *sock, unsigned int cmd, void __user *argp)
--
net/bluetooth/bnep/sock.c-82-
net/bluetooth/bnep/sock.c:83:		err = bnep_add_connection(&ca, nsock);
net/bluetooth/bnep/sock.c-84-		if (!err) {
]

28/2 2026/06/01 19:24 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 31758
							output: 37
							thoughts: 14
						

Thoughts:
Okay, let's dive into this `do_bnep_sock_ioctl` function. I need to understand what's happening here. The name itself suggests we're dealing with Bluetooth Network Encapsulation Protocol (BNEP) sockets and IOCTLs – that's a key starting point. I already know this is likely core network stack interaction with the BNEP layer. I need to assess what options are being passed to this IOCTL function. Are we setting up connections? Controlling data flow? Retrieving status information?

Knowing the specific IOCTL codes would be crucial. Are we dealing with standard socket options, or are there BNEP-specific extensions? I need to look for any clues regarding what data structures are being used or manipulated. Are there error handling mechanisms in place? It would be good to see how these IOCTL requests are validated before being executed. Security is always a concern. Is there any kind of access control or permission checks going on? What are the implications of the different IOCTL commands for the Bluetooth stack in general?

I need to focus on what data is being passed in and out, the context where this call originates, and how it fits into the broader picture of the BNEP stack and its interaction with the Linux kernel's networking subsystem. Ultimately, I need to see how BNEP is managed at the socket level.



29/2 2026/06/01 19:25 tool read-file
0m Args:
map[File:net/bluetooth/bnep/sock.c FirstLine:53 LineCount:50]

Results:
map[Contents:  53:	static int do_bnep_sock_ioctl(struct socket *sock, unsigned int cmd, void __user *argp)
  54:	{
  55:		struct bnep_connlist_req cl;
  56:		struct bnep_connadd_req  ca;
  57:		struct bnep_conndel_req  cd;
  58:		struct bnep_conninfo ci;
  59:		struct socket *nsock;
  60:		__u32 supp_feat = BIT(BNEP_SETUP_RESPONSE);
  61:		int err;
  62:	
  63:		BT_DBG("cmd %x arg %p", cmd, argp);
  64:	
  65:		switch (cmd) {
  66:		case BNEPCONNADD:
  67:			if (!capable(CAP_NET_ADMIN))
  68:				return -EPERM;
  69:	
  70:			if (copy_from_user(&ca, argp, sizeof(ca)))
  71:				return -EFAULT;
  72:	
  73:			nsock = sockfd_lookup(ca.sock, &err);
  74:			if (!nsock)
  75:				return err;
  76:	
  77:			if (nsock->sk->sk_state != BT_CONNECTED) {
  78:				sockfd_put(nsock);
  79:				return -EBADFD;
  80:			}
  81:			ca.device[sizeof(ca.device)-1] = 0;
  82:	
  83:			err = bnep_add_connection(&ca, nsock);
  84:			if (!err) {
  85:				if (copy_to_user(argp, &ca, sizeof(ca)))
  86:					err = -EFAULT;
  87:			} else
  88:				sockfd_put(nsock);
  89:	
  90:			return err;
  91:	
  92:		case BNEPCONNDEL:
  93:			if (!capable(CAP_NET_ADMIN))
  94:				return -EPERM;
  95:	
  96:			if (copy_from_user(&cd, argp, sizeof(cd)))
  97:				return -EFAULT;
  98:	
  99:			return bnep_del_connection(&cd);
 100:	
 101:		case BNEPGETCONNLIST:
 102:			if (copy_from_user(&cl, argp, sizeof(cl)))
]

30/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 32775
							output: 30
							thoughts: 81
						

Thoughts:
Here's my understanding of the situation:

**BN-EP Socket IOCTL Reference Handling**

Okay, so looking at this `do_bnep_sock_ioctl` function, it's clear the process starts by calling `sockfd_lookup` on the provided socket file descriptor (`ca.sock`) to obtain a reference to the actual socket structure. The error checking here is pretty standard. Now, here's where it gets interesting: if the `bnep_add_connection` function *succeeds*, it holds onto that socket reference. It *doesn't* immediately release it with `sockfd_put`. This suggests a deliberate design choice, and my hunch is that the reference lifetime extends beyond the initial `ioctl` call. I need to confirm where this reference is finally released. My current assumption is that it's probably done when the `bnep_session` completes, but that's just a working theory that needs immediate verification. I'll dig into the `bnep_session` function to confirm my suspicions and see how the cleanup is handled. I need to be sure the reference counting is correct to avoid resource leaks.



31/2 2026/06/01 19:25 tool grepper
0m Args:
map[Expression:sockfd_put PathPrefix:net/bluetooth/bnep/]

Results:
map[Output:net/bluetooth/bnep/sock.c=53=static int do_bnep_sock_ioctl(struct socket *sock, unsigned int cmd, void __user *argp)
--
net/bluetooth/bnep/sock.c-77-		if (nsock->sk->sk_state != BT_CONNECTED) {
net/bluetooth/bnep/sock.c:78:			sockfd_put(nsock);
net/bluetooth/bnep/sock.c-79-			return -EBADFD;
--
net/bluetooth/bnep/sock.c-87-		} else
net/bluetooth/bnep/sock.c:88:			sockfd_put(nsock);
net/bluetooth/bnep/sock.c-89-
]

32/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 33316
							output: 29
							thoughts: 15
						

Thoughts:
Here's my thought process, summarized as you requested:

**Debugging Flow Conundrum**

Okay, hold on a second. I'm tracing through this code, trying to understand the flow of data and how everything is connected. I've got a good handle on the error handling, but I'm focusing on the "happy path" now, the scenario where everything works as expected. And that brings me to a crucial question. Where, *specifically*, is `sockfd_put` being called when everything goes right? I need to verify its placement within the success sequence and ensure it’s operating as intended. It's easy to get lost in the function calls, so I need to nail down the precise point of execution for this key function under optimal circumstances. I need to know the conditions under which it *should* be invoked, and confirm that is the case.



33/2 2026/06/01 19:25 tool grepper
0m Args:
map[Expression:fput PathPrefix:net/bluetooth/bnep/]

Results:
map[Output:net/bluetooth/bnep/core.c=479=static int bnep_session(void *arg)
--
net/bluetooth/bnep/core.c-532-	/* Release the socket */
net/bluetooth/bnep/core.c:533:	fput(s->sock->file);
net/bluetooth/bnep/core.c-534-
]

34/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 33647
							output: 33
							thoughts: 245
						

Thoughts:
**My Analysis of BNEP and HCI Device Unregistration**

Okay, so `fput(s->sock->file)` is called within `bnep_session`. That means `bnep_session` has a direct connection to the socket file. My immediate concern is whether this hold on the socket file could somehow block `hci_unregister_dev` from properly cleaning up the workqueue.

No, wait, I'm thinking about it now. `hci_unregister_dev` is triggered when the HCI device itself is unregistered – like when a USB device is physically unplugged, or a virtual HCI device is destroyed. And when that happens, `hci_unregister_dev` calls `hci_dev_do_close(hdev)`.

`hci_dev_do_close` is obviously where the socket closure happens. However, looking at the code, it doesn't wait around for all the sockets to be *fully* closed.

Ah, but then I remember! `hci_unregister_dev` subsequently calls `hci_dev_put(hdev)`. This is key. The actual cleanup isn't immediate; it's deferred until `hci_release_dev()`, which is triggered when the reference count (`hdev` refcount) associated with the `hdev` structure drops to zero.

So, the critical question becomes: does an `l2cap_sock` hold a reference to the `hdev` structure? I need to verify whether the L2CAP socket code maintains a reference to the HCI device itself. This is where I'll dig into the code next.



35/2 2026/06/01 19:25 tool grepper
0m Error:
no matches

Args:
map[Expression:hci_dev_hold PathPrefix:net/bluetooth/l2cap_]

Results:
map[Output:]

36/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 34277
							output: 33
							thoughts: 14
						

Thoughts:
Okay, let's see. My first instinct, given the context, is to look at a specific area. It sounds like there's an issue somewhere and my gut tells me it's related to connection handling. I need to dive into the code related to that. Let me check the code around  `hci_conn_hold`. That's where I'd start. It's the most likely culprit. If not there, I will have to look at all possible connection-related function calls. I should start there though.



37/2 2026/06/01 19:25 tool grepper
0m Error:
no matches

Args:
map[Expression:hci_conn_hold PathPrefix:net/bluetooth/l2cap_]

Results:
map[Output:]

38/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 34450
							output: 33
							thoughts: 11
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience, presented in the first person:

**Diving into `hci_dev_get`**

Alright, time to dig into this. My initial thought is to go straight to `hci_dev_get`. I need to understand what's happening at this core function, so that is the first line of my check. I'm going to quickly refresh the context of how this function is used and its typical return values, thinking about any potential edge cases in the calling procedure. I want to keep this process streamlined, and avoid getting bogged down in low-level details unless it becomes necessary. Understanding the architecture is the key. Let's see what's being queried and how.



39/2 2026/06/01 19:25 tool grepper
0m Error:
no matches

Args:
map[Expression:hci_dev_get PathPrefix:net/bluetooth/l2cap_]

Results:
map[Output:]

40/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 34666
							output: 35
							thoughts: 29
						

Thoughts:
Okay, let's break this down.

**Investigating the L2CAP Connection and Device Handle Relationship**

Right, so I'm trying to understand the inner workings of an L2CAP channel and specifically, how it maintains a reference to its associated HCI device, the `hdev`. This is fundamental for understanding how data flows at this level. I need to trace this back.

My instinct is to start by examining how new connections are established. `l2cap_conn_add` seems like the logical starting point for that. It's the point of insertion, so that's where I'll probably find how the link is made between the channel's data structures and the underlying hardware device. I'll be looking for where and how the `hdev` pointer is stored and initialized within the context of connection setup.



41/2 2026/06/01 19:25 tool grepper
0m Error:
no matches

Args:
map[Expression:l2cap_conn_add PathPrefix:net/bluetooth/l2cap_]

Results:
map[Output:]

42/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 34919
							output: 34
							thoughts: 13
						

Thoughts:
Here's my take on the process, considering I'm an expert:

**Diving into the L2CAP Core**

Okay, time to get my hands dirty. My instincts tell me to start with `l2cap_core.c`. Given the scope of what we're working with, that's where the heart of the L2CAP implementation *should* reside. I need to refresh my mental map of how the logical channels are established, data is segmented and reassembled, and how the core protocol state machines operate. I'm expecting to find the key functions for connection establishment, signaling message handling, and maybe some of the packet processing logic. It's a good starting point. Let's see if my intuition holds up. I'll be looking for the fundamental building blocks of the L2CAP layer in there, likely intertwined with the lower-level HCI interaction. This should give me a solid base to understand and then build upon.



43/2 2026/06/01 19:25 tool grepper
0m Args:
map[Expression:hci_conn PathPrefix:net/bluetooth/l2cap_core.c]

Results:
map[Output:net/bluetooth/l2cap_core.c=66=static inline u8 bdaddr_type(u8 link_type, u8 bdaddr_type)
--
net/bluetooth/l2cap_core.c-77-
net/bluetooth/l2cap_core.c:78:static inline u8 bdaddr_src_type(struct hci_conn *hcon)
net/bluetooth/l2cap_core.c-79-{
--
net/bluetooth/l2cap_core.c-82-
net/bluetooth/l2cap_core.c:83:static inline u8 bdaddr_dst_type(struct hci_conn *hcon)
net/bluetooth/l2cap_core.c-84-{
--
net/bluetooth/l2cap_core.c=587=void __l2cap_chan_add(struct l2cap_conn *conn, struct l2cap_chan *chan)
--
net/bluetooth/l2cap_core.c-633-	    test_bit(FLAG_HOLD_HCI_CONN, &chan->flags))
net/bluetooth/l2cap_core.c:634:		hci_conn_hold(conn->hcon);
net/bluetooth/l2cap_core.c-635-
--
net/bluetooth/l2cap_core.c=647=void l2cap_chan_del(struct l2cap_chan *chan, int err)
--
net/bluetooth/l2cap_core.c-671-		    test_bit(FLAG_HOLD_HCI_CONN, &chan->flags))
net/bluetooth/l2cap_core.c:672:			hci_conn_drop(conn->hcon);
net/bluetooth/l2cap_core.c-673-	}
--
net/bluetooth/l2cap_core.c=739=static void l2cap_conn_update_id_addr(struct work_struct *work)
--
net/bluetooth/l2cap_core.c-742-					       id_addr_timer.work);
net/bluetooth/l2cap_core.c:743:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-744-	struct l2cap_chan *chan;
--
net/bluetooth/l2cap_core.c=913=int l2cap_chan_check_security(struct l2cap_chan *chan, bool initiator)
--
net/bluetooth/l2cap_core.c-922-
net/bluetooth/l2cap_core.c:923:	return hci_conn_security(conn->hcon, chan->sec_level, auth_type,
net/bluetooth/l2cap_core.c-924-				 initiator);
--
net/bluetooth/l2cap_core.c=964=static void l2cap_send_acl(struct l2cap_conn *conn, struct sk_buff *skb,
--
net/bluetooth/l2cap_core.c-967-	/* Check if the hcon still valid before attempting to send */
net/bluetooth/l2cap_core.c:968:	if (hci_conn_valid(conn->hcon->hdev, conn->hcon))
net/bluetooth/l2cap_core.c-969-		hci_send_acl(conn->hchan, skb, flags);
--
net/bluetooth/l2cap_core.c=999=static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb)
net/bluetooth/l2cap_core.c-1000-{
net/bluetooth/l2cap_core.c:1001:	struct hci_conn *hcon = chan->conn->hcon;
net/bluetooth/l2cap_core.c-1002-	u16 flags;
--
net/bluetooth/l2cap_core.c=1412=static void l2cap_request_info(struct l2cap_conn *conn)
--
net/bluetooth/l2cap_core.c-1429-
net/bluetooth/l2cap_core.c:1430:static bool l2cap_check_enc_key_size(struct hci_conn *hcon,
net/bluetooth/l2cap_core.c-1431-				     struct l2cap_chan *chan)
--
net/bluetooth/l2cap_core.c=1594=static void l2cap_le_conn_ready(struct l2cap_conn *conn)
net/bluetooth/l2cap_core.c-1595-{
net/bluetooth/l2cap_core.c:1596:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-1597-	struct hci_dev *hdev = hcon->hdev;
--
net/bluetooth/l2cap_core.c=1627=static void l2cap_conn_ready(struct l2cap_conn *conn)
--
net/bluetooth/l2cap_core.c-1629-	struct l2cap_chan *chan;
net/bluetooth/l2cap_core.c:1630:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-1631-
--
net/bluetooth/l2cap_core.c=1753=static void l2cap_unregister_all_users(struct l2cap_conn *conn)
--
net/bluetooth/l2cap_core.c-1763-
net/bluetooth/l2cap_core.c:1764:static void l2cap_conn_del(struct hci_conn *hcon, int err)
net/bluetooth/l2cap_core.c-1765-{
--
net/bluetooth/l2cap_core.c=1818=static void l2cap_conn_free(struct kref *ref)
--
net/bluetooth/l2cap_core.c-1821-
net/bluetooth/l2cap_core.c:1822:	hci_conn_put(conn->hcon);
net/bluetooth/l2cap_core.c-1823-	kfree(conn);
--
net/bluetooth/l2cap_core.c=3252=static void l2cap_mtu_auto(struct l2cap_chan *chan)
net/bluetooth/l2cap_core.c-3253-{
net/bluetooth/l2cap_core.c:3254:	struct hci_conn *conn = chan->conn->hcon;
net/bluetooth/l2cap_core.c-3255-
--
net/bluetooth/l2cap_core.c=4008=static void l2cap_connect(struct l2cap_conn *conn, struct l2cap_cmd_hdr *cmd,
--
net/bluetooth/l2cap_core.c-4032-	if (psm != cpu_to_le16(L2CAP_PSM_SDP) &&
net/bluetooth/l2cap_core.c:4033:	    (!hci_conn_check_link_mode(conn->hcon) ||
net/bluetooth/l2cap_core.c-4034-	    !l2cap_check_enc_key_size(conn->hcon, pchan))) {
--
net/bluetooth/l2cap_core.c=4673=static inline int l2cap_conn_param_update_req(struct l2cap_conn *conn,
--
net/bluetooth/l2cap_core.c-4676-{
net/bluetooth/l2cap_core.c:4677:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-4678-	struct l2cap_conn_param_update_req *req;
--
net/bluetooth/l2cap_core.c=4723=static int l2cap_le_connect_rsp(struct l2cap_conn *conn,
--
net/bluetooth/l2cap_core.c-4727-	struct l2cap_le_conn_rsp *rsp = (struct l2cap_le_conn_rsp *) data;
net/bluetooth/l2cap_core.c:4728:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-4729-	u16 dcid, mtu, mps, credits, result;
--
net/bluetooth/l2cap_core.c=5246=static inline int l2cap_ecred_conn_rsp(struct l2cap_conn *conn,
--
net/bluetooth/l2cap_core.c-5250-	struct l2cap_ecred_conn_rsp *rsp = (void *) data;
net/bluetooth/l2cap_core.c:5251:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-5252-	u16 mtu, mps, credits, result;
--
net/bluetooth/l2cap_core.c=5580=static inline void l2cap_le_sig_channel(struct l2cap_conn *conn,
--
net/bluetooth/l2cap_core.c-5582-{
net/bluetooth/l2cap_core.c:5583:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-5584-	struct l2cap_cmd_hdr *cmd;
--
net/bluetooth/l2cap_core.c=5629=static inline void l2cap_sig_channel(struct l2cap_conn *conn,
--
net/bluetooth/l2cap_core.c-5631-{
net/bluetooth/l2cap_core.c:5632:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-5633-	struct l2cap_cmd_hdr *cmd;
--
net/bluetooth/l2cap_core.c=6885=static void l2cap_conless_channel(struct l2cap_conn *conn, __le16 psm,
--
net/bluetooth/l2cap_core.c-6887-{
net/bluetooth/l2cap_core.c:6888:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-6889-	struct l2cap_chan *chan;
--
net/bluetooth/l2cap_core.c=6926=static void l2cap_recv_frame(struct l2cap_conn *conn, struct sk_buff *skb)
--
net/bluetooth/l2cap_core.c-6928-	struct l2cap_hdr *lh = (void *) skb->data;
net/bluetooth/l2cap_core.c:6929:	struct hci_conn *hcon = conn->hcon;
net/bluetooth/l2cap_core.c-6930-	u16 cid, len;
--
net/bluetooth/l2cap_core.c=6981=static void process_pending_rx(struct work_struct *work)
--
net/bluetooth/l2cap_core.c-6996-
net/bluetooth/l2cap_core.c:6997:static struct l2cap_conn *l2cap_conn_add(struct hci_conn *hcon)
net/bluetooth/l2cap_core.c-6998-{
--
net/bluetooth/l2cap_core.c-7016-	hcon->l2cap_data = conn;
net/bluetooth/l2cap_core.c:7017:	conn->hcon = hci_conn_get(hcon);
net/bluetooth/l2cap_core.c-7018-	conn->hchan = hchan;
--
net/bluetooth/l2cap_core.c=7088=int l2cap_chan_connect(struct l2cap_chan *chan, __le16 psm, u16 cid,
--
net/bluetooth/l2cap_core.c-7091-	struct l2cap_conn *conn;
net/bluetooth/l2cap_core.c:7092:	struct hci_conn *hcon;
net/bluetooth/l2cap_core.c-7093-	struct hci_dev *hdev;
--
net/bluetooth/l2cap_core.c-7180-		if (hci_dev_test_flag(hdev, HCI_ADVERTISING))
net/bluetooth/l2cap_core.c:7181:			hcon = hci_connect_le(hdev, dst, dst_type, false,
net/bluetooth/l2cap_core.c-7182-					      chan->sec_level, timeout,
--
net/bluetooth/l2cap_core.c-7184-		else
net/bluetooth/l2cap_core.c:7185:			hcon = hci_connect_le_scan(hdev, dst, dst_type,
net/bluetooth/l2cap_core.c-7186-						   chan->sec_level, timeout,
--
net/bluetooth/l2cap_core.c-7190-		u8 auth_type = l2cap_get_auth_type(chan);
net/bluetooth/l2cap_core.c:7191:		hcon = hci_connect_acl(hdev, dst, chan->sec_level, auth_type,
net/bluetooth/l2cap_core.c-7192-				       CONN_REASON_L2CAP_CHAN, timeout);
--
net/bluetooth/l2cap_core.c-7201-	if (!conn) {
net/bluetooth/l2cap_core.c:7202:		hci_conn_drop(hcon);
net/bluetooth/l2cap_core.c-7203-		err = -ENOMEM;
--
net/bluetooth/l2cap_core.c-7217-		if (data.count > L2CAP_ECRED_CONN_SCID_MAX) {
net/bluetooth/l2cap_core.c:7218:			hci_conn_drop(hcon);
net/bluetooth/l2cap_core.c-7219-			err = -EPROTO;
--
net/bluetooth/l2cap_core.c-7227-	if (cid && __l2cap_get_chan_by_dcid(conn, cid)) {
net/bluetooth/l2cap_core.c:7228:		hci_conn_drop(hcon);
net/bluetooth/l2cap_core.c-7229-		err = -EBUSY;
--
net/bluetooth/l2cap_core.c-7239-	/* l2cap_chan_add takes its own ref so we can drop this one */
net/bluetooth/l2cap_core.c:7240:	hci_conn_drop(hcon);
net/bluetooth/l2cap_core.c-7241-
--
net/bluetooth/l2cap_core.c=7337=static struct l2cap_chan *l2cap_global_fixed_chan(struct l2cap_chan *c,
net/bluetooth/l2cap_core.c:7338:						  struct hci_conn *hcon)
net/bluetooth/l2cap_core.c-7339-{
--
net/bluetooth/l2cap_core.c-7368-
net/bluetooth/l2cap_core.c:7369:static void l2cap_connect_cfm(struct hci_conn *hcon, u8 status)
net/bluetooth/l2cap_core.c-7370-{
--
net/bluetooth/l2cap_core.c-7429-
net/bluetooth/l2cap_core.c:7430:int l2cap_disconn_ind(struct hci_conn *hcon)
net/bluetooth/l2cap_core.c-7431-{
--
net/bluetooth/l2cap_core.c-7440-
net/bluetooth/l2cap_core.c:7441:static void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason)
net/bluetooth/l2cap_core.c-7442-{
--
net/bluetooth/l2cap_core.c=7451=static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt)
--
net/bluetooth/l2cap_core.c-7467-
net/bluetooth/l2cap_core.c:7468:static void l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt)
net/bluetooth/l2cap_core.c-7469-{
--
net/bluetooth/l2cap_core.c=7635=int l2cap_recv_acldata(struct hci_dev *hdev, u16 handle,
--
net/bluetooth/l2cap_core.c-7637-{
net/bluetooth/l2cap_core.c:7638:	struct hci_conn *hcon;
net/bluetooth/l2cap_core.c-7639-	struct l2cap_conn *conn;
--
net/bluetooth/l2cap_core.c-7641-
net/bluetooth/l2cap_core.c:7642:	/* Lock hdev for hci_conn, and race on l2cap_data vs. l2cap_conn_del */
net/bluetooth/l2cap_core.c-7643-	hci_dev_lock(hdev);
net/bluetooth/l2cap_core.c-7644-
net/bluetooth/l2cap_core.c:7645:	hcon = hci_conn_hash_lookup_handle(hdev, handle);
net/bluetooth/l2cap_core.c-7646-	if (!hcon) {
--
net/bluetooth/l2cap_core.c-7651-
net/bluetooth/l2cap_core.c:7652:	hci_conn_enter_active_mode(hcon, BT_POWER_FORCE_ACTIVE_OFF);
net/bluetooth/l2cap_core.c-7653-
]

44/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 39794
							output: 34
							thoughts: 65
						

Thoughts:
**Examining the L2CAP Connection Addition Process**

Okay, so `l2cap_conn_add` initiates things by calling `hci_conn_get(hcon)`. My immediate thought is, "Right, and `hci_conn_get` then bumps up `hcon->refcnt`." Standard stuff for connection management, making sure the connection doesn't get prematurely freed. The question that pops into my head now is, does `hcon` intrinsically *hold* a reference to `hdev` – the HCI device? This is crucial for understanding how the lifetime of the connection object relates to the underlying hardware.

Let's dive back into `hci_conn_add` itself and see if that reveals the ownership model. I need to understand the connection's lifecycle within the HCI device context.



45/2 2026/06/01 19:25 tool grepper
0m Args:
map[Expression:hci_conn_add PathPrefix:net/bluetooth/hci_conn.c]

Results:
map[Output:net/bluetooth/hci_conn.c=919=static int hci_conn_hash_alloc_unset(struct hci_dev *hdev)
--
net/bluetooth/hci_conn.c-924-
net/bluetooth/hci_conn.c:925:static struct hci_conn *__hci_conn_add(struct hci_dev *hdev, int type,
net/bluetooth/hci_conn.c-926-				       bdaddr_t *dst, u8 dst_type,
--
net/bluetooth/hci_conn.c-1078-
net/bluetooth/hci_conn.c:1079:struct hci_conn *hci_conn_add_unset(struct hci_dev *hdev, int type,
net/bluetooth/hci_conn.c-1080-				    bdaddr_t *dst, u8 dst_type, u8 role)
--
net/bluetooth/hci_conn.c-1089-
net/bluetooth/hci_conn.c:1090:	return __hci_conn_add(hdev, type, dst, dst_type, role, handle);
net/bluetooth/hci_conn.c-1091-}
net/bluetooth/hci_conn.c-1092-
net/bluetooth/hci_conn.c:1093:struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
net/bluetooth/hci_conn.c-1094-			      u8 dst_type, u8 role, u16 handle)
--
net/bluetooth/hci_conn.c-1098-
net/bluetooth/hci_conn.c:1099:	return __hci_conn_add(hdev, type, dst, dst_type, role, handle);
net/bluetooth/hci_conn.c-1100-}
--
net/bluetooth/hci_conn.c=1376=struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1430-	} else {
net/bluetooth/hci_conn.c:1431:		conn = hci_conn_add_unset(hdev, LE_LINK, dst, dst_type, role);
net/bluetooth/hci_conn.c-1432-		if (IS_ERR(conn))
--
net/bluetooth/hci_conn.c=1569=static struct hci_conn *hci_add_bis(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1606-
net/bluetooth/hci_conn.c:1607:	conn = hci_conn_add_unset(hdev, BIS_LINK, dst, 0, HCI_ROLE_MASTER);
net/bluetooth/hci_conn.c-1608-	if (IS_ERR(conn))
--
net/bluetooth/hci_conn.c=1620=struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1652-
net/bluetooth/hci_conn.c:1653:	conn = hci_conn_add_unset(hdev, LE_LINK, dst, dst_type,
net/bluetooth/hci_conn.c-1654-				  HCI_ROLE_MASTER);
--
net/bluetooth/hci_conn.c=1677=struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1700-	if (!acl) {
net/bluetooth/hci_conn.c:1701:		acl = hci_conn_add_unset(hdev, ACL_LINK, dst, 0,
net/bluetooth/hci_conn.c-1702-					 HCI_ROLE_MASTER);
--
net/bluetooth/hci_conn.c=1756=struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1770-	if (!sco) {
net/bluetooth/hci_conn.c:1771:		sco = hci_conn_add_unset(hdev, type, dst, 0, HCI_ROLE_MASTER);
net/bluetooth/hci_conn.c-1772-		if (IS_ERR(sco)) {
--
net/bluetooth/hci_conn.c=1962=struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1970-	if (!cis) {
net/bluetooth/hci_conn.c:1971:		cis = hci_conn_add_unset(hdev, CIS_LINK, dst, dst_type,
net/bluetooth/hci_conn.c-1972-					 HCI_ROLE_MASTER);
--
net/bluetooth/hci_conn.c=2152=struct hci_conn *hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-2159-
net/bluetooth/hci_conn.c:2160:	conn = hci_conn_add_unset(hdev, PA_LINK, dst, dst_type, HCI_ROLE_SLAVE);
net/bluetooth/hci_conn.c-2161-	if (IS_ERR(conn))
]

46/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 41465
							output: 37
							thoughts: 12
						

Thoughts:
Okay, let's dive into this. Here's my take on those thoughts, as if they're my own:

**Analyzing `__hci_conn_add`**

Alright, let's get down to brass tacks. The target here is `__hci_conn_add`. My expert mind immediately jumps to a connection add function within a Bluetooth HCI implementation, likely a core function for managing active Bluetooth connections. I can almost visualize the data structures involved: probably a connection handle, device address, link type, maybe some flags for security and role. I'm already anticipating questions about resource allocation – are we dealing with a fixed-size connection table, or a dynamic allocation scheme? What about error handling? What does this function *do* specifically? Does it just create the data structures, or does it also initiate any lower-level commands to the HCI controller? I'm eager to understand the details. My focus sharpens to understand the inner workings. I need to understand its relationship with other related functions, likely within the HCI stack. Is it called directly by the upper layers of the Bluetooth protocol, or does it sit lower down? Let's figure out what makes this function tick.



47/2 2026/06/01 19:25 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:925 LineCount:50]

Results:
map[Contents: 925:	static struct hci_conn *__hci_conn_add(struct hci_dev *hdev, int type,
 926:					       bdaddr_t *dst, u8 dst_type,
 927:					       u8 role, u16 handle)
 928:	{
 929:		struct hci_conn *conn;
 930:		struct smp_irk *irk = NULL;
 931:	
 932:		switch (type) {
 933:		case ACL_LINK:
 934:			if (!hdev->acl_mtu)
 935:				return ERR_PTR(-ECONNREFUSED);
 936:			break;
 937:		case CIS_LINK:
 938:		case BIS_LINK:
 939:		case PA_LINK:
 940:			if (!hdev->iso_mtu)
 941:				return ERR_PTR(-ECONNREFUSED);
 942:			irk = hci_get_irk(hdev, dst, dst_type);
 943:			break;
 944:		case LE_LINK:
 945:			if (hdev->le_mtu && hdev->le_mtu < HCI_MIN_LE_MTU)
 946:				return ERR_PTR(-ECONNREFUSED);
 947:			if (!hdev->le_mtu && hdev->acl_mtu < HCI_MIN_LE_MTU)
 948:				return ERR_PTR(-ECONNREFUSED);
 949:			irk = hci_get_irk(hdev, dst, dst_type);
 950:			break;
 951:		case SCO_LINK:
 952:		case ESCO_LINK:
 953:			if (!hdev->sco_pkts)
 954:				/* Controller does not support SCO or eSCO over HCI */
 955:				return ERR_PTR(-ECONNREFUSED);
 956:			break;
 957:		default:
 958:			return ERR_PTR(-ECONNREFUSED);
 959:		}
 960:	
 961:		bt_dev_dbg(hdev, "dst %pMR handle 0x%4.4x", dst, handle);
 962:	
 963:		conn = kzalloc_obj(*conn);
 964:		if (!conn)
 965:			return ERR_PTR(-ENOMEM);
 966:	
 967:		/* If and IRK exists use its identity address */
 968:		if (!irk) {
 969:			bacpy(&conn->dst, dst);
 970:			conn->dst_type = dst_type;
 971:		} else {
 972:			bacpy(&conn->dst, &irk->bdaddr);
 973:			conn->dst_type = irk->addr_type;
 974:		}
]

48/2 2026/06/01 19:25 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 42549
							output: 37
							thoughts: 13
						

Thoughts:
Okay, let's dive into this `__hci_conn_add` function.

**Analyzing `__hci_conn_add`**

Alright, so we're looking at this connection addition function, `__hci_conn_add`. My expert eye tells me this is where the core logic for establishing a new Bluetooth connection resides within the HCI layer. I'm keen to see how the connection is structured, how the data is handled, and how it interacts with the lower levels. I want to see how the data structures are allocated and populated, and, crucially, how the state transitions are managed. I'm looking for thread safety implications as I analyze this section of code. There's so much potential for subtle race conditions in a critical area like connection management. This is the heart of reliable HCI implementations. I'm expecting to see robust error handling and, perhaps, some clever use of data structures or algorithms to optimize for performance. Let's see if my initial assumptions hold true. I'm also anticipating this function interacts with the device drivers and hardware abstraction layer.



49/2 2026/06/01 19:26 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:975 LineCount:50]

Results:
map[Contents: 975:	
 976:		bacpy(&conn->src, &hdev->bdaddr);
 977:		conn->handle = handle;
 978:		conn->hdev  = hdev;
 979:		conn->type  = type;
 980:		conn->role  = role;
 981:		conn->mode  = HCI_CM_ACTIVE;
 982:		conn->state = BT_OPEN;
 983:		conn->auth_type = HCI_AT_GENERAL_BONDING;
 984:		conn->io_capability = hdev->io_capability;
 985:		conn->remote_auth = 0xff;
 986:		conn->key_type = 0xff;
 987:		conn->rssi = HCI_RSSI_INVALID;
 988:		conn->tx_power = HCI_TX_POWER_INVALID;
 989:		conn->max_tx_power = HCI_TX_POWER_INVALID;
 990:		conn->sync_handle = HCI_SYNC_HANDLE_INVALID;
 991:		conn->sid = HCI_SID_INVALID;
 992:	
 993:		set_bit(HCI_CONN_POWER_SAVE, &conn->flags);
 994:		conn->disc_timeout = HCI_DISCONN_TIMEOUT;
 995:	
 996:		/* Set Default Authenticated payload timeout to 30s */
 997:		conn->auth_payload_timeout = DEFAULT_AUTH_PAYLOAD_TIMEOUT;
 998:	
 999:		if (conn->role == HCI_ROLE_MASTER)
1000:			conn->out = true;
1001:	
1002:		switch (type) {
1003:		case ACL_LINK:
1004:			conn->pkt_type = hdev->pkt_type & ACL_PTYPE_MASK;
1005:			conn->link_policy = hdev->link_policy;
1006:			conn->mtu = hdev->acl_mtu;
1007:			break;
1008:		case LE_LINK:
1009:			/* conn->src should reflect the local identity address */
1010:			hci_copy_identity_address(hdev, &conn->src, &conn->src_type);
1011:			conn->mtu = hdev->le_mtu ? hdev->le_mtu : hdev->acl_mtu;
1012:			/* Use the controller supported PHYS as default until the
1013:			 * remote features are resolved.
1014:			 */
1015:			conn->le_tx_def_phys = hdev->le_tx_def_phys;
1016:			conn->le_rx_def_phys = hdev->le_tx_def_phys;
1017:			break;
1018:		case CIS_LINK:
1019:			/* conn->src should reflect the local identity address */
1020:			hci_copy_identity_address(hdev, &conn->src, &conn->src_type);
1021:	
1022:			if (conn->role == HCI_ROLE_MASTER)
1023:				conn->cleanup = cis_cleanup;
1024:	
]

50/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 43687
							output: 38
							thoughts: 13
						

Thoughts:
Okay, here we go...

**Diving Deeper into `__hci_conn_add`**

Alright, let's keep going. We're now focused on examining the details of the `__hci_conn_add` function. It’s critical, obviously, for understanding how new connections are established at the HCI layer. I need to refresh my understanding of how this particular function fits within the overall Bluetooth stack architecture, and how it handles the nuances of connection establishment. I'll need to pay close attention to the data structures used here, especially related to the `hci_conn_info` and any associated event handling or callbacks. I'm going to watch the interaction with the host controller. Is there any buffering happening here? What about error handling and connection timeout? I'm hoping to get a clearer picture of potential bottlenecks or areas for optimization. This will be interesting.



51/2 2026/06/01 19:26 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:1025 LineCount:50]

Results:
map[Contents:1025:			conn->mtu = hdev->iso_mtu;
1026:			break;
1027:		case PA_LINK:
1028:		case BIS_LINK:
1029:			/* conn->src should reflect the local identity address */
1030:			hci_copy_identity_address(hdev, &conn->src, &conn->src_type);
1031:			conn->cleanup = bis_cleanup;
1032:			conn->mtu = hdev->iso_mtu;
1033:			break;
1034:		case SCO_LINK:
1035:			if (lmp_esco_capable(hdev))
1036:				conn->pkt_type = (hdev->esco_type & SCO_ESCO_MASK) |
1037:						(hdev->esco_type & EDR_ESCO_MASK);
1038:			else
1039:				conn->pkt_type = hdev->pkt_type & SCO_PTYPE_MASK;
1040:	
1041:			conn->mtu = hdev->sco_mtu;
1042:			break;
1043:		case ESCO_LINK:
1044:			conn->pkt_type = hdev->esco_type & ~EDR_ESCO_MASK;
1045:			conn->mtu = hdev->sco_mtu;
1046:			break;
1047:		}
1048:	
1049:		skb_queue_head_init(&conn->data_q);
1050:		skb_queue_head_init(&conn->tx_q.queue);
1051:	
1052:		INIT_LIST_HEAD(&conn->chan_list);
1053:		INIT_LIST_HEAD(&conn->link_list);
1054:	
1055:		INIT_DELAYED_WORK(&conn->disc_work, hci_conn_timeout);
1056:		INIT_DELAYED_WORK(&conn->auto_accept_work, hci_conn_auto_accept);
1057:		INIT_DELAYED_WORK(&conn->idle_work, hci_conn_idle);
1058:		INIT_DELAYED_WORK(&conn->le_conn_timeout, le_conn_timeout);
1059:	
1060:		atomic_set(&conn->refcnt, 0);
1061:	
1062:		hci_dev_hold(hdev);
1063:	
1064:		hci_conn_hash_add(hdev, conn);
1065:	
1066:		/* The SCO and eSCO connections will only be notified when their
1067:		 * setup has been completed. This is different to ACL links which
1068:		 * can be notified right away.
1069:		 */
1070:		if (conn->type != SCO_LINK && conn->type != ESCO_LINK) {
1071:			if (hdev->notify)
1072:				hdev->notify(hdev, HCI_NOTIFY_CONN_ADD);
1073:		}
1074:	
]

52/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 44750
							output: 34
							thoughts: 56
						

Thoughts:
**Analyzing Bluetooth Connection Management**

Okay, so I see `__hci_conn_add` is calling `hci_dev_hold(hdev)`. That makes sense; we're establishing a connection, so we need to increment the reference count on the device. Now, where do we decrement that count? My immediate assumption is that `hci_conn_del` will call `hci_dev_put(hdev)`. It’s the obvious pairing. To be sure, I’ll take a quick look at the `hci_conn_del` function now. Gotta confirm my hypothesis.



53/2 2026/06/01 19:26 tool grepper
0m Args:
map[Expression:hci_dev_put PathPrefix:net/bluetooth/hci_conn.c]

Results:
map[Output:net/bluetooth/hci_conn.c=140=static void hci_conn_cleanup(struct hci_conn *conn)
--
net/bluetooth/hci_conn.c-174-
net/bluetooth/hci_conn.c:175:	hci_dev_put(hdev);
net/bluetooth/hci_conn.c-176-}
--
net/bluetooth/hci_conn.c=2677=int hci_get_conn_list(void __user *arg)
--
net/bluetooth/hci_conn.c-2721-
net/bluetooth/hci_conn.c:2722:	hci_dev_put(hdev);
net/bluetooth/hci_conn.c-2723-
--
net/bluetooth/hci_conn.c=3276=int hci_ethtool_ts_info(unsigned int index, int sk_proto,
--
net/bluetooth/hci_conn.c-3304-
net/bluetooth/hci_conn.c:3305:	hci_dev_put(hdev);
net/bluetooth/hci_conn.c-3306-	return 0;
]

54/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 45261
							output: 34
							thoughts: 31
						

Thoughts:
Okay, here's my interpretation of that thought process, assuming I'm an expert in this field, rendered in the first person:

**Investigating hci\_conn\_cleanup and hci\_dev\_put**

Alright, so `hci_conn_cleanup` is calling `hci_dev_put(hdev)`. That's the core of the matter. I know `hci_dev_put` is all about decrementing the reference count for a HCI device structure, `hdev`. So, the question is, *when* exactly is `hci_conn_cleanup` invoked? What scenarios trigger this cleanup procedure? Understanding the calling contexts of `hci_conn_cleanup` is crucial to fully understanding the lifecycle management of HCI connections and the corresponding HCI device resource deallocation. I need to trace back from `hci_conn_cleanup` to pinpoint the specific circumstances in which these connections are cleaned up. It's likely related to connection termination, link loss, or perhaps even device detachment scenarios. Let's dig in and find out.



55/2 2026/06/01 19:26 tool grepper
0m Args:
map[Expression:hci_conn_cleanup PathPrefix:net/bluetooth/hci_conn.c]

Results:
map[Output:net/bluetooth/hci_conn.c=71=void hci_connect_le_scan_cleanup(struct hci_conn *conn, u8 status)
--
net/bluetooth/hci_conn.c-139-
net/bluetooth/hci_conn.c:140:static void hci_conn_cleanup(struct hci_conn *conn)
net/bluetooth/hci_conn.c-141-{
--
net/bluetooth/hci_conn.c=1093=struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1101-
net/bluetooth/hci_conn.c:1102:static void hci_conn_cleanup_child(struct hci_conn *conn, u8 reason)
net/bluetooth/hci_conn.c-1103-{
--
net/bluetooth/hci_conn.c=1128=static void hci_conn_unlink(struct hci_conn *conn)
--
net/bluetooth/hci_conn.c-1149-
net/bluetooth/hci_conn.c:1150:			hci_conn_cleanup_child(child, conn->abort_reason);
net/bluetooth/hci_conn.c-1151-		}
--
net/bluetooth/hci_conn.c=1170=void hci_conn_del(struct hci_conn *conn)
--
net/bluetooth/hci_conn.c-1239-	 */
net/bluetooth/hci_conn.c:1240:	hci_conn_cleanup(conn);
net/bluetooth/hci_conn.c-1241-
]

56/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 45967
							output: 36
							thoughts: 189
						

Thoughts:
**My Line of Reasoning**

Okay, let's break this down. I see that `hci_conn_del` is the crucial function here; it ultimately triggers `hci_conn_cleanup(conn)`, which then calls `hci_dev_put(hdev)`. My focus is on understanding the lifecycle here. When is `hci_conn_del` actually invoked? Aha, it's called during a connection disconnect. This makes sense.

But hold on a second… if a `bnep_session` is active, that implies the L2CAP channel is still open, and therefore the underlying HCI connection *must* still be alive, right? Consequently, if the HCI connection is still active, it *must* hold a reference to the `hdev`. This also makes perfect sense.

If the connection is holding a reference to `hdev`, we absolutely *cannot* call `hci_release_dev` at this point! That function's whole purpose is to release the device when its reference count drops to zero. That would be bad, potentially causing memory corruption, because the device is still in use by the existing connection.

Now, there's another piece to the puzzle. `hci_unregister_dev` calls `hci_dev_do_close(hdev)`. This seems important. But the question is: does `hci_dev_do_close` have a mechanism to correctly disconnect any still active connections? That's the critical question here! I need to investigate the behavior of `hci_dev_do_close` to ensure there are no race conditions with the connection teardown.



57/2 2026/06/01 19:26 tool grepper
0m Args:
map[Expression:hci_dev_do_close PathPrefix:net/bluetooth/hci_core.c]

Results:
map[Output:net/bluetooth/hci_core.c=439=int hci_dev_open(__u16 dev)
--
net/bluetooth/hci_core.c-493-
net/bluetooth/hci_core.c:494:int hci_dev_do_close(struct hci_dev *hdev)
net/bluetooth/hci_core.c-495-{
--
net/bluetooth/hci_core.c=509=int hci_dev_close(__u16 dev)
--
net/bluetooth/hci_core.c-526-
net/bluetooth/hci_core.c:527:	err = hci_dev_do_close(hdev);
net/bluetooth/hci_core.c-528-
--
net/bluetooth/hci_core.c=903=static int hci_rfkill_set_block(void *data, bool blocked)
--
net/bluetooth/hci_core.c-929-				 */
net/bluetooth/hci_core.c:930:				hci_dev_do_close(hdev);
net/bluetooth/hci_core.c-931-			}
--
net/bluetooth/hci_core.c=944=static void hci_power_on(struct work_struct *work)
--
net/bluetooth/hci_core.c-976-		hci_dev_clear_flag(hdev, HCI_AUTO_OFF);
net/bluetooth/hci_core.c:977:		hci_dev_do_close(hdev);
net/bluetooth/hci_core.c-978-	} else if (hci_dev_test_flag(hdev, HCI_AUTO_OFF)) {
--
net/bluetooth/hci_core.c=1013=static void hci_power_off(struct work_struct *work)
--
net/bluetooth/hci_core.c-1019-
net/bluetooth/hci_core.c:1020:	hci_dev_do_close(hdev);
net/bluetooth/hci_core.c-1021-}
--
net/bluetooth/hci_core.c=1023=static void hci_error_reset(struct work_struct *work)
--
net/bluetooth/hci_core.c-1034-
net/bluetooth/hci_core.c:1035:	if (!hci_dev_do_close(hdev))
net/bluetooth/hci_core.c-1036-		hci_dev_do_open(hdev);
--
net/bluetooth/hci_core.c=2691=void hci_unregister_dev(struct hci_dev *hdev)
--
net/bluetooth/hci_core.c-2715-
net/bluetooth/hci_core.c:2716:	hci_dev_do_close(hdev);
net/bluetooth/hci_core.c-2717-
]

58/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 47253
							output: 37
							thoughts: 13
						

Thoughts:
Okay, let's dive into this `hci_dev_do_close` function. As an expert in this field, I know this is a critical function related to Bluetooth HCI device management. I expect to see the standard cleanup procedures - resource deallocation, state transitions, and potentially signal handling. I want to understand how it deals with pending operations, potential race conditions, and error handling during the close process. I'll be looking specifically at how the function handles the HCI device's state and its implications on upper layers that might be dependent on its availability. It's a key function and the details will make or break our system's reliability and stability in edge cases. This is where the intricacies of proper resource management really become apparent.



59/2 2026/06/01 19:26 tool read-file
0m Args:
map[File:net/bluetooth/hci_core.c FirstLine:494 LineCount:50]

Results:
map[Contents: 494:	int hci_dev_do_close(struct hci_dev *hdev)
 495:	{
 496:		int err;
 497:	
 498:		BT_DBG("%s %p", hdev->name, hdev);
 499:	
 500:		hci_req_sync_lock(hdev);
 501:	
 502:		err = hci_dev_close_sync(hdev);
 503:	
 504:		hci_req_sync_unlock(hdev);
 505:	
 506:		return err;
 507:	}
 508:	
 509:	int hci_dev_close(__u16 dev)
 510:	{
 511:		struct hci_dev *hdev;
 512:		int err;
 513:	
 514:		hdev = hci_dev_get(dev);
 515:		if (!hdev)
 516:			return -ENODEV;
 517:	
 518:		if (hci_dev_test_flag(hdev, HCI_USER_CHANNEL)) {
 519:			err = -EBUSY;
 520:			goto done;
 521:		}
 522:	
 523:		cancel_work_sync(&hdev->power_on);
 524:		if (hci_dev_test_and_clear_flag(hdev, HCI_AUTO_OFF))
 525:			cancel_delayed_work(&hdev->power_off);
 526:	
 527:		err = hci_dev_do_close(hdev);
 528:	
 529:	done:
 530:		hci_dev_put(hdev);
 531:		return err;
 532:	}
 533:	
 534:	static int hci_dev_do_reset(struct hci_dev *hdev)
 535:	{
 536:		int ret;
 537:	
 538:		BT_DBG("%s %p", hdev->name, hdev);
 539:	
 540:		hci_req_sync_lock(hdev);
 541:	
 542:		/* Drop queues */
 543:		skb_queue_purge(&hdev->rx_q);
]

60/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 48116
							output: 36
							thoughts: 13
						

Thoughts:
Okay, let's dive into this. Here's my take on `hci_dev_close_sync`:

**Understanding hci_dev_close_sync**

Alright, so I'm looking at `hci_dev_close_sync`. Immediately, I'm thinking, "This is about cleanly shutting down a Bluetooth HCI (Host Controller Interface) device." Given the "sync" in the name, I'm expecting this is going to be a blocking call. That makes sense; we wouldn't want to just cut off communication and leave things in an undefined state. We need to ensure that whatever processes are using the HCI device are properly handled before it gets closed.

My experience tells me this function is likely responsible for:

*   **Flushing Pending Operations:** Making sure any pending commands or data transfers are completed, or at least gracefully cancelled. We don't want to lose any information.
*   **Signalling Completion:** It will probably wait for all outstanding operations to finish. Perhaps there's an internal flag that changes state to communicate this process to other functions within the Bluetooth stack.
*   **Releasing Resources:** Finally, this function should deal with releasing any resources associated with the device. This could include memory, file descriptors, or internal data structures related to the HCI connection.
*   **Error Handling:** It will need to handle cases where there are issues during the shutdown. Things go wrong sometimes, and this needs to be graceful with providing some indication of the issue.

I'm now curious about the specific implementation details: What are the low-level interactions? Are there locks involved to protect critical sections? What are the potential error conditions that can arise? A look at the code should provide me with all the answers I'm looking for.



61/2 2026/06/01 19:26 tool grepper
0m Args:
map[Expression:hci_dev_close_sync PathPrefix:net/bluetooth/hci_sync.c]

Results:
map[Output:net/bluetooth/hci_sync.c=5269=static int hci_dev_shutdown(struct hci_dev *hdev)
--
net/bluetooth/hci_sync.c-5293-
net/bluetooth/hci_sync.c:5294:int hci_dev_close_sync(struct hci_dev *hdev)
net/bluetooth/hci_sync.c-5295-{
--
net/bluetooth/hci_sync.c=5439=static int hci_power_on_sync(struct hci_dev *hdev)
--
net/bluetooth/hci_sync.c-5462-		hci_dev_clear_flag(hdev, HCI_AUTO_OFF);
net/bluetooth/hci_sync.c:5463:		hci_dev_close_sync(hdev);
net/bluetooth/hci_sync.c-5464-	} else if (hci_dev_test_flag(hdev, HCI_AUTO_OFF)) {
--
net/bluetooth/hci_sync.c=5771=static int hci_disconnect_all_sync(struct hci_dev *hdev, u8 reason)
--
net/bluetooth/hci_sync.c-5799- * Disconnect all connections
net/bluetooth/hci_sync.c:5800: * hci_dev_close_sync
net/bluetooth/hci_sync.c-5801- */
net/bluetooth/hci_sync.c=5802=static int hci_power_off_sync(struct hci_dev *hdev)
--
net/bluetooth/hci_sync.c-5831-
net/bluetooth/hci_sync.c:5832:	err = hci_dev_close_sync(hdev);
net/bluetooth/hci_sync.c-5833-
]

62/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 48986
							output: 38
							thoughts: 13
						

Thoughts:
Okay, here's my take on those thoughts, tailored for an expert audience:

**Analyzing the `hci_dev_close_sync` Function**

Alright, let's dive into the `hci_dev_close_sync` function. It's time to refresh my memory on the critical steps involved in a controlled and synchronized Bluetooth device closure. I need to understand how this function ensures graceful shutdown, preventing potential race conditions and data corruption. I want to zero in on how it handles synchronization, likely through mutexes or semaphores, ensuring all pending operations complete before the device is truly closed.

I suspect it'll involve checking the device state, perhaps verifying that no active connections or ongoing transactions are present. The "sync" part of the name suggests a blocking operation, potentially waiting on callbacks or internal events to signal completion. I'll need to examine how error handling is implemented. Are errors propagated up the call stack, or are they handled internally? What logging or debugging mechanisms are included for troubleshooting potential issues during the closure sequence?

Ultimately, I expect to see a carefully orchestrated sequence of operations designed to guarantee a clean and consistent state transition for the Bluetooth device, which is essential for resource management and system stability. I'm keen to see if it efficiently handles any pending data transfers or command acknowledgements.



63/2 2026/06/01 19:26 tool read-file
0m Args:
map[File:net/bluetooth/hci_sync.c FirstLine:5294 LineCount:50]

Results:
map[Contents:5294:	int hci_dev_close_sync(struct hci_dev *hdev)
5295:	{
5296:		bool auto_off;
5297:		int err = 0;
5298:	
5299:		bt_dev_dbg(hdev, "");
5300:	
5301:		if (hci_dev_test_flag(hdev, HCI_UNREGISTER)) {
5302:			disable_delayed_work(&hdev->power_off);
5303:			disable_delayed_work(&hdev->ncmd_timer);
5304:			disable_delayed_work(&hdev->le_scan_disable);
5305:		} else {
5306:			cancel_delayed_work(&hdev->power_off);
5307:			cancel_delayed_work(&hdev->ncmd_timer);
5308:			cancel_delayed_work(&hdev->le_scan_disable);
5309:		}
5310:	
5311:		hci_cmd_sync_cancel_sync(hdev, ENODEV);
5312:	
5313:		cancel_interleave_scan(hdev);
5314:	
5315:		if (hdev->adv_instance_timeout) {
5316:			cancel_delayed_work_sync(&hdev->adv_instance_expire);
5317:			hdev->adv_instance_timeout = 0;
5318:		}
5319:	
5320:		err = hci_dev_shutdown(hdev);
5321:	
5322:		if (!test_and_clear_bit(HCI_UP, &hdev->flags)) {
5323:			cancel_delayed_work_sync(&hdev->cmd_timer);
5324:			return err;
5325:		}
5326:	
5327:		hci_leds_update_powered(hdev, false);
5328:	
5329:		/* Flush RX and TX works */
5330:		flush_work(&hdev->tx_work);
5331:		flush_work(&hdev->rx_work);
5332:	
5333:		if (hdev->discov_timeout > 0) {
5334:			hdev->discov_timeout = 0;
5335:			hci_dev_clear_flag(hdev, HCI_DISCOVERABLE);
5336:			hci_dev_clear_flag(hdev, HCI_LIMITED_DISCOVERABLE);
5337:		}
5338:	
5339:		if (hci_dev_test_and_clear_flag(hdev, HCI_SERVICE_CACHE))
5340:			cancel_delayed_work(&hdev->service_cache);
5341:	
5342:		if (hci_dev_test_flag(hdev, HCI_MGMT)) {
5343:			struct adv_info *adv_instance;
]

64/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 50108
							output: 38
							thoughts: 14
						

Thoughts:
Okay, here's my summary, taking on the persona you requested:

**Diving Back into `hci_dev_close_sync`**

Alright, let's get back to it. Seems like we're still focusing on `hci_dev_close_sync`. I need to really understand the nuances of how this function handles the closure of a HCI device, synchronously. I'm keen to grasp the synchronization mechanisms involved, ensuring that the device is properly de-initialized and all outstanding operations are gracefully handled before returning. It's crucial for preventing resource leaks and ensuring a clean shutdown, especially when dealing with Bluetooth controllers. I'm thinking about the potential race conditions, the role of mutexes or semaphores, and any potential for deadlock. I'm going to carefully consider how it interacts with other parts of the HCI stack, and the consequences of improper closure. I'm also curious to see if there are any specific error handling strategies implemented within this particular function, and how those errors are propagated or managed. I want to see if this function's logic is robust enough to handle unexpected hardware disconnections, or software errors during the closure sequence. I must see all this!



65/2 2026/06/01 19:26 tool read-file
0m Args:
map[File:net/bluetooth/hci_sync.c FirstLine:5344 LineCount:50]

Results:
map[Contents:5344:	
5345:			cancel_delayed_work_sync(&hdev->rpa_expired);
5346:	
5347:			list_for_each_entry(adv_instance, &hdev->adv_instances, list)
5348:				cancel_delayed_work_sync(&adv_instance->rpa_expired_cb);
5349:		}
5350:	
5351:		/* Avoid potential lockdep warnings from the *_flush() calls by
5352:		 * ensuring the workqueue is empty up front.
5353:		 */
5354:		drain_workqueue(hdev->workqueue);
5355:	
5356:		hci_dev_lock(hdev);
5357:	
5358:		hci_discovery_set_state(hdev, DISCOVERY_STOPPED);
5359:	
5360:		auto_off = hci_dev_test_and_clear_flag(hdev, HCI_AUTO_OFF);
5361:	
5362:		if (!auto_off && !hci_dev_test_flag(hdev, HCI_USER_CHANNEL) &&
5363:		    hci_dev_test_flag(hdev, HCI_MGMT))
5364:			__mgmt_power_off(hdev);
5365:	
5366:		hci_inquiry_cache_flush(hdev);
5367:		hci_pend_le_actions_clear(hdev);
5368:		hci_conn_hash_flush(hdev);
5369:		/* Prevent data races on hdev->smp_data or hdev->smp_bredr_data */
5370:		smp_unregister(hdev);
5371:		hci_dev_unlock(hdev);
5372:	
5373:		hci_sock_dev_event(hdev, HCI_DEV_DOWN);
5374:	
5375:		if (!hci_dev_test_flag(hdev, HCI_USER_CHANNEL)) {
5376:			aosp_do_close(hdev);
5377:			msft_do_close(hdev);
5378:		}
5379:	
5380:		if (hdev->flush)
5381:			hdev->flush(hdev);
5382:	
5383:		/* Reset device */
5384:		skb_queue_purge(&hdev->cmd_q);
5385:		atomic_set(&hdev->cmd_cnt, 1);
5386:		if (hci_test_quirk(hdev, HCI_QUIRK_RESET_ON_CLOSE) &&
5387:		    !auto_off && !hci_dev_test_flag(hdev, HCI_UNCONFIGURED)) {
5388:			set_bit(HCI_INIT, &hdev->flags);
5389:			hci_reset_sync(hdev);
5390:			clear_bit(HCI_INIT, &hdev->flags);
5391:		}
5392:	
5393:		/* flush cmd  work */
]

66/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 51243
							output: 36
							thoughts: 37
						

Thoughts:
Here's my summary, as the thought process unfolds:

**Examining the HCI Connection Closing Procedure**

Alright, so `hci_dev_close_sync` is the function responsible for closing a Bluetooth HCI device synchronously. Interesting. It looks like it calls `hci_conn_hash_flush(hdev)` as part of its operation. I should probably understand what's happening within that `hci_conn_hash_flush` function. It's likely involved in cleaning up connection-related data structures associated with the device `hdev` before it's closed. This seems like a critical step to ensure a clean shutdown and avoid resource leaks or dangling pointers. Let's delve into the implementation of `hci_conn_hash_flush` to get the full picture.



67/2 2026/06/01 19:26 tool grepper
0m Args:
map[Expression:hci_conn_hash_flush PathPrefix:net/bluetooth/hci_conn.c]

Results:
map[Output:net/bluetooth/hci_conn.c=1128=static void hci_conn_unlink(struct hci_conn *conn)
--
net/bluetooth/hci_conn.c-1142-			/* If hdev is down it means
net/bluetooth/hci_conn.c:1143:			 * hci_dev_close_sync/hci_conn_hash_flush is in progress
net/bluetooth/hci_conn.c-1144-			 * and links don't need to be cleanup as all connections
--
net/bluetooth/hci_conn.c=2610=void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active)
--
net/bluetooth/hci_conn.c-2634-/* Drop all connection on the device */
net/bluetooth/hci_conn.c:2635:void hci_conn_hash_flush(struct hci_dev *hdev)
net/bluetooth/hci_conn.c-2636-{
]

68/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 51733
							output: 38
							thoughts: 13
						

Thoughts:
Okay, let's dive into this `hci_conn_hash_flush` function. I see it's likely part of the Bluetooth connection management, specifically dealing with a hash table. My initial thought is, this probably cleans up or resets the connection hash table. The name suggests a flush, so it's probably emptying it of entries.

Given my experience, I'm already mentally forming questions:

*   **What triggers this flush?** Is it a system shutdown, a specific event like a HCI reset, or is it part of routine cleanup? Understanding the "why" is crucial for performance analysis and debugging.
*   **What are the consequences of flushing?** Will this result in disconnection of all current Bluetooth connections? Will it result in a race with other routines that are attempting to add or remove connection entries? Or is it a more graceful approach to releasing resources? Is there any mechanism to prevent a flush if connections are active?
*   **How is the hash table implemented?** Is it a simple linked list-based hash, or a more sophisticated approach with collision resolution? The implementation details will directly impact the efficiency of the flush operation.
*   **Is it thread-safe?** This is critical. Considering that other threads might be interacting with the connection hash simultaneously, concurrency control is absolutely essential. A race condition here could lead to crashes or data corruption.
*   **Are there any statistics or logging associated with this flush?** Ideally, I'd want to understand how often it's called and the typical number of connections it's clearing. This would be very useful when tuning the bluetooth stack performance.
*   **What is the interaction with other HCI routines?** Does it use locks or other synchronization primitives in the HCI layer to prevent deadlocks or data corruption?

I'll be looking for these answers in the code, I need to understand the function's place in the larger HCI (Host Controller Interface) connection management ecosystem.



69/2 2026/06/01 19:26 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:2635 LineCount:50]

Results:
map[Contents:2635:	void hci_conn_hash_flush(struct hci_dev *hdev)
2636:	{
2637:		struct list_head *head = &hdev->conn_hash.list;
2638:		struct hci_conn *conn;
2639:	
2640:		BT_DBG("hdev %s", hdev->name);
2641:	
2642:		/* We should not traverse the list here, because hci_conn_del
2643:		 * can remove extra links, which may cause the list traversal
2644:		 * to hit items that have already been released.
2645:		 */
2646:		while ((conn = list_first_entry_or_null(head,
2647:							struct hci_conn,
2648:							list)) != NULL) {
2649:			conn->state = BT_CLOSED;
2650:			hci_disconn_cfm(conn, HCI_ERROR_LOCAL_HOST_TERM);
2651:			hci_conn_del(conn);
2652:		}
2653:	}
2654:	
2655:	static u32 get_link_mode(struct hci_conn *conn)
2656:	{
2657:		u32 link_mode = 0;
2658:	
2659:		if (conn->role == HCI_ROLE_MASTER)
2660:			link_mode |= HCI_LM_MASTER;
2661:	
2662:		if (test_bit(HCI_CONN_ENCRYPT, &conn->flags))
2663:			link_mode |= HCI_LM_ENCRYPT;
2664:	
2665:		if (test_bit(HCI_CONN_AUTH, &conn->flags))
2666:			link_mode |= HCI_LM_AUTH;
2667:	
2668:		if (test_bit(HCI_CONN_SECURE, &conn->flags))
2669:			link_mode |= HCI_LM_SECURE;
2670:	
2671:		if (test_bit(HCI_CONN_FIPS, &conn->flags))
2672:			link_mode |= HCI_LM_FIPS;
2673:	
2674:		return link_mode;
2675:	}
2676:	
2677:	int hci_get_conn_list(void __user *arg)
2678:	{
2679:		struct hci_conn *c;
2680:		struct hci_conn_list_req req, *cl;
2681:		struct hci_conn_info *ci;
2682:		struct hci_dev *hdev;
2683:		int n = 0, size, err;
2684:	
]

70/2 2026/06/01 19:26 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 52950
							output: 35
							thoughts: 73
						

Thoughts:
Here's my analysis of what's happening, breaking down the code step by step:

**Dissecting the Connection Flush**

Okay, so `hci_conn_hash_flush` is initiating a connection teardown. My initial thought is to trace the execution path. The function's going to trigger a disconnect confirmation with `hci_disconn_cfm`, and the reason for the disconnect is `HCI_ERROR_LOCAL_HOST_TERM`. That signals the local host is the one terminating the connection. Then, `hci_conn_del(conn)` removes the connection data structure itself, which I know is critical for preventing memory leaks and resource contention.

Now, I need to understand what `hci_disconn_cfm` does in detail. It's the key function to trace. It looks like it is going to signal L2CAP about this disconnect event. I want to see how that notification occurs and any consequences within L2CAP. I expect it'll do things like release any allocated buffers or resources associated with that specific connection endpoint. I need to understand how the L2CAP layer handles this disconnection event and if it propagates the termination to any upper layers.



71/2 2026/06/01 19:27 tool grepper
0m Error:
no matches

Args:
map[Expression:hci_disconn_cfm PathPrefix:net/bluetooth/hci_core.c]

Results:
map[Output:]

72/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 53319
							output: 30
							thoughts: 32
						

Thoughts:
Okay, here's my interpretation of those thoughts, summarized in the first person, assuming the context is my expert understanding of Bluetooth HCI event handling:

**Where Did That Disconnect Confirmation Land?**

Alright, let me think. I'm trying to track down where the `hci_disconn_cfm` function is actually defined within the Bluetooth stack. It's a key piece of the disconnect flow, so I need to know where it's handled to understand the confirmation process. Is it tucked away in `net/bluetooth/hci_event.c`, focusing on the event parsing and dispatching? Or does it live over in `hci_conn.c`, which is responsible for the connection management itself, where the actual connection state change would be the primary focus? Knowing the specific location helps me to troubleshoot the data path. I need to refresh my memory and pinpoint the exact source file; where did they put it?



73/2 2026/06/01 19:27 tool grepper
0m Args:
map[Expression:hci_disconn_cfm PathPrefix:net/bluetooth/]

Results:
map[Output:net/bluetooth/hci_conn.c=2635=void hci_conn_hash_flush(struct hci_dev *hdev)
--
net/bluetooth/hci_conn.c-2649-		conn->state = BT_CLOSED;
net/bluetooth/hci_conn.c:2650:		hci_disconn_cfm(conn, HCI_ERROR_LOCAL_HOST_TERM);
net/bluetooth/hci_conn.c-2651-		hci_conn_del(conn);
--
net/bluetooth/hci_event.c=2689=static void hci_cs_disconnect(struct hci_dev *hdev, u8 status)
--
net/bluetooth/hci_event.c-2723-		/* Inform sockets conn is gone before we delete it */
net/bluetooth/hci_event.c:2724:		hci_disconn_cfm(conn, HCI_ERROR_UNSPECIFIED);
net/bluetooth/hci_event.c-2725-
--
net/bluetooth/hci_event.c-2763-
net/bluetooth/hci_event.c:2764:	hci_disconn_cfm(conn, cp->reason);
net/bluetooth/hci_event.c-2765-
--
net/bluetooth/hci_event.c=3396=static void hci_disconn_complete_evt(struct hci_dev *hdev, void *data,
--
net/bluetooth/hci_event.c-3464-
net/bluetooth/hci_event.c:3465:	hci_disconn_cfm(conn, ev->reason);
net/bluetooth/hci_event.c-3466-
--
net/bluetooth/hci_event.c=5912=static void hci_le_pa_sync_lost_evt(struct hci_dev *hdev, void *data,
--
net/bluetooth/hci_event.c-5927-		clear_bit(HCI_CONN_PA_SYNC, &conn->flags);
net/bluetooth/hci_event.c:5928:		hci_disconn_cfm(conn, HCI_ERROR_REMOTE_USER_TERM);
net/bluetooth/hci_event.c-5929-		hci_conn_del(conn);
--
net/bluetooth/hci_event.c=7230=static void hci_le_big_sync_lost_evt(struct hci_dev *hdev, void *data,
--
net/bluetooth/hci_event.c-7253-		clear_bit(HCI_CONN_BIG_SYNC, &bis->flags);
net/bluetooth/hci_event.c:7254:		hci_disconn_cfm(bis, ev->reason);
net/bluetooth/hci_event.c-7255-		hci_conn_del(bis);
--
net/bluetooth/hci_sync.c=5718=int hci_abort_conn_sync(struct hci_dev *hdev, struct hci_conn *conn, u8 reason)
--
net/bluetooth/hci_sync.c-5759-		conn->state = BT_CLOSED;
net/bluetooth/hci_sync.c:5760:		hci_disconn_cfm(conn, reason);
net/bluetooth/hci_sync.c-5761-		hci_conn_del(conn);
]

74/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 54398
							output: 32
							thoughts: 15
						

Thoughts:
Here's a summary of my immediate thought process, delivered as requested:

**Digging into the `hci_disconn_cfm` Function**

Okay, wait a minute... `hci_disconn_cfm`. I see this function name and it triggers a flag. Is this a common routine, or something more specialized? The immediate question that pops into my head is, "Is this function inline?" If it is, that has a significant impact on how I'll need to analyze its performance characteristics, understand its impact on code size, and consider potential optimization strategies within the context of the larger HCI (Host Controller Interface) implementation. Inline functions can be incredibly efficient in some scenarios, but they can also lead to code bloat if overused, or if they are inlined in too many places, resulting in larger firmware sizes than necessary, thus impacting memory usage, and potentially power consumption. I need to keep that in mind as I delve further.



75/2 2026/06/01 19:27 tool grepper
0m Args:
map[Expression:hci_disconn_cfm PathPrefix:include/net/bluetooth/]

Results:
map[Output:include/net/bluetooth/hci_core.h=2132=static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
--
include/net/bluetooth/hci_core.h-2146-
include/net/bluetooth/hci_core.h:2147:static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
include/net/bluetooth/hci_core.h-2148-{
]

76/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 54770
							output: 40
							thoughts: 12
						

Thoughts:
Okay, here's my attempt at summarizing the thought process, as if I were considering the provided text, and assuming a high level of expertise:

**Diving into hci_disconn_cfm**

Alright, let's pull up `hci_disconn_cfm`. Immediately, my brain starts running through the implications. "cfm" - confirmation. So, this is a confirmation event related to a disconnection, likely in the HCI (Host Controller Interface) layer. My first question is: what initiated this disconnection? Was it initiated by the host? The controller? Or maybe due to a link loss or a timeout?

I'm probably going to be looking for details like the connection handle, reason code, and maybe even some internal state flags associated with the disconnection process. The reason code is going to be key. That's where I can pinpoint the *why*. Was it a user-initiated disconnect? A security violation? A link failure? And, really, the format of this confirmation will shape my assumptions, but is more in the HCI standard structure, or proprietary.

I'll be thinking about how this confirmation fits into the broader connection lifecycle. Where does it sit? After the HCI command to disconnect? After some other internal processing? Is there any potential for race conditions or error handling that I need to be aware of? I'll probably be mapping out the state transitions involved; thinking about what the host needs to do, what the controller needs to do, and how this event signifies that these things are complete. Then I can predict how it will work from what I already know about it.

My primary goal here is to understand the context of this confirmation and how to use it to debug a potential issue with a Bluetooth connection. In my mind, I'm already formulating questions: Is the reason code valid? Does the timing seem reasonable? Does it match what I'm seeing elsewhere in the system? If it's the reason that I expected, then I'll probably know the outcome, but if it is not, then I'll look into tracing this all the way down.



77/2 2026/06/01 19:27 tool read-file
0m Args:
map[File:include/net/bluetooth/hci_core.h FirstLine:2147 LineCount:50]

Results:
map[Contents:2147:	static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
2148:	{
2149:		struct hci_cb *cb;
2150:	
2151:		mutex_lock(&hci_cb_list_lock);
2152:		list_for_each_entry(cb, &hci_cb_list, list) {
2153:			if (cb->disconn_cfm)
2154:				cb->disconn_cfm(conn, reason);
2155:		}
2156:		mutex_unlock(&hci_cb_list_lock);
2157:	
2158:		if (conn->disconn_cfm_cb)
2159:			conn->disconn_cfm_cb(conn, reason);
2160:	}
2161:	
2162:	static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
2163:	{
2164:		struct hci_cb *cb;
2165:		__u8 encrypt;
2166:	
2167:		if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
2168:			return;
2169:	
2170:		encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
2171:	
2172:		mutex_lock(&hci_cb_list_lock);
2173:		list_for_each_entry(cb, &hci_cb_list, list) {
2174:			if (cb->security_cfm)
2175:				cb->security_cfm(conn, status, encrypt);
2176:		}
2177:		mutex_unlock(&hci_cb_list_lock);
2178:	
2179:		if (conn->security_cfm_cb)
2180:			conn->security_cfm_cb(conn, status);
2181:	}
2182:	
2183:	static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
2184:	{
2185:		struct hci_cb *cb;
2186:		__u8 encrypt;
2187:	
2188:		if (conn->state == BT_CONFIG) {
2189:			if (!status)
2190:				conn->state = BT_CONNECTED;
2191:	
2192:			hci_connect_cfm(conn, status);
2193:			hci_conn_drop(conn);
2194:			return;
2195:		}
2196:	
]

78/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 55993
							output: 40
							thoughts: 48
						

Thoughts:
Okay, here's my interpretation of that thought process, from an expert's perspective:

**Diving into the Disconnection Confirmation**

Alright, let's break this down. We're looking at the sequence of events triggered by a disconnection event within the HCI (Host Controller Interface). Specifically, we're tracing the path from `hci_disconn_cfm` which is the HCI confirmation function. The key takeaway here is that `hci_disconn_cfm` is calling a callback function, represented by `cb->disconn_cfm(conn, reason)`. So, the HCI layer has received the disconnection confirmation, and now it's notifying the upper layers, which is handled by this callback.

The arguments of this callback, `conn` and `reason` are significant. The `conn` represents the connection handle (or identifier) that was disconnected. The `reason` provides the details of why the disconnection occurred.

Now, the interesting part is the abstraction. While `cb->disconn_cfm` appears generic, it highlights how the system is designed. The particular implementation of `cb->disconn_cfm` depends on the connection layer. In the case of L2CAP (Logical Link Control and Adaptation Protocol), we're specifically looking at `l2cap_disconn_cfm`. So `hci_disconn_cfm` triggers a protocol-specific disconnection confirmation for the L2CAP protocol. This ensures that the disconnection is handled correctly, with appropriate state transitions and cleanup within L2CAP. This abstraction is elegant, promoting modularity and maintainability within the Bluetooth stack.



79/2 2026/06/01 19:27 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:7441 LineCount:50]

Results:
map[Contents:7441:	static void l2cap_disconn_cfm(struct hci_conn *hcon, u8 reason)
7442:	{
7443:		if (hcon->type != ACL_LINK && hcon->type != LE_LINK)
7444:			return;
7445:	
7446:		BT_DBG("hcon %p reason %d", hcon, reason);
7447:	
7448:		l2cap_conn_del(hcon, bt_to_errno(reason));
7449:	}
7450:	
7451:	static inline void l2cap_check_encryption(struct l2cap_chan *chan, u8 encrypt)
7452:	{
7453:		if (chan->chan_type != L2CAP_CHAN_CONN_ORIENTED)
7454:			return;
7455:	
7456:		if (encrypt == 0x00) {
7457:			if (chan->sec_level == BT_SECURITY_MEDIUM) {
7458:				__set_chan_timer(chan, L2CAP_ENC_TIMEOUT);
7459:			} else if (chan->sec_level == BT_SECURITY_HIGH ||
7460:				   chan->sec_level == BT_SECURITY_FIPS)
7461:				l2cap_chan_close(chan, ECONNREFUSED);
7462:		} else {
7463:			if (chan->sec_level == BT_SECURITY_MEDIUM)
7464:				__clear_chan_timer(chan);
7465:		}
7466:	}
7467:	
7468:	static void l2cap_security_cfm(struct hci_conn *hcon, u8 status, u8 encrypt)
7469:	{
7470:		struct l2cap_conn *conn = hcon->l2cap_data;
7471:		struct l2cap_chan *chan;
7472:	
7473:		if (!conn)
7474:			return;
7475:	
7476:		BT_DBG("conn %p status 0x%2.2x encrypt %u", conn, status, encrypt);
7477:	
7478:		mutex_lock(&conn->lock);
7479:	
7480:		list_for_each_entry(chan, &conn->chan_l, list) {
7481:			l2cap_chan_lock(chan);
7482:	
7483:			BT_DBG("chan %p scid 0x%4.4x state %s", chan, chan->scid,
7484:			       state_to_string(chan->state));
7485:	
7486:			if (!status && encrypt)
7487:				chan->sec_level = hcon->sec_level;
7488:	
7489:			if (!__l2cap_no_conn_pending(chan)) {
7490:				l2cap_chan_unlock(chan);
]

80/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 57230
							output: 40
							thoughts: 13
						

Thoughts:
Okay, here's my interpretation of that thought process, assuming I'm deeply familiar with embedded systems and the intricacies of L2CAP:

**Diving into `l2cap_conn_del`**

Alright, time to dig into `l2cap_conn_del`. That function name itself is pretty explicit - it's about deleting an L2CAP connection. Given my background, I can already make some assumptions about what's involved. It'll likely handle the deallocation of resources associated with a specific L2CAP connection, probably including freeing memory allocated for the connection context, signaling the lower layers (like the HCI) to release the physical connection if it exists, and potentially cleaning up any associated queues or data structures. I need to understand the exact mechanics of how this function cleans up. Knowing how this function cleans things up is absolutely vital to ensuring there aren't any memory leaks or unexpected behavior, particularly in embedded environments where resources are so precious. I'll be looking for things like mutexes or other synchronization primitives to protect the connection state during deletion, and of course, a clear path of resource deallocation to prevent dangling pointers or orphaned memory. Let's see how this function handles the teardown sequence.



81/2 2026/06/01 19:27 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:1764 LineCount:50]

Results:
map[Contents:1764:	static void l2cap_conn_del(struct hci_conn *hcon, int err)
1765:	{
1766:		struct l2cap_conn *conn = hcon->l2cap_data;
1767:		struct l2cap_chan *chan, *l;
1768:	
1769:		if (!conn)
1770:			return;
1771:	
1772:		BT_DBG("hcon %p conn %p, err %d", hcon, conn, err);
1773:	
1774:		disable_delayed_work_sync(&conn->info_timer);
1775:		disable_delayed_work_sync(&conn->id_addr_timer);
1776:	
1777:		mutex_lock(&conn->lock);
1778:	
1779:		kfree_skb(conn->rx_skb);
1780:	
1781:		skb_queue_purge(&conn->pending_rx);
1782:	
1783:		/* We can not call flush_work(&conn->pending_rx_work) here since we
1784:		 * might block if we are running on a worker from the same workqueue
1785:		 * pending_rx_work is waiting on.
1786:		 */
1787:		if (work_pending(&conn->pending_rx_work))
1788:			cancel_work_sync(&conn->pending_rx_work);
1789:	
1790:		ida_destroy(&conn->tx_ida);
1791:	
1792:		l2cap_unregister_all_users(conn);
1793:	
1794:		/* Force the connection to be immediately dropped */
1795:		hcon->disc_timeout = 0;
1796:	
1797:		/* Kill channels */
1798:		list_for_each_entry_safe(chan, l, &conn->chan_l, list) {
1799:			l2cap_chan_hold(chan);
1800:			l2cap_chan_lock(chan);
1801:	
1802:			l2cap_chan_del(chan, err);
1803:	
1804:			chan->ops->close(chan);
1805:	
1806:			l2cap_chan_unlock(chan);
1807:			l2cap_chan_put(chan);
1808:		}
1809:	
1810:		hci_chan_del(conn->hchan);
1811:		conn->hchan = NULL;
1812:	
1813:		hcon->l2cap_data = NULL;
]

82/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 58279
							output: 38
							thoughts: 104
						

Thoughts:
**Delving into L2CAP Connection Deletion**

Okay, so `l2cap_conn_del` initiates the cleanup process. It calls `l2cap_chan_del` with the channel and an error code. I know from experience that, for BNEP connections, this "channel" is actually an L2CAP socket. Now, `l2cap_chan_del` in turn calls `chan->ops->close(chan)`. That `close` operation is the critical part here. I need to be sure I understand the sequence completely, otherwise things will hang or leak.

Wait a second…if we're dealing with an L2CAP socket, isn't `chan->ops->close` supposed to be `l2cap_sock_close`? Let me double-check the `chan->ops` assignment. Okay, yes, for an L2CAP socket, `chan->ops` should indeed point to `l2cap_chan_ops`. I should confirm that and be 100% sure. Therefore, I need to jump into `l2cap_sock_close` and verify precisely what happens there. I'm going to track what it does to ensure a clean disconnection.



83/2 2026/06/01 19:27 tool grepper
0m Args:
map[Expression:l2cap_sock_close PathPrefix:net/bluetooth/l2cap_sock.c]

Results:
map[Output:net/bluetooth/l2cap_sock.c=1528=static int l2cap_sock_recv_cb(struct l2cap_chan *chan, struct sk_buff *skb)
--
net/bluetooth/l2cap_sock.c-1590-
net/bluetooth/l2cap_sock.c:1591:static void l2cap_sock_close_cb(struct l2cap_chan *chan)
net/bluetooth/l2cap_sock.c-1592-{
--
net/bluetooth/l2cap_sock.c=1792=static const struct l2cap_ops l2cap_chan_ops = {
--
net/bluetooth/l2cap_sock.c-1795-	.recv			= l2cap_sock_recv_cb,
net/bluetooth/l2cap_sock.c:1796:	.close			= l2cap_sock_close_cb,
net/bluetooth/l2cap_sock.c-1797-	.teardown		= l2cap_sock_teardown_cb,
]

84/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 58958
							output: 40
							thoughts: 15
						

Thoughts:
Okay, let's dive into this `l2cap_sock_close_cb` callback. I'm going to approach this with the assumption that the user understands the general landscape of L2CAP and socket operations, so I won't rehash the basics. Instead, I'll focus on the *implications* of this specific callback.

**Delving into `l2cap_sock_close_cb`**

My immediate thought is, "Right, a socket closure. This is where the cleanup happens." I need to understand what state needs to be tidied up when an L2CAP socket connection is terminated, either gracefully or abruptly. That includes resources like memory allocated for the socket itself, any associated buffers holding data in transit, and potentially queued events or pending operations. I'm already mentally constructing a checklist:

*   **Socket Resource Deallocation:** Ensure the socket structure itself is properly freed, including any related data structures. Are there reference counts to check? Potential race conditions to consider regarding simultaneous access?
*   **Buffer Management:** Any lingering data in transmit or receive buffers – these need to be handled correctly. What's the strategy? Do we drop the data, attempt to flush it, or signal an error? This depends on the context of the disconnection.
*   **Event Handling:** Are there any asynchronous operations in progress? If so, what is the correct handling approach? Cancellation is probably required.
*   **Connection State:** Need to ensure the connection state transitions properly (closed, disconnected, etc.)
*   **Error Handling:** What error codes are relevant in this context? Are there particular failure cases that need special attention or logging?
*   **Thread Safety:** This is crucial. I need to understand what locks are held during the callback execution. How is this callback invoked relative to other operations? Do I need to worry about deadlocks?

I'm thinking this will involve looking at the surrounding code, especially the functions that initiate and maintain the L2CAP socket connection. I'll be tracing the execution flow to see how this callback fits into the overall lifecycle and to see what potential issues this can trigger. I will also be looking to see if there is any indication of how to trigger this callback manually (for testing purposes).

In essence, I'm expecting this `l2cap_sock_close_cb` to be the final word on cleaning up after an L2CAP socket. I just need to make sure I completely understand how it handles every contingency.



85/2 2026/06/01 19:27 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_sock.c FirstLine:1591 LineCount:50]

Results:
map[Contents:1591:	static void l2cap_sock_close_cb(struct l2cap_chan *chan)
1592:	{
1593:		struct sock *sk = chan->data;
1594:	
1595:		if (!sk)
1596:			return;
1597:	
1598:		l2cap_sock_kill(sk);
1599:	}
1600:	
1601:	static void l2cap_sock_teardown_cb(struct l2cap_chan *chan, int err)
1602:	{
1603:		struct sock *sk = chan->data;
1604:		struct sock *parent;
1605:	
1606:		if (!sk)
1607:			return;
1608:	
1609:		BT_DBG("chan %p state %s", chan, state_to_string(chan->state));
1610:	
1611:		/* This callback can be called both for server (BT_LISTEN)
1612:		 * sockets as well as "normal" ones. To avoid lockdep warnings
1613:		 * with child socket locking (through l2cap_sock_cleanup_listen)
1614:		 * we need separation into separate nesting levels. The simplest
1615:		 * way to accomplish this is to inherit the nesting level used
1616:		 * for the channel.
1617:		 */
1618:		lock_sock_nested(sk, atomic_read(&chan->nesting));
1619:	
1620:		parent = bt_sk(sk)->parent;
1621:	
1622:		switch (chan->state) {
1623:		case BT_OPEN:
1624:		case BT_BOUND:
1625:		case BT_CLOSED:
1626:			break;
1627:		case BT_LISTEN:
1628:			l2cap_sock_cleanup_listen(sk);
1629:			sk->sk_state = BT_CLOSED;
1630:			chan->state = BT_CLOSED;
1631:	
1632:			break;
1633:		default:
1634:			sk->sk_state = BT_CLOSED;
1635:			chan->state = BT_CLOSED;
1636:	
1637:			sk->sk_err = err;
1638:	
1639:			if (parent) {
1640:				bt_accept_unlink(sk);
]

86/2 2026/06/01 19:27 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 60219
							output: 38
							thoughts: 759
						

Thoughts:
**Analyzing a Bluetooth L2CAP Socket Closure Race Condition**

Okay, let's break this down. `l2cap_sock_kill` is being called, which sets a `SOCK_DEAD` flag and triggers `sk->sk_state_change(sk)`. That's where it starts to get interesting. `bnep_session` is waiting on `sk_sleep(sk)`, so the state change should wake it up. `bnep_session` then checks if the socket is still connected (`sk->sk_state != BT_CONNECTED`), which it won't be, so it breaks out of the loop.

Now, this is the crucial part. After the loop, it cleans up the session, unregisters the network device, wakes up user-space polling for socket errors (setting `sk->sk_err = EUNATCH`), and then frees the network device. The problem I see is that `bnep_session` might be interrupted in the middle of a transmission, specifically within `bnep_tx_frame`, while `hci_unregister_dev` is also running.

If that's the case, `bnep_tx_frame` calls `kernel_sendmsg`, which eventually trickles down to `hci_send_acl`. This function queues a work item on `hdev->workqueue`. However, `hci_unregister_dev` is being called which means `hdev->workqueue` is likely being destroyed.

Let's trace `hci_unregister_dev`... it calls `hci_dev_do_close(hdev)`, which then calls `hci_dev_close_sync(hdev)`. In `hci_dev_close_sync`, we have `hci_conn_hash_flush(hdev)`, which calls `hci_conn_del(conn)`. `hci_conn_del` calls `l2cap_conn_del`, which in turn calls `l2cap_chan_del`. `l2cap_chan_del` clears `FLAG_HOLD_HCI_CONN` and calls `hci_conn_drop(conn->hcon)`.

Here's the key: `hci_conn_drop` decrements `hcon->refcnt` and then calls `hci_conn_cleanup` through `hci_conn_del`.

Aha! `hci_conn_cleanup` gets called from `hci_conn_del` which gets called from the close process. Let's look closely at `hci_conn_del`. So `hci_conn_del` calls `hci_conn_cleanup(conn)`.



87/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:1170 LineCount:50]

Results:
map[Contents:1170:	void hci_conn_del(struct hci_conn *conn)
1171:	{
1172:		struct hci_dev *hdev = conn->hdev;
1173:	
1174:		BT_DBG("%s hcon %p handle %d", hdev->name, conn, conn->handle);
1175:	
1176:		hci_conn_unlink(conn);
1177:	
1178:		disable_delayed_work_sync(&conn->disc_work);
1179:		disable_delayed_work_sync(&conn->auto_accept_work);
1180:		disable_delayed_work_sync(&conn->idle_work);
1181:	
1182:		/* Remove the connection from the list so unacked logic can detect when
1183:		 * a certain pool is not being utilized.
1184:		 */
1185:		hci_conn_hash_del(hdev, conn);
1186:	
1187:		/* Handle unacked frames:
1188:		 *
1189:		 * - In case there are no connection, or if restoring the buffers
1190:		 *   considered in transist would overflow, restore all buffers to the
1191:		 *   pool.
1192:		 * - Otherwise restore just the buffers considered in transit for the
1193:		 *   hci_conn
1194:		 */
1195:		switch (conn->type) {
1196:		case ACL_LINK:
1197:			if (!hci_conn_num(hdev, ACL_LINK) ||
1198:			    hdev->acl_cnt + conn->sent > hdev->acl_pkts)
1199:				hdev->acl_cnt = hdev->acl_pkts;
1200:			else
1201:				hdev->acl_cnt += conn->sent;
1202:			break;
1203:		case LE_LINK:
1204:			cancel_delayed_work(&conn->le_conn_timeout);
1205:	
1206:			if (hdev->le_pkts) {
1207:				if (!hci_conn_num(hdev, LE_LINK) ||
1208:				    hdev->le_cnt + conn->sent > hdev->le_pkts)
1209:					hdev->le_cnt = hdev->le_pkts;
1210:				else
1211:					hdev->le_cnt += conn->sent;
1212:			} else {
1213:				if ((!hci_conn_num(hdev, LE_LINK) &&
1214:				     !hci_conn_num(hdev, ACL_LINK)) ||
1215:				    hdev->acl_cnt + conn->sent > hdev->acl_pkts)
1216:					hdev->acl_cnt = hdev->acl_pkts;
1217:				else
1218:					hdev->acl_cnt += conn->sent;
1219:			}
]

88/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 62385
							output: 38
							thoughts: 12
						

Thoughts:
Okay, here's my attempt at summarizing the thought process, as requested, in the first person and targeted towards an expert:

**Diving Back into hci\_conn\_del**

Alright, let's get back into the code. Time to dig deeper into `hci_conn_del`. I want to refresh my memory on the intricacies of the connection deletion process within the Bluetooth HCI stack. Specifically, I need to understand how the system gracefully handles the disconnect, releases resources, and ensures there are no lingering references. It's crucial for maintaining the integrity of the stack and preventing any memory leaks or unexpected behavior after a connection terminates. I'm keen to examine the potential race conditions and concurrency issues that are addressed here and how the design is robust. I need to fully understand all the implications of how and when the connections are cleaned up.



89/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:1220 LineCount:50]

Results:
map[Contents:1220:			break;
1221:		case CIS_LINK:
1222:		case BIS_LINK:
1223:		case PA_LINK:
1224:			if (!hci_iso_count(hdev) ||
1225:			    hdev->iso_cnt + conn->sent > hdev->iso_pkts)
1226:				hdev->iso_cnt = hdev->iso_pkts;
1227:			else
1228:				hdev->iso_cnt += conn->sent;
1229:			break;
1230:		}
1231:	
1232:		skb_queue_purge(&conn->data_q);
1233:		skb_queue_purge(&conn->tx_q.queue);
1234:	
1235:		/* Remove the connection from the list and cleanup its remaining
1236:		 * state. This is a separate function since for some cases like
1237:		 * BT_CONNECT_SCAN we *only* want the cleanup part without the
1238:		 * rest of hci_conn_del.
1239:		 */
1240:		hci_conn_cleanup(conn);
1241:	
1242:		/* Dequeue callbacks using connection pointer as data */
1243:		hci_cmd_sync_dequeue(hdev, NULL, conn, NULL);
1244:	}
1245:	
1246:	struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, uint8_t src_type)
1247:	{
1248:		int use_src = bacmp(src, BDADDR_ANY);
1249:		struct hci_dev *hdev = NULL, *d;
1250:	
1251:		BT_DBG("%pMR -> %pMR", src, dst);
1252:	
1253:		read_lock(&hci_dev_list_lock);
1254:	
1255:		list_for_each_entry(d, &hci_dev_list, list) {
1256:			if (!test_bit(HCI_UP, &d->flags) ||
1257:			    hci_dev_test_flag(d, HCI_USER_CHANNEL))
1258:				continue;
1259:	
1260:			/* Simple routing:
1261:			 *   No source address - find interface with bdaddr != dst
1262:			 *   Source address    - find interface with bdaddr == src
1263:			 */
1264:	
1265:			if (use_src) {
1266:				bdaddr_t id_addr;
1267:				u8 id_addr_type;
1268:	
1269:				if (src_type == BDADDR_BREDR) {
]

90/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 63377
							output: 37
							thoughts: 31
						

Thoughts:
Okay, here's my take on those thoughts, framed as my own mental processing as an HCI expert:

**Diving into the Connection Cleanup**

Alright, so `hci_conn_del` is the function we're talking about, and it looks like the critical action it takes is calling `hci_conn_cleanup(conn)`. Good, good. My immediate thought is, "Let's dig into `hci_conn_cleanup` then. *That's* where the real work of connection termination is likely happening." I want to understand exactly what happens to a connection when it's being deleted. Is it releasing resources? Sending any final HCI commands? What state transitions are taking place? This `hci_conn_cleanup` function is where I need to focus my attention to get a clear picture of this entire flow.



91/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:140 LineCount:50]

Results:
map[Contents: 140:	static void hci_conn_cleanup(struct hci_conn *conn)
 141:	{
 142:		struct hci_dev *hdev = conn->hdev;
 143:	
 144:		if (test_bit(HCI_CONN_PARAM_REMOVAL_PEND, &conn->flags))
 145:			hci_conn_params_del(conn->hdev, &conn->dst, conn->dst_type);
 146:	
 147:		if (test_and_clear_bit(HCI_CONN_FLUSH_KEY, &conn->flags))
 148:			hci_remove_link_key(hdev, &conn->dst);
 149:	
 150:		hci_chan_list_flush(conn);
 151:	
 152:		if (HCI_CONN_HANDLE_UNSET(conn->handle))
 153:			ida_free(&hdev->unset_handle_ida, conn->handle);
 154:	
 155:		if (conn->cleanup)
 156:			conn->cleanup(conn);
 157:	
 158:		if (conn->type == SCO_LINK || conn->type == ESCO_LINK) {
 159:			switch (conn->setting & SCO_AIRMODE_MASK) {
 160:			case SCO_AIRMODE_CVSD:
 161:			case SCO_AIRMODE_TRANSP:
 162:				if (hdev->notify)
 163:					hdev->notify(hdev, HCI_NOTIFY_DISABLE_SCO);
 164:				break;
 165:			}
 166:		} else {
 167:			if (hdev->notify)
 168:				hdev->notify(hdev, HCI_NOTIFY_CONN_DEL);
 169:		}
 170:	
 171:		debugfs_remove_recursive(conn->debugfs);
 172:	
 173:		hci_conn_del_sysfs(conn);
 174:	
 175:		hci_dev_put(hdev);
 176:	}
 177:	
 178:	int hci_disconnect(struct hci_conn *conn, __u8 reason)
 179:	{
 180:		BT_DBG("hcon %p", conn);
 181:	
 182:		/* When we are central of an established connection and it enters
 183:		 * the disconnect timeout, then go ahead and try to read the
 184:		 * current clock offset.  Processing of the result is done
 185:		 * within the event handling and hci_clock_offset_evt function.
 186:		 */
 187:		if (conn->type == ACL_LINK && conn->role == HCI_ROLE_MASTER &&
 188:		    (conn->state == BT_CONNECTED || conn->state == BT_CONFIG)) {
 189:			struct hci_dev *hdev = conn->hdev;
]

92/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 64430
							output: 38
							thoughts: 173
						

Thoughts:
**My Concerns Regarding Bluetooth Device Cleanup**

Okay, let me think this through. `hci_conn_cleanup` calls `hci_dev_put(hdev)`. Right. Now, I remember that `hci_conn_del` is called from `hci_conn_hash_flush`. That means `hci_conn_hash_flush` is calling `hci_conn_del`, which in turn calls `hci_conn_cleanup`, which then calls `hci_dev_put(hdev)`. And if that `hci_dev_put` is the last reference to the device handle, then `hci_release_dev` gets invoked. Hmm...

But hold on, `hci_unregister_dev` also calls `hci_dev_do_close(hdev)`. And it appears that `hci_dev_do_close` gets called *before* `hci_dev_put(hdev)` within `hci_unregister_dev`. That seems... potentially problematic. I need to re-examine `hci_unregister_dev` and confirm the exact order of operations here. There might be a race condition, or at least a resource management issue, that I need to investigate.



93/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/hci_core.c FirstLine:2716 LineCount:50]

Results:
map[Contents:2716:		hci_dev_do_close(hdev);
2717:	
2718:		if (!test_bit(HCI_INIT, &hdev->flags) &&
2719:		    !hci_dev_test_flag(hdev, HCI_SETUP) &&
2720:		    !hci_dev_test_flag(hdev, HCI_CONFIG)) {
2721:			hci_dev_lock(hdev);
2722:			mgmt_index_removed(hdev);
2723:			hci_dev_unlock(hdev);
2724:		}
2725:	
2726:		/* mgmt_index_removed should take care of emptying the
2727:		 * pending list */
2728:		BUG_ON(!list_empty(&hdev->mgmt_pending));
2729:	
2730:		hci_sock_dev_event(hdev, HCI_DEV_UNREG);
2731:	
2732:		if (hdev->rfkill) {
2733:			rfkill_unregister(hdev->rfkill);
2734:			rfkill_destroy(hdev->rfkill);
2735:		}
2736:	
2737:		device_del(&hdev->dev);
2738:		/* Actual cleanup is deferred until hci_release_dev(). */
2739:		hci_dev_put(hdev);
2740:	}
2741:	EXPORT_SYMBOL(hci_unregister_dev);
2742:	
2743:	/* Release HCI device */
2744:	void hci_release_dev(struct hci_dev *hdev)
2745:	{
2746:		debugfs_remove_recursive(hdev->debugfs);
2747:		kfree_const(hdev->hw_info);
2748:		kfree_const(hdev->fw_info);
2749:	
2750:		destroy_workqueue(hdev->workqueue);
2751:		destroy_workqueue(hdev->req_workqueue);
2752:	
2753:		hci_dev_lock(hdev);
2754:		hci_bdaddr_list_clear(&hdev->reject_list);
2755:		hci_bdaddr_list_clear(&hdev->accept_list);
2756:		hci_uuids_clear(hdev);
2757:		hci_link_keys_clear(hdev);
2758:		hci_smp_ltks_clear(hdev);
2759:		hci_smp_irks_clear(hdev);
2760:		hci_remote_oob_data_clear(hdev);
2761:		hci_adv_instances_clear(hdev);
2762:		hci_adv_monitors_clear(hdev);
2763:		hci_bdaddr_list_clear(&hdev->le_accept_list);
2764:		hci_bdaddr_list_clear(&hdev->le_resolv_list);
2765:		hci_conn_params_clear_all(hdev);
]

94/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 65730
							output: 39
							thoughts: 758
						

Thoughts:
**Analyzing the Bluetooth HCI Device Unregistration Process**

Okay, so I'm digging into how Bluetooth devices are unregistered, specifically looking at potential race conditions with BNEP sessions. It starts with `hci_unregister_dev`, which calls `hci_dev_do_close` and then `hci_conn_hash_flush`. That flushes connections, calling `hci_conn_del` which removes the `hcon` reference to the `hdev`. The thing is, `hci_unregister_dev` itself *also* holds a reference to `hdev`.

Aha, I see that `hci_dev_put(hdev)` is called right at the very end of `hci_unregister_dev` (line 2739). So, `hci_release_dev` isn't called immediately during `hci_dev_do_close`. It's deferred until the *last* reference to the device is dropped. Since `hci_unregister_dev` holds a reference, `hci_release_dev` is going to be called at that line, or maybe later if someone else is still holding a reference.

Now, here's where it gets interesting: the `bnep_session` is a kthread. When `l2cap_sock_kill` is called (which is triggered down the chain from `hci_conn_hash_flush`), it wakes up `bnep_session`.  The session notices `sk->sk_state != BT_CONNECTED`, breaks its loop, and starts cleaning up. But the problem is, `bnep_session` *might* be in the middle of `bnep_tx_frame` at that point!

If it's in `bnep_tx_frame`, it's actively sending data. That calls `kernel_sendmsg`, which leads to `l2cap_sock_sendmsg`, then `l2cap_chan_send`, and finally `hci_send_acl`.  That `hci_send_acl` call is crucial because it queues work onto `hdev->workqueue`.  And if `hci_release_dev` gets called, it destroys that `hdev->workqueue`! Big problem if a BNEP thread is still trying to send ACL data!

I need to figure out if the socket, held by the `bnep_session`, also holds a reference to the `hdev`. Let me check that... `l2cap_conn_add` calls `hci_conn_get(hcon)`, and `l2cap_chan_add` calls `hci_conn_hold(conn->hcon)`. So, the `l2cap_chan` *does* hold a reference to `hcon`, and `hcon` references the `hdev`. So, as long as the `l2cap_chan` holds a reference to `hcon`, the `hdev` can't be released. But what happens during teardown?

Wait a minute, `l2cap_chan_del` is called from `l2cap_conn_del`, which itself is called from `hci_conn_hash_flush`. `l2cap_chan_del` clears `FLAG_HOLD_HCI_CONN` and calls `hci_conn_drop(conn->hcon)`. Boom, the reference to `hcon` is *dropped* within `l2cap_chan_del`, even though the socket and `l2cap_chan` still exist and are held by `bnep_session`! That's a potential race condition! I need to verify that.



95/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:647 LineCount:50]

Results:
map[Contents: 647:	void l2cap_chan_del(struct l2cap_chan *chan, int err)
 648:	{
 649:		struct l2cap_conn *conn = chan->conn;
 650:	
 651:		__clear_chan_timer(chan);
 652:	
 653:		BT_DBG("chan %p, conn %p, err %d, state %s", chan, conn, err,
 654:		       state_to_string(chan->state));
 655:	
 656:		chan->ops->teardown(chan, err);
 657:	
 658:		if (conn) {
 659:			/* Delete from channel list */
 660:			list_del(&chan->list);
 661:	
 662:			l2cap_chan_put(chan);
 663:	
 664:			chan->conn = NULL;
 665:	
 666:			/* Reference was only held for non-fixed channels or
 667:			 * fixed channels that explicitly requested it using the
 668:			 * FLAG_HOLD_HCI_CONN flag.
 669:			 */
 670:			if (chan->chan_type != L2CAP_CHAN_FIXED ||
 671:			    test_bit(FLAG_HOLD_HCI_CONN, &chan->flags))
 672:				hci_conn_drop(conn->hcon);
 673:		}
 674:	
 675:		if (test_bit(CONF_NOT_COMPLETE, &chan->conf_state))
 676:			return;
 677:	
 678:		switch (chan->mode) {
 679:		case L2CAP_MODE_BASIC:
 680:			break;
 681:	
 682:		case L2CAP_MODE_LE_FLOWCTL:
 683:		case L2CAP_MODE_EXT_FLOWCTL:
 684:			skb_queue_purge(&chan->tx_q);
 685:			break;
 686:	
 687:		case L2CAP_MODE_ERTM:
 688:			__clear_retrans_timer(chan);
 689:			__clear_monitor_timer(chan);
 690:			__clear_ack_timer(chan);
 691:	
 692:			skb_queue_purge(&chan->srej_q);
 693:	
 694:			l2cap_seq_list_free(&chan->srej_list);
 695:			l2cap_seq_list_free(&chan->retrans_list);
 696:			fallthrough;
]

96/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 68032
							output: 39
							thoughts: 71
						

Thoughts:
Here's my analysis of the situation:

**Potential Race Condition in L2CAP Channel Deletion and Transmission**

Okay, so `l2cap_chan_del` is supposed to clean up a channel. Good, it calls `hci_conn_drop` on the HCI connection (`conn->hcon`) and *then* importantly, it sets `chan->conn` to `NULL`. The crucial point here is the sequence of operations.

My concern flares up immediately. If the `chan->conn` pointer is being set to `NULL` *before* some other operation potentially uses that pointer, we're likely looking at a race condition. Specifically, I'm thinking about `l2cap_do_send`. What happens if `l2cap_do_send` tries to access the `chan->conn` *after* `l2cap_chan_del` has run and set it to `NULL`? That's going to be a crash, a nasty null pointer dereference. 

Therefore, I need to check the code. I must examine the `l2cap_do_send` function *very* carefully to see how it handles the `chan->conn` pointer. I need to understand if it's protected somehow, if there's a lock in place, or if the order of operations in this system is somehow guaranteed to prevent this scenario. Let's dig into `l2cap_do_send` and verify our assumptions.



97/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:999 LineCount:50]

Results:
map[Contents: 999:	static void l2cap_do_send(struct l2cap_chan *chan, struct sk_buff *skb)
1000:	{
1001:		struct hci_conn *hcon = chan->conn->hcon;
1002:		u16 flags;
1003:	
1004:		BT_DBG("chan %p, skb %p len %d priority %u", chan, skb, skb->len,
1005:		       skb->priority);
1006:	
1007:		/* Use NO_FLUSH for LE links (where this is the only option) or
1008:		 * if the BR/EDR link supports it and flushing has not been
1009:		 * explicitly requested (through FLAG_FLUSHABLE).
1010:		 */
1011:		if (hcon->type == LE_LINK ||
1012:		    (!test_bit(FLAG_FLUSHABLE, &chan->flags) &&
1013:		     lmp_no_flush_capable(hcon->hdev)))
1014:			flags = ACL_START_NO_FLUSH;
1015:		else
1016:			flags = ACL_START;
1017:	
1018:		bt_cb(skb)->force_active = test_bit(FLAG_FORCE_ACTIVE, &chan->flags);
1019:		hci_send_acl(chan->conn->hchan, skb, flags);
1020:	}
1021:	
1022:	static void __unpack_enhanced_control(u16 enh, struct l2cap_ctrl *control)
1023:	{
1024:		control->reqseq = (enh & L2CAP_CTRL_REQSEQ) >> L2CAP_CTRL_REQSEQ_SHIFT;
1025:		control->final = (enh & L2CAP_CTRL_FINAL) >> L2CAP_CTRL_FINAL_SHIFT;
1026:	
1027:		if (enh & L2CAP_CTRL_FRAME_TYPE) {
1028:			/* S-Frame */
1029:			control->sframe = 1;
1030:			control->poll = (enh & L2CAP_CTRL_POLL) >> L2CAP_CTRL_POLL_SHIFT;
1031:			control->super = (enh & L2CAP_CTRL_SUPERVISE) >> L2CAP_CTRL_SUPER_SHIFT;
1032:	
1033:			control->sar = 0;
1034:			control->txseq = 0;
1035:		} else {
1036:			/* I-Frame */
1037:			control->sframe = 0;
1038:			control->sar = (enh & L2CAP_CTRL_SAR) >> L2CAP_CTRL_SAR_SHIFT;
1039:			control->txseq = (enh & L2CAP_CTRL_TXSEQ) >> L2CAP_CTRL_TXSEQ_SHIFT;
1040:	
1041:			control->poll = 0;
1042:			control->super = 0;
1043:		}
1044:	}
1045:	
1046:	static void __unpack_extended_control(u32 ext, struct l2cap_ctrl *control)
1047:	{
1048:		control->reqseq = (ext & L2CAP_EXT_CTRL_REQSEQ) >> L2CAP_EXT_CTRL_REQSEQ_SHIFT;
]

98/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 69370
							output: 40
							thoughts: 62
						

Thoughts:
**Analyzing a Potential NULL Pointer Dereference**

Okay, so I'm looking at this `l2cap_do_send` function, and it seems like it could have a serious vulnerability. If `chan->conn` happens to be NULL, then dereferencing it within the function would result in a NULL pointer dereference – a classic bug that can lead to crashes or, worse, exploitable vulnerabilities. My mind immediately flags this as a potential issue, something that needs immediate attention.

But hold on a second! I remember that `l2cap_chan_send` is the function that calls `l2cap_do_send`. I should probably check that function too. Perhaps `l2cap_chan_send` does some pre-emptive checks, making `l2cap_do_send` safer than I initially thought. It might be checking something like `chan->state == BT_CONNECTED` before making that call. If that state check is in place, it could mitigate the risk. It's a classic defensive programming technique. So now I need to dive into `l2cap_chan_send` to get to the bottom of this.



99/2 2026/06/01 19:28 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:2460 LineCount:50]

Results:
map[Contents:2460:		skb = chan->ops->alloc_skb(chan, hlen, count,
2461:					   msg->msg_flags & MSG_DONTWAIT);
2462:		if (IS_ERR(skb))
2463:			return skb;
2464:	
2465:		/* Create L2CAP header */
2466:		lh = skb_put(skb, L2CAP_HDR_SIZE);
2467:		lh->cid = cpu_to_le16(chan->dcid);
2468:		lh->len = cpu_to_le16(len + (hlen - L2CAP_HDR_SIZE));
2469:	
2470:		if (sdulen)
2471:			put_unaligned_le16(sdulen, skb_put(skb, L2CAP_SDULEN_SIZE));
2472:	
2473:		err = l2cap_skbuff_fromiovec(chan, msg, len, count, skb);
2474:		if (unlikely(err < 0)) {
2475:			kfree_skb(skb);
2476:			return ERR_PTR(err);
2477:		}
2478:	
2479:		return skb;
2480:	}
2481:	
2482:	static int l2cap_segment_le_sdu(struct l2cap_chan *chan,
2483:					struct sk_buff_head *seg_queue,
2484:					struct msghdr *msg, size_t len)
2485:	{
2486:		struct sk_buff *skb;
2487:		size_t pdu_len;
2488:		u16 sdu_len;
2489:	
2490:		BT_DBG("chan %p, msg %p, len %zu", chan, msg, len);
2491:	
2492:		sdu_len = len;
2493:		pdu_len = chan->remote_mps - L2CAP_SDULEN_SIZE;
2494:	
2495:		while (len > 0) {
2496:			if (len <= pdu_len)
2497:				pdu_len = len;
2498:	
2499:			skb = l2cap_create_le_flowctl_pdu(chan, msg, pdu_len, sdu_len);
2500:			if (IS_ERR(skb)) {
2501:				__skb_queue_purge(seg_queue);
2502:				return PTR_ERR(skb);
2503:			}
2504:	
2505:			__skb_queue_tail(seg_queue, skb);
2506:	
2507:			len -= pdu_len;
2508:	
2509:			if (sdu_len) {
]

100/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 70517
							output: 38
							thoughts: 17
						

Thoughts:
Okay, here's my summary, taking the perspective of someone deeply familiar with low-level networking, specifically Bluetooth.

**Diving into the `l2cap_chan_send` Function**

Right, I'm at a point where I need to take a look at the actual `l2cap_chan_send` function. I've got a specific issue in mind, and I suspect it boils down to the implementation of this particular function. I need to understand exactly how it handles the transmission process. Are there timing concerns? Does it handle flow control effectively? How does it interact with the underlying hardware or driver? This function is absolutely critical, and I can't proceed without a deep dive into its code. I need to refresh my memory on the interactions of this function.



101/2 2026/06/01 19:28 tool grepper
0m Args:
map[Expression:l2cap_chan_send PathPrefix:net/bluetooth/l2cap_core.c]

Results:
map[Output:net/bluetooth/l2cap_core.c=2546=static void l2cap_tx_timestamp_seg(struct sk_buff_head *queue,
--
net/bluetooth/l2cap_core.c-2558-
net/bluetooth/l2cap_core.c:2559:int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len,
net/bluetooth/l2cap_core.c-2560-		    const struct sockcm_cookie *sockc)
--
net/bluetooth/l2cap_core.c-2670-}
net/bluetooth/l2cap_core.c:2671:EXPORT_SYMBOL_GPL(l2cap_chan_send);
net/bluetooth/l2cap_core.c-2672-
]

102/2 2026/06/01 19:28 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 70956
							output: 40
							thoughts: 13
						

Thoughts:
Okay, let's dive into this `l2cap_chan_send` function. I'm an expert in this field, so I want to understand exactly what's happening.

**Dissecting `l2cap_chan_send`**

Alright, my immediate focus is on the core logic. I'm thinking about the data flow – where it originates, how it's packaged, and the mechanisms used to ensure reliability and delivery. I need to consider factors like fragmentation, reassembly, and error handling, especially in a Bluetooth context. Specifically I'm going to look for areas where there might be optimization opportunities. Are there any mutexes I can identify and are there situations I can imagine where these mutexes might be contested, causing lock-related latency?

I'll be looking for potential bottlenecks too. Is there any buffering involved? How's the congestion control handled, if any? Also, memory management is always critical. I need to see how the function interacts with memory allocation/deallocation to avoid leaks or performance hits. I'm going to pay close attention to the data structures involved, the use of pointers, and any potential for buffer overflows or other security vulnerabilities.

I also want to see how this function integrates with the underlying Bluetooth stack. What callbacks or other mechanisms are used to signal completion or errors? How does it handle channel state transitions?

Essentially, I want to gain a comprehensive understanding of this function's role within the larger system. I'm going to be keeping an eye out for potential problems that could cause performance degradation or system instability. I'll evaluate the code based on security, performance, and efficiency.



103/2 2026/06/01 19:29 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:2559 LineCount:50]

Results:
map[Contents:2559:	int l2cap_chan_send(struct l2cap_chan *chan, struct msghdr *msg, size_t len,
2560:			    const struct sockcm_cookie *sockc)
2561:	{
2562:		struct sk_buff *skb;
2563:		int err;
2564:		struct sk_buff_head seg_queue;
2565:	
2566:		if (!chan->conn)
2567:			return -ENOTCONN;
2568:	
2569:		/* Connectionless channel */
2570:		if (chan->chan_type == L2CAP_CHAN_CONN_LESS) {
2571:			skb = l2cap_create_connless_pdu(chan, msg, len);
2572:			if (IS_ERR(skb))
2573:				return PTR_ERR(skb);
2574:	
2575:			l2cap_tx_timestamp(skb, sockc, len);
2576:	
2577:			l2cap_do_send(chan, skb);
2578:			return len;
2579:		}
2580:	
2581:		switch (chan->mode) {
2582:		case L2CAP_MODE_LE_FLOWCTL:
2583:		case L2CAP_MODE_EXT_FLOWCTL:
2584:			/* Check outgoing MTU */
2585:			if (len > chan->omtu)
2586:				return -EMSGSIZE;
2587:	
2588:			__skb_queue_head_init(&seg_queue);
2589:	
2590:			err = l2cap_segment_le_sdu(chan, &seg_queue, msg, len);
2591:	
2592:			if (chan->state != BT_CONNECTED) {
2593:				__skb_queue_purge(&seg_queue);
2594:				err = -ENOTCONN;
2595:			}
2596:	
2597:			if (err)
2598:				return err;
2599:	
2600:			l2cap_tx_timestamp_seg(&seg_queue, sockc, len);
2601:	
2602:			skb_queue_splice_tail_init(&seg_queue, &chan->tx_q);
2603:	
2604:			l2cap_le_flowctl_send(chan);
2605:	
2606:			if (!chan->tx_credits)
2607:				chan->ops->suspend(chan);
2608:	
]

104/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 72085
							output: 40
							thoughts: 115
						

Thoughts:
**Race Condition Concerns in L2CAP Channel Sending**

Okay, so I'm looking at this `l2cap_chan_send` function, and the first thing that jumps out is this check: `if (!chan->conn) return -ENOTCONN;`. Seems straightforward enough – make sure the channel is actually connected before sending. But then the gears start turning… what if `chan->conn` somehow becomes `NULL` *after* this check is performed? We've got a potential race condition here, right?

The really concerning bit is that `l2cap_chan_send` *doesn't* appear to hold `chan->lock`. That means another thread could swoop in, disconnect the channel, set `chan->conn` to `NULL`, and we'd be trying to send on a disconnected channel! That's a classic concurrency bug, and we need to understand how it's handled, or *if* it is handled.

Alright, so `l2cap_chan_send` is called from `l2cap_sock_sendmsg`. We need to figure out who's protecting us. Does `l2cap_sock_sendmsg` lock `chan->lock` *or* the socket lock (`sk`) before calling `l2cap_chan_send`? I better go check the `l2cap_sock_sendmsg` code directly to be certain. Time to dive in...



105/2 2026/06/01 19:29 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_sock.c FirstLine:1150 LineCount:50]

Results:
map[Contents:1150:	
1151:		if (msg->msg_controllen) {
1152:			err = sock_cmsg_send(sk, msg, &sockc);
1153:			if (err)
1154:				return err;
1155:		}
1156:	
1157:		lock_sock(sk);
1158:		err = bt_sock_wait_ready(sk, msg->msg_flags);
1159:		release_sock(sk);
1160:		if (err)
1161:			return err;
1162:	
1163:		l2cap_chan_lock(chan);
1164:		err = l2cap_chan_send(chan, msg, len, &sockc);
1165:		l2cap_chan_unlock(chan);
1166:	
1167:		return err;
1168:	}
1169:	
1170:	static void l2cap_publish_rx_avail(struct l2cap_chan *chan)
1171:	{
1172:		struct sock *sk = chan->data;
1173:		ssize_t avail = sk->sk_rcvbuf - atomic_read(&sk->sk_rmem_alloc);
1174:		int expected_skbs, skb_overhead;
1175:	
1176:		if (avail <= 0) {
1177:			l2cap_chan_rx_avail(chan, 0);
1178:			return;
1179:		}
1180:	
1181:		if (!chan->mps) {
1182:			l2cap_chan_rx_avail(chan, -1);
1183:			return;
1184:		}
1185:	
1186:		/* Correct available memory by estimated sk_buff overhead.
1187:		 * This is significant due to small transfer sizes. However, accept
1188:		 * at least one full packet if receive space is non-zero.
1189:		 */
1190:		expected_skbs = DIV_ROUND_UP(avail, chan->mps);
1191:		skb_overhead = expected_skbs * sizeof(struct sk_buff);
1192:		if (skb_overhead < avail)
1193:			l2cap_chan_rx_avail(chan, avail - skb_overhead);
1194:		else
1195:			l2cap_chan_rx_avail(chan, -1);
1196:	}
1197:	
1198:	static int l2cap_sock_recvmsg(struct socket *sock, struct msghdr *msg,
1199:				      size_t len, int flags)
]

106/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 73292
							output: 40
							thoughts: 64
						

Thoughts:
Here's my summary, as the expert:

**Investigating a Potential L2CAP Channel Lock Contention**

Okay, so I'm looking at `l2cap_sock_sendmsg` and it's calling `l2cap_chan_lock(chan)`. That's standard for protecting the channel during transmission, makes sense. But then, my internal alarm bells are going off. I've seen this before... `l2cap_chan_del` is *also* called with that same `l2cap_chan_lock(chan)` held. Hmm, that's a red flag. Potential for a nasty deadlock if we're not careful about the lock acquisition order or the conditions under which these functions are called. We could have a channel being deleted while it's in the middle of a send. I need to dig deeper. I'm going to shift my focus and check out `l2cap_conn_del` next. I need to understand the relationship between these functions, specifically how they handle channel deletion versus active transmission. This could be a race condition waiting to happen.



107/2 2026/06/01 19:29 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:1797 LineCount:20]

Results:
map[Contents:1797:		/* Kill channels */
1798:		list_for_each_entry_safe(chan, l, &conn->chan_l, list) {
1799:			l2cap_chan_hold(chan);
1800:			l2cap_chan_lock(chan);
1801:	
1802:			l2cap_chan_del(chan, err);
1803:	
1804:			chan->ops->close(chan);
1805:	
1806:			l2cap_chan_unlock(chan);
1807:			l2cap_chan_put(chan);
1808:		}
1809:	
1810:		hci_chan_del(conn->hchan);
1811:		conn->hchan = NULL;
1812:	
1813:		hcon->l2cap_data = NULL;
1814:		mutex_unlock(&conn->lock);
1815:		l2cap_conn_put(conn);
1816:	}
]

108/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 73920
							output: 38
							thoughts: 167
						

Thoughts:
**Analyzing L2CAP Channel Deletion and Transmission**

Okay, so `l2cap_conn_del` *definitely* holds `l2cap_chan_lock(chan)`. That means `l2cap_chan_send` and `l2cap_chan_del` are essentially mutually exclusive operations on the channel. If `l2cap_chan_send` is currently executing, `l2cap_chan_del` will be forced to wait for that lock to be released, which makes sense from a concurrency perspective.

Now, if `l2cap_chan_del` runs first, it's going to set `chan->conn = NULL` and change `chan->state = BT_CLOSED`. Then, when `l2cap_chan_send` *finally* gets its turn, it should correctly return `-ENOTCONN` because the channel is, effectively, defunct. Seems like a solid design, preventing race conditions.

But... hang on a minute. Doesn't `bnep_session` bypass `l2cap_sock_sendmsg`? That's the crux of this. My understanding is that the BNEP implementation doesn't use the standard L2CAP socket send path. I need to confirm that. Let's dig into `bnep_tx_frame` and see what's actually happening at the packet transmission level. I need to be sure that it is handling the possibility of a closed channel properly.



109/2 2026/06/01 19:29 tool read-file
0m Args:
map[File:net/bluetooth/bnep/core.c FirstLine:420 LineCount:50]

Results:
map[Contents: 420:	static int bnep_tx_frame(struct bnep_session *s, struct sk_buff *skb)
 421:	{
 422:		struct ethhdr *eh = (void *) skb->data;
 423:		struct socket *sock = s->sock;
 424:		struct kvec iv[3];
 425:		int len = 0, il = 0;
 426:		u8 type = 0;
 427:	
 428:		BT_DBG("skb %p dev %p type %u", skb, skb->dev, skb->pkt_type);
 429:	
 430:		if (!skb->dev) {
 431:			/* Control frame sent by us */
 432:			goto send;
 433:		}
 434:	
 435:		iv[il++] = (struct kvec) { &type, 1 };
 436:		len++;
 437:	
 438:		if (compress_src && ether_addr_equal(eh->h_dest, s->eh.h_source))
 439:			type |= 0x01;
 440:	
 441:		if (compress_dst && ether_addr_equal(eh->h_source, s->eh.h_dest))
 442:			type |= 0x02;
 443:	
 444:		if (type)
 445:			skb_pull(skb, ETH_ALEN * 2);
 446:	
 447:		type = __bnep_tx_types[type];
 448:		switch (type) {
 449:		case BNEP_COMPRESSED_SRC_ONLY:
 450:			iv[il++] = (struct kvec) { eh->h_source, ETH_ALEN };
 451:			len += ETH_ALEN;
 452:			break;
 453:	
 454:		case BNEP_COMPRESSED_DST_ONLY:
 455:			iv[il++] = (struct kvec) { eh->h_dest, ETH_ALEN };
 456:			len += ETH_ALEN;
 457:			break;
 458:		}
 459:	
 460:	send:
 461:		iv[il++] = (struct kvec) { skb->data, skb->len };
 462:		len += skb->len;
 463:	
 464:		/* FIXME: linearize skb */
 465:		{
 466:			len = kernel_sendmsg(sock, &s->msg, iv, il, len);
 467:		}
 468:		kfree_skb(skb);
 469:	
]

110/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 75203
							output: 34
							thoughts: 1042
						

Thoughts:
**Analyzing a Potential Race Condition in Bluetooth Stack**

Okay, let me break this down. It seems I've stumbled upon a potential race condition in the Bluetooth stack, specifically within the BNEP module and its interaction with L2CAP and HCI device management.

My initial observation is that `bnep_tx_frame` eventually calls `l2cap_sock_sendmsg` which involves acquiring a lock: `l2cap_chan_lock(chan)`. This is standard, ensuring mutual exclusion with operations that could modify the channel's state.

The key is that `hci_unregister_dev`, which essentially shuts down the Bluetooth device, calls a cascade of functions ultimately leading to `l2cap_conn_del`. This function *also* tries to acquire `l2cap_chan_lock(chan)`. Since this lock is already potentially held by `l2cap_sock_sendmsg`, `hci_unregister_dev` could block, waiting for the transmission to complete. This seems fine, on the surface, since `l2cap_sock_sendmsg` will finish *before* `hci_unregister_dev` continues.

However, after `l2cap_sock_sendmsg` completes, it *schedules* a work item (`hdev->tx_work`) to `hdev->workqueue`. This is where it starts to get interesting. My initial thought was: the workqueue is still valid because `hci_release_dev`, which destroys the workqueue, hasn't been called yet.

But then, the logging showed a warning about the workqueue being in a destroying or draining state:

`workqueue: cannot queue %ps on wq %s`

This means something is destroying the workqueue while I'm trying to add work to it, which is obviously a problem. *Who's* doing the destroying? It's `hci_release_dev`, which gets called when the reference count (`hdev` refcount) of the HCI device drops to zero. `hci_unregister_dev` calls `hci_dev_put(hdev)`, which decreases the refcount.

Now I need to understand how the refcount is managed. Specifically, is the BNEP socket itself holding a reference to `hdev`? If the socket has a reference to the `hdev`, then the refcount is greater than zero and the workqueue destruction will not occur prematurely.

I remember `l2cap_chan_add` calls `hci_conn_hold(conn->hcon)`. In my case, since `bnep_add_connection` is called after the channel is created, `l2cap_chan` holds a reference to the connection (`hcon`). The connection (`hcon`) holds a reference to the HCI device (`hdev`). So, the refcount should be > 0.

However, there's `hci_conn_del`. I have to consider this function. Specifically, `hci_conn_del` calls `hci_conn_cleanup`, which in turn calls `hci_dev_put(hdev)`.  `hci_conn_del` is called within the device teardown process, `hci_conn_hash_flush`, which is called from `hci_dev_do_close` which is called from `hci_unregister_dev`. Therefore, device unregisteration can decrease the `hdev` refcount, which is bad.

There is another path through `l2cap_conn_del` within device teardown that also calls `l2cap_chan_del`. This path calls `hci_conn_drop`. I need to figure out what `hci_conn_drop` does. Does it call `hci_conn_del` or just decrement a refcount? This has the potential to prematurely destroy the workqueue.

So, I need to check how `hci_conn_drop` works to determine if the `hdev` refcount can drop to 0 prematurely. If so, I have a clear race: a BNEP transmission is scheduled, and before it can run, the device is unregistered, destroying the workqueue before the BNEP work item can execute, which is very bad.



111/2 2026/06/01 19:29 tool grepper
0m Args:
map[Expression:hci_conn_drop PathPrefix:net/bluetooth/hci_conn.c]

Results:
map[Output:net/bluetooth/hci_conn.c=71=void hci_connect_le_scan_cleanup(struct hci_conn *conn, u8 status)
--
net/bluetooth/hci_conn.c-94-	if (params->conn) {
net/bluetooth/hci_conn.c:95:		hci_conn_drop(params->conn);
net/bluetooth/hci_conn.c-96-		hci_conn_put(params->conn);
--
net/bluetooth/hci_conn.c=1128=static void hci_conn_unlink(struct hci_conn *conn)
--
net/bluetooth/hci_conn.c-1161-
net/bluetooth/hci_conn.c:1162:	hci_conn_drop(conn->parent);
net/bluetooth/hci_conn.c-1163-	hci_conn_put(conn->parent);
--
net/bluetooth/hci_conn.c=1756=struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-1772-		if (IS_ERR(sco)) {
net/bluetooth/hci_conn.c:1773:			hci_conn_drop(acl);
net/bluetooth/hci_conn.c-1774-			return sco;
--
net/bluetooth/hci_conn.c-1779-	if (!link) {
net/bluetooth/hci_conn.c:1780:		hci_conn_drop(acl);
net/bluetooth/hci_conn.c:1781:		hci_conn_drop(sco);
net/bluetooth/hci_conn.c-1782-		return ERR_PTR(-ENOLINK);
--
net/bluetooth/hci_conn.c=1962=struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-2018-	if (!hci_le_set_cig_params(cis, qos)) {
net/bluetooth/hci_conn.c:2019:		hci_conn_drop(cis);
net/bluetooth/hci_conn.c-2020-		return ERR_PTR(-EINVAL);
--
net/bluetooth/hci_conn.c=2214=struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst, __u8 sid,
--
net/bluetooth/hci_conn.c-2261-		link = hci_conn_link(parent, conn);
net/bluetooth/hci_conn.c:2262:		hci_conn_drop(conn);
net/bluetooth/hci_conn.c-2263-		if (!link)
--
net/bluetooth/hci_conn.c=2298=struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-2341-	if (err < 0) {
net/bluetooth/hci_conn.c:2342:		hci_conn_drop(conn);
net/bluetooth/hci_conn.c-2343-		return ERR_PTR(err);
--
net/bluetooth/hci_conn.c=2349=struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
--
net/bluetooth/hci_conn.c-2378-	if (IS_ERR(cis)) {
net/bluetooth/hci_conn.c:2379:		hci_conn_drop(le);
net/bluetooth/hci_conn.c-2380-		return cis;
--
net/bluetooth/hci_conn.c-2383-	link = hci_conn_link(le, cis);
net/bluetooth/hci_conn.c:2384:	hci_conn_drop(cis);
net/bluetooth/hci_conn.c-2385-	if (!link) {
net/bluetooth/hci_conn.c:2386:		hci_conn_drop(le);
net/bluetooth/hci_conn.c-2387-		return ERR_PTR(-ENOLINK);
]

112/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 78238
							output: 36
							thoughts: 13
						

Thoughts:
Here's my attempt at summarizing the thought process, tailored for an expert audience:

**Analyzing the `hci_conn_drop` Definition**

Okay, so I'm diving into the `hci_conn_drop` definition. My initial thought process is to quickly get a grasp of its scope and purpose. I'm already anticipating it's related to handling connection teardowns at the HCI level, obviously, but I need to understand the specifics of how it's implemented. I'm immediately looking for key aspects: Is this a synchronous or asynchronous operation? What resources are being freed or released by this function? Are there any associated callbacks or events triggered after connection dropping? I'll be focused on identifying any potential race conditions or locking mechanisms that are in play, as these are critical areas for ensuring robust and reliable Bluetooth implementations. I'm also considering the implications on other related data structures and whether appropriate synchronization is being used when concurrently dropping multiple connections. I'm on the lookout for anything that strikes me as odd or unconventional.



113/2 2026/06/01 19:29 tool grepper
0m Args:
map[Expression:hci_conn_drop PathPrefix:include/net/bluetooth/hci_core.h]

Results:
map[Output:include/net/bluetooth/hci_core.h=1637=static inline void hci_sockcm_init(struct sockcm_cookie *sockc, struct sock *sk)
--
include/net/bluetooth/hci_core.h-1653- *
include/net/bluetooth/hci_core.h:1654: * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
include/net/bluetooth/hci_core.h-1655- * how long the underlying connection is held. So every channel that runs on the
--
include/net/bluetooth/hci_core.h=1676=static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
--
include/net/bluetooth/hci_core.h-1685-
include/net/bluetooth/hci_core.h:1686:static inline void hci_conn_drop(struct hci_conn *conn)
include/net/bluetooth/hci_core.h-1687-{
--
include/net/bluetooth/hci_core.h=2183=static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
--
include/net/bluetooth/hci_core.h-2192-		hci_connect_cfm(conn, status);
include/net/bluetooth/hci_core.h:2193:		hci_conn_drop(conn);
include/net/bluetooth/hci_core.h-2194-		return;
]

114/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 78883
							output: 40
							thoughts: 11
						

Thoughts:
Okay, here's my interpretation of that thought process, assuming I'm an expert in this field, presented as a first-person summary:

**Analyzing the Significance of `hci_conn_drop`**

Alright, the instruction is to read `hci_conn_drop`. Immediately, my mind kicks into gear. My initial thought isn't just to *read* it, but to *analyze* its significance within the broader HCI (Human-Computer Interaction) or low-level communication context. I'm already anticipating what to look for: potential error handling strategies, how connections are gracefully terminated, and impact on system stability. I'm going to be looking at what's dropped, why it's dropped and what happens as a result. I'll expect to see this function playing a crucial role in connection management, likely invoked when either the host or device disconnects, or if there's a serious transmission error. I'm thinking about the implications for upper-layer protocols – how will this function influence higher-level communication and application behavior? This should be interesting.



115/2 2026/06/01 19:29 tool read-file
0m Args:
map[File:include/net/bluetooth/hci_core.h FirstLine:1686 LineCount:50]

Results:
map[Contents:1686:	static inline void hci_conn_drop(struct hci_conn *conn)
1687:	{
1688:		BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1689:	
1690:		if (atomic_dec_and_test(&conn->refcnt)) {
1691:			unsigned long timeo;
1692:	
1693:			switch (conn->type) {
1694:			case ACL_LINK:
1695:			case LE_LINK:
1696:				cancel_delayed_work(&conn->idle_work);
1697:				if (conn->state == BT_CONNECTED) {
1698:					timeo = conn->disc_timeout;
1699:					if (!conn->out)
1700:						timeo *= 2;
1701:				} else {
1702:					timeo = 0;
1703:				}
1704:				break;
1705:	
1706:			default:
1707:				timeo = 0;
1708:				break;
1709:			}
1710:	
1711:			cancel_delayed_work(&conn->disc_work);
1712:			queue_delayed_work(conn->hdev->workqueue,
1713:					   &conn->disc_work, timeo);
1714:		}
1715:	}
1716:	
1717:	/* ----- HCI Devices ----- */
1718:	static inline void hci_dev_put(struct hci_dev *d)
1719:	{
1720:		BT_DBG("%s orig refcnt %d", d->name,
1721:		       kref_read(&d->dev.kobj.kref));
1722:	
1723:		put_device(&d->dev);
1724:	}
1725:	
1726:	static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1727:	{
1728:		BT_DBG("%s orig refcnt %d", d->name,
1729:		       kref_read(&d->dev.kobj.kref));
1730:	
1731:		get_device(&d->dev);
1732:		return d;
1733:	}
1734:	
1735:	#define hci_dev_lock(d)		mutex_lock(&d->lock)
]

116/2 2026/06/01 19:29 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 79854
							output: 36
							thoughts: 643
						

Thoughts:
**Bluetooth Connection Teardown: A Deep Dive**

Okay, so let me break this down. It starts with `hci_conn_drop`, which queues `conn->disc_work` (which is actually `hci_conn_timeout`) onto the device's workqueue. Now, the key thing I noticed immediately is that `hci_conn_drop` *doesn't* free the connection (`conn`) right away. It just schedules it for later. `hci_conn_timeout` is where the connection gets aborted through `hci_abort_conn`, but the process isn't complete yet.

The interesting part is that `hci_conn_del` is also called from `hci_conn_hash_flush`. `hci_conn_del` then calls `hci_conn_cleanup(conn)`, which in turn calls `hci_dev_put(hdev)`. So, the connection is removed from the hash, cleaned up, and the device reference count is adjusted when `hci_conn_del` is called. The question then becomes: does `hci_conn_del` cancel the scheduled work? And yes, it does, via `disable_delayed_work_sync(&conn->disc_work)`. So, the scheduled `disc_work` is effectively cancelled before the cleanup happens.

Now, let's keep going. `hci_conn_del` calls `l2cap_conn_del`, which is interesting because that can call `hci_conn_drop` recursively through `l2cap_chan_del`. It appears `l2cap_chan_del` will call `hci_conn_drop(conn->hcon)`. This means that `hci_conn_drop` can be called even when `hci_conn_del` is running! `hci_conn_drop` decrements the refcount. If the refcount reaches zero, it *again* queues `disc_work`. But, `hci_conn_del` is already running! So if `hci_conn_drop` queues `disc_work` and `hci_conn_del` runs, it will cancel it. Specifically, `disable_delayed_work_sync(&conn->disc_work)` gets called *before* `hci_conn_cleanup(conn)`.

So, the next thing I need to investigate is the relationship between `hci_conn_del` and L2CAP. I noted that `l2cap_conn_del` is called from `hci_conn_cleanup(conn)`. The important thing to consider here is that `hci_conn_hash_flush` calls `hci_conn_del(conn)`. `hci_conn_del` calls `hci_conn_cleanup(conn)`, which in turn calls `hci_chan_list_flush(conn)`. The question then becomes, does `hci_chan_list_flush` call `l2cap_conn_del`? That's the next place I need to dig in to get a full picture.



117/2 2026/06/01 19:30 tool grepper
0m Args:
map[Expression:hci_chan_list_flush PathPrefix:net/bluetooth/hci_conn.c]

Results:
map[Output:net/bluetooth/hci_conn.c=140=static void hci_conn_cleanup(struct hci_conn *conn)
--
net/bluetooth/hci_conn.c-149-
net/bluetooth/hci_conn.c:150:	hci_chan_list_flush(conn);
net/bluetooth/hci_conn.c-151-
--
net/bluetooth/hci_conn.c=2803=void hci_chan_del(struct hci_chan *chan)
--
net/bluetooth/hci_conn.c-2822-
net/bluetooth/hci_conn.c:2823:void hci_chan_list_flush(struct hci_conn *conn)
net/bluetooth/hci_conn.c-2824-{
]

118/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 81369
							output: 38
							thoughts: 13
						

Thoughts:
Okay, here's my interpretation of that thought process, assuming I'm deeply familiar with embedded systems and HCI protocols:

**Decoding the HCI Channel Flush Function**

Alright, the next step is to dive into `hci_chan_list_flush`. Given my experience, I'm already anticipating what this probably entails. "Flush" screams memory management, likely within the Bluetooth HCI (Host Controller Interface) layer. I'm guessing this function deals with cleaning up, releasing, or resetting data associated with HCI channels. It could be triggered by a controller reset, a disconnection event, or perhaps even a deliberate channel shutdown.

My immediate questions are: What *kind* of channels? Are we talking logical links, ACL connections, SCO links? And what's the underlying data structure? Is it a linked list, an array, a bitfield, or something more complex that tracks these channels? I'll be looking for clues in the function's name and arguments, hoping for hints about whether this is a general cleanup or something specific like discarding pending packets.

I'll be paying close attention to any locking mechanisms involved. Concurrent access to channel lists is a notorious source of bugs in embedded systems, so I need to understand if there are mutexes, semaphores, or atomic operations protecting the channel data. This is crucial for avoiding race conditions. Also, I'll be keen to see if any cleanup involves sending HCI commands to the controller, like "Flush Buffer" or commands related to connection termination. Understanding the interaction between the host and controller is fundamental for understanding what this function is doing. Let's dig in and see what the code reveals!



119/2 2026/06/01 19:30 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:2823 LineCount:50]

Results:
map[Contents:2823:	void hci_chan_list_flush(struct hci_conn *conn)
2824:	{
2825:		struct hci_chan *chan, *n;
2826:	
2827:		BT_DBG("hcon %p", conn);
2828:	
2829:		list_for_each_entry_safe(chan, n, &conn->chan_list, list)
2830:			hci_chan_del(chan);
2831:	}
2832:	
2833:	static struct hci_chan *__hci_chan_lookup_handle(struct hci_conn *hcon,
2834:							 __u16 handle)
2835:	{
2836:		struct hci_chan *hchan;
2837:	
2838:		list_for_each_entry(hchan, &hcon->chan_list, list) {
2839:			if (hchan->handle == handle)
2840:				return hchan;
2841:		}
2842:	
2843:		return NULL;
2844:	}
2845:	
2846:	struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle)
2847:	{
2848:		struct hci_conn_hash *h = &hdev->conn_hash;
2849:		struct hci_conn *hcon;
2850:		struct hci_chan *hchan = NULL;
2851:	
2852:		rcu_read_lock();
2853:	
2854:		list_for_each_entry_rcu(hcon, &h->list, list) {
2855:			hchan = __hci_chan_lookup_handle(hcon, handle);
2856:			if (hchan)
2857:				break;
2858:		}
2859:	
2860:		rcu_read_unlock();
2861:	
2862:		return hchan;
2863:	}
2864:	
2865:	u32 hci_conn_get_phy(struct hci_conn *conn)
2866:	{
2867:		u32 phys = 0;
2868:	
2869:		/* BLUETOOTH CORE SPECIFICATION Version 5.2 | Vol 2, Part B page 471:
2870:		 * Table 6.2: Packets defined for synchronous, asynchronous, and
2871:		 * CPB logical transport types.
2872:		 */
]

120/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 82478
							output: 38
							thoughts: 901
						

Thoughts:
**Analyzing the Bluetooth HCI Connection Closure Sequence**

Okay, let's break this down. My initial concern was about the order of operations when closing Bluetooth HCI connections, specifically focusing on how channels and connections are cleaned up during a device closure. My first thought process took me through how `hci_chan_list_flush` ultimately handles channel deletion through `hci_chan_del`. I tried to figure out if `hci_chan_del` then calls `l2cap_conn_del`.

Then I realized that `l2cap_conn_del` is actually invoked from `l2cap_disconn_cfm`, and the path of the disconnection is: `hci_conn_hash_flush` -> `hci_disconn_cfm` -> `l2cap_disconn_cfm` -> `l2cap_conn_del`. So `l2cap_conn_del` gets called *before* `hci_conn_del`! That's an important sequencing observation that has significant implications.

So I wanted to verify that by tracing `hci_conn_hash_flush`: I could see that `hci_disconn_cfm` is invoked, which leads to `l2cap_disconn_cfm` which then calls `l2cap_conn_del`.

Then, `l2cap_chan_del` is called and calls `hci_conn_drop`. This is important, because this decrements `refcnt`. If the `refcnt` goes to zero, the code calls `queue_delayed_work` on the device's workqueue (`conn->hdev->workqueue`). This is something I definitely need to keep in mind, because this is where a race condition *could* happen, potentially with the workqueue being destroyed.

Okay, now let's think about this: `hci_conn_hash_flush` is called by `hci_dev_close_sync`, which in turn is called by `hci_dev_do_close`, which is called by `hci_unregister_dev`. My intuition said, at this point, the workqueue isn't destroyed yet. In other words, `queue_delayed_work` will succeed. This means that when the delayed work *is* enqueued, `hci_conn_del` gets called to cleanup, and calls `disable_delayed_work_sync(&conn->disc_work)`. So the delayed work is cancelled. Then `hci_conn_cleanup` calls `hci_dev_put`. My first thought was that `hci_release_dev` is called if this `hci_dev_put` was the last reference.

However, `hci_unregister_dev` still holds a reference because it calls `hci_dev_put(hdev)` at the very end. So `hci_release_dev` is *not* called during `hci_conn_hash_flush`. That means that the workqueue is still valid.

However, if `hdev->workqueue` is not destroyed, why is a warning triggered in `hci_send_acl` that says "workqueue: cannot queue ... on wq"? The warning comes with a `__WQ_DESTROYING` or `__WQ_DRAINING` flag. `__WQ_DESTROYING` is set in `destroy_workqueue`, and `__WQ_DRAINING` is set in `drain_workqueue`. Wait a second! I remember: `hci_dev_close_sync` *does* call `drain_workqueue(hdev->workqueue)`! So that's the reason why the warning is generated in `hci_send_acl`.



121/2 2026/06/01 19:30 tool read-file
0m Args:
map[File:net/bluetooth/hci_sync.c FirstLine:5344 LineCount:50]

Results:
map[Contents:5344:	
5345:			cancel_delayed_work_sync(&hdev->rpa_expired);
5346:	
5347:			list_for_each_entry(adv_instance, &hdev->adv_instances, list)
5348:				cancel_delayed_work_sync(&adv_instance->rpa_expired_cb);
5349:		}
5350:	
5351:		/* Avoid potential lockdep warnings from the *_flush() calls by
5352:		 * ensuring the workqueue is empty up front.
5353:		 */
5354:		drain_workqueue(hdev->workqueue);
5355:	
5356:		hci_dev_lock(hdev);
5357:	
5358:		hci_discovery_set_state(hdev, DISCOVERY_STOPPED);
5359:	
5360:		auto_off = hci_dev_test_and_clear_flag(hdev, HCI_AUTO_OFF);
5361:	
5362:		if (!auto_off && !hci_dev_test_flag(hdev, HCI_USER_CHANNEL) &&
5363:		    hci_dev_test_flag(hdev, HCI_MGMT))
5364:			__mgmt_power_off(hdev);
5365:	
5366:		hci_inquiry_cache_flush(hdev);
5367:		hci_pend_le_actions_clear(hdev);
5368:		hci_conn_hash_flush(hdev);
5369:		/* Prevent data races on hdev->smp_data or hdev->smp_bredr_data */
5370:		smp_unregister(hdev);
5371:		hci_dev_unlock(hdev);
5372:	
5373:		hci_sock_dev_event(hdev, HCI_DEV_DOWN);
5374:	
5375:		if (!hci_dev_test_flag(hdev, HCI_USER_CHANNEL)) {
5376:			aosp_do_close(hdev);
5377:			msft_do_close(hdev);
5378:		}
5379:	
5380:		if (hdev->flush)
5381:			hdev->flush(hdev);
5382:	
5383:		/* Reset device */
5384:		skb_queue_purge(&hdev->cmd_q);
5385:		atomic_set(&hdev->cmd_cnt, 1);
5386:		if (hci_test_quirk(hdev, HCI_QUIRK_RESET_ON_CLOSE) &&
5387:		    !auto_off && !hci_dev_test_flag(hdev, HCI_UNCONFIGURED)) {
5388:			set_bit(HCI_INIT, &hdev->flags);
5389:			hci_reset_sync(hdev);
5390:			clear_bit(HCI_INIT, &hdev->flags);
5391:		}
5392:	
5393:		/* flush cmd  work */
]

122/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 85022
							output: 35
							thoughts: 164
						

Thoughts:
**Analyzing the Bluetooth HCI Disconnect Path**

Okay, so I'm digging into the Bluetooth HCI disconnection sequence, and I've just hit a crucial point. Line 5354, it's calling `drain_workqueue(hdev->workqueue)`. Hmm, and immediately after, at line 5368, we have `hci_conn_hash_flush(hdev)`.  My immediate reaction is to map out how these interact. So `drain_workqueue` must be setting `__WQ_DRAINING` on that workqueue, `hdev->workqueue`.  That makes sense.

But hold on, this has implications. `drain_workqueue` is designed to be a blocking call, isn't it? It waits for all the currently executing work items to complete. And it *also* prevents any new work from getting queued. And I remember now, when `__WQ_DRAINING` is set, `queue_work` is designed to generate a warning, and likely return false (or true without actually enqueuing the work). Right, so no new work is added after this line. Okay, time to check `__queue_work`.



123/2 2026/06/01 19:30 tool read-file
0m Args:
map[File:kernel/workqueue.c FirstLine:2296 LineCount:20]

Results:
map[Contents:2296:		if (unlikely(wq->flags & (__WQ_DESTROYING | __WQ_DRAINING) &&
2297:			     WARN_ONCE(!is_chained_work(wq), "workqueue: cannot queue %ps on wq %s\n",
2298:				       work->func, wq->name))) {
2299:			return;
2300:		}
2301:		rcu_read_lock();
2302:	retry:
2303:		/* pwq which will be used unless @work is executing elsewhere */
2304:		if (req_cpu == WORK_CPU_UNBOUND) {
2305:			if (wq->flags & WQ_UNBOUND)
2306:				cpu = wq_select_unbound_cpu(raw_smp_processor_id());
2307:			else
2308:				cpu = raw_smp_processor_id();
2309:		}
2310:	
2311:		pwq = rcu_dereference(*per_cpu_ptr(wq->cpu_pwq, cpu));
2312:		pool = pwq->pool;
2313:	
2314:		/*
2315:		 * If @work was previously on a different pool, it might still be
]

124/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 85823
							output: 40
							thoughts: 515
						

Thoughts:
**Analyzing a Workqueue Warning in the Bluetooth Stack**

Okay, so here's what's happening. `__queue_work` is returning early without actually queuing the work, specifically because `__WQ_DRAINING` is set, and this isn't a "chained" work item. This, as the code suggests, is causing `queue_work` to fail and, in turn, trigger a `WARN_ONCE`. The warning stems from a race condition, triggered by a concurrent execution of `bnep_session` trying to transmit a frame.

Specifically, `bnep_session` calls `bnep_tx_frame`, which ripples down through the stack to `kernel_sendmsg`, `l2cap_sock_sendmsg`, `l2cap_chan_send`, `hci_send_acl`, and finally ends up calling `queue_work` with `hdev->tx_work`. The problem is that `hci_dev_close_sync` has already been called, leading to `drain_workqueue` being invoked on `hdev->workqueue`. So, `__WQ_DRAINING` is set, causing the failure and the warning when `bnep_session` tries to send a frame.

The warning itself, based on the `WARN_ONCE`, is the standard kernel warning. Now, is this a security vulnerability? Not directly. It's a warning, not a crash or memory corruption. If `queue_work` fails, `hdev->tx_work` simply isn't executed. The frame is still queued in `chan->tx_q` in `l2cap_chan_send`, but `tx_work` isn't scheduled to send the data to the controller.

Wait, why doesn't this cause a problem? The device is being closed anyway, so the connection will be dropped by `hci_conn_hash_flush`. That will delete the connection and purge the queues. But... hang on a minute. `l2cap_chan_send` *does* add the `skb` to `chan->tx_q`.

```c
		skb_queue_splice_tail_init(&seg_queue, &chan->tx_q);
		l2cap_le_flowctl_send(chan);
```

For BNEP, it's usually `L2CAP_MODE_BASIC`. Let me quickly check the implementation details for `l2cap_chan_send` when dealing with `L2CAP_MODE_BASIC`. Let's confirm that this is indeed safe under `L2CAP_MODE_BASIC`.



125/2 2026/06/01 19:30 tool read-file
0m Args:
map[File:net/bluetooth/l2cap_core.c FirstLine:2609 LineCount:50]

Results:
map[Contents:2609:			err = len;
2610:	
2611:			break;
2612:	
2613:		case L2CAP_MODE_BASIC:
2614:			/* Check outgoing MTU */
2615:			if (len > chan->omtu)
2616:				return -EMSGSIZE;
2617:	
2618:			/* Create a basic PDU */
2619:			skb = l2cap_create_basic_pdu(chan, msg, len);
2620:			if (IS_ERR(skb))
2621:				return PTR_ERR(skb);
2622:	
2623:			l2cap_tx_timestamp(skb, sockc, len);
2624:	
2625:			l2cap_do_send(chan, skb);
2626:			err = len;
2627:			break;
2628:	
2629:		case L2CAP_MODE_ERTM:
2630:		case L2CAP_MODE_STREAMING:
2631:			/* Check outgoing MTU */
2632:			if (len > chan->omtu) {
2633:				err = -EMSGSIZE;
2634:				break;
2635:			}
2636:	
2637:			__skb_queue_head_init(&seg_queue);
2638:	
2639:			/* Do segmentation before calling in to the state machine,
2640:			 * since it's possible to block while waiting for memory
2641:			 * allocation.
2642:			 */
2643:			err = l2cap_segment_sdu(chan, &seg_queue, msg, len);
2644:	
2645:			if (err)
2646:				break;
2647:	
2648:			if (chan->mode == L2CAP_MODE_ERTM) {
2649:				/* TODO: ERTM mode timestamping */
2650:				l2cap_tx(chan, NULL, &seg_queue, L2CAP_EV_DATA_REQUEST);
2651:			} else {
2652:				l2cap_tx_timestamp_seg(&seg_queue, sockc, len);
2653:				l2cap_streaming_send(chan, &seg_queue);
2654:			}
2655:	
2656:			err = len;
2657:	
2658:			/* If the skbs were not queued for sending, they'll still be in
]

126/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 87637
							output: 38
							thoughts: 198
						

Thoughts:
**My Analysis of the L2CAP Data Transmission Path**

Okay, so I'm tracing the data flow for `L2CAP_MODE_BASIC`. The key function here is `l2cap_do_send(chan, skb)`. That's the entry point, which makes sense. From there, `l2cap_do_send` hands off the packet to `hci_send_acl(chan->conn->hchan, skb, flags)`. Right, so we're moving from L2CAP down to the HCI layer. Then, `hci_send_acl` calls `hci_queue_acl(chan, &chan->data_q, skb, flags)`. Ah, I see, so it's queuing the ACL packet, specifically for this channel. And then the final step is `queue_work(hdev->workqueue, &hdev->tx_work)`. That seems to be the trigger to actually transmit it later, asynchronously, via a worker queue.

Now, a critical point: what happens on failure? If `queue_work` fails – which is always a possibility in a system like this – the `skb` *remains* in `chan->data_q`. I need to remember that. It's essentially a pending packet.

Wait a second. What happens on channel deletion? Does the channel purge the queue? I *think* so, but I need to confirm that `chan->data_q` is purged when the channel is deleted.

Let me just make sure I have this straight...`hci_queue_acl` is actually the one that queues the `skb` into `chan->data_q`. It's storing the packet against the channel, which makes a lot of sense, keeping the queue per channel and not device wide. And this `chan` here refers to the `struct hci_chan`, which I always have to remind myself.

Okay, I'm going to have to check what happens in `hci_queue_acl` again.



127/2 2026/06/01 19:30 tool read-file
0m Args:
map[File:net/bluetooth/hci_core.c FirstLine:3221 LineCount:50]

Results:
map[Contents:3221:	static void hci_queue_acl(struct hci_chan *chan, struct sk_buff_head *queue,
3222:				  struct sk_buff *skb, __u16 flags)
3223:	{
3224:		struct hci_conn *conn = chan->conn;
3225:		struct hci_dev *hdev = conn->hdev;
3226:		struct sk_buff *list;
3227:	
3228:		skb->len = skb_headlen(skb);
3229:		skb->data_len = 0;
3230:	
3231:		hci_skb_pkt_type(skb) = HCI_ACLDATA_PKT;
3232:	
3233:		hci_add_acl_hdr(skb, conn->handle, flags);
3234:	
3235:		list = skb_shinfo(skb)->frag_list;
3236:		if (!list) {
3237:			/* Non fragmented */
3238:			BT_DBG("%s nonfrag skb %p len %d", hdev->name, skb, skb->len);
3239:	
3240:			skb_queue_tail(queue, skb);
3241:		} else {
3242:			/* Fragmented */
3243:			BT_DBG("%s frag %p len %d", hdev->name, skb, skb->len);
3244:	
3245:			skb_shinfo(skb)->frag_list = NULL;
3246:	
3247:			/* Queue all fragments atomically. We need to use spin_lock_bh
3248:			 * here because of 6LoWPAN links, as there this function is
3249:			 * called from softirq and using normal spin lock could cause
3250:			 * deadlocks.
3251:			 */
3252:			spin_lock_bh(&queue->lock);
3253:	
3254:			__skb_queue_tail(queue, skb);
3255:	
3256:			flags &= ~ACL_START;
3257:			flags |= ACL_CONT;
3258:			do {
3259:				skb = list; list = list->next;
3260:	
3261:				hci_skb_pkt_type(skb) = HCI_ACLDATA_PKT;
3262:				hci_add_acl_hdr(skb, conn->handle, flags);
3263:	
3264:				BT_DBG("%s frag %p len %d", hdev->name, skb, skb->len);
3265:	
3266:				__skb_queue_tail(queue, skb);
3267:			} while (list);
3268:	
3269:			spin_unlock_bh(&queue->lock);
3270:		}
]

128/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 89104
							output: 38
							thoughts: 59
						

Thoughts:
Here's my take on the process, based on those details:

**Understanding HCI Queue Management**

Okay, so I'm tracking this `hci_queue_acl` function. It seems pretty straightforward: essentially, it's the mechanism for adding a specific System Communication Buffer (`skb`) to the `data_q` queue, which is nested within a `hci_chan` structure. Specifically, this `chan->data_q` is the `data_q` member of a `struct hci_chan`.  Got it.  It's the way these data packets for ACL connections are being managed.

The crucial part here is the implied lifecycle management. When a channel is marked for deletion via `hci_chan_del`, the code makes sure that `chan->data_q` is thoroughly purged. This signals that any pending ACL packets are discarded when the channel is closed. That's good, keeps things tidy and prevents unexpected data transfers after a connection is terminated. That purge call is essential to ensure a clean shutdown.



129/2 2026/06/01 19:30 tool read-file
0m Args:
map[File:net/bluetooth/hci_conn.c FirstLine:2803 LineCount:20]

Results:
map[Contents:2803:	void hci_chan_del(struct hci_chan *chan)
2804:	{
2805:		struct hci_conn *conn = chan->conn;
2806:		struct hci_dev *hdev = conn->hdev;
2807:	
2808:		BT_DBG("%s hcon %p chan %p", hdev->name, conn, chan);
2809:	
2810:		list_del_rcu(&chan->list);
2811:	
2812:		synchronize_rcu();
2813:	
2814:		/* Prevent new hci_chan's to be created for this hci_conn */
2815:		set_bit(HCI_CONN_DROP, &conn->flags);
2816:	
2817:		hci_conn_put(conn);
2818:	
2819:		skb_queue_purge(&chan->data_q);
2820:		kfree(chan);
2821:	}
2822:	
]

130/2 2026/06/01 19:30 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 89709
							output: 37
							thoughts: 202
						

Thoughts:
**Analyzing the Potential Impact of a Workqueue Warning**

Okay, so I've confirmed that `skb_queue_purge(&chan->data_q)` *is* indeed called. Good. That eliminates the immediate concern of a memory leak. This warning message is specifically about `queue_work` being called on a draining workqueue. The question now is, is this something that could be exploited?

No, realistically, it's just a warning. In a standard production build, a warning like this won't halt the kernel unless someone has explicitly enabled `panic_on_warn`, which is very unlikely. The kernel will just print a message and continue execution. The work itself isn't queued, the `skb` is in `data_q`, and then the entire `data_q` is purged during the channel's deletion. So, absolutely, no resource leak, no memory corruption, and definitely no deadlock. We're safe on those fronts.

Hold on... *`bnep_session`* is a kthread, and it *can* be created by an unprivileged user? That's a potential vector to investigate. Let me just quickly confirm that the `BNEPCONNADD` operation requires `CAP_NET_ADMIN`. That would be the critical link to assess for a more in-depth security analysis.



131/2 2026/06/01 19:31 tool read-file
0m Args:
map[File:net/bluetooth/bnep/sock.c FirstLine:66 LineCount:10]

Results:
map[Contents:  66:		case BNEPCONNADD:
  67:			if (!capable(CAP_NET_ADMIN))
  68:				return -EPERM;
  69:	
  70:			if (copy_from_user(&ca, argp, sizeof(ca)))
  71:				return -EFAULT;
  72:	
  73:			nsock = sockfd_lookup(ca.sock, &err);
  74:			if (!nsock)
  75:				return err;
]

132/2 2026/06/01 19:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 90371
							output: 26
							thoughts: 420
						

Thoughts:
**Analyzing the Vulnerability and its Triggers**

Okay, so `BNEPCONNADD` needs `CAP_NET_ADMIN`. Right, but is it checking with `capable()` or `ns_capable()`? Ah, it's `capable(CAP_NET_ADMIN)`, meaning it's the *global* capability check. This means that, by default, it's not accessible from an unprivileged user namespace because `capable()` looks at the init user namespace. Let me quickly double-check that distinction between `capable()` and `ns_capable()` again. Yes, that's right; `capable(CAP_NET_ADMIN)` only cares about whether the current process has that capability in the initial user namespace, and thus it's not going to be accessible from unprivileged processes or user namespaces.

Now, is there *any* other path to trigger `bnep_session`? Nope, it seems like `bnep_session` creation only occurs within `bnep_add_connection`, which is exclusively called via the `BNEPCONNADD` ioctl. So, that's a dead end if we can't get that capability.

But wait, what about triggering the warning itself – the `queue_work` on a draining workqueue – independently of the BNEP connection? Can we do this with a *normal* L2CAP socket? The warning suggests it. If we have a regular L2CAP socket and then send some data while the HCI device is being unregistered, perhaps? Let's confirm: can we even send data on a regular L2CAP socket without `CAP_NET_ADMIN`? Yes! Anyone can make an L2CAP socket and send data.

Okay, let's try this. We create an L2CAP socket. Connect it to a remote device or a fake device like `vhci`. Then, start sending data in a tight loop. Concurrently, unregister the HCI device by, for example, closing the `vhci` control socket. Can an unprivileged user even open the `vhci` control socket? Let's quickly verify the permissions on the `vhci` side.



133/2 2026/06/01 19:31 tool grepper
0m Args:
map[Expression:vhci PathPrefix:drivers/bluetooth/]

Results:
map[Output:drivers/bluetooth/Kconfig=380=config BT_HCIVHCI
--
drivers/bluetooth/Kconfig-387-	  Say Y here to compile support for virtual HCI devices into the
drivers/bluetooth/Kconfig:388:	  kernel or say M to compile it as module (hci_vhci).
drivers/bluetooth/Kconfig-389-
--
drivers/bluetooth/Makefile-5-
drivers/bluetooth/Makefile:6:obj-$(CONFIG_BT_HCIVHCI)	+= hci_vhci.o
drivers/bluetooth/Makefile-7-obj-$(CONFIG_BT_HCIUART)	+= hci_uart.o
--
drivers/bluetooth/hci_vhci.c=32=static bool amp;
drivers/bluetooth/hci_vhci.c-33-
drivers/bluetooth/hci_vhci.c:34:struct vhci_data {
drivers/bluetooth/hci_vhci.c-35-	struct hci_dev *hdev;
--
drivers/bluetooth/hci_vhci.c-50-
drivers/bluetooth/hci_vhci.c:51:static int vhci_open_dev(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-52-{
--
drivers/bluetooth/hci_vhci.c-55-
drivers/bluetooth/hci_vhci.c:56:static int vhci_close_dev(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-57-{
drivers/bluetooth/hci_vhci.c:58:	struct vhci_data *data = hci_get_drvdata(hdev);
drivers/bluetooth/hci_vhci.c-59-
--
drivers/bluetooth/hci_vhci.c-64-
drivers/bluetooth/hci_vhci.c:65:static int vhci_flush(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-66-{
drivers/bluetooth/hci_vhci.c:67:	struct vhci_data *data = hci_get_drvdata(hdev);
drivers/bluetooth/hci_vhci.c-68-
--
drivers/bluetooth/hci_vhci.c-73-
drivers/bluetooth/hci_vhci.c:74:static int vhci_send_frame(struct hci_dev *hdev, struct sk_buff *skb)
drivers/bluetooth/hci_vhci.c-75-{
drivers/bluetooth/hci_vhci.c:76:	struct vhci_data *data = hci_get_drvdata(hdev);
drivers/bluetooth/hci_vhci.c-77-
--
drivers/bluetooth/hci_vhci.c-86-
drivers/bluetooth/hci_vhci.c:87:static int vhci_get_data_path_id(struct hci_dev *hdev, u8 *data_path_id)
drivers/bluetooth/hci_vhci.c-88-{
--
drivers/bluetooth/hci_vhci.c-92-
drivers/bluetooth/hci_vhci.c:93:static int vhci_get_codec_config_data(struct hci_dev *hdev, __u8 type,
drivers/bluetooth/hci_vhci.c-94-				      struct bt_codec *codec, __u8 *vnd_len,
--
drivers/bluetooth/hci_vhci.c-104-
drivers/bluetooth/hci_vhci.c:105:static bool vhci_wakeup(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-106-{
drivers/bluetooth/hci_vhci.c:107:	struct vhci_data *data = hci_get_drvdata(hdev);
drivers/bluetooth/hci_vhci.c-108-
--
drivers/bluetooth/hci_vhci.c=112=static ssize_t force_suspend_read(struct file *file, char __user *user_buf,
--
drivers/bluetooth/hci_vhci.c-114-{
drivers/bluetooth/hci_vhci.c:115:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-116-	char buf[3];
--
drivers/bluetooth/hci_vhci.c-123-
drivers/bluetooth/hci_vhci.c:124:static void vhci_suspend_work(struct work_struct *work)
drivers/bluetooth/hci_vhci.c-125-{
drivers/bluetooth/hci_vhci.c:126:	struct vhci_data *data = container_of(work, struct vhci_data,
drivers/bluetooth/hci_vhci.c-127-					      suspend_work);
--
drivers/bluetooth/hci_vhci.c=135=static ssize_t force_suspend_write(struct file *file,
--
drivers/bluetooth/hci_vhci.c-138-{
drivers/bluetooth/hci_vhci.c:139:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-140-	bool enable;
--
drivers/bluetooth/hci_vhci.c=164=static ssize_t force_wakeup_read(struct file *file, char __user *user_buf,
--
drivers/bluetooth/hci_vhci.c-166-{
drivers/bluetooth/hci_vhci.c:167:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-168-	char buf[3];
--
drivers/bluetooth/hci_vhci.c=176=static ssize_t force_wakeup_write(struct file *file,
--
drivers/bluetooth/hci_vhci.c-179-{
drivers/bluetooth/hci_vhci.c:180:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-181-	bool enable;
--
drivers/bluetooth/hci_vhci.c=203=static int msft_opcode_set(void *data, u64 val)
drivers/bluetooth/hci_vhci.c-204-{
drivers/bluetooth/hci_vhci.c:205:	struct vhci_data *vhci = data;
drivers/bluetooth/hci_vhci.c-206-
--
drivers/bluetooth/hci_vhci.c-209-
drivers/bluetooth/hci_vhci.c:210:	if (vhci->msft_opcode)
drivers/bluetooth/hci_vhci.c-211-		return -EALREADY;
drivers/bluetooth/hci_vhci.c-212-
drivers/bluetooth/hci_vhci.c:213:	vhci->msft_opcode = val;
drivers/bluetooth/hci_vhci.c-214-
--
drivers/bluetooth/hci_vhci.c=218=static int msft_opcode_get(void *data, u64 *val)
drivers/bluetooth/hci_vhci.c-219-{
drivers/bluetooth/hci_vhci.c:220:	struct vhci_data *vhci = data;
drivers/bluetooth/hci_vhci.c-221-
drivers/bluetooth/hci_vhci.c:222:	*val = vhci->msft_opcode;
drivers/bluetooth/hci_vhci.c-223-
--
drivers/bluetooth/hci_vhci.c=230=static ssize_t aosp_capable_read(struct file *file, char __user *user_buf,
--
drivers/bluetooth/hci_vhci.c-232-{
drivers/bluetooth/hci_vhci.c:233:	struct vhci_data *vhci = file->private_data;
drivers/bluetooth/hci_vhci.c-234-	char buf[3];
drivers/bluetooth/hci_vhci.c-235-
drivers/bluetooth/hci_vhci.c:236:	buf[0] = vhci->aosp_capable ? 'Y' : 'N';
drivers/bluetooth/hci_vhci.c-237-	buf[1] = '\n';
--
drivers/bluetooth/hci_vhci.c=242=static ssize_t aosp_capable_write(struct file *file,
--
drivers/bluetooth/hci_vhci.c-245-{
drivers/bluetooth/hci_vhci.c:246:	struct vhci_data *vhci = file->private_data;
drivers/bluetooth/hci_vhci.c-247-	bool enable;
--
drivers/bluetooth/hci_vhci.c-256-
drivers/bluetooth/hci_vhci.c:257:	if (vhci->aosp_capable)
drivers/bluetooth/hci_vhci.c-258-		return -EALREADY;
drivers/bluetooth/hci_vhci.c-259-
drivers/bluetooth/hci_vhci.c:260:	vhci->aosp_capable = enable;
drivers/bluetooth/hci_vhci.c-261-
--
drivers/bluetooth/hci_vhci.c=265=static const struct file_operations aosp_capable_fops = {
--
drivers/bluetooth/hci_vhci.c-271-
drivers/bluetooth/hci_vhci.c:272:static int vhci_setup(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-273-{
drivers/bluetooth/hci_vhci.c:274:	struct vhci_data *vhci = hci_get_drvdata(hdev);
drivers/bluetooth/hci_vhci.c-275-
drivers/bluetooth/hci_vhci.c:276:	if (vhci->msft_opcode)
drivers/bluetooth/hci_vhci.c:277:		hci_set_msft_opcode(hdev, vhci->msft_opcode);
drivers/bluetooth/hci_vhci.c-278-
drivers/bluetooth/hci_vhci.c:279:	if (vhci->aosp_capable)
drivers/bluetooth/hci_vhci.c-280-		hci_set_aosp_capable(hdev);
--
drivers/bluetooth/hci_vhci.c-284-
drivers/bluetooth/hci_vhci.c:285:static void vhci_coredump(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-286-{
--
drivers/bluetooth/hci_vhci.c-289-
drivers/bluetooth/hci_vhci.c:290:static void vhci_coredump_hdr(struct hci_dev *hdev, struct sk_buff *skb)
drivers/bluetooth/hci_vhci.c-291-{
--
drivers/bluetooth/hci_vhci.c-293-
drivers/bluetooth/hci_vhci.c:294:	buf = "Controller Name: vhci_ctrl\n";
drivers/bluetooth/hci_vhci.c-295-	skb_put_data(skb, buf, strlen(buf));
drivers/bluetooth/hci_vhci.c-296-
drivers/bluetooth/hci_vhci.c:297:	buf = "Firmware Version: vhci_fw\n";
drivers/bluetooth/hci_vhci.c-298-	skb_put_data(skb, buf, strlen(buf));
drivers/bluetooth/hci_vhci.c-299-
drivers/bluetooth/hci_vhci.c:300:	buf = "Driver: vhci_drv\n";
drivers/bluetooth/hci_vhci.c-301-	skb_put_data(skb, buf, strlen(buf));
drivers/bluetooth/hci_vhci.c-302-
drivers/bluetooth/hci_vhci.c:303:	buf = "Vendor: vhci\n";
drivers/bluetooth/hci_vhci.c-304-	skb_put_data(skb, buf, strlen(buf));
--
drivers/bluetooth/hci_vhci.c=323=static ssize_t force_devcd_write(struct file *file, const char __user *user_buf,
--
drivers/bluetooth/hci_vhci.c-325-{
drivers/bluetooth/hci_vhci.c:326:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-327-	struct hci_dev *hdev = data->hdev;
--
drivers/bluetooth/hci_vhci.c-345-
drivers/bluetooth/hci_vhci.c:346:	hci_devcd_register(hdev, vhci_coredump, vhci_coredump_hdr, NULL);
drivers/bluetooth/hci_vhci.c-347-
--
drivers/bluetooth/hci_vhci.c=378=static const struct file_operations force_devcoredump_fops = {
--
drivers/bluetooth/hci_vhci.c-382-
drivers/bluetooth/hci_vhci.c:383:static void vhci_debugfs_init(struct vhci_data *data)
drivers/bluetooth/hci_vhci.c-384-{
--
drivers/bluetooth/hci_vhci.c-404-
drivers/bluetooth/hci_vhci.c:405:static int __vhci_create_device(struct vhci_data *data, __u8 opcode)
drivers/bluetooth/hci_vhci.c-406-{
--
drivers/bluetooth/hci_vhci.c-431-
drivers/bluetooth/hci_vhci.c:432:	hdev->open  = vhci_open_dev;
drivers/bluetooth/hci_vhci.c:433:	hdev->close = vhci_close_dev;
drivers/bluetooth/hci_vhci.c:434:	hdev->flush = vhci_flush;
drivers/bluetooth/hci_vhci.c:435:	hdev->send  = vhci_send_frame;
drivers/bluetooth/hci_vhci.c:436:	hdev->get_data_path_id = vhci_get_data_path_id;
drivers/bluetooth/hci_vhci.c:437:	hdev->get_codec_config_data = vhci_get_codec_config_data;
drivers/bluetooth/hci_vhci.c:438:	hdev->wakeup = vhci_wakeup;
drivers/bluetooth/hci_vhci.c:439:	hdev->setup = vhci_setup;
drivers/bluetooth/hci_vhci.c-440-	hci_set_quirk(hdev, HCI_QUIRK_NON_PERSISTENT_SETUP);
--
drivers/bluetooth/hci_vhci.c-459-	if (!IS_ERR_OR_NULL(hdev->debugfs))
drivers/bluetooth/hci_vhci.c:460:		vhci_debugfs_init(data);
drivers/bluetooth/hci_vhci.c-461-
--
drivers/bluetooth/hci_vhci.c-473-
drivers/bluetooth/hci_vhci.c:474:static int vhci_create_device(struct vhci_data *data, __u8 opcode)
drivers/bluetooth/hci_vhci.c-475-{
--
drivers/bluetooth/hci_vhci.c-478-	mutex_lock(&data->open_mutex);
drivers/bluetooth/hci_vhci.c:479:	err = __vhci_create_device(data, opcode);
drivers/bluetooth/hci_vhci.c-480-	mutex_unlock(&data->open_mutex);
--
drivers/bluetooth/hci_vhci.c-484-
drivers/bluetooth/hci_vhci.c:485:static inline ssize_t vhci_get_user(struct vhci_data *data,
drivers/bluetooth/hci_vhci.c-486-				    struct iov_iter *from)
--
drivers/bluetooth/hci_vhci.c-535-
drivers/bluetooth/hci_vhci.c:536:		ret = vhci_create_device(data, opcode);
drivers/bluetooth/hci_vhci.c-537-		break;
--
drivers/bluetooth/hci_vhci.c-546-
drivers/bluetooth/hci_vhci.c:547:static inline ssize_t vhci_put_user(struct vhci_data *data,
drivers/bluetooth/hci_vhci.c-548-				    struct sk_buff *skb,
--
drivers/bluetooth/hci_vhci.c-578-
drivers/bluetooth/hci_vhci.c:579:static ssize_t vhci_read(struct file *file,
drivers/bluetooth/hci_vhci.c-580-			 char __user *buf, size_t count, loff_t *pos)
drivers/bluetooth/hci_vhci.c-581-{
drivers/bluetooth/hci_vhci.c:582:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-583-	struct sk_buff *skb;
--
drivers/bluetooth/hci_vhci.c-588-		if (skb) {
drivers/bluetooth/hci_vhci.c:589:			ret = vhci_put_user(data, skb, buf, count);
drivers/bluetooth/hci_vhci.c-590-			if (ret < 0)
--
drivers/bluetooth/hci_vhci.c-610-
drivers/bluetooth/hci_vhci.c:611:static ssize_t vhci_write(struct kiocb *iocb, struct iov_iter *from)
drivers/bluetooth/hci_vhci.c-612-{
drivers/bluetooth/hci_vhci.c-613-	struct file *file = iocb->ki_filp;
drivers/bluetooth/hci_vhci.c:614:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-615-
drivers/bluetooth/hci_vhci.c:616:	return vhci_get_user(data, from);
drivers/bluetooth/hci_vhci.c-617-}
drivers/bluetooth/hci_vhci.c-618-
drivers/bluetooth/hci_vhci.c:619:static __poll_t vhci_poll(struct file *file, poll_table *wait)
drivers/bluetooth/hci_vhci.c-620-{
drivers/bluetooth/hci_vhci.c:621:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-622-
--
drivers/bluetooth/hci_vhci.c-630-
drivers/bluetooth/hci_vhci.c:631:static void vhci_open_timeout(struct work_struct *work)
drivers/bluetooth/hci_vhci.c-632-{
drivers/bluetooth/hci_vhci.c:633:	struct vhci_data *data = container_of(work, struct vhci_data,
drivers/bluetooth/hci_vhci.c-634-					      open_timeout.work);
drivers/bluetooth/hci_vhci.c-635-
drivers/bluetooth/hci_vhci.c:636:	vhci_create_device(data, 0x00);
drivers/bluetooth/hci_vhci.c-637-}
drivers/bluetooth/hci_vhci.c-638-
drivers/bluetooth/hci_vhci.c:639:static int vhci_open(struct inode *inode, struct file *file)
drivers/bluetooth/hci_vhci.c-640-{
drivers/bluetooth/hci_vhci.c:641:	struct vhci_data *data;
drivers/bluetooth/hci_vhci.c-642-
--
drivers/bluetooth/hci_vhci.c-650-	mutex_init(&data->open_mutex);
drivers/bluetooth/hci_vhci.c:651:	INIT_DELAYED_WORK(&data->open_timeout, vhci_open_timeout);
drivers/bluetooth/hci_vhci.c:652:	INIT_WORK(&data->suspend_work, vhci_suspend_work);
drivers/bluetooth/hci_vhci.c-653-
--
drivers/bluetooth/hci_vhci.c-661-
drivers/bluetooth/hci_vhci.c:662:static void vhci_debugfs_remove(struct hci_dev *hdev)
drivers/bluetooth/hci_vhci.c-663-{
--
drivers/bluetooth/hci_vhci.c-676-
drivers/bluetooth/hci_vhci.c:677:static int vhci_release(struct inode *inode, struct file *file)
drivers/bluetooth/hci_vhci.c-678-{
drivers/bluetooth/hci_vhci.c:679:	struct vhci_data *data = file->private_data;
drivers/bluetooth/hci_vhci.c-680-	struct hci_dev *hdev;
--
drivers/bluetooth/hci_vhci.c-688-		if (!IS_ERR_OR_NULL(hdev->debugfs))
drivers/bluetooth/hci_vhci.c:689:			vhci_debugfs_remove(hdev);
drivers/bluetooth/hci_vhci.c-690-		hci_unregister_dev(hdev);
--
drivers/bluetooth/hci_vhci.c-700-
drivers/bluetooth/hci_vhci.c:701:static const struct file_operations vhci_fops = {
drivers/bluetooth/hci_vhci.c-702-	.owner		= THIS_MODULE,
drivers/bluetooth/hci_vhci.c:703:	.read		= vhci_read,
drivers/bluetooth/hci_vhci.c:704:	.write_iter	= vhci_write,
drivers/bluetooth/hci_vhci.c:705:	.poll		= vhci_poll,
drivers/bluetooth/hci_vhci.c:706:	.open		= vhci_open,
drivers/bluetooth/hci_vhci.c:707:	.release	= vhci_release,
drivers/bluetooth/hci_vhci.c-708-};
drivers/bluetooth/hci_vhci.c-709-
drivers/bluetooth/hci_vhci.c:710:static struct miscdevice vhci_miscdev = {
drivers/bluetooth/hci_vhci.c:711:	.name	= "vhci",
drivers/bluetooth/hci_vhci.c:712:	.fops	= &vhci_fops,
drivers/bluetooth/hci_vhci.c-713-	.minor	= VHCI_MINOR,
drivers/bluetooth/hci_vhci.c-714-};
drivers/bluetooth/hci_vhci.c:715:module_misc_device(vhci_miscdev);
drivers/bluetooth/hci_vhci.c-716-
--
drivers/bluetooth/hci_vhci.c=723=MODULE_LICENSE("GPL");
drivers/bluetooth/hci_vhci.c:724:MODULE_ALIAS("devname:vhci");
drivers/bluetooth/hci_vhci.c-725-MODULE_ALIAS_MISCDEV(VHCI_MINOR);
]

134/2 2026/06/01 19:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 97176
							output: 66
							thoughts: 3095
						

Thoughts:
**Analysis of the Bluetooth HCI Warning in the Kernel**

Okay, so here's the deal: I've been digging into this Bluetooth HCI warning, `/dev/vhci`, and I've got a handle on it. The situation boils down to a warning message when queueing work on a workqueue that's in the process of draining. It seems that this stems from a race condition between sending data over an L2CAP socket and the Bluetooth device being unplugged.

Basically, an unprivileged user can create an L2CAP socket and start sending data. Now, if they yank out a USB Bluetooth dongle while this is happening, the `hci_unregister_dev` function gets called. This function initiates the draining of the workqueue. If, at the same time, the `sendmsg` syscall is also running on the L2CAP socket, trying to queue work, it can hit the draining workqueue and trigger that kernel warning.

The key thing is that even though the warning is triggered, it's not exploitable. The `queue_work` function checks for the `__WQ_DRAINING` flag and returns without queueing if it’s set, preventing memory corruption or a crash. So, it's a false positive, I mean a benign warning, not a security hole. The kernel handles the situation safely by not queueing the work, the skb is later freed, and all is well. No use-after-free, no memory leak, nothing nasty. The only consequence is the noisy warning message in the kernel log.

Now, there's a bunch of stuff that *doesn't* apply. It's not a denial-of-service, it's not a VM guest trigger, it's not over the network. It requires local access and unplugging the device.

I looked at other potential issues, such as if `hci_release_dev` is called concurrently, but the lock structure assures that the race conditions can't lead to a use-after-free situation.

So, while the warning is accessible to unprivileged processes, it doesn't represent a security vulnerability.



135/2 2026/06/01 19:31 tool set-results
0m Args:
map[DenialOfService:false Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:true RemoteTrigger:false Unprivileged:true UserNamespace:true VMGuestTrigger:false VMHostTrigger:false]

Results:
map[DenialOfService:false Exploitable:false FilesystemTrigger:false NetworkTrigger:false PeripheralTrigger:true RemoteTrigger:false Unprivileged:true UserNamespace:true VMGuestTrigger:false VMHostTrigger:false]

136/2 2026/06/01 19:31 llm expert
0m Model:
gemini-3.1-pro-preview

Tokens:
							input: 100849
							output: 646
							thoughts: 491
						

Thoughts:
**Final Thoughts on the Bluetooth Bug**

Okay, the analysis is complete. Time to synthesize my understanding into a concise response.

This is a warning triggered in `__queue_work`. It's happening when something tries to queue work on a workqueue that's in the process of being drained. Specifically, `bnep_session`, or even a regular L2CAP socket using `sendmsg`, is attempting to transmit data. This leads to `hci_send_acl` getting called, which then tries to queue `hdev->tx_work` onto `hdev->workqueue`.

The tricky part is that at the same time, the Bluetooth device itself is being unregistered. This happens when a USB dongle is pulled out, or a virtual HCI device is destroyed. The unregistration process calls `hci_dev_do_close`, which in turn calls `hci_dev_close_sync`. Within `hci_dev_close_sync`, `drain_workqueue(hdev->workqueue)` is called, which sets the `__WQ_DRAINING` flag on the workqueue.

So, the issue arises when `queue_work` is called, sees the `__WQ_DRAINING` flag, triggers the `WARN_ONCE`, and gracefully returns without scheduling the work.

However, the key takeaway is that this is *not* a use-after-free or memory corruption issue. The `hdev` and its workqueue stick around because the L2CAP channel maintains a reference to the HCI connection (`hcon`), which in turn references `hdev`. That reference isn't dropped until the channel is deleted, and that deletion requires acquiring the `l2cap_chan_lock`. Since `sendmsg` holds that lock during execution, channel deletion (and thus reference dropping) is delayed until the `sendmsg` operation is complete. So, the workqueue is guaranteed to be there, even if it's draining.

The unqueued socket buffer (skb) is safely appended to the channel's `data_q`. It'll be cleaned up and freed when the channel is finally deleted by the unregistration process.

The upshot is this is just a noisy warning. It's not exploitable, it doesn't cause a crash, memory corruption, or resource leak. In a typical production environment (where `panic_on_warn` is disabled), it’s not a Denial of Service either. Unprivileged users can trigger this by simply sending data through a standard L2CAP socket while physically unplugging a Bluetooth USB dongle.

Okay, that's the whole picture. Let's make sure the report reflects this clear and concise understanding.



137/1 2026/06/01 19:32 action format-explanation
0m Results:
map[Explanation:Based on the analysis of the bug report and the kernel source code, here is the
assessment of the issue:

**Root Cause Analysis:**
The WARNING is triggered in `__queue_work` when attempting to queue a work item
on a workqueue that is currently in the process of being drained
(`__WQ_DRAINING` flag is set).
In the provided trace, a Bluetooth network encapsulation (`bnep_session`) or a
standard L2CAP socket is actively sending data. The transmission path goes
through `kernel_sendmsg` -> `l2cap_sock_sendmsg` -> `l2cap_chan_send` ->
`hci_send_acl`. Finally, `hci_send_acl` attempts to schedule the transmission by
calling `queue_work(hdev->workqueue, &hdev->tx_work)`.

Concurrently, the underlying Bluetooth device is being unregistered (for
example, a USB Bluetooth dongle is physically unplugged, or a `vhci` device is
destroyed). The unregistration path calls `hci_unregister_dev` ->
`hci_dev_do_close` -> `hci_dev_close_sync`. Inside `hci_dev_close_sync`, the
kernel calls `drain_workqueue(hdev->workqueue)` to ensure all pending works are
completed before tearing down the device state.

Because `sendmsg` holds the `l2cap_chan_lock`, the device teardown path (which
also needs this lock to destroy the L2CAP channel and drop the `hdev` reference)
is temporarily blocked. Thus, the `hdev` and its workqueue are guaranteed to
still be alive in memory. However, because `drain_workqueue` has already marked
the workqueue with `__WQ_DRAINING`, the concurrent `queue_work` call safely
catches this state, emits a `WARN_ONCE`, and aborts queueing the work.

**Security Impact:**
- **Exploitable:** **No.** There is no use-after-free, memory corruption, or
deadlock. The workqueue code safely rejects the work item. The socket buffer
(skb) that was supposed to be transmitted is safely appended to the channel's
`data_q` and will be properly purged and freed without memory leaks when the
channel teardown resumes.
- **Denial Of Service:** **No.** In production environments (where
`panic_on_warn` is disabled), this is just a noisy WARNING message in the kernel
log. The system will continue to operate normally.
- **Accessible From Unprivileged Processes / User Namespaces:** **Yes.** While
BNEP connections require `CAP_NET_ADMIN`, the exact same code path can be
reached by an unprivileged user creating a standard L2CAP socket
(`AF_BLUETOOTH`, `BTPROTO_L2CAP`), sending data in a loop, and concurrently
unplugging the Bluetooth USB dongle.
- **Peripheral Trigger:** **Yes.** Physically unplugging a USB Bluetooth adapter
while it is processing outgoing traffic is the primary hardware trigger for this
race condition.]

LLM Calls Summary:
Total Calls Total Tokens Avg Tokens Total Duration (Seconds) Avg Duration (Seconds)
Tool Calls Summary:
Total Calls Total Duration (Seconds) Avg Duration (Seconds)