1# SPDX-License-Identifier: GPL-2.0-only 2menu "Kernel hacking" 3 4menu "printk and dmesg options" 5 6config PRINTK_TIME 7 bool "Show timing information on printks" 8 depends on PRINTK 9 help 10 Selecting this option causes time stamps of the printk() 11 messages to be added to the output of the syslog() system 12 call and at the console. 13 14 The timestamp is always recorded internally, and exported 15 to /dev/kmsg. This flag just specifies if the timestamp should 16 be included, not that the timestamp is recorded. 17 18 The behavior is also controlled by the kernel command line 19 parameter printk.time=1. See Documentation/admin-guide/kernel-parameters.rst 20 21config PRINTK_CALLER 22 bool "Show caller information on printks" 23 depends on PRINTK 24 help 25 Selecting this option causes printk() to add a caller "thread id" (if 26 in task context) or a caller "processor id" (if not in task context) 27 to every message. 28 29 This option is intended for environments where multiple threads 30 concurrently call printk() for many times, for it is difficult to 31 interpret without knowing where these lines (or sometimes individual 32 line which was divided into multiple lines due to race) came from. 33 34 Since toggling after boot makes the code racy, currently there is 35 no option to enable/disable at the kernel command line parameter or 36 sysfs interface. 37 38config CONSOLE_LOGLEVEL_DEFAULT 39 int "Default console loglevel (1-15)" 40 range 1 15 41 default "7" 42 help 43 Default loglevel to determine what will be printed on the console. 44 45 Setting a default here is equivalent to passing in loglevel=<x> in 46 the kernel bootargs. loglevel=<x> continues to override whatever 47 value is specified here as well. 48 49 Note: This does not affect the log level of un-prefixed printk() 50 usage in the kernel. That is controlled by the MESSAGE_LOGLEVEL_DEFAULT 51 option. 52 53config CONSOLE_LOGLEVEL_QUIET 54 int "quiet console loglevel (1-15)" 55 range 1 15 56 default "4" 57 help 58 loglevel to use when "quiet" is passed on the kernel commandline. 59 60 When "quiet" is passed on the kernel commandline this loglevel 61 will be used as the loglevel. IOW passing "quiet" will be the 62 equivalent of passing "loglevel=<CONSOLE_LOGLEVEL_QUIET>" 63 64config MESSAGE_LOGLEVEL_DEFAULT 65 int "Default message log level (1-7)" 66 range 1 7 67 default "4" 68 help 69 Default log level for printk statements with no specified priority. 70 71 This was hard-coded to KERN_WARNING since at least 2.6.10 but folks 72 that are auditing their logs closely may want to set it to a lower 73 priority. 74 75 Note: This does not affect what message level gets printed on the console 76 by default. To change that, use loglevel=<x> in the kernel bootargs, 77 or pick a different CONSOLE_LOGLEVEL_DEFAULT configuration value. 78 79config BOOT_PRINTK_DELAY 80 bool "Delay each boot printk message by N milliseconds" 81 depends on DEBUG_KERNEL && PRINTK && GENERIC_CALIBRATE_DELAY 82 help 83 This build option allows you to read kernel boot messages 84 by inserting a short delay after each one. The delay is 85 specified in milliseconds on the kernel command line, 86 using "boot_delay=N". 87 88 It is likely that you would also need to use "lpj=M" to preset 89 the "loops per jiffie" value. 90 See a previous boot log for the "lpj" value to use for your 91 system, and then set "lpj=M" before setting "boot_delay=N". 92 NOTE: Using this option may adversely affect SMP systems. 93 I.e., processors other than the first one may not boot up. 94 BOOT_PRINTK_DELAY also may cause LOCKUP_DETECTOR to detect 95 what it believes to be lockup conditions. 96 97config DYNAMIC_DEBUG 98 bool "Enable dynamic printk() support" 99 default n 100 depends on PRINTK 101 depends on (DEBUG_FS || PROC_FS) 102 select DYNAMIC_DEBUG_CORE 103 help 104 105 Compiles debug level messages into the kernel, which would not 106 otherwise be available at runtime. These messages can then be 107 enabled/disabled based on various levels of scope - per source file, 108 function, module, format string, and line number. This mechanism 109 implicitly compiles in all pr_debug() and dev_dbg() calls, which 110 enlarges the kernel text size by about 2%. 111 112 If a source file is compiled with DEBUG flag set, any 113 pr_debug() calls in it are enabled by default, but can be 114 disabled at runtime as below. Note that DEBUG flag is 115 turned on by many CONFIG_*DEBUG* options. 116 117 Usage: 118 119 Dynamic debugging is controlled via the 'dynamic_debug/control' file, 120 which is contained in the 'debugfs' filesystem or procfs. 121 Thus, the debugfs or procfs filesystem must first be mounted before 122 making use of this feature. 123 We refer the control file as: <debugfs>/dynamic_debug/control. This 124 file contains a list of the debug statements that can be enabled. The 125 format for each line of the file is: 126 127 filename:lineno [module]function flags format 128 129 filename : source file of the debug statement 130 lineno : line number of the debug statement 131 module : module that contains the debug statement 132 function : function that contains the debug statement 133 flags : '=p' means the line is turned 'on' for printing 134 format : the format used for the debug statement 135 136 From a live system: 137 138 nullarbor:~ # cat <debugfs>/dynamic_debug/control 139 # filename:lineno [module]function flags format 140 fs/aio.c:222 [aio]__put_ioctx =_ "__put_ioctx:\040freeing\040%p\012" 141 fs/aio.c:248 [aio]ioctx_alloc =_ "ENOMEM:\040nr_events\040too\040high\012" 142 fs/aio.c:1770 [aio]sys_io_cancel =_ "calling\040cancel\012" 143 144 Example usage: 145 146 // enable the message at line 1603 of file svcsock.c 147 nullarbor:~ # echo -n 'file svcsock.c line 1603 +p' > 148 <debugfs>/dynamic_debug/control 149 150 // enable all the messages in file svcsock.c 151 nullarbor:~ # echo -n 'file svcsock.c +p' > 152 <debugfs>/dynamic_debug/control 153 154 // enable all the messages in the NFS server module 155 nullarbor:~ # echo -n 'module nfsd +p' > 156 <debugfs>/dynamic_debug/control 157 158 // enable all 12 messages in the function svc_process() 159 nullarbor:~ # echo -n 'func svc_process +p' > 160 <debugfs>/dynamic_debug/control 161 162 // disable all 12 messages in the function svc_process() 163 nullarbor:~ # echo -n 'func svc_process -p' > 164 <debugfs>/dynamic_debug/control 165 166 See Documentation/admin-guide/dynamic-debug-howto.rst for additional 167 information. 168 169config DYNAMIC_DEBUG_CORE 170 bool "Enable core function of dynamic debug support" 171 depends on PRINTK 172 depends on (DEBUG_FS || PROC_FS) 173 help 174 Enable core functional support of dynamic debug. It is useful 175 when you want to tie dynamic debug to your kernel modules with 176 DYNAMIC_DEBUG_MODULE defined for each of them, especially for 177 the case of embedded system where the kernel image size is 178 sensitive for people. 179 180config SYMBOLIC_ERRNAME 181 bool "Support symbolic error names in printf" 182 default y if PRINTK 183 help 184 If you say Y here, the kernel's printf implementation will 185 be able to print symbolic error names such as ENOSPC instead 186 of the number 28. It makes the kernel image slightly larger 187 (about 3KB), but can make the kernel logs easier to read. 188 189config DEBUG_BUGVERBOSE 190 bool "Verbose BUG() reporting (adds 70K)" if DEBUG_KERNEL && EXPERT 191 depends on BUG && (GENERIC_BUG || HAVE_DEBUG_BUGVERBOSE) 192 default y 193 help 194 Say Y here to make BUG() panics output the file name and line number 195 of the BUG call as well as the EIP and oops trace. This aids 196 debugging but costs about 70-100K of memory. 197 198endmenu # "printk and dmesg options" 199 200menu "Compile-time checks and compiler options" 201 202config DEBUG_INFO 203 bool "Compile the kernel with debug info" 204 depends on DEBUG_KERNEL && !COMPILE_TEST 205 help 206 If you say Y here the resulting kernel image will include 207 debugging info resulting in a larger kernel image. 208 This adds debug symbols to the kernel and modules (gcc -g), and 209 is needed if you intend to use kernel crashdump or binary object 210 tools like crash, kgdb, LKCD, gdb, etc on the kernel. 211 Say Y here only if you plan to debug the kernel. 212 213 If unsure, say N. 214 215if DEBUG_INFO 216 217config DEBUG_INFO_REDUCED 218 bool "Reduce debugging information" 219 help 220 If you say Y here gcc is instructed to generate less debugging 221 information for structure types. This means that tools that 222 need full debugging information (like kgdb or systemtap) won't 223 be happy. But if you merely need debugging information to 224 resolve line numbers there is no loss. Advantage is that 225 build directory object sizes shrink dramatically over a full 226 DEBUG_INFO build and compile times are reduced too. 227 Only works with newer gcc versions. 228 229config DEBUG_INFO_COMPRESSED 230 bool "Compressed debugging information" 231 depends on $(cc-option,-gz=zlib) 232 depends on $(ld-option,--compress-debug-sections=zlib) 233 help 234 Compress the debug information using zlib. Requires GCC 5.0+ or Clang 235 5.0+, binutils 2.26+, and zlib. 236 237 Users of dpkg-deb via scripts/package/builddeb may find an increase in 238 size of their debug .deb packages with this config set, due to the 239 debug info being compressed with zlib, then the object files being 240 recompressed with a different compression scheme. But this is still 241 preferable to setting $KDEB_COMPRESS to "none" which would be even 242 larger. 243 244config DEBUG_INFO_SPLIT 245 bool "Produce split debuginfo in .dwo files" 246 depends on $(cc-option,-gsplit-dwarf) 247 help 248 Generate debug info into separate .dwo files. This significantly 249 reduces the build directory size for builds with DEBUG_INFO, 250 because it stores the information only once on disk in .dwo 251 files instead of multiple times in object files and executables. 252 In addition the debug information is also compressed. 253 254 Requires recent gcc (4.7+) and recent gdb/binutils. 255 Any tool that packages or reads debug information would need 256 to know about the .dwo files and include them. 257 Incompatible with older versions of ccache. 258 259config DEBUG_INFO_DWARF4 260 bool "Generate dwarf4 debuginfo" 261 depends on $(cc-option,-gdwarf-4) 262 help 263 Generate dwarf4 debug info. This requires recent versions 264 of gcc and gdb. It makes the debug information larger. 265 But it significantly improves the success of resolving 266 variables in gdb on optimized code. 267 268config DEBUG_INFO_BTF 269 bool "Generate BTF typeinfo" 270 depends on !DEBUG_INFO_SPLIT && !DEBUG_INFO_REDUCED 271 depends on !GCC_PLUGIN_RANDSTRUCT || COMPILE_TEST 272 help 273 Generate deduplicated BTF type information from DWARF debug info. 274 Turning this on expects presence of pahole tool, which will convert 275 DWARF type info into equivalent deduplicated BTF type info. 276 277config GDB_SCRIPTS 278 bool "Provide GDB scripts for kernel debugging" 279 help 280 This creates the required links to GDB helper scripts in the 281 build directory. If you load vmlinux into gdb, the helper 282 scripts will be automatically imported by gdb as well, and 283 additional functions are available to analyze a Linux kernel 284 instance. See Documentation/dev-tools/gdb-kernel-debugging.rst 285 for further details. 286 287endif # DEBUG_INFO 288 289config ENABLE_MUST_CHECK 290 bool "Enable __must_check logic" 291 default y 292 help 293 Enable the __must_check logic in the kernel build. Disable this to 294 suppress the "warning: ignoring return value of 'foo', declared with 295 attribute warn_unused_result" messages. 296 297config FRAME_WARN 298 int "Warn for stack frames larger than" 299 range 0 8192 300 default 2048 if GCC_PLUGIN_LATENT_ENTROPY 301 default 2048 if PARISC 302 default 1536 if (!64BIT && XTENSA) 303 default 1280 if KASAN && !64BIT 304 default 1024 if !64BIT 305 default 2048 if 64BIT 306 help 307 Tell gcc to warn at build time for stack frames larger than this. 308 Setting this too low will cause a lot of warnings. 309 Setting it to 0 disables the warning. 310 311config STRIP_ASM_SYMS 312 bool "Strip assembler-generated symbols during link" 313 default n 314 help 315 Strip internal assembler-generated symbols during a link (symbols 316 that look like '.Lxxx') so they don't pollute the output of 317 get_wchan() and suchlike. 318 319config READABLE_ASM 320 bool "Generate readable assembler code" 321 depends on DEBUG_KERNEL 322 help 323 Disable some compiler optimizations that tend to generate human unreadable 324 assembler output. This may make the kernel slightly slower, but it helps 325 to keep kernel developers who have to stare a lot at assembler listings 326 sane. 327 328config HEADERS_INSTALL 329 bool "Install uapi headers to usr/include" 330 depends on !UML 331 help 332 This option will install uapi headers (headers exported to user-space) 333 into the usr/include directory for use during the kernel build. 334 This is unneeded for building the kernel itself, but needed for some 335 user-space program samples. It is also needed by some features such 336 as uapi header sanity checks. 337 338config DEBUG_SECTION_MISMATCH 339 bool "Enable full Section mismatch analysis" 340 help 341 The section mismatch analysis checks if there are illegal 342 references from one section to another section. 343 During linktime or runtime, some sections are dropped; 344 any use of code/data previously in these sections would 345 most likely result in an oops. 346 In the code, functions and variables are annotated with 347 __init,, etc. (see the full list in include/linux/init.h), 348 which results in the code/data being placed in specific sections. 349 The section mismatch analysis is always performed after a full 350 kernel build, and enabling this option causes the following 351 additional step to occur: 352 - Add the option -fno-inline-functions-called-once to gcc commands. 353 When inlining a function annotated with __init in a non-init 354 function, we would lose the section information and thus 355 the analysis would not catch the illegal reference. 356 This option tells gcc to inline less (but it does result in 357 a larger kernel). 358 359config SECTION_MISMATCH_WARN_ONLY 360 bool "Make section mismatch errors non-fatal" 361 default y 362 help 363 If you say N here, the build process will fail if there are any 364 section mismatch, instead of just throwing warnings. 365 366 If unsure, say Y. 367 368config DEBUG_FORCE_FUNCTION_ALIGN_32B 369 bool "Force all function address 32B aligned" if EXPERT 370 help 371 There are cases that a commit from one domain changes the function 372 address alignment of other domains, and cause magic performance 373 bump (regression or improvement). Enable this option will help to 374 verify if the bump is caused by function alignment changes, while 375 it will slightly increase the kernel size and affect icache usage. 376 377 It is mainly for debug and performance tuning use. 378 379# 380# Select this config option from the architecture Kconfig, if it 381# is preferred to always offer frame pointers as a config 382# option on the architecture (regardless of KERNEL_DEBUG): 383# 384config ARCH_WANT_FRAME_POINTERS 385 bool 386 387config FRAME_POINTER 388 bool "Compile the kernel with frame pointers" 389 depends on DEBUG_KERNEL && (M68K || UML || SUPERH) || ARCH_WANT_FRAME_POINTERS 390 default y if (DEBUG_INFO && UML) || ARCH_WANT_FRAME_POINTERS 391 help 392 If you say Y here the resulting kernel image will be slightly 393 larger and slower, but it gives very useful debugging information 394 in case of kernel bugs. (precise oopses/stacktraces/warnings) 395 396config STACK_VALIDATION 397 bool "Compile-time stack metadata validation" 398 depends on HAVE_STACK_VALIDATION 399 default n 400 help 401 Add compile-time checks to validate stack metadata, including frame 402 pointers (if CONFIG_FRAME_POINTER is enabled). This helps ensure 403 that runtime stack traces are more reliable. 404 405 This is also a prerequisite for generation of ORC unwind data, which 406 is needed for CONFIG_UNWINDER_ORC. 407 408 For more information, see 409 tools/objtool/Documentation/stack-validation.txt. 410 411config VMLINUX_VALIDATION 412 bool 413 depends on STACK_VALIDATION && DEBUG_ENTRY && !PARAVIRT 414 default y 415 416config DEBUG_FORCE_WEAK_PER_CPU 417 bool "Force weak per-cpu definitions" 418 depends on DEBUG_KERNEL 419 help 420 s390 and alpha require percpu variables in modules to be 421 defined weak to work around addressing range issue which 422 puts the following two restrictions on percpu variable 423 definitions. 424 425 1. percpu symbols must be unique whether static or not 426 2. percpu variables can't be defined inside a function 427 428 To ensure that generic code follows the above rules, this 429 option forces all percpu variables to be defined as weak. 430 431endmenu # "Compiler options" 432 433menu "Generic Kernel Debugging Instruments" 434 435config MAGIC_SYSRQ 436 bool "Magic SysRq key" 437 depends on !UML 438 help 439 If you say Y here, you will have some control over the system even 440 if the system crashes for example during kernel debugging (e.g., you 441 will be able to flush the buffer cache to disk, reboot the system 442 immediately or dump some status information). This is accomplished 443 by pressing various keys while holding SysRq (Alt+PrintScreen). It 444 also works on a serial console (on PC hardware at least), if you 445 send a BREAK and then within 5 seconds a command keypress. The 446 keys are documented in <file:Documentation/admin-guide/sysrq.rst>. 447 Don't say Y unless you really know what this hack does. 448 449config MAGIC_SYSRQ_DEFAULT_ENABLE 450 hex "Enable magic SysRq key functions by default" 451 depends on MAGIC_SYSRQ 452 default 0x1 453 help 454 Specifies which SysRq key functions are enabled by default. 455 This may be set to 1 or 0 to enable or disable them all, or 456 to a bitmask as described in Documentation/admin-guide/sysrq.rst. 457 458config MAGIC_SYSRQ_SERIAL 459 bool "Enable magic SysRq key over serial" 460 depends on MAGIC_SYSRQ 461 default y 462 help 463 Many embedded boards have a disconnected TTL level serial which can 464 generate some garbage that can lead to spurious false sysrq detects. 465 This option allows you to decide whether you want to enable the 466 magic SysRq key. 467 468config MAGIC_SYSRQ_SERIAL_SEQUENCE 469 string "Char sequence that enables magic SysRq over serial" 470 depends on MAGIC_SYSRQ_SERIAL 471 default "" 472 help 473 Specifies a sequence of characters that can follow BREAK to enable 474 SysRq on a serial console. 475 476 If unsure, leave an empty string and the option will not be enabled. 477 478config DEBUG_FS 479 bool "Debug Filesystem" 480 help 481 debugfs is a virtual file system that kernel developers use to put 482 debugging files into. Enable this option to be able to read and 483 write to these files. 484 485 For detailed documentation on the debugfs API, see 486 Documentation/filesystems/. 487 488 If unsure, say N. 489 490choice 491 prompt "Debugfs default access" 492 depends on DEBUG_FS 493 default DEBUG_FS_ALLOW_ALL 494 help 495 This selects the default access restrictions for debugfs. 496 It can be overridden with kernel command line option 497 debugfs=[on,no-mount,off]. The restrictions apply for API access 498 and filesystem registration. 499 500config DEBUG_FS_ALLOW_ALL 501 bool "Access normal" 502 help 503 No restrictions apply. Both API and filesystem registration 504 is on. This is the normal default operation. 505 506config DEBUG_FS_DISALLOW_MOUNT 507 bool "Do not register debugfs as filesystem" 508 help 509 The API is open but filesystem is not loaded. Clients can still do 510 their work and read with debug tools that do not need 511 debugfs filesystem. 512 513config DEBUG_FS_ALLOW_NONE 514 bool "No access" 515 help 516 Access is off. Clients get -PERM when trying to create nodes in 517 debugfs tree and debugfs is not registered as a filesystem. 518 Client can then back-off or continue without debugfs access. 519 520endchoice 521 522source "lib/Kconfig.kgdb" 523source "lib/Kconfig.ubsan" 524source "lib/Kconfig.kcsan" 525 526endmenu 527 528config DEBUG_KERNEL 529 bool "Kernel debugging" 530 help 531 Say Y here if you are developing drivers or trying to debug and 532 identify kernel problems. 533 534config DEBUG_MISC 535 bool "Miscellaneous debug code" 536 default DEBUG_KERNEL 537 depends on DEBUG_KERNEL 538 help 539 Say Y here if you need to enable miscellaneous debug code that should 540 be under a more specific debug option but isn't. 541 542 543menu "Memory Debugging" 544 545source "mm/Kconfig.debug" 546 547config DEBUG_OBJECTS 548 bool "Debug object operations" 549 depends on DEBUG_KERNEL 550 help 551 If you say Y here, additional code will be inserted into the 552 kernel to track the life time of various objects and validate 553 the operations on those objects. 554 555config DEBUG_OBJECTS_SELFTEST 556 bool "Debug objects selftest" 557 depends on DEBUG_OBJECTS 558 help 559 This enables the selftest of the object debug code. 560 561config DEBUG_OBJECTS_FREE 562 bool "Debug objects in freed memory" 563 depends on DEBUG_OBJECTS 564 help 565 This enables checks whether a k/v free operation frees an area 566 which contains an object which has not been deactivated 567 properly. This can make kmalloc/kfree-intensive workloads 568 much slower. 569 570config DEBUG_OBJECTS_TIMERS 571 bool "Debug timer objects" 572 depends on DEBUG_OBJECTS 573 help 574 If you say Y here, additional code will be inserted into the 575 timer routines to track the life time of timer objects and 576 validate the timer operations. 577 578config DEBUG_OBJECTS_WORK 579 bool "Debug work objects" 580 depends on DEBUG_OBJECTS 581 help 582 If you say Y here, additional code will be inserted into the 583 work queue routines to track the life time of work objects and 584 validate the work operations. 585 586config DEBUG_OBJECTS_RCU_HEAD 587 bool "Debug RCU callbacks objects" 588 depends on DEBUG_OBJECTS 589 help 590 Enable this to turn on debugging of RCU list heads (call_rcu() usage). 591 592config DEBUG_OBJECTS_PERCPU_COUNTER 593 bool "Debug percpu counter objects" 594 depends on DEBUG_OBJECTS 595 help 596 If you say Y here, additional code will be inserted into the 597 percpu counter routines to track the life time of percpu counter 598 objects and validate the percpu counter operations. 599 600config DEBUG_OBJECTS_ENABLE_DEFAULT 601 int "debug_objects bootup default value (0-1)" 602 range 0 1 603 default "1" 604 depends on DEBUG_OBJECTS 605 help 606 Debug objects boot parameter default value 607 608config DEBUG_SLAB 609 bool "Debug slab memory allocations" 610 depends on DEBUG_KERNEL && SLAB 611 help 612 Say Y here to have the kernel do limited verification on memory 613 allocation as well as poisoning memory on free to catch use of freed 614 memory. This can make kmalloc/kfree-intensive workloads much slower. 615 616config SLUB_DEBUG_ON 617 bool "SLUB debugging on by default" 618 depends on SLUB && SLUB_DEBUG 619 default n 620 help 621 Boot with debugging on by default. SLUB boots by default with 622 the runtime debug capabilities switched off. Enabling this is 623 equivalent to specifying the "slub_debug" parameter on boot. 624 There is no support for more fine grained debug control like 625 possible with slub_debug=xxx. SLUB debugging may be switched 626 off in a kernel built with CONFIG_SLUB_DEBUG_ON by specifying 627 "slub_debug=-". 628 629config SLUB_STATS 630 default n 631 bool "Enable SLUB performance statistics" 632 depends on SLUB && SYSFS 633 help 634 SLUB statistics are useful to debug SLUBs allocation behavior in 635 order find ways to optimize the allocator. This should never be 636 enabled for production use since keeping statistics slows down 637 the allocator by a few percentage points. The slabinfo command 638 supports the determination of the most active slabs to figure 639 out which slabs are relevant to a particular load. 640 Try running: slabinfo -DA 641 642config HAVE_DEBUG_KMEMLEAK 643 bool 644 645config DEBUG_KMEMLEAK 646 bool "Kernel memory leak detector" 647 depends on DEBUG_KERNEL && HAVE_DEBUG_KMEMLEAK 648 select DEBUG_FS 649 select STACKTRACE if STACKTRACE_SUPPORT 650 select KALLSYMS 651 select CRC32 652 help 653 Say Y here if you want to enable the memory leak 654 detector. The memory allocation/freeing is traced in a way 655 similar to the Boehm's conservative garbage collector, the 656 difference being that the orphan objects are not freed but 657 only shown in /sys/kernel/debug/kmemleak. Enabling this 658 feature will introduce an overhead to memory 659 allocations. See Documentation/dev-tools/kmemleak.rst for more 660 details. 661 662 Enabling DEBUG_SLAB or SLUB_DEBUG may increase the chances 663 of finding leaks due to the slab objects poisoning. 664 665 In order to access the kmemleak file, debugfs needs to be 666 mounted (usually at /sys/kernel/debug). 667 668config DEBUG_KMEMLEAK_MEM_POOL_SIZE 669 int "Kmemleak memory pool size" 670 depends on DEBUG_KMEMLEAK 671 range 200 1000000 672 default 16000 673 help 674 Kmemleak must track all the memory allocations to avoid 675 reporting false positives. Since memory may be allocated or 676 freed before kmemleak is fully initialised, use a static pool 677 of metadata objects to track such callbacks. After kmemleak is 678 fully initialised, this memory pool acts as an emergency one 679 if slab allocations fail. 680 681config DEBUG_KMEMLEAK_TEST 682 tristate "Simple test for the kernel memory leak detector" 683 depends on DEBUG_KMEMLEAK && m 684 help 685 This option enables a module that explicitly leaks memory. 686 687 If unsure, say N. 688 689config DEBUG_KMEMLEAK_DEFAULT_OFF 690 bool "Default kmemleak to off" 691 depends on DEBUG_KMEMLEAK 692 help 693 Say Y here to disable kmemleak by default. It can then be enabled 694 on the command line via kmemleak=on. 695 696config DEBUG_KMEMLEAK_AUTO_SCAN 697 bool "Enable kmemleak auto scan thread on boot up" 698 default y 699 depends on DEBUG_KMEMLEAK 700 help 701 Depending on the cpu, kmemleak scan may be cpu intensive and can 702 stall user tasks at times. This option enables/disables automatic 703 kmemleak scan at boot up. 704 705 Say N here to disable kmemleak auto scan thread to stop automatic 706 scanning. Disabling this option disables automatic reporting of 707 memory leaks. 708 709 If unsure, say Y. 710 711config DEBUG_STACK_USAGE 712 bool "Stack utilization instrumentation" 713 depends on DEBUG_KERNEL && !IA64 714 help 715 Enables the display of the minimum amount of free stack which each 716 task has ever had available in the sysrq-T and sysrq-P debug output. 717 718 This option will slow down process creation somewhat. 719 720config SCHED_STACK_END_CHECK 721 bool "Detect stack corruption on calls to schedule()" 722 depends on DEBUG_KERNEL 723 default n 724 help 725 This option checks for a stack overrun on calls to schedule(). 726 If the stack end location is found to be over written always panic as 727 the content of the corrupted region can no longer be trusted. 728 This is to ensure no erroneous behaviour occurs which could result in 729 data corruption or a sporadic crash at a later stage once the region 730 is examined. The runtime overhead introduced is minimal. 731 732config ARCH_HAS_DEBUG_VM_PGTABLE 733 bool 734 help 735 An architecture should select this when it can successfully 736 build and run DEBUG_VM_PGTABLE. 737 738config DEBUG_VM 739 bool "Debug VM" 740 depends on DEBUG_KERNEL 741 help 742 Enable this to turn on extended checks in the virtual-memory system 743 that may impact performance. 744 745 If unsure, say N. 746 747config DEBUG_VM_VMACACHE 748 bool "Debug VMA caching" 749 depends on DEBUG_VM 750 help 751 Enable this to turn on VMA caching debug information. Doing so 752 can cause significant overhead, so only enable it in non-production 753 environments. 754 755 If unsure, say N. 756 757config DEBUG_VM_RB 758 bool "Debug VM red-black trees" 759 depends on DEBUG_VM 760 help 761 Enable VM red-black tree debugging information and extra validations. 762 763 If unsure, say N. 764 765config DEBUG_VM_PGFLAGS 766 bool "Debug page-flags operations" 767 depends on DEBUG_VM 768 help 769 Enables extra validation on page flags operations. 770 771 If unsure, say N. 772 773config DEBUG_VM_PGTABLE 774 bool "Debug arch page table for semantics compliance" 775 depends on MMU 776 depends on ARCH_HAS_DEBUG_VM_PGTABLE 777 default y if DEBUG_VM 778 help 779 This option provides a debug method which can be used to test 780 architecture page table helper functions on various platforms in 781 verifying if they comply with expected generic MM semantics. This 782 will help architecture code in making sure that any changes or 783 new additions of these helpers still conform to expected 784 semantics of the generic MM. Platforms will have to opt in for 785 this through ARCH_HAS_DEBUG_VM_PGTABLE. 786 787 If unsure, say N. 788 789config ARCH_HAS_DEBUG_VIRTUAL 790 bool 791 792config DEBUG_VIRTUAL 793 bool "Debug VM translations" 794 depends on DEBUG_KERNEL && ARCH_HAS_DEBUG_VIRTUAL 795 help 796 Enable some costly sanity checks in virtual to page code. This can 797 catch mistakes with virt_to_page() and friends. 798 799 If unsure, say N. 800 801config DEBUG_NOMMU_REGIONS 802 bool "Debug the global anon/private NOMMU mapping region tree" 803 depends on DEBUG_KERNEL && !MMU 804 help 805 This option causes the global tree of anonymous and private mapping 806 regions to be regularly checked for invalid topology. 807 808config DEBUG_MEMORY_INIT 809 bool "Debug memory initialisation" if EXPERT 810 default !EXPERT 811 help 812 Enable this for additional checks during memory initialisation. 813 The sanity checks verify aspects of the VM such as the memory model 814 and other information provided by the architecture. Verbose 815 information will be printed at KERN_DEBUG loglevel depending 816 on the mminit_loglevel= command-line option. 817 818 If unsure, say Y 819 820config MEMORY_NOTIFIER_ERROR_INJECT 821 tristate "Memory hotplug notifier error injection module" 822 depends on MEMORY_HOTPLUG_SPARSE && NOTIFIER_ERROR_INJECTION 823 help 824 This option provides the ability to inject artificial errors to 825 memory hotplug notifier chain callbacks. It is controlled through 826 debugfs interface under /sys/kernel/debug/notifier-error-inject/memory 827 828 If the notifier call chain should be failed with some events 829 notified, write the error code to "actions/<notifier event>/error". 830 831 Example: Inject memory hotplug offline error (-12 == -ENOMEM) 832 833 # cd /sys/kernel/debug/notifier-error-inject/memory 834 # echo -12 > actions/MEM_GOING_OFFLINE/error 835 # echo offline > /sys/devices/system/memory/memoryXXX/state 836 bash: echo: write error: Cannot allocate memory 837 838 To compile this code as a module, choose M here: the module will 839 be called memory-notifier-error-inject. 840 841 If unsure, say N. 842 843config DEBUG_PER_CPU_MAPS 844 bool "Debug access to per_cpu maps" 845 depends on DEBUG_KERNEL 846 depends on SMP 847 help 848 Say Y to verify that the per_cpu map being accessed has 849 been set up. This adds a fair amount of code to kernel memory 850 and decreases performance. 851 852 Say N if unsure. 853 854config DEBUG_HIGHMEM 855 bool "Highmem debugging" 856 depends on DEBUG_KERNEL && HIGHMEM 857 help 858 This option enables additional error checking for high memory 859 systems. Disable for production systems. 860 861config HAVE_DEBUG_STACKOVERFLOW 862 bool 863 864config DEBUG_STACKOVERFLOW 865 bool "Check for stack overflows" 866 depends on DEBUG_KERNEL && HAVE_DEBUG_STACKOVERFLOW 867 help 868 Say Y here if you want to check for overflows of kernel, IRQ 869 and exception stacks (if your architecture uses them). This 870 option will show detailed messages if free stack space drops 871 below a certain limit. 872 873 These kinds of bugs usually occur when call-chains in the 874 kernel get too deep, especially when interrupts are 875 involved. 876 877 Use this in cases where you see apparently random memory 878 corruption, especially if it appears in 'struct thread_info' 879 880 If in doubt, say "N". 881 882source "lib/Kconfig.kasan" 883source "lib/Kconfig.kfence" 884 885endmenu # "Memory Debugging" 886 887config DEBUG_SHIRQ 888 bool "Debug shared IRQ handlers" 889 depends on DEBUG_KERNEL 890 help 891 Enable this to generate a spurious interrupt just before a shared 892 interrupt handler is deregistered (generating one when registering 893 is currently disabled). Drivers need to handle this correctly. Some 894 don't and need to be caught. 895 896menu "Debug Oops, Lockups and Hangs" 897 898config PANIC_ON_OOPS 899 bool "Panic on Oops" 900 help 901 Say Y here to enable the kernel to panic when it oopses. This 902 has the same effect as setting oops=panic on the kernel command 903 line. 904 905 This feature is useful to ensure that the kernel does not do 906 anything erroneous after an oops which could result in data 907 corruption or other issues. 908 909 Say N if unsure. 910 911config PANIC_ON_OOPS_VALUE 912 int 913 range 0 1 914 default 0 if !PANIC_ON_OOPS 915 default 1 if PANIC_ON_OOPS 916 917config PANIC_TIMEOUT 918 int "panic timeout" 919 default 0 920 help 921 Set the timeout value (in seconds) until a reboot occurs when 922 the kernel panics. If n = 0, then we wait forever. A timeout 923 value n > 0 will wait n seconds before rebooting, while a timeout 924 value n < 0 will reboot immediately. 925 926config LOCKUP_DETECTOR 927 bool 928 929config SOFTLOCKUP_DETECTOR 930 bool "Detect Soft Lockups" 931 depends on DEBUG_KERNEL && !S390 932 select LOCKUP_DETECTOR 933 help 934 Say Y here to enable the kernel to act as a watchdog to detect 935 soft lockups. 936 937 Softlockups are bugs that cause the kernel to loop in kernel 938 mode for more than 20 seconds, without giving other tasks a 939 chance to run. The current stack trace is displayed upon 940 detection and the system will stay locked up. 941 942config BOOTPARAM_SOFTLOCKUP_PANIC 943 bool "Panic (Reboot) On Soft Lockups" 944 depends on SOFTLOCKUP_DETECTOR 945 help 946 Say Y here to enable the kernel to panic on "soft lockups", 947 which are bugs that cause the kernel to loop in kernel 948 mode for more than 20 seconds (configurable using the watchdog_thresh 949 sysctl), without giving other tasks a chance to run. 950 951 The panic can be used in combination with panic_timeout, 952 to cause the system to reboot automatically after a 953 lockup has been detected. This feature is useful for 954 high-availability systems that have uptime guarantees and 955 where a lockup must be resolved ASAP. 956 957 Say N if unsure. 958 959config BOOTPARAM_SOFTLOCKUP_PANIC_VALUE 960 int 961 depends on SOFTLOCKUP_DETECTOR 962 range 0 1 963 default 0 if !BOOTPARAM_SOFTLOCKUP_PANIC 964 default 1 if BOOTPARAM_SOFTLOCKUP_PANIC 965 966config HARDLOCKUP_DETECTOR_PERF 967 bool 968 select SOFTLOCKUP_DETECTOR 969 970# 971# Enables a timestamp based low pass filter to compensate for perf based 972# hard lockup detection which runs too fast due to turbo modes. 973# 974config HARDLOCKUP_CHECK_TIMESTAMP 975 bool 976 977# 978# arch/ can define HAVE_HARDLOCKUP_DETECTOR_ARCH to provide their own hard 979# lockup detector rather than the perf based detector. 980# 981config HARDLOCKUP_DETECTOR 982 bool "Detect Hard Lockups" 983 depends on DEBUG_KERNEL && !S390 984 depends on HAVE_HARDLOCKUP_DETECTOR_PERF || HAVE_HARDLOCKUP_DETECTOR_ARCH 985 select LOCKUP_DETECTOR 986 select HARDLOCKUP_DETECTOR_PERF if HAVE_HARDLOCKUP_DETECTOR_PERF 987 help 988 Say Y here to enable the kernel to act as a watchdog to detect 989 hard lockups. 990 991 Hardlockups are bugs that cause the CPU to loop in kernel mode 992 for more than 10 seconds, without letting other interrupts have a 993 chance to run. The current stack trace is displayed upon detection 994 and the system will stay locked up. 995 996config BOOTPARAM_HARDLOCKUP_PANIC 997 bool "Panic (Reboot) On Hard Lockups" 998 depends on HARDLOCKUP_DETECTOR 999 help 1000 Say Y here to enable the kernel to panic on "hard lockups", 1001 which are bugs that cause the kernel to loop in kernel 1002 mode with interrupts disabled for more than 10 seconds (configurable 1003 using the watchdog_thresh sysctl). 1004 1005 Say N if unsure. 1006 1007config BOOTPARAM_HARDLOCKUP_PANIC_VALUE 1008 int 1009 depends on HARDLOCKUP_DETECTOR 1010 range 0 1 1011 default 0 if !BOOTPARAM_HARDLOCKUP_PANIC 1012 default 1 if BOOTPARAM_HARDLOCKUP_PANIC 1013 1014config DETECT_HUNG_TASK 1015 bool "Detect Hung Tasks" 1016 depends on DEBUG_KERNEL 1017 default SOFTLOCKUP_DETECTOR 1018 help 1019 Say Y here to enable the kernel to detect "hung tasks", 1020 which are bugs that cause the task to be stuck in 1021 uninterruptible "D" state indefinitely. 1022 1023 When a hung task is detected, the kernel will print the 1024 current stack trace (which you should report), but the 1025 task will stay in uninterruptible state. If lockdep is 1026 enabled then all held locks will also be reported. This 1027 feature has negligible overhead. 1028 1029config DEFAULT_HUNG_TASK_TIMEOUT 1030 int "Default timeout for hung task detection (in seconds)" 1031 depends on DETECT_HUNG_TASK 1032 default 120 1033 help 1034 This option controls the default timeout (in seconds) used 1035 to determine when a task has become non-responsive and should 1036 be considered hung. 1037 1038 It can be adjusted at runtime via the kernel.hung_task_timeout_secs 1039 sysctl or by writing a value to 1040 /proc/sys/kernel/hung_task_timeout_secs. 1041 1042 A timeout of 0 disables the check. The default is two minutes. 1043 Keeping the default should be fine in most cases. 1044 1045config BOOTPARAM_HUNG_TASK_PANIC 1046 bool "Panic (Reboot) On Hung Tasks" 1047 depends on DETECT_HUNG_TASK 1048 help 1049 Say Y here to enable the kernel to panic on "hung tasks", 1050 which are bugs that cause the kernel to leave a task stuck 1051 in uninterruptible "D" state. 1052 1053 The panic can be used in combination with panic_timeout, 1054 to cause the system to reboot automatically after a 1055 hung task has been detected. This feature is useful for 1056 high-availability systems that have uptime guarantees and 1057 where a hung tasks must be resolved ASAP. 1058 1059 Say N if unsure. 1060 1061config BOOTPARAM_HUNG_TASK_PANIC_VALUE 1062 int 1063 depends on DETECT_HUNG_TASK 1064 range 0 1 1065 default 0 if !BOOTPARAM_HUNG_TASK_PANIC 1066 default 1 if BOOTPARAM_HUNG_TASK_PANIC 1067 1068config WQ_WATCHDOG 1069 bool "Detect Workqueue Stalls" 1070 depends on DEBUG_KERNEL 1071 help 1072 Say Y here to enable stall detection on workqueues. If a 1073 worker pool doesn't make forward progress on a pending work 1074 item for over a given amount of time, 30s by default, a 1075 warning message is printed along with dump of workqueue 1076 state. This can be configured through kernel parameter 1077 "workqueue.watchdog_thresh" and its sysfs counterpart. 1078 1079config TEST_LOCKUP 1080 tristate "Test module to generate lockups" 1081 depends on m 1082 help 1083 This builds the "test_lockup" module that helps to make sure 1084 that watchdogs and lockup detectors are working properly. 1085 1086 Depending on module parameters it could emulate soft or hard 1087 lockup, "hung task", or locking arbitrary lock for a long time. 1088 Also it could generate series of lockups with cooling-down periods. 1089 1090 If unsure, say N. 1091 1092endmenu # "Debug lockups and hangs" 1093 1094menu "Scheduler Debugging" 1095 1096config SCHED_DEBUG 1097 bool "Collect scheduler debugging info" 1098 depends on DEBUG_KERNEL && PROC_FS 1099 default y 1100 help 1101 If you say Y here, the /proc/sched_debug file will be provided 1102 that can help debug the scheduler. The runtime overhead of this 1103 option is minimal. 1104 1105config SCHED_INFO 1106 bool 1107 default n 1108 1109config SCHEDSTATS 1110 bool "Collect scheduler statistics" 1111 depends on DEBUG_KERNEL && PROC_FS 1112 select SCHED_INFO 1113 help 1114 If you say Y here, additional code will be inserted into the 1115 scheduler and related routines to collect statistics about 1116 scheduler behavior and provide them in /proc/schedstat. These 1117 stats may be useful for both tuning and debugging the scheduler 1118 If you aren't debugging the scheduler or trying to tune a specific 1119 application, you can say N to avoid the very slight overhead 1120 this adds. 1121 1122endmenu 1123 1124config DEBUG_TIMEKEEPING 1125 bool "Enable extra timekeeping sanity checking" 1126 help 1127 This option will enable additional timekeeping sanity checks 1128 which may be helpful when diagnosing issues where timekeeping 1129 problems are suspected. 1130 1131 This may include checks in the timekeeping hotpaths, so this 1132 option may have a (very small) performance impact to some 1133 workloads. 1134 1135 If unsure, say N. 1136 1137config DEBUG_PREEMPT 1138 bool "Debug preemptible kernel" 1139 depends on DEBUG_KERNEL && PREEMPTION && TRACE_IRQFLAGS_SUPPORT 1140 help 1141 If you say Y here then the kernel will use a debug variant of the 1142 commonly used smp_processor_id() function and will print warnings 1143 if kernel code uses it in a preemption-unsafe way. Also, the kernel 1144 will detect preemption count underflows. 1145 1146 This option has potential to introduce high runtime overhead, 1147 depending on workload as it triggers debugging routines for each 1148 this_cpu operation. It should only be used for debugging purposes. 1149 1150menu "Lock Debugging (spinlocks, mutexes, etc...)" 1151 1152config LOCK_DEBUGGING_SUPPORT 1153 bool 1154 depends on TRACE_IRQFLAGS_SUPPORT && STACKTRACE_SUPPORT && LOCKDEP_SUPPORT 1155 default y 1156 1157config PROVE_LOCKING 1158 bool "Lock debugging: prove locking correctness" 1159 depends on DEBUG_KERNEL && LOCK_DEBUGGING_SUPPORT 1160 select LOCKDEP 1161 select DEBUG_SPINLOCK 1162 select DEBUG_MUTEXES 1163 select DEBUG_RT_MUTEXES if RT_MUTEXES 1164 select DEBUG_RWSEMS 1165 select DEBUG_WW_MUTEX_SLOWPATH 1166 select DEBUG_LOCK_ALLOC 1167 select PREEMPT_COUNT if !ARCH_NO_PREEMPT 1168 select TRACE_IRQFLAGS 1169 default n 1170 help 1171 This feature enables the kernel to prove that all locking 1172 that occurs in the kernel runtime is mathematically 1173 correct: that under no circumstance could an arbitrary (and 1174 not yet triggered) combination of observed locking 1175 sequences (on an arbitrary number of CPUs, running an 1176 arbitrary number of tasks and interrupt contexts) cause a 1177 deadlock. 1178 1179 In short, this feature enables the kernel to report locking 1180 related deadlocks before they actually occur. 1181 1182 The proof does not depend on how hard and complex a 1183 deadlock scenario would be to trigger: how many 1184 participant CPUs, tasks and irq-contexts would be needed 1185 for it to trigger. The proof also does not depend on 1186 timing: if a race and a resulting deadlock is possible 1187 theoretically (no matter how unlikely the race scenario 1188 is), it will be proven so and will immediately be 1189 reported by the kernel (once the event is observed that 1190 makes the deadlock theoretically possible). 1191 1192 If a deadlock is impossible (i.e. the locking rules, as 1193 observed by the kernel, are mathematically correct), the 1194 kernel reports nothing. 1195 1196 NOTE: this feature can also be enabled for rwlocks, mutexes 1197 and rwsems - in which case all dependencies between these 1198 different locking variants are observed and mapped too, and 1199 the proof of observed correctness is also maintained for an 1200 arbitrary combination of these separate locking variants. 1201 1202 For more details, see Documentation/locking/lockdep-design.rst. 1203 1204config PROVE_RAW_LOCK_NESTING 1205 bool "Enable raw_spinlock - spinlock nesting checks" 1206 depends on PROVE_LOCKING 1207 default n 1208 help 1209 Enable the raw_spinlock vs. spinlock nesting checks which ensure 1210 that the lock nesting rules for PREEMPT_RT enabled kernels are 1211 not violated. 1212 1213 NOTE: There are known nesting problems. So if you enable this 1214 option expect lockdep splats until these problems have been fully 1215 addressed which is work in progress. This config switch allows to 1216 identify and analyze these problems. It will be removed and the 1217 check permanentely enabled once the main issues have been fixed. 1218 1219 If unsure, select N. 1220 1221config LOCK_STAT 1222 bool "Lock usage statistics" 1223 depends on DEBUG_KERNEL && LOCK_DEBUGGING_SUPPORT 1224 select LOCKDEP 1225 select DEBUG_SPINLOCK 1226 select DEBUG_MUTEXES 1227 select DEBUG_RT_MUTEXES if RT_MUTEXES 1228 select DEBUG_LOCK_ALLOC 1229 default n 1230 help 1231 This feature enables tracking lock contention points 1232 1233 For more details, see Documentation/locking/lockstat.rst 1234 1235 This also enables lock events required by "perf lock", 1236 subcommand of perf. 1237 If you want to use "perf lock", you also need to turn on 1238 CONFIG_EVENT_TRACING. 1239 1240 CONFIG_LOCK_STAT defines "contended" and "acquired" lock events. 1241 (CONFIG_LOCKDEP defines "acquire" and "release" events.) 1242 1243config DEBUG_RT_MUTEXES 1244 bool "RT Mutex debugging, deadlock detection" 1245 depends on DEBUG_KERNEL && RT_MUTEXES 1246 help 1247 This allows rt mutex semantics violations and rt mutex related 1248 deadlocks (lockups) to be detected and reported automatically. 1249 1250config DEBUG_SPINLOCK 1251 bool "Spinlock and rw-lock debugging: basic checks" 1252 depends on DEBUG_KERNEL 1253 select UNINLINE_SPIN_UNLOCK 1254 help 1255 Say Y here and build SMP to catch missing spinlock initialization 1256 and certain other kinds of spinlock errors commonly made. This is 1257 best used in conjunction with the NMI watchdog so that spinlock 1258 deadlocks are also debuggable. 1259 1260config DEBUG_MUTEXES 1261 bool "Mutex debugging: basic checks" 1262 depends on DEBUG_KERNEL 1263 help 1264 This feature allows mutex semantics violations to be detected and 1265 reported. 1266 1267config DEBUG_WW_MUTEX_SLOWPATH 1268 bool "Wait/wound mutex debugging: Slowpath testing" 1269 depends on DEBUG_KERNEL && LOCK_DEBUGGING_SUPPORT 1270 select DEBUG_LOCK_ALLOC 1271 select DEBUG_SPINLOCK 1272 select DEBUG_MUTEXES 1273 help 1274 This feature enables slowpath testing for w/w mutex users by 1275 injecting additional -EDEADLK wound/backoff cases. Together with 1276 the full mutex checks enabled with (CONFIG_PROVE_LOCKING) this 1277 will test all possible w/w mutex interface abuse with the 1278 exception of simply not acquiring all the required locks. 1279 Note that this feature can introduce significant overhead, so 1280 it really should not be enabled in a production or distro kernel, 1281 even a debug kernel. If you are a driver writer, enable it. If 1282 you are a distro, do not. 1283 1284config DEBUG_RWSEMS 1285 bool "RW Semaphore debugging: basic checks" 1286 depends on DEBUG_KERNEL 1287 help 1288 This debugging feature allows mismatched rw semaphore locks 1289 and unlocks to be detected and reported. 1290 1291config DEBUG_LOCK_ALLOC 1292 bool "Lock debugging: detect incorrect freeing of live locks" 1293 depends on DEBUG_KERNEL && LOCK_DEBUGGING_SUPPORT 1294 select DEBUG_SPINLOCK 1295 select DEBUG_MUTEXES 1296 select DEBUG_RT_MUTEXES if RT_MUTEXES 1297 select LOCKDEP 1298 help 1299 This feature will check whether any held lock (spinlock, rwlock, 1300 mutex or rwsem) is incorrectly freed by the kernel, via any of the 1301 memory-freeing routines (kfree(), kmem_cache_free(), free_pages(), 1302 vfree(), etc.), whether a live lock is incorrectly reinitialized via 1303 spin_lock_init()/mutex_init()/etc., or whether there is any lock 1304 held during task exit. 1305 1306config LOCKDEP 1307 bool 1308 depends on DEBUG_KERNEL && LOCK_DEBUGGING_SUPPORT 1309 select STACKTRACE 1310 select KALLSYMS 1311 select KALLSYMS_ALL 1312 1313config LOCKDEP_SMALL 1314 bool 1315 1316config LOCKDEP_BITS 1317 int "Bitsize for MAX_LOCKDEP_ENTRIES" 1318 depends on LOCKDEP && !LOCKDEP_SMALL 1319 range 10 30 1320 default 15 1321 help 1322 Try increasing this value if you hit "BUG: MAX_LOCKDEP_ENTRIES too low!" message. 1323 1324config LOCKDEP_CHAINS_BITS 1325 int "Bitsize for MAX_LOCKDEP_CHAINS" 1326 depends on LOCKDEP && !LOCKDEP_SMALL 1327 range 10 30 1328 default 16 1329 help 1330 Try increasing this value if you hit "BUG: MAX_LOCKDEP_CHAINS too low!" message. 1331 1332config LOCKDEP_STACK_TRACE_BITS 1333 int "Bitsize for MAX_STACK_TRACE_ENTRIES" 1334 depends on LOCKDEP && !LOCKDEP_SMALL 1335 range 10 30 1336 default 19 1337 help 1338 Try increasing this value if you hit "BUG: MAX_STACK_TRACE_ENTRIES too low!" message. 1339 1340config LOCKDEP_STACK_TRACE_HASH_BITS 1341 int "Bitsize for STACK_TRACE_HASH_SIZE" 1342 depends on LOCKDEP && !LOCKDEP_SMALL 1343 range 10 30 1344 default 14 1345 help 1346 Try increasing this value if you need large MAX_STACK_TRACE_ENTRIES. 1347 1348config LOCKDEP_CIRCULAR_QUEUE_BITS 1349 int "Bitsize for elements in circular_queue struct" 1350 depends on LOCKDEP 1351 range 10 30 1352 default 12 1353 help 1354 Try increasing this value if you hit "lockdep bfs error:-1" warning due to __cq_enqueue() failure. 1355 1356config DEBUG_LOCKDEP 1357 bool "Lock dependency engine debugging" 1358 depends on DEBUG_KERNEL && LOCKDEP 1359 help 1360 If you say Y here, the lock dependency engine will do 1361 additional runtime checks to debug itself, at the price 1362 of more runtime overhead. 1363 1364config DEBUG_ATOMIC_SLEEP 1365 bool "Sleep inside atomic section checking" 1366 select PREEMPT_COUNT 1367 depends on DEBUG_KERNEL 1368 depends on !ARCH_NO_PREEMPT 1369 help 1370 If you say Y here, various routines which may sleep will become very 1371 noisy if they are called inside atomic sections: when a spinlock is 1372 held, inside an rcu read side critical section, inside preempt disabled 1373 sections, inside an interrupt, etc... 1374 1375config DEBUG_LOCKING_API_SELFTESTS 1376 bool "Locking API boot-time self-tests" 1377 depends on DEBUG_KERNEL 1378 help 1379 Say Y here if you want the kernel to run a short self-test during 1380 bootup. The self-test checks whether common types of locking bugs 1381 are detected by debugging mechanisms or not. (if you disable 1382 lock debugging then those bugs wont be detected of course.) 1383 The following locking APIs are covered: spinlocks, rwlocks, 1384 mutexes and rwsems. 1385 1386config LOCK_TORTURE_TEST 1387 tristate "torture tests for locking" 1388 depends on DEBUG_KERNEL 1389 select TORTURE_TEST 1390 help 1391 This option provides a kernel module that runs torture tests 1392 on kernel locking primitives. The kernel module may be built 1393 after the fact on the running kernel to be tested, if desired. 1394 1395 Say Y here if you want kernel locking-primitive torture tests 1396 to be built into the kernel. 1397 Say M if you want these torture tests to build as a module. 1398 Say N if you are unsure. 1399 1400config WW_MUTEX_SELFTEST 1401 tristate "Wait/wound mutex selftests" 1402 help 1403 This option provides a kernel module that runs tests on the 1404 on the struct ww_mutex locking API. 1405 1406 It is recommended to enable DEBUG_WW_MUTEX_SLOWPATH in conjunction 1407 with this test harness. 1408 1409 Say M if you want these self tests to build as a module. 1410 Say N if you are unsure. 1411 1412config SCF_TORTURE_TEST 1413 tristate "torture tests for smp_call_function*()" 1414 depends on DEBUG_KERNEL 1415 select TORTURE_TEST 1416 help 1417 This option provides a kernel module that runs torture tests 1418 on the smp_call_function() family of primitives. The kernel 1419 module may be built after the fact on the running kernel to 1420 be tested, if desired. 1421 1422config CSD_LOCK_WAIT_DEBUG 1423 bool "Debugging for csd_lock_wait(), called from smp_call_function*()" 1424 depends on DEBUG_KERNEL 1425 depends on 64BIT 1426 default n 1427 help 1428 This option enables debug prints when CPUs are slow to respond 1429 to the smp_call_function*() IPI wrappers. These debug prints 1430 include the IPI handler function currently executing (if any) 1431 and relevant stack traces. 1432 1433endmenu # lock debugging 1434 1435config TRACE_IRQFLAGS 1436 depends on TRACE_IRQFLAGS_SUPPORT 1437 bool 1438 help 1439 Enables hooks to interrupt enabling and disabling for 1440 either tracing or lock debugging. 1441 1442config TRACE_IRQFLAGS_NMI 1443 def_bool y 1444 depends on TRACE_IRQFLAGS 1445 depends on TRACE_IRQFLAGS_NMI_SUPPORT 1446 1447config STACKTRACE 1448 bool "Stack backtrace support" 1449 depends on STACKTRACE_SUPPORT 1450 help 1451 This option causes the kernel to create a /proc/pid/stack for 1452 every process, showing its current stack trace. 1453 It is also used by various kernel debugging features that require 1454 stack trace generation. 1455 1456config WARN_ALL_UNSEEDED_RANDOM 1457 bool "Warn for all uses of unseeded randomness" 1458 default n 1459 help 1460 Some parts of the kernel contain bugs relating to their use of 1461 cryptographically secure random numbers before it's actually possible 1462 to generate those numbers securely. This setting ensures that these 1463 flaws don't go unnoticed, by enabling a message, should this ever 1464 occur. This will allow people with obscure setups to know when things 1465 are going wrong, so that they might contact developers about fixing 1466 it. 1467 1468 Unfortunately, on some models of some architectures getting 1469 a fully seeded CRNG is extremely difficult, and so this can 1470 result in dmesg getting spammed for a surprisingly long 1471 time. This is really bad from a security perspective, and 1472 so architecture maintainers really need to do what they can 1473 to get the CRNG seeded sooner after the system is booted. 1474 However, since users cannot do anything actionable to 1475 address this, by default this option is disabled. 1476 1477 Say Y here if you want to receive warnings for all uses of 1478 unseeded randomness. This will be of use primarily for 1479 those developers interested in improving the security of 1480 Linux kernels running on their architecture (or 1481 subarchitecture). 1482 1483config DEBUG_KOBJECT 1484 bool "kobject debugging" 1485 depends on DEBUG_KERNEL 1486 help 1487 If you say Y here, some extra kobject debugging messages will be sent 1488 to the syslog. 1489 1490config DEBUG_KOBJECT_RELEASE 1491 bool "kobject release debugging" 1492 depends on DEBUG_OBJECTS_TIMERS 1493 help 1494 kobjects are reference counted objects. This means that their 1495 last reference count put is not predictable, and the kobject can 1496 live on past the point at which a driver decides to drop it's 1497 initial reference to the kobject gained on allocation. An 1498 example of this would be a struct device which has just been 1499 unregistered. 1500 1501 However, some buggy drivers assume that after such an operation, 1502 the memory backing the kobject can be immediately freed. This 1503 goes completely against the principles of a refcounted object. 1504 1505 If you say Y here, the kernel will delay the release of kobjects 1506 on the last reference count to improve the visibility of this 1507 kind of kobject release bug. 1508 1509config HAVE_DEBUG_BUGVERBOSE 1510 bool 1511 1512menu "Debug kernel data structures" 1513 1514config DEBUG_LIST 1515 bool "Debug linked list manipulation" 1516 depends on DEBUG_KERNEL || BUG_ON_DATA_CORRUPTION 1517 help 1518 Enable this to turn on extended checks in the linked-list 1519 walking routines. 1520 1521 If unsure, say N. 1522 1523config DEBUG_PLIST 1524 bool "Debug priority linked list manipulation" 1525 depends on DEBUG_KERNEL 1526 help 1527 Enable this to turn on extended checks in the priority-ordered 1528 linked-list (plist) walking routines. This checks the entire 1529 list multiple times during each manipulation. 1530 1531 If unsure, say N. 1532 1533config DEBUG_SG 1534 bool "Debug SG table operations" 1535 depends on DEBUG_KERNEL 1536 help 1537 Enable this to turn on checks on scatter-gather tables. This can 1538 help find problems with drivers that do not properly initialize 1539 their sg tables. 1540 1541 If unsure, say N. 1542 1543config DEBUG_NOTIFIERS 1544 bool "Debug notifier call chains" 1545 depends on DEBUG_KERNEL 1546 help 1547 Enable this to turn on sanity checking for notifier call chains. 1548 This is most useful for kernel developers to make sure that 1549 modules properly unregister themselves from notifier chains. 1550 This is a relatively cheap check but if you care about maximum 1551 performance, say N. 1552 1553config BUG_ON_DATA_CORRUPTION 1554 bool "Trigger a BUG when data corruption is detected" 1555 select DEBUG_LIST 1556 help 1557 Select this option if the kernel should BUG when it encounters 1558 data corruption in kernel memory structures when they get checked 1559 for validity. 1560 1561 If unsure, say N. 1562 1563endmenu 1564 1565config DEBUG_CREDENTIALS 1566 bool "Debug credential management" 1567 depends on DEBUG_KERNEL 1568 help 1569 Enable this to turn on some debug checking for credential 1570 management. The additional code keeps track of the number of 1571 pointers from task_structs to any given cred struct, and checks to 1572 see that this number never exceeds the usage count of the cred 1573 struct. 1574 1575 Furthermore, if SELinux is enabled, this also checks that the 1576 security pointer in the cred struct is never seen to be invalid. 1577 1578 If unsure, say N. 1579 1580source "kernel/rcu/Kconfig.debug" 1581 1582config DEBUG_WQ_FORCE_RR_CPU 1583 bool "Force round-robin CPU selection for unbound work items" 1584 depends on DEBUG_KERNEL 1585 default n 1586 help 1587 Workqueue used to implicitly guarantee that work items queued 1588 without explicit CPU specified are put on the local CPU. This 1589 guarantee is no longer true and while local CPU is still 1590 preferred work items may be put on foreign CPUs. Kernel 1591 parameter "workqueue.debug_force_rr_cpu" is added to force 1592 round-robin CPU selection to flush out usages which depend on the 1593 now broken guarantee. This config option enables the debug 1594 feature by default. When enabled, memory and cache locality will 1595 be impacted. 1596 1597config DEBUG_BLOCK_EXT_DEVT 1598 bool "Force extended block device numbers and spread them" 1599 depends on DEBUG_KERNEL 1600 depends on BLOCK 1601 default n 1602 help 1603 BIG FAT WARNING: ENABLING THIS OPTION MIGHT BREAK BOOTING ON 1604 SOME DISTRIBUTIONS. DO NOT ENABLE THIS UNLESS YOU KNOW WHAT 1605 YOU ARE DOING. Distros, please enable this and fix whatever 1606 is broken. 1607 1608 Conventionally, block device numbers are allocated from 1609 predetermined contiguous area. However, extended block area 1610 may introduce non-contiguous block device numbers. This 1611 option forces most block device numbers to be allocated from 1612 the extended space and spreads them to discover kernel or 1613 userland code paths which assume predetermined contiguous 1614 device number allocation. 1615 1616 Note that turning on this debug option shuffles all the 1617 device numbers for all IDE and SCSI devices including libata 1618 ones, so root partition specified using device number 1619 directly (via rdev or root=MAJ:MIN) won't work anymore. 1620 Textual device names (root=/dev/sdXn) will continue to work. 1621 1622 Say N if you are unsure. 1623 1624config CPU_HOTPLUG_STATE_CONTROL 1625 bool "Enable CPU hotplug state control" 1626 depends on DEBUG_KERNEL 1627 depends on HOTPLUG_CPU 1628 default n 1629 help 1630 Allows to write steps between "offline" and "online" to the CPUs 1631 sysfs target file so states can be stepped granular. This is a debug 1632 option for now as the hotplug machinery cannot be stopped and 1633 restarted at arbitrary points yet. 1634 1635 Say N if your are unsure. 1636 1637config LATENCYTOP 1638 bool "Latency measuring infrastructure" 1639 depends on DEBUG_KERNEL 1640 depends on STACKTRACE_SUPPORT 1641 depends on PROC_FS 1642 depends on FRAME_POINTER || MIPS || PPC || S390 || MICROBLAZE || ARM || ARC || X86 1643 select KALLSYMS 1644 select KALLSYMS_ALL 1645 select STACKTRACE 1646 select SCHEDSTATS 1647 select SCHED_DEBUG 1648 help 1649 Enable this option if you want to use the LatencyTOP tool 1650 to find out which userspace is blocking on what kernel operations. 1651 1652source "kernel/trace/Kconfig" 1653 1654config PROVIDE_OHCI1394_DMA_INIT 1655 bool "Remote debugging over FireWire early on boot" 1656 depends on PCI && X86 1657 help 1658 If you want to debug problems which hang or crash the kernel early 1659 on boot and the crashing machine has a FireWire port, you can use 1660 this feature to remotely access the memory of the crashed machine 1661 over FireWire. This employs remote DMA as part of the OHCI1394 1662 specification which is now the standard for FireWire controllers. 1663 1664 With remote DMA, you can monitor the printk buffer remotely using 1665 firescope and access all memory below 4GB using fireproxy from gdb. 1666 Even controlling a kernel debugger is possible using remote DMA. 1667 1668 Usage: 1669 1670 If ohci1394_dma=early is used as boot parameter, it will initialize 1671 all OHCI1394 controllers which are found in the PCI config space. 1672 1673 As all changes to the FireWire bus such as enabling and disabling 1674 devices cause a bus reset and thereby disable remote DMA for all 1675 devices, be sure to have the cable plugged and FireWire enabled on 1676 the debugging host before booting the debug target for debugging. 1677 1678 This code (~1k) is freed after boot. By then, the firewire stack 1679 in charge of the OHCI-1394 controllers should be used instead. 1680 1681 See Documentation/core-api/debugging-via-ohci1394.rst for more information. 1682 1683source "samples/Kconfig" 1684 1685config ARCH_HAS_DEVMEM_IS_ALLOWED 1686 bool 1687 1688config STRICT_DEVMEM 1689 bool "Filter access to /dev/mem" 1690 depends on MMU && DEVMEM 1691 depends on ARCH_HAS_DEVMEM_IS_ALLOWED 1692 default y if PPC || X86 || ARM64 1693 help 1694 If this option is disabled, you allow userspace (root) access to all 1695 of memory, including kernel and userspace memory. Accidental 1696 access to this is obviously disastrous, but specific access can 1697 be used by people debugging the kernel. Note that with PAT support 1698 enabled, even in this case there are restrictions on /dev/mem 1699 use due to the cache aliasing requirements. 1700 1701 If this option is switched on, and IO_STRICT_DEVMEM=n, the /dev/mem 1702 file only allows userspace access to PCI space and the BIOS code and 1703 data regions. This is sufficient for dosemu and X and all common 1704 users of /dev/mem. 1705 1706 If in doubt, say Y. 1707 1708config IO_STRICT_DEVMEM 1709 bool "Filter I/O access to /dev/mem" 1710 depends on STRICT_DEVMEM 1711 help 1712 If this option is disabled, you allow userspace (root) access to all 1713 io-memory regardless of whether a driver is actively using that 1714 range. Accidental access to this is obviously disastrous, but 1715 specific access can be used by people debugging kernel drivers. 1716 1717 If this option is switched on, the /dev/mem file only allows 1718 userspace access to *idle* io-memory ranges (see /proc/iomem) This 1719 may break traditional users of /dev/mem (dosemu, legacy X, etc...) 1720 if the driver using a given range cannot be disabled. 1721 1722 If in doubt, say Y. 1723 1724menu "$(SRCARCH) Debugging" 1725 1726source "arch/$(SRCARCH)/Kconfig.debug" 1727 1728endmenu 1729 1730menu "Kernel Testing and Coverage" 1731 1732source "lib/kunit/Kconfig" 1733 1734config NOTIFIER_ERROR_INJECTION 1735 tristate "Notifier error injection" 1736 depends on DEBUG_KERNEL 1737 select DEBUG_FS 1738 help 1739 This option provides the ability to inject artificial errors to 1740 specified notifier chain callbacks. It is useful to test the error 1741 handling of notifier call chain failures. 1742 1743 Say N if unsure. 1744 1745config PM_NOTIFIER_ERROR_INJECT 1746 tristate "PM notifier error injection module" 1747 depends on PM && NOTIFIER_ERROR_INJECTION 1748 default m if PM_DEBUG 1749 help 1750 This option provides the ability to inject artificial errors to 1751 PM notifier chain callbacks. It is controlled through debugfs 1752 interface /sys/kernel/debug/notifier-error-inject/pm 1753 1754 If the notifier call chain should be failed with some events 1755 notified, write the error code to "actions/<notifier event>/error". 1756 1757 Example: Inject PM suspend error (-12 = -ENOMEM) 1758 1759 # cd /sys/kernel/debug/notifier-error-inject/pm/ 1760 # echo -12 > actions/PM_SUSPEND_PREPARE/error 1761 # echo mem > /sys/power/state 1762 bash: echo: write error: Cannot allocate memory 1763 1764 To compile this code as a module, choose M here: the module will 1765 be called pm-notifier-error-inject. 1766 1767 If unsure, say N. 1768 1769config OF_RECONFIG_NOTIFIER_ERROR_INJECT 1770 tristate "OF reconfig notifier error injection module" 1771 depends on OF_DYNAMIC && NOTIFIER_ERROR_INJECTION 1772 help 1773 This option provides the ability to inject artificial errors to 1774 OF reconfig notifier chain callbacks. It is controlled 1775 through debugfs interface under 1776 /sys/kernel/debug/notifier-error-inject/OF-reconfig/ 1777 1778 If the notifier call chain should be failed with some events 1779 notified, write the error code to "actions/<notifier event>/error". 1780 1781 To compile this code as a module, choose M here: the module will 1782 be called of-reconfig-notifier-error-inject. 1783 1784 If unsure, say N. 1785 1786config NETDEV_NOTIFIER_ERROR_INJECT 1787 tristate "Netdev notifier error injection module" 1788 depends on NET && NOTIFIER_ERROR_INJECTION 1789 help 1790 This option provides the ability to inject artificial errors to 1791 netdevice notifier chain callbacks. It is controlled through debugfs 1792 interface /sys/kernel/debug/notifier-error-inject/netdev 1793 1794 If the notifier call chain should be failed with some events 1795 notified, write the error code to "actions/<notifier event>/error". 1796 1797 Example: Inject netdevice mtu change error (-22 = -EINVAL) 1798 1799 # cd /sys/kernel/debug/notifier-error-inject/netdev 1800 # echo -22 > actions/NETDEV_CHANGEMTU/error 1801 # ip link set eth0 mtu 1024 1802 RTNETLINK answers: Invalid argument 1803 1804 To compile this code as a module, choose M here: the module will 1805 be called netdev-notifier-error-inject. 1806 1807 If unsure, say N. 1808 1809config FUNCTION_ERROR_INJECTION 1810 bool "Fault-injections of functions" 1811 depends on HAVE_FUNCTION_ERROR_INJECTION && KPROBES 1812 help 1813 Add fault injections into various functions that are annotated with 1814 ALLOW_ERROR_INJECTION() in the kernel. BPF may also modify the return 1815 value of theses functions. This is useful to test error paths of code. 1816 1817 If unsure, say N 1818 1819config FAULT_INJECTION 1820 bool "Fault-injection framework" 1821 depends on DEBUG_KERNEL 1822 help 1823 Provide fault-injection framework. 1824 For more details, see Documentation/fault-injection/. 1825 1826config FAILSLAB 1827 bool "Fault-injection capability for kmalloc" 1828 depends on FAULT_INJECTION 1829 depends on SLAB || SLUB 1830 help 1831 Provide fault-injection capability for kmalloc. 1832 1833config FAIL_PAGE_ALLOC 1834 bool "Fault-injection capability for alloc_pages()" 1835 depends on FAULT_INJECTION 1836 help 1837 Provide fault-injection capability for alloc_pages(). 1838 1839config FAULT_INJECTION_USERCOPY 1840 bool "Fault injection capability for usercopy functions" 1841 depends on FAULT_INJECTION 1842 help 1843 Provides fault-injection capability to inject failures 1844 in usercopy functions (copy_from_user(), get_user(), ...). 1845 1846config FAIL_MAKE_REQUEST 1847 bool "Fault-injection capability for disk IO" 1848 depends on FAULT_INJECTION && BLOCK 1849 help 1850 Provide fault-injection capability for disk IO. 1851 1852config FAIL_IO_TIMEOUT 1853 bool "Fault-injection capability for faking disk interrupts" 1854 depends on FAULT_INJECTION && BLOCK 1855 help 1856 Provide fault-injection capability on end IO handling. This 1857 will make the block layer "forget" an interrupt as configured, 1858 thus exercising the error handling. 1859 1860 Only works with drivers that use the generic timeout handling, 1861 for others it wont do anything. 1862 1863config FAIL_FUTEX 1864 bool "Fault-injection capability for futexes" 1865 select DEBUG_FS 1866 depends on FAULT_INJECTION && FUTEX 1867 help 1868 Provide fault-injection capability for futexes. 1869 1870config FAULT_INJECTION_DEBUG_FS 1871 bool "Debugfs entries for fault-injection capabilities" 1872 depends on FAULT_INJECTION && SYSFS && DEBUG_FS 1873 help 1874 Enable configuration of fault-injection capabilities via debugfs. 1875 1876config FAIL_FUNCTION 1877 bool "Fault-injection capability for functions" 1878 depends on FAULT_INJECTION_DEBUG_FS && FUNCTION_ERROR_INJECTION 1879 help 1880 Provide function-based fault-injection capability. 1881 This will allow you to override a specific function with a return 1882 with given return value. As a result, function caller will see 1883 an error value and have to handle it. This is useful to test the 1884 error handling in various subsystems. 1885 1886config FAIL_MMC_REQUEST 1887 bool "Fault-injection capability for MMC IO" 1888 depends on FAULT_INJECTION_DEBUG_FS && MMC 1889 help 1890 Provide fault-injection capability for MMC IO. 1891 This will make the mmc core return data errors. This is 1892 useful to test the error handling in the mmc block device 1893 and to test how the mmc host driver handles retries from 1894 the block device. 1895 1896config FAULT_INJECTION_STACKTRACE_FILTER 1897 bool "stacktrace filter for fault-injection capabilities" 1898 depends on FAULT_INJECTION_DEBUG_FS && STACKTRACE_SUPPORT 1899 depends on !X86_64 1900 select STACKTRACE 1901 depends on FRAME_POINTER || MIPS || PPC || S390 || MICROBLAZE || ARM || ARC || X86 1902 help 1903 Provide stacktrace filter for fault-injection capabilities 1904 1905config ARCH_HAS_KCOV 1906 bool 1907 help 1908 An architecture should select this when it can successfully 1909 build and run with CONFIG_KCOV. This typically requires 1910 disabling instrumentation for some early boot code. 1911 1912config CC_HAS_SANCOV_TRACE_PC 1913 def_bool $(cc-option,-fsanitize-coverage=trace-pc) 1914 1915 1916config KCOV 1917 bool "Code coverage for fuzzing" 1918 depends on ARCH_HAS_KCOV 1919 depends on CC_HAS_SANCOV_TRACE_PC || GCC_PLUGINS 1920 select DEBUG_FS 1921 select GCC_PLUGIN_SANCOV if !CC_HAS_SANCOV_TRACE_PC 1922 help 1923 KCOV exposes kernel code coverage information in a form suitable 1924 for coverage-guided fuzzing (randomized testing). 1925 1926 If RANDOMIZE_BASE is enabled, PC values will not be stable across 1927 different machines and across reboots. If you need stable PC values, 1928 disable RANDOMIZE_BASE. 1929 1930 For more details, see Documentation/dev-tools/kcov.rst. 1931 1932config KCOV_ENABLE_COMPARISONS 1933 bool "Enable comparison operands collection by KCOV" 1934 depends on KCOV 1935 depends on $(cc-option,-fsanitize-coverage=trace-cmp) 1936 help 1937 KCOV also exposes operands of every comparison in the instrumented 1938 code along with operand sizes and PCs of the comparison instructions. 1939 These operands can be used by fuzzing engines to improve the quality 1940 of fuzzing coverage. 1941 1942config KCOV_INSTRUMENT_ALL 1943 bool "Instrument all code by default" 1944 depends on KCOV 1945 default y 1946 help 1947 If you are doing generic system call fuzzing (like e.g. syzkaller), 1948 then you will want to instrument the whole kernel and you should 1949 say y here. If you are doing more targeted fuzzing (like e.g. 1950 filesystem fuzzing with AFL) then you will want to enable coverage 1951 for more specific subsets of files, and should say n here. 1952 1953config KCOV_IRQ_AREA_SIZE 1954 hex "Size of interrupt coverage collection area in words" 1955 depends on KCOV 1956 default 0x40000 1957 help 1958 KCOV uses preallocated per-cpu areas to collect coverage from 1959 soft interrupts. This specifies the size of those areas in the 1960 number of unsigned long words. 1961 1962menuconfig RUNTIME_TESTING_MENU 1963 bool "Runtime Testing" 1964 def_bool y 1965 1966if RUNTIME_TESTING_MENU 1967 1968config LKDTM 1969 tristate "Linux Kernel Dump Test Tool Module" 1970 depends on DEBUG_FS 1971 help 1972 This module enables testing of the different dumping mechanisms by 1973 inducing system failures at predefined crash points. 1974 If you don't need it: say N 1975 Choose M here to compile this code as a module. The module will be 1976 called lkdtm. 1977 1978 Documentation on how to use the module can be found in 1979 Documentation/fault-injection/provoke-crashes.rst 1980 1981config TEST_LIST_SORT 1982 tristate "Linked list sorting test" 1983 depends on DEBUG_KERNEL || m 1984 help 1985 Enable this to turn on 'list_sort()' function test. This test is 1986 executed only once during system boot (so affects only boot time), 1987 or at module load time. 1988 1989 If unsure, say N. 1990 1991config TEST_MIN_HEAP 1992 tristate "Min heap test" 1993 depends on DEBUG_KERNEL || m 1994 help 1995 Enable this to turn on min heap function tests. This test is 1996 executed only once during system boot (so affects only boot time), 1997 or at module load time. 1998 1999 If unsure, say N. 2000 2001config TEST_SORT 2002 tristate "Array-based sort test" 2003 depends on DEBUG_KERNEL || m 2004 help 2005 This option enables the self-test function of 'sort()' at boot, 2006 or at module load time. 2007 2008 If unsure, say N. 2009 2010config KPROBES_SANITY_TEST 2011 bool "Kprobes sanity tests" 2012 depends on DEBUG_KERNEL 2013 depends on KPROBES 2014 help 2015 This option provides for testing basic kprobes functionality on 2016 boot. Samples of kprobe and kretprobe are inserted and 2017 verified for functionality. 2018 2019 Say N if you are unsure. 2020 2021config BACKTRACE_SELF_TEST 2022 tristate "Self test for the backtrace code" 2023 depends on DEBUG_KERNEL 2024 help 2025 This option provides a kernel module that can be used to test 2026 the kernel stack backtrace code. This option is not useful 2027 for distributions or general kernels, but only for kernel 2028 developers working on architecture code. 2029 2030 Note that if you want to also test saved backtraces, you will 2031 have to enable STACKTRACE as well. 2032 2033 Say N if you are unsure. 2034 2035config RBTREE_TEST 2036 tristate "Red-Black tree test" 2037 depends on DEBUG_KERNEL 2038 help 2039 A benchmark measuring the performance of the rbtree library. 2040 Also includes rbtree invariant checks. 2041 2042config REED_SOLOMON_TEST 2043 tristate "Reed-Solomon library test" 2044 depends on DEBUG_KERNEL || m 2045 select REED_SOLOMON 2046 select REED_SOLOMON_ENC16 2047 select REED_SOLOMON_DEC16 2048 help 2049 This option enables the self-test function of rslib at boot, 2050 or at module load time. 2051 2052 If unsure, say N. 2053 2054config INTERVAL_TREE_TEST 2055 tristate "Interval tree test" 2056 depends on DEBUG_KERNEL 2057 select INTERVAL_TREE 2058 help 2059 A benchmark measuring the performance of the interval tree library 2060 2061config PERCPU_TEST 2062 tristate "Per cpu operations test" 2063 depends on m && DEBUG_KERNEL 2064 help 2065 Enable this option to build test module which validates per-cpu 2066 operations. 2067 2068 If unsure, say N. 2069 2070config ATOMIC64_SELFTEST 2071 tristate "Perform an atomic64_t self-test" 2072 help 2073 Enable this option to test the atomic64_t functions at boot or 2074 at module load time. 2075 2076 If unsure, say N. 2077 2078config ASYNC_RAID6_TEST 2079 tristate "Self test for hardware accelerated raid6 recovery" 2080 depends on ASYNC_RAID6_RECOV 2081 select ASYNC_MEMCPY 2082 help 2083 This is a one-shot self test that permutes through the 2084 recovery of all the possible two disk failure scenarios for a 2085 N-disk array. Recovery is performed with the asynchronous 2086 raid6 recovery routines, and will optionally use an offload 2087 engine if one is available. 2088 2089 If unsure, say N. 2090 2091config TEST_HEXDUMP 2092 tristate "Test functions located in the hexdump module at runtime" 2093 2094config TEST_STRING_HELPERS 2095 tristate "Test functions located in the string_helpers module at runtime" 2096 2097config TEST_STRSCPY 2098 tristate "Test strscpy*() family of functions at runtime" 2099 2100config TEST_KSTRTOX 2101 tristate "Test kstrto*() family of functions at runtime" 2102 2103config TEST_PRINTF 2104 tristate "Test printf() family of functions at runtime" 2105 2106config TEST_BITMAP 2107 tristate "Test bitmap_*() family of functions at runtime" 2108 help 2109 Enable this option to test the bitmap functions at boot. 2110 2111 If unsure, say N. 2112 2113config TEST_UUID 2114 tristate "Test functions located in the uuid module at runtime" 2115 2116config TEST_XARRAY 2117 tristate "Test the XArray code at runtime" 2118 2119config TEST_OVERFLOW 2120 tristate "Test check_*_overflow() functions at runtime" 2121 2122config TEST_RHASHTABLE 2123 tristate "Perform selftest on resizable hash table" 2124 help 2125 Enable this option to test the rhashtable functions at boot. 2126 2127 If unsure, say N. 2128 2129config TEST_HASH 2130 tristate "Perform selftest on hash functions" 2131 help 2132 Enable this option to test the kernel's integer (<linux/hash.h>), 2133 string (<linux/stringhash.h>), and siphash (<linux/siphash.h>) 2134 hash functions on boot (or module load). 2135 2136 This is intended to help people writing architecture-specific 2137 optimized versions. If unsure, say N. 2138 2139config TEST_IDA 2140 tristate "Perform selftest on IDA functions" 2141 2142config TEST_PARMAN 2143 tristate "Perform selftest on priority array manager" 2144 depends on PARMAN 2145 help 2146 Enable this option to test priority array manager on boot 2147 (or module load). 2148 2149 If unsure, say N. 2150 2151config TEST_IRQ_TIMINGS 2152 bool "IRQ timings selftest" 2153 depends on IRQ_TIMINGS 2154 help 2155 Enable this option to test the irq timings code on boot. 2156 2157 If unsure, say N. 2158 2159config TEST_LKM 2160 tristate "Test module loading with 'hello world' module" 2161 depends on m 2162 help 2163 This builds the "test_module" module that emits "Hello, world" 2164 on printk when loaded. It is designed to be used for basic 2165 evaluation of the module loading subsystem (for example when 2166 validating module verification). It lacks any extra dependencies, 2167 and will not normally be loaded by the system unless explicitly 2168 requested by name. 2169 2170 If unsure, say N. 2171 2172config TEST_BITOPS 2173 tristate "Test module for compilation of bitops operations" 2174 depends on m 2175 help 2176 This builds the "test_bitops" module that is much like the 2177 TEST_LKM module except that it does a basic exercise of the 2178 set/clear_bit macros and get_count_order/long to make sure there are 2179 no compiler warnings from C=1 sparse checker or -Wextra 2180 compilations. It has no dependencies and doesn't run or load unless 2181 explicitly requested by name. for example: modprobe test_bitops. 2182 2183 If unsure, say N. 2184 2185config TEST_VMALLOC 2186 tristate "Test module for stress/performance analysis of vmalloc allocator" 2187 default n 2188 depends on MMU 2189 depends on m 2190 help 2191 This builds the "test_vmalloc" module that should be used for 2192 stress and performance analysis. So, any new change for vmalloc 2193 subsystem can be evaluated from performance and stability point 2194 of view. 2195 2196 If unsure, say N. 2197 2198config TEST_USER_COPY 2199 tristate "Test user/kernel boundary protections" 2200 depends on m 2201 help 2202 This builds the "test_user_copy" module that runs sanity checks 2203 on the copy_to/from_user infrastructure, making sure basic 2204 user/kernel boundary testing is working. If it fails to load, 2205 a regression has been detected in the user/kernel memory boundary 2206 protections. 2207 2208 If unsure, say N. 2209 2210config TEST_BPF 2211 tristate "Test BPF filter functionality" 2212 depends on m && NET 2213 help 2214 This builds the "test_bpf" module that runs various test vectors 2215 against the BPF interpreter or BPF JIT compiler depending on the 2216 current setting. This is in particular useful for BPF JIT compiler 2217 development, but also to run regression tests against changes in 2218 the interpreter code. It also enables test stubs for eBPF maps and 2219 verifier used by user space verifier testsuite. 2220 2221 If unsure, say N. 2222 2223config TEST_BLACKHOLE_DEV 2224 tristate "Test blackhole netdev functionality" 2225 depends on m && NET 2226 help 2227 This builds the "test_blackhole_dev" module that validates the 2228 data path through this blackhole netdev. 2229 2230 If unsure, say N. 2231 2232config FIND_BIT_BENCHMARK 2233 tristate "Test find_bit functions" 2234 help 2235 This builds the "test_find_bit" module that measure find_*_bit() 2236 functions performance. 2237 2238 If unsure, say N. 2239 2240config TEST_FIRMWARE 2241 tristate "Test firmware loading via userspace interface" 2242 depends on FW_LOADER 2243 help 2244 This builds the "test_firmware" module that creates a userspace 2245 interface for testing firmware loading. This can be used to 2246 control the triggering of firmware loading without needing an 2247 actual firmware-using device. The contents can be rechecked by 2248 userspace. 2249 2250 If unsure, say N. 2251 2252config TEST_SYSCTL 2253 tristate "sysctl test driver" 2254 depends on PROC_SYSCTL 2255 help 2256 This builds the "test_sysctl" module. This driver enables to test the 2257 proc sysctl interfaces available to drivers safely without affecting 2258 production knobs which might alter system functionality. 2259 2260 If unsure, say N. 2261 2262config BITFIELD_KUNIT 2263 tristate "KUnit test bitfield functions at runtime" 2264 depends on KUNIT 2265 help 2266 Enable this option to test the bitfield functions at boot. 2267 2268 KUnit tests run during boot and output the results to the debug log 2269 in TAP format (http://testanything.org/). Only useful for kernel devs 2270 running the KUnit test harness, and not intended for inclusion into a 2271 production build. 2272 2273 For more information on KUnit and unit tests in general please refer 2274 to the KUnit documentation in Documentation/dev-tools/kunit/. 2275 2276 If unsure, say N. 2277 2278config SYSCTL_KUNIT_TEST 2279 tristate "KUnit test for sysctl" if !KUNIT_ALL_TESTS 2280 depends on KUNIT 2281 default KUNIT_ALL_TESTS 2282 help 2283 This builds the proc sysctl unit test, which runs on boot. 2284 Tests the API contract and implementation correctness of sysctl. 2285 For more information on KUnit and unit tests in general please refer 2286 to the KUnit documentation in Documentation/dev-tools/kunit/. 2287 2288 If unsure, say N. 2289 2290config LIST_KUNIT_TEST 2291 tristate "KUnit Test for Kernel Linked-list structures" if !KUNIT_ALL_TESTS 2292 depends on KUNIT 2293 default KUNIT_ALL_TESTS 2294 help 2295 This builds the linked list KUnit test suite. 2296 It tests that the API and basic functionality of the list_head type 2297 and associated macros. 2298 2299 KUnit tests run during boot and output the results to the debug log 2300 in TAP format (https://testanything.org/). Only useful for kernel devs 2301 running the KUnit test harness, and not intended for inclusion into a 2302 production build. 2303 2304 For more information on KUnit and unit tests in general please refer 2305 to the KUnit documentation in Documentation/dev-tools/kunit/. 2306 2307 If unsure, say N. 2308 2309config LINEAR_RANGES_TEST 2310 tristate "KUnit test for linear_ranges" 2311 depends on KUNIT 2312 select LINEAR_RANGES 2313 help 2314 This builds the linear_ranges unit test, which runs on boot. 2315 Tests the linear_ranges logic correctness. 2316 For more information on KUnit and unit tests in general please refer 2317 to the KUnit documentation in Documentation/dev-tools/kunit/. 2318 2319 If unsure, say N. 2320 2321config BITS_TEST 2322 tristate "KUnit test for bits.h" 2323 depends on KUNIT 2324 help 2325 This builds the bits unit test. 2326 Tests the logic of macros defined in bits.h. 2327 For more information on KUnit and unit tests in general please refer 2328 to the KUnit documentation in Documentation/dev-tools/kunit/. 2329 2330 If unsure, say N. 2331 2332config TEST_UDELAY 2333 tristate "udelay test driver" 2334 help 2335 This builds the "udelay_test" module that helps to make sure 2336 that udelay() is working properly. 2337 2338 If unsure, say N. 2339 2340config TEST_STATIC_KEYS 2341 tristate "Test static keys" 2342 depends on m 2343 help 2344 Test the static key interfaces. 2345 2346 If unsure, say N. 2347 2348config TEST_KMOD 2349 tristate "kmod stress tester" 2350 depends on m 2351 depends on NETDEVICES && NET_CORE && INET # for TUN 2352 depends on BLOCK 2353 select TEST_LKM 2354 select XFS_FS 2355 select TUN 2356 select BTRFS_FS 2357 help 2358 Test the kernel's module loading mechanism: kmod. kmod implements 2359 support to load modules using the Linux kernel's usermode helper. 2360 This test provides a series of tests against kmod. 2361 2362 Although technically you can either build test_kmod as a module or 2363 into the kernel we disallow building it into the kernel since 2364 it stress tests request_module() and this will very likely cause 2365 some issues by taking over precious threads available from other 2366 module load requests, ultimately this could be fatal. 2367 2368 To run tests run: 2369 2370 tools/testing/selftests/kmod/kmod.sh --help 2371 2372 If unsure, say N. 2373 2374config TEST_DEBUG_VIRTUAL 2375 tristate "Test CONFIG_DEBUG_VIRTUAL feature" 2376 depends on DEBUG_VIRTUAL 2377 help 2378 Test the kernel's ability to detect incorrect calls to 2379 virt_to_phys() done against the non-linear part of the 2380 kernel's virtual address map. 2381 2382 If unsure, say N. 2383 2384config TEST_MEMCAT_P 2385 tristate "Test memcat_p() helper function" 2386 help 2387 Test the memcat_p() helper for correctly merging two 2388 pointer arrays together. 2389 2390 If unsure, say N. 2391 2392config TEST_LIVEPATCH 2393 tristate "Test livepatching" 2394 default n 2395 depends on DYNAMIC_DEBUG 2396 depends on LIVEPATCH 2397 depends on m 2398 help 2399 Test kernel livepatching features for correctness. The tests will 2400 load test modules that will be livepatched in various scenarios. 2401 2402 To run all the livepatching tests: 2403 2404 make -C tools/testing/selftests TARGETS=livepatch run_tests 2405 2406 Alternatively, individual tests may be invoked: 2407 2408 tools/testing/selftests/livepatch/test-callbacks.sh 2409 tools/testing/selftests/livepatch/test-livepatch.sh 2410 tools/testing/selftests/livepatch/test-shadow-vars.sh 2411 2412 If unsure, say N. 2413 2414config TEST_OBJAGG 2415 tristate "Perform selftest on object aggreration manager" 2416 default n 2417 depends on OBJAGG 2418 help 2419 Enable this option to test object aggregation manager on boot 2420 (or module load). 2421 2422 2423config TEST_STACKINIT 2424 tristate "Test level of stack variable initialization" 2425 help 2426 Test if the kernel is zero-initializing stack variables and 2427 padding. Coverage is controlled by compiler flags, 2428 CONFIG_GCC_PLUGIN_STRUCTLEAK, CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF, 2429 or CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL. 2430 2431 If unsure, say N. 2432 2433config TEST_MEMINIT 2434 tristate "Test heap/page initialization" 2435 help 2436 Test if the kernel is zero-initializing heap and page allocations. 2437 This can be useful to test init_on_alloc and init_on_free features. 2438 2439 If unsure, say N. 2440 2441config TEST_HMM 2442 tristate "Test HMM (Heterogeneous Memory Management)" 2443 depends on TRANSPARENT_HUGEPAGE 2444 depends on DEVICE_PRIVATE 2445 select HMM_MIRROR 2446 select MMU_NOTIFIER 2447 help 2448 This is a pseudo device driver solely for testing HMM. 2449 Say M here if you want to build the HMM test module. 2450 Doing so will allow you to run tools/testing/selftest/vm/hmm-tests. 2451 2452 If unsure, say N. 2453 2454config TEST_FREE_PAGES 2455 tristate "Test freeing pages" 2456 help 2457 Test that a memory leak does not occur due to a race between 2458 freeing a block of pages and a speculative page reference. 2459 Loading this module is safe if your kernel has the bug fixed. 2460 If the bug is not fixed, it will leak gigabytes of memory and 2461 probably OOM your system. 2462 2463config TEST_FPU 2464 tristate "Test floating point operations in kernel space" 2465 depends on X86 && !KCOV_INSTRUMENT_ALL 2466 help 2467 Enable this option to add /sys/kernel/debug/selftest_helpers/test_fpu 2468 which will trigger a sequence of floating point operations. This is used 2469 for self-testing floating point control register setting in 2470 kernel_fpu_begin(). 2471 2472 If unsure, say N. 2473 2474endif # RUNTIME_TESTING_MENU 2475 2476config MEMTEST 2477 bool "Memtest" 2478 help 2479 This option adds a kernel parameter 'memtest', which allows memtest 2480 to be set. 2481 memtest=0, mean disabled; -- default 2482 memtest=1, mean do 1 test pattern; 2483 ... 2484 memtest=17, mean do 17 test patterns. 2485 If you are unsure how to answer this question, answer N. 2486 2487 2488 2489config HYPERV_TESTING 2490 bool "Microsoft Hyper-V driver testing" 2491 default n 2492 depends on HYPERV && DEBUG_FS 2493 help 2494 Select this option to enable Hyper-V vmbus testing. 2495 2496endmenu # "Kernel Testing and Coverage" 2497 2498source "Documentation/Kconfig" 2499 2500endmenu # Kernel hacking 2501