> > The idea is to leave the watchdog code in kernel/time/clocksource.c, > > but to move the fault injection into kernel/time/clocksourcefault.c or > > some such. In this new file, new clocksource structures are created that > > use some existing timebase/clocksource under the covers. These then > > inject delays based on module parameters (one senstive to CPU number, > > the other unconditional). They register these clocksources using the > > normal interfaces, and verify that they are eventually marked unstable > > when the fault-injection parameters warrant it. This is combined with > > the usual checking of the console log. > > > > Or am I missing your point? > > That's what I meant. I still think all this stuff should be in the fault injection framework, like other fault injections, to have a consistent discoverable interface. I actually checked now and the standard fault injection supports boot arguments, so needing it at boot time shouldn't be a barrier. -Andi