"make defconfig" calls kconfig twice, and the first one (kconfig -h) was consuming the KCONFIG_ALLCONFIG=<(echo blah) input so the actual defconfig generation (kconfig -d) didn't see the PENDING overrides.