bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--brcm80211--brcmsmac--brcmsmac.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 821 1218 14879 120942
Removed infinite loop in arch_local_save_flags___2
Removed infinite loop in arch_local_save_flags___0
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in arch_local_save_flags___1
Removed infinite loop in arch_local_save_flags
Removed infinite loop in ldv_stop
Removed infinite loop in ldv_module_put_and_exit
INFO: Compilation, preparation and instrumentation time: 4.94629693031
Removed calls to '_dev_info' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'tasklet_init' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'dev_err' (function is undefined)
Removed calls to 'wiphy_rfkill_set_hw_state' (function is undefined)
Removed calls to 'wiphy_rfkill_stop_polling' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Defining function printk as symbolic
Removed calls to 'ldv__builtin_va_start' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'ldv__builtin_va_end' (function is undefined)
Defining function net_ratelimit as symbolic
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Defining function lock_is_held as symbolic
Removed calls to 'led_classdev_unregister' (function is undefined)
Removed calls to 'gpio_free' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'tasklet_kill' (function is undefined)
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Defining function cancel_delayed_work as symbolic
Removed calls to 'dma_free_attrs' (function is undefined)
Defining function gpio_request_one as symbolic
Defining function snprintf as symbolic
Defining function led_classdev_register as symbolic
Defining function __ieee80211_get_radio_led_name as symbolic
Defining function gpio_to_desc as symbolic
Defining function gpiod_direction_output_raw as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Removed calls to 'bcma_host_pci_down' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'wiphy_apply_custom_regulatory' (function is undefined)
Defining function ieee80211_register_hw as symbolic
Defining function regulatory_hint as symbolic
Defining function seq_printf as symbolic
Defining function debugfs_create_file as symbolic
Defining function devm_kmalloc as symbolic
Defining function brcmu_boardrev_str as symbolic
Defining function debugfs_create_dir as symbolic
Defining function freq_reg_info as symbolic
Defining function wiphy_to_ieee80211_hw as symbolic
Defining function request_threaded_irq as symbolic
Removed calls to '__tasklet_schedule' (function is undefined)
Defining function pci_bus_read_config_dword as symbolic
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'ieee80211_wake_queue' (function is undefined)
Defining function bcma_core_is_enabled as symbolic
Removed calls to 'bcma_core_disable' (function is undefined)
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Removed calls to 'bcma_core_set_clockmode' (function is undefined)
Defining function bcma_core_enable as symbolic
Removed calls to 'brcmu_pkt_buf_free_skb' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to 'ieee80211_queue_delayed_work' (function is undefined)
Defining function __msecs_to_jiffies as symbolic
Defining function cordic_calc_iq as symbolic
Defining function int_sqrt as symbolic
Defining function bcma_chipco_gpio_control as symbolic
Defining function brcmu_pkt_buf_get_skb as symbolic
Defining function skb_pull as symbolic
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Defining function __phys_addr as symbolic
Removed calls to 'ieee80211_restart_hw' (function is undefined)
Defining function dma_alloc_attrs as symbolic
Defining function bcma_chipco_get_alp_clock as symbolic
Removed calls to 'bcma_chipco_regctl_maskset' (function is undefined)
Removed calls to 'bcma_chipco_chipctl_maskset' (function is undefined)
Removed calls to 'bcma_chipco_pll_write' (function is undefined)
Removed calls to 'bcma_chipco_pll_maskset' (function is undefined)
Removed calls to 'bcma_pmu_spuravoid_pllupdate' (function is undefined)
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Removed calls to 'skb_unlink' (function is undefined)
Removed calls to 'ieee80211_rx_irqsafe' (function is undefined)
Removed calls to 'wiphy_rfkill_start_polling' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Defining function ieee80211_channel_to_frequency as symbolic
Defining function ieee80211_queue_stopped as symbolic
Defining function skb_dequeue as symbolic
Removed calls to 'ieee80211_stop_queue' (function is undefined)
Defining function ieee80211_alloc_hw_nm as symbolic
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to 'bcma_core_pci_power_save' (function is undefined)
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Removed calls to 'ieee80211_start_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_stop_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Defining function prepare_to_wait_event as symbolic
Defining function schedule_timeout as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function ieee80211_beacon_get_tim as symbolic
Defining function ieee80211_proberesp_get as symbolic
Defining function skb_push as symbolic
Removed calls to 'bcma_host_pci_up' (function is undefined)
Defining function bcma_host_pci_irq_ctl as symbolic
Defining function sprintf as symbolic
Defining function request_firmware as symbolic
Defining function kmemdup as symbolic
Removed calls to 'dev_warn' (function is undefined)
Defining function __bcma_driver_register as symbolic
Defining function seq_lseek as symbolic
Defining function seq_read as symbolic
Defining function single_release as symbolic
Defining function single_open as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'bcma_driver_unregister' (function is undefined)
Removed calls to 'trace_seq_printf' (function is undefined)
Defining function trace_event_reg as symbolic
Defining function trace_event_raw_init as symbolic
Defining function trace_define_field as symbolic
Defining function trace_raw_output_prep as symbolic
Defining function queue_work_on as symbolic
Defining function cancel_work_sync as symbolic
Defining function queue_delayed_work_on as symbolic
Removed calls to 'flush_workqueue' (function is undefined)
Defining function bcma_chipco_gpio_out as symbolic
Defining function bcma_chipco_gpio_outen as symbolic
Removed calls to 'dev_crit' (function is undefined)
Linked our definitions to these undefined functions:
  strcmp
  strncmp
  strncpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 5.50587391853
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 1052 851 8014 84731
INFO: Starting verification
KLEE: WARNING ONCE: function "__brcms_dbg" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___2" has inline asm
KLEE: WARNING ONCE: function "brcms_del_timer" has inline asm
KLEE: WARNING ONCE: function "brcms_c_attach" has inline asm
KLEE: WARNING ONCE: function "__brcms_err" has inline asm
KLEE: WARNING ONCE: function "tasklet_schedule" has inline asm
KLEE: WARNING ONCE: function "wlc_intstatus" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___0" has inline asm
KLEE: WARNING ONCE: function "brcms_c_stf_phy_chain_calc" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "_brcms_timer" has inline asm
KLEE: WARNING ONCE: function "brcms_c_stf_txchain_set" has inline asm
KLEE: WARNING ONCE: function "wlc_phy_stf_chain_set" has inline asm
KLEE: WARNING ONCE: function "brcms_c_stf_txcore_set" has inline asm
KLEE: WARNING ONCE: function "brcms_add_timer" has inline asm
KLEE: WARNING ONCE: function "wlc_lcnphy_rx_signal_power" has inline asm
KLEE: WARNING ONCE: function "wlc_phy_compute_dB" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "ampdu_finalize" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___1" has inline asm
KLEE: WARNING ONCE: function "__brcms_warn" has inline asm
KLEE: WARNING ONCE: function "brcms_c_dpc" has inline asm
KLEE: WARNING ONCE: function "trace_brcms_txdesc___0" has inline asm
KLEE: WARNING ONCE: function "trace_brcms_txdesc" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held" has inline asm
KLEE: WARNING ONCE: function "wlc_phy_stf_chain_init" has inline asm
KLEE: WARNING ONCE: function "__brcms_info" has inline asm
KLEE: WARNING ONCE: function "__brcms_crit" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
KLEE: output directory is "/tmp/symbiotic-wvpQUn/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "__brcms_dbg" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___2" has inline asm
KLEE: WARNING ONCE: function "brcms_del_timer" has inline asm
KLEE: WARNING ONCE: function "brcms_c_attach" has inline asm
KLEE: WARNING ONCE: function "__brcms_err" has inline asm
KLEE: WARNING ONCE: function "tasklet_schedule" has inline asm
KLEE: WARNING ONCE: function "wlc_intstatus" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___0" has inline asm
KLEE: WARNING ONCE: function "brcms_c_stf_phy_chain_calc" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "_brcms_timer" has inline asm
KLEE: WARNING ONCE: function "brcms_c_stf_txchain_set" has inline asm
KLEE: WARNING ONCE: function "wlc_phy_stf_chain_set" has inline asm
KLEE: WARNING ONCE: function "brcms_c_stf_txcore_set" has inline asm
KLEE: WARNING ONCE: function "brcms_add_timer" has inline asm
KLEE: WARNING ONCE: function "wlc_lcnphy_rx_signal_power" has inline asm
KLEE: WARNING ONCE: function "wlc_phy_compute_dB" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "ampdu_finalize" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___1" has inline asm
KLEE: WARNING ONCE: function "__brcms_warn" has inline asm
KLEE: WARNING ONCE: function "brcms_c_dpc" has inline asm
KLEE: WARNING ONCE: function "trace_brcms_txdesc___0" has inline asm
KLEE: WARNING ONCE: function "trace_brcms_txdesc" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held" has inline asm
KLEE: WARNING ONCE: function "wlc_phy_stf_chain_init" has inline asm
KLEE: WARNING ONCE: function "__brcms_info" has inline asm
KLEE: WARNING ONCE: function "__brcms_crit" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 12.4602160454
