bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-8a9f335-1-32_7a-drivers--net--wireless--ath--carl9170--carl9170.ko-entry_point_false-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 447 597 6837 45099
Removed infinite loop in carl9170_op_add_interface
Removed infinite loop in carl9170_set_channel
Removed infinite loop in nl80211_to_carl
Removed infinite loop in carl9170_init_rf_bank4_pwr
Removed infinite loop in carl9170_set_power_cal
Removed infinite loop in carl9170_get_hw_dyn_params
Removed infinite loop in carl9170_tx_physet
Removed infinite loop in carl9170_handle_mpdu
Removed infinite loop in carl9170_rx_mac_status
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.56368398666
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'kref_init' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to 'ieee80211_stop_queue' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_dereference' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to 'dev_kfree_skb_any' (function is undefined)
Removed calls to 'usb_unpoison_anchored_urbs' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Removed calls to 'bitmap_release_region' (function is undefined)
Removed calls to 'synchronize_sched' (function is undefined)
Removed calls to 'ieee80211_sta_block_awake' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'ieee80211_start_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_stop_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_queue_work' (function is undefined)
Removed calls to 'mutex_lock' (function is undefined)
Defining function find_first_bit as symbolic
Defining function find_next_bit as symbolic
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'ieee80211_wake_queue' (function is undefined)
Removed calls to 'complete' (function is undefined)
Removed calls to '__bitmap_shift_right' (function is undefined)
Defining function skb_dequeue as symbolic
Defining function wait_for_completion_timeout as symbolic
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Defining function kref_put as symbolic
Defining function skb_pull as symbolic
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function ieee80211_find_sta as symbolic
Defining function lock_is_held as symbolic
Defining function __bitmap_empty as symbolic
Defining function ieee80211_queue_stopped as symbolic
Removed calls to 'usb_anchor_urb' (function is undefined)
Removed calls to 'usb_free_urb' (function is undefined)
Defining function usb_alloc_urb as symbolic
Removed calls to 'usb_unanchor_urb' (function is undefined)
Defining function usb_get_from_anchor as symbolic
Defining function usb_submit_urb as symbolic
Defining function dev_err as symbolic
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'print_hex_dump_bytes' (function is undefined)
Defining function net_ratelimit as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'usb_queue_reset_device' (function is undefined)
Removed calls to 'usb_poison_anchored_urbs' (function is undefined)
Removed calls to 'tasklet_kill' (function is undefined)
Removed calls to 'usb_scuttle_anchored_urbs' (function is undefined)
Removed calls to 'complete_all' (function is undefined)
Removed calls to 'usb_kill_anchored_urbs' (function is undefined)
Removed calls to '__tasklet_hi_schedule' (function is undefined)
Defining function usb_wait_anchor_empty_timeout as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__list_add' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Defining function ieee80211_beacon_get_tim as symbolic
Defining function ath_regd_get_band_ctl as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function bitmap_find_free_region as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'kref_get' (function is undefined)
Defining function cancel_delayed_work_sync as symbolic
Defining function cancel_work_sync as symbolic
Removed calls to 'ieee80211_queue_delayed_work' (function is undefined)
Defining function msecs_to_jiffies as symbolic
Removed calls to 'dev_kfree_skb_irq' (function is undefined)
Defining function usb_ifnum_to_if as symbolic
Defining function dev_get_drvdata as symbolic
Defining function skb_push as symbolic
Removed calls to 'tasklet_init' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'usb_put_dev' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Defining function usb_control_msg as symbolic
Defining function _dev_info as symbolic
Removed calls to 'input_event' (function is undefined)
Defining function dev_warn as symbolic
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'input_unregister_device' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'mutex_destroy' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Defining function dev_set_drvdata as symbolic
Removed calls to 'led_classdev_unregister' (function is undefined)
Defining function usb_reset_device as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Defining function usb_get_dev as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function request_firmware_nowait as symbolic
Removed calls to 'device_release_driver' (function is undefined)
Removed calls to 'input_set_capability' (function is undefined)
Removed calls to 'input_free_device' (function is undefined)
Defining function ath_regd_init as symbolic
Defining function ieee80211_register_hw as symbolic
Defining function ath_is_world_regd as symbolic
Defining function regulatory_hint as symbolic
Defining function input_allocate_device as symbolic
Defining function snprintf as symbolic
Defining function input_register_device as symbolic
Defining function __ieee80211_get_assoc_led_name as symbolic
Defining function led_classdev_register as symbolic
Defining function __ieee80211_get_tx_led_name as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function wiphy_to_ieee80211_hw as symbolic
Defining function ath_reg_notifier_apply as symbolic
Defining function crc32_le as symbolic
Defining function device_set_wakeup_enable as symbolic
Defining function strnlen as symbolic
Defining function strlcpy as symbolic
Removed calls to 'skb_trim' (function is undefined)
Removed calls to 'ieee80211_rx' (function is undefined)
Defining function dev_alloc_skb as symbolic
Defining function skb_put as symbolic
Defining function ieee80211_alloc_hw as symbolic
Removed calls to 'ieee80211_restart_hw' (function is undefined)
Defining function ieee80211_stop_tx_ba_session as symbolic
Removed calls to '__tasklet_schedule' (function is undefined)
Defining function __alloc_skb as symbolic
Removed calls to 'vfree' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Defining function vmalloc as symbolic
Defining function mutex_trylock as symbolic
Defining function _copy_from_user as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function bitmap_scnprintf as symbolic
Defining function __bitmap_weight as symbolic
Defining function sscanf as symbolic
Defining function del_timer_sync as symbolic
Defining function del_timer as symbolic
Defining function usb_register_driver as symbolic
Removed calls to 'usb_deregister' (function is undefined)
Defining function ldv_release_5 as symbolic
Defining function ldv_release_19 as symbolic
Defining function ldv_release_43 as symbolic
Defining function ldv_release_37 as symbolic
Defining function ldv_release_45 as symbolic
Defining function ldv_release_34 as symbolic
Defining function ldv_release_4 as symbolic
Defining function ldv_release_8 as symbolic
Defining function ldv_release_38 as symbolic
Defining function ldv_release_15 as symbolic
Defining function ldv_release_12 as symbolic
Defining function ldv_release_41 as symbolic
Defining function ldv_release_9 as symbolic
Defining function ldv_release_3 as symbolic
Defining function ldv_release_36 as symbolic
Defining function ldv_release_39 as symbolic
Defining function ldv_release_6 as symbolic
Defining function ldv_release_29 as symbolic
Defining function ldv_release_23 as symbolic
Defining function ldv_release_13 as symbolic
Defining function ldv_release_22 as symbolic
Defining function ldv_release_42 as symbolic
Defining function ldv_release_11 as symbolic
Defining function ldv_release_35 as symbolic
Defining function ldv_release_31 as symbolic
Defining function ldv_release_10 as symbolic
Defining function ldv_release_24 as symbolic
Defining function ldv_release_14 as symbolic
Defining function ldv_release_20 as symbolic
Defining function ldv_release_40 as symbolic
Defining function ldv_release_28 as symbolic
Defining function ldv_release_25 as symbolic
Defining function ldv_release_27 as symbolic
Defining function ldv_release_44 as symbolic
Defining function ldv_release_16 as symbolic
Defining function ldv_release_30 as symbolic
Defining function ldv_release_18 as symbolic
Defining function ldv_release_17 as symbolic
Defining function ldv_release_26 as symbolic
Defining function ldv_release_7 as symbolic
Defining function ldv_release_21 as symbolic
Defining function ldv_release_32 as symbolic
Defining function ldv_release_33 as symbolic
Linked our definitions to these undefined functions:
  memcmp
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_size_t_named
  __VERIFIER_nondet_u32_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.42602705956
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 710 531 3384 21598
INFO: Starting verification
KLEE: WARNING ONCE: function "carl9170_op_tx" has inline asm
KLEE: WARNING ONCE: function "carl9170_op_add_interface" has inline asm
KLEE: WARNING ONCE: function "carl9170_flush" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_status" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_cmd_complete" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_submit_cmd_urb" has inline asm
KLEE: WARNING ONCE: function "carl9170_restart" has inline asm
KLEE: WARNING ONCE: function "__carl9170_tx_process_status" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_callback" has inline asm
KLEE: WARNING ONCE: function "carl9170_set_channel" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_physet" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_ampdu" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_tx_data_complete" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_submit_data_urb" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_init_device" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_rx_complete" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_submit_rx_urb" has inline asm
KLEE: WARNING ONCE: function "carl9170_parse_firmware" has inline asm
KLEE: WARNING ONCE: function "carl9170_register" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_restart" has inline asm
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u16_named
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u8_named
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_306d7a96-b6ee-4e31-8126-23ceb1615edf/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 41416 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 40873 states (over memory cap)
KLEE: WARNING: killing 40952 states (over memory cap)
KLEE: WARNING: killing 39820 states (over memory cap)
KLEE: WARNING: killing 38476 states (over memory cap)
KLEE: WARNING: killing 35639 states (over memory cap)
KLEE: WARNING: killing 37927 states (over memory cap)
KLEE: WARNING: killing 36913 states (over memory cap)
KLEE: WARNING: killing 42466 states (over memory cap)
KLEE: WARNING: killing 45865 states (over memory cap)
KLEE: WARNING: killing 44491 states (over memory cap)
KLEE: WARNING: killing 47551 states (over memory cap)
KLEE: WARNING: killing 47346 states (over memory cap)
KLEE: WARNING: killing 49253 states (over memory cap)
KLEE: WARNING: killing 42297 states (over memory cap)
KLEE: WARNING: killing 45394 states (over memory cap)
KLEE: WARNING: killing 41189 states (over memory cap)
KLEE: WARNING: killing 43565 states (over memory cap)
KLEE: WARNING: killing 41285 states (over memory cap)
KLEE: WARNING: killing 42588 states (over memory cap)
KLEE: WARNING: killing 44102 states (over memory cap)
KLEE: WARNING: killing 45333 states (over memory cap)
KLEE: WARNING: killing 44784 states (over memory cap)
KLEE: WARNING: killing 43185 states (over memory cap)
KLEE: WARNING: killing 43054 states (over memory cap)
KLEE: WARNING: killing 42305 states (over memory cap)
KLEE: WARNING: killing 41674 states (over memory cap)
KLEE: WARNING: killing 42967 states (over memory cap)
KLEE: WARNING: killing 43895 states (over memory cap)
KLEE: WARNING: killing 43711 states (over memory cap)
KLEE: WARNING: killing 44522 states (over memory cap)
KLEE: WARNING: killing 43337 states (over memory cap)
KLEE: WARNING: killing 46543 states (over memory cap)
KLEE: WARNING: killing 43952 states (over memory cap)
KLEE: WARNING: killing 43133 states (over memory cap)
KLEE: WARNING: killing 43714 states (over memory cap)
KLEE: WARNING: killing 42471 states (over memory cap)
KLEE: WARNING: killing 45588 states (over memory cap)
KLEE: WARNING: killing 43440 states (over memory cap)
KLEE: WARNING: killing 42831 states (over memory cap)
KLEE: WARNING: killing 40620 states (over memory cap)
KLEE: WARNING: killing 45163 states (over memory cap)
KLEE: WARNING: killing 45327 states (over memory cap)
KLEE: WARNING: killing 41801 states (over memory cap)
KLEE: WARNING: killing 43684 states (over memory cap)
KLEE: WARNING: killing 46077 states (over memory cap)
KLEE: WARNING: killing 40677 states (over memory cap)
KLEE: WARNING: killing 43607 states (over memory cap)
KLEE: WARNING: killing 44325 states (over memory cap)
KLEE: WARNING: killing 42193 states (over memory cap)
KLEE: WARNING: killing 43303 states (over memory cap)
KLEE: WARNING: killing 42773 states (over memory cap)
KLEE: WARNING: killing 46998 states (over memory cap)
KLEE: WARNING: killing 44125 states (over memory cap)
KLEE: WARNING: killing 45653 states (over memory cap)
KLEE: WARNING: killing 42766 states (over memory cap)
KLEE: WARNING: killing 45460 states (over memory cap)
KLEE: WARNING: killing 43208 states (over memory cap)
KLEE: WARNING: killing 43861 states (over memory cap)
KLEE: WARNING: killing 43611 states (over memory cap)
KLEE: WARNING: killing 42880 states (over memory cap)
KLEE: WARNING: killing 45209 states (over memory cap)
KLEE: WARNING: killing 41210 states (over memory cap)
KLEE: WARNING: killing 43006 states (over memory cap)
KLEE: WARNING: killing 44451 states (over memory cap)
KLEE: WARNING: killing 45301 states (over memory cap)
KLEE: WARNING: killing 43140 states (over memory cap)
KLEE: WARNING: killing 41864 states (over memory cap)
KLEE: WARNING: killing 42685 states (over memory cap)
KLEE: WARNING: killing 45221 states (over memory cap)
KLEE: WARNING: killing 44575 states (over memory cap)
KLEE: WARNING: killing 42092 states (over memory cap)
KLEE: WARNING: killing 43809 states (over memory cap)
KLEE: WARNING: killing 44038 states (over memory cap)
KLEE: WARNING: killing 42111 states (over memory cap)
KLEE: WARNING: killing 44545 states (over memory cap)
KLEE: WARNING: killing 45439 states (over memory cap)
KLEE: WARNING: killing 43467 states (over memory cap)
KLEE: WARNING: killing 42475 states (over memory cap)
KLEE: WARNING: killing 43224 states (over memory cap)
KLEE: WARNING: killing 44728 states (over memory cap)
KLEE: WARNING: killing 44639 states (over memory cap)
KLEE: WARNING: killing 43331 states (over memory cap)
KLEE: WARNING: killing 43083 states (over memory cap)
KLEE: WARNING: killing 44446 states (over memory cap)
KLEE: WARNING: killing 43991 states (over memory cap)
KLEE: WARNING: killing 44023 states (over memory cap)
KLEE: WARNING: killing 41302 states (over memory cap)
KLEE: WARNING: killing 43323 states (over memory cap)
KLEE: WARNING: killing 43539 states (over memory cap)
KLEE: WARNING: killing 43846 states (over memory cap)
KLEE: WARNING: killing 42883 states (over memory cap)
