bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.14/linux-3.14__linux-alloc-spinlock__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 409 579 6945 50730
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.45070409775
Defining function external_allocated_data as symbolic
Defining function rtl_pci_probe as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to 'vfree' (function is undefined)
Removed calls to 'rtl_efuse_shadow_map_update' (function is undefined)
Removed calls to 'rtl_cam_reset_all_entry' (function is undefined)
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'synchronize_irq' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'rtl_get_tcb_desc' (function is undefined)
Removed calls to 'rtl_process_phyinfo' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to 'ldv_assert' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Removed calls to 'rtl_cam_mark_invalid' (function is undefined)
Removed calls to 'rtl_cam_empty_entry' (function is undefined)
Removed calls to 'rtl_cam_del_entry' (function is undefined)
Removed calls to '__ldv_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function printk as symbolic
Defining function rtl_cam_get_free_entry as symbolic
Defining function rtl_cam_delete_one_entry as symbolic
Defining function rtl_cam_add_one_entry as symbolic
Defining function rtl_ps_enable_nic as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function rtl_ps_disable_nic as symbolic
Defining function msecs_to_jiffies as symbolic
Defining function mod_timer as symbolic
Removed calls to 'ldv_switch_to_interrupt_context' (function is undefined)
Removed calls to 'ldv_switch_to_process_context' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Defining function ieee80211_find_sta as symbolic
Defining function rtlwifi_rate_mapping as symbolic
Defining function rtl_query_rxpwrpercentage as symbolic
Defining function rtl_evm_db_to_percentage as symbolic
Defining function rtl_signal_scale_mapping as symbolic
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Defining function __phys_addr as symbolic
Defining function skb_push as symbolic
Removed calls to 'kmemleak_not_leak' (function is undefined)
Defining function skb_put as symbolic
Removed calls to '__udelay' (function is undefined)
Defining function efuse_read_1byte as symbolic
Defining function del_timer_sync as symbolic
Defining function request_firmware_nowait as symbolic
Defining function rtl_pci_suspend as symbolic
Defining function rtl_pci_resume as symbolic
Removed calls to 'pci_unregister_driver' (function is undefined)
Defining function __pci_register_driver as symbolic
Removed calls to 'ldv_pre_probe' (function is undefined)
Removed calls to 'rtl_pci_disconnect' (function is undefined)
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'rtl_phy_scan_operation_backup' (function is undefined)
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.73399996758
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 575 418 3428 28182
INFO: Starting verification
KLEE: WARNING ONCE: function "rtl88e_init_sw_vars" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_read_eeprom_info" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_hw_init" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_card_disable" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bw_mode" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_sw_chnl" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_beacon_interval" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_update_interrupt_mask" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_get_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_update_hal_rate_tbl" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_tx_fill_desc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_tx_fill_cmddesc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_rx_query_desc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_gpio_radio_on_off_checking" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_watchdog" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rf_power_state" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_led_control" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_enable_hw_security_config" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_key" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_query_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_query_rf_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rf_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_allow_all_destaddr" has inline asm
KLEE: WARNING ONCE: function "rf_serial_read" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_sw_led_on" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_sw_led_off" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_write_dig" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_check_txpower_tracking" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_update_tx_ant" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_update_rx_idle_ant" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_lc_calibrate" has inline asm
KLEE: WARNING ONCE: function "_rtl88e_phy_iq_calibrate" has inline asm
KLEE: WARNING ONCE: function "rtl88e_fill_h2c_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_io_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_fw_pwrmode_cmd" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_set_fw_clock_on" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_fw_rsvdpagepkt" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_p2p_ps_offload_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_sw_chnl_callback" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bw_mode_callback" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_rf6052_set_bandwidth" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_set_media_status" has inline asm
KLEE: WARNING ONCE: function "rtl88_hal_pwrseqcmdparsing" has inline asm
KLEE: WARNING ONCE: function "rtl88e_firmware_selfreset" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_llt_write" has inline asm
KLEE: WARNING ONCE: function "rtl88e_download_fw" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_mac_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_bb_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_rf6052_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rfpath_switch" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_init" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_config_rf_with_headerfile" has inline asm
KLEE: WARNING ONCE: function "config_bb_with_header" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_get_hw_reg_originalvalue" has inline asm
KLEE: WARNING: undefined reference to function: rtl_fw_cb
KLEE: WARNING: undefined reference to function: rtl_pci_disconnect
KLEE: WARNING: undefined reference to function: rtl_phy_scan_operation_backup
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_39510d59-28da-4fda-a8a7-4da659bf98ab/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: flushing 10568 bytes on read, may be slow and/or crash: MO37[10568] allocated at global:
KLEE: ERROR: /tmp/symbiotic-UbrB14/linux-3.14__linux-alloc-spinlock__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c:29904: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-UbrB14/linux-3.14__linux-alloc-spinlock__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c:29609: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: output directory is "/tmp/symbiotic-UbrB14/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "rtl88e_init_sw_vars" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_read_eeprom_info" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_hw_init" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_card_disable" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bw_mode" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_sw_chnl" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_beacon_interval" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_update_interrupt_mask" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_get_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_update_hal_rate_tbl" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_tx_fill_desc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_tx_fill_cmddesc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_rx_query_desc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_gpio_radio_on_off_checking" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_watchdog" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rf_power_state" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_led_control" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_enable_hw_security_config" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_key" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_query_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_query_rf_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rf_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_allow_all_destaddr" has inline asm
KLEE: WARNING ONCE: function "rf_serial_read" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_sw_led_on" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_sw_led_off" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_write_dig" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_check_txpower_tracking" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_update_tx_ant" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_update_rx_idle_ant" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_lc_calibrate" has inline asm
KLEE: WARNING ONCE: function "_rtl88e_phy_iq_calibrate" has inline asm
KLEE: WARNING ONCE: function "rtl88e_fill_h2c_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_io_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_fw_pwrmode_cmd" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_set_fw_clock_on" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_fw_rsvdpagepkt" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_p2p_ps_offload_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_sw_chnl_callback" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bw_mode_callback" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_rf6052_set_bandwidth" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_set_media_status" has inline asm
KLEE: WARNING ONCE: function "rtl88_hal_pwrseqcmdparsing" has inline asm
KLEE: WARNING ONCE: function "rtl88e_firmware_selfreset" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_llt_write" has inline asm
KLEE: WARNING ONCE: function "rtl88e_download_fw" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_mac_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_bb_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_rf6052_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rfpath_switch" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_init" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_config_rf_with_headerfile" has inline asm
KLEE: WARNING ONCE: function "config_bb_with_header" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_get_hw_reg_originalvalue" has inline asm
KLEE: WARNING: undefined reference to function: rtl_fw_cb
KLEE: WARNING: undefined reference to function: rtl_pci_disconnect
KLEE: WARNING: undefined reference to function: rtl_phy_scan_operation_backup
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_39510d59-28da-4fda-a8a7-4da659bf98ab/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: flushing 10568 bytes on read, may be slow and/or crash: MO37[10568] allocated at global:
KLEE: ERROR: /tmp/symbiotic-UbrB14/linux-3.14__linux-alloc-spinlock__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c:29904: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-UbrB14/linux-3.14__linux-alloc-spinlock__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c:29609: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f6a41c38390
4  klee            0x0000000000a5a716 klee::SltExpr::create(klee::ref<klee::Expr> const&, klee::ref<klee::Expr> const&) + 38
5  klee            0x00000000005d77cc klee::Executor::executeInstruction(klee::ExecutionState&, klee::KInstruction*) + 10924
6  klee            0x00000000005da8c5 klee::Executor::run(klee::ExecutionState&) + 2117
7  klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
8  klee            0x0000000000593c63 main + 8867
9  libc.so.6       0x00007f6a40fdc830 __libc_start_main + 240
10 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 23.9192581177
