bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 364 322 4001 26550
Removed infinite loop in ldv_stop
Removed infinite loop in ldv_module_put_and_exit
INFO: Compilation, preparation and instrumentation time: 0.919723987579
Removed calls to 'unregister_netdev' (function is undefined)
Removed calls to 'free_netdev' (function is undefined)
Removed calls to 'consume_skb' (function is undefined)
Removed calls to '__release_region' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'up' (function is undefined)
Defining function skb_dequeue as symbolic
Defining function remove_proc_subtree as symbolic
Defining function down_interruptible as symbolic
Removed calls to 'schedule' (function is undefined)
Defining function printk as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Removed calls to 'proc_set_user' (function is undefined)
Defining function alloc_netdev_mqs as symbolic
Defining function __request_region as symbolic
Defining function proc_mkdir_mode as symbolic
Defining function proc_create_data as symbolic
Defining function register_netdev as symbolic
Defining function crypto_alloc_base as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Defining function dma_alloc_attrs as symbolic
Defining function ioremap_nocache as symbolic
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'netif_tx_wake_queue' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function eth_validate_addr as symbolic
Defining function down_trylock as symbolic
Removed calls to '__might_fault' (function is undefined)
Removed calls to '__copy_from_user_overflow' (function is undefined)
Removed calls to '__copy_to_user_overflow' (function is undefined)
Defining function capable as symbolic
Defining function _copy_to_user as symbolic
Defining function _copy_from_user as symbolic
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Defining function kthread_stop as symbolic
Removed calls to 'debug_check_no_locks_held' (function is undefined)
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'add_wait_queue' (function is undefined)
Removed calls to 'remove_wait_queue' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'wireless_send_event' (function is undefined)
Defining function kthread_create_on_node as symbolic
Defining function wake_up_process as symbolic
Removed calls to 'wireless_spy_update' (function is undefined)
Removed calls to 'skb_trim' (function is undefined)
Removed calls to '__dev_kfree_skb_irq' (function is undefined)
Defining function request_threaded_irq as symbolic
Defining function skb_put as symbolic
Defining function eth_type_trans as symbolic
Defining function netif_rx as symbolic
Defining function __netdev_alloc_skb as symbolic
Defining function set_freezable as symbolic
Defining function kthread_should_stop as symbolic
Defining function schedule_timeout as symbolic
Defining function freezing_slow_path as symbolic
Defining function default_wake_function as symbolic
Defining function __refrigerator as symbolic
Defining function iw_handler_set_spy as symbolic
Defining function iw_handler_get_spy as symbolic
Defining function iw_handler_set_thrspy as symbolic
Defining function iw_handler_get_thrspy as symbolic
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function ieee80211_channel_to_frequency as symbolic
Defining function sprintf as symbolic
Defining function schedule_timeout_uninterruptible as symbolic
Defining function ieee80211_frequency_to_channel as symbolic
Defining function default_llseek as symbolic
Defining function PDE_DATA as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function simple_write_to_buffer as symbolic
Defining function hex_to_bin as symbolic
Removed calls to 'pci_set_master' (function is undefined)
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'netif_device_detach' (function is undefined)
Removed calls to 'pci_restore_state' (function is undefined)
Removed calls to 'netif_device_attach' (function is undefined)
Defining function pci_set_power_state as symbolic
Defining function __pci_enable_wake as symbolic
Defining function pci_choose_state as symbolic
Defining function pci_save_state as symbolic
Defining function pci_enable_device as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'pci_unregister_driver' (function is undefined)
Removed calls to 'remove_proc_entry' (function is undefined)
Defining function ldv_ndo_init_11 as symbolic
Defining function ldv_ndo_uninit_11 as symbolic
Defining function ldv_ndo_init_13 as symbolic
Defining function ldv_ndo_uninit_13 as symbolic
Defining function ldv_ndo_init_12 as symbolic
Defining function ldv_ndo_uninit_12 as symbolic
Defining function ldv_suspend_late_15 as symbolic
Defining function ldv_resume_early_15 as symbolic
Defining function ldv_shutdown_15 as symbolic
Defining function make_kuid as symbolic
Defining function make_kgid as symbolic
Defining function __pci_register_driver as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strcpy
  strlen
  strncmp
  strncpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 2.00861883163
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 498 242 2200 38482
INFO: Starting verification
KLEE: WARNING ONCE: function "stop_airo_card" has inline asm
KLEE: WARNING ONCE: function "disable_MAC" has inline asm
KLEE: WARNING ONCE: function "issuecommand" has inline asm
KLEE: WARNING ONCE: function "_init_airo_card" has inline asm
KLEE: WARNING ONCE: function "reset_card" has inline asm
KLEE: WARNING ONCE: function "mpi_init_descriptors" has inline asm
KLEE: WARNING ONCE: function "setup_card" has inline asm
KLEE: WARNING ONCE: function "transmit_allocate" has inline asm
KLEE: WARNING ONCE: function "bap_setup" has inline asm
KLEE: WARNING ONCE: function "fast_bap_read" has inline asm
KLEE: WARNING ONCE: function "writeConfigRid" has inline asm
KLEE: WARNING ONCE: function "enable_MAC" has inline asm
KLEE: WARNING ONCE: function "PC4500_writerid" has inline asm
KLEE: WARNING ONCE: function "waitbusy" has inline asm
KLEE: WARNING ONCE: function "reset_airo_card" has inline asm
KLEE: WARNING ONCE: function "airo_open" has inline asm
KLEE: WARNING ONCE: function "airo_close" has inline asm
KLEE: WARNING ONCE: function "mpi_start_xmit" has inline asm
KLEE: WARNING ONCE: function "airo_set_multicast_list" has inline asm
KLEE: WARNING ONCE: function "airo_set_mac_address" has inline asm
KLEE: WARNING ONCE: function "airo_ioctl" has inline asm
KLEE: WARNING ONCE: function "airo_get_stats" has inline asm
KLEE: WARNING ONCE: function "airo_read_stats" has inline asm
KLEE: WARNING ONCE: function "airo_set_promisc" has inline asm
KLEE: WARNING ONCE: function "mpi_send_packet" has inline asm
KLEE: WARNING ONCE: function "airo_thread" has inline asm
KLEE: WARNING ONCE: function "airo_interrupt" has inline asm
KLEE: WARNING ONCE: function "airo_send_event" has inline asm
KLEE: WARNING ONCE: function "decapsulate" has inline asm
KLEE: WARNING ONCE: function "airo_end_xmit" has inline asm
KLEE: WARNING ONCE: function "airo_end_xmit11" has inline asm
KLEE: WARNING ONCE: function "airo_read_wireless_stats" has inline asm
KLEE: WARNING ONCE: function "airo_start_xmit" has inline asm
KLEE: WARNING ONCE: function "airo_get_wireless_stats" has inline asm
KLEE: WARNING ONCE: function "airo_set_freq" has inline asm
KLEE: WARNING ONCE: function "airo_set_mode" has inline asm
KLEE: WARNING ONCE: function "airo_set_sens" has inline asm
KLEE: WARNING ONCE: function "airo_set_nick" has inline asm
KLEE: WARNING ONCE: function "airo_set_rate" has inline asm
KLEE: WARNING ONCE: function "airo_set_rts" has inline asm
KLEE: WARNING ONCE: function "airo_set_frag" has inline asm
KLEE: WARNING ONCE: function "airo_set_txpow" has inline asm
KLEE: WARNING ONCE: function "airo_set_retry" has inline asm
KLEE: WARNING ONCE: function "airo_set_encode" has inline asm
KLEE: WARNING ONCE: function "airo_set_power" has inline asm
KLEE: WARNING ONCE: function "airo_set_auth" has inline asm
KLEE: WARNING ONCE: function "airo_set_encodeext" has inline asm
KLEE: WARNING ONCE: function "readBSSListRid" has inline asm
KLEE: WARNING ONCE: function "airo_start_xmit11" has inline asm
KLEE: WARNING ONCE: function "proc_config_on_close" has inline asm
KLEE: WARNING ONCE: function "airo_pci_resume" has inline asm
KLEE: WARNING: undefined reference to function: ether_setup
KLEE: WARNING: undefined reference to variable: init_user_ns
KLEE: WARNING: Type for init_user_ns is not sized
KLEE: WARNING: Unable to find size for global variable: init_user_ns (use will result in out of bounds access)
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_487354dd-42c2-476a-85af-b41c299dec12/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 12280 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 15937 states (over memory cap)
KLEE: WARNING: killing 15983 states (over memory cap)
KLEE: WARNING: killing 16378 states (over memory cap)
KLEE: WARNING: killing 15832 states (over memory cap)
KLEE: WARNING: killing 17384 states (over memory cap)
KLEE: WARNING: killing 16629 states (over memory cap)
KLEE: WARNING: killing 18778 states (over memory cap)
KLEE: WARNING: killing 18153 states (over memory cap)
KLEE: WARNING: killing 18092 states (over memory cap)
KLEE: WARNING: killing 19136 states (over memory cap)
KLEE: WARNING: killing 19027 states (over memory cap)
KLEE: WARNING: killing 19304 states (over memory cap)
KLEE: WARNING: killing 19754 states (over memory cap)
KLEE: WARNING: killing 17697 states (over memory cap)
KLEE: WARNING: killing 19196 states (over memory cap)
KLEE: WARNING: killing 18708 states (over memory cap)
KLEE: WARNING: killing 19021 states (over memory cap)
KLEE: WARNING: killing 18541 states (over memory cap)
KLEE: WARNING: killing 18017 states (over memory cap)
KLEE: WARNING: killing 19168 states (over memory cap)
KLEE: WARNING: killing 18810 states (over memory cap)
KLEE: WARNING: killing 18750 states (over memory cap)
KLEE: WARNING: killing 17974 states (over memory cap)
KLEE: WARNING: killing 19245 states (over memory cap)
KLEE: WARNING: killing 19479 states (over memory cap)
KLEE: WARNING: killing 20388 states (over memory cap)
KLEE: WARNING: killing 18450 states (over memory cap)
KLEE: WARNING: killing 18181 states (over memory cap)
KLEE: WARNING: killing 19159 states (over memory cap)
KLEE: WARNING: killing 18930 states (over memory cap)
KLEE: WARNING: killing 18615 states (over memory cap)
KLEE: WARNING: killing 19218 states (over memory cap)
KLEE: WARNING: killing 18950 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-_jaBKC/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:12866: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 19510 states (over memory cap)
KLEE: WARNING: killing 18617 states (over memory cap)
KLEE: WARNING: killing 19294 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-_jaBKC/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:6907: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 19556 states (over memory cap)
KLEE: WARNING: killing 19446 states (over memory cap)
KLEE: WARNING: killing 18931 states (over memory cap)
KLEE: WARNING: killing 20265 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-_jaBKC/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:6907: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 19306 states (over memory cap)
KLEE: WARNING: killing 19985 states (over memory cap)
KLEE: WARNING: killing 19543 states (over memory cap)
KLEE: WARNING: killing 19813 states (over memory cap)
KLEE: WARNING: killing 19135 states (over memory cap)
KLEE: WARNING: killing 18785 states (over memory cap)
KLEE: WARNING: killing 20363 states (over memory cap)
KLEE: WARNING: killing 18788 states (over memory cap)
KLEE: WARNING: killing 19664 states (over memory cap)
KLEE: WARNING: killing 19077 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-_jaBKC/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:11461: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 19912 states (over memory cap)
KLEE: WARNING: killing 20259 states (over memory cap)
KLEE: WARNING: killing 20238 states (over memory cap)
KLEE: WARNING: killing 19775 states (over memory cap)
KLEE: WARNING: killing 18494 states (over memory cap)
KLEE: WARNING: killing 19614 states (over memory cap)
KLEE: WARNING: killing 18342 states (over memory cap)
KLEE: WARNING: killing 18357 states (over memory cap)
KLEE: WARNING: killing 19748 states (over memory cap)
KLEE: WARNING: killing 19454 states (over memory cap)
KLEE: WARNING: killing 19640 states (over memory cap)
KLEE: WARNING: killing 19750 states (over memory cap)
KLEE: WARNING: killing 19774 states (over memory cap)
KLEE: WARNING: killing 19346 states (over memory cap)
KLEE: WARNING: killing 19732 states (over memory cap)
KLEE: WARNING: killing 18996 states (over memory cap)
KLEE: WARNING: killing 19094 states (over memory cap)
KLEE: WARNING: killing 19965 states (over memory cap)
KLEE: WARNING: killing 20147 states (over memory cap)
KLEE: WARNING: killing 18923 states (over memory cap)
KLEE: WARNING: killing 19512 states (over memory cap)
KLEE: WARNING: killing 19857 states (over memory cap)
KLEE: WARNING: killing 19443 states (over memory cap)
KLEE: WARNING: killing 19151 states (over memory cap)
KLEE: WARNING: killing 19852 states (over memory cap)
KLEE: WARNING: killing 19234 states (over memory cap)
KLEE: WARNING: killing 19701 states (over memory cap)
KLEE: WARNING: killing 20004 states (over memory cap)
KLEE: WARNING: killing 20227 states (over memory cap)
KLEE: WARNING: killing 19977 states (over memory cap)
KLEE: WARNING: killing 18926 states (over memory cap)
KLEE: WARNING: killing 19114 states (over memory cap)
KLEE: WARNING: killing 19177 states (over memory cap)
KLEE: WARNING: killing 18923 states (over memory cap)
KLEE: WARNING: killing 19742 states (over memory cap)
KLEE: WARNING: killing 18176 states (over memory cap)
KLEE: WARNING: killing 20410 states (over memory cap)
KLEE: WARNING: killing 19689 states (over memory cap)
KLEE: WARNING: killing 19083 states (over memory cap)
KLEE: WARNING: killing 19461 states (over memory cap)
KLEE: WARNING: killing 20035 states (over memory cap)
KLEE: WARNING: killing 20338 states (over memory cap)
KLEE: WARNING: killing 19419 states (over memory cap)
KLEE: WARNING: killing 19048 states (over memory cap)
KLEE: WARNING: killing 18719 states (over memory cap)
KLEE: WARNING: killing 19881 states (over memory cap)
KLEE: WARNING: killing 19198 states (over memory cap)
KLEE: WARNING: killing 19252 states (over memory cap)
KLEE: WARNING: killing 20020 states (over memory cap)
KLEE: WARNING: killing 19192 states (over memory cap)
KLEE: WARNING: killing 20078 states (over memory cap)
KLEE: WARNING: killing 18332 states (over memory cap)
KLEE: WARNING: killing 19601 states (over memory cap)
KLEE: WARNING: killing 19628 states (over memory cap)
KLEE: WARNING: killing 18985 states (over memory cap)
KLEE: WARNING: killing 20148 states (over memory cap)
KLEE: WARNING: killing 19157 states (over memory cap)
KLEE: WARNING: killing 18705 states (over memory cap)
KLEE: WARNING: killing 20171 states (over memory cap)
KLEE: WARNING: killing 18752 states (over memory cap)
KLEE: WARNING: killing 20254 states (over memory cap)
KLEE: WARNING: killing 19689 states (over memory cap)
KLEE: WARNING: killing 20301 states (over memory cap)
KLEE: WARNING: killing 20176 states (over memory cap)
KLEE: WARNING: killing 19071 states (over memory cap)
KLEE: WARNING: killing 19214 states (over memory cap)
KLEE: WARNING: killing 19193 states (over memory cap)
KLEE: WARNING: killing 18944 states (over memory cap)
KLEE: WARNING: killing 18378 states (over memory cap)
KLEE: WARNING: killing 20176 states (over memory cap)
KLEE: WARNING: killing 20282 states (over memory cap)
KLEE: WARNING: killing 18562 states (over memory cap)
KLEE: WARNING: killing 20746 states (over memory cap)
KLEE: WARNING: killing 18763 states (over memory cap)
KLEE: WARNING: killing 20253 states (over memory cap)
KLEE: WARNING: killing 18344 states (over memory cap)
KLEE: WARNING: killing 20018 states (over memory cap)
KLEE: WARNING: killing 20198 states (over memory cap)
KLEE: WARNING: killing 18766 states (over memory cap)
