bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.14/linux-3.14__linux-drivers-clk1__drivers-net-wireless-mwifiex-mwifiex_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 864 661 9710 75470
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 2.61359286308
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Defining function skb_dequeue as symbolic
Removed calls to 'do_gettimeofday' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'skb_trim' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function dev_warn as symbolic
Defining function printk as symbolic
Removed calls to '__list_add' (function is undefined)
Defining function dev_err as symbolic
Defining function netpoll_trap as symbolic
Defining function del_timer as symbolic
Defining function skb_pull as symbolic
Defining function eth_type_trans as symbolic
Defining function netif_rx as symbolic
Defining function netif_rx_ni as symbolic
Defining function skb_copy as symbolic
Removed calls to 'kfree_skb' (function is undefined)
Defining function skb_realloc_headroom as symbolic
Removed calls to 'ldv_check_alloc_flags' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Defining function skb_push as symbolic
Defining function __netdev_alloc_skb as symbolic
Defining function skb_put as symbolic
Removed calls to '__list_del_entry' (function is undefined)
Defining function ns_to_timeval as symbolic
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Defining function prepare_to_wait_event as symbolic
Defining function queue_work_on as symbolic
Removed calls to 'init_timer_key' (function is undefined)
Defining function ieee80211_frequency_to_channel as symbolic
Defining function kmemdup as symbolic
Defining function msecs_to_jiffies as symbolic
Defining function mod_timer as symbolic
Removed calls to 'ldv_switch_to_interrupt_context' (function is undefined)
Removed calls to 'ldv_switch_to_process_context' (function is undefined)
Removed calls to 'cfg80211_new_sta' (function is undefined)
Removed calls to 'cfg80211_del_sta' (function is undefined)
Removed calls to 'netif_carrier_off' (function is undefined)
Removed calls to 'netif_carrier_on' (function is undefined)
Removed calls to 'cfg80211_michael_mic_failure' (function is undefined)
Removed calls to 'cfg80211_cqm_rssi_notify' (function is undefined)
Removed calls to 'cfg80211_remain_on_channel_expired' (function is undefined)
Removed calls to 'cfg80211_disconnected' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function cfg80211_find_ie as symbolic
Removed calls to 'cfg80211_put_bss' (function is undefined)
Removed calls to 'cfg80211_scan_done' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Removed calls to 'lock_release' (function is undefined)
Defining function rcu_is_watching as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Defining function lock_is_held as symbolic
Defining function cfg80211_inform_bss_width as symbolic
Defining function __ieee80211_get_channel as symbolic
Removed calls to 'ieee80211_amsdu_to_8023s' (function is undefined)
Defining function cfg80211_rx_mgmt as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'flush_workqueue' (function is undefined)
Removed calls to 'destroy_workqueue' (function is undefined)
Removed calls to 'up' (function is undefined)
Defining function down_interruptible as symbolic
Defining function __alloc_workqueue_key as symbolic
Defining function del_timer_sync as symbolic
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'wiphy_unregister' (function is undefined)
Removed calls to 'wiphy_free' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'complete' (function is undefined)
Defining function request_firmware_nowait as symbolic
Defining function dev_notice as symbolic
Removed calls to 'wiphy_apply_custom_regulatory' (function is undefined)
Removed calls to 'free_netdev' (function is undefined)
Defining function sprintf as symbolic
Defining function snprintf as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function register_netdevice as symbolic
Defining function cfg80211_classify8021d as symbolic
Defining function alloc_netdev_mqs as symbolic
Removed calls to 'ether_setup' (function is undefined)
Defining function wiphy_new as symbolic
Defining function wiphy_register as symbolic
Defining function _dev_info as symbolic
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'unregister_netdevice_queue' (function is undefined)
Removed calls to 'cfg80211_connect_result' (function is undefined)
Removed calls to 'cfg80211_ibss_joined' (function is undefined)
Removed calls to 'cfg80211_ready_on_channel' (function is undefined)
Removed calls to 'cfg80211_mgmt_tx_status' (function is undefined)
Defining function prandom_u32 as symbolic
Defining function cfg80211_get_bss as symbolic
Defining function ieee80211_channel_to_frequency as symbolic
Defining function ieee80211_bss_get_ie as symbolic
Defining function cfg80211_find_vendor_ie as symbolic
Defining function device_set_wakeup_enable as symbolic
Removed calls to 'free_pages' (function is undefined)
Defining function simple_open as symbolic
Defining function get_zeroed_page as symbolic
Defining function simple_read_from_buffer as symbolic
Removed calls to 'might_fault' (function is undefined)
Defining function sscanf as symbolic
Defining function _copy_from_user as symbolic
Removed calls to 'debugfs_remove' (function is undefined)
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'ldv_assert' (function is undefined)
Defining function external_allocated_data as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strlen
  strncmp
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 2.69223117828
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 852 464 4316 38024
INFO: Starting verification
KLEE: WARNING ONCE: function "mwifiex_process_cmdresp" has inline asm
KLEE: WARNING ONCE: function "mwifiex_exec_next_cmd" has inline asm
KLEE: WARNING ONCE: function "mwifiex_wmm_process_tx" has inline asm
KLEE: WARNING ONCE: function "mwifiex_shutdown_drv" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cancel_all_pending_cmd" has inline asm
KLEE: WARNING ONCE: function "mwifiex_write_data_complete" has inline asm
KLEE: WARNING ONCE: function "mwifiex_recv_packet" has inline asm
KLEE: WARNING ONCE: function "mwifiex_uap_queue_bridged_pkt" has inline asm
KLEE: WARNING ONCE: function "mwifiex_wmm_add_buf_txqueue" has inline asm
KLEE: WARNING ONCE: function "mwifiex_send_single_packet" has inline asm
KLEE: WARNING ONCE: function "mwifiex_insert_cmd_to_pending_q" has inline asm
KLEE: WARNING ONCE: function "mwifiex_process_uap_txpd" has inline asm
KLEE: WARNING ONCE: function "mwifiex_process_sta_txpd" has inline asm
KLEE: WARNING ONCE: function "mwifiex_wake_up_net_dev_queue" has inline asm
KLEE: WARNING ONCE: function "netif_tx_stop_queue" has inline asm
KLEE: WARNING ONCE: function "mwifiex_process_sta_cmdresp" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock" has inline asm
KLEE: WARNING ONCE: function "rcu_read_unlock" has inline asm
KLEE: WARNING ONCE: function "mwifiex_add_virtual_intf" has inline asm
KLEE: WARNING ONCE: function "ldv_net_dummy_resourceless_instance_5" has inline asm
KLEE: WARNING ONCE: function "mwifiex_queue_tx_pkt" has inline asm
KLEE: WARNING ONCE: function "mwifiex_reg_notifier" has inline asm
KLEE: WARNING ONCE: function "mwifiex_send_domain_info_cmd_fw" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cancel_pending_ioctl" has inline asm
KLEE: WARNING ONCE: function "mwifiex_open" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_suspend" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_wakeup" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_wiphy_params" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_tx_power" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_antenna" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_coalesce" has inline asm
KLEE: WARNING ONCE: function "mwifiex_recycle_cmd_node" has inline asm
KLEE: WARNING ONCE: function "mwifiex_11n_aggregate_pkt" has inline asm
KLEE: WARNING ONCE: function "ldv_dummy_resourceless_instance_callback_5_8" has inline asm
KLEE: WARNING: undefined reference to function: ether_setup
KLEE: WARNING: undefined reference to function: free_netdev
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_113df76e-d49f-49d3-a2ae-f50fa494c795/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: flushing 4540 bytes on read, may be slow and/or crash: MO21[4540] allocated at global:info
KLEE: ERROR: /tmp/symbiotic-5XZIlp/linux-3.14__linux-drivers-clk1__drivers-net-wireless-mwifiex-mwifiex_true-unreach-call.cil.c:16966: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5XZIlp/linux-3.14__linux-drivers-clk1__drivers-net-wireless-mwifiex-mwifiex_true-unreach-call.cil.c:45235: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: resolved symbolic function pointer to: mwifiex_process_hs_config
KLEE: WARNING ONCE: calling mwifiex_process_hs_config with extra arguments.
KLEE: ERROR: /tmp/symbiotic-5XZIlp/linux-3.14__linux-drivers-clk1__drivers-net-wireless-mwifiex-mwifiex_true-unreach-call.cil.c:11615: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: resolved symbolic function pointer to: mwifiex_process_sleep_confirm_resp
KLEE: WARNING ONCE: calling mwifiex_process_sleep_confirm_resp with extra arguments.
KLEE: WARNING ONCE: resolved symbolic function pointer to: mwifiex_write_data_complete
