bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--net--wireless--ath--wil6210--wil6210.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 1183 808 7223 54485
Removed infinite loop in wdev_priv
Removed infinite loop in arch_local_save_flags___2
Removed infinite loop in wiphy_priv
Removed infinite loop in wdev_priv___0
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in dma_unmap_page
Removed infinite loop in arch_local_save_flags___1
Removed infinite loop in paravirt_read_tsc___0
Removed infinite loop in dma_map_page
Removed infinite loop in wiphy_priv___1
Removed infinite loop in arch_local_save_flags
Removed infinite loop in skb_orphan
Removed infinite loop in napi_enable
Removed infinite loop in wiphy_priv___0
Removed infinite loop in arch_local_save_flags___0
Removed infinite loop in paravirt_read_tsc
Removed infinite loop in wdev_priv___1
Removed infinite loop in wiphy_priv___2
Removed infinite loop in ldv_stop
Removed infinite loop in ldv_module_put_and_exit
INFO: Compilation, preparation and instrumentation time: 1.83889102936
Removed calls to 'netif_tx_stop_all_queues' (function is undefined)
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Defining function eth_mac_addr as symbolic
Defining function eth_validate_addr as symbolic
Removed calls to 'ldv__builtin_va_start' (function is undefined)
Removed calls to 'netdev_err' (function is undefined)
Removed calls to 'ldv__builtin_va_end' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Defining function lock_is_held as symbolic
Removed calls to 'iowrite32' (function is undefined)
Removed calls to '__might_fault' (function is undefined)
Removed calls to '__copy_from_user_overflow' (function is undefined)
Removed calls to '__copy_to_user_overflow' (function is undefined)
Defining function _copy_to_user as symbolic
Defining function _copy_from_user as symbolic
Defining function ioread32 as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Defining function __phys_addr as symbolic
Defining function net_ratelimit as symbolic
Defining function skb_copy as symbolic
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'napi_disable' (function is undefined)
Removed calls to 'cfg80211_scan_done' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Removed calls to 'disable_irq' (function is undefined)
Removed calls to 'enable_irq' (function is undefined)
Removed calls to 'flush_workqueue' (function is undefined)
Removed calls to 'usleep_range' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'netdev_info' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to '__might_sleep' (function is undefined)
Defining function wait_for_completion_timeout as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function __msecs_to_jiffies as symbolic
Defining function request_firmware as symbolic
Defining function crc32_le as symbolic
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to 'netif_tx_wake_queue' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Defining function queue_work_on as symbolic
Defining function dma_alloc_attrs as symbolic
Defining function del_timer_sync as symbolic
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to 'netif_carrier_off' (function is undefined)
Removed calls to 'cfg80211_disconnected' (function is undefined)
Removed calls to 'cfg80211_connect_result' (function is undefined)
Removed calls to 'cfg80211_del_sta_sinfo' (function is undefined)
Defining function eth_type_trans as symbolic
Defining function napi_gro_receive as symbolic
Defining function dev_queue_xmit_sk as symbolic
Defining function cancel_work_sync as symbolic
Defining function skb_put as symbolic
Defining function __netdev_alloc_skb as symbolic
Removed calls to 'netif_carrier_on' (function is undefined)
Removed calls to 'print_hex_dump' (function is undefined)
Removed calls to 'cfg80211_put_bss' (function is undefined)
Removed calls to 'cfg80211_mgmt_tx_status' (function is undefined)
Defining function cfg80211_find_ie as symbolic
Defining function cfg80211_get_bss as symbolic
Defining function ieee80211_bss_get_ie as symbolic
Defining function mod_timer as symbolic
Removed calls to '_dev_info' (function is undefined)
Removed calls to 'dev_err' (function is undefined)
Removed calls to 'pci_set_master' (function is undefined)
Removed calls to 'pci_disable_msi' (function is undefined)
Removed calls to 'pci_clear_master' (function is undefined)
Removed calls to 'pci_iounmap' (function is undefined)
Removed calls to 'pci_release_region' (function is undefined)
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'unregister_netdev' (function is undefined)
Removed calls to 'free_netdev' (function is undefined)
Removed calls to 'destroy_workqueue' (function is undefined)
Removed calls to 'wiphy_unregister' (function is undefined)
Removed calls to 'wiphy_free' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'cfg80211_chandef_create' (function is undefined)
Removed calls to 'netif_napi_add' (function is undefined)
Defining function pci_enable_device as symbolic
Defining function pci_request_region as symbolic
Defining function pci_ioremap_bar as symbolic
Defining function debugfs_create_dir as symbolic
Removed calls to '__mutex_init' (function is undefined)
Defining function debugfs_create_u32 as symbolic
Defining function debugfs_create_x32 as symbolic
Defining function debugfs_create_file as symbolic
Defining function snprintf as symbolic
Defining function register_netdev as symbolic
Defining function pci_enable_msi_range as symbolic
Defining function request_threaded_irq as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Defining function kobject_uevent_env as symbolic
Removed calls to '__napi_schedule' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'ether_setup' (function is undefined)
Defining function alloc_netdev_mqs as symbolic
Removed calls to 'skb_complete_wifi_ack' (function is undefined)
Removed calls to 'skb_trim' (function is undefined)
Removed calls to 'consume_skb' (function is undefined)
Defining function __memmove as symbolic
Defining function skb_pull as symbolic
Defining function pskb_expand_head as symbolic
Defining function skb_push as symbolic
Removed calls to 'complete' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to 'cfg80211_probe_status' (function is undefined)
Defining function __alloc_workqueue_key as symbolic
Defining function prepare_to_wait_event as symbolic
Defining function wiphy_register as symbolic
Defining function wiphy_new_nm as symbolic
Defining function seq_lseek as symbolic
Defining function seq_read as symbolic
Defining function single_release as symbolic
Defining function single_open as symbolic
Defining function seq_printf as symbolic
Defining function seq_puts as symbolic
Defining function hex_dump_to_buffer as symbolic
Defining function simple_open as symbolic
Defining function simple_write_to_buffer as symbolic
Defining function simple_read_from_buffer as symbolic
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Defining function dev_close as symbolic
Defining function kstrtoll as symbolic
Defining function sscanf as symbolic
Defining function sprintf as symbolic
Defining function power_supply_is_system_supplied as symbolic
Defining function default_llseek as symbolic
Defining function generic_file_llseek as symbolic
Defining function simple_attr_read as symbolic
Defining function simple_attr_write as symbolic
Defining function simple_attr_release as symbolic
Defining function simple_attr_open as symbolic
Removed calls to 'cfg80211_new_sta' (function is undefined)
Defining function netif_rx_ni as symbolic
Defining function __alloc_skb as symbolic
Defining function ieee80211_channel_to_frequency as symbolic
Defining function cfg80211_rx_mgmt as symbolic
Defining function cfg80211_inform_bss_width_frame as symbolic
Defining function __ieee80211_get_channel as symbolic
Removed calls to '__const_udelay' (function is undefined)
Defining function param_get_uint as symbolic
Defining function param_set_uint as symbolic
Defining function kstrtouint as symbolic
Defining function queue_delayed_work_on as symbolic
Defining function ldv_ndo_init_55 as symbolic
Defining function ldv_ndo_uninit_55 as symbolic
Defining function ldv_release_54 as symbolic
Defining function ldv_bind_54 as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'pci_unregister_driver' (function is undefined)
Removed calls to 'trace_seq_printf' (function is undefined)
Removed calls to 'cfg80211_get_drvinfo' (function is undefined)
Defining function ldv_shutdown_53 as symbolic
Defining function trace_event_reg as symbolic
Defining function trace_event_raw_init as symbolic
Defining function trace_define_field as symbolic
Defining function ldv_release_43 as symbolic
Defining function ldv_release_37 as symbolic
Defining function ldv_release_45 as symbolic
Defining function ldv_release_47 as symbolic
Defining function ldv_release_41 as symbolic
Defining function trace_raw_output_prep as symbolic
Defining function ldv_release_46 as symbolic
Defining function __pci_register_driver as symbolic
Defining function ldv_release_42 as symbolic
Defining function ldv_release_40 as symbolic
Defining function trace_print_flags_seq as symbolic
Defining function ldv_release_44 as symbolic
Defining function ldv_release_32 as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strcmp
  strlen
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.70067811012
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 1388 664 3731 31694
INFO: Starting verification
KLEE: WARNING ONCE: function "wdev_priv" has inline asm
KLEE: WARNING ONCE: function "wil_dbg_trace" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___2" has inline asm
KLEE: WARNING ONCE: function "trace_wil6210_log_err" has inline asm
KLEE: WARNING ONCE: function "wil_ioctl" has inline asm
KLEE: WARNING ONCE: function "wdev_priv___0" has inline asm
KLEE: WARNING ONCE: function "wil_tx_vring" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "get_cycles___0" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___1" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "__wil_down" has inline asm
KLEE: WARNING ONCE: function "wil_reset" has inline asm
KLEE: WARNING ONCE: function "wil_info" has inline asm
KLEE: WARNING ONCE: function "wil6210_clear_irq" has inline asm
KLEE: WARNING ONCE: function "wil_configure_interrupt_moderation" has inline asm
KLEE: WARNING ONCE: function "__wmi_send" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held" has inline asm
KLEE: WARNING ONCE: function "wil6210_unmask_irq_pseudo" has inline asm
KLEE: WARNING ONCE: function "wil6210_mask_irq_pseudo" has inline asm
KLEE: WARNING ONCE: function "_wil6210_disconnect" has inline asm
KLEE: WARNING ONCE: function "wil_netif_rx_any" has inline asm
KLEE: WARNING ONCE: function "__wil_up" has inline asm
KLEE: WARNING ONCE: function "napi_enable" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_change_iface" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_add_key" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_del_key" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_start_ap" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_change_beacon" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_stop_ap" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_del_station" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_get_station" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_dump_station" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_change_bss" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_set_channel" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_scan" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_connect" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_disconnect" has inline asm
KLEE: WARNING ONCE: function "wil_remain_on_channel" has inline asm
KLEE: WARNING ONCE: function "wil_cancel_remain_on_channel" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_mgmt_tx" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_probe_client" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_tx" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_rx" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_misc" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_misc_thread" has inline asm
KLEE: WARNING ONCE: function "wil6210_hardirq" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___0" has inline asm
KLEE: WARNING ONCE: function "wmi_recv_cmd" has inline asm
KLEE: WARNING ONCE: function "napi_schedule" has inline asm
KLEE: WARNING ONCE: function "wil_scan_timer_fn" has inline asm
KLEE: WARNING ONCE: function "wil_print_ring" has inline asm
KLEE: WARNING ONCE: function "wil_vring_debugfs_show" has inline asm
KLEE: WARNING ONCE: function "wil_txdesc_debugfs_show" has inline asm
KLEE: WARNING ONCE: function "wil_info_debugfs_show" has inline asm
KLEE: WARNING ONCE: function "wil_read_file_ioblob" has inline asm
KLEE: WARNING ONCE: function "wil_debugfs_iomem_x32_set" has inline asm
KLEE: WARNING ONCE: function "wmi_evt_fw_ready" has inline asm
KLEE: WARNING ONCE: function "wmi_evt_connect" has inline asm
KLEE: WARNING ONCE: function "fw_handle_data" has inline asm
KLEE: WARNING ONCE: function "fw_handle_fill" has inline asm
KLEE: WARNING ONCE: function "fw_handle_direct_write" has inline asm
KLEE: WARNING ONCE: function "gw_write" has inline asm
KLEE: WARNING ONCE: function "wdev_priv___1" has inline asm
KLEE: WARNING ONCE: function "wil_memcpy_fromio_32" has inline asm
KLEE: WARNING ONCE: function "wil_memcpy_toio_32" has inline asm
KLEE: WARNING ONCE: function "wmi_read_hdr" has inline asm
KLEE: WARNING ONCE: function "wil_tx_complete" has inline asm
KLEE: WARNING ONCE: function "wil_rx_handle" has inline asm
KLEE: WARNING ONCE: function "ldv_main_exported_54" has inline asm
KLEE: WARNING: undefined reference to function: cfg80211_get_drvinfo
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
KLEE: output directory is "/tmp/symbiotic-jZn0mS/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "wdev_priv" has inline asm
KLEE: WARNING ONCE: function "wil_dbg_trace" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___2" has inline asm
KLEE: WARNING ONCE: function "trace_wil6210_log_err" has inline asm
KLEE: WARNING ONCE: function "wil_ioctl" has inline asm
KLEE: WARNING ONCE: function "wdev_priv___0" has inline asm
KLEE: WARNING ONCE: function "wil_tx_vring" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "get_cycles___0" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___1" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "__wil_down" has inline asm
KLEE: WARNING ONCE: function "wil_reset" has inline asm
KLEE: WARNING ONCE: function "wil_info" has inline asm
KLEE: WARNING ONCE: function "wil6210_clear_irq" has inline asm
KLEE: WARNING ONCE: function "wil_configure_interrupt_moderation" has inline asm
KLEE: WARNING ONCE: function "__wmi_send" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held" has inline asm
KLEE: WARNING ONCE: function "wil6210_unmask_irq_pseudo" has inline asm
KLEE: WARNING ONCE: function "wil6210_mask_irq_pseudo" has inline asm
KLEE: WARNING ONCE: function "_wil6210_disconnect" has inline asm
KLEE: WARNING ONCE: function "wil_netif_rx_any" has inline asm
KLEE: WARNING ONCE: function "__wil_up" has inline asm
KLEE: WARNING ONCE: function "napi_enable" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_change_iface" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_add_key" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_del_key" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_start_ap" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_change_beacon" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_stop_ap" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_del_station" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_get_station" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_dump_station" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_change_bss" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_set_channel" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_scan" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_connect" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_disconnect" has inline asm
KLEE: WARNING ONCE: function "wil_remain_on_channel" has inline asm
KLEE: WARNING ONCE: function "wil_cancel_remain_on_channel" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_mgmt_tx" has inline asm
KLEE: WARNING ONCE: function "wil_cfg80211_probe_client" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_tx" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_rx" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_misc" has inline asm
KLEE: WARNING ONCE: function "wil6210_irq_misc_thread" has inline asm
KLEE: WARNING ONCE: function "wil6210_hardirq" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___0" has inline asm
KLEE: WARNING ONCE: function "wmi_recv_cmd" has inline asm
KLEE: WARNING ONCE: function "napi_schedule" has inline asm
KLEE: WARNING ONCE: function "wil_scan_timer_fn" has inline asm
KLEE: WARNING ONCE: function "wil_print_ring" has inline asm
KLEE: WARNING ONCE: function "wil_vring_debugfs_show" has inline asm
KLEE: WARNING ONCE: function "wil_txdesc_debugfs_show" has inline asm
KLEE: WARNING ONCE: function "wil_info_debugfs_show" has inline asm
KLEE: WARNING ONCE: function "wil_read_file_ioblob" has inline asm
KLEE: WARNING ONCE: function "wil_debugfs_iomem_x32_set" has inline asm
KLEE: WARNING ONCE: function "wmi_evt_fw_ready" has inline asm
KLEE: WARNING ONCE: function "wmi_evt_connect" has inline asm
KLEE: WARNING ONCE: function "fw_handle_data" has inline asm
KLEE: WARNING ONCE: function "fw_handle_fill" has inline asm
KLEE: WARNING ONCE: function "fw_handle_direct_write" has inline asm
KLEE: WARNING ONCE: function "gw_write" has inline asm
KLEE: WARNING ONCE: function "wdev_priv___1" has inline asm
KLEE: WARNING ONCE: function "wil_memcpy_fromio_32" has inline asm
KLEE: WARNING ONCE: function "wil_memcpy_toio_32" has inline asm
KLEE: WARNING ONCE: function "wmi_read_hdr" has inline asm
KLEE: WARNING ONCE: function "wil_tx_complete" has inline asm
KLEE: WARNING ONCE: function "wil_rx_handle" has inline asm
KLEE: WARNING ONCE: function "ldv_main_exported_54" has inline asm
KLEE: WARNING: undefined reference to function: cfg80211_get_drvinfo
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 4.038189888
