bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 147 136 1136 7298
Removed infinite loop in lbtf_tx_work
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.402946949005
Removed calls to 'ieee80211_rx_irqsafe' (function is undefined)
Defining function printk as symbolic
Defining function skb_pull as symbolic
Defining function snprintf as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Defining function ieee80211_alloc_hw as symbolic
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function ieee80211_register_hw as symbolic
Defining function del_timer as symbolic
Defining function skb_push as symbolic
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Defining function mod_timer as symbolic
Defining function net_ratelimit as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function queue_work_on as symbolic
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Defining function ieee80211_get_buffered_bc as symbolic
Defining function ieee80211_beacon_get_tim as symbolic
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Defining function prepare_to_wait_event as symbolic
Defining function cancel_work_sync as symbolic
Removed calls to 'destroy_workqueue' (function is undefined)
Defining function __alloc_workqueue_key as symbolic
Linked our definitions to these undefined functions:
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_u32_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.498399972916
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 231 120 664 7314
INFO: Starting verification
KLEE: WARNING ONCE: function "lbtf_rx" has inline asm
KLEE: WARNING ONCE: function "lbtf_add_card" has inline asm
KLEE: WARNING ONCE: function "command_timer_fn" has inline asm
KLEE: WARNING ONCE: function "lbtf_allocate_cmd_buffer" has inline asm
KLEE: WARNING ONCE: function "lbtf_cmd_work" has inline asm
KLEE: WARNING ONCE: function "lbtf_tx_work" has inline asm
KLEE: WARNING ONCE: function "lbtf_free_adapter" has inline asm
KLEE: WARNING ONCE: function "lbtf_free_cmd_buffer" has inline asm
KLEE: WARNING ONCE: function "lbtf_process_rx_command" has inline asm
KLEE: WARNING ONCE: function "lbtf_execute_next_command" has inline asm
KLEE: WARNING ONCE: function "__lbtf_cleanup_and_insert_cmd" has inline asm
KLEE: WARNING ONCE: function "lbtf_remove_card" has inline asm
KLEE: WARNING ONCE: function "lbtf_beacon_set" has inline asm
KLEE: WARNING ONCE: function "lbtf_cmd_async" has inline asm
KLEE: WARNING ONCE: function "__lbtf_cmd_async" has inline asm
KLEE: WARNING ONCE: function "__lbtf_cmd" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_start" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_stop" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_add_interface" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_remove_interface" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_config" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_bss_info_changed" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_configure_filter" has inline asm
KLEE: WARNING ONCE: function "lbtf_cmd_set_mac_multicast_addr" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_mac_control" has inline asm
KLEE: WARNING ONCE: function "lbtf_beacon_ctrl" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_bssid" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_radio_control" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_channel" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_mode" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_mac_address" has inline asm
KLEE: WARNING ONCE: function "lbtf_update_hw_spec" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_a6c399d3-dcaa-4fd3-9e9a-db05468be194/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7117: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7295: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7408: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7554: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7488: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:6527: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:6980: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7521: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7330: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7250: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 10750 states (over memory cap)
KLEE: WARNING: killing 10101 states (over memory cap)
KLEE: WARNING: killing 10537 states (over memory cap)
KLEE: WARNING: killing 10707 states (over memory cap)
KLEE: WARNING: killing 10945 states (over memory cap)
KLEE: WARNING: killing 10849 states (over memory cap)
KLEE: WARNING: killing 11013 states (over memory cap)
KLEE: WARNING: killing 10521 states (over memory cap)
KLEE: WARNING: killing 11285 states (over memory cap)
KLEE: WARNING: killing 11195 states (over memory cap)
KLEE: WARNING: killing 10569 states (over memory cap)
KLEE: WARNING: killing 11198 states (over memory cap)
KLEE: WARNING: killing 11106 states (over memory cap)
KLEE: WARNING: killing 11143 states (over memory cap)
KLEE: WARNING: killing 10858 states (over memory cap)
KLEE: WARNING: killing 10827 states (over memory cap)
KLEE: WARNING: killing 10866 states (over memory cap)
KLEE: WARNING: killing 11493 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-ntQkTn/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "lbtf_rx" has inline asm
KLEE: WARNING ONCE: function "lbtf_add_card" has inline asm
KLEE: WARNING ONCE: function "command_timer_fn" has inline asm
KLEE: WARNING ONCE: function "lbtf_allocate_cmd_buffer" has inline asm
KLEE: WARNING ONCE: function "lbtf_cmd_work" has inline asm
KLEE: WARNING ONCE: function "lbtf_tx_work" has inline asm
KLEE: WARNING ONCE: function "lbtf_free_adapter" has inline asm
KLEE: WARNING ONCE: function "lbtf_free_cmd_buffer" has inline asm
KLEE: WARNING ONCE: function "lbtf_process_rx_command" has inline asm
KLEE: WARNING ONCE: function "lbtf_execute_next_command" has inline asm
KLEE: WARNING ONCE: function "__lbtf_cleanup_and_insert_cmd" has inline asm
KLEE: WARNING ONCE: function "lbtf_remove_card" has inline asm
KLEE: WARNING ONCE: function "lbtf_beacon_set" has inline asm
KLEE: WARNING ONCE: function "lbtf_cmd_async" has inline asm
KLEE: WARNING ONCE: function "__lbtf_cmd_async" has inline asm
KLEE: WARNING ONCE: function "__lbtf_cmd" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_start" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_stop" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_add_interface" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_remove_interface" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_config" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_bss_info_changed" has inline asm
KLEE: WARNING ONCE: function "lbtf_op_configure_filter" has inline asm
KLEE: WARNING ONCE: function "lbtf_cmd_set_mac_multicast_addr" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_mac_control" has inline asm
KLEE: WARNING ONCE: function "lbtf_beacon_ctrl" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_bssid" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_radio_control" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_channel" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_mode" has inline asm
KLEE: WARNING ONCE: function "lbtf_set_mac_address" has inline asm
KLEE: WARNING ONCE: function "lbtf_update_hw_spec" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_a6c399d3-dcaa-4fd3-9e9a-db05468be194/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7117: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7295: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7408: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7554: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7488: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:6527: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:6980: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7521: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7330: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ntQkTn/205_9a_array_safes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--libertas_tf--libertas_tf.ko-entry_point_true-unreach-call.cil.out.c:7250: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 10750 states (over memory cap)
KLEE: WARNING: killing 10101 states (over memory cap)
KLEE: WARNING: killing 10537 states (over memory cap)
KLEE: WARNING: killing 10707 states (over memory cap)
KLEE: WARNING: killing 10945 states (over memory cap)
KLEE: WARNING: killing 10849 states (over memory cap)
KLEE: WARNING: killing 11013 states (over memory cap)
KLEE: WARNING: killing 10521 states (over memory cap)
KLEE: WARNING: killing 11285 states (over memory cap)
KLEE: WARNING: killing 11195 states (over memory cap)
KLEE: WARNING: killing 10569 states (over memory cap)
KLEE: WARNING: killing 11198 states (over memory cap)
KLEE: WARNING: killing 11106 states (over memory cap)
KLEE: WARNING: killing 11143 states (over memory cap)
KLEE: WARNING: killing 10858 states (over memory cap)
KLEE: WARNING: killing 10827 states (over memory cap)
KLEE: WARNING: killing 10866 states (over memory cap)
KLEE: WARNING: killing 11493 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f6747636390
4  libc.so.6       0x00007f67469ef428 gsignal + 56
5  libc.so.6       0x00007f67469f102a abort + 362
6  libc.so.6       0x00007f67469e7bd7
7  libc.so.6       0x00007f67469e7c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007f67469da830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 202.212164164
