bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.14/linux-3.14__complex_emg__linux-kernel-locking-mutex__drivers-net-wireless-rtlwifi-rtl8723ae-rtl8723ae_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 698 468 8186 58827
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.66264796257
Defining function printk as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'vfree' (function is undefined)
Removed calls to 'synchronize_irq' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Defining function ieee80211_find_sta as symbolic
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Defining function __phys_addr as symbolic
Removed calls to 'rtl_get_tcb_desc' (function is undefined)
Removed calls to '__udelay' (function is undefined)
Removed calls to 'rtl_cam_reset_all_entry' (function is undefined)
Defining function efuse_read_1byte as symbolic
Defining function vmalloc as symbolic
Defining function request_firmware_nowait as symbolic
Removed calls to 'rtl_process_phyinfo' (function is undefined)
Defining function rtlwifi_rate_mapping as symbolic
Defining function rtl_query_rxpwrpercentage as symbolic
Defining function rtl_evm_db_to_percentage as symbolic
Defining function rtl_signal_scale_mapping as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'rtl_efuse_shadow_map_update' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Defining function skb_put as symbolic
Defining function __netdev_alloc_skb as symbolic
Removed calls to 'rtl_cam_mark_invalid' (function is undefined)
Removed calls to 'rtl_cam_empty_entry' (function is undefined)
Removed calls to 'rtl_cam_del_entry' (function is undefined)
Defining function rtl_cam_get_free_entry as symbolic
Defining function rtl_cam_delete_one_entry as symbolic
Defining function rtl_cam_add_one_entry as symbolic
Defining function rtl_ps_enable_nic as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function rtl_ps_disable_nic as symbolic
Removed calls to 'pci_unregister_driver' (function is undefined)
Defining function __pci_register_driver as symbolic
Defining function rtl_pci_probe as symbolic
Defining function rtl_pci_suspend as symbolic
Defining function rtl_pci_resume as symbolic
Defining function external_allocated_data as symbolic
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'rtl_phy_scan_operation_backup' (function is undefined)
Removed calls to 'rtl_pci_disconnect' (function is undefined)
Removed calls to 'ldv_pre_probe' (function is undefined)
Removed calls to 'ldv_check_alloc_flags' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to 'ldv_assert' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.69127011299
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 802 342 4076 29607
INFO: Starting verification
KLEE: WARNING ONCE: function "rtl8723ae_allow_all_destaddr" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_bt_coex_off_before_lps" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_fw_coex_all_off" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_sw_coex_all_off" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_hw_coex_all_off" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_coex_table" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_hw_pta_mode" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_agc_table" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_bback_off_level" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_bt_set_penalty_tx_rate_adap" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_sw_rf_rx_lpf_corner" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_sw_full_time_dac_swing" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_set_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_set_rf_reg" has inline asm
KLEE: WARNING ONCE: function "_phy_rf_serial_read" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_ignore_wlan_act" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_3a" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_2_ant_hid" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_tra_tdma_ctrl" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_tdma_ctrl" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_dac_swing_level" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_bt_hid_info" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_bt_retry_index" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_wlan_act" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_fw_dec_bt_pwr" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_fill_h2c_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl_8723e_bt_wifi_media_status_notify" has inline asm
KLEE: WARNING ONCE: function "rtl_8723e_c2h_command_handle" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_watchdog" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_write_dig" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_coexist" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_coexist_8723" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_need_to_dec_bt_pwr" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_set_bt_dm" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_2_ant_hid_sco_esco" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_bt_tx_rx_counter_level" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_check_coex_rssi_state" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_check_coex_rssi_state1" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_get_rx_ss" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_enable_hw_security_config" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_tx_fill_cmddesc" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_tx_fill_desc" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_query_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_get_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_query_rf_reg" has inline asm
KLEE: WARNING ONCE: function "_rtl8723ae_set_media_status" has inline asm
KLEE: WARNING ONCE: function "rtl_hal_pwrseqcmdparsing" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_hw_init" has inline asm
KLEE: WARNING ONCE: function "_rtl8723ae_llt_write" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_sw_led_on" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_sw_led_off" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_download_fw" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_mac_config" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_bb_config" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_rf6052_config" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_init" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_config_rf_with_headerfile" has inline asm
KLEE: WARNING ONCE: function "_phy_cfg_bb_w_header" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_init_sw_vars" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_led_control" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_gpio_radio_on_off_checking" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_read_eeprom_info" has inline asm
KLEE: WARNING ONCE: function "_rtl8723ae_read_adapter_info" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_read_bt_coexist_info_from_hwpg" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_set_beacon_interval" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_set_bw_mode" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_set_bw_mode_callback" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_rf6052_set_bandwidth" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_set_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_set_io_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_set_fw_pwrmode_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_set_fw_rsvdpagepkt" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_set_p2p_ps_offload_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_set_key" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_set_rf_power_state" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_sw_chnl" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_sw_chnl_callback" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_update_interrupt_mask" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_update_hal_rate_tbl" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_dm_bt_balance" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_get_hw_reg_originalvalue" has inline asm
KLEE: WARNING ONCE: function "rtl8723ae_phy_update_txpower_dbm" has inline asm
KLEE: WARNING: undefined reference to function: rtl_fw_cb
KLEE: WARNING: undefined reference to function: rtl_pci_disconnect
KLEE: WARNING: undefined reference to function: rtl_phy_scan_operation_backup
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_cb3319f7-81b7-4f1c-a79f-9005c2610eb2/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 12950 states (over memory cap)
KLEE: WARNING: killing 13529 states (over memory cap)
KLEE: WARNING: killing 13149 states (over memory cap)
KLEE: WARNING: killing 13421 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-WZsFEQ/linux-3.14__complex_emg__linux-kernel-locking-mutex__drivers-net-wireless-rtlwifi-rtl8723ae-rtl8723ae_true-unreach-call.cil.c:34630: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 12532 states (over memory cap)
KLEE: WARNING: killing 12799 states (over memory cap)
KLEE: WARNING: killing 13276 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-WZsFEQ/linux-3.14__complex_emg__linux-kernel-locking-mutex__drivers-net-wireless-rtlwifi-rtl8723ae-rtl8723ae_true-unreach-call.cil.c:34260: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 13552 states (over memory cap)
KLEE: WARNING: killing 13707 states (over memory cap)
KLEE: WARNING: killing 13356 states (over memory cap)
KLEE: WARNING: killing 13826 states (over memory cap)
KLEE: WARNING: killing 13774 states (over memory cap)
KLEE: WARNING: killing 13935 states (over memory cap)
KLEE: WARNING: killing 13896 states (over memory cap)
KLEE: WARNING: killing 14271 states (over memory cap)
KLEE: WARNING: killing 13824 states (over memory cap)
KLEE: WARNING: killing 14296 states (over memory cap)
KLEE: WARNING: killing 13957 states (over memory cap)
KLEE: WARNING: killing 13721 states (over memory cap)
KLEE: WARNING: killing 13682 states (over memory cap)
KLEE: WARNING: killing 13959 states (over memory cap)
KLEE: WARNING: killing 13612 states (over memory cap)
KLEE: WARNING: killing 13785 states (over memory cap)
KLEE: WARNING: killing 13251 states (over memory cap)
KLEE: WARNING: killing 13521 states (over memory cap)
KLEE: WARNING: killing 13481 states (over memory cap)
KLEE: WARNING: killing 13456 states (over memory cap)
KLEE: WARNING: killing 13423 states (over memory cap)
KLEE: WARNING: killing 13095 states (over memory cap)
KLEE: WARNING: killing 13657 states (over memory cap)
KLEE: WARNING: killing 13339 states (over memory cap)
KLEE: WARNING: killing 13701 states (over memory cap)
KLEE: WARNING: killing 13174 states (over memory cap)
KLEE: WARNING: killing 13148 states (over memory cap)
KLEE: WARNING: killing 13318 states (over memory cap)
KLEE: WARNING: killing 13683 states (over memory cap)
KLEE: WARNING: killing 13649 states (over memory cap)
KLEE: WARNING: killing 13332 states (over memory cap)
KLEE: WARNING: killing 13593 states (over memory cap)
KLEE: WARNING: killing 13372 states (over memory cap)
KLEE: WARNING: killing 13539 states (over memory cap)
KLEE: WARNING: killing 13413 states (over memory cap)
KLEE: WARNING: killing 13196 states (over memory cap)
KLEE: WARNING: killing 13549 states (over memory cap)
KLEE: WARNING: killing 13238 states (over memory cap)
KLEE: WARNING: killing 13304 states (over memory cap)
KLEE: WARNING: killing 13659 states (over memory cap)
KLEE: WARNING: killing 13820 states (over memory cap)
KLEE: WARNING: killing 13032 states (over memory cap)
KLEE: WARNING: killing 13384 states (over memory cap)
KLEE: WARNING: killing 13646 states (over memory cap)
KLEE: WARNING: killing 13051 states (over memory cap)
KLEE: WARNING: killing 13215 states (over memory cap)
KLEE: WARNING: killing 13373 states (over memory cap)
KLEE: WARNING: killing 13354 states (over memory cap)
KLEE: WARNING: killing 13231 states (over memory cap)
KLEE: WARNING: killing 13297 states (over memory cap)
KLEE: WARNING: killing 13088 states (over memory cap)
KLEE: WARNING: killing 13350 states (over memory cap)
KLEE: WARNING: killing 12944 states (over memory cap)
KLEE: WARNING: killing 13481 states (over memory cap)
KLEE: WARNING: killing 13826 states (over memory cap)
KLEE: WARNING: killing 13618 states (over memory cap)
KLEE: WARNING: killing 13500 states (over memory cap)
KLEE: WARNING: killing 13564 states (over memory cap)
KLEE: WARNING: killing 13354 states (over memory cap)
KLEE: WARNING: killing 13139 states (over memory cap)
KLEE: WARNING: killing 13031 states (over memory cap)
KLEE: WARNING: killing 13278 states (over memory cap)
KLEE: WARNING: killing 13813 states (over memory cap)
KLEE: WARNING: killing 13147 states (over memory cap)
KLEE: WARNING: killing 13763 states (over memory cap)
KLEE: WARNING: killing 13369 states (over memory cap)
KLEE: WARNING: killing 13522 states (over memory cap)
KLEE: WARNING: killing 13143 states (over memory cap)
KLEE: WARNING: killing 13300 states (over memory cap)
KLEE: WARNING: killing 13369 states (over memory cap)
KLEE: WARNING: killing 13168 states (over memory cap)
KLEE: WARNING: killing 13773 states (over memory cap)
KLEE: WARNING: killing 13479 states (over memory cap)
KLEE: WARNING: killing 13367 states (over memory cap)
KLEE: WARNING: killing 13432 states (over memory cap)
KLEE: WARNING: killing 13223 states (over memory cap)
KLEE: WARNING: killing 13473 states (over memory cap)
KLEE: WARNING: killing 13447 states (over memory cap)
KLEE: WARNING: killing 13678 states (over memory cap)
KLEE: WARNING: killing 13307 states (over memory cap)
KLEE: WARNING: killing 13465 states (over memory cap)
KLEE: WARNING: killing 13350 states (over memory cap)
KLEE: WARNING: killing 13057 states (over memory cap)
KLEE: WARNING: killing 13118 states (over memory cap)
KLEE: WARNING: killing 13006 states (over memory cap)
KLEE: WARNING: killing 13517 states (over memory cap)
KLEE: WARNING: killing 13134 states (over memory cap)
KLEE: WARNING: killing 13646 states (over memory cap)
KLEE: WARNING: killing 13620 states (over memory cap)
KLEE: WARNING: killing 13324 states (over memory cap)
KLEE: WARNING: killing 12948 states (over memory cap)
KLEE: WARNING: killing 13277 states (over memory cap)
KLEE: WARNING: killing 13950 states (over memory cap)
