bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--ath9k--ath9k_htc.ko-entry_point_false-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 348 473 3598 28291
Removed infinite loop in __hif_usb_tx
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.998463869095
Removed calls to 'ath_printk' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'ath9k_cmn_update_txpow' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to 'tasklet_kill' (function is undefined)
Removed calls to 'ath9k_hw_set_tsfadjust' (function is undefined)
Removed calls to 'ieee80211_iterate_active_interfaces_atomic' (function is undefined)
Removed calls to 'ath9k_hw_init_global_settings' (function is undefined)
Removed calls to 'ath9k_hw_setrxfilter' (function is undefined)
Removed calls to 'ath_key_delete' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'ath9k_hw_settsf64' (function is undefined)
Removed calls to 'ath9k_hw_reset_tsf' (function is undefined)
Removed calls to 'ieee80211_start_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_stop_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'wiphy_rfkill_set_hw_state' (function is undefined)
Removed calls to 'usb_put_dev' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to '__const_udelay' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'usb_anchor_urb' (function is undefined)
Removed calls to 'usb_unanchor_urb' (function is undefined)
Removed calls to 'usb_free_urb' (function is undefined)
Removed calls to 'usb_kill_anchored_urbs' (function is undefined)
Defining function request_firmware as symbolic
Removed calls to 'ath9k_hw_cfg_output' (function is undefined)
Removed calls to 'ath9k_hw_set_gpio' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Defining function _dev_info as symbolic
Defining function dev_err as symbolic
Defining function skb_put as symbolic
Defining function wait_for_completion_timeout as symbolic
Defining function skb_push as symbolic
Removed calls to '__tasklet_schedule' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'complete' (function is undefined)
Defining function skb_pull as symbolic
Removed calls to 'usb_kill_urb' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Defining function usb_control_msg as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function usb_alloc_urb as symbolic
Removed calls to 'skb_trim' (function is undefined)
Defining function usb_submit_urb as symbolic
Defining function usb_ifnum_to_if as symbolic
Defining function __netdev_alloc_skb as symbolic
Defining function ath9k_hw_setpower as symbolic
Defining function kmemdup as symbolic
Defining function usb_interrupt_msg as symbolic
Removed calls to 'wiphy_rfkill_stop_polling' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'ath9k_hw_deinit' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Removed calls to 'ieee80211_queue_work' (function is undefined)
Removed calls to 'led_classdev_unregister' (function is undefined)
Defining function cancel_work_sync as symbolic
Defining function usb_get_dev as symbolic
Removed calls to 'complete_all' (function is undefined)
Removed calls to 'device_release_driver' (function is undefined)
Defining function request_firmware_nowait as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'tasklet_init' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to 'ath9k_cmn_init_crypto' (function is undefined)
Removed calls to 'ath9k_cmn_reload_chainmask' (function is undefined)
Removed calls to 'ath9k_hw_name' (function is undefined)
Removed calls to 'wiphy_rfkill_start_polling' (function is undefined)
Defining function printk as symbolic
Defining function ieee80211_alloc_hw as symbolic
Removed calls to 'ath_reg_notifier_apply' (function is undefined)
Defining function ath_regd_init as symbolic
Defining function ath9k_hw_disable as symbolic
Defining function ieee80211_register_hw as symbolic
Defining function ath_is_world_regd as symbolic
Defining function regulatory_hint as symbolic
Removed calls to 'ath9k_cmn_debug_recv' (function is undefined)
Removed calls to 'ath9k_cmn_debug_phy_err' (function is undefined)
Removed calls to 'ath9k_cmn_debug_base_eeprom' (function is undefined)
Removed calls to 'ath9k_cmn_debug_modal_eeprom' (function is undefined)
Defining function snprintf as symbolic
Defining function led_classdev_register as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function __ieee80211_create_tpt_led_trigger as symbolic
Defining function wiphy_to_ieee80211_hw as symbolic
Removed calls to 'ath9k_cmn_debug_stat_rx' (function is undefined)
Removed calls to 'ath9k_cmn_rx_skb_postprocess' (function is undefined)
Removed calls to 'ath9k_cmn_process_rssi' (function is undefined)
Removed calls to 'ieee80211_rx' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'ath9k_hw_ani_monitor' (function is undefined)
Removed calls to 'ieee80211_queue_delayed_work' (function is undefined)
Defining function ath9k_hw_init as symbolic
Defining function ath9k_cmn_init_channels_rates as symbolic
Removed calls to 'ath9k_hw_btcoex_init_3wire' (function is undefined)
Removed calls to 'ath9k_hw_init_btcoex_hw' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'ath9k_hw_btcoex_bt_stomp' (function is undefined)
Removed calls to 'ath9k_hw_btcoex_enable' (function is undefined)
Defining function msecs_to_jiffies as symbolic
Defining function ath9k_hw_gpio_get as symbolic
Defining function ath9k_hw_beaconq_setup as symbolic
Defining function ath9k_hw_setuptxqueue as symbolic
Defining function ath9k_hw_releasetxqueue as symbolic
Removed calls to 'ieee80211_tx_status' (function is undefined)
Defining function mod_timer as symbolic
Defining function ieee80211_get_hdrlen_from_skb as symbolic
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Defining function ieee80211_find_sta as symbolic
Removed calls to 'lock_release' (function is undefined)
Defining function ieee80211_start_tx_ba_session as symbolic
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Defining function ath9k_hw_reset as symbolic
Removed calls to 'ath9k_hw_setmcastfilter' (function is undefined)
Removed calls to 'ath9k_hw_startpcureceive' (function is undefined)
Defining function ath9k_hw_setrxabort as symbolic
Defining function ath9k_hw_stopdmarecv as symbolic
Removed calls to 'ath9k_cmn_beacon_config_adhoc' (function is undefined)
Removed calls to 'ath9k_cmn_beacon_config_ap' (function is undefined)
Removed calls to 'ath9k_hw_set_sta_beacon_timers' (function is undefined)
Removed calls to 'ath9k_hw_beaconinit' (function is undefined)
Defining function ath9k_hw_get_txq_props as symbolic
Defining function ath9k_hw_set_txq_props as symbolic
Defining function ath9k_hw_resettxqueue as symbolic
Defining function ath9k_cmn_beacon_config_sta as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function ath9k_hw_getrxfilter as symbolic
Defining function del_timer_sync as symbolic
Defining function cancel_delayed_work_sync as symbolic
Defining function ath9k_hw_reset_calvalid as symbolic
Defining function ath9k_cmn_rx_accept as symbolic
Defining function ath9k_cmn_process_rate as symbolic
Defining function ath_is_mybeacon as symbolic
Defining function ieee80211_beacon_get_tim as symbolic
Defining function ieee80211_get_buffered_bc as symbolic
Defining function ieee80211_hdrlen as symbolic
Defining function ath9k_cmn_get_hw_crypto_keytype as symbolic
Defining function find_first_zero_bit as symbolic
Defining function usb_bulk_msg as symbolic
Defining function ath9k_hw_wait as symbolic
Defining function default_llseek as symbolic
Defining function simple_open as symbolic
Defining function scnprintf as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function bitmap_scnprintf as symbolic
Defining function __bitmap_weight as symbolic
Removed calls to 'might_fault' (function is undefined)
Removed calls to '__copy_from_user_overflow' (function is undefined)
Defining function kstrtoull as symbolic
Defining function _copy_from_user as symbolic
Defining function sprintf as symbolic
Defining function ath9k_hw_gettsf64 as symbolic
Defining function queue_work_on as symbolic
Defining function ath_key_config as symbolic
Removed calls to 'ath9k_hw_write_associd' (function is undefined)
Defining function ath9k_cmn_get_channel as symbolic
Removed calls to 'ath9k_hw_setopmode' (function is undefined)
Removed calls to 'ath_hw_setbssidmask' (function is undefined)
Removed calls to 'ath9k_hw_btcoex_disable' (function is undefined)
Defining function ath9k_hw_phy_disable as symbolic
Removed calls to 'ath9k_hw_btcoex_set_weight' (function is undefined)
Defining function usb_register_driver as symbolic
Removed calls to 'usb_deregister' (function is undefined)
Defining function ldv_release_10 as symbolic
Defining function ldv_probe_10 as symbolic
Defining function ldv_release_5 as symbolic
Defining function ldv_release_4 as symbolic
Defining function ldv_release_8 as symbolic
Defining function ldv_release_2 as symbolic
Defining function ldv_release_9 as symbolic
Defining function ldv_release_7 as symbolic
Defining function ldv_release_3 as symbolic
Defining function ldv_release_6 as symbolic
Linked our definitions to these undefined functions:
  strncmp
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_loff_t_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_size_t_named
  __VERIFIER_nondet_u32_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.984210014343
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 468 408 1969 15798
INFO: Starting verification
KLEE: WARNING ONCE: function "ath9k_htc_tx" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_start" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_stop" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_add_interface" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_remove_interface" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_config" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_bss_info_changed" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_sw_scan_start" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_sw_scan_complete" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_wait_for_target" has inline asm
KLEE: WARNING ONCE: function "tasklet_schedule" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_rx_msg" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_probe_device" has inline asm
KLEE: WARNING ONCE: function "ath9k_enable_regwrite_buffer" has inline asm
KLEE: WARNING ONCE: function "ath9k_regwrite_flush" has inline asm
KLEE: WARNING ONCE: function "ath_btcoex_period_work" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_tx_process" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock" has inline asm
KLEE: WARNING ONCE: function "rcu_read_unlock" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_reset" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_start_ani" has inline asm
KLEE: WARNING ONCE: function "__hif_usb_tx" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_add_station" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_start_btcoex" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_tx_get_slot" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_tx_clear_slot" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_stop_ani" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_swba" has inline asm
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u16_named
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u8_named
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
KLEE: output directory is "/tmp/symbiotic-9bhBzN/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "ath9k_htc_tx" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_start" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_stop" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_add_interface" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_remove_interface" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_config" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_bss_info_changed" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_sw_scan_start" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_sw_scan_complete" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_wait_for_target" has inline asm
KLEE: WARNING ONCE: function "tasklet_schedule" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_rx_msg" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_probe_device" has inline asm
KLEE: WARNING ONCE: function "ath9k_enable_regwrite_buffer" has inline asm
KLEE: WARNING ONCE: function "ath9k_regwrite_flush" has inline asm
KLEE: WARNING ONCE: function "ath_btcoex_period_work" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_tx_process" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock" has inline asm
KLEE: WARNING ONCE: function "rcu_read_unlock" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_reset" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_start_ani" has inline asm
KLEE: WARNING ONCE: function "__hif_usb_tx" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_add_station" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_start_btcoex" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_tx_get_slot" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_tx_clear_slot" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_stop_ani" has inline asm
KLEE: WARNING ONCE: function "ath9k_htc_swba" has inline asm
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u16_named
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u8_named
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 2.27204585075
