bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-commit-tester/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 299 463 5400 37722
Removed infinite loop in carl9170_op_add_interface
Removed infinite loop in carl9170_set_channel
Removed infinite loop in nl80211_to_carl
Removed infinite loop in carl9170_init_rf_bank4_pwr
Removed infinite loop in carl9170_set_power_cal
Removed infinite loop in carl9170_get_hw_dyn_params
Removed infinite loop in carl9170_tx_physet
Removed infinite loop in carl9170_handle_mpdu
Removed infinite loop in carl9170_rx_mac_status
INFO: Compilation, preparation and instrumentation time: 1.14668488503
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'ieee80211_queue_work' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function dev_err as symbolic
Removed calls to 'usb_queue_reset_device' (function is undefined)
Removed calls to 'usb_poison_anchored_urbs' (function is undefined)
Removed calls to 'tasklet_kill' (function is undefined)
Removed calls to 'usb_scuttle_anchored_urbs' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to 'complete_all' (function is undefined)
Removed calls to 'usb_free_urb' (function is undefined)
Removed calls to 'usb_kill_anchored_urbs' (function is undefined)
Removed calls to '__tasklet_hi_schedule' (function is undefined)
Defining function usb_get_from_anchor as symbolic
Removed calls to 'dev_kfree_skb_any' (function is undefined)
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Defining function kref_put as symbolic
Defining function skb_pull as symbolic
Removed calls to 'bitmap_release_region' (function is undefined)
Removed calls to 'ieee80211_wake_queue' (function is undefined)
Removed calls to 'complete' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_dereference' (function is undefined)
Removed calls to '__bitmap_shift_right' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Removed calls to 'ieee80211_sta_block_awake' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function ieee80211_find_sta as symbolic
Defining function lock_is_held as symbolic
Defining function find_first_bit as symbolic
Defining function __bitmap_empty as symbolic
Defining function ieee80211_queue_stopped as symbolic
Defining function usb_wait_anchor_empty_timeout as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'kref_init' (function is undefined)
Removed calls to 'ieee80211_stop_queue' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to 'usb_unpoison_anchored_urbs' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to 'synchronize_sched' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'ieee80211_start_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_stop_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'mutex_lock' (function is undefined)
Defining function find_next_bit as symbolic
Removed calls to 'mutex_unlock' (function is undefined)
Defining function skb_dequeue as symbolic
Defining function wait_for_completion_timeout as symbolic
Removed calls to 'usb_anchor_urb' (function is undefined)
Defining function usb_alloc_urb as symbolic
Removed calls to 'usb_unanchor_urb' (function is undefined)
Defining function usb_submit_urb as symbolic
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'print_hex_dump_bytes' (function is undefined)
Defining function net_ratelimit as symbolic
Removed calls to '__list_add' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Defining function ieee80211_beacon_get_tim as symbolic
Defining function ath_regd_get_band_ctl as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function bitmap_find_free_region as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'kref_get' (function is undefined)
Defining function cancel_delayed_work_sync as symbolic
Defining function cancel_work_sync as symbolic
Removed calls to 'ieee80211_queue_delayed_work' (function is undefined)
Defining function msecs_to_jiffies as symbolic
Removed calls to 'dev_kfree_skb_irq' (function is undefined)
Defining function usb_ifnum_to_if as symbolic
Defining function dev_get_drvdata as symbolic
Defining function skb_push as symbolic
Removed calls to 'tasklet_init' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'usb_put_dev' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Defining function usb_control_msg as symbolic
Defining function _dev_info as symbolic
Removed calls to 'input_event' (function is undefined)
Defining function dev_warn as symbolic
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'input_unregister_device' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'mutex_destroy' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Defining function dev_set_drvdata as symbolic
Removed calls to 'led_classdev_unregister' (function is undefined)
Defining function usb_reset_device as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Defining function usb_get_dev as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function request_firmware_nowait as symbolic
Removed calls to 'device_release_driver' (function is undefined)
Removed calls to 'input_set_capability' (function is undefined)
Removed calls to 'input_free_device' (function is undefined)
Defining function ath_regd_init as symbolic
Defining function ieee80211_register_hw as symbolic
Defining function ath_is_world_regd as symbolic
Defining function regulatory_hint as symbolic
Defining function input_allocate_device as symbolic
Defining function snprintf as symbolic
Defining function input_register_device as symbolic
Defining function __ieee80211_get_assoc_led_name as symbolic
Defining function led_classdev_register as symbolic
Defining function __ieee80211_get_tx_led_name as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function wiphy_to_ieee80211_hw as symbolic
Defining function ath_reg_notifier_apply as symbolic
Defining function crc32_le as symbolic
Defining function device_set_wakeup_enable as symbolic
Defining function strnlen as symbolic
Defining function strlcpy as symbolic
Removed calls to 'skb_trim' (function is undefined)
Removed calls to 'ieee80211_rx' (function is undefined)
Defining function dev_alloc_skb as symbolic
Defining function skb_put as symbolic
Defining function ieee80211_alloc_hw as symbolic
Removed calls to 'ieee80211_restart_hw' (function is undefined)
Defining function ieee80211_stop_tx_ba_session as symbolic
Removed calls to '__tasklet_schedule' (function is undefined)
Defining function __alloc_skb as symbolic
Removed calls to 'vfree' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Defining function vmalloc as symbolic
Defining function mutex_trylock as symbolic
Defining function _copy_from_user as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function bitmap_scnprintf as symbolic
Defining function __bitmap_weight as symbolic
Defining function sscanf as symbolic
Removed calls to 'ldv_handler_precall' (function is undefined)
Removed calls to 'ldv_check_return_value' (function is undefined)
Removed calls to 'ldv_check_return_value_probe' (function is undefined)
Removed calls to 'usb_deregister' (function is undefined)
Defining function usb_register_driver as symbolic
Linked our definitions to these undefined functions:
  memcmp
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_error
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
INFO: After-slicing optimizations and preparation time: 1.10934209824
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 446 345 2568 17138
INFO: Starting verification
KLEE: WARNING ONCE: function "carl9170_restart" has inline asm
KLEE: WARNING ONCE: function "__carl9170_tx_process_status" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_callback" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_status" has inline asm
KLEE: WARNING ONCE: function "carl9170_op_tx" has inline asm
KLEE: WARNING ONCE: function "carl9170_op_add_interface" has inline asm
KLEE: WARNING ONCE: function "carl9170_flush" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_cmd_complete" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_submit_cmd_urb" has inline asm
KLEE: WARNING ONCE: function "carl9170_set_channel" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_physet" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx_ampdu" has inline asm
KLEE: WARNING ONCE: function "carl9170_tx" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_tx_data_complete" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_submit_data_urb" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_init_device" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_rx_complete" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_submit_rx_urb" has inline asm
KLEE: WARNING ONCE: function "carl9170_parse_firmware" has inline asm
KLEE: WARNING ONCE: function "carl9170_register" has inline asm
KLEE: WARNING ONCE: function "carl9170_usb_restart" has inline asm
KLEE: WARNING ONCE: flushing 6620 bytes on read, may be slow and/or crash: MO73[6620] allocated at global:ar5416_phy_init
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8976: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:7367: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8993: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8993: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:9002: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:9002: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:6112: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:7229: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8380: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8382: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8922: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:6653: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:6120: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:6120: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8950: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8579: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8036: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:7594: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8540: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8037: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8645: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:7369: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: (location information missing) memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8346: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:7740: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8037: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:6729: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:6898: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8152: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:7599: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:11077: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8582: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8715: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8952: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-T7ULaY/main0_false-unreach-call_drivers-net-wireless-ath-carl9170-carl9170-ko--32_7a--8a9f335-1.c:8978: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
