bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-challenges/linux-3.14__complex_emg__linux-kernel-locking-spinlock__drivers-net-wireless-b43legacy-b43legacy_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 337 726 7072 49619
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.54644799232
Removed calls to 'ssb_driver_unregister' (function is undefined)
Removed calls to 'debugfs_remove' (function is undefined)
Defining function printk as symbolic
Defining function __ssb_driver_register as symbolic
Defining function debugfs_create_dir as symbolic
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to '__ldv_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'ldv__builtin_va_start' (function is undefined)
Removed calls to 'ldv__builtin_va_end' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'synchronize_irq' (function is undefined)
Removed calls to 'tasklet_kill' (function is undefined)
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Removed calls to 'ieee80211_queue_work' (function is undefined)
Removed calls to '__might_sleep' (function is undefined)
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Removed calls to '__const_udelay' (function is undefined)
Defining function ieee80211_get_response_rate as symbolic
Defining function net_ratelimit as symbolic
Defining function ieee80211_beacon_get_tim as symbolic
Removed calls to 'dump_stack' (function is undefined)
Removed calls to 'consume_skb' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'hwrng_unregister' (function is undefined)
Removed calls to 'ssb_device_disable' (function is undefined)
Removed calls to 'ldv_check_alloc_flags' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to 'ieee80211_queue_delayed_work' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '__tasklet_schedule' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function msecs_to_jiffies as symbolic
Defining function round_jiffies_relative as symbolic
Removed calls to 'trace_hardirqs_off' (function is undefined)
Removed calls to 'trace_hardirqs_on' (function is undefined)
Defining function _cond_resched as symbolic
Defining function request_threaded_irq as symbolic
Defining function ssb_bus_powerup as symbolic
Defining function ssb_device_is_enabled as symbolic
Removed calls to 'ssb_device_enable' (function is undefined)
Defining function ssb_pcicore_dev_irqvecs_enable as symbolic
Defining function ssb_bus_may_powerdown as symbolic
Defining function snprintf as symbolic
Defining function __ieee80211_get_assoc_led_name as symbolic
Defining function __ieee80211_get_radio_led_name as symbolic
Defining function __ieee80211_get_rx_led_name as symbolic
Defining function led_classdev_register as symbolic
Defining function __ieee80211_get_tx_led_name as symbolic
Defining function hwrng_register as symbolic
Defining function ssb_dma_translation as symbolic
Removed calls to 'debug_dma_alloc_coherent' (function is undefined)
Removed calls to 'debug_dma_free_coherent' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Defining function __netdev_alloc_skb as symbolic
Defining function __phys_addr as symbolic
Defining function dma_set_mask as symbolic
Defining function dma_supported as symbolic
Removed calls to 'tasklet_init' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to '__dev_kfree_skb_irq' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'ieee80211_ctstoself_get' (function is undefined)
Removed calls to 'ieee80211_rts_get' (function is undefined)
Defining function ieee80211_generic_frame_duration as symbolic
Defining function ieee80211_hdrlen as symbolic
Defining function msleep_interruptible as symbolic
Removed calls to 'led_classdev_unregister' (function is undefined)
Defining function cancel_delayed_work_sync as symbolic
Defining function cancel_work_sync as symbolic
Defining function skb_dequeue as symbolic
Removed calls to 'wiphy_rfkill_set_hw_state' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to 'ieee80211_stop_queue' (function is undefined)
Defining function capable as symbolic
Defining function simple_strtol as symbolic
Defining function generic_file_llseek as symbolic
Removed calls to 'free_pages' (function is undefined)
Defining function __get_free_pages as symbolic
Defining function simple_read_from_buffer as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'ssb_set_devtypedata' (function is undefined)
Removed calls to 'complete' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Defining function queue_work_on as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Defining function ieee80211_register_hw as symbolic
Defining function request_firmware_nowait as symbolic
Defining function request_firmware as symbolic
Defining function debugfs_create_file as symbolic
Defining function debugfs_create_bool as symbolic
Removed calls to 'debug_dma_sync_single_for_cpu' (function is undefined)
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Removed calls to 'ieee80211_wake_queue' (function is undefined)
Removed calls to 'debug_dma_sync_single_for_device' (function is undefined)
Defining function skb_put as symbolic
Defining function skb_pull as symbolic
Removed calls to 'skb_trim' (function is undefined)
Removed calls to 'ieee80211_rx_irqsafe' (function is undefined)
Removed calls to 'skb_queue_head' (function is undefined)
Defining function __alloc_skb as symbolic
Defining function ieee80211_alloc_hw as symbolic
Removed calls to 'wiphy_rfkill_start_polling' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Defining function simple_open as symbolic
Defining function get_zeroed_page as symbolic
Defining function _copy_from_user as symbolic
Defining function sscanf as symbolic
Defining function external_allocated_data as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'ldv_switch_to_interrupt_context' (function is undefined)
Removed calls to 'ldv_switch_to_process_context' (function is undefined)
Removed calls to 'device_remove_file' (function is undefined)
Defining function device_create_file as symbolic
Removed calls to 'ldv_assert' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  strncpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 2.09120893478
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 493 510 3327 43938
INFO: Starting verification
KLEE: WARNING ONCE: function "b43legacy_mac_suspend" has inline asm
KLEE: WARNING ONCE: function "b43legacy_plcp_get_ratecode_cck" has inline asm
KLEE: WARNING ONCE: function "b43legacy_plcp_get_ratecode_ofdm" has inline asm
KLEE: WARNING ONCE: function "b43legacy_mac_enable" has inline asm
KLEE: WARNING ONCE: function "phymode_to_string" has inline asm
KLEE: WARNING ONCE: function "b43legacy_wireless_core_init" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_xmitpower" has inline asm
KLEE: WARNING ONCE: function "b43legacy_radio_turn_on" has inline asm
KLEE: WARNING ONCE: function "b43legacy_radio_read16" has inline asm
KLEE: WARNING ONCE: function "b43legacy_periodic_work_handler" has inline asm
KLEE: WARNING ONCE: function "b43legacy_calc_nrssi_slope" has inline asm
KLEE: WARNING ONCE: function "b43legacy_calc_nrssi_threshold" has inline asm
KLEE: WARNING ONCE: function "b43legacy_dummy_transmission" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_lo_g_singledeviation" has inline asm
KLEE: WARNING ONCE: function "b43legacy_voluntary_preempt" has inline asm
KLEE: WARNING ONCE: function "arch_local_irq_save" has inline asm
KLEE: WARNING ONCE: function "b43legacy_radio_set_interference_mitigation" has inline asm
KLEE: WARNING ONCE: function "b43legacy_setup_dmaring" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "free_ringmemory" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "_stack_restore" has inline asm
KLEE: WARNING ONCE: function "flip_4bit" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_init_pctl" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_initg" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_lo_b_r15_loop" has inline asm
KLEE: WARNING ONCE: function "b43legacy_get_812_value" has inline asm
KLEE: WARNING ONCE: function "b43legacy_debugfs_read" has inline asm
KLEE: WARNING ONCE: function "b43legacy_probe" has inline asm
KLEE: WARNING ONCE: function "b43legacy_dma_tx" has inline asm
KLEE: WARNING ONCE: function "b43legacy_generate_txhdr" has inline asm
KLEE: WARNING ONCE: function "b43legacy_rx" has inline asm
KLEE: WARNING ONCE: function "b43legacy_debugfs_log_txstat" has inline asm
KLEE: WARNING ONCE: function "b43legacy_dma_handle_txstatus" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
KLEE: output directory is "/tmp/symbiotic-htt6Te/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "b43legacy_mac_suspend" has inline asm
KLEE: WARNING ONCE: function "b43legacy_plcp_get_ratecode_cck" has inline asm
KLEE: WARNING ONCE: function "b43legacy_plcp_get_ratecode_ofdm" has inline asm
KLEE: WARNING ONCE: function "b43legacy_mac_enable" has inline asm
KLEE: WARNING ONCE: function "phymode_to_string" has inline asm
KLEE: WARNING ONCE: function "b43legacy_wireless_core_init" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_xmitpower" has inline asm
KLEE: WARNING ONCE: function "b43legacy_radio_turn_on" has inline asm
KLEE: WARNING ONCE: function "b43legacy_radio_read16" has inline asm
KLEE: WARNING ONCE: function "b43legacy_periodic_work_handler" has inline asm
KLEE: WARNING ONCE: function "b43legacy_calc_nrssi_slope" has inline asm
KLEE: WARNING ONCE: function "b43legacy_calc_nrssi_threshold" has inline asm
KLEE: WARNING ONCE: function "b43legacy_dummy_transmission" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_lo_g_singledeviation" has inline asm
KLEE: WARNING ONCE: function "b43legacy_voluntary_preempt" has inline asm
KLEE: WARNING ONCE: function "arch_local_irq_save" has inline asm
KLEE: WARNING ONCE: function "b43legacy_radio_set_interference_mitigation" has inline asm
KLEE: WARNING ONCE: function "b43legacy_setup_dmaring" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "free_ringmemory" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "_stack_restore" has inline asm
KLEE: WARNING ONCE: function "flip_4bit" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_init_pctl" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_initg" has inline asm
KLEE: WARNING ONCE: function "b43legacy_phy_lo_b_r15_loop" has inline asm
KLEE: WARNING ONCE: function "b43legacy_get_812_value" has inline asm
KLEE: WARNING ONCE: function "b43legacy_debugfs_read" has inline asm
KLEE: WARNING ONCE: function "b43legacy_probe" has inline asm
KLEE: WARNING ONCE: function "b43legacy_dma_tx" has inline asm
KLEE: WARNING ONCE: function "b43legacy_generate_txhdr" has inline asm
KLEE: WARNING ONCE: function "b43legacy_rx" has inline asm
KLEE: WARNING ONCE: function "b43legacy_debugfs_log_txstat" has inline asm
KLEE: WARNING ONCE: function "b43legacy_dma_handle_txstatus" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING: undefined reference to variable: system_wq
KLEE: ERROR: unable to load symbol(system_wq) while initializing globals.
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 4.46166610718
