bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 216 311 3000 19693
Removed infinite loop in mwl8k_conf_tx
Removed infinite loop in mwl8k_ampdu_action
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in mwl8k_fw_state_machine
Removed infinite loop in mwl8k_txq_reclaim
Removed infinite loop in mwl8k_txq_xmit
Removed infinite loop in mwl8k_tid_queue_mapping
Removed infinite loop in mwl8k_tx_count_packet
Removed infinite loop in mwl8k_ampdu_allowed
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.697531938553
Defining function ieee80211_channel_to_frequency as symbolic
Removed calls to 'dev_printk' (function is undefined)
Removed calls to 'consume_skb' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'dev_warn' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to 'dev_err' (function is undefined)
Removed calls to 'iowrite32' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Removed calls to '_dev_info' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Removed calls to 'ieee80211_start_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_stop_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'dev_notice' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'ieee80211_queue_work' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Defining function wait_for_completion_timeout as symbolic
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Defining function jiffies_to_msecs as symbolic
Defining function __msecs_to_jiffies as symbolic
Defining function __phys_addr as symbolic
Defining function ioread32 as symbolic
Defining function snprintf as symbolic
Defining function net_ratelimit as symbolic
Defining function ieee80211_beacon_get_tim as symbolic
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Defining function ieee80211_find_sta as symbolic
Removed calls to 'lock_release' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Defining function printk as symbolic
Removed calls to 'complete' (function is undefined)
Defining function request_threaded_irq as symbolic
Removed calls to '__tasklet_schedule' (function is undefined)
Removed calls to '___might_sleep' (function is undefined)
Removed calls to '__const_udelay' (function is undefined)
Defining function _cond_resched as symbolic
Removed calls to 'device_release_driver' (function is undefined)
Defining function request_firmware_nowait as symbolic
Defining function request_firmware as symbolic
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'tasklet_init' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'ieee80211_restart_hw' (function is undefined)
Removed calls to 'ieee80211_rx_irqsafe' (function is undefined)
Defining function ieee80211_register_hw as symbolic
Defining function dma_alloc_attrs as symbolic
Defining function skb_put as symbolic
Defining function ieee80211_hdrlen as symbolic
Defining function __memmove as symbolic
Defining function skb_pull as symbolic
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Defining function ieee80211_find_sta_by_ifaddr as symbolic
Defining function ieee80211_stop_tx_ba_session as symbolic
Defining function cfg80211_find_ie as symbolic
Defining function cancel_work_sync as symbolic
Defining function ieee80211_start_tx_ba_session as symbolic
Defining function skb_push as symbolic
Removed calls to 'pci_set_master' (function is undefined)
Removed calls to 'pci_iounmap' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Removed calls to 'pci_release_regions' (function is undefined)
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Removed calls to 'tasklet_kill' (function is undefined)
Defining function pci_enable_device as symbolic
Defining function pci_request_regions as symbolic
Defining function pci_iomap as symbolic
Defining function ieee80211_alloc_hw_nm as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'pci_unregister_driver' (function is undefined)
Removed calls to 'ldv_check_final_state' (function is undefined)
Defining function ldv_shutdown_6 as symbolic
Defining function __pci_register_driver as symbolic
Defining function queue_work_on as symbolic
Defining function queue_delayed_work_on as symbolic
Removed calls to 'flush_workqueue' (function is undefined)
Defining function ldv_some_page as symbolic
Linked our definitions to these undefined functions:
  memcmp
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.672425031662
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 293 209 1636 10179
INFO: Starting verification
KLEE: WARNING ONCE: function "mwl8k_rxd_sta_refill" has inline asm
KLEE: WARNING ONCE: function "mwl8k_rxd_sta_process" has inline asm
KLEE: WARNING ONCE: function "mwl8k_tx" has inline asm
KLEE: WARNING ONCE: function "mwl8k_start" has inline asm
KLEE: WARNING ONCE: function "mwl8k_stop" has inline asm
KLEE: WARNING ONCE: function "mwl8k_add_interface" has inline asm
KLEE: WARNING ONCE: function "mwl8k_bss_info_changed" has inline asm
KLEE: WARNING ONCE: function "mwl8k_conf_tx" has inline asm
KLEE: WARNING ONCE: function "mwl8k_ampdu_action" has inline asm
KLEE: WARNING ONCE: function "mwl8k_fw_lock" has inline asm
KLEE: WARNING ONCE: function "pci_map_single" has inline asm
KLEE: WARNING ONCE: function "pci_unmap_single" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock" has inline asm
KLEE: WARNING ONCE: function "rcu_read_unlock" has inline asm
KLEE: WARNING ONCE: function "mwl8k_cmd_update_mac_addr" has inline asm
KLEE: WARNING ONCE: function "mwl8k_interrupt" has inline asm
KLEE: WARNING ONCE: function "mwl8k_set_ht_caps" has inline asm
KLEE: WARNING ONCE: function "tasklet_schedule" has inline asm
KLEE: WARNING ONCE: function "mwl8k_fw_state_machine" has inline asm
KLEE: WARNING ONCE: function "mwl8k_firmware_load_success" has inline asm
KLEE: WARNING ONCE: function "mwl8k_watchdog_ba_events" has inline asm
KLEE: WARNING ONCE: function "mwl8k_hw_restart_work" has inline asm
KLEE: WARNING ONCE: function "mwl8k_txq_reclaim" has inline asm
KLEE: WARNING ONCE: function "mwl8k_rxd_ap_refill" has inline asm
KLEE: WARNING ONCE: function "mwl8k_rxd_ap_process" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_be45e2f6-c234-4eff-a265-1cf058dbeb7c/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:9581: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:9595: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:9672: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:9686: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: flushing 11744 bytes on read, may be slow and/or crash: MO83[11744] allocated at global:
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:14942: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:8790: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-RMuavM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--mwl8k.ko-entry_point_true-unreach-call.cil.out.c:8790: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
