bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.16-rc1/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--wcn36xx--wcn36xx.ko-entry_point_false-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 335 278 2356 17125
Removed infinite loop in arch_local_save_flags
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.6548640728
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to 'ieee80211_free_hw' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'mutex_destroy' (function is undefined)
Removed calls to 'ieee80211_unregister_hw' (function is undefined)
Defining function printk as symbolic
Defining function ieee80211_alloc_hw as symbolic
Defining function ieee80211_register_hw as symbolic
Defining function platform_get_resource_byname as symbolic
Defining function ioremap_nocache as symbolic
Removed calls to 'ieee80211_free_txskb' (function is undefined)
Removed calls to 'destroy_workqueue' (function is undefined)
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'flush_workqueue' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'print_hex_dump' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'ieee80211_start_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'ieee80211_stop_tx_ba_cb_irqsafe' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Defining function ieee80211_start_tx_ba_session as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function msecs_to_jiffies as symbolic
Defining function wait_for_completion_timeout as symbolic
Defining function jiffies_to_msecs as symbolic
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function ieee80211_find_sta as symbolic
Removed calls to 'lock_release' (function is undefined)
Defining function ieee80211_proberesp_get as symbolic
Defining function ieee80211_beacon_get_tim as symbolic
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'ieee80211_tx_status_irqsafe' (function is undefined)
Removed calls to 'debug_dma_free_coherent' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Removed calls to 'disable_irq_nosync' (function is undefined)
Removed calls to 'enable_irq' (function is undefined)
Defining function irq_set_irq_wake as symbolic
Defining function request_threaded_irq as symbolic
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Removed calls to 'ieee80211_rx_irqsafe' (function is undefined)
Defining function skb_put as symbolic
Defining function skb_pull as symbolic
Removed calls to 'debug_dma_map_page' (function is undefined)
Defining function __phys_addr as symbolic
Removed calls to 'ieee80211_wake_queues' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'debug_dma_alloc_coherent' (function is undefined)
Defining function request_firmware as symbolic
Defining function __alloc_workqueue_key as symbolic
Removed calls to 'ieee80211_connection_loss' (function is undefined)
Removed calls to 'complete' (function is undefined)
Defining function kmemdup as symbolic
Defining function queue_work_on as symbolic
Removed calls to 'ieee80211_stop_queues' (function is undefined)
Defining function simple_open as symbolic
Removed calls to 'might_fault' (function is undefined)
Removed calls to '__copy_from_user_overflow' (function is undefined)
Defining function _copy_from_user as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function strsep as symbolic
Defining function kstrtouint as symbolic
Removed calls to 'platform_driver_unregister' (function is undefined)
Defining function ldv_release_3 as symbolic
Defining function __platform_driver_register as symbolic
Defining function ldv_release_4 as symbolic
Linked our definitions to these undefined functions:
  memcmp
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_size_t_named
  __VERIFIER_nondet_u32_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.70081114769
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 524 225 1313 10388
INFO: Starting verification
KLEE: WARNING ONCE: function "wcn36xx_bss_info_changed" has inline asm
KLEE: WARNING ONCE: function "rcu_read_unlock" has inline asm
KLEE: WARNING ONCE: function "dma_free_attrs" has inline asm
KLEE: WARNING ONCE: function "wcn36xx_dxe_init" has inline asm
KLEE: WARNING ONCE: function "wcn36xx_dxe_write_register" has inline asm
KLEE: WARNING ONCE: function "wcn36xx_dxe_enable_ch_int" has inline asm
KLEE: WARNING ONCE: function "wcn36xx_irq_tx_complete" has inline asm
KLEE: WARNING ONCE: function "wcn36xx_dxe_rx_frame" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_single_attrs" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u16_named
KLEE: WARNING: undefined reference to function: __VERIFIER_nondet_u8_named
KLEE: WARNING ONCE: calling external: __VERIFIER_nondet_u16_named(46747392) at /tmp/symbiotic-X3e01i/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--wcn36xx--wcn36xx.ko-entry_point_false-unreach-call.cil.out.c:8889
KLEE: ERROR: /tmp/symbiotic-X3e01i/205_9a_array_unsafes_linux-3.16-rc1.tar.xz-205_9a-drivers--net--wireless--ath--wcn36xx--wcn36xx.ko-entry_point_false-unreach-call.cil.out.c:8887: failed external call: __VERIFIER_nondet_u16_named
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
RESULT: unknown
INFO: Total time elapsed: 1.57970404625
