bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.14/linux-3.14__complex_emg__linux-usb-dev__drivers-net-wireless-mwifiex-mwifiex_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 1013 698 10305 76925
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 2.3769659996
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Defining function skb_dequeue as symbolic
Removed calls to 'do_gettimeofday' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'skb_trim' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function dev_warn as symbolic
Defining function printk as symbolic
Removed calls to '__list_add' (function is undefined)
Defining function dev_err as symbolic
Defining function netpoll_trap as symbolic
Defining function del_timer as symbolic
Defining function skb_pull as symbolic
Defining function eth_type_trans as symbolic
Defining function netif_rx as symbolic
Defining function netif_rx_ni as symbolic
Defining function skb_copy as symbolic
Removed calls to 'kfree_skb' (function is undefined)
Defining function skb_realloc_headroom as symbolic
Removed calls to 'ldv_check_alloc_flags' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Defining function skb_push as symbolic
Defining function __netdev_alloc_skb as symbolic
Defining function skb_put as symbolic
Removed calls to '__list_del_entry' (function is undefined)
Defining function ns_to_timeval as symbolic
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Defining function prepare_to_wait_event as symbolic
Defining function queue_work_on as symbolic
Removed calls to 'init_timer_key' (function is undefined)
Defining function ieee80211_frequency_to_channel as symbolic
Defining function kmemdup as symbolic
Defining function msecs_to_jiffies as symbolic
Defining function mod_timer as symbolic
Removed calls to 'cfg80211_new_sta' (function is undefined)
Removed calls to 'cfg80211_del_sta' (function is undefined)
Removed calls to 'netif_carrier_off' (function is undefined)
Removed calls to 'netif_carrier_on' (function is undefined)
Removed calls to 'cfg80211_michael_mic_failure' (function is undefined)
Removed calls to 'cfg80211_cqm_rssi_notify' (function is undefined)
Removed calls to 'cfg80211_remain_on_channel_expired' (function is undefined)
Removed calls to 'cfg80211_disconnected' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function cfg80211_find_ie as symbolic
Removed calls to 'cfg80211_put_bss' (function is undefined)
Removed calls to 'cfg80211_scan_done' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Removed calls to 'lock_release' (function is undefined)
Defining function rcu_is_watching as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Defining function lock_is_held as symbolic
Defining function cfg80211_inform_bss_width as symbolic
Defining function __ieee80211_get_channel as symbolic
Removed calls to 'ieee80211_amsdu_to_8023s' (function is undefined)
Defining function cfg80211_rx_mgmt as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'flush_workqueue' (function is undefined)
Removed calls to 'destroy_workqueue' (function is undefined)
Removed calls to 'up' (function is undefined)
Defining function down_interruptible as symbolic
Defining function __alloc_workqueue_key as symbolic
Defining function del_timer_sync as symbolic
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'wiphy_unregister' (function is undefined)
Removed calls to 'wiphy_free' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'complete' (function is undefined)
Defining function request_firmware_nowait as symbolic
Defining function dev_notice as symbolic
Removed calls to 'wiphy_apply_custom_regulatory' (function is undefined)
Removed calls to 'free_netdev' (function is undefined)
Defining function sprintf as symbolic
Defining function snprintf as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function register_netdevice as symbolic
Defining function alloc_netdev_mqs as symbolic
Removed calls to 'ether_setup' (function is undefined)
Defining function wiphy_new as symbolic
Defining function wiphy_register as symbolic
Defining function _dev_info as symbolic
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'unregister_netdevice_queue' (function is undefined)
Removed calls to 'debugfs_remove' (function is undefined)
Defining function cfg80211_classify8021d as symbolic
Defining function cfg80211_find_vendor_ie as symbolic
Removed calls to 'cfg80211_ibss_joined' (function is undefined)
Defining function cfg80211_get_bss as symbolic
Defining function ieee80211_channel_to_frequency as symbolic
Defining function ieee80211_bss_get_ie as symbolic
Removed calls to 'cfg80211_mgmt_tx_status' (function is undefined)
Defining function prandom_u32 as symbolic
Removed calls to 'cfg80211_ready_on_channel' (function is undefined)
Defining function device_set_wakeup_enable as symbolic
Removed calls to 'free_pages' (function is undefined)
Defining function get_zeroed_page as symbolic
Defining function simple_read_from_buffer as symbolic
Removed calls to 'cfg80211_connect_result' (function is undefined)
Defining function simple_open as symbolic
Removed calls to 'might_fault' (function is undefined)
Defining function sscanf as symbolic
Defining function _copy_from_user as symbolic
Defining function external_allocated_data as symbolic
Removed calls to 'ldv_switch_to_interrupt_context' (function is undefined)
Removed calls to 'ldv_switch_to_process_context' (function is undefined)
Removed calls to 'ldv_assert' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  strlen
  strncmp
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 2.23416185379
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 921 503 4448 39081
INFO: Starting verification
KLEE: WARNING ONCE: function "mwifiex_write_data_complete" has inline asm
KLEE: WARNING ONCE: function "mwifiex_recv_packet" has inline asm
KLEE: WARNING ONCE: function "mwifiex_process_uap_txpd" has inline asm
KLEE: WARNING ONCE: function "mwifiex_process_sta_txpd" has inline asm
KLEE: WARNING ONCE: function "mwifiex_wake_up_net_dev_queue" has inline asm
KLEE: WARNING ONCE: function "netif_tx_stop_queue" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock" has inline asm
KLEE: WARNING ONCE: function "rcu_read_unlock" has inline asm
KLEE: WARNING ONCE: function "mwifiex_add_virtual_intf" has inline asm
KLEE: WARNING ONCE: function "mwifiex_reg_notifier" has inline asm
KLEE: WARNING ONCE: function "mwifiex_send_domain_info_cmd_fw" has inline asm
KLEE: WARNING ONCE: function "mwifiex_open" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_antenna" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_coalesce" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_tx_power" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_wakeup" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_set_wiphy_params" has inline asm
KLEE: WARNING ONCE: function "mwifiex_cfg80211_suspend" has inline asm
KLEE: WARNING ONCE: function "ldv_dummy_resourceless_instance_callback_5_8" has inline asm
KLEE: WARNING ONCE: function "ldv_net_dummy_resourceless_instance_5" has inline asm
KLEE: WARNING: undefined reference to function: ether_setup
KLEE: WARNING: undefined reference to function: free_netdev
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_0f20e052-cd7a-4da7-866b-38cda8dde947/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING: killing 9254 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 11324 states (over memory cap)
KLEE: WARNING: killing 11548 states (over memory cap)
KLEE: WARNING: killing 10941 states (over memory cap)
KLEE: WARNING: killing 11311 states (over memory cap)
KLEE: WARNING: killing 11725 states (over memory cap)
KLEE: WARNING: killing 11222 states (over memory cap)
KLEE: WARNING: killing 11349 states (over memory cap)
KLEE: WARNING: killing 12108 states (over memory cap)
KLEE: WARNING: killing 11946 states (over memory cap)
KLEE: WARNING: killing 12407 states (over memory cap)
KLEE: WARNING: killing 12534 states (over memory cap)
KLEE: WARNING: killing 12232 states (over memory cap)
KLEE: WARNING: killing 12502 states (over memory cap)
KLEE: WARNING: killing 12109 states (over memory cap)
KLEE: WARNING: killing 12333 states (over memory cap)
KLEE: WARNING: killing 11594 states (over memory cap)
KLEE: WARNING: killing 11772 states (over memory cap)
KLEE: WARNING: killing 12001 states (over memory cap)
KLEE: WARNING: killing 11792 states (over memory cap)
KLEE: WARNING: killing 12260 states (over memory cap)
KLEE: WARNING: killing 11816 states (over memory cap)
KLEE: WARNING: killing 11897 states (over memory cap)
KLEE: WARNING: killing 12028 states (over memory cap)
KLEE: WARNING: killing 11539 states (over memory cap)
KLEE: WARNING: killing 11996 states (over memory cap)
KLEE: WARNING: killing 12365 states (over memory cap)
KLEE: WARNING: killing 11548 states (over memory cap)
KLEE: WARNING: killing 11247 states (over memory cap)
KLEE: WARNING: killing 11656 states (over memory cap)
KLEE: WARNING: killing 11739 states (over memory cap)
KLEE: WARNING: killing 11678 states (over memory cap)
KLEE: WARNING: killing 11857 states (over memory cap)
KLEE: WARNING: killing 12029 states (over memory cap)
KLEE: WARNING: killing 11552 states (over memory cap)
KLEE: WARNING: killing 11960 states (over memory cap)
KLEE: WARNING: killing 11948 states (over memory cap)
KLEE: WARNING: killing 11933 states (over memory cap)
KLEE: WARNING: killing 11592 states (over memory cap)
KLEE: WARNING: killing 11723 states (over memory cap)
KLEE: WARNING: killing 12082 states (over memory cap)
KLEE: WARNING: killing 12257 states (over memory cap)
KLEE: WARNING: killing 12201 states (over memory cap)
KLEE: WARNING: killing 12005 states (over memory cap)
KLEE: WARNING: killing 11480 states (over memory cap)
KLEE: WARNING: killing 11659 states (over memory cap)
KLEE: WARNING: killing 11969 states (over memory cap)
KLEE: WARNING: killing 12188 states (over memory cap)
KLEE: WARNING: killing 11947 states (over memory cap)
KLEE: WARNING: killing 11797 states (over memory cap)
KLEE: WARNING: killing 11323 states (over memory cap)
KLEE: WARNING: killing 11778 states (over memory cap)
KLEE: WARNING: killing 12044 states (over memory cap)
KLEE: WARNING: killing 11891 states (over memory cap)
KLEE: WARNING: killing 11601 states (over memory cap)
KLEE: WARNING: killing 11908 states (over memory cap)
KLEE: WARNING: killing 11899 states (over memory cap)
KLEE: WARNING: killing 12580 states (over memory cap)
KLEE: WARNING: killing 11235 states (over memory cap)
KLEE: WARNING: killing 12054 states (over memory cap)
KLEE: WARNING: killing 11860 states (over memory cap)
KLEE: WARNING: killing 12447 states (over memory cap)
KLEE: WARNING: killing 11930 states (over memory cap)
KLEE: WARNING: killing 11459 states (over memory cap)
KLEE: WARNING: killing 12090 states (over memory cap)
KLEE: WARNING: killing 11484 states (over memory cap)
KLEE: WARNING: killing 11749 states (over memory cap)
KLEE: WARNING: killing 11509 states (over memory cap)
KLEE: WARNING: killing 12367 states (over memory cap)
KLEE: WARNING: killing 12177 states (over memory cap)
KLEE: WARNING: killing 11804 states (over memory cap)
KLEE: WARNING: killing 11377 states (over memory cap)
KLEE: WARNING: killing 11868 states (over memory cap)
KLEE: WARNING: killing 12044 states (over memory cap)
KLEE: WARNING: killing 12485 states (over memory cap)
KLEE: WARNING: killing 12071 states (over memory cap)
KLEE: WARNING: killing 12057 states (over memory cap)
KLEE: WARNING: killing 11592 states (over memory cap)
KLEE: WARNING: killing 12128 states (over memory cap)
KLEE: WARNING: killing 11804 states (over memory cap)
KLEE: WARNING: killing 11655 states (over memory cap)
KLEE: WARNING: killing 11828 states (over memory cap)
KLEE: WARNING: killing 11454 states (over memory cap)
KLEE: WARNING: killing 11946 states (over memory cap)
KLEE: WARNING: killing 11978 states (over memory cap)
KLEE: WARNING: killing 11343 states (over memory cap)
KLEE: WARNING: killing 12139 states (over memory cap)
KLEE: WARNING: killing 11820 states (over memory cap)
KLEE: WARNING: killing 11813 states (over memory cap)
KLEE: WARNING: killing 11395 states (over memory cap)
KLEE: WARNING: killing 12239 states (over memory cap)
KLEE: WARNING: killing 12046 states (over memory cap)
KLEE: WARNING: killing 12216 states (over memory cap)
KLEE: WARNING: killing 12390 states (over memory cap)
KLEE: WARNING: killing 11392 states (over memory cap)
KLEE: WARNING: killing 11786 states (over memory cap)
KLEE: WARNING: killing 11239 states (over memory cap)
KLEE: WARNING: killing 11949 states (over memory cap)
KLEE: WARNING: killing 11843 states (over memory cap)
KLEE: WARNING: killing 11478 states (over memory cap)
KLEE: WARNING: killing 11601 states (over memory cap)
KLEE: WARNING: killing 11818 states (over memory cap)
KLEE: WARNING: killing 11898 states (over memory cap)
KLEE: WARNING: killing 12071 states (over memory cap)
KLEE: WARNING: killing 12412 states (over memory cap)
KLEE: WARNING: killing 12271 states (over memory cap)
KLEE: WARNING: killing 11643 states (over memory cap)
KLEE: WARNING: killing 11406 states (over memory cap)
KLEE: WARNING: killing 11934 states (over memory cap)
KLEE: WARNING: killing 11792 states (over memory cap)
KLEE: WARNING: killing 11653 states (over memory cap)
KLEE: WARNING: killing 12348 states (over memory cap)
KLEE: WARNING: killing 11721 states (over memory cap)
KLEE: WARNING: killing 11845 states (over memory cap)
KLEE: WARNING: killing 11087 states (over memory cap)
KLEE: WARNING: killing 11869 states (over memory cap)
KLEE: WARNING: killing 12217 states (over memory cap)
KLEE: WARNING: killing 12211 states (over memory cap)
KLEE: WARNING: killing 12071 states (over memory cap)
KLEE: WARNING: killing 11751 states (over memory cap)
KLEE: WARNING: killing 11383 states (over memory cap)
KLEE: WARNING: killing 12301 states (over memory cap)
KLEE: WARNING: killing 11986 states (over memory cap)
KLEE: WARNING: killing 11584 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-fHYNqA/linux-3.14__complex_emg__linux-usb-dev__drivers-net-wireless-mwifiex-mwifiex_true-unreach-call.cil.c:46358: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 11747 states (over memory cap)
KLEE: WARNING: killing 11610 states (over memory cap)
KLEE: WARNING: killing 11772 states (over memory cap)
KLEE: WARNING: killing 11896 states (over memory cap)
KLEE: WARNING: killing 11929 states (over memory cap)
KLEE: WARNING: killing 11398 states (over memory cap)
KLEE: WARNING: killing 11826 states (over memory cap)
KLEE: WARNING: killing 11768 states (over memory cap)
KLEE: WARNING: killing 11631 states (over memory cap)
KLEE: WARNING: killing 12358 states (over memory cap)
KLEE: WARNING: killing 11870 states (over memory cap)
KLEE: WARNING: killing 11954 states (over memory cap)
KLEE: WARNING: killing 11505 states (over memory cap)
KLEE: WARNING: killing 11712 states (over memory cap)
KLEE: WARNING: killing 11837 states (over memory cap)
KLEE: WARNING: killing 11871 states (over memory cap)
KLEE: WARNING: killing 11995 states (over memory cap)
KLEE: WARNING: killing 12283 states (over memory cap)
KLEE: WARNING: killing 12020 states (over memory cap)
KLEE: WARNING: killing 11748 states (over memory cap)
KLEE: WARNING: killing 11998 states (over memory cap)
KLEE: WARNING: killing 11818 states (over memory cap)
KLEE: WARNING: killing 11676 states (over memory cap)
KLEE: WARNING: killing 11965 states (over memory cap)
KLEE: WARNING: killing 11617 states (over memory cap)
KLEE: WARNING: killing 11735 states (over memory cap)
KLEE: WARNING: killing 11978 states (over memory cap)
KLEE: WARNING: killing 12102 states (over memory cap)
KLEE: WARNING: killing 11919 states (over memory cap)
KLEE: WARNING: killing 12215 states (over memory cap)
KLEE: WARNING: killing 12499 states (over memory cap)
KLEE: WARNING: killing 11127 states (over memory cap)
KLEE: WARNING: killing 12268 states (over memory cap)
KLEE: WARNING: killing 11275 states (over memory cap)
KLEE: WARNING: killing 11726 states (over memory cap)
KLEE: WARNING: killing 11808 states (over memory cap)
KLEE: WARNING: killing 12016 states (over memory cap)
KLEE: WARNING: killing 12135 states (over memory cap)
KLEE: WARNING: killing 11699 states (over memory cap)
KLEE: WARNING: killing 11854 states (over memory cap)
KLEE: WARNING: killing 12439 states (over memory cap)
KLEE: WARNING: killing 11879 states (over memory cap)
KLEE: WARNING: killing 11700 states (over memory cap)
KLEE: WARNING: killing 11861 states (over memory cap)
KLEE: WARNING: killing 11940 states (over memory cap)
KLEE: WARNING: killing 11717 states (over memory cap)
KLEE: WARNING: killing 11751 states (over memory cap)
KLEE: WARNING: killing 11784 states (over memory cap)
KLEE: WARNING: killing 11812 states (over memory cap)
KLEE: WARNING: killing 11850 states (over memory cap)
KLEE: WARNING: killing 11589 states (over memory cap)
KLEE: WARNING: killing 12039 states (over memory cap)
KLEE: WARNING: killing 12031 states (over memory cap)
KLEE: WARNING: killing 11901 states (over memory cap)
KLEE: WARNING: killing 12022 states (over memory cap)
KLEE: WARNING: killing 11841 states (over memory cap)
KLEE: WARNING: killing 11576 states (over memory cap)
KLEE: WARNING: killing 12324 states (over memory cap)
KLEE: WARNING: killing 11983 states (over memory cap)
KLEE: WARNING: killing 11886 states (over memory cap)
KLEE: WARNING: killing 11924 states (over memory cap)
KLEE: WARNING: killing 12121 states (over memory cap)
KLEE: WARNING: killing 11612 states (over memory cap)
KLEE: WARNING: killing 11434 states (over memory cap)
KLEE: WARNING: killing 11634 states (over memory cap)
KLEE: WARNING: killing 11878 states (over memory cap)
KLEE: WARNING: killing 12162 states (over memory cap)
KLEE: WARNING: killing 12070 states (over memory cap)
KLEE: WARNING: killing 11810 states (over memory cap)
KLEE: WARNING: killing 12004 states (over memory cap)
KLEE: WARNING: killing 12043 states (over memory cap)
KLEE: WARNING: killing 11573 states (over memory cap)
