bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.14/linux-3.14__complex_emg__linux-kernel-locking-mutex__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 507 459 7111 49836
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.45689988136
Defining function printk as symbolic
Removed calls to 'vfree' (function is undefined)
Defining function del_timer_sync as symbolic
Removed calls to 'synchronize_irq' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Defining function msecs_to_jiffies as symbolic
Defining function mod_timer as symbolic
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Defining function ieee80211_find_sta as symbolic
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_mapping_error' (function is undefined)
Defining function __phys_addr as symbolic
Removed calls to 'rtl_get_tcb_desc' (function is undefined)
Defining function skb_push as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__udelay' (function is undefined)
Removed calls to 'rtl_cam_reset_all_entry' (function is undefined)
Defining function efuse_read_1byte as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Defining function vmalloc as symbolic
Defining function request_firmware_nowait as symbolic
Removed calls to 'rtl_process_phyinfo' (function is undefined)
Defining function rtlwifi_rate_mapping as symbolic
Defining function rtl_query_rxpwrpercentage as symbolic
Defining function rtl_evm_db_to_percentage as symbolic
Defining function rtl_signal_scale_mapping as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'rtl_efuse_shadow_map_update' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'kmemleak_not_leak' (function is undefined)
Defining function skb_put as symbolic
Defining function __netdev_alloc_skb as symbolic
Removed calls to 'rtl_cam_mark_invalid' (function is undefined)
Removed calls to 'rtl_cam_empty_entry' (function is undefined)
Removed calls to 'rtl_cam_del_entry' (function is undefined)
Defining function rtl_cam_get_free_entry as symbolic
Defining function rtl_cam_delete_one_entry as symbolic
Defining function rtl_cam_add_one_entry as symbolic
Defining function rtl_ps_enable_nic as symbolic
Defining function jiffies_to_msecs as symbolic
Defining function rtl_ps_disable_nic as symbolic
Removed calls to 'pci_unregister_driver' (function is undefined)
Defining function __pci_register_driver as symbolic
Defining function rtl_pci_probe as symbolic
Defining function rtl_pci_suspend as symbolic
Defining function rtl_pci_resume as symbolic
Defining function external_allocated_data as symbolic
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'rtl_phy_scan_operation_backup' (function is undefined)
Removed calls to 'rtl_pci_disconnect' (function is undefined)
Removed calls to 'ldv_pre_probe' (function is undefined)
Removed calls to 'ldv_switch_to_interrupt_context' (function is undefined)
Removed calls to 'ldv_switch_to_process_context' (function is undefined)
Removed calls to 'ldv_check_alloc_flags' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to 'ldv_assert' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.70466589928
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 607 322 3389 27444
INFO: Starting verification
KLEE: WARNING ONCE: function "rtl88ee_allow_all_destaddr" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_watchdog" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_write_dig" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_check_txpower_tracking" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_update_tx_ant" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_update_rx_idle_ant" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_lc_calibrate" has inline asm
KLEE: WARNING ONCE: function "_rtl88e_phy_iq_calibrate" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_enable_hw_security_config" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_tx_fill_cmddesc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_tx_fill_desc" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_query_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_get_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_query_rf_reg" has inline asm
KLEE: WARNING ONCE: function "rf_serial_read" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_card_disable" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_set_media_status" has inline asm
KLEE: WARNING ONCE: function "rtl88_hal_pwrseqcmdparsing" has inline asm
KLEE: WARNING ONCE: function "rtl88e_firmware_selfreset" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_hw_init" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_llt_write" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_sw_led_on" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_sw_led_off" has inline asm
KLEE: WARNING ONCE: function "rtl88e_download_fw" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_mac_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_bb_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_rf6052_config" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rfpath_switch" has inline asm
KLEE: WARNING ONCE: function "rtl88e_dm_init" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_config_rf_with_headerfile" has inline asm
KLEE: WARNING ONCE: function "config_bb_with_header" has inline asm
KLEE: WARNING ONCE: function "rtl88e_init_sw_vars" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_led_control" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_rx_query_desc" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_gpio_radio_on_off_checking" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_read_eeprom_info" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bb_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_beacon_interval" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bw_mode" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_bw_mode_callback" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_rf6052_set_bandwidth" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_hw_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_io_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_fw_pwrmode_cmd" has inline asm
KLEE: WARNING ONCE: function "_rtl88ee_set_fw_clock_on" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_fw_rsvdpagepkt" has inline asm
KLEE: WARNING ONCE: function "rtl88e_fill_h2c_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88e_set_p2p_ps_offload_cmd" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_set_key" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rf_power_state" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_set_rf_reg" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_sw_chnl" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_sw_chnl_callback" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_update_interrupt_mask" has inline asm
KLEE: WARNING ONCE: function "rtl88ee_update_hal_rate_tbl" has inline asm
KLEE: WARNING ONCE: function "rtl88e_phy_get_hw_reg_originalvalue" has inline asm
KLEE: WARNING: undefined reference to function: rtl_fw_cb
KLEE: WARNING: undefined reference to function: rtl_pci_disconnect
KLEE: WARNING: undefined reference to function: rtl_phy_scan_operation_backup
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_d9790240-9f90-48cf-98ee-5962696fefae/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 15269 states (over memory cap)
KLEE: WARNING: killing 15417 states (over memory cap)
KLEE: WARNING: killing 15770 states (over memory cap)
KLEE: WARNING: killing 15721 states (over memory cap)
KLEE: WARNING: killing 15361 states (over memory cap)
KLEE: WARNING: killing 15410 states (over memory cap)
KLEE: WARNING: killing 15863 states (over memory cap)
KLEE: WARNING: killing 15504 states (over memory cap)
KLEE: WARNING: killing 15549 states (over memory cap)
KLEE: WARNING: killing 16394 states (over memory cap)
KLEE: WARNING: killing 16751 states (over memory cap)
KLEE: WARNING: killing 16496 states (over memory cap)
KLEE: WARNING: killing 16748 states (over memory cap)
KLEE: WARNING: killing 16700 states (over memory cap)
KLEE: WARNING: killing 16648 states (over memory cap)
KLEE: WARNING: killing 17195 states (over memory cap)
KLEE: WARNING: killing 16464 states (over memory cap)
KLEE: WARNING: killing 16724 states (over memory cap)
KLEE: WARNING: killing 16776 states (over memory cap)
KLEE: WARNING: killing 16927 states (over memory cap)
KLEE: WARNING: killing 15722 states (over memory cap)
KLEE: WARNING: killing 15971 states (over memory cap)
KLEE: WARNING: killing 15939 states (over memory cap)
KLEE: WARNING: killing 16001 states (over memory cap)
KLEE: WARNING: killing 16346 states (over memory cap)
KLEE: WARNING: killing 15632 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-UoWthV/linux-3.14__complex_emg__linux-kernel-locking-mutex__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c:29468: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 16370 states (over memory cap)
KLEE: WARNING: killing 16136 states (over memory cap)
KLEE: WARNING: killing 16005 states (over memory cap)
KLEE: WARNING: killing 15873 states (over memory cap)
KLEE: WARNING: killing 16222 states (over memory cap)
KLEE: WARNING: killing 16471 states (over memory cap)
KLEE: WARNING: killing 15968 states (over memory cap)
KLEE: WARNING: killing 15643 states (over memory cap)
KLEE: WARNING: killing 16267 states (over memory cap)
KLEE: WARNING: killing 16232 states (over memory cap)
KLEE: WARNING: killing 16289 states (over memory cap)
KLEE: WARNING: killing 15595 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-UoWthV/linux-3.14__complex_emg__linux-kernel-locking-mutex__drivers-net-wireless-rtlwifi-rtl8188ee-rtl8188ee_true-unreach-call.cil.c:29838: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 16036 states (over memory cap)
KLEE: WARNING: killing 16751 states (over memory cap)
KLEE: WARNING: killing 15973 states (over memory cap)
KLEE: WARNING: killing 15842 states (over memory cap)
KLEE: WARNING: killing 16097 states (over memory cap)
KLEE: WARNING: killing 15877 states (over memory cap)
KLEE: WARNING: killing 16130 states (over memory cap)
KLEE: WARNING: killing 16280 states (over memory cap)
KLEE: WARNING: killing 15972 states (over memory cap)
KLEE: WARNING: killing 15860 states (over memory cap)
KLEE: WARNING: killing 16288 states (over memory cap)
KLEE: WARNING: killing 16161 states (over memory cap)
KLEE: WARNING: killing 16499 states (over memory cap)
KLEE: WARNING: killing 16290 states (over memory cap)
KLEE: WARNING: killing 15978 states (over memory cap)
KLEE: WARNING: killing 15308 states (over memory cap)
KLEE: WARNING: killing 16193 states (over memory cap)
KLEE: WARNING: killing 15798 states (over memory cap)
KLEE: WARNING: killing 15679 states (over memory cap)
KLEE: WARNING: killing 16098 states (over memory cap)
KLEE: WARNING: killing 16253 states (over memory cap)
KLEE: WARNING: killing 16318 states (over memory cap)
KLEE: WARNING: killing 16199 states (over memory cap)
KLEE: WARNING: killing 8953 states (over memory cap)
KLEE: WARNING: killing 15444 states (over memory cap)
KLEE: WARNING: killing 15582 states (over memory cap)
KLEE: WARNING: killing 15834 states (over memory cap)
KLEE: WARNING: killing 15712 states (over memory cap)
KLEE: WARNING: killing 15679 states (over memory cap)
KLEE: WARNING: killing 15829 states (over memory cap)
KLEE: WARNING: killing 16250 states (over memory cap)
KLEE: WARNING: killing 8829 states (over memory cap)
KLEE: WARNING: killing 15317 states (over memory cap)
KLEE: WARNING: killing 16268 states (over memory cap)
KLEE: WARNING: killing 9054 states (over memory cap)
KLEE: WARNING: killing 15436 states (over memory cap)
KLEE: WARNING: killing 15757 states (over memory cap)
KLEE: WARNING: killing 15816 states (over memory cap)
KLEE: WARNING: killing 16326 states (over memory cap)
KLEE: WARNING: killing 8894 states (over memory cap)
KLEE: WARNING: killing 15406 states (over memory cap)
KLEE: WARNING: killing 8867 states (over memory cap)
KLEE: WARNING: killing 14924 states (over memory cap)
KLEE: WARNING: killing 8928 states (over memory cap)
KLEE: WARNING: killing 15240 states (over memory cap)
KLEE: WARNING: killing 15646 states (over memory cap)
KLEE: WARNING: killing 8721 states (over memory cap)
KLEE: WARNING: killing 15091 states (over memory cap)
KLEE: WARNING: killing 8785 states (over memory cap)
KLEE: WARNING: killing 15307 states (over memory cap)
KLEE: WARNING: killing 8765 states (over memory cap)
KLEE: WARNING: killing 15266 states (over memory cap)
KLEE: WARNING: killing 8654 states (over memory cap)
KLEE: WARNING: killing 15669 states (over memory cap)
KLEE: WARNING: killing 8635 states (over memory cap)
KLEE: WARNING: killing 14927 states (over memory cap)
KLEE: WARNING: killing 8863 states (over memory cap)
KLEE: WARNING: killing 15068 states (over memory cap)
KLEE: WARNING: killing 8921 states (over memory cap)
KLEE: WARNING: killing 15103 states (over memory cap)
KLEE: WARNING: killing 8645 states (over memory cap)
KLEE: WARNING: killing 15328 states (over memory cap)
KLEE: WARNING: killing 8797 states (over memory cap)
KLEE: WARNING: killing 15460 states (over memory cap)
KLEE: WARNING: killing 8857 states (over memory cap)
KLEE: WARNING: killing 15167 states (over memory cap)
KLEE: WARNING: killing 8496 states (over memory cap)
KLEE: WARNING: killing 14874 states (over memory cap)
KLEE: WARNING: killing 8643 states (over memory cap)
KLEE: WARNING: killing 15422 states (over memory cap)
KLEE: WARNING: killing 8619 states (over memory cap)
KLEE: WARNING: killing 15388 states (over memory cap)
KLEE: WARNING: killing 8936 states (over memory cap)
KLEE: WARNING: killing 15181 states (over memory cap)
