bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 364 331 3999 26651
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.924556970596
Removed calls to 'unregister_netdev' (function is undefined)
Removed calls to 'free_netdev' (function is undefined)
Removed calls to 'consume_skb' (function is undefined)
Removed calls to '__release_region' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'up' (function is undefined)
Defining function skb_dequeue as symbolic
Defining function remove_proc_subtree as symbolic
Defining function down_interruptible as symbolic
Removed calls to 'schedule' (function is undefined)
Defining function printk as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Removed calls to 'proc_set_user' (function is undefined)
Defining function alloc_netdev_mqs as symbolic
Defining function __request_region as symbolic
Defining function proc_mkdir_mode as symbolic
Defining function proc_create_data as symbolic
Defining function register_netdev as symbolic
Defining function crypto_alloc_base as symbolic
Defining function dma_alloc_attrs as symbolic
Defining function ioremap_nocache as symbolic
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'netif_tx_wake_queue' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function eth_validate_addr as symbolic
Defining function down_trylock as symbolic
Removed calls to '__might_fault' (function is undefined)
Removed calls to '__copy_from_user_overflow' (function is undefined)
Removed calls to '__copy_to_user_overflow' (function is undefined)
Defining function capable as symbolic
Defining function _copy_to_user as symbolic
Defining function _copy_from_user as symbolic
Removed calls to '__dev_kfree_skb_any' (function is undefined)
Defining function kthread_stop as symbolic
Removed calls to 'debug_check_no_locks_held' (function is undefined)
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'add_wait_queue' (function is undefined)
Removed calls to 'remove_wait_queue' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'wireless_send_event' (function is undefined)
Defining function kthread_create_on_node as symbolic
Defining function wake_up_process as symbolic
Removed calls to 'wireless_spy_update' (function is undefined)
Removed calls to 'skb_trim' (function is undefined)
Removed calls to '__dev_kfree_skb_irq' (function is undefined)
Defining function request_threaded_irq as symbolic
Defining function skb_put as symbolic
Defining function eth_type_trans as symbolic
Defining function netif_rx as symbolic
Defining function set_freezable as symbolic
Defining function kthread_should_stop as symbolic
Defining function schedule_timeout as symbolic
Defining function freezing_slow_path as symbolic
Defining function default_wake_function as symbolic
Defining function __refrigerator as symbolic
Defining function iw_handler_set_spy as symbolic
Defining function iw_handler_get_spy as symbolic
Defining function iw_handler_set_thrspy as symbolic
Defining function iw_handler_get_thrspy as symbolic
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function ieee80211_channel_to_frequency as symbolic
Defining function sprintf as symbolic
Defining function schedule_timeout_uninterruptible as symbolic
Defining function ieee80211_frequency_to_channel as symbolic
Defining function default_llseek as symbolic
Defining function PDE_DATA as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function simple_write_to_buffer as symbolic
Defining function hex_to_bin as symbolic
Removed calls to 'pci_set_master' (function is undefined)
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'netif_device_detach' (function is undefined)
Removed calls to 'pci_restore_state' (function is undefined)
Removed calls to 'netif_device_attach' (function is undefined)
Defining function pci_set_power_state as symbolic
Defining function __pci_enable_wake as symbolic
Defining function pci_choose_state as symbolic
Defining function pci_save_state as symbolic
Defining function pci_enable_device as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'pci_unregister_driver' (function is undefined)
Removed calls to 'remove_proc_entry' (function is undefined)
Removed calls to 'ldv_check_final_state' (function is undefined)
Defining function ldv_ndo_init_11 as symbolic
Defining function ldv_ndo_uninit_11 as symbolic
Defining function ldv_ndo_init_13 as symbolic
Defining function ldv_ndo_uninit_13 as symbolic
Defining function ldv_ndo_init_12 as symbolic
Defining function ldv_ndo_uninit_12 as symbolic
Defining function ldv_suspend_late_15 as symbolic
Defining function ldv_resume_early_15 as symbolic
Defining function ldv_shutdown_15 as symbolic
Defining function make_kuid as symbolic
Defining function make_kgid as symbolic
Defining function __pci_register_driver as symbolic
Defining function ldv_some_page as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strcpy
  strlen
  strncmp
  strncpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 2.02867698669
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 500 251 2228 38520
INFO: Starting verification
KLEE: WARNING ONCE: function "stop_airo_card" has inline asm
KLEE: WARNING ONCE: function "disable_MAC" has inline asm
KLEE: WARNING ONCE: function "issuecommand" has inline asm
KLEE: WARNING ONCE: function "_init_airo_card" has inline asm
KLEE: WARNING ONCE: function "reset_card" has inline asm
KLEE: WARNING ONCE: function "mpi_init_descriptors" has inline asm
KLEE: WARNING ONCE: function "setup_card" has inline asm
KLEE: WARNING ONCE: function "transmit_allocate" has inline asm
KLEE: WARNING ONCE: function "bap_setup" has inline asm
KLEE: WARNING ONCE: function "fast_bap_read" has inline asm
KLEE: WARNING ONCE: function "writeConfigRid" has inline asm
KLEE: WARNING ONCE: function "enable_MAC" has inline asm
KLEE: WARNING ONCE: function "PC4500_writerid" has inline asm
KLEE: WARNING ONCE: function "waitbusy" has inline asm
KLEE: WARNING ONCE: function "reset_airo_card" has inline asm
KLEE: WARNING ONCE: function "airo_open" has inline asm
KLEE: WARNING ONCE: function "airo_close" has inline asm
KLEE: WARNING ONCE: function "mpi_start_xmit" has inline asm
KLEE: WARNING ONCE: function "airo_set_multicast_list" has inline asm
KLEE: WARNING ONCE: function "airo_set_mac_address" has inline asm
KLEE: WARNING ONCE: function "airo_ioctl" has inline asm
KLEE: WARNING ONCE: function "airo_get_stats" has inline asm
KLEE: WARNING ONCE: function "airo_read_stats" has inline asm
KLEE: WARNING ONCE: function "airo_set_promisc" has inline asm
KLEE: WARNING ONCE: function "mpi_send_packet" has inline asm
KLEE: WARNING ONCE: function "airo_thread" has inline asm
KLEE: WARNING ONCE: function "airo_interrupt" has inline asm
KLEE: WARNING ONCE: function "airo_send_event" has inline asm
KLEE: WARNING ONCE: function "decapsulate" has inline asm
KLEE: WARNING ONCE: function "airo_end_xmit" has inline asm
KLEE: WARNING ONCE: function "airo_end_xmit11" has inline asm
KLEE: WARNING ONCE: function "airo_read_wireless_stats" has inline asm
KLEE: WARNING ONCE: function "airo_start_xmit" has inline asm
KLEE: WARNING ONCE: function "airo_get_wireless_stats" has inline asm
KLEE: WARNING ONCE: function "airo_set_freq" has inline asm
KLEE: WARNING ONCE: function "airo_set_mode" has inline asm
KLEE: WARNING ONCE: function "airo_set_sens" has inline asm
KLEE: WARNING ONCE: function "airo_set_nick" has inline asm
KLEE: WARNING ONCE: function "airo_set_rate" has inline asm
KLEE: WARNING ONCE: function "airo_set_rts" has inline asm
KLEE: WARNING ONCE: function "airo_set_frag" has inline asm
KLEE: WARNING ONCE: function "airo_set_txpow" has inline asm
KLEE: WARNING ONCE: function "airo_set_retry" has inline asm
KLEE: WARNING ONCE: function "airo_set_encode" has inline asm
KLEE: WARNING ONCE: function "airo_set_power" has inline asm
KLEE: WARNING ONCE: function "airo_set_auth" has inline asm
KLEE: WARNING ONCE: function "airo_set_encodeext" has inline asm
KLEE: WARNING ONCE: function "readBSSListRid" has inline asm
KLEE: WARNING ONCE: function "airo_start_xmit11" has inline asm
KLEE: WARNING ONCE: function "proc_config_on_close" has inline asm
KLEE: WARNING ONCE: function "airo_pci_resume" has inline asm
KLEE: WARNING: undefined reference to function: ether_setup
KLEE: WARNING: undefined reference to variable: init_user_ns
KLEE: WARNING: Type for init_user_ns is not sized
KLEE: WARNING: Unable to find size for global variable: init_user_ns (use will result in out of bounds access)
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_5ee065b5-a989-4833-b4a4-551a4e9d34be/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 16138 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 16608 states (over memory cap)
KLEE: WARNING: killing 16272 states (over memory cap)
KLEE: WARNING: killing 16747 states (over memory cap)
KLEE: WARNING: killing 16505 states (over memory cap)
KLEE: WARNING: killing 18382 states (over memory cap)
KLEE: WARNING: killing 18655 states (over memory cap)
KLEE: WARNING: killing 19354 states (over memory cap)
KLEE: WARNING: killing 18992 states (over memory cap)
KLEE: WARNING: killing 18712 states (over memory cap)
KLEE: WARNING: killing 19375 states (over memory cap)
KLEE: WARNING: killing 19397 states (over memory cap)
KLEE: WARNING: killing 19333 states (over memory cap)
KLEE: WARNING: killing 20327 states (over memory cap)
KLEE: WARNING: killing 18655 states (over memory cap)
KLEE: WARNING: killing 19644 states (over memory cap)
KLEE: WARNING: killing 18982 states (over memory cap)
KLEE: WARNING: killing 18584 states (over memory cap)
KLEE: WARNING: killing 19362 states (over memory cap)
KLEE: WARNING: killing 19251 states (over memory cap)
KLEE: WARNING: killing 20657 states (over memory cap)
KLEE: WARNING: killing 19676 states (over memory cap)
KLEE: WARNING: killing 18190 states (over memory cap)
KLEE: WARNING: killing 20125 states (over memory cap)
KLEE: WARNING: killing 19314 states (over memory cap)
KLEE: WARNING: killing 18665 states (over memory cap)
KLEE: WARNING: killing 20232 states (over memory cap)
KLEE: WARNING: killing 19299 states (over memory cap)
KLEE: WARNING: killing 19692 states (over memory cap)
KLEE: WARNING: killing 19802 states (over memory cap)
KLEE: WARNING: killing 18660 states (over memory cap)
KLEE: WARNING: killing 19093 states (over memory cap)
KLEE: WARNING: killing 19572 states (over memory cap)
KLEE: WARNING: killing 19054 states (over memory cap)
KLEE: WARNING: killing 19936 states (over memory cap)
KLEE: WARNING: killing 19879 states (over memory cap)
KLEE: WARNING: killing 18129 states (over memory cap)
KLEE: WARNING: killing 19253 states (over memory cap)
KLEE: WARNING: killing 18656 states (over memory cap)
KLEE: WARNING: killing 19625 states (over memory cap)
KLEE: WARNING: killing 19280 states (over memory cap)
KLEE: WARNING: killing 18692 states (over memory cap)
KLEE: WARNING: killing 19899 states (over memory cap)
KLEE: WARNING: killing 20007 states (over memory cap)
KLEE: WARNING: killing 19008 states (over memory cap)
KLEE: WARNING: killing 19646 states (over memory cap)
KLEE: WARNING: killing 18930 states (over memory cap)
KLEE: WARNING: killing 19281 states (over memory cap)
KLEE: WARNING: killing 19268 states (over memory cap)
KLEE: WARNING: killing 18550 states (over memory cap)
KLEE: WARNING: killing 20079 states (over memory cap)
KLEE: WARNING: killing 19614 states (over memory cap)
KLEE: WARNING: killing 19192 states (over memory cap)
KLEE: WARNING: killing 19416 states (over memory cap)
KLEE: WARNING: killing 18870 states (over memory cap)
KLEE: WARNING: killing 19580 states (over memory cap)
KLEE: WARNING: killing 19930 states (over memory cap)
KLEE: WARNING: killing 19022 states (over memory cap)
KLEE: WARNING: killing 18963 states (over memory cap)
KLEE: WARNING: killing 20244 states (over memory cap)
KLEE: WARNING: killing 19820 states (over memory cap)
KLEE: WARNING: killing 19406 states (over memory cap)
KLEE: WARNING: killing 20035 states (over memory cap)
KLEE: WARNING: killing 19290 states (over memory cap)
KLEE: WARNING: killing 19113 states (over memory cap)
KLEE: WARNING: killing 20105 states (over memory cap)
KLEE: WARNING: killing 19286 states (over memory cap)
KLEE: WARNING: killing 19717 states (over memory cap)
KLEE: WARNING: killing 18976 states (over memory cap)
KLEE: WARNING: killing 19353 states (over memory cap)
KLEE: WARNING: killing 18854 states (over memory cap)
KLEE: WARNING: killing 20164 states (over memory cap)
KLEE: WARNING: killing 19752 states (over memory cap)
KLEE: WARNING: killing 19775 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-Km13kM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:12841: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 18843 states (over memory cap)
KLEE: WARNING: killing 19298 states (over memory cap)
KLEE: WARNING: killing 18869 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-Km13kM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:6907: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 19770 states (over memory cap)
KLEE: WARNING: killing 19873 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-Km13kM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:13475: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 20247 states (over memory cap)
KLEE: WARNING: killing 19721 states (over memory cap)
KLEE: WARNING: killing 19468 states (over memory cap)
KLEE: WARNING: killing 19286 states (over memory cap)
KLEE: WARNING: killing 20264 states (over memory cap)
KLEE: WARNING: killing 19304 states (over memory cap)
KLEE: WARNING: killing 18530 states (over memory cap)
KLEE: WARNING: killing 19985 states (over memory cap)
KLEE: WARNING: killing 19490 states (over memory cap)
KLEE: WARNING: killing 19944 states (over memory cap)
KLEE: WARNING: killing 19184 states (over memory cap)
KLEE: WARNING: killing 19475 states (over memory cap)
KLEE: WARNING: killing 19189 states (over memory cap)
KLEE: WARNING: killing 19882 states (over memory cap)
KLEE: WARNING: killing 19831 states (over memory cap)
KLEE: WARNING: killing 20254 states (over memory cap)
KLEE: WARNING: killing 19800 states (over memory cap)
KLEE: WARNING: killing 18808 states (over memory cap)
KLEE: WARNING: killing 20082 states (over memory cap)
KLEE: WARNING: killing 20543 states (over memory cap)
KLEE: WARNING: killing 19154 states (over memory cap)
KLEE: WARNING: killing 19062 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-Km13kM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:14130: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 18929 states (over memory cap)
KLEE: WARNING: killing 19100 states (over memory cap)
KLEE: WARNING: killing 20964 states (over memory cap)
KLEE: WARNING: killing 19778 states (over memory cap)
KLEE: WARNING: killing 19767 states (over memory cap)
KLEE: WARNING: killing 19677 states (over memory cap)
KLEE: WARNING: killing 19692 states (over memory cap)
KLEE: WARNING: killing 19021 states (over memory cap)
KLEE: WARNING: killing 20519 states (over memory cap)
KLEE: WARNING: killing 19416 states (over memory cap)
KLEE: WARNING: killing 19633 states (over memory cap)
KLEE: WARNING: killing 20087 states (over memory cap)
KLEE: WARNING: killing 19486 states (over memory cap)
KLEE: WARNING: killing 19587 states (over memory cap)
KLEE: WARNING: killing 19301 states (over memory cap)
KLEE: WARNING: killing 20252 states (over memory cap)
KLEE: WARNING: killing 19224 states (over memory cap)
KLEE: WARNING: killing 19861 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-Km13kM/linux-4.2-rc1.tar.xz-43_2a-drivers--net--wireless--airo.ko-entry_point_true-unreach-call.cil.out.c:12973: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
