bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.12-rc1/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--s2255--s2255drv.ko-entry_point_false-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 237 156 1590 9980
Removed infinite loop in ldv_stop___0
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.413685083389
Removed calls to 'videobuf_vmalloc_free' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Defining function printk as symbolic
Defining function videobuf_iolock as symbolic
Removed calls to 'prepare_to_wait' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Defining function dev_err as symbolic
Defining function msecs_to_jiffies as symbolic
Defining function autoremove_wake_function as symbolic
Defining function schedule_timeout as symbolic
Defining function _dev_info as symbolic
Defining function usb_bulk_msg as symbolic
Removed calls to 'v4l2_ctrl_handler_free' (function is undefined)
Removed calls to 'usb_kill_urb' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to 'mutex_destroy' (function is undefined)
Removed calls to 'v4l2_device_unregister' (function is undefined)
Removed calls to 'vfree' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Defining function usb_control_msg as symbolic
Defining function del_timer as symbolic
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Defining function video_ioctl2 as symbolic
Removed calls to 'v4l2_fh_init' (function is undefined)
Removed calls to 'v4l2_fh_add' (function is undefined)
Removed calls to 'videobuf_queue_vmalloc_init' (function is undefined)
Removed calls to 'v4l2_fh_del' (function is undefined)
Removed calls to 'v4l2_fh_exit' (function is undefined)
Defining function video_devdata as symbolic
Defining function videobuf_streamoff as symbolic
Defining function videobuf_mmap_free as symbolic
Defining function mutex_lock_interruptible_nested as symbolic
Removed calls to '__wake_up' (function is undefined)
Defining function mod_timer as symbolic
Defining function dev_get_drvdata as symbolic
Defining function videobuf_mmap_mapper as symbolic
Defining function v4l2_ctrl_poll as symbolic
Defining function videobuf_poll_stream as symbolic
Defining function v4l2_ctrl_log_status as symbolic
Defining function v4l2_ctrl_subscribe_event as symbolic
Defining function v4l2_event_unsubscribe as symbolic
Defining function v4l2_ctrl_s_ctrl as symbolic
Defining function strlcpy as symbolic
Defining function videobuf_streamon as symbolic
Defining function videobuf_dqbuf as symbolic
Defining function videobuf_qbuf as symbolic
Defining function videobuf_querybuf as symbolic
Defining function videobuf_reqbufs as symbolic
Defining function videobuf_queue_is_busy as symbolic
Defining function snprintf as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'v4l2_device_disconnect' (function is undefined)
Removed calls to 'video_unregister_device' (function is undefined)
Defining function request_firmware as symbolic
Defining function usb_reset_device as symbolic
Defining function v4l2_device_register as symbolic
Defining function v4l2_ctrl_handler_init_class as symbolic
Defining function v4l2_ctrl_new_std as symbolic
Defining function v4l2_ctrl_new_custom as symbolic
Defining function __video_register_device as symbolic
Defining function dev_set_drvdata as symbolic
Removed calls to 'list_del' (function is undefined)
Removed calls to 'v4l2_get_timestamp' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Defining function videobuf_to_vmalloc as symbolic
Defining function vmalloc as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'usb_deregister' (function is undefined)
Defining function ldv_probe_4 as symbolic
Defining function usb_register_driver as symbolic
Linked our definitions to these undefined functions:
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.450431108475
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 205 155 818 5303
INFO: Starting verification
KLEE: WARNING ONCE: function "s2255_set_mode" has inline asm
KLEE: WARNING ONCE: function "s2255_video_device_release" has inline asm
KLEE: WARNING ONCE: function "s2255_open" has inline asm
KLEE: WARNING ONCE: function "vidioc_enum_input" has inline asm
KLEE: WARNING ONCE: function "s2255_probe" has inline asm
KLEE: WARNING ONCE: function "s2255_disconnect" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 5890 states (over memory cap)
KLEE: WARNING: killing 5601 states (over memory cap)
KLEE: WARNING: killing 5228 states (over memory cap)
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_629804d9-719a-46d8-9004-e9fb022ccc28/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-o2MrhZ/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--s2255--s2255drv.ko-entry_point_false-unreach-call.cil.out.c:8946: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 5547 states (over memory cap)
KLEE: WARNING: killing 6120 states (over memory cap)
KLEE: WARNING: killing 6488 states (over memory cap)
KLEE: WARNING: killing 6656 states (over memory cap)
KLEE: WARNING: killing 5540 states (over memory cap)
KLEE: WARNING: killing 6432 states (over memory cap)
KLEE: WARNING: killing 6395 states (over memory cap)
KLEE: WARNING: killing 7088 states (over memory cap)
KLEE: WARNING: killing 6790 states (over memory cap)
KLEE: WARNING: killing 7015 states (over memory cap)
KLEE: WARNING: killing 7448 states (over memory cap)
KLEE: WARNING: killing 7459 states (over memory cap)
KLEE: WARNING: killing 8052 states (over memory cap)
KLEE: WARNING: killing 8388 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-o2MrhZ/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "s2255_set_mode" has inline asm
KLEE: WARNING ONCE: function "s2255_video_device_release" has inline asm
KLEE: WARNING ONCE: function "s2255_open" has inline asm
KLEE: WARNING ONCE: function "vidioc_enum_input" has inline asm
KLEE: WARNING ONCE: function "s2255_probe" has inline asm
KLEE: WARNING ONCE: function "s2255_disconnect" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 5890 states (over memory cap)
KLEE: WARNING: killing 5601 states (over memory cap)
KLEE: WARNING: killing 5228 states (over memory cap)
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_629804d9-719a-46d8-9004-e9fb022ccc28/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-o2MrhZ/linux-3.12-rc1.tar.xz-144_2a-drivers--media--usb--s2255--s2255drv.ko-entry_point_false-unreach-call.cil.out.c:8946: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 5547 states (over memory cap)
KLEE: WARNING: killing 6120 states (over memory cap)
KLEE: WARNING: killing 6488 states (over memory cap)
KLEE: WARNING: killing 6656 states (over memory cap)
KLEE: WARNING: killing 5540 states (over memory cap)
KLEE: WARNING: killing 6432 states (over memory cap)
KLEE: WARNING: killing 6395 states (over memory cap)
KLEE: WARNING: killing 7088 states (over memory cap)
KLEE: WARNING: killing 6790 states (over memory cap)
KLEE: WARNING: killing 7015 states (over memory cap)
KLEE: WARNING: killing 7448 states (over memory cap)
KLEE: WARNING: killing 7459 states (over memory cap)
KLEE: WARNING: killing 8052 states (over memory cap)
KLEE: WARNING: killing 8388 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007ff0fce42390
4  libc.so.6       0x00007ff0fc1fb428 gsignal + 56
5  libc.so.6       0x00007ff0fc1fd02a abort + 362
6  libc.so.6       0x00007ff0fc1f3bd7
7  libc.so.6       0x00007ff0fc1f3c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007ff0fc1e6830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 288.358921051
