bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-43_2a-drivers--usb--host--ehci-hcd.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 313 271 3703 28762
Removed infinite loop in qh_destroy
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in ehci_init
Removed infinite loop in intr_submit
Removed infinite loop in sitd_link_urb
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.852797031403
Removed calls to '__const_udelay' (function is undefined)
Defining function dbgp_reset_prep as symbolic
Defining function dbgp_external_startup as symbolic
Defining function scnprintf as symbolic
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to 'msleep' (function is undefined)
Removed calls to 'usb_hcd_resume_root_hub' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'usb_hcd_start_port_resume' (function is undefined)
Removed calls to 'usb_hcd_end_port_resume' (function is undefined)
Removed calls to 'dev_err' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'usb_free_urb' (function is undefined)
Removed calls to 'usb_kill_urb' (function is undefined)
Defining function mod_timer as symbolic
Removed calls to 'synchronize_irq' (function is undefined)
Defining function usb_hub_find_child as symbolic
Removed calls to '__list_add' (function is undefined)
Defining function wait_for_completion_timeout as symbolic
Defining function usb_get_urb as symbolic
Removed calls to 'usb_hcd_unlink_urb_from_ep' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'dma_pool_free' (function is undefined)
Defining function usb_hcd_link_urb_to_ep as symbolic
Removed calls to 'hrtimer_start_range_ns' (function is undefined)
Defining function ktime_get as symbolic
Defining function usb_calc_bus_time as symbolic
Removed calls to 'complete' (function is undefined)
Removed calls to 'debug_dma_map_page' (function is undefined)
Defining function __phys_addr as symbolic
Defining function __msecs_to_jiffies as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'hrtimer_init' (function is undefined)
Defining function dma_pool_create as symbolic
Defining function dma_alloc_attrs as symbolic
Removed calls to 'dma_pool_destroy' (function is undefined)
Removed calls to 'dma_free_attrs' (function is undefined)
Defining function find_first_bit as symbolic
Defining function find_next_bit as symbolic
Defining function sprintf as symbolic
Defining function strcat as symbolic
Removed calls to 'usb_root_hub_lost_power' (function is undefined)
Removed calls to 'dev_warn' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'usb_amd_quirk_pll_enable' (function is undefined)
Removed calls to 'usb_hcd_giveback_urb' (function is undefined)
Defining function usb_hub_clear_tt_buffer as symbolic
Removed calls to 'usb_hc_died' (function is undefined)
Removed calls to 'usb_hcd_poll_rh_status' (function is undefined)
Removed calls to 'down_write' (function is undefined)
Removed calls to 'up_write' (function is undefined)
Removed calls to '_dev_info' (function is undefined)
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'device_remove_file' (function is undefined)
Removed calls to 'usb_amd_dev_put' (function is undefined)
Removed calls to 'usb_amd_quirk_pll_disable' (function is undefined)
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Removed calls to 'usleep_range' (function is undefined)
Defining function usb_for_each_dev as symbolic
Defining function hrtimer_cancel as symbolic
Defining function schedule_timeout_uninterruptible as symbolic
Defining function usb_hcd_check_unlink_urb as symbolic
Defining function sg_next as symbolic
Defining function device_create_file as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function ktime_get_with_offset as symbolic
Defining function default_llseek as symbolic
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'vfree' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Defining function snprintf as symbolic
Defining function simple_read_from_buffer as symbolic
Defining function pci_bus_read_config_dword as symbolic
Defining function sscanf as symbolic
Defining function kstrtouint as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'debugfs_remove' (function is undefined)
Removed calls to 'ldv_check_final_state' (function is undefined)
Defining function usb_disabled as symbolic
Defining function printk as symbolic
Defining function ldv_some_page as symbolic
Linked our definitions to these undefined functions:
  strlen
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.987142086029
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 368 181 2059 15602
INFO: Starting verification
KLEE: WARNING ONCE: function "ehci_handshake" has inline asm
KLEE: WARNING ONCE: function "ehci_reset" has inline asm
KLEE: WARNING ONCE: function "ehci_adjust_port_wakeup_flags" has inline asm
KLEE: WARNING ONCE: function "ehci_hub_control" has inline asm
KLEE: WARNING ONCE: function "ehci_port_power" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "ehci_quiesce" has inline asm
KLEE: WARNING ONCE: function "ehci_halt" has inline asm
KLEE: WARNING ONCE: function "qh_append_tds" has inline asm
KLEE: WARNING ONCE: function "qh_link_async" has inline asm
KLEE: WARNING ONCE: function "ehci_poll_ASS" has inline asm
KLEE: WARNING ONCE: function "qh_destroy" has inline asm
KLEE: WARNING ONCE: function "ehci_setup" has inline asm
KLEE: WARNING ONCE: function "ehci_suspend" has inline asm
KLEE: WARNING ONCE: function "ehci_resume" has inline asm
KLEE: WARNING ONCE: function "ehci_poll_PSS" has inline asm
KLEE: WARNING ONCE: function "ehci_handle_controller_death" has inline asm
KLEE: WARNING ONCE: function "ehci_iaa_watchdog" has inline asm
KLEE: WARNING ONCE: function "ehci_disable_PSE" has inline asm
KLEE: WARNING ONCE: function "ehci_disable_ASE" has inline asm
KLEE: WARNING ONCE: function "ehci_work" has inline asm
KLEE: WARNING ONCE: function "qh_completions" has inline asm
KLEE: WARNING ONCE: function "start_unlink_intr" has inline asm
KLEE: WARNING ONCE: function "start_iaa_cycle" has inline asm
KLEE: WARNING ONCE: function "qh_link_periodic" has inline asm
KLEE: WARNING ONCE: function "ehci_irq" has inline asm
KLEE: WARNING ONCE: function "ehci_run" has inline asm
KLEE: WARNING ONCE: function "ehci_stop" has inline asm
KLEE: WARNING ONCE: function "ehci_get_frame" has inline asm
KLEE: WARNING ONCE: function "ehci_urb_enqueue" has inline asm
KLEE: WARNING ONCE: function "ehci_hub_status_data" has inline asm
KLEE: WARNING ONCE: function "ehci_bus_suspend" has inline asm
KLEE: WARNING ONCE: function "ehci_bus_resume" has inline asm
KLEE: WARNING ONCE: function "ehci_port_handed_over" has inline asm
KLEE: WARNING ONCE: function "set_owner" has inline asm
KLEE: WARNING ONCE: function "iso_stream_schedule" has inline asm
KLEE: WARNING ONCE: function "ehci_silence_controller" has inline asm
KLEE: WARNING ONCE: function "fill_registers_buffer" has inline asm
KLEE: WARNING ONCE: function "show_companion" has inline asm
KLEE: WARNING ONCE: function "store_companion" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_65800cd3-60f9-4b56-a44c-789452088541/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-qRGbY1/linux-4.2-rc1.tar.xz-43_2a-drivers--usb--host--ehci-hcd.ko-entry_point_true-unreach-call.cil.out.c:4301: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 9350 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 12945 states (over memory cap)
KLEE: WARNING: killing 12797 states (over memory cap)
KLEE: WARNING: killing 11925 states (over memory cap)
KLEE: WARNING: killing 11953 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-qRGbY1/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "ehci_handshake" has inline asm
KLEE: WARNING ONCE: function "ehci_reset" has inline asm
KLEE: WARNING ONCE: function "ehci_adjust_port_wakeup_flags" has inline asm
KLEE: WARNING ONCE: function "ehci_hub_control" has inline asm
KLEE: WARNING ONCE: function "ehci_port_power" has inline asm
KLEE: WARNING ONCE: function "dma_map_single_attrs" has inline asm
KLEE: WARNING ONCE: function "ehci_quiesce" has inline asm
KLEE: WARNING ONCE: function "ehci_halt" has inline asm
KLEE: WARNING ONCE: function "qh_append_tds" has inline asm
KLEE: WARNING ONCE: function "qh_link_async" has inline asm
KLEE: WARNING ONCE: function "ehci_poll_ASS" has inline asm
KLEE: WARNING ONCE: function "qh_destroy" has inline asm
KLEE: WARNING ONCE: function "ehci_setup" has inline asm
KLEE: WARNING ONCE: function "ehci_suspend" has inline asm
KLEE: WARNING ONCE: function "ehci_resume" has inline asm
KLEE: WARNING ONCE: function "ehci_poll_PSS" has inline asm
KLEE: WARNING ONCE: function "ehci_handle_controller_death" has inline asm
KLEE: WARNING ONCE: function "ehci_iaa_watchdog" has inline asm
KLEE: WARNING ONCE: function "ehci_disable_PSE" has inline asm
KLEE: WARNING ONCE: function "ehci_disable_ASE" has inline asm
KLEE: WARNING ONCE: function "ehci_work" has inline asm
KLEE: WARNING ONCE: function "qh_completions" has inline asm
KLEE: WARNING ONCE: function "start_unlink_intr" has inline asm
KLEE: WARNING ONCE: function "start_iaa_cycle" has inline asm
KLEE: WARNING ONCE: function "qh_link_periodic" has inline asm
KLEE: WARNING ONCE: function "ehci_irq" has inline asm
KLEE: WARNING ONCE: function "ehci_run" has inline asm
KLEE: WARNING ONCE: function "ehci_stop" has inline asm
KLEE: WARNING ONCE: function "ehci_get_frame" has inline asm
KLEE: WARNING ONCE: function "ehci_urb_enqueue" has inline asm
KLEE: WARNING ONCE: function "ehci_hub_status_data" has inline asm
KLEE: WARNING ONCE: function "ehci_bus_suspend" has inline asm
KLEE: WARNING ONCE: function "ehci_bus_resume" has inline asm
KLEE: WARNING ONCE: function "ehci_port_handed_over" has inline asm
KLEE: WARNING ONCE: function "set_owner" has inline asm
KLEE: WARNING ONCE: function "iso_stream_schedule" has inline asm
KLEE: WARNING ONCE: function "ehci_silence_controller" has inline asm
KLEE: WARNING ONCE: function "fill_registers_buffer" has inline asm
KLEE: WARNING ONCE: function "show_companion" has inline asm
KLEE: WARNING ONCE: function "store_companion" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_65800cd3-60f9-4b56-a44c-789452088541/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-qRGbY1/linux-4.2-rc1.tar.xz-43_2a-drivers--usb--host--ehci-hcd.ko-entry_point_true-unreach-call.cil.out.c:4301: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 9350 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 12945 states (over memory cap)
KLEE: WARNING: killing 12797 states (over memory cap)
KLEE: WARNING: killing 11925 states (over memory cap)
KLEE: WARNING: killing 11953 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f2a0ec2e390
4  libc.so.6       0x00007f2a0dfe7428 gsignal + 56
5  libc.so.6       0x00007f2a0dfe902a abort + 362
6  libc.so.6       0x00007f2a0dfdfbd7
7  libc.so.6       0x00007f2a0dfdfc82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007f2a0dfd2830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 26.2689740658
