bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--mtd--ubi--ubi.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 901 420 7281 51138
Removed infinite loop in self_vtbl_check
Removed infinite loop in add_to_list
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.51472711563
Removed calls to 'might_fault' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'dump_stack' (function is undefined)
Removed calls to 'vfree' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'put_device' (function is undefined)
Defining function printk as symbolic
Defining function get_device as symbolic
Defining function no_llseek as symbolic
Defining function capable as symbolic
Removed calls to '__copy_from_user_overflow' (function is undefined)
Removed calls to 'cdev_del' (function is undefined)
Removed calls to 'module_put' (function is undefined)
Defining function strnlen as symbolic
Defining function blocking_notifier_call_chain as symbolic
Removed calls to 'rb_erase' (function is undefined)
Defining function crc32_le as symbolic
Removed calls to 'print_hex_dump' (function is undefined)
Defining function mtd_write as symbolic
Defining function __vmalloc as symbolic
Defining function mtd_read as symbolic
Defining function vmalloc as symbolic
Defining function prandom_u32 as symbolic
Removed calls to 'yield' (function is undefined)
Defining function mtd_block_isbad as symbolic
Defining function rb_first as symbolic
Defining function rb_next as symbolic
Removed calls to 'kmem_cache_free' (function is undefined)
Removed calls to 'rb_insert_color' (function is undefined)
Defining function mtd_block_markbad as symbolic
Defining function _cond_resched as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function mtd_erase as symbolic
Defining function prepare_to_wait_event as symbolic
Defining function rb_last as symbolic
Defining function kmem_cache_alloc as symbolic
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'down_read' (function is undefined)
Removed calls to 'up_read' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'device_remove_file' (function is undefined)
Removed calls to 'device_unregister' (function is undefined)
Removed calls to 'down_write' (function is undefined)
Removed calls to 'up_write' (function is undefined)
Removed calls to 'cdev_init' (function is undefined)
Defining function cdev_add as symbolic
Defining function dev_set_name as symbolic
Defining function device_register as symbolic
Defining function device_create_file as symbolic
Defining function _copy_from_user as symbolic
Removed calls to 'put_mtd_device' (function is undefined)
Defining function get_mtd_device as symbolic
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Removed calls to 'unregister_chrdev_region' (function is undefined)
Defining function kthread_stop as symbolic
Removed calls to 'debug_check_no_locks_held' (function is undefined)
Defining function set_freezable as symbolic
Defining function kthread_should_stop as symbolic
Defining function __refrigerator as symbolic
Defining function freezing_slow_path as symbolic
Defining function snprintf as symbolic
Defining function debugfs_create_dir as symbolic
Defining function debugfs_create_file as symbolic
Defining function sprintf as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__init_rwsem' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Defining function vzalloc as symbolic
Defining function kmem_cache_create as symbolic
Removed calls to 'path_put' (function is undefined)
Defining function kern_path as symbolic
Defining function blocking_notifier_chain_register as symbolic
Defining function blocking_notifier_chain_unregister as symbolic
Defining function simple_open as symbolic
Defining function simple_read_from_buffer as symbolic
Removed calls to 'destroy_workqueue' (function is undefined)
Removed calls to 'del_gendisk' (function is undefined)
Removed calls to 'blk_cleanup_queue' (function is undefined)
Removed calls to 'put_disk' (function is undefined)
Defining function fixed_size_llseek as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'debugfs_remove' (function is undefined)
Removed calls to 'kmem_cache_destroy' (function is undefined)
Removed calls to 'class_destroy' (function is undefined)
Removed calls to 'ldv_check_final_state' (function is undefined)
Defining function ldv_open_5 as symbolic
Defining function ldv_release_5 as symbolic
Defining function ldv_release_4 as symbolic
Defining function strsep as symbolic
Defining function kstrtoint as symbolic
Defining function simple_strtoul as symbolic
Defining function ldv_open_6 as symbolic
Defining function ldv_release_6 as symbolic
Defining function __class_create as symbolic
Removed calls to 'unregister_blkdev' (function is undefined)
Defining function misc_deregister as symbolic
Defining function register_blkdev as symbolic
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function get_mtd_device_nm as symbolic
Defining function misc_register as symbolic
Defining function class_create_file_ns as symbolic
Defining function ldv_some_page as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strcmp
  strcpy
  strlen
  strncmp
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_loff_t_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_size_t_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.0954349041
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 787 316 2244 17883
INFO: Starting verification
KLEE: WARNING ONCE: function "vol_cdev_ioctl" has inline asm
KLEE: WARNING ONCE: function "vol_cdev_release" has inline asm
KLEE: WARNING ONCE: function "ubi_get_device" has inline asm
KLEE: WARNING ONCE: function "ubi_cdev_ioctl" has inline asm
KLEE: WARNING ONCE: function "ubi_get_by_major" has inline asm
KLEE: WARNING ONCE: function "ubi_remove_volume" has inline asm
KLEE: WARNING ONCE: function "ubi_change_vtbl_record" has inline asm
KLEE: WARNING ONCE: function "ubi_refill_pools" has inline asm
KLEE: WARNING ONCE: function "do_work" has inline asm
KLEE: WARNING ONCE: function "in_wl_tree" has inline asm
KLEE: WARNING ONCE: function "wl_tree_add" has inline asm
KLEE: WARNING ONCE: function "ctrl_cdev_ioctl" has inline asm
KLEE: WARNING ONCE: function "ubi_detach_mtd_dev" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_close" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_flush" has inline asm
KLEE: WARNING ONCE: function "vol_attribute_show" has inline asm
KLEE: WARNING ONCE: function "get_exclusive" has inline asm
KLEE: WARNING ONCE: function "ubi_start_update" has inline asm
KLEE: WARNING ONCE: function "revoke_exclusive" has inline asm
KLEE: WARNING ONCE: function "ubi_start_leb_change" has inline asm
KLEE: WARNING ONCE: function "clear_update_marker" has inline asm
KLEE: WARNING ONCE: function "ubi_more_update_data" has inline asm
KLEE: WARNING ONCE: function "ubi_calc_data_len" has inline asm
KLEE: WARNING ONCE: function "ubi_eba_write_leb_st" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_put_fm_peb" has inline asm
KLEE: WARNING ONCE: function "schedule_erase" has inline asm
KLEE: WARNING ONCE: function "ubi_io_write_vid_hdr" has inline asm
KLEE: WARNING ONCE: function "ubi_io_write" has inline asm
KLEE: WARNING ONCE: function "ubi_io_is_bad" has inline asm
KLEE: WARNING ONCE: function "ubi_io_read" has inline asm
KLEE: WARNING ONCE: function "erase_worker" has inline asm
KLEE: WARNING ONCE: function "ubi_io_mark_bad" has inline asm
KLEE: WARNING ONCE: function "ubi_io_read_vid_hdr" has inline asm
KLEE: WARNING ONCE: function "ubi_io_sync_erase" has inline asm
KLEE: WARNING ONCE: function "ubi_io_read_ec_hdr" has inline asm
KLEE: WARNING ONCE: function "do_sync_erase" has inline asm
KLEE: WARNING ONCE: function "ubi_io_write_ec_hdr" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_get_peb" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_put_peb" has inline asm
KLEE: WARNING ONCE: function "ubi_thread" has inline asm
KLEE: WARNING ONCE: function "add_to_list" has inline asm
KLEE: WARNING ONCE: function "ubi_more_leb_change_data" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_54c7f1c7-967a-4cc0-a66b-e3a6df6ef768/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 7245 states (over memory cap)
KLEE: WARNING: killing 4588 states (over memory cap)
KLEE: WARNING: killing 5041 states (over memory cap)
KLEE: WARNING: killing 5698 states (over memory cap)
KLEE: WARNING: killing 5625 states (over memory cap)
KLEE: WARNING: killing 5918 states (over memory cap)
KLEE: WARNING: killing 7238 states (over memory cap)
KLEE: WARNING: killing 7253 states (over memory cap)
KLEE: WARNING: killing 6569 states (over memory cap)
KLEE: WARNING: killing 6784 states (over memory cap)
KLEE: WARNING: killing 7122 states (over memory cap)
KLEE: WARNING: killing 7052 states (over memory cap)
KLEE: WARNING: killing 7354 states (over memory cap)
KLEE: WARNING: killing 7573 states (over memory cap)
KLEE: WARNING: killing 8457 states (over memory cap)
KLEE: WARNING: killing 7637 states (over memory cap)
KLEE: WARNING: killing 7773 states (over memory cap)
KLEE: WARNING: killing 8117 states (over memory cap)
KLEE: WARNING: killing 8297 states (over memory cap)
KLEE: WARNING: killing 8016 states (over memory cap)
KLEE: WARNING: killing 8909 states (over memory cap)
KLEE: WARNING: killing 8375 states (over memory cap)
KLEE: WARNING: killing 8931 states (over memory cap)
KLEE: WARNING: killing 9241 states (over memory cap)
KLEE: WARNING: killing 9255 states (over memory cap)
KLEE: WARNING: killing 8588 states (over memory cap)
KLEE: WARNING: killing 8767 states (over memory cap)
KLEE: WARNING: killing 9241 states (over memory cap)
KLEE: WARNING: killing 8112 states (over memory cap)
KLEE: WARNING: killing 9634 states (over memory cap)
KLEE: WARNING: killing 9432 states (over memory cap)
KLEE: WARNING: killing 9272 states (over memory cap)
KLEE: WARNING: killing 9237 states (over memory cap)
KLEE: WARNING: killing 9202 states (over memory cap)
KLEE: WARNING: killing 8482 states (over memory cap)
KLEE: WARNING: killing 10357 states (over memory cap)
KLEE: WARNING: killing 9048 states (over memory cap)
KLEE: WARNING: killing 9263 states (over memory cap)
KLEE: WARNING: killing 9604 states (over memory cap)
KLEE: WARNING: killing 10203 states (over memory cap)
KLEE: WARNING: killing 9057 states (over memory cap)
KLEE: WARNING: killing 9056 states (over memory cap)
KLEE: WARNING: killing 9439 states (over memory cap)
KLEE: WARNING: killing 9352 states (over memory cap)
KLEE: WARNING: killing 7864 states (over memory cap)
KLEE: WARNING: killing 9775 states (over memory cap)
KLEE: WARNING: killing 9392 states (over memory cap)
KLEE: WARNING: killing 9774 states (over memory cap)
KLEE: WARNING: killing 9522 states (over memory cap)
KLEE: WARNING: killing 9820 states (over memory cap)
KLEE: WARNING: killing 8329 states (over memory cap)
KLEE: WARNING: killing 10580 states (over memory cap)
KLEE: WARNING: killing 10027 states (over memory cap)
KLEE: WARNING: killing 9474 states (over memory cap)
KLEE: WARNING: killing 10363 states (over memory cap)
KLEE: WARNING: killing 10574 states (over memory cap)
KLEE: WARNING: killing 8540 states (over memory cap)
KLEE: WARNING: killing 10317 states (over memory cap)
KLEE: WARNING: killing 10058 states (over memory cap)
KLEE: WARNING: killing 10048 states (over memory cap)
KLEE: WARNING: killing 10724 states (over memory cap)
KLEE: WARNING: killing 11230 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-kpZcK_/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "vol_cdev_ioctl" has inline asm
KLEE: WARNING ONCE: function "vol_cdev_release" has inline asm
KLEE: WARNING ONCE: function "ubi_get_device" has inline asm
KLEE: WARNING ONCE: function "ubi_cdev_ioctl" has inline asm
KLEE: WARNING ONCE: function "ubi_get_by_major" has inline asm
KLEE: WARNING ONCE: function "ubi_remove_volume" has inline asm
KLEE: WARNING ONCE: function "ubi_change_vtbl_record" has inline asm
KLEE: WARNING ONCE: function "ubi_refill_pools" has inline asm
KLEE: WARNING ONCE: function "do_work" has inline asm
KLEE: WARNING ONCE: function "in_wl_tree" has inline asm
KLEE: WARNING ONCE: function "wl_tree_add" has inline asm
KLEE: WARNING ONCE: function "ctrl_cdev_ioctl" has inline asm
KLEE: WARNING ONCE: function "ubi_detach_mtd_dev" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_close" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_flush" has inline asm
KLEE: WARNING ONCE: function "vol_attribute_show" has inline asm
KLEE: WARNING ONCE: function "get_exclusive" has inline asm
KLEE: WARNING ONCE: function "ubi_start_update" has inline asm
KLEE: WARNING ONCE: function "revoke_exclusive" has inline asm
KLEE: WARNING ONCE: function "ubi_start_leb_change" has inline asm
KLEE: WARNING ONCE: function "clear_update_marker" has inline asm
KLEE: WARNING ONCE: function "ubi_more_update_data" has inline asm
KLEE: WARNING ONCE: function "ubi_calc_data_len" has inline asm
KLEE: WARNING ONCE: function "ubi_eba_write_leb_st" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_put_fm_peb" has inline asm
KLEE: WARNING ONCE: function "schedule_erase" has inline asm
KLEE: WARNING ONCE: function "ubi_io_write_vid_hdr" has inline asm
KLEE: WARNING ONCE: function "ubi_io_write" has inline asm
KLEE: WARNING ONCE: function "ubi_io_is_bad" has inline asm
KLEE: WARNING ONCE: function "ubi_io_read" has inline asm
KLEE: WARNING ONCE: function "erase_worker" has inline asm
KLEE: WARNING ONCE: function "ubi_io_mark_bad" has inline asm
KLEE: WARNING ONCE: function "ubi_io_read_vid_hdr" has inline asm
KLEE: WARNING ONCE: function "ubi_io_sync_erase" has inline asm
KLEE: WARNING ONCE: function "ubi_io_read_ec_hdr" has inline asm
KLEE: WARNING ONCE: function "do_sync_erase" has inline asm
KLEE: WARNING ONCE: function "ubi_io_write_ec_hdr" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_get_peb" has inline asm
KLEE: WARNING ONCE: function "ubi_wl_put_peb" has inline asm
KLEE: WARNING ONCE: function "ubi_thread" has inline asm
KLEE: WARNING ONCE: function "add_to_list" has inline asm
KLEE: WARNING ONCE: function "ubi_more_leb_change_data" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_54c7f1c7-967a-4cc0-a66b-e3a6df6ef768/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 7245 states (over memory cap)
KLEE: WARNING: killing 4588 states (over memory cap)
KLEE: WARNING: killing 5041 states (over memory cap)
KLEE: WARNING: killing 5698 states (over memory cap)
KLEE: WARNING: killing 5625 states (over memory cap)
KLEE: WARNING: killing 5918 states (over memory cap)
KLEE: WARNING: killing 7238 states (over memory cap)
KLEE: WARNING: killing 7253 states (over memory cap)
KLEE: WARNING: killing 6569 states (over memory cap)
KLEE: WARNING: killing 6784 states (over memory cap)
KLEE: WARNING: killing 7122 states (over memory cap)
KLEE: WARNING: killing 7052 states (over memory cap)
KLEE: WARNING: killing 7354 states (over memory cap)
KLEE: WARNING: killing 7573 states (over memory cap)
KLEE: WARNING: killing 8457 states (over memory cap)
KLEE: WARNING: killing 7637 states (over memory cap)
KLEE: WARNING: killing 7773 states (over memory cap)
KLEE: WARNING: killing 8117 states (over memory cap)
KLEE: WARNING: killing 8297 states (over memory cap)
KLEE: WARNING: killing 8016 states (over memory cap)
KLEE: WARNING: killing 8909 states (over memory cap)
KLEE: WARNING: killing 8375 states (over memory cap)
KLEE: WARNING: killing 8931 states (over memory cap)
KLEE: WARNING: killing 9241 states (over memory cap)
KLEE: WARNING: killing 9255 states (over memory cap)
KLEE: WARNING: killing 8588 states (over memory cap)
KLEE: WARNING: killing 8767 states (over memory cap)
KLEE: WARNING: killing 9241 states (over memory cap)
KLEE: WARNING: killing 8112 states (over memory cap)
KLEE: WARNING: killing 9634 states (over memory cap)
KLEE: WARNING: killing 9432 states (over memory cap)
KLEE: WARNING: killing 9272 states (over memory cap)
KLEE: WARNING: killing 9237 states (over memory cap)
KLEE: WARNING: killing 9202 states (over memory cap)
KLEE: WARNING: killing 8482 states (over memory cap)
KLEE: WARNING: killing 10357 states (over memory cap)
KLEE: WARNING: killing 9048 states (over memory cap)
KLEE: WARNING: killing 9263 states (over memory cap)
KLEE: WARNING: killing 9604 states (over memory cap)
KLEE: WARNING: killing 10203 states (over memory cap)
KLEE: WARNING: killing 9057 states (over memory cap)
KLEE: WARNING: killing 9056 states (over memory cap)
KLEE: WARNING: killing 9439 states (over memory cap)
KLEE: WARNING: killing 9352 states (over memory cap)
KLEE: WARNING: killing 7864 states (over memory cap)
KLEE: WARNING: killing 9775 states (over memory cap)
KLEE: WARNING: killing 9392 states (over memory cap)
KLEE: WARNING: killing 9774 states (over memory cap)
KLEE: WARNING: killing 9522 states (over memory cap)
KLEE: WARNING: killing 9820 states (over memory cap)
KLEE: WARNING: killing 8329 states (over memory cap)
KLEE: WARNING: killing 10580 states (over memory cap)
KLEE: WARNING: killing 10027 states (over memory cap)
KLEE: WARNING: killing 9474 states (over memory cap)
KLEE: WARNING: killing 10363 states (over memory cap)
KLEE: WARNING: killing 10574 states (over memory cap)
KLEE: WARNING: killing 8540 states (over memory cap)
KLEE: WARNING: killing 10317 states (over memory cap)
KLEE: WARNING: killing 10058 states (over memory cap)
KLEE: WARNING: killing 10048 states (over memory cap)
KLEE: WARNING: killing 10724 states (over memory cap)
KLEE: WARNING: killing 11230 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007fe1428c4390
4  libc.so.6       0x00007fe141c7d428 gsignal + 56
5  libc.so.6       0x00007fe141c7f02a abort + 362
6  libc.so.6       0x00007fe141c75bd7
7  libc.so.6       0x00007fe141c75c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007fe141c68830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 518.572905064
