bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.0-rc1-mav/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 143 661 3038 17125
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
Removed infinite loop in ldv_linux_kernel_module_module_put_and_exit
INFO: Compilation, preparation and instrumentation time: 0.748578071594
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to '__init_rwsem' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__rwlock_init' (function is undefined)
Removed calls to '_raw_spin_lock_bh' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to '_raw_spin_unlock_bh' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_read_lock_held as symbolic
Removed calls to 'down_write' (function is undefined)
Removed calls to 'up_write' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Removed calls to 'skb_queue_purge' (function is undefined)
Defining function printk as symbolic
Removed calls to 'netdev_err' (function is undefined)
Removed calls to 'slhc_free' (function is undefined)
Removed calls to 'bpf_prog_destroy' (function is undefined)
Removed calls to 'kfree_skb' (function is undefined)
Removed calls to 'free_netdev' (function is undefined)
Removed calls to 'skb_queue_tail' (function is undefined)
Defining function skb_dequeue as symbolic
Removed calls to 'netdev_printk' (function is undefined)
Removed calls to 'consume_skb' (function is undefined)
Removed calls to 'skb_trim' (function is undefined)
Defining function skb_put as symbolic
Defining function skb_copy_bits as symbolic
Defining function slhc_uncompress as symbolic
Defining function slhc_remember as symbolic
Defining function skb_push as symbolic
Defining function skb_pull_rcsum as symbolic
Defining function netif_rx as symbolic
Defining function external_allocated_data as symbolic
Defining function skb_pull as symbolic
Defining function slhc_toss as symbolic
Defining function __pskb_pull_tail as symbolic
Removed calls to 'skb_queue_head' (function is undefined)
Removed calls to 'netif_tx_wake_queue' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Defining function slhc_compress as symbolic
Defining function net_ratelimit as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Defining function noop_llseek as symbolic
Removed calls to 'add_wait_queue' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to 'remove_wait_queue' (function is undefined)
Removed calls to 'iov_iter_init' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'down_read' (function is undefined)
Removed calls to 'up_read' (function is undefined)
Removed calls to 'unregister_netdev' (function is undefined)
Defining function capable as symbolic
Defining function slhc_init as symbolic
Defining function bpf_prog_create as symbolic
Defining function memdup_user as symbolic
Defining function _copy_from_user as symbolic
Defining function _copy_to_user as symbolic
Defining function __request_module as symbolic
Defining function sprintf as symbolic
Defining function register_netdev as symbolic
Defining function alloc_netdev_mqs as symbolic
Defining function default_wake_function as symbolic
Defining function skb_copy_datagram_iter as symbolic
Removed calls to 'device_destroy' (function is undefined)
Removed calls to 'unregister_pernet_device' (function is undefined)
Removed calls to '__unregister_chrdev' (function is undefined)
Defining function register_pernet_device as symbolic
Defining function device_create as symbolic
Defining function __register_chrdev as symbolic
Removed calls to 'ldv_assert' (function is undefined)
Linked our definitions to these undefined functions:
  strlen
  __memcpy
  __memset
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.74850320816
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 252 553 2288 10674
INFO: Starting verification
KLEE: WARNING ONCE: function "ppp_pernet" has inline asm
KLEE: WARNING ONCE: function "net_generic" has inline asm
KLEE: WARNING ONCE: function "ppp_register_channel" has inline asm
KLEE: WARNING ONCE: function "ppp_do_recv" has inline asm
KLEE: WARNING ONCE: function "ppp_receive_nonmp_frame" has inline asm
KLEE: WARNING ONCE: function "netif_stop_queue" has inline asm
KLEE: WARNING ONCE: function "ppp_read" has inline asm
KLEE: WARNING ONCE: function "ppp_ioctl" has inline asm
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_581bd7a9-1802-4043-98c4-af0ffccb3a3e/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: flushing 10680 bytes on read, may be slow and/or crash: MO90[10680] allocated at global:
KLEE: ERROR: /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:8300: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:14887: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:8303: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_581bd7a9-1802-4043-98c4-af0ffccb3a3e/symbiotic/lib/verifier/__VERIFIER_error.c:9: ASSERTION FAIL: verifier assertion failed
KLEE: NOTE: now ignoring this error at this location
Error found.
RESULT: false(unreach-call)

 --- Error trace ---

Error: ASSERTION FAIL: verifier assertion failed
File: /tmp/vcloud-vcloud-master/worker/working_dir_581bd7a9-1802-4043-98c4-af0ffccb3a3e/symbiotic/lib/verifier/__VERIFIER_error.c
Line: 9
assembly.ll line: 918
Stack: 
	#000000918 in __VERIFIER_error () at /tmp/vcloud-vcloud-master/worker/working_dir_581bd7a9-1802-4043-98c4-af0ffccb3a3e/symbiotic/lib/verifier/__VERIFIER_error.c:9
	#100008999 in ldv_unregister_chrdev_159 () at /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:19961
	#200008954 in ldv_EMGentry_exit_ppp_cleanup_9_2 (=0) at /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:12788
	#300009797 in ldv_entry_EMGentry_9 (=0) at /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:13237
	#400010645 in main () at /tmp/symbiotic-iofkOJ/linux-4.0-rc1---drivers--net--ppp--ppp_generic.ko_false-unreach-call.cil.c:13253

 --- ----------- ---
Generating witness: /tmp/vcloud-vcloud-master/worker/working_dir_581bd7a9-1802-4043-98c4-af0ffccb3a3e/symbiotic/witness.graphml
 -- ---- --
Symbolic objects:
nondet := len 8 bytes, |8 times 0x0|
nondet:1 := len 8 bytes, |8 times 0x0|
nondet:2 := len 8 bytes, |8 times 0x0|
nondet:3 := len 1 bytes, |0x0|
nondet:4 := len 8 bytes, |8 times 0x0|
nondet:5 := len 8 bytes, |8 times 0x0|
nondet:6 := len 8 bytes, |8 times 0x0|
nondet:7 := len 4 bytes, |4 times 0x0|
nondet:8 := len 8 bytes, |8 times 0x0|
nondet:9 := len 1 bytes, |0x0|
nondet:10 := len 8 bytes, |8 times 0x0|
nondet:11 := len 8 bytes, |8 times 0x0|
nondet:12 := len 8 bytes, |8 times 0x0|
nondet:13 := len 8 bytes, |8 times 0x0|
nondet:14 := len 8 bytes, |8 times 0x0|
nondet:15 := len 8 bytes, |8 times 0x0|
nondet:16 := len 8 bytes, |8 times 0x0|
nondet:17 := len 8 bytes, |8 times 0x0|
nondet:18 := len 8 bytes, |8 times 0x0|
nondet:19 := len 8 bytes, |8 times 0x0|
nondet:20 := len 8 bytes, |8 times 0x0|
nondet:21 := len 8 bytes, |8 times 0x0|
nondet:22 := len 8 bytes, |8 times 0x0|
nondet:23 := len 8 bytes, |8 times 0x0|
nondet:24 := len 8 bytes, |8 times 0x0|
nondet:25 := len 8 bytes, |8 times 0x0|
nondet:26 := len 8 bytes, |8 times 0x0|
nondet:27 := len 8 bytes, |8 times 0x0|
nondet:28 := len 80 bytes, |80 times 0x0|
nondet:29 := len 76 bytes, |76 times 0x0|
nondet:30 := len 8 bytes, |8 times 0x0|
nondet:31 := len 8 bytes, |8 times 0x0|
nondet:32 := len 8 bytes, |8 times 0x0|
nondet:33 := len 8 bytes, |8 times 0x0|
nondet:34 := len 8 bytes, |8 times 0x0|
nondet:35 := len 8 bytes, |8 times 0x0|
nondet:36 := len 8 bytes, |8 times 0x0|
nondet:37 := len 16 bytes, |16 times 0x0|
nondet:38 := len 8 bytes, |8 times 0x0|
nondet:39 := len 16 bytes, |16 times 0x0|
nondet:40 := len 8 bytes, |8 times 0x0|
nondet:41 := len 8 bytes, |8 times 0x0|
nondet:42 := len 8 bytes, |8 times 0x0|
nondet:43 := len 8 bytes, |8 times 0x0|
nondet:44 := len 16 bytes, |16 times 0x0|
nondet:45 := len 8 bytes, |8 times 0x0|
nondet:46 := len 40 bytes, |40 times 0x0|
nondet:47 := len 16 bytes, |16 times 0x0|
nondet:48 := len 40 bytes, |40 times 0x0|
nondet:49 := len 8 bytes, |8 times 0x0|
nondet:50 := len 8 bytes, |8 times 0x0|
nondet:51 := len 8 bytes, |8 times 0x0|
nondet:52 := len 8 bytes, |8 times 0x0|
nondet:53 := len 8 bytes, |8 times 0x0|
nondet:54 := len 8 bytes, |8 times 0x0|
nondet:55 := len 8 bytes, |8 times 0x0|
nondet:56 := len 2 bytes, |2 times 0x0|
nondet:57 := len 8 bytes, |8 times 0x0|
nondet:58 := len 8 bytes, |8 times 0x0|
nondet:59 := len 1 bytes, |0x0|
nondet:60 := len 8 bytes, |8 times 0x0|
nondet:61 := len 8 bytes, |8 times 0x0|
nondet:62 := len 8 bytes, |8 times 0x0|
nondet:63 := len 8 bytes, |8 times 0x0|
nondet:64 := len 4 bytes, |4 times 0x0|
extern-global:nr_cpu_ids := len 4 bytes, |3 times 0xff|0x7f|
extern-global:__this_module := len 856 bytes, |856 times 0x0|
extern-global:jiffies := len 8 bytes, |8 times 0x0|
extern-global:current_task := len 10680 bytes, |10680 times 0x0|
ldv_undef_int:tmp:16894 := len 4 bytes, |4 times 0x0|
ldv_undef_int:tmp:16894:1 := len 4 bytes, |4 times 0x0|
ldv_undef_int:tmp:16894:2 := len 4 bytes, |4 times 0x1|
malloc0 := len 16 bytes, |16 times 0x0|
malloc0:1 := len 504 bytes, |504 times 0x0|
malloc0:2 := len 976 bytes, |976 times 0x0|
ldv_undef_int:tmp:16894:3 := len 4 bytes, |4 times 0x0|
ldv_undef_int:tmp:16894:4 := len 4 bytes, |4 times 0x0|
ldv_undef_ptr:tmp:16905 := len 8 bytes, |8 times 0xff|
ldv_undef_ptr:tmp:16905:1 := len 8 bytes, |8 times 0xff|
ldv_undef_int:tmp:16894:5 := len 4 bytes, |4 times 0x0|
ldv_undef_int:tmp:16894:6 := len 4 bytes, |4 times 0x0|
 -- ---- --
INFO: Total time elapsed: 36.6100649834
