bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-32_7a-drivers--usb--host--xhci-hcd.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 812 591 7375 55798
Removed infinite loop in arch_local_save_flags___0
Removed infinite loop in arch_local_save_flags___1
Removed infinite loop in arch_local_save_flags
Removed infinite loop in xhci_init_driver
Removed infinite loop in xhci_endpoint_init
Removed infinite loop in xhci_get_endpoint_interval
Removed infinite loop in arch_local_save_flags___2
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.72743415833
Removed calls to '__const_udelay' (function is undefined)
Removed calls to 'dev_err' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'pci_disable_msix' (function is undefined)
Removed calls to 'pci_disable_msi' (function is undefined)
Defining function usb_hcd_is_primary_hcd as symbolic
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'ldv__builtin_va_start' (function is undefined)
Removed calls to 'ldv__builtin_va_end' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'dev_warn' (function is undefined)
Defining function mod_timer as symbolic
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'dma_pool_free' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_watching as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Defining function lock_is_held as symbolic
Defining function radix_tree_lookup as symbolic
Defining function radix_tree_delete as symbolic
Defining function radix_tree_maybe_preload as symbolic
Defining function radix_tree_insert as symbolic
Defining function dma_pool_alloc as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function snprintf as symbolic
Defining function usb_hcd_irq as symbolic
Defining function request_threaded_irq as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'usb_hcd_resume_root_hub' (function is undefined)
Removed calls to 'usb_wakeup_notification' (function is undefined)
Removed calls to 'complete' (function is undefined)
Removed calls to 'usb_hcd_poll_rh_status' (function is undefined)
Removed calls to 'usb_hcd_unlink_urb_from_ep' (function is undefined)
Removed calls to 'usb_hcd_giveback_urb' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Defining function ___ratelimit as symbolic
Removed calls to 'usb_amd_quirk_pll_enable' (function is undefined)
Defining function __msecs_to_jiffies as symbolic
Removed calls to 'list_del' (function is undefined)
Defining function del_timer as symbolic
Removed calls to 'dma_free_attrs' (function is undefined)
Defining function pci_enable_msi_range as symbolic
Defining function pci_enable_msix_range as symbolic
Defining function __bitmap_weight as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to 'synchronize_irq' (function is undefined)
Defining function del_timer_sync as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'msleep' (function is undefined)
Removed calls to 'usb_root_hub_lost_power' (function is undefined)
Removed calls to 'dma_pool_destroy' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'set_timer_slack' (function is undefined)
Removed calls to 'add_timer' (function is undefined)
Removed calls to 'usb_hc_died' (function is undefined)
Defining function dmi_get_system_info as symbolic
Defining function strstr as symbolic
Defining function dma_alloc_attrs as symbolic
Defining function dma_pool_create as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '_dev_info' (function is undefined)
Defining function dma_set_mask as symbolic
Defining function dma_supported as symbolic
Removed calls to 'usb_amd_dev_put' (function is undefined)
Removed calls to 'usb_disable_xhci_ports' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'mutex_lock' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Defining function usb_acpi_power_manageable as symbolic
Defining function usb_acpi_set_power_state as symbolic
Defining function wait_for_completion_timeout as symbolic
Defining function usb_hcd_check_unlink_urb as symbolic
Removed calls to 'usb_amd_quirk_pll_disable' (function is undefined)
Defining function usb_hcd_link_urb_to_ep as symbolic
Defining function sg_next as symbolic
Defining function pci_set_power_state as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'trace_seq_printf' (function is undefined)
Defining function trace_raw_output_prep as symbolic
Defining function trace_event_reg as symbolic
Defining function trace_event_raw_init as symbolic
Defining function trace_define_field as symbolic
Defining function mutex_trylock as symbolic
Linked our definitions to these undefined functions:
  strlen
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.84208083153
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 640 425 3991 30739
INFO: Starting verification
KLEE: WARNING ONCE: function "xhci_run" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_init" has inline asm
KLEE: WARNING ONCE: function "xhci_halt" has inline asm
KLEE: WARNING ONCE: function "xhci_ring_cmd_db" has inline asm
KLEE: WARNING ONCE: function "xhci_print_ir_set" has inline asm
KLEE: WARNING ONCE: function "prepare_ring" has inline asm
KLEE: WARNING ONCE: function "queue_trb" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_ring_expansion___0" has inline asm
KLEE: WARNING ONCE: function "xhci_update_stream_segment_mapping" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_ring_expansion" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___0" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___1" has inline asm
KLEE: WARNING ONCE: function "xhci_irq" has inline asm
KLEE: WARNING ONCE: function "handle_cmd_completion" has inline asm
KLEE: WARNING ONCE: function "xhci_ring_device" has inline asm
KLEE: WARNING ONCE: function "xhci_cleanup_stalled_ring" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_reset_ep" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_quirks" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_cancel_urb___0" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_quirks___0" has inline asm
KLEE: WARNING ONCE: function "ring_doorbell_for_active_rings" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_reset_ep___0" has inline asm
KLEE: WARNING ONCE: function "xhci_suspend" has inline asm
KLEE: WARNING ONCE: function "xhci_set_cmd_ring_deq" has inline asm
KLEE: WARNING ONCE: function "xhci_resume" has inline asm
KLEE: WARNING ONCE: function "xhci_reset" has inline asm
KLEE: WARNING ONCE: function "xhci_mem_init" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_init___0" has inline asm
KLEE: WARNING ONCE: function "xhci_print_run_regs" has inline asm
KLEE: WARNING ONCE: function "xhci_handle_command_timeout" has inline asm
KLEE: WARNING ONCE: function "xhci_gen_setup" has inline asm
KLEE: WARNING ONCE: function "xhci_print_registers" has inline asm
KLEE: WARNING ONCE: function "xhci_init_driver" has inline asm
KLEE: WARNING ONCE: function "xhci_stop" has inline asm
KLEE: WARNING ONCE: function "xhci_shutdown" has inline asm
KLEE: WARNING ONCE: function "xhci_get_frame" has inline asm
KLEE: WARNING ONCE: function "xhci_urb_enqueue" has inline asm
KLEE: WARNING ONCE: function "xhci_urb_dequeue" has inline asm
KLEE: WARNING ONCE: function "xhci_hub_status_data" has inline asm
KLEE: WARNING ONCE: function "xhci_hub_control" has inline asm
KLEE: WARNING ONCE: function "xhci_bus_suspend" has inline asm
KLEE: WARNING ONCE: function "xhci_bus_resume" has inline asm
KLEE: WARNING ONCE: function "xhci_alloc_dev" has inline asm
KLEE: WARNING ONCE: function "xhci_free_dev" has inline asm
KLEE: WARNING ONCE: function "xhci_alloc_streams" has inline asm
KLEE: WARNING ONCE: function "xhci_free_streams" has inline asm
KLEE: WARNING ONCE: function "xhci_set_usb2_hardware_lpm" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_context_change" has inline asm
KLEE: WARNING ONCE: function "xhci_configure_endpoint" has inline asm
KLEE: WARNING ONCE: function "xhci_setup_device" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_address" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_address_ctx" has inline asm
KLEE: WARNING ONCE: function "xhci_endpoint_init" has inline asm
KLEE: WARNING ONCE: function "xhci_microframes_to_exponent" has inline asm
KLEE: WARNING ONCE: function "xhci_setup_streams_ep_input_ctx" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_context_change___0" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_quirks___1" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___2" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_cancel_urb" has inline asm
KLEE: WARNING ONCE: function "xhci_queue_isoc_tx_prepare" has inline asm
KLEE: WARNING ONCE: function "giveback_first_trb" has inline asm
KLEE: WARNING ONCE: function "xhci_dbg_cmd_ptrs" has inline asm
KLEE: WARNING ONCE: function "xhci_last_valid_endpoint" has inline asm
KLEE: WARNING ONCE: function "xhci_test_and_clear_bit" has inline asm
KLEE: WARNING ONCE: function "xhci_set_link_state" has inline asm
KLEE: WARNING ONCE: function "xhci_ring_ep_doorbell" has inline asm
KLEE: WARNING ONCE: function "xhci_quiesce" has inline asm
KLEE: WARNING ONCE: function "xhci_handshake" has inline asm
KLEE: WARNING ONCE: function "xhci_dbg_regs" has inline asm
KLEE: WARNING ONCE: function "xhci_stop_endpoint_command_watchdog" has inline asm
KLEE: WARNING ONCE: function "compliance_mode_recovery" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_4b1a23fd-e441-4f75-a037-6e7d32b98c47/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 12482 states (over memory cap)
KLEE: WARNING: killing 14559 states (over memory cap)
KLEE: WARNING: killing 14641 states (over memory cap)
KLEE: WARNING: killing 14923 states (over memory cap)
KLEE: WARNING: killing 14502 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-J43EUq/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "xhci_run" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_init" has inline asm
KLEE: WARNING ONCE: function "xhci_halt" has inline asm
KLEE: WARNING ONCE: function "xhci_ring_cmd_db" has inline asm
KLEE: WARNING ONCE: function "xhci_print_ir_set" has inline asm
KLEE: WARNING ONCE: function "prepare_ring" has inline asm
KLEE: WARNING ONCE: function "queue_trb" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_ring_expansion___0" has inline asm
KLEE: WARNING ONCE: function "xhci_update_stream_segment_mapping" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_ring_expansion" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___0" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___1" has inline asm
KLEE: WARNING ONCE: function "xhci_irq" has inline asm
KLEE: WARNING ONCE: function "handle_cmd_completion" has inline asm
KLEE: WARNING ONCE: function "xhci_ring_device" has inline asm
KLEE: WARNING ONCE: function "xhci_cleanup_stalled_ring" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_reset_ep" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_quirks" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_cancel_urb___0" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_quirks___0" has inline asm
KLEE: WARNING ONCE: function "ring_doorbell_for_active_rings" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_reset_ep___0" has inline asm
KLEE: WARNING ONCE: function "xhci_suspend" has inline asm
KLEE: WARNING ONCE: function "xhci_set_cmd_ring_deq" has inline asm
KLEE: WARNING ONCE: function "xhci_resume" has inline asm
KLEE: WARNING ONCE: function "xhci_reset" has inline asm
KLEE: WARNING ONCE: function "xhci_mem_init" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_init___0" has inline asm
KLEE: WARNING ONCE: function "xhci_print_run_regs" has inline asm
KLEE: WARNING ONCE: function "xhci_handle_command_timeout" has inline asm
KLEE: WARNING ONCE: function "xhci_gen_setup" has inline asm
KLEE: WARNING ONCE: function "xhci_print_registers" has inline asm
KLEE: WARNING ONCE: function "xhci_init_driver" has inline asm
KLEE: WARNING ONCE: function "xhci_stop" has inline asm
KLEE: WARNING ONCE: function "xhci_shutdown" has inline asm
KLEE: WARNING ONCE: function "xhci_get_frame" has inline asm
KLEE: WARNING ONCE: function "xhci_urb_enqueue" has inline asm
KLEE: WARNING ONCE: function "xhci_urb_dequeue" has inline asm
KLEE: WARNING ONCE: function "xhci_hub_status_data" has inline asm
KLEE: WARNING ONCE: function "xhci_hub_control" has inline asm
KLEE: WARNING ONCE: function "xhci_bus_suspend" has inline asm
KLEE: WARNING ONCE: function "xhci_bus_resume" has inline asm
KLEE: WARNING ONCE: function "xhci_alloc_dev" has inline asm
KLEE: WARNING ONCE: function "xhci_free_dev" has inline asm
KLEE: WARNING ONCE: function "xhci_alloc_streams" has inline asm
KLEE: WARNING ONCE: function "xhci_free_streams" has inline asm
KLEE: WARNING ONCE: function "xhci_set_usb2_hardware_lpm" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_context_change" has inline asm
KLEE: WARNING ONCE: function "xhci_configure_endpoint" has inline asm
KLEE: WARNING ONCE: function "xhci_setup_device" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_address" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_address_ctx" has inline asm
KLEE: WARNING ONCE: function "xhci_endpoint_init" has inline asm
KLEE: WARNING ONCE: function "xhci_microframes_to_exponent" has inline asm
KLEE: WARNING ONCE: function "xhci_setup_streams_ep_input_ctx" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_context_change___0" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_quirks___1" has inline asm
KLEE: WARNING ONCE: function "rcu_read_lock_sched_held___2" has inline asm
KLEE: WARNING ONCE: function "trace_xhci_dbg_cancel_urb" has inline asm
KLEE: WARNING ONCE: function "xhci_queue_isoc_tx_prepare" has inline asm
KLEE: WARNING ONCE: function "giveback_first_trb" has inline asm
KLEE: WARNING ONCE: function "xhci_dbg_cmd_ptrs" has inline asm
KLEE: WARNING ONCE: function "xhci_last_valid_endpoint" has inline asm
KLEE: WARNING ONCE: function "xhci_test_and_clear_bit" has inline asm
KLEE: WARNING ONCE: function "xhci_set_link_state" has inline asm
KLEE: WARNING ONCE: function "xhci_ring_ep_doorbell" has inline asm
KLEE: WARNING ONCE: function "xhci_quiesce" has inline asm
KLEE: WARNING ONCE: function "xhci_handshake" has inline asm
KLEE: WARNING ONCE: function "xhci_dbg_regs" has inline asm
KLEE: WARNING ONCE: function "xhci_stop_endpoint_command_watchdog" has inline asm
KLEE: WARNING ONCE: function "compliance_mode_recovery" has inline asm
KLEE: WARNING ONCE: function "main" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_4b1a23fd-e441-4f75-a037-6e7d32b98c47/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 12482 states (over memory cap)
KLEE: WARNING: killing 14559 states (over memory cap)
KLEE: WARNING: killing 14641 states (over memory cap)
KLEE: WARNING: killing 14923 states (over memory cap)
KLEE: WARNING: killing 14502 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f4401ec2390
4  libc.so.6       0x00007f440127b428 gsignal + 56
5  libc.so.6       0x00007f440127d02a abort + 362
6  libc.so.6       0x00007f4401273bd7
7  libc.so.6       0x00007f4401273c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007f4401266830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 28.5991477966
