bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.4-simple/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 42 50 554 7725
INFO: Compilation, preparation and instrumentation time: 0.384406089783
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'dma_pool_free' (function is undefined)
Removed calls to 'dma_pool_destroy' (function is undefined)
Defining function dma_pool_create as symbolic
Defining function printk as symbolic
Defining function dma_pool_alloc as symbolic
Defining function noop_llseek as symbolic
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Defining function capable as symbolic
Removed calls to 'might_fault' (function is undefined)
Removed calls to 'down' (function is undefined)
Removed calls to 'up' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to 'add_timer' (function is undefined)
Removed calls to 'prepare_to_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function _copy_to_user as symbolic
Defining function autoremove_wake_function as symbolic
Defining function del_timer_sync as symbolic
Defining function _copy_from_user as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'ldv_check_return_value' (function is undefined)
Removed calls to 'ldv_check_final_state' (function is undefined)
Defining function misc_deregister as symbolic
Defining function misc_register as symbolic
Defining function ldv_some_page as symbolic
Defining function kmem_cache_alloc as symbolic
Linked our definitions to these undefined functions:
  memcmp
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_assume
  __VERIFIER_error
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
INFO: After-slicing optimizations and preparation time: 0.287695884705
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 139 48 235 3950
INFO: Starting verification
KLEE: WARNING ONCE: function "mraid_mm_ioctl" has inline asm
KLEE: WARNING ONCE: flushing 9472 bytes on read, may be slow and/or crash: MO16[9472] allocated at global:
KLEE: ERROR: /tmp/symbiotic-d4dHbY/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c:5545: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-d4dHbY/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c:5545: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-d4dHbY/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c:5548: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
klee: /var/xchalup4/symbiotic/klee/lib/Core/SpecialFunctionHandler.cpp:250: std::__cxx11::string klee::SpecialFunctionHandler::readStringAtAddress(klee::ExecutionState&, klee::ref<klee::Expr>): Assertion `isa<ConstantExpr>(cur) && "hit symbolic char while reading concrete string"' failed.
KLEE: output directory is "/tmp/symbiotic-d4dHbY/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "mraid_mm_ioctl" has inline asm
KLEE: WARNING ONCE: flushing 9472 bytes on read, may be slow and/or crash: MO16[9472] allocated at global:
KLEE: ERROR: /tmp/symbiotic-d4dHbY/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c:5545: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-d4dHbY/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c:5545: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-d4dHbY/43_1a_cilled_false-unreach-call_ok_linux-43_1a-drivers--scsi--megaraid--megaraid_mm_true-termination.ko-ldv_main0_sequence_infinite_withcheck_stateful.cil.out.c:5548: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
klee: /var/xchalup4/symbiotic/klee/lib/Core/SpecialFunctionHandler.cpp:250: std::__cxx11::string klee::SpecialFunctionHandler::readStringAtAddress(klee::ExecutionState&, klee::ref<klee::Expr>): Assertion `isa<ConstantExpr>(cur) && "hit symbolic char while reading concrete string"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f71e34e1390
4  libc.so.6       0x00007f71e289a428 gsignal + 56
5  libc.so.6       0x00007f71e289c02a abort + 362
6  libc.so.6       0x00007f71e2892bd7
7  libc.so.6       0x00007f71e2892c82
8  klee            0x00000000005f7297 klee::SpecialFunctionHandler::readStringAtAddress[abi:cxx11](klee::ExecutionState&, klee::ref<klee::Expr>) + 1607
9  klee            0x00000000005f8ba7 klee::SpecialFunctionHandler::handleMakeSymbolic(klee::ExecutionState&, klee::KInstruction*, std::vector<klee::ref<klee::Expr>, std::allocator<klee::ref<klee::Expr> > >&) + 183
10 klee            0x00000000005f6b9f klee::SpecialFunctionHandler::handle(klee::ExecutionState&, llvm::Function*, klee::KInstruction*, std::vector<klee::ref<klee::Expr>, std::allocator<klee::ref<klee::Expr> > >&) + 143
11 klee            0x00000000005cdfa3 klee::Executor::callExternalFunction(klee::ExecutionState&, klee::KInstruction*, llvm::Function*, std::vector<klee::ref<klee::Expr>, std::allocator<klee::ref<klee::Expr> > >&) + 83
12 klee            0x00000000005d3229 klee::Executor::executeCall(klee::ExecutionState&, klee::KInstruction*, llvm::Function*, std::vector<klee::ref<klee::Expr>, std::allocator<klee::ref<klee::Expr> > >&) + 1321
13 klee            0x00000000005d8788 klee::Executor::executeInstruction(klee::ExecutionState&, klee::KInstruction*) + 14952
14 klee            0x00000000005da8c5 klee::Executor::run(klee::ExecutionState&) + 2117
15 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
16 klee            0x0000000000593c63 main + 8867
17 libc.so.6       0x00007f71e2885830 __libc_start_main + 240
18 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 109.289518118
