bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-challenges/linux-3.14__complex_emg__linux-usb-dev__drivers-media-usb-uvc-uvcvideo_true-unreach-call.cil.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 320 393 5070 30051
Removed infinite loop in ldv_assume
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 1.18349909782
Removed calls to 'ldv_check_alloc_flags' (function is undefined)
Removed calls to 'ldv_after_alloc' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'usb_driver_release_interface' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'usb_put_intf' (function is undefined)
Removed calls to 'v4l2_prio_init' (function is undefined)
Removed calls to 'video_device_release' (function is undefined)
Removed calls to 'usb_enable_autosuspend' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'usb_kill_urb' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Defining function printk as symbolic
Defining function usb_set_interface as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function usb_submit_urb as symbolic
Removed calls to 'ktime_get_ts' (function is undefined)
Removed calls to 'usb_free_urb' (function is undefined)
Removed calls to 'usb_free_coherent' (function is undefined)
Defining function usb_alloc_urb as symbolic
Removed calls to 'list_del' (function is undefined)
Removed calls to 'vb2_buffer_done' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Defining function usb_alloc_coherent as symbolic
Defining function vb2_streamon as symbolic
Defining function vb2_streamoff as symbolic
Defining function usb_control_msg as symbolic
Removed calls to 'usb_deregister' (function is undefined)
Removed calls to 'debugfs_remove_recursive' (function is undefined)
Defining function usb_register_driver as symbolic
Defining function ldv_pre_usb_register_driver as symbolic
Defining function debugfs_create_dir as symbolic
Defining function sprintf as symbolic
Defining function strncasecmp as symbolic
Defining function strcasecmp as symbolic
Removed calls to 'set_normalized_timespec' (function is undefined)
Defining function vb2_plane_vaddr as symbolic
Removed calls to 'v4l_printk_ioctl' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Removed calls to 'usb_autopm_put_interface' (function is undefined)
Removed calls to 'v4l2_fh_init' (function is undefined)
Removed calls to 'v4l2_fh_add' (function is undefined)
Removed calls to 'v4l2_fh_del' (function is undefined)
Removed calls to 'v4l2_fh_exit' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'vb2_queue_release' (function is undefined)
Defining function usb_autopm_get_interface as symbolic
Defining function video_devdata as symbolic
Defining function vb2_mmap as symbolic
Defining function copy_in_user as symbolic
Defining function copy_user_generic_unrolled as symbolic
Defining function copy_user_generic_string as symbolic
Defining function copy_user_enhanced_fast_string as symbolic
Defining function __clear_user as symbolic
Defining function compat_alloc_user_space as symbolic
Defining function video_usercopy as symbolic
Defining function strlcpy as symbolic
Defining function v4l2_prio_max as symbolic
Defining function v4l2_prio_check as symbolic
Defining function v4l2_prio_change as symbolic
Defining function v4l2_event_subscribe as symbolic
Defining function v4l2_event_unsubscribe as symbolic
Defining function v4l2_event_dequeue as symbolic
Defining function mutex_lock_interruptible_nested as symbolic
Defining function _copy_to_user as symbolic
Defining function _copy_from_user as symbolic
Defining function usb_match_one_id as symbolic
Defining function kmemdup as symbolic
Defining function vb2_dqbuf as symbolic
Defining function vb2_qbuf as symbolic
Defining function vb2_querybuf as symbolic
Defining function vb2_reqbufs as symbolic
Removed calls to 'v4l2_event_queue_fh' (function is undefined)
Defining function snprintf as symbolic
Defining function vb2_poll as symbolic
Defining function no_llseek as symbolic
Defining function scnprintf as symbolic
Defining function simple_read_from_buffer as symbolic
Removed calls to 'video_unregister_device' (function is undefined)
Removed calls to 'v4l2_device_unregister' (function is undefined)
Removed calls to 'media_device_unregister' (function is undefined)
Removed calls to 'input_unregister_device' (function is undefined)
Removed calls to 'media_entity_cleanup' (function is undefined)
Defining function usb_get_intf as symbolic
Defining function media_device_register as symbolic
Defining function v4l2_device_register as symbolic
Removed calls to 'input_free_device' (function is undefined)
Removed calls to 'input_event' (function is undefined)
Defining function input_allocate_device as symbolic
Defining function strlcat as symbolic
Defining function input_register_device as symbolic
Removed calls to 'v4l2_subdev_init' (function is undefined)
Defining function media_entity_create_link as symbolic
Defining function v4l2_device_register_subdev as symbolic
Defining function media_entity_init as symbolic
Defining function video_device_alloc as symbolic
Defining function __video_register_device as symbolic
Defining function debugfs_create_file as symbolic
Removed calls to 'getnstimeofday' (function is undefined)
Defining function usb_get_current_frame_number as symbolic
Defining function vb2_queue_init as symbolic
Defining function memweight as symbolic
Defining function usb_ifnum_to_if as symbolic
Defining function usb_string as symbolic
Defining function usb_driver_claim_interface as symbolic
Defining function external_allocated_data as symbolic
Removed calls to 'v4l2_ctrl_merge' (function is undefined)
Removed calls to 'v4l2_ctrl_replace' (function is undefined)
Removed calls to 'ldv_pre_probe' (function is undefined)
Removed calls to 'ldv_assert' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  strcpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.32319092751
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 466 329 2335 15839
INFO: Starting verification
KLEE: WARNING ONCE: function "uvc_probe" has inline asm
KLEE: WARNING ONCE: function "uvc_v4l2_compat_ioctl32" has inline asm
KLEE: WARNING ONCE: function "uvc_status_init" has inline asm
KLEE: WARNING: undefined reference to function: v4l2_ctrl_merge
KLEE: WARNING: undefined reference to function: v4l2_ctrl_replace
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_c8cc7a0b-8dde-4602-a40a-1e4b7c11a583/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING: killing 9845 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 10927 states (over memory cap)
KLEE: WARNING: killing 9983 states (over memory cap)
KLEE: WARNING: killing 10055 states (over memory cap)
KLEE: WARNING: killing 10219 states (over memory cap)
KLEE: WARNING: killing 10195 states (over memory cap)
KLEE: WARNING: killing 10636 states (over memory cap)
KLEE: WARNING: killing 10439 states (over memory cap)
KLEE: WARNING: killing 11061 states (over memory cap)
KLEE: WARNING: killing 10677 states (over memory cap)
KLEE: WARNING: killing 10845 states (over memory cap)
KLEE: WARNING: killing 10467 states (over memory cap)
KLEE: WARNING: killing 10815 states (over memory cap)
KLEE: WARNING: killing 10888 states (over memory cap)
KLEE: WARNING: killing 11229 states (over memory cap)
KLEE: WARNING: killing 11126 states (over memory cap)
KLEE: WARNING: killing 11375 states (over memory cap)
KLEE: WARNING: killing 11723 states (over memory cap)
KLEE: WARNING: killing 12062 states (over memory cap)
KLEE: WARNING: killing 11956 states (over memory cap)
KLEE: WARNING: killing 11941 states (over memory cap)
KLEE: WARNING: killing 12101 states (over memory cap)
KLEE: WARNING: killing 12177 states (over memory cap)
KLEE: WARNING: killing 12432 states (over memory cap)
KLEE: WARNING: killing 12508 states (over memory cap)
KLEE: WARNING: killing 12580 states (over memory cap)
KLEE: WARNING: killing 12834 states (over memory cap)
KLEE: WARNING: killing 12643 states (over memory cap)
KLEE: WARNING: killing 12716 states (over memory cap)
KLEE: WARNING: killing 12435 states (over memory cap)
KLEE: WARNING: killing 11980 states (over memory cap)
KLEE: WARNING: killing 11699 states (over memory cap)
KLEE: WARNING: killing 11946 states (over memory cap)
KLEE: WARNING: killing 11847 states (over memory cap)
KLEE: WARNING: killing 12270 states (over memory cap)
KLEE: WARNING: killing 11381 states (over memory cap)
KLEE: WARNING: killing 11892 states (over memory cap)
KLEE: WARNING: killing 11176 states (over memory cap)
KLEE: WARNING: killing 11686 states (over memory cap)
KLEE: WARNING: killing 11586 states (over memory cap)
KLEE: WARNING: killing 11663 states (over memory cap)
KLEE: WARNING: killing 12260 states (over memory cap)
KLEE: WARNING: killing 11546 states (over memory cap)
KLEE: WARNING: killing 11797 states (over memory cap)
KLEE: WARNING: killing 11783 states (over memory cap)
KLEE: WARNING: killing 11767 states (over memory cap)
KLEE: WARNING: killing 11756 states (over memory cap)
KLEE: WARNING: killing 11567 states (over memory cap)
KLEE: WARNING: killing 11646 states (over memory cap)
KLEE: WARNING: killing 11890 states (over memory cap)
KLEE: WARNING: killing 11359 states (over memory cap)
KLEE: WARNING: killing 11688 states (over memory cap)
KLEE: WARNING: killing 12281 states (over memory cap)
KLEE: WARNING: killing 12185 states (over memory cap)
KLEE: WARNING: killing 12084 states (over memory cap)
KLEE: WARNING: killing 12154 states (over memory cap)
KLEE: WARNING: killing 11630 states (over memory cap)
KLEE: WARNING: killing 11872 states (over memory cap)
KLEE: WARNING: killing 11775 states (over memory cap)
KLEE: WARNING: killing 11676 states (over memory cap)
KLEE: WARNING: killing 11663 states (over memory cap)
KLEE: WARNING: killing 11308 states (over memory cap)
KLEE: WARNING: killing 11643 states (over memory cap)
KLEE: WARNING: killing 12141 states (over memory cap)
KLEE: WARNING: killing 11956 states (over memory cap)
KLEE: WARNING: killing 11610 states (over memory cap)
KLEE: WARNING: killing 12022 states (over memory cap)
KLEE: WARNING: killing 12007 states (over memory cap)
KLEE: WARNING: killing 11573 states (over memory cap)
KLEE: WARNING: killing 12238 states (over memory cap)
KLEE: WARNING: killing 11458 states (over memory cap)
KLEE: WARNING: killing 11537 states (over memory cap)
KLEE: WARNING: killing 12198 states (over memory cap)
KLEE: WARNING: killing 11597 states (over memory cap)
KLEE: WARNING: killing 12094 states (over memory cap)
KLEE: WARNING: killing 11408 states (over memory cap)
KLEE: WARNING: killing 11815 states (over memory cap)
KLEE: WARNING: killing 12229 states (over memory cap)
KLEE: WARNING: killing 11875 states (over memory cap)
KLEE: WARNING: killing 11532 states (over memory cap)
KLEE: WARNING: killing 11604 states (over memory cap)
KLEE: WARNING: killing 11763 states (over memory cap)
KLEE: WARNING: killing 11415 states (over memory cap)
KLEE: WARNING: killing 11481 states (over memory cap)
KLEE: WARNING: killing 12062 states (over memory cap)
KLEE: WARNING: killing 11629 states (over memory cap)
KLEE: WARNING: killing 12040 states (over memory cap)
KLEE: WARNING: killing 11778 states (over memory cap)
KLEE: WARNING: killing 11512 states (over memory cap)
KLEE: WARNING: killing 12001 states (over memory cap)
KLEE: WARNING: killing 11827 states (over memory cap)
KLEE: WARNING: killing 11981 states (over memory cap)
KLEE: WARNING: killing 11637 states (over memory cap)
KLEE: WARNING: killing 12046 states (over memory cap)
KLEE: WARNING: killing 12197 states (over memory cap)
KLEE: WARNING: killing 11522 states (over memory cap)
KLEE: WARNING: killing 12091 states (over memory cap)
KLEE: WARNING: killing 11832 states (over memory cap)
KLEE: WARNING: killing 11574 states (over memory cap)
KLEE: WARNING: killing 11888 states (over memory cap)
KLEE: WARNING: killing 12294 states (over memory cap)
KLEE: WARNING: killing 12038 states (over memory cap)
KLEE: WARNING: killing 11448 states (over memory cap)
KLEE: WARNING: killing 11683 states (over memory cap)
KLEE: WARNING: killing 11839 states (over memory cap)
KLEE: WARNING: killing 11422 states (over memory cap)
KLEE: WARNING: killing 11493 states (over memory cap)
KLEE: WARNING: killing 11149 states (over memory cap)
KLEE: WARNING: killing 11794 states (over memory cap)
KLEE: WARNING: killing 11950 states (over memory cap)
KLEE: WARNING: killing 12265 states (over memory cap)
KLEE: WARNING: killing 11930 states (over memory cap)
KLEE: WARNING: killing 12004 states (over memory cap)
KLEE: WARNING: killing 12071 states (over memory cap)
KLEE: WARNING: killing 11412 states (over memory cap)
KLEE: WARNING: killing 12049 states (over memory cap)
KLEE: WARNING: killing 11715 states (over memory cap)
KLEE: WARNING: killing 11943 states (over memory cap)
KLEE: WARNING: killing 11856 states (over memory cap)
KLEE: WARNING: killing 12007 states (over memory cap)
KLEE: WARNING: killing 11350 states (over memory cap)
KLEE: WARNING: killing 11657 states (over memory cap)
KLEE: WARNING: killing 11879 states (over memory cap)
KLEE: WARNING: killing 11548 states (over memory cap)
KLEE: WARNING: killing 11947 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-5TeOxL/linux-3.14__complex_emg__linux-usb-dev__drivers-media-usb-uvc-uvcvideo_true-unreach-call.cil.c:13277: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 12257 states (over memory cap)
KLEE: WARNING: killing 11768 states (over memory cap)
KLEE: WARNING: killing 12240 states (over memory cap)
KLEE: WARNING: killing 11421 states (over memory cap)
KLEE: WARNING: killing 11653 states (over memory cap)
KLEE: WARNING: killing 11806 states (over memory cap)
KLEE: WARNING: killing 11394 states (over memory cap)
KLEE: WARNING: killing 11944 states (over memory cap)
KLEE: WARNING: killing 11609 states (over memory cap)
KLEE: WARNING: killing 11600 states (over memory cap)
KLEE: WARNING: killing 12071 states (over memory cap)
KLEE: WARNING: killing 11828 states (over memory cap)
KLEE: WARNING: killing 12053 states (over memory cap)
KLEE: WARNING: killing 11563 states (over memory cap)
KLEE: WARNING: killing 11872 states (over memory cap)
KLEE: WARNING: killing 11703 states (over memory cap)
KLEE: WARNING: killing 11855 states (over memory cap)
KLEE: WARNING: killing 11762 states (over memory cap)
KLEE: WARNING: killing 11672 states (over memory cap)
KLEE: WARNING: killing 11580 states (over memory cap)
KLEE: WARNING: killing 11648 states (over memory cap)
KLEE: WARNING: killing 11955 states (over memory cap)
KLEE: WARNING: killing 11629 states (over memory cap)
KLEE: WARNING: killing 11539 states (over memory cap)
KLEE: WARNING: killing 11689 states (over memory cap)
KLEE: WARNING: killing 12388 states (over memory cap)
KLEE: WARNING: killing 11746 states (over memory cap)
KLEE: WARNING: killing 11814 states (over memory cap)
KLEE: WARNING: killing 11727 states (over memory cap)
KLEE: WARNING: killing 11877 states (over memory cap)
KLEE: WARNING: killing 11549 states (over memory cap)
KLEE: WARNING: killing 11378 states (over memory cap)
KLEE: WARNING: killing 11529 states (over memory cap)
KLEE: WARNING: killing 11518 states (over memory cap)
KLEE: WARNING: killing 11976 states (over memory cap)
KLEE: WARNING: killing 11496 states (over memory cap)
KLEE: WARNING: killing 11639 states (over memory cap)
KLEE: WARNING: killing 11477 states (over memory cap)
KLEE: WARNING: killing 11858 states (over memory cap)
KLEE: WARNING: killing 12084 states (over memory cap)
KLEE: WARNING: killing 11838 states (over memory cap)
KLEE: WARNING: killing 12061 states (over memory cap)
KLEE: WARNING: killing 11740 states (over memory cap)
KLEE: WARNING: killing 11811 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-5TeOxL/linux-3.14__complex_emg__linux-usb-dev__drivers-media-usb-uvc-uvcvideo_true-unreach-call.cil.c:22369: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 11801 states (over memory cap)
KLEE: WARNING: killing 11553 states (over memory cap)
KLEE: WARNING: killing 11775 states (over memory cap)
KLEE: WARNING: killing 11303 states (over memory cap)
KLEE: WARNING: killing 11681 states (over memory cap)
KLEE: WARNING: killing 11515 states (over memory cap)
