bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--message--fusion--mptbase.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 771 198 3651 21897
Removed infinite loop in mpt_turbo_reply
Removed infinite loop in ldv_stop
Removed infinite loop in ldv_module_put_and_exit
INFO: Compilation, preparation and instrumentation time: 0.723469018936
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Defining function dma_alloc_attrs as symbolic
Defining function printk as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'list_del' (function is undefined)
Defining function wait_for_completion_timeout as symbolic
Removed calls to 'msleep' (function is undefined)
Removed calls to '__const_udelay' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'panic' (function is undefined)
Removed calls to 'pci_release_selected_regions' (function is undefined)
Removed calls to 'pci_disable_msi' (function is undefined)
Removed calls to 'pci_set_master' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Defining function jiffies_to_msecs as symbolic
Defining function pci_select_bars as symbolic
Defining function pci_enable_device as symbolic
Defining function pci_request_selected_regions as symbolic
Defining function dma_supported as symbolic
Defining function dma_set_mask as symbolic
Defining function request_threaded_irq as symbolic
Defining function snprintf as symbolic
Defining function pci_enable_msi_range as symbolic
Defining function pci_bus_write_config_word as symbolic
Defining function pci_bus_read_config_word as symbolic
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to 'pci_dev_put' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to 'destroy_workqueue' (function is undefined)
Defining function sprintf as symbolic
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function __alloc_workqueue_key as symbolic
Defining function proc_mkdir as symbolic
Defining function proc_create_data as symbolic
Defining function queue_delayed_work_on as symbolic
Defining function __msecs_to_jiffies as symbolic
Defining function pci_get_slot as symbolic
Defining function pci_bus_write_config_byte as symbolic
Defining function pci_bus_read_config_byte as symbolic
Removed calls to 'pci_stop_and_remove_bus_device_locked' (function is undefined)
Defining function kthread_create_on_node as symbolic
Defining function wake_up_process as symbolic
Defining function pci_enable_device_mem as symbolic
Defining function dma_get_required_mask as symbolic
Defining function ioremap_nocache as symbolic
Removed calls to 'remove_proc_entry' (function is undefined)
Removed calls to 'synchronize_irq' (function is undefined)
Defining function cancel_delayed_work as symbolic
Removed calls to 'pci_restore_state' (function is undefined)
Defining function pci_set_power_state as symbolic
Defining function __pci_enable_wake as symbolic
Defining function pci_choose_state as symbolic
Defining function pci_save_state as symbolic
Defining function strlcpy as symbolic
Defining function seq_lseek as symbolic
Defining function seq_read as symbolic
Defining function single_release as symbolic
Defining function PDE_DATA as symbolic
Defining function single_open as symbolic
Defining function seq_printf as symbolic
Defining function seq_putc as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Defining function param_get_int as symbolic
Removed calls to 'complete' (function is undefined)
Defining function param_set_int as symbolic
Defining function queue_work_on as symbolic
Removed calls to 'flush_workqueue' (function is undefined)
Defining function strlen as symbolic
Linked our definitions to these undefined functions:
  strncpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.840913057327
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 908 174 2047 13103
INFO: Starting verification
KLEE: WARNING ONCE: function "mpt_config" has inline asm
KLEE: WARNING ONCE: function "mpt_put_msg_frame" has inline asm
KLEE: WARNING ONCE: function "mpt_Soft_Hard_ResetHandler" has inline asm
KLEE: WARNING ONCE: function "mpt_HardResetHandler" has inline asm
KLEE: WARNING ONCE: function "mpt_halt_firmware" has inline asm
KLEE: WARNING ONCE: function "mpt_do_ioc_recovery" has inline asm
KLEE: WARNING ONCE: function "MakeIocReady" has inline asm
KLEE: WARNING ONCE: function "mpt_interrupt" has inline asm
KLEE: WARNING ONCE: function "PrimeIocFifos" has inline asm
KLEE: WARNING ONCE: function "SendIocInit" has inline asm
KLEE: WARNING ONCE: function "mpt_handshake_req_reply_wait" has inline asm
KLEE: WARNING ONCE: function "mptbase_sas_persist_operation" has inline asm
KLEE: WARNING ONCE: function "WaitForDoorbellInt" has inline asm
KLEE: WARNING ONCE: function "WaitForDoorbellAck" has inline asm
KLEE: WARNING ONCE: function "SendIocReset" has inline asm
KLEE: WARNING ONCE: function "KickStart" has inline asm
KLEE: WARNING ONCE: function "mpt_downloadboot" has inline asm
KLEE: WARNING ONCE: function "mpt_attach" has inline asm
KLEE: WARNING ONCE: function "mpt_fault_reset_work" has inline asm
KLEE: WARNING ONCE: function "mpt_detach" has inline asm
KLEE: WARNING ONCE: function "mpt_resume" has inline asm
KLEE: WARNING ONCE: function "mpt_suspend" has inline asm
KLEE: WARNING ONCE: function "mpt_put_msg_frame_hi_pri" has inline asm
KLEE: WARNING ONCE: function "mpt_send_handshake_request" has inline asm
KLEE: WARNING ONCE: function "mpt_GetIocState" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_90499d08-11cb-447d-b95e-d68ea75bb493/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 7900 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 8823 states (over memory cap)
KLEE: WARNING: killing 8800 states (over memory cap)
KLEE: WARNING: killing 8564 states (over memory cap)
KLEE: WARNING: killing 8834 states (over memory cap)
KLEE: WARNING: killing 8528 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-w_lTKj/linux-4.2-rc1.tar.xz-08_1a-drivers--message--fusion--mptbase.ko-entry_point_true-unreach-call.cil.out.c:6097: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 8151 states (over memory cap)
KLEE: WARNING: killing 8633 states (over memory cap)
KLEE: WARNING: killing 8613 states (over memory cap)
KLEE: WARNING: killing 8669 states (over memory cap)
KLEE: WARNING: killing 9076 states (over memory cap)
KLEE: WARNING: killing 9342 states (over memory cap)
KLEE: WARNING: killing 8901 states (over memory cap)
KLEE: WARNING: killing 9592 states (over memory cap)
KLEE: WARNING: killing 9718 states (over memory cap)
KLEE: WARNING: killing 9775 states (over memory cap)
KLEE: WARNING: killing 9905 states (over memory cap)
KLEE: WARNING: killing 9958 states (over memory cap)
KLEE: WARNING: killing 9948 states (over memory cap)
KLEE: WARNING: killing 9507 states (over memory cap)
KLEE: WARNING: killing 9773 states (over memory cap)
KLEE: WARNING: killing 10180 states (over memory cap)
KLEE: WARNING: killing 9743 states (over memory cap)
KLEE: WARNING: killing 9940 states (over memory cap)
KLEE: WARNING: killing 9995 states (over memory cap)
KLEE: WARNING: killing 9636 states (over memory cap)
KLEE: WARNING: killing 9696 states (over memory cap)
KLEE: WARNING: killing 9335 states (over memory cap)
KLEE: WARNING: killing 9599 states (over memory cap)
KLEE: WARNING: killing 9449 states (over memory cap)
KLEE: WARNING: killing 9297 states (over memory cap)
KLEE: WARNING: killing 9631 states (over memory cap)
KLEE: WARNING: killing 8859 states (over memory cap)
KLEE: WARNING: killing 9120 states (over memory cap)
KLEE: WARNING: killing 9311 states (over memory cap)
KLEE: WARNING: killing 9436 states (over memory cap)
KLEE: WARNING: killing 10114 states (over memory cap)
KLEE: WARNING: killing 9481 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-w_lTKj/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "mpt_config" has inline asm
KLEE: WARNING ONCE: function "mpt_put_msg_frame" has inline asm
KLEE: WARNING ONCE: function "mpt_Soft_Hard_ResetHandler" has inline asm
KLEE: WARNING ONCE: function "mpt_HardResetHandler" has inline asm
KLEE: WARNING ONCE: function "mpt_halt_firmware" has inline asm
KLEE: WARNING ONCE: function "mpt_do_ioc_recovery" has inline asm
KLEE: WARNING ONCE: function "MakeIocReady" has inline asm
KLEE: WARNING ONCE: function "mpt_interrupt" has inline asm
KLEE: WARNING ONCE: function "PrimeIocFifos" has inline asm
KLEE: WARNING ONCE: function "SendIocInit" has inline asm
KLEE: WARNING ONCE: function "mpt_handshake_req_reply_wait" has inline asm
KLEE: WARNING ONCE: function "mptbase_sas_persist_operation" has inline asm
KLEE: WARNING ONCE: function "WaitForDoorbellInt" has inline asm
KLEE: WARNING ONCE: function "WaitForDoorbellAck" has inline asm
KLEE: WARNING ONCE: function "SendIocReset" has inline asm
KLEE: WARNING ONCE: function "KickStart" has inline asm
KLEE: WARNING ONCE: function "mpt_downloadboot" has inline asm
KLEE: WARNING ONCE: function "mpt_attach" has inline asm
KLEE: WARNING ONCE: function "mpt_fault_reset_work" has inline asm
KLEE: WARNING ONCE: function "mpt_detach" has inline asm
KLEE: WARNING ONCE: function "mpt_resume" has inline asm
KLEE: WARNING ONCE: function "mpt_suspend" has inline asm
KLEE: WARNING ONCE: function "mpt_put_msg_frame_hi_pri" has inline asm
KLEE: WARNING ONCE: function "mpt_send_handshake_request" has inline asm
KLEE: WARNING ONCE: function "mpt_GetIocState" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_90499d08-11cb-447d-b95e-d68ea75bb493/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 7900 states (over memory cap)
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 8823 states (over memory cap)
KLEE: WARNING: killing 8800 states (over memory cap)
KLEE: WARNING: killing 8564 states (over memory cap)
KLEE: WARNING: killing 8834 states (over memory cap)
KLEE: WARNING: killing 8528 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-w_lTKj/linux-4.2-rc1.tar.xz-08_1a-drivers--message--fusion--mptbase.ko-entry_point_true-unreach-call.cil.out.c:6097: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 8151 states (over memory cap)
KLEE: WARNING: killing 8633 states (over memory cap)
KLEE: WARNING: killing 8613 states (over memory cap)
KLEE: WARNING: killing 8669 states (over memory cap)
KLEE: WARNING: killing 9076 states (over memory cap)
KLEE: WARNING: killing 9342 states (over memory cap)
KLEE: WARNING: killing 8901 states (over memory cap)
KLEE: WARNING: killing 9592 states (over memory cap)
KLEE: WARNING: killing 9718 states (over memory cap)
KLEE: WARNING: killing 9775 states (over memory cap)
KLEE: WARNING: killing 9905 states (over memory cap)
KLEE: WARNING: killing 9958 states (over memory cap)
KLEE: WARNING: killing 9948 states (over memory cap)
KLEE: WARNING: killing 9507 states (over memory cap)
KLEE: WARNING: killing 9773 states (over memory cap)
KLEE: WARNING: killing 10180 states (over memory cap)
KLEE: WARNING: killing 9743 states (over memory cap)
KLEE: WARNING: killing 9940 states (over memory cap)
KLEE: WARNING: killing 9995 states (over memory cap)
KLEE: WARNING: killing 9636 states (over memory cap)
KLEE: WARNING: killing 9696 states (over memory cap)
KLEE: WARNING: killing 9335 states (over memory cap)
KLEE: WARNING: killing 9599 states (over memory cap)
KLEE: WARNING: killing 9449 states (over memory cap)
KLEE: WARNING: killing 9297 states (over memory cap)
KLEE: WARNING: killing 9631 states (over memory cap)
KLEE: WARNING: killing 8859 states (over memory cap)
KLEE: WARNING: killing 9120 states (over memory cap)
KLEE: WARNING: killing 9311 states (over memory cap)
KLEE: WARNING: killing 9436 states (over memory cap)
KLEE: WARNING: killing 10114 states (over memory cap)
KLEE: WARNING: killing 9481 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f17c5704390
4  libc.so.6       0x00007f17c4abd428 gsignal + 56
5  libc.so.6       0x00007f17c4abf02a abort + 362
6  libc.so.6       0x00007f17c4ab5bd7
7  libc.so.6       0x00007f17c4ab5c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007f17c4aa8830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 105.254823923
