bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 219 246 3178 21039
Removed infinite loop in dma_unmap_page
Removed infinite loop in dma_unmap_sg_attrs
Removed infinite loop in sg_page
Removed infinite loop in arch_local_irq_restore
Removed infinite loop in arch_local_save_flags
Removed infinite loop in arch_local_irq_disable
Removed infinite loop in gdth_put_cmndinfo
Removed infinite loop in dma_map_sg_attrs
Removed infinite loop in dma_map_page
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in gdth_queuecommand_lck
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.732717990875
Removed calls to 'scsi_free_host_dev' (function is undefined)
Defining function scsi_get_host_dev as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to '__const_udelay' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'complete' (function is undefined)
Defining function printk as symbolic
Removed calls to 'debug_dma_unmap_sg' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Removed calls to 'do_gettimeofday' (function is undefined)
Defining function sprintf as symbolic
Removed calls to 'trace_hardirqs_off' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'trace_hardirqs_on' (function is undefined)
Defining function sg_next as symbolic
Defining function __phys_addr as symbolic
Removed calls to 'debug_dma_map_sg' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'add_timer' (function is undefined)
Removed calls to 'scsi_scan_host' (function is undefined)
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'scsi_host_put' (function is undefined)
Removed calls to 'list_del' (function is undefined)
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'scsi_remove_host' (function is undefined)
Defining function pci_enable_device as symbolic
Defining function scsi_add_host_with_dma as symbolic
Defining function dma_set_mask as symbolic
Defining function strlcpy as symbolic
Defining function dma_alloc_attrs as symbolic
Defining function request_threaded_irq as symbolic
Defining function pci_bus_write_config_word as symbolic
Defining function pci_bus_read_config_word as symbolic
Defining function pci_bus_write_config_dword as symbolic
Defining function ioremap_nocache as symbolic
Defining function scsi_host_alloc as symbolic
Defining function noop_llseek as symbolic
Removed calls to '__might_fault' (function is undefined)
Removed calls to 'mutex_lock' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to '__copy_to_user_overflow' (function is undefined)
Removed calls to '__copy_from_user_overflow' (function is undefined)
Defining function _copy_from_user as symbolic
Defining function _copy_to_user as symbolic
Removed calls to 'scsi_cmd_get_serial' (function is undefined)
Defining function seq_puts as symbolic
Defining function snprintf as symbolic
Defining function seq_printf as symbolic
Defining function simple_strtoul as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to '__unregister_chrdev' (function is undefined)
Removed calls to 'pci_unregister_driver' (function is undefined)
Defining function ldv_release_4 as symbolic
Defining function ldv_probe_4 as symbolic
Defining function ldv_shutdown_5 as symbolic
Defining function register_reboot_notifier as symbolic
Defining function __register_chrdev as symbolic
Defining function __pci_register_driver as symbolic
Defining function unregister_reboot_notifier as symbolic
Defining function del_timer_sync as symbolic
Defining function mutex_trylock as symbolic
Defining function strlen as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strchr
  strcmp
  strcpy
  strncmp
  strncpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 1.03346896172
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 358 188 1991 14552
INFO: Starting verification
KLEE: WARNING ONCE: function "gdth_test_busy" has inline asm
KLEE: WARNING ONCE: function "gdth_scsi_done" has inline asm
KLEE: WARNING ONCE: function "gdth_set_sema0" has inline asm
KLEE: WARNING ONCE: function "gdth_copy_command" has inline asm
KLEE: WARNING ONCE: function "gdth_copy_internal_data" has inline asm
KLEE: WARNING ONCE: function "gdth_release_event" has inline asm
KLEE: WARNING ONCE: function "__gdth_interrupt" has inline asm
KLEE: WARNING ONCE: function "sg_page" has inline asm
KLEE: WARNING ONCE: function "arch_local_irq_restore" has inline asm
KLEE: WARNING ONCE: function "pci_map_sg" has inline asm
KLEE: WARNING ONCE: function "gdth_pci_init_one" has inline asm
KLEE: WARNING ONCE: function "gdth_unlocked_ioctl" has inline asm
KLEE: WARNING ONCE: function "gdth_queuecommand" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_d87e5e65-73d1-413b-9b1a-2b89baf9fa23/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-xDus5W/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c:12910: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-xDus5W/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c:13101: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-xDus5W/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c:11810: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 14150 states (over memory cap)
KLEE: WARNING: killing 9642 states (over memory cap)
KLEE: WARNING: killing 8841 states (over memory cap)
KLEE: WARNING: killing 9178 states (over memory cap)
KLEE: WARNING: killing 8664 states (over memory cap)
KLEE: WARNING: killing 8855 states (over memory cap)
KLEE: WARNING: killing 8838 states (over memory cap)
KLEE: WARNING: killing 9028 states (over memory cap)
KLEE: WARNING: killing 9427 states (over memory cap)
KLEE: WARNING: killing 9061 states (over memory cap)
KLEE: WARNING: killing 9744 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-xDus5W/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "gdth_test_busy" has inline asm
KLEE: WARNING ONCE: function "gdth_scsi_done" has inline asm
KLEE: WARNING ONCE: function "gdth_set_sema0" has inline asm
KLEE: WARNING ONCE: function "gdth_copy_command" has inline asm
KLEE: WARNING ONCE: function "gdth_copy_internal_data" has inline asm
KLEE: WARNING ONCE: function "gdth_release_event" has inline asm
KLEE: WARNING ONCE: function "__gdth_interrupt" has inline asm
KLEE: WARNING ONCE: function "sg_page" has inline asm
KLEE: WARNING ONCE: function "arch_local_irq_restore" has inline asm
KLEE: WARNING ONCE: function "pci_map_sg" has inline asm
KLEE: WARNING ONCE: function "gdth_pci_init_one" has inline asm
KLEE: WARNING ONCE: function "gdth_unlocked_ioctl" has inline asm
KLEE: WARNING ONCE: function "gdth_queuecommand" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_d87e5e65-73d1-413b-9b1a-2b89baf9fa23/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-xDus5W/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c:12910: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-xDus5W/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c:13101: invalid function pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-xDus5W/linux-4.2-rc1.tar.xz-32_7a-drivers--scsi--gdth.ko-entry_point_true-unreach-call.cil.out.c:11810: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 14150 states (over memory cap)
KLEE: WARNING: killing 9642 states (over memory cap)
KLEE: WARNING: killing 8841 states (over memory cap)
KLEE: WARNING: killing 9178 states (over memory cap)
KLEE: WARNING: killing 8664 states (over memory cap)
KLEE: WARNING: killing 8855 states (over memory cap)
KLEE: WARNING: killing 8838 states (over memory cap)
KLEE: WARNING: killing 9028 states (over memory cap)
KLEE: WARNING: killing 9427 states (over memory cap)
KLEE: WARNING: killing 9061 states (over memory cap)
KLEE: WARNING: killing 9744 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f758ad62390
4  libc.so.6       0x00007f758a11b428 gsignal + 56
5  libc.so.6       0x00007f758a11d02a abort + 362
6  libc.so.6       0x00007f758a113bd7
7  libc.so.6       0x00007f758a113c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007f758a106830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 44.1939389706
