bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-32_7a-drivers--gpu--drm--ast--ast.ko-entry_point_false-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 165 444 3264 19960
Removed infinite loop in arch_local_save_flags
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.851880073547
Removed calls to 'ttm_pool_unpopulate' (function is undefined)
Removed calls to 'drm_err' (function is undefined)
Removed calls to 'iowrite16' (function is undefined)
Removed calls to 'iowrite32' (function is undefined)
Removed calls to 'iowrite8' (function is undefined)
Removed calls to 'drm_mode_config_init' (function is undefined)
Removed calls to 'ttm_bo_kunmap' (function is undefined)
Removed calls to 'drm_mode_config_cleanup' (function is undefined)
Removed calls to 'pci_iounmap' (function is undefined)
Defining function drm_pci_set_busid as symbolic
Removed calls to 'ttm_bo_unref' (function is undefined)
Removed calls to 'drm_gem_object_free' (function is undefined)
Defining function drm_gem_dumb_destroy as symbolic
Removed calls to 'mutex_lock' (function is undefined)
Defining function drm_gem_object_lookup as symbolic
Removed calls to 'mutex_unlock' (function is undefined)
Defining function drm_gem_handle_create as symbolic
Defining function drm_gem_object_init as symbolic
Defining function ttm_bo_dma_acc_size as symbolic
Removed calls to 'drm_gem_object_release' (function is undefined)
Defining function ttm_bo_init as symbolic
Removed calls to 'fb_dealloc_cmap' (function is undefined)
Removed calls to 'framebuffer_release' (function is undefined)
Removed calls to 'drm_fb_helper_fini' (function is undefined)
Removed calls to 'vfree' (function is undefined)
Removed calls to 'drm_framebuffer_unregister_private' (function is undefined)
Removed calls to 'drm_framebuffer_cleanup' (function is undefined)
Removed calls to 'drm_global_item_unref' (function is undefined)
Removed calls to 'arch_phys_wc_del' (function is undefined)
Defining function ttm_bo_device_release as symbolic
Defining function unregister_framebuffer as symbolic
Defining function pci_iomap as symbolic
Defining function printk as symbolic
Removed calls to '__const_udelay' (function is undefined)
Removed calls to '__udelay' (function is undefined)
Removed calls to 'drm_ut_debug_printk' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to 'drm_fb_helper_prepare' (function is undefined)
Removed calls to 'drm_helper_disable_unused_functions' (function is undefined)
Defining function drm_fb_helper_init as symbolic
Defining function drm_fb_helper_single_add_all_connectors as symbolic
Defining function drm_fb_helper_initial_config as symbolic
Defining function drm_connector_init as symbolic
Defining function drm_connector_register as symbolic
Defining function drm_mode_connector_attach_encoder as symbolic
Defining function snprintf as symbolic
Defining function i2c_bit_add_bus as symbolic
Defining function ioread8 as symbolic
Defining function drm_encoder_init as symbolic
Defining function drm_crtc_init as symbolic
Defining function drm_mode_crtc_set_gamma_size as symbolic
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'ttm_bo_del_sub_from_lru' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to 'ttm_bo_add_to_lru' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Removed calls to 'ww_mutex_unlock' (function is undefined)
Defining function ttm_bo_kmap as symbolic
Defining function ttm_bo_validate as symbolic
Defining function mutex_lock_interruptible as symbolic
Defining function mutex_trylock as symbolic
Defining function ttm_bo_device_init as symbolic
Defining function ttm_bo_init_mm as symbolic
Defining function arch_phys_wc_add as symbolic
Removed calls to 'ttm_mem_global_release' (function is undefined)
Defining function drm_global_item_ref as symbolic
Defining function ttm_bo_global_init as symbolic
Defining function ttm_mem_global_init as symbolic
Defining function ioread32 as symbolic
Defining function pci_bus_write_config_dword as symbolic
Defining function pci_bus_read_config_dword as symbolic
Defining function drm_read as symbolic
Defining function drm_poll as symbolic
Defining function drm_ioctl as symbolic
Defining function drm_compat_ioctl as symbolic
Defining function drm_open as symbolic
Defining function drm_release as symbolic
Defining function ttm_bo_mmap as symbolic
Removed calls to 'drm_put_dev' (function is undefined)
Defining function drm_get_pci_dev as symbolic
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'drm_kms_helper_poll_enable' (function is undefined)
Removed calls to 'drm_kms_helper_poll_disable' (function is undefined)
Removed calls to 'console_lock' (function is undefined)
Removed calls to 'fb_set_suspend' (function is undefined)
Removed calls to 'console_unlock' (function is undefined)
Defining function pci_save_state as symbolic
Removed calls to 'drm_mode_config_reset' (function is undefined)
Removed calls to 'drm_helper_resume_force_mode' (function is undefined)
Defining function pci_enable_device as symbolic
Defining function pci_set_power_state as symbolic
Removed calls to 'drm_helper_mode_fill_fb_struct' (function is undefined)
Defining function drm_framebuffer_init as symbolic
Removed calls to 'drm_crtc_cleanup' (function is undefined)
Defining function drm_crtc_helper_set_config as symbolic
Defining function drm_mode_vrefresh as symbolic
Removed calls to 'msleep' (function is undefined)
Removed calls to 'drm_encoder_cleanup' (function is undefined)
Defining function drm_helper_probe_single_connector_modes as symbolic
Removed calls to 'i2c_del_adapter' (function is undefined)
Removed calls to 'drm_connector_unregister' (function is undefined)
Removed calls to 'drm_connector_cleanup' (function is undefined)
Defining function drm_mode_object_find as symbolic
Defining function drm_get_edid as symbolic
Defining function drm_mode_connector_update_edid_property as symbolic
Defining function drm_add_edid_modes as symbolic
Removed calls to 'drm_fb_get_bpp_depth' (function is undefined)
Removed calls to 'drm_fb_helper_fill_fix' (function is undefined)
Removed calls to 'drm_fb_helper_fill_var' (function is undefined)
Defining function drm_mode_legacy_fb_format as symbolic
Defining function vmalloc as symbolic
Defining function framebuffer_alloc as symbolic
Defining function fb_alloc_cmap as symbolic
Defining function drm_fb_helper_check_var as symbolic
Defining function drm_fb_helper_set_par as symbolic
Defining function drm_fb_helper_setcmap as symbolic
Defining function drm_fb_helper_blank as symbolic
Defining function drm_fb_helper_pan_display as symbolic
Removed calls to 'sys_fillrect' (function is undefined)
Removed calls to 'sys_copyarea' (function is undefined)
Removed calls to 'sys_imageblit' (function is undefined)
Defining function drm_fb_helper_debug_enter as symbolic
Defining function drm_fb_helper_debug_leave as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'ttm_tt_fini' (function is undefined)
Defining function drm_vma_node_is_allowed as symbolic
Defining function ttm_bo_move_memcpy as symbolic
Defining function ttm_pool_populate as symbolic
Defining function ttm_tt_init as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'drm_pci_exit' (function is undefined)
Defining function ldv_suspend_late_16 as symbolic
Defining function ldv_restore_early_16 as symbolic
Defining function ldv_resume_early_16 as symbolic
Defining function ldv_thaw_early_16 as symbolic
Defining function ldv_resume_noirq_16 as symbolic
Defining function ldv_freeze_noirq_16 as symbolic
Defining function ldv_prepare_16 as symbolic
Defining function ldv_freeze_late_16 as symbolic
Defining function ldv_thaw_noirq_16 as symbolic
Defining function ldv_poweroff_noirq_16 as symbolic
Defining function ldv_poweroff_late_16 as symbolic
Defining function ldv_restore_noirq_16 as symbolic
Defining function ldv_suspend_noirq_16 as symbolic
Defining function ldv_complete_16 as symbolic
Defining function ldv_shutdown_15 as symbolic
Removed calls to 'drm_helper_connector_dpms' (function is undefined)
Defining function ldv_probe_5 as symbolic
Defining function ldv_release_10 as symbolic
Defining function ldv_bind_10 as symbolic
Defining function ldv_connect_10 as symbolic
Defining function ldv_probe_8 as symbolic
Defining function ldv_probe_12 as symbolic
Defining function ldv_probe_9 as symbolic
Defining function vgacon_text_force as symbolic
Defining function drm_pci_init as symbolic
Defining function ldv_probe_2 as symbolic
Defining function request_firmware as symbolic
Linked our definitions to these undefined functions:
  strcpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.912608861923
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 265 433 1967 10801
INFO: Starting verification
KLEE: WARNING ONCE: function "ast_dumb_mmap_offset" has inline asm
KLEE: WARNING ONCE: function "ast_cursor_set" has inline asm
KLEE: WARNING ONCE: function "ast_cursor_move" has inline asm
KLEE: WARNING ONCE: function "ast_dirty_update" has inline asm
KLEE: WARNING: undefined reference to function: drm_helper_connector_dpms
KLEE: WARNING: undefined reference to function: ttm_bo_global_release
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_718b2743-a6c6-4286-8cfa-54b67a8e0d80/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 25267 states (over memory cap)
KLEE: WARNING: killing 17610 states (over memory cap)
KLEE: WARNING: killing 18950 states (over memory cap)
KLEE: WARNING: killing 17964 states (over memory cap)
KLEE: WARNING: killing 18940 states (over memory cap)
KLEE: WARNING: killing 18169 states (over memory cap)
KLEE: WARNING: killing 17841 states (over memory cap)
KLEE: WARNING: killing 18664 states (over memory cap)
KLEE: WARNING: killing 18338 states (over memory cap)
KLEE: WARNING: killing 19751 states (over memory cap)
KLEE: WARNING: killing 20504 states (over memory cap)
KLEE: WARNING: killing 20756 states (over memory cap)
KLEE: WARNING: killing 19648 states (over memory cap)
KLEE: WARNING: killing 20413 states (over memory cap)
KLEE: WARNING: killing 22733 states (over memory cap)
KLEE: WARNING: killing 23147 states (over memory cap)
KLEE: WARNING: killing 21335 states (over memory cap)
KLEE: WARNING: killing 21947 states (over memory cap)
KLEE: WARNING: killing 21497 states (over memory cap)
KLEE: WARNING: killing 22327 states (over memory cap)
KLEE: WARNING: killing 20954 states (over memory cap)
KLEE: WARNING: killing 21497 states (over memory cap)
KLEE: WARNING: killing 21538 states (over memory cap)
KLEE: WARNING: killing 20022 states (over memory cap)
KLEE: WARNING: killing 21264 states (over memory cap)
KLEE: WARNING: killing 21727 states (over memory cap)
KLEE: WARNING: killing 20431 states (over memory cap)
KLEE: WARNING: killing 20550 states (over memory cap)
KLEE: WARNING: killing 21429 states (over memory cap)
KLEE: WARNING: killing 21200 states (over memory cap)
KLEE: WARNING: killing 21166 states (over memory cap)
KLEE: WARNING: killing 21565 states (over memory cap)
KLEE: WARNING: killing 21686 states (over memory cap)
KLEE: WARNING: killing 20957 states (over memory cap)
KLEE: WARNING: killing 21289 states (over memory cap)
KLEE: WARNING: killing 21052 states (over memory cap)
KLEE: WARNING: killing 21240 states (over memory cap)
KLEE: WARNING: killing 20932 states (over memory cap)
KLEE: WARNING: killing 21392 states (over memory cap)
KLEE: WARNING: killing 20879 states (over memory cap)
KLEE: WARNING: killing 21481 states (over memory cap)
KLEE: WARNING: killing 22086 states (over memory cap)
KLEE: WARNING: killing 21020 states (over memory cap)
KLEE: WARNING: killing 21068 states (over memory cap)
KLEE: WARNING: killing 21248 states (over memory cap)
KLEE: WARNING: killing 19909 states (over memory cap)
KLEE: WARNING: killing 22092 states (over memory cap)
KLEE: WARNING: killing 21316 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-4v8K7J/linux-4.2-rc1.tar.xz-32_7a-drivers--gpu--drm--ast--ast.ko-entry_point_false-unreach-call.cil.out.c:7733: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 21485 states (over memory cap)
KLEE: WARNING: killing 21530 states (over memory cap)
KLEE: WARNING: killing 21573 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-4v8K7J/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "ast_dumb_mmap_offset" has inline asm
KLEE: WARNING ONCE: function "ast_cursor_set" has inline asm
KLEE: WARNING ONCE: function "ast_cursor_move" has inline asm
KLEE: WARNING ONCE: function "ast_dirty_update" has inline asm
KLEE: WARNING: undefined reference to function: drm_helper_connector_dpms
KLEE: WARNING: undefined reference to function: ttm_bo_global_release
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_718b2743-a6c6-4286-8cfa-54b67a8e0d80/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 25267 states (over memory cap)
KLEE: WARNING: killing 17610 states (over memory cap)
KLEE: WARNING: killing 18950 states (over memory cap)
KLEE: WARNING: killing 17964 states (over memory cap)
KLEE: WARNING: killing 18940 states (over memory cap)
KLEE: WARNING: killing 18169 states (over memory cap)
KLEE: WARNING: killing 17841 states (over memory cap)
KLEE: WARNING: killing 18664 states (over memory cap)
KLEE: WARNING: killing 18338 states (over memory cap)
KLEE: WARNING: killing 19751 states (over memory cap)
KLEE: WARNING: killing 20504 states (over memory cap)
KLEE: WARNING: killing 20756 states (over memory cap)
KLEE: WARNING: killing 19648 states (over memory cap)
KLEE: WARNING: killing 20413 states (over memory cap)
KLEE: WARNING: killing 22733 states (over memory cap)
KLEE: WARNING: killing 23147 states (over memory cap)
KLEE: WARNING: killing 21335 states (over memory cap)
KLEE: WARNING: killing 21947 states (over memory cap)
KLEE: WARNING: killing 21497 states (over memory cap)
KLEE: WARNING: killing 22327 states (over memory cap)
KLEE: WARNING: killing 20954 states (over memory cap)
KLEE: WARNING: killing 21497 states (over memory cap)
KLEE: WARNING: killing 21538 states (over memory cap)
KLEE: WARNING: killing 20022 states (over memory cap)
KLEE: WARNING: killing 21264 states (over memory cap)
KLEE: WARNING: killing 21727 states (over memory cap)
KLEE: WARNING: killing 20431 states (over memory cap)
KLEE: WARNING: killing 20550 states (over memory cap)
KLEE: WARNING: killing 21429 states (over memory cap)
KLEE: WARNING: killing 21200 states (over memory cap)
KLEE: WARNING: killing 21166 states (over memory cap)
KLEE: WARNING: killing 21565 states (over memory cap)
KLEE: WARNING: killing 21686 states (over memory cap)
KLEE: WARNING: killing 20957 states (over memory cap)
KLEE: WARNING: killing 21289 states (over memory cap)
KLEE: WARNING: killing 21052 states (over memory cap)
KLEE: WARNING: killing 21240 states (over memory cap)
KLEE: WARNING: killing 20932 states (over memory cap)
KLEE: WARNING: killing 21392 states (over memory cap)
KLEE: WARNING: killing 20879 states (over memory cap)
KLEE: WARNING: killing 21481 states (over memory cap)
KLEE: WARNING: killing 22086 states (over memory cap)
KLEE: WARNING: killing 21020 states (over memory cap)
KLEE: WARNING: killing 21068 states (over memory cap)
KLEE: WARNING: killing 21248 states (over memory cap)
KLEE: WARNING: killing 19909 states (over memory cap)
KLEE: WARNING: killing 22092 states (over memory cap)
KLEE: WARNING: killing 21316 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-4v8K7J/linux-4.2-rc1.tar.xz-32_7a-drivers--gpu--drm--ast--ast.ko-entry_point_false-unreach-call.cil.out.c:7733: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 21485 states (over memory cap)
KLEE: WARNING: killing 21530 states (over memory cap)
KLEE: WARNING: killing 21573 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f6743d30390
4  libc.so.6       0x00007f67430e9428 gsignal + 56
5  libc.so.6       0x00007f67430eb02a abort + 362
6  libc.so.6       0x00007f67430e1bd7
7  libc.so.6       0x00007f67430e1c82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007f67430d4830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 226.04068017
