bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.7.3/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 76 230 1786 12371
Removed infinite loop in set_bit_to_user
Removed infinite loop in vhost_work_flush
Removed infinite loop in vhost_log_write
Removed infinite loop in vhost_get_vq_desc
INFO: Compilation, preparation and instrumentation time: 0.557154893875
Removed calls to '__init_waitqueue_head' (function is undefined)
Defining function noop_llseek as symbolic
Removed calls to 'fput' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Removed calls to 'remove_wait_queue' (function is undefined)
Removed calls to 'eventfd_ctx_put' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'mmput' (function is undefined)
Removed calls to 'prepare_to_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function lock_is_held as symbolic
Defining function kthread_stop as symbolic
Defining function eventfd_signal as symbolic
Removed calls to 'put_page' (function is undefined)
Defining function get_user_pages_fast as symbolic
Defining function set_page_dirty_lock as symbolic
Removed calls to '__wake_up' (function is undefined)
Defining function autoremove_wake_function as symbolic
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to 'mutex_lock' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function memcpy_toiovecend as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to '__list_add' (function is undefined)
Defining function wake_up_process as symbolic
Defining function copy_user_generic_unrolled as symbolic
Defining function copy_user_generic_string as symbolic
Defining function copy_user_enhanced_fast_string as symbolic
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Defining function rcu_is_cpu_idle as symbolic
Defining function memcpy_fromiovec as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Removed calls to 'add_wait_queue' (function is undefined)
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Removed calls to 'synchronize_sched' (function is undefined)
Defining function eventfd_fget as symbolic
Defining function eventfd_ctx_fileget as symbolic
Defining function get_task_mm as symbolic
Removed calls to 'use_mm' (function is undefined)
Removed calls to 'unuse_mm' (function is undefined)
Removed calls to '__list_del_entry' (function is undefined)
Defining function kthread_create_on_node as symbolic
Defining function cgroup_attach_task_all as symbolic
Defining function kthread_should_stop as symbolic
Defining function _copy_to_user as symbolic
Defining function fget as symbolic
Defining function tun_get_socket as symbolic
Defining function macvtap_get_socket as symbolic
Defining function sockfd_lookup as symbolic
Defining function _copy_from_user as symbolic
Defining function mutex_trylock as symbolic
Removed calls to 'ldv_handler_precall' (function is undefined)
Removed calls to 'ldv_check_return_value' (function is undefined)
Defining function misc_deregister as symbolic
Defining function misc_register as symbolic
Linked our definitions to these undefined functions:
  __kmalloc
  kfree
  __VERIFIER_error
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
INFO: After-slicing optimizations and preparation time: 0.543903112411
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 163 189 1079 7155
INFO: Starting verification
KLEE: WARNING ONCE: function "vhost_net_ioctl" has inline asm
KLEE: WARNING ONCE: function "vhost_work_flush" has inline asm
KLEE: WARNING ONCE: function "vhost_ubuf_put_and_wait" has inline asm
KLEE: WARNING ONCE: function "vhost_add_used" has inline asm
KLEE: WARNING ONCE: function "vhost_signal" has inline asm
KLEE: WARNING ONCE: function "log_write" has inline asm
KLEE: WARNING ONCE: function "kref_put" has inline asm
KLEE: WARNING ONCE: function "vhost_enable_notify" has inline asm
KLEE: WARNING ONCE: function "vhost_add_used_n" has inline asm
KLEE: WARNING ONCE: function "vhost_log_write" has inline asm
KLEE: WARNING ONCE: function "vhost_get_vq_desc" has inline asm
KLEE: WARNING ONCE: function "translate_desc" has inline asm
KLEE: WARNING ONCE: function "__vhost_add_used_n" has inline asm
KLEE: WARNING ONCE: function "vhost_update_used_flags" has inline asm
KLEE: WARNING ONCE: function "handle_tx" has inline asm
KLEE: WARNING ONCE: function "vhost_init_used" has inline asm
KLEE: WARNING ONCE: function "vhost_dev_ioctl" has inline asm
KLEE: WARNING ONCE: function "vhost_worker" has inline asm
KLEE: WARNING ONCE: function "vhost_attach_cgroups_work" has inline asm
KLEE: WARNING ONCE: function "vq_access_ok" has inline asm
KLEE: WARNING ONCE: function "log_access_ok" has inline asm
KLEE: WARNING ONCE: function "vq_memory_access_ok" has inline asm
KLEE: WARNING ONCE: function "vhost_dev_check_owner" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: flushing 9512 bytes on read, may be slow and/or crash: MO15[9512] allocated at global:
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:11080: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:5303: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:5303: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:5303: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:6550: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:10593: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:10593: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:11042: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:6939: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:5303: inline assembly is unsupported
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_0c5f92f4-61c6-4f5a-909c-5f3e18b2368b/symbiotic/lib/verifier/__VERIFIER_error.c:9: ASSERTION FAIL: verifier assertion failed
KLEE: NOTE: now ignoring this error at this location
Error found.
RESULT: false(unreach-call)

 --- Error trace ---

Error: ASSERTION FAIL: verifier assertion failed
File: /tmp/vcloud-vcloud-master/worker/working_dir_0c5f92f4-61c6-4f5a-909c-5f3e18b2368b/symbiotic/lib/verifier/__VERIFIER_error.c
Line: 9
assembly.ll line: 664
Stack: 
	#000000664 in __VERIFIER_error () at /tmp/vcloud-vcloud-master/worker/working_dir_0c5f92f4-61c6-4f5a-909c-5f3e18b2368b/symbiotic/lib/verifier/__VERIFIER_error.c:9
	#100002697 in ldv_error () at /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:11626
	#200006285 in ldv_mutex_lock_70 () at /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:12054
	#300001421 in vhost_net_ioctl (, , ) at /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:11047
	#400008434 in main () at /tmp/symbiotic-5URE3P/main1_false-unreach-call_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.c:11136

 --- ----------- ---
Generating witness: /tmp/vcloud-vcloud-master/worker/working_dir_0c5f92f4-61c6-4f5a-909c-5f3e18b2368b/symbiotic/witness.graphml
 -- ---- --
Symbolic objects:
nondet := len 8 bytes, |8 times 0x0|
nondet:1 := len 8 bytes, |8 times 0x0|
nondet:2 := len 8 bytes, |8 times 0x0|
nondet:3 := len 8 bytes, |8 times 0x0|
nondet:4 := len 8 bytes, |8 times 0x0|
nondet:5 := len 1 bytes, |0x0|
nondet:6 := len 4 bytes, |4 times 0x0|
nondet:7 := len 8 bytes, |8 times 0x0|
nondet:8 := len 8 bytes, |8 times 0x0|
nondet:9 := len 52 bytes, |52 times 0x0|
nondet:10 := len 144 bytes, |144 times 0x0|
nondet:11 := len 8 bytes, |8 times 0x0|
nondet:12 := len 8 bytes, |8 times 0x0|
nondet:13 := len 40 bytes, |40 times 0x0|
nondet:14 := len 8 bytes, |8 times 0x0|
nondet:15 := len 8 bytes, |8 times 0x0|
nondet:16 := len 8 bytes, |0x68|0x3b|0xda|0x3|4 times 0x0|
nondet:17 := len 8 bytes, |8 times 0x0|
nondet:18 := len 8 bytes, |8 times 0x0|
nondet:19 := len 8 bytes, |8 times 0x0|
nondet:20 := len 8 bytes, |8 times 0x0|
nondet:21 := len 8 bytes, |8 times 0x0|
nondet:22 := len 8 bytes, |8 times 0x0|
nondet:23 := len 16 bytes, |16 times 0x0|
nondet:24 := len 12 bytes, |12 times 0x0|
nondet:25 := len 56 bytes, |56 times 0x0|
nondet:26 := len 8 bytes, |8 times 0x0|
nondet:27 := len 8 bytes, |8 times 0x0|
nondet:28 := len 8 bytes, |8 times 0x0|
nondet:29 := len 8 bytes, |8 times 0x0|
nondet:30 := len 2 bytes, |2 times 0x0|
nondet:31 := len 1 bytes, |0x0|
nondet:32 := len 40 bytes, |40 times 0x0|
nondet:33 := len 8 bytes, |8 times 0x0|
nondet:34 := len 40 bytes, |40 times 0x0|
nondet:35 := len 1 bytes, |0x0|
nondet:36 := len 8 bytes, |8 times 0x0|
nondet:37 := len 8 bytes, |8 times 0x0|
nondet:38 := len 4 bytes, |0x0|0xaf|0x8|0x40|
nondet:39 := len 8 bytes, |8 times 0x0|
nondet:40 := len 8 bytes, |8 times 0x0|
nondet:41 := len 8 bytes, |8 times 0x0|
extern-global:rcu_lock_map := len 48 bytes, |48 times 0x0|
extern-global:current_task := len 9512 bytes, |9512 times 0x0|
extern-global:kernel_stack := len 8 bytes, |8 times 0x0|
extern-global:__this_module := len 600 bytes, |600 times 0x0|
main:tmp___1:11241 := len 4 bytes, |4 times 0x1|
main:tmp___0:11202 := len 4 bytes, |4 times 0x0|
malloc0 := len 35048 bytes, |35048 times 0x0|
main:tmp___1:11241:1 := len 4 bytes, |4 times 0x0|
main:tmp___0:11202:1 := len 4 bytes, |0x3|3 times 0x0|
 -- ---- --
INFO: Total time elapsed: 47.5355939865
