bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-consumption/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 348 632 6062 51206
Removed infinite loop in mlx4_ib_sqp_comp_worker
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in dma_sync_single_for_cpu
Removed infinite loop in dma_sync_single_for_device
Removed infinite loop in dma_sync_single_for_cpu___0
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in arch_local_save_flags
Removed infinite loop in dma_sync_single_for_device___0
Removed infinite loop in dma_unmap_single_attrs___0
Removed infinite loop in dma_map_single_attrs___0
INFO: Compilation, preparation and instrumentation time: 1.8973710537
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'mlx4_sync_pkey_table' (function is undefined)
Removed calls to 'flush_workqueue' (function is undefined)
Removed calls to 'ib_unregister_device' (function is undefined)
Removed calls to 'mlx4_counter_free' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to 'mlx4_uar_free' (function is undefined)
Removed calls to 'mlx4_pd_free' (function is undefined)
Removed calls to 'ib_dealloc_device' (function is undefined)
Removed calls to 'mlx4_release_eq' (function is undefined)
Removed calls to '__init_work' (function is undefined)
Removed calls to 'lockdep_init_map' (function is undefined)
Removed calls to 'ib_dispatch_event' (function is undefined)
Defining function rdma_port_get_link_layer as symbolic
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Defining function printk as symbolic
Defining function queue_work as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Removed calls to 'list_del' (function is undefined)
Defining function ib_create_cq as symbolic
Defining function ib_alloc_pd as symbolic
Defining function ib_get_dma_mr as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function ib_destroy_qp as symbolic
Defining function ib_dereg_mr as symbolic
Defining function ib_dealloc_pd as symbolic
Defining function ib_destroy_cq as symbolic
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Defining function ib_destroy_ah as symbolic
Removed calls to 'mlx4_buf_free' (function is undefined)
Removed calls to 'debug_dma_sync_single_for_cpu' (function is undefined)
Defining function radix_tree_lookup as symbolic
Removed calls to 'debug_dma_sync_single_for_device' (function is undefined)
Defining function dev_warn as symbolic
Defining function ib_get_cached_pkey as symbolic
Defining function ib_create_ah as symbolic
Defining function ib_find_cached_pkey as symbolic
Removed calls to 'rb_erase' (function is undefined)
Removed calls to 'idr_remove' (function is undefined)
Defining function idr_find as symbolic
Defining function schedule_delayed_work as symbolic
Removed calls to '__list_del_entry' (function is undefined)
Removed calls to 'mutex_lock' (function is undefined)
Removed calls to 'init_timer_key' (function is undefined)
Removed calls to '__list_add' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'sysfs_remove_file' (function is undefined)
Defining function cancel_delayed_work as symbolic
Defining function sprintf as symbolic
Removed calls to 'rb_insert_color' (function is undefined)
Defining function cancel_delayed_work_sync as symbolic
Defining function sysfs_create_file as symbolic
Defining function msecs_to_jiffies as symbolic
Defining function queue_delayed_work as symbolic
Defining function ib_query_ah as symbolic
Removed calls to 'rb_replace_node' (function is undefined)
Defining function idr_get_new_above as symbolic
Defining function idr_pre_get as symbolic
Defining function ib_create_qp as symbolic
Defining function ib_modify_qp as symbolic
Removed calls to 'debug_dma_map_page' (function is undefined)
Defining function __phys_addr as symbolic
Defining function rb_first as symbolic
Defining function rb_next as symbolic
Defining function mlx4_gen_slaves_port_mgt_ev as symbolic
Removed calls to 'mlx4_free_cmd_mailbox' (function is undefined)
Defining function mlx4_gen_guid_change_eqe as symbolic
Defining function mlx4_get_slave_port_state as symbolic
Defining function set_and_calc_slave_port_state as symbolic
Defining function mlx4_gen_port_state_change_eqe as symbolic
Defining function mlx4_alloc_cmd_mailbox as symbolic
Defining function __mlx4_cmd as symbolic
Defining function mlx4_is_slave_active as symbolic
Defining function mlx4_gen_pkey_eqe as symbolic
Removed calls to 'msleep' (function is undefined)
Removed calls to 'destroy_workqueue' (function is undefined)
Defining function unregister_netdevice_notifier as symbolic
Defining function mlx4_CLOSE_PORT as symbolic
Defining function ib_unregister_mad_agent as symbolic
Removed calls to 'flush_scheduled_work' (function is undefined)
Removed calls to 'ib_sa_cancel_query' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'ib_sa_unregister_client' (function is undefined)
Removed calls to 'kobject_put' (function is undefined)
Removed calls to 'sysfs_remove_group' (function is undefined)
Defining function dev_err as symbolic
Defining function ib_alloc_device as symbolic
Defining function mlx4_pd_alloc as symbolic
Defining function mlx4_uar_alloc as symbolic
Defining function strlcpy as symbolic
Removed calls to 'might_fault' (function is undefined)
Removed calls to 'mlx4_mtt_cleanup' (function is undefined)
Removed calls to 'ib_umem_release' (function is undefined)
Removed calls to 'mlx4_db_free' (function is undefined)
Removed calls to 'mlx4_srq_free' (function is undefined)
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to '_raw_spin_lock_nested' (function is undefined)
Removed calls to 'mlx4_qp_remove' (function is undefined)
Removed calls to 'mlx4_qp_free' (function is undefined)
Removed calls to 'mlx4_qp_release_range' (function is undefined)
Removed calls to 'ib_ud_header_init' (function is undefined)
Removed calls to 'mlx4_cq_free' (function is undefined)
Removed calls to 'mlx4_mr_free' (function is undefined)
Removed calls to 'debug_dma_alloc_coherent' (function is undefined)
Removed calls to 'warn_slowpath_null' (function is undefined)
Removed calls to 'debug_dma_free_coherent' (function is undefined)
Removed calls to 'rtnl_lock' (function is undefined)
Removed calls to 'rtnl_unlock' (function is undefined)
Removed calls to 'ib_free_send_mad' (function is undefined)
Removed calls to 'mlx4_fmr_unmap' (function is undefined)
Removed calls to 'mlx4_xrcd_free' (function is undefined)
Defining function mlx4_counter_alloc as symbolic
Defining function ib_register_device as symbolic
Removed calls to 'mlx4_put_slave_node_guid' (function is undefined)
Defining function register_netdevice_notifier as symbolic
Defining function device_create_file as symbolic
Defining function mlx4_get_protocol_dev as symbolic
Defining function vlan_dev_real_dev as symbolic
Removed calls to 'lock_acquire' (function is undefined)
Removed calls to 'lockdep_rcu_suspicious' (function is undefined)
Removed calls to 'lock_release' (function is undefined)
Defining function debug_lockdep_rcu_enabled as symbolic
Defining function rcu_is_cpu_idle as symbolic
Defining function vlan_dev_vlan_id as symbolic
Defining function rcu_lockdep_current_cpu_online as symbolic
Defining function lock_is_held as symbolic
Removed calls to 'idr_init' (function is undefined)
Removed calls to 'ib_sa_register_client' (function is undefined)
Defining function snprintf as symbolic
Defining function __alloc_workqueue_key as symbolic
Defining function kobject_get as symbolic
Defining function kobject_create_and_add as symbolic
Defining function kobject_init_and_add as symbolic
Defining function sysfs_create_group as symbolic
Defining function strncasecmp as symbolic
Defining function sscanf as symbolic
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'complete' (function is undefined)
Defining function ib_sa_guid_info_rec_query as symbolic
Defining function prandom_u32 as symbolic
Defining function ib_register_mad_agent as symbolic
Defining function mlx4_assign_eq as symbolic
Defining function mlx4_xrcd_alloc as symbolic
Defining function mlx4_fmr_free as symbolic
Defining function mlx4_SYNC_TPT as symbolic
Defining function mlx4_map_phys_fmr as symbolic
Defining function mlx4_fmr_alloc as symbolic
Defining function mlx4_fmr_enable as symbolic
Defining function ib_query_port as symbolic
Defining function ib_create_send_mad as symbolic
Defining function ib_post_send_mad as symbolic
Defining function mlx4_multicast_detach as symbolic
Defining function dev_mc_del as symbolic
Defining function mlx4_multicast_attach as symbolic
Defining function dev_mc_add as symbolic
Defining function mlx4_mr_alloc as symbolic
Defining function mlx4_mr_enable as symbolic
Defining function ib_umem_get as symbolic
Defining function ib_umem_page_count as symbolic
Removed calls to 'free_pages' (function is undefined)
Defining function __get_free_pages as symbolic
Defining function mlx4_write_mtt as symbolic
Defining function mlx4_cq_resize as symbolic
Defining function mlx4_buf_alloc as symbolic
Defining function mlx4_mtt_init as symbolic
Defining function mlx4_buf_write_mtt as symbolic
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Defining function _copy_from_user as symbolic
Defining function mlx4_cq_modify as symbolic
Defining function mlx4_db_alloc as symbolic
Defining function mlx4_cq_alloc as symbolic
Defining function _copy_to_user as symbolic
Defining function ib_get_cached_gid as symbolic
Defining function ib_ud_header_pack as symbolic
Defining function mlx4_get_parav_qkey as symbolic
Defining function mlx4_qp_modify as symbolic
Defining function mlx4_qp_query as symbolic
Defining function ib_modify_qp_is_ok as symbolic
Defining function mlx4_INIT_PORT as symbolic
Defining function mlx4_find_cached_vlan as symbolic
Defining function mlx4_qp_reserve_range as symbolic
Defining function mlx4_qp_alloc as symbolic
Defining function mlx4_srq_query as symbolic
Defining function mlx4_srq_arm as symbolic
Defining function mlx4_srq_alloc as symbolic
Defining function remap_pfn_range as symbolic
Defining function pgprot_writecombine as symbolic
Defining function ioremap_nocache as symbolic
Defining function mutex_trylock as symbolic
Removed calls to 'ldv_handler_precall' (function is undefined)
Removed calls to 'mlx4_unregister_interface' (function is undefined)
Defining function mlx4_register_interface as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strncpy
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_error
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
INFO: After-slicing optimizations and preparation time: 2.05842399597
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 585 493 3634 30458
INFO: Starting verification
KLEE: WARNING ONCE: function "mlx4_ib_add" has inline asm
KLEE: WARNING ONCE: function "clean_vf_mcast" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_sqp_comp_worker" has inline asm
KLEE: WARNING ONCE: function "ib_dma_unmap_single" has inline asm
KLEE: WARNING ONCE: function "ib_dma_sync_single_for_cpu___0" has inline asm
KLEE: WARNING ONCE: function "ib_dma_sync_single_for_device" has inline asm
KLEE: WARNING ONCE: function "acquire_group" has inline asm
KLEE: WARNING ONCE: function "release_group" has inline asm
KLEE: WARNING ONCE: function "queue_req" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_mcg_work_handler" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_mcg_timeout_handler" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_mcg_demux_handler" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_poll_cq" has inline asm
KLEE: WARNING ONCE: function "ib_dma_map_single" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_update_cache_on_guid_change" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_notify_slaves_on_guid_change" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_create_srq" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_post_srq_recv" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_modify_qp" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_post_send" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_post_recv" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_create_cq" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_resize_cq" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_arm_cq" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_reg_user_mr" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_free_fast_reg_page_list" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_mcg_detach" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_unmap_fmr" has inline asm
KLEE: WARNING ONCE: function "update_ipv6_gids" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_add_mc" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_get_cq_umem" has inline asm
KLEE: WARNING ONCE: function "build_sriov_qp0_header" has inline asm
KLEE: WARNING ONCE: function "build_tunnel_header" has inline asm
KLEE: WARNING ONCE: function "pad_wraparound" has inline asm
KLEE: WARNING ONCE: function "__mlx4_ib_cq_clean" has inline asm
KLEE: WARNING ONCE: function "create_qp_common" has inline asm
KLEE: WARNING ONCE: function "mlx4_ib_get_new_demux_tid" has inline asm
KLEE: WARNING: undefined reference to function: delayed_work_timer_fn
KLEE: WARNING ONCE: flushing 4176 bytes on read, may be slow and/or crash: MO17[4176] allocated at global:init_net
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:12896: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:12896: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:12904: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:11189: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:16544: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:16571: memory error: object read only
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:16571: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:16544: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-TDw0mb/32_7a_cilled_true-unreach-call_linux-3.8-rc1-32_7a-drivers--infiniband--hw--mlx4--mlx4_ib.ko-ldv_main4_sequence_infinite_withcheck_stateful.cil.out.c:16078: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
