bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 165 88 1295 7098
Removed infinite loop in ldv_stop
INFO: Compilation, preparation and instrumentation time: 0.300791978836
Removed calls to '__mutex_init' (function is undefined)
Removed calls to 'release_firmware' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'dev_set_drvdata' (function is undefined)
Removed calls to '__kfifo_free' (function is undefined)
Removed calls to 'usb_kill_urb' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Removed calls to 'interruptible_sleep_on' (function is undefined)
Removed calls to 'tty_encode_baud_rate' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Removed calls to 'tty_wakeup' (function is undefined)
Removed calls to 'tty_kref_put' (function is undefined)
Removed calls to 'tty_flip_buffer_push' (function is undefined)
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function printk as symbolic
Defining function dev_err as symbolic
Defining function tty_port_tty_get as symbolic
Defining function _raw_spin_lock_irqsave as symbolic
Defining function __kfifo_out as symbolic
Defining function usb_submit_urb as symbolic
Defining function tty_insert_flip_string_fixed_flag as symbolic
Defining function dev_get_drvdata as symbolic
Defining function usb_control_msg as symbolic
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to 'add_wait_queue' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Removed calls to 'remove_wait_queue' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Defining function schedule_timeout as symbolic
Defining function msleep_interruptible as symbolic
Defining function default_wake_function as symbolic
Defining function tty_get_baud_rate as symbolic
Defining function _copy_to_user as symbolic
Defining function _copy_from_user as symbolic
Defining function __kfifo_in as symbolic
Defining function mutex_lock_interruptible_nested as symbolic
Defining function usb_clear_halt as symbolic
Defining function usb_match_id as symbolic
Defining function usb_reset_device as symbolic
Defining function usb_driver_set_configuration as symbolic
Defining function __kfifo_alloc as symbolic
Defining function sprintf as symbolic
Defining function request_firmware as symbolic
Defining function usb_bulk_msg as symbolic
Defining function usb_serial_probe as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'usb_serial_deregister' (function is undefined)
Removed calls to 'usb_serial_disconnect' (function is undefined)
Defining function ldv_detach_1 as symbolic
Defining function ldv_probe_1 as symbolic
Defining function ldv_detach_2 as symbolic
Defining function ldv_probe_2 as symbolic
Defining function usb_register_driver as symbolic
Defining function usb_serial_register as symbolic
Removed calls to 'usb_deregister' (function is undefined)
Linked our definitions to these undefined functions:
  strcpy
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_uint_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 0.306887149811
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 195 92 586 3776
INFO: Starting verification
KLEE: WARNING ONCE: function "ti_ioctl" has inline asm
KLEE: WARNING ONCE: function "ti_drain" has inline asm
KLEE: WARNING: undefined reference to function: usb_serial_disconnect
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_bcf30c40-c631-4faf-a9ee-2b64d251dcd2/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 10070 states (over memory cap)
KLEE: WARNING: killing 9219 states (over memory cap)
KLEE: WARNING: killing 8954 states (over memory cap)
KLEE: WARNING: killing 9209 states (over memory cap)
KLEE: WARNING: killing 9703 states (over memory cap)
KLEE: WARNING: killing 9620 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:5650: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:5050: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 9887 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:5487: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:4960: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING: killing 9983 states (over memory cap)
KLEE: ERROR: /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:5386: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:5427: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_bcf30c40-c631-4faf-a9ee-2b64d251dcd2/symbiotic/lib/verifier/__VERIFIER_error.c:9: ASSERTION FAIL: verifier assertion failed
KLEE: NOTE: now ignoring this error at this location
Error found.
RESULT: false(unreach-call)

 --- Error trace ---

Error: ASSERTION FAIL: verifier assertion failed
File: /tmp/vcloud-vcloud-master/worker/working_dir_bcf30c40-c631-4faf-a9ee-2b64d251dcd2/symbiotic/lib/verifier/__VERIFIER_error.c
Line: 9
assembly.ll line: 563
Stack: 
	#000000563 in __VERIFIER_error () at /tmp/vcloud-vcloud-master/worker/working_dir_bcf30c40-c631-4faf-a9ee-2b64d251dcd2/symbiotic/lib/verifier/__VERIFIER_error.c:9
	#100003687 in ldv_error () at /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:4069
	#200005019 in ldv_s_der () at /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:7703
	#300004356 in main () at /tmp/symbiotic-ZdV1M_/linux-stable-5742d35-1-136_1a-drivers--usb--serial--ti_usb_3410_5052.ko-entry_point_false-unreach-call.cil.out.c:7629

 --- ----------- ---
Generating witness: /tmp/vcloud-vcloud-master/worker/working_dir_bcf30c40-c631-4faf-a9ee-2b64d251dcd2/symbiotic/witness.graphml
 -- ---- --
Symbolic objects:
nondet := len 8 bytes, |8 times 0x0|
nondet:1 := len 8 bytes, |8 times 0x0|
nondet:2 := len 8 bytes, |8 times 0x0|
nondet:3 := len 8 bytes, |8 times 0x0|
nondet:4 := len 4 bytes, |4 times 0x0|
nondet:5 := len 8 bytes, |8 times 0x0|
nondet:6 := len 8 bytes, |8 times 0x0|
nondet:7 := len 72 bytes, |72 times 0x0|
nondet:8 := len 8 bytes, |8 times 0x0|
nondet:9 := len 8 bytes, |8 times 0x0|
nondet:10 := len 8 bytes, |8 times 0x0|
nondet:11 := len 8 bytes, |8 times 0x0|
nondet:12 := len 40 bytes, |40 times 0x0|
nondet:13 := len 8 bytes, |8 times 0x0|
nondet:14 := len 2 bytes, |2 times 0x0|
nondet:15 := len 8 bytes, |8 times 0x0|
nondet:16 := len 8 bytes, |8 times 0x0|
nondet:17 := len 8 bytes, |8 times 0x0|
nondet:18 := len 1 bytes, |0x0|
nondet:19 := len 8 bytes, |8 times 0x0|
nondet:20 := len 8 bytes, |8 times 0x0|
nondet:21 := len 8 bytes, |8 times 0x0|
nondet:22 := len 44 bytes, |44 times 0x0|
nondet:23 := len 8 bytes, |8 times 0x0|
nondet:24 := len 8 bytes, |8 times 0x0|
nondet:25 := len 8 bytes, |8 times 0x0|
nondet:26 := len 8 bytes, |8 times 0x0|
nondet:27 := len 8 bytes, |8 times 0x0|
nondet:28 := len 8 bytes, |8 times 0x0|
nondet:29 := len 8 bytes, |8 times 0x0|
nondet:30 := len 8 bytes, |8 times 0x0|
nondet:31 := len 8 bytes, |8 times 0x0|
nondet:32 := len 8 bytes, |8 times 0x0|
nondet:33 := len 4 bytes, |4 times 0x0|
nondet:34 := len 8 bytes, |8 times 0x0|
extern-global:current_task := len 9672 bytes, |9672 times 0x0|
extern-global:jiffies := len 8 bytes, |8 times 0x0|
extern-global:__this_module := len 600 bytes, |600 times 0x0|
ldv_zalloc:tmp___0:4025 := len 4 bytes, |4 times 0x0|
calloc0 := len 44 bytes, |44 times 0x0|
main:tmp___0:6675 := len 4 bytes, |4 times 0x0|
main:tmp___1:6677 := len 4 bytes, |4 times 0x0|
main:tmp___2:6679 := len 8 bytes, |8 times 0x0|
main:tmp___3:6681 := len 4 bytes, |4 times 0x0|
main:tmp___4:6683 := len 4 bytes, |4 times 0x0|
main:tmp___5:6685 := len 4 bytes, |4 times 0x0|
ldv_zalloc:tmp___0:4025:1 := len 4 bytes, |4 times 0x0|
calloc0:1 := len 1 bytes, |0x0|
ldv_zalloc:tmp___0:4025:2 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:3 := len 4 bytes, |4 times 0x1|
main:tmp___9:6693 := len 4 bytes, |4 times 0x0|
ldv_zalloc:tmp___0:4025:4 := len 4 bytes, |4 times 0x1|
main:tmp___11:6697 := len 4 bytes, |4 times 0x0|
main:tmp___12:6699 := len 8 bytes, |8 times 0x0|
main:tmp___13:6701 := len 4 bytes, |4 times 0x0|
main:tmp___14:6703 := len 4 bytes, |4 times 0x0|
main:tmp___15:6705 := len 4 bytes, |4 times 0x0|
main:tmp___16:6714 := len 4 bytes, |0x1|3 times 0x0|
main:tmp___18:7100 := len 4 bytes, |0x1|3 times 0x0|
ldv_zalloc:tmp___0:4025:5 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:6 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:7 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:8 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:9 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:10 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:11 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:12 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:13 := len 4 bytes, |4 times 0x1|
ldv_zalloc:tmp___0:4025:14 := len 4 bytes, |4 times 0x1|
main:tmp___16:6714:1 := len 4 bytes, |0x1|3 times 0x0|
main:tmp___18:7100:1 := len 4 bytes, |4 times 0x0|
 -- ---- --
INFO: Total time elapsed: 65.2829790115
