bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 68 55 746 3610
Removed infinite loop in ldv_assume_stop
INFO: Compilation, preparation and instrumentation time: 0.302207946777
Defining function usb_register_driver as symbolic
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'usb_deregister_dev' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'usb_kill_urb' (function is undefined)
Removed calls to '__wake_up' (function is undefined)
Defining function _dev_info as symbolic
Defining function printk as symbolic
Defining function dev_set_drvdata as symbolic
Defining function dev_get_drvdata as symbolic
Defining function dev_err as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function usb_string as symbolic
Defining function usb_control_msg as symbolic
Defining function usb_register_dev as symbolic
Defining function usb_submit_urb as symbolic
Defining function ldv_undefined_pointer as symbolic
Defining function kasprintf as symbolic
Defining function noop_llseek as symbolic
Removed calls to 'prepare_to_wait' (function is undefined)
Removed calls to 'schedule' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'might_fault' (function is undefined)
Defining function usb_find_interface as symbolic
Removed calls to 'warn_slowpath_fmt' (function is undefined)
Defining function _copy_to_user as symbolic
Defining function _copy_from_user as symbolic
Defining function autoremove_wake_function as symbolic
Removed calls to 'usb_deregister' (function is undefined)
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'ldv_check_return_value' (function is undefined)
Linked our definitions to these undefined functions:
  memcmp
  strlen
  __kmalloc
  __memcpy
  kfree
  __VERIFIER_error
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
INFO: After-slicing optimizations and preparation time: 0.211477994919
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 120 49 288 1948
INFO: Starting verification
KLEE: WARNING ONCE: function "iowarrior_read" has inline asm
KLEE: WARNING ONCE: function "iowarrior_write" has inline asm
KLEE: WARNING ONCE: function "iowarrior_write_callback" has inline asm
KLEE: WARNING ONCE: flushing 9608 bytes on read, may be slow and/or crash: MO17[9608] allocated at global:
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:3648: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:4725: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:4732: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:5049: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:5051: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: ERROR: concretized symbolic size to 2^17,analysis may be unsound
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: Large alloc: 1819042157 bytes.  KLEE may run out of memory.
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:4914: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
klee: /var/xchalup4/symbiotic/klee/lib/Solver/CexCachingSolver.cpp:274: virtual bool CexCachingSolver::computeValidity(const klee::Query&, klee::Solver::Validity&): Assertion `a && "computeValidity() must have assignment"' failed.
KLEE: output directory is "/tmp/symbiotic-4emkhm/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "iowarrior_read" has inline asm
KLEE: WARNING ONCE: function "iowarrior_write" has inline asm
KLEE: WARNING ONCE: function "iowarrior_write_callback" has inline asm
KLEE: WARNING ONCE: flushing 9608 bytes on read, may be slow and/or crash: MO17[9608] allocated at global:
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:3648: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:4725: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:4732: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:5049: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:5051: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: ERROR: concretized symbolic size to 2^17,analysis may be unsound
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: WARNING ONCE: Large alloc: 1819042157 bytes.  KLEE may run out of memory.
KLEE: ERROR: /tmp/symbiotic-4emkhm/usb_urb-drivers-usb-misc-iowarrior.ko_false-unreach-call.cil.out.i.pp.i:4914: memory error: out of bound pointer
KLEE: NOTE: now ignoring this error at this location
klee: /var/xchalup4/symbiotic/klee/lib/Solver/CexCachingSolver.cpp:274: virtual bool CexCachingSolver::computeValidity(const klee::Query&, klee::Solver::Validity&): Assertion `a && "computeValidity() must have assignment"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007f6630201390
4  libc.so.6       0x00007f662f5ba428 gsignal + 56
5  libc.so.6       0x00007f662f5bc02a abort + 362
6  libc.so.6       0x00007f662f5b2bd7
7  libc.so.6       0x00007f662f5b2c82
8  klee            0x0000000000a20525 CexCachingSolver::computeValidity(klee::Query const&, klee::Solver::Validity&) + 1557
9  klee            0x0000000000a1d6a3 CachingSolver::computeValidity(klee::Query const&, klee::Solver::Validity&) + 115
10 klee            0x0000000000a30762 IndependentSolver::computeValidity(klee::Query const&, klee::Solver::Validity&) + 322
11 klee            0x00000000006013e7 klee::TimingSolver::evaluate(klee::ExecutionState const&, klee::ref<klee::Expr>, klee::Solver::Validity&) + 359
12 klee            0x00000000005cf531 klee::Executor::fork(klee::ExecutionState&, klee::ref<klee::Expr>, bool) + 289
13 klee            0x00000000005d748a klee::Executor::executeInstruction(klee::ExecutionState&, klee::KInstruction*) + 10090
14 klee            0x00000000005da8c5 klee::Executor::run(klee::ExecutionState&) + 2117
15 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
16 klee            0x0000000000593c63 main + 8867
17 libc.so.6       0x00007f662f5a5830 __libc_start_main + 240
18 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 276.21645689
