bin/symbiotic --witness witness.graphml --no-slice --no-prepare --prp=../sv-benchmarks/c/Systems_DeviceDriversLinux64_ReachSafety.prp ../sv-benchmarks/c/ldv-linux-4.2-rc1/linux-4.2-rc1.tar.xz-08_1a-drivers--staging--rts5208--rts5208.ko-entry_point_true-unreach-call.cil.out.c


--------------------------------------------------------------------------------


5.0.0-KLEE:86e6f6f8-dg:03407af1-symbiotic:a8aa8ad6-minisat:3db58943-stp:17249213-sbt-instrumentation:dd7e4312
INFO: After compilation stats: Globals/Functions/Blocks/Instr.: 738 485 11515 74583
Removed infinite loop in dma_map_single_attrs
Removed infinite loop in dma_unmap_single_attrs
Removed infinite loop in dma_map_sg_attrs
Removed infinite loop in dma_unmap_sg_attrs
Removed infinite loop in sg_page
Removed infinite loop in ldv_stop
Removed infinite loop in ldv_module_put_and_exit
INFO: Compilation, preparation and instrumentation time: 2.54645609856
Removed calls to 'dev_err' (function is undefined)
Removed calls to 'pci_disable_device' (function is undefined)
Removed calls to 'pci_release_regions' (function is undefined)
Removed calls to '__raw_spin_lock_init' (function is undefined)
Removed calls to '__mutex_init' (function is undefined)
Removed calls to '__init_waitqueue_head' (function is undefined)
Removed calls to '_dev_info' (function is undefined)
Removed calls to 'pci_set_master' (function is undefined)
Removed calls to 'synchronize_irq' (function is undefined)
Removed calls to 'complete' (function is undefined)
Removed calls to 'mutex_lock_nested' (function is undefined)
Removed calls to 'free_irq' (function is undefined)
Removed calls to 'pci_disable_msi' (function is undefined)
Removed calls to 'mutex_unlock' (function is undefined)
Removed calls to 'pci_restore_state' (function is undefined)
Removed calls to 'iowrite32' (function is undefined)
Defining function schedule_timeout as symbolic
Removed calls to 'getnstimeofday64' (function is undefined)
Defining function ioread32 as symbolic
Removed calls to 'vfree' (function is undefined)
Removed calls to '_raw_spin_lock_irq' (function is undefined)
Removed calls to '_raw_spin_unlock_irq' (function is undefined)
Defining function wait_for_completion_interruptible_timeout as symbolic
Defining function __msecs_to_jiffies as symbolic
Removed calls to '__const_udelay' (function is undefined)
Defining function vmalloc as symbolic
Defining function pci_set_power_state as symbolic
Defining function pci_enable_device as symbolic
Removed calls to 'pci_intx' (function is undefined)
Removed calls to '__udelay' (function is undefined)
Removed calls to 'debug_dma_map_page' (function is undefined)
Removed calls to 'debug_dma_unmap_page' (function is undefined)
Defining function __phys_addr as symbolic
Removed calls to 'debug_dma_map_sg' (function is undefined)
Defining function sg_next as symbolic
Removed calls to 'debug_dma_unmap_sg' (function is undefined)
Defining function vzalloc as symbolic
Defining function pci_bus_write_config_byte as symbolic
Defining function pci_bus_read_config_byte as symbolic
Removed calls to '_raw_spin_lock' (function is undefined)
Removed calls to '_raw_spin_unlock' (function is undefined)
Defining function request_threaded_irq as symbolic
Defining function pci_enable_msi_range as symbolic
Defining function pci_save_state as symbolic
Defining function pci_choose_state as symbolic
Defining function __pci_enable_wake as symbolic
Removed calls to '__wake_up' (function is undefined)
Removed calls to 'wait_for_completion' (function is undefined)
Removed calls to 'scsi_remove_host' (function is undefined)
Removed calls to 'dma_free_attrs' (function is undefined)
Removed calls to 'iounmap' (function is undefined)
Removed calls to 'scsi_host_put' (function is undefined)
Defining function pci_request_regions as symbolic
Defining function ioremap_nocache as symbolic
Defining function dma_alloc_attrs as symbolic
Removed calls to 'complete_and_exit' (function is undefined)
Defining function kthread_create_on_node as symbolic
Defining function wake_up_process as symbolic
Removed calls to '__might_sleep' (function is undefined)
Removed calls to 'finish_wait' (function is undefined)
Removed calls to 'scsi_scan_host' (function is undefined)
Defining function prepare_to_wait_event as symbolic
Defining function scsi_add_host_with_dma as symbolic
Defining function wait_for_completion_interruptible as symbolic
Defining function scsi_host_alloc as symbolic
Removed calls to 'scsi_cmd_get_serial' (function is undefined)
Removed calls to '_raw_spin_unlock_irqrestore' (function is undefined)
Removed calls to 'blk_queue_dma_alignment' (function is undefined)
Defining function _raw_spin_lock_irqsave as symbolic
Defining function pci_get_domain_bus_and_slot as symbolic
Removed calls to 'ldv_initialize' (function is undefined)
Removed calls to 'pci_unregister_driver' (function is undefined)
Defining function ldv_suspend_late_2 as symbolic
Defining function ldv_resume_early_2 as symbolic
Defining function __pci_register_driver as symbolic
Linked our definitions to these undefined functions:
  memcmp
  strncpy
  strrchr
  __kmalloc
  kfree
  __VERIFIER_assume
  __VERIFIER_calloc0
  __VERIFIER_error
  __VERIFIER_exit
  __VERIFIER_make_symbolic
  __VERIFIER_malloc0
  __VERIFIER_nondet_int_named
  __VERIFIER_nondet_pointer_named
  __VERIFIER_nondet_ulong_named
INFO: After-slicing optimizations and preparation time: 2.60774493217
INFO: Before verification stats: Globals/Functions/Blocks/Instr.: 657 338 5754 43270
INFO: Starting verification
KLEE: WARNING ONCE: function "rtsx_do_before_power_down" has inline asm
KLEE: WARNING ONCE: function "rtsx_force_power_on" has inline asm
KLEE: WARNING ONCE: function "xd_power_off_card3v3" has inline asm
KLEE: WARNING ONCE: function "xd_copy_page" has inline asm
KLEE: WARNING ONCE: function "sd_power_off_card3v3" has inline asm
KLEE: WARNING ONCE: function "sd_send_cmd_get_rsp" has inline asm
KLEE: WARNING ONCE: function "rtsx_init_chip" has inline asm
KLEE: WARNING ONCE: function "rtsx_reset_chip" has inline asm
KLEE: WARNING ONCE: function "rtsx_disable_aspm" has inline asm
KLEE: WARNING ONCE: function "rtsx_reset_cards" has inline asm
KLEE: WARNING ONCE: function "do_reset_xd_card" has inline asm
KLEE: WARNING ONCE: function "do_reset_sd_card" has inline asm
KLEE: WARNING ONCE: function "do_reset_ms_card" has inline asm
KLEE: WARNING ONCE: function "dma_map_sg_attrs" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_sg_attrs" has inline asm
KLEE: WARNING ONCE: function "rtsx_reinit_cards" has inline asm
KLEE: WARNING ONCE: function "sg_page" has inline asm
KLEE: WARNING ONCE: function "ms_prepare_reset" has inline asm
KLEE: WARNING ONCE: function "ms_pro_reset_flow" has inline asm
KLEE: WARNING ONCE: function "sd_init_power" has inline asm
KLEE: WARNING ONCE: function "reset_mmc" has inline asm
KLEE: WARNING ONCE: function "sd_change_phase" has inline asm
KLEE: WARNING ONCE: function "reset_sd" has inline asm
KLEE: WARNING ONCE: function "sd_dummy_clock" has inline asm
KLEE: WARNING ONCE: function "sd_check_switch" has inline asm
KLEE: WARNING ONCE: function "reset_xd_card" has inline asm
KLEE: WARNING ONCE: function "xd_rw" has inline asm
KLEE: WARNING ONCE: function "rtsx_pre_handle_interrupt" has inline asm
KLEE: WARNING ONCE: function "quiesce_and_remove_host" has inline asm
KLEE: WARNING ONCE: function "release_everything" has inline asm
KLEE: WARNING ONCE: function "rtsx_polling_thread" has inline asm
KLEE: WARNING ONCE: function "mspro_polling_format_status" has inline asm
KLEE: WARNING ONCE: function "rtsx_init_cards" has inline asm
KLEE: WARNING ONCE: function "rtsx_scsi_handler" has inline asm
KLEE: WARNING ONCE: function "read_write" has inline asm
KLEE: WARNING ONCE: function "spi_read_eeprom" has inline asm
KLEE: WARNING ONCE: function "app_cmd" has inline asm
KLEE: WARNING ONCE: function "ext_sd_send_cmd_get_rsp" has inline asm
KLEE: WARNING ONCE: function "spi_set_init_para" has inline asm
KLEE: WARNING ONCE: function "rtsx_write_efuse" has inline asm
KLEE: WARNING ONCE: function "spi_init_eeprom" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_f450c34e-070e-4b6d-945c-dfd7720cc43c/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 11006 states (over memory cap)
KLEE: WARNING: killing 10512 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
KLEE: output directory is "/tmp/symbiotic-LLBmlO/klee-out-0"
KLEE: Using STP solver backend
KLEE: WARNING ONCE: function "rtsx_do_before_power_down" has inline asm
KLEE: WARNING ONCE: function "rtsx_force_power_on" has inline asm
KLEE: WARNING ONCE: function "xd_power_off_card3v3" has inline asm
KLEE: WARNING ONCE: function "xd_copy_page" has inline asm
KLEE: WARNING ONCE: function "sd_power_off_card3v3" has inline asm
KLEE: WARNING ONCE: function "sd_send_cmd_get_rsp" has inline asm
KLEE: WARNING ONCE: function "rtsx_init_chip" has inline asm
KLEE: WARNING ONCE: function "rtsx_reset_chip" has inline asm
KLEE: WARNING ONCE: function "rtsx_disable_aspm" has inline asm
KLEE: WARNING ONCE: function "rtsx_reset_cards" has inline asm
KLEE: WARNING ONCE: function "do_reset_xd_card" has inline asm
KLEE: WARNING ONCE: function "do_reset_sd_card" has inline asm
KLEE: WARNING ONCE: function "do_reset_ms_card" has inline asm
KLEE: WARNING ONCE: function "dma_map_sg_attrs" has inline asm
KLEE: WARNING ONCE: function "dma_unmap_sg_attrs" has inline asm
KLEE: WARNING ONCE: function "rtsx_reinit_cards" has inline asm
KLEE: WARNING ONCE: function "sg_page" has inline asm
KLEE: WARNING ONCE: function "ms_prepare_reset" has inline asm
KLEE: WARNING ONCE: function "ms_pro_reset_flow" has inline asm
KLEE: WARNING ONCE: function "sd_init_power" has inline asm
KLEE: WARNING ONCE: function "reset_mmc" has inline asm
KLEE: WARNING ONCE: function "sd_change_phase" has inline asm
KLEE: WARNING ONCE: function "reset_sd" has inline asm
KLEE: WARNING ONCE: function "sd_dummy_clock" has inline asm
KLEE: WARNING ONCE: function "sd_check_switch" has inline asm
KLEE: WARNING ONCE: function "reset_xd_card" has inline asm
KLEE: WARNING ONCE: function "xd_rw" has inline asm
KLEE: WARNING ONCE: function "rtsx_pre_handle_interrupt" has inline asm
KLEE: WARNING ONCE: function "quiesce_and_remove_host" has inline asm
KLEE: WARNING ONCE: function "release_everything" has inline asm
KLEE: WARNING ONCE: function "rtsx_polling_thread" has inline asm
KLEE: WARNING ONCE: function "mspro_polling_format_status" has inline asm
KLEE: WARNING ONCE: function "rtsx_init_cards" has inline asm
KLEE: WARNING ONCE: function "rtsx_scsi_handler" has inline asm
KLEE: WARNING ONCE: function "read_write" has inline asm
KLEE: WARNING ONCE: function "spi_read_eeprom" has inline asm
KLEE: WARNING ONCE: function "app_cmd" has inline asm
KLEE: WARNING ONCE: function "ext_sd_send_cmd_get_rsp" has inline asm
KLEE: WARNING ONCE: function "spi_set_init_para" has inline asm
KLEE: WARNING ONCE: function "rtsx_write_efuse" has inline asm
KLEE: WARNING ONCE: function "spi_init_eeprom" has inline asm
KLEE: WARNING ONCE: Alignment of memory from call "malloc" is not modelled. Using alignment of 8.
KLEE: ERROR: /tmp/vcloud-vcloud-master/worker/working_dir_f450c34e-070e-4b6d-945c-dfd7720cc43c/symbiotic/lib/verifier/__VERIFIER_exit.c:6: abort failure
KLEE: NOTE: now ignoring this error at this location
KLEE: WARNING ONCE: skipping fork (memory cap exceeded)
KLEE: WARNING: killing 11006 states (over memory cap)
KLEE: WARNING: killing 10512 states (over memory cap)
klee: /var/xchalup4/symbiotic/klee/include/klee/Internal/ADT/DiscretePDF.inc:116: void klee::DiscretePDF<T>::remove(T) [with T = klee::ExecutionState*]: Assertion `0 && "remove: argument(item) not in tree"' failed.
0  klee            0x00000000012fcca8 llvm::sys::PrintStackTrace(llvm::raw_ostream&) + 56
1  klee            0x00000000012fac7e llvm::sys::RunSignalHandlers() + 62
2  klee            0x00000000012fadcc
3  libpthread.so.0 0x00007fec7ab3a390
4  libc.so.6       0x00007fec79ef3428 gsignal + 56
5  libc.so.6       0x00007fec79ef502a abort + 362
6  libc.so.6       0x00007fec79eebbd7
7  libc.so.6       0x00007fec79eebc82
8  klee            0x000000000061be59 klee::DiscretePDF<klee::ExecutionState*>::remove(klee::ExecutionState*) + 73
9  klee            0x00000000006195f1 klee::WeightedRandomSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 241
10 klee            0x0000000000617416 klee::InterleavedSearcher::update(klee::ExecutionState*, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&, std::vector<klee::ExecutionState*, std::allocator<klee::ExecutionState*> > const&) + 54
11 klee            0x00000000005cecfe klee::Executor::updateStates(klee::ExecutionState*) + 46
12 klee            0x00000000005da8eb klee::Executor::run(klee::ExecutionState&) + 2155
13 klee            0x00000000005daeef klee::Executor::runFunctionAsMain(llvm::Function*, int, char**, char**) + 1391
14 klee            0x0000000000593c63 main + 8867
15 libc.so.6       0x00007fec79ede830 __libc_start_main + 240
16 klee            0x00000000005bed49 _start + 41
Running the verifier failed
RESULT: unknown
INFO: Total time elapsed: 62.4314730167
