./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 48c9605d Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 07c898a74b896272d2f7cd57996f9876c6e19807ec5d4da34990504c2f09a1b9 --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:31:01,132 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:31:01,210 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-02-08 02:31:01,215 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:31:01,215 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:31:01,246 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:31:01,247 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:31:01,247 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:31:01,248 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:31:01,248 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:31:01,248 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:31:01,248 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:31:01,249 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:31:01,249 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:31:01,249 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:31:01,249 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:31:01,249 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:31:01,249 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:31:01,250 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:31:01,251 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:31:01,251 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:31:01,251 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:31:01,251 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:31:01,251 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:31:01,251 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:31:01,251 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:31:01,252 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:31:01,253 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:31:01,253 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 07c898a74b896272d2f7cd57996f9876c6e19807ec5d4da34990504c2f09a1b9 [2025-02-08 02:31:01,556 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:31:01,567 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:31:01,569 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:31:01,570 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:31:01,570 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:31:01,571 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2025-02-08 02:31:02,957 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/0eed9eb43/e0cccaf67be54fa3b112fb5cf1841ab4/FLAG4d1b7e6ea [2025-02-08 02:31:03,678 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:31:03,679 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2025-02-08 02:31:03,729 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/0eed9eb43/e0cccaf67be54fa3b112fb5cf1841ab4/FLAG4d1b7e6ea [2025-02-08 02:31:03,748 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/0eed9eb43/e0cccaf67be54fa3b112fb5cf1841ab4 [2025-02-08 02:31:03,750 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:31:03,752 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:31:03,753 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:31:03,753 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:31:03,757 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:31:03,758 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:31:03" (1/1) ... [2025-02-08 02:31:03,759 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b429eef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:03, skipping insertion in model container [2025-02-08 02:31:03,760 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:31:03" (1/1) ... [2025-02-08 02:31:03,898 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:31:06,518 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2025-02-08 02:31:06,637 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:31:06,651 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:31:06,796 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5233] [2025-02-08 02:31:06,798 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("bt %2,%1\n\tsbb %0,%0": "=r" (oldbit): "m" (*((unsigned long *)addr)), "Ir" (nr)); [5241-5242] [2025-02-08 02:31:06,803 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [5287] [2025-02-08 02:31:06,804 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [5290] [2025-02-08 02:31:06,804 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [5293] [2025-02-08 02:31:06,804 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [5296] [2025-02-08 02:31:06,807 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; subl %2,%0; sete %1": "+m" (v->counter), "=qm" (c): "ir" (i): "memory"); [5345-5346] [2025-02-08 02:31:06,808 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& kernel_stack)); [5396] [2025-02-08 02:31:06,810 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5399] [2025-02-08 02:31:06,811 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5402] [2025-02-08 02:31:06,811 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5405] [2025-02-08 02:31:06,816 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5485] [2025-02-08 02:31:06,816 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5493] [2025-02-08 02:31:06,816 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5496] [2025-02-08 02:31:06,826 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\tcall %P4\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (3*32+16)\n .byte 662b-661b\n .byte 6641f-6631f\n .long 661b - .\n .long 6632f - .\n .word (9*32+ 9)\n .byte 662b-661b\n .byte 6642f-6632f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n .byte 0xff + (6642f-6632f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\tcall %P5\n6641:\n\t6632:\n\tcall %P6\n6642:\n\t.popsection": "=a" (ret), "=D" (to), "=S" (from), "=d" (len): [old] "i" (& copy_user_generic_unrolled), [new1] "i" (& copy_user_generic_string), [new2] "i" (& copy_user_enhanced_fast_string), "1" (to), "2" (from), "3" (len): "memory", "rcx", "r8", "r9", "r10", "r11"); [5696-5700] [2025-02-08 02:31:06,829 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=q" (*((u8 *)dst)): "m" (*((struct __large_struct *)src)), "i" (1), "0" (ret)); [5762-5764] [2025-02-08 02:31:06,832 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u16 *)dst)): "m" (*((struct __large_struct *)src)), "i" (2), "0" (ret)); [5767-5769] [2025-02-08 02:31:06,832 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u32 *)dst)): "m" (*((struct __large_struct *)src)), "i" (4), "0" (ret)); [5772-5774] [2025-02-08 02:31:06,832 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (8), "0" (ret)); [5777-5779] [2025-02-08 02:31:06,833 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (10), "0" (ret)); [5782-5784] [2025-02-08 02:31:06,833 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u16 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (2), "0" (ret)); [5790-5792] [2025-02-08 02:31:06,833 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (16), "0" (ret)); [5795-5797] [2025-02-08 02:31:06,834 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (8), "0" (ret)); [5803-5805] [2025-02-08 02:31:06,834 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "iq" (*((u8 *)src)), "m" (*((struct __large_struct *)dst)), "i" (1), "0" (ret)); [5827-5828] [2025-02-08 02:31:06,837 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "ir" (*((u16 *)src)), "m" (*((struct __large_struct *)dst)), "i" (2), "0" (ret)); [5831-5832] [2025-02-08 02:31:06,837 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "ir" (*((u32 *)src)), "m" (*((struct __large_struct *)dst)), "i" (4), "0" (ret)); [5835-5836] [2025-02-08 02:31:06,838 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)dst)), "i" (8), "0" (ret)); [5839-5840] [2025-02-08 02:31:06,838 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)dst)), "i" (10), "0" (ret)); [5843-5844] [2025-02-08 02:31:06,838 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5850] [2025-02-08 02:31:06,839 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "ir" (*((u16 *)src + 4UL)), "m" (*((struct __large_struct *)dst + 4U)), "i" (2), "0" (ret)); [5851-5852] [2025-02-08 02:31:06,839 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)dst)), "i" (16), "0" (ret)); [5855-5856] [2025-02-08 02:31:06,839 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5862] [2025-02-08 02:31:06,839 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src + 1UL)), "m" (*((struct __large_struct *)dst + 1U)), "i" (8), "0" (ret)); [5863-5864] [2025-02-08 02:31:06,854 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (169), "i" (12UL)); [6101-6102] [2025-02-08 02:31:06,864 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret), "+m" (tmp___1->state): : "memory", "cc"); [6210-6211] [2025-02-08 02:31:06,865 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret), "+m" (tmp___2->state): : "memory", "cc"); [6215-6216] [2025-02-08 02:31:06,865 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret), "+m" (tmp___3->state): : "memory", "cc"); [6220-6221] [2025-02-08 02:31:06,865 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret), "+m" (tmp___4->state): : "memory", "cc"); [6225-6226] [2025-02-08 02:31:06,895 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (log_base + a), "g" ((long )((sz + 32767UL) / 32768UL)), "rm" (tmp->addr_limit.seg)); [6650-6651] [2025-02-08 02:31:06,897 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" ((void *)a), "g" ((long )m->memory_size), "rm" (tmp___0->addr_limit.seg)); [6677-6678] [2025-02-08 02:31:06,899 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (desc), "g" ((long )((unsigned long )num * 16UL)), "rm" (tmp___0->addr_limit.seg)); [6750-6751] [2025-02-08 02:31:06,901 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___0), "=r" (roksum___0): "1" (avail), "g" ((long )(((unsigned long )num + 2UL) * 2UL + s)), "rm" (tmp___2->addr_limit.seg)); [6755-6756] [2025-02-08 02:31:06,901 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___1), "=r" (roksum___1): "1" (used), "g" ((long )(((unsigned long )num * 8UL + s) + 4UL)), "rm" (tmp___4->addr_limit.seg)); [6760-6762] [2025-02-08 02:31:06,912 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6933] [2025-02-08 02:31:06,915 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6983] [2025-02-08 02:31:06,916 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6986] [2025-02-08 02:31:06,916 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6989] [2025-02-08 02:31:06,917 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6992] [2025-02-08 02:31:06,917 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6995] [2025-02-08 02:31:06,934 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7297] [2025-02-08 02:31:06,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7300] [2025-02-08 02:31:06,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7303] [2025-02-08 02:31:06,935 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7306] [2025-02-08 02:31:06,936 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7309] [2025-02-08 02:31:06,939 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (983), "i" (12UL)); [7414-7415] [2025-02-08 02:31:06,940 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7471] [2025-02-08 02:31:06,943 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (1038), "i" (12UL)); [7498-7499] [2025-02-08 02:31:06,943 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "iq" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7514-7516] [2025-02-08 02:31:06,944 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7519-7521] [2025-02-08 02:31:06,945 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7524-7526] [2025-02-08 02:31:06,945 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "er" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7529-7531] [2025-02-08 02:31:06,946 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7543] [2025-02-08 02:31:06,948 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "iq" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7565-7567] [2025-02-08 02:31:06,948 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7570-7572] [2025-02-08 02:31:06,949 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7575-7577] [2025-02-08 02:31:06,949 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "er" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7580-7582] [2025-02-08 02:31:06,949 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7594] [2025-02-08 02:31:06,950 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7626] [2025-02-08 02:31:06,950 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7629] [2025-02-08 02:31:06,950 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7632] [2025-02-08 02:31:06,950 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7635] [2025-02-08 02:31:06,951 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7638] [2025-02-08 02:31:06,970 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8020-8022] [2025-02-08 02:31:06,970 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8025-8027] [2025-02-08 02:31:06,971 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8030-8032] [2025-02-08 02:31:06,971 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8035-8037] [2025-02-08 02:31:06,974 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8091] [2025-02-08 02:31:06,975 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=q" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8095-8097] [2025-02-08 02:31:06,975 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8100-8102] [2025-02-08 02:31:06,975 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8105-8107] [2025-02-08 02:31:06,976 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8110-8112] [2025-02-08 02:31:06,988 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (1365), "i" (12UL)); [8332-8333] [2025-02-08 02:31:06,994 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "iq" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8367-8369] [2025-02-08 02:31:06,995 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8372-8374] [2025-02-08 02:31:06,995 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8377-8379] [2025-02-08 02:31:06,995 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "er" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8382-8384] [2025-02-08 02:31:06,998 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "iq" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8412-8414] [2025-02-08 02:31:06,998 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "ir" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8417-8419] [2025-02-08 02:31:06,998 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "ir" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8422-8424] [2025-02-08 02:31:06,998 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "er" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8427-8429] [2025-02-08 02:31:07,044 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8454] [2025-02-08 02:31:07,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "iq" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8458-8460] [2025-02-08 02:31:07,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "ir" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8463-8465] [2025-02-08 02:31:07,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "ir" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8468-8470] [2025-02-08 02:31:07,045 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "er" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8473-8475] [2025-02-08 02:31:07,046 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8502] [2025-02-08 02:31:07,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8560] [2025-02-08 02:31:07,052 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8603] [2025-02-08 02:31:07,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8608] [2025-02-08 02:31:07,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8611] [2025-02-08 02:31:07,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8614] [2025-02-08 02:31:07,054 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8617] [2025-02-08 02:31:07,054 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8620] [2025-02-08 02:31:07,057 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [8678] [2025-02-08 02:31:07,059 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8693-8695] [2025-02-08 02:31:07,059 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8698-8700] [2025-02-08 02:31:07,060 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8703-8705] [2025-02-08 02:31:07,061 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8708-8710] [2025-02-08 02:31:07,062 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8754] [2025-02-08 02:31:07,063 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8757] [2025-02-08 02:31:07,063 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8760] [2025-02-08 02:31:07,064 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8763] [2025-02-08 02:31:07,064 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8766] [2025-02-08 02:31:07,071 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [8894] [2025-02-08 02:31:07,071 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8898-8900] [2025-02-08 02:31:07,072 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8903-8905] [2025-02-08 02:31:07,072 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8908-8910] [2025-02-08 02:31:07,072 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8913-8915] [2025-02-08 02:31:07,082 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [9236] [2025-02-08 02:31:07,143 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10174] [2025-02-08 02:31:07,149 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10409] [2025-02-08 02:31:07,154 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10500] [2025-02-08 02:31:07,162 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2025-02-08 02:31:07,173 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:31:07,270 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:31:07,271 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07 WrapperNode [2025-02-08 02:31:07,272 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:31:07,273 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:31:07,273 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:31:07,273 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:31:07,279 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:07,378 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:07,585 INFO L138 Inliner]: procedures = 335, calls = 2667, calls flagged for inlining = 141, calls inlined = 132, statements flattened = 6963 [2025-02-08 02:31:07,587 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:31:07,587 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:31:07,587 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:31:07,587 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:31:07,595 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:07,596 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:07,679 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,634 INFO L175 MemorySlicer]: Split 1065 memory accesses to 17 slices as follows [4, 2, 6, 15, 13, 6, 13, 5, 13, 27, 6, 9, 8, 3, 670, 252, 13]. 63 percent of accesses are in the largest equivalence class. The 11 initializations are split as follows [0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0, 9, 0, 0, 0, 0, 0]. The 467 writes are split as follows [2, 0, 2, 3, 4, 2, 13, 3, 3, 27, 2, 0, 8, 0, 174, 216, 8]. [2025-02-08 02:31:08,635 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,635 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,770 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,785 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,816 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,840 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,893 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:31:08,895 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:31:08,896 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:31:08,896 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:31:08,897 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (1/1) ... [2025-02-08 02:31:08,902 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:31:08,913 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:31:08,928 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:31:08,935 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:31:08,952 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_add_used_and_signal [2025-02-08 02:31:08,952 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_add_used_and_signal [2025-02-08 02:31:08,952 INFO L130 BoogieDeclarations]: Found specification of procedure memcpy_toiovecend [2025-02-08 02:31:08,952 INFO L138 BoogieDeclarations]: Found implementation of procedure memcpy_toiovecend [2025-02-08 02:31:08,952 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2025-02-08 02:31:08,952 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_free_iovecs [2025-02-08 02:31:08,953 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_free_iovecs [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2025-02-08 02:31:08,953 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure vq_access_ok [2025-02-08 02:31:08,953 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_access_ok [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:31:08,953 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#14 [2025-02-08 02:31:08,954 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#15 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#16 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_flush [2025-02-08 02:31:08,955 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_flush [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2025-02-08 02:31:08,955 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:31:08,955 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#14 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#15 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#16 [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_check_owner [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_check_owner [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure log_write [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure log_write [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure variable_test_bit [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure variable_test_bit [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_reset [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_reset [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure vq_log_access_ok [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_log_access_ok [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2025-02-08 02:31:08,956 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-02-08 02:31:08,956 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure __put_user_bad [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure __vhost_add_used_n [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure __vhost_add_used_n [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_start [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_start [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_queue [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_queue [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure handle_rx [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_rx [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_open [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_open [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure ERR_PTR [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure ERR_PTR [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_fget [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_fget [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_init [2025-02-08 02:31:08,957 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_init [2025-02-08 02:31:08,957 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:31:08,958 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2025-02-08 02:31:08,959 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure vq_memory_access_ok [2025-02-08 02:31:08,959 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_memory_access_ok [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure move_iovec_hdr [2025-02-08 02:31:08,959 INFO L138 BoogieDeclarations]: Found implementation of procedure move_iovec_hdr [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:31:08,959 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#14 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#15 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#16 [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2025-02-08 02:31:08,960 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2025-02-08 02:31:08,960 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_queue [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_queue [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_stop [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_stop [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#7 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#8 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#9 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#10 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#11 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#12 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#13 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#14 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#15 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#16 [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_flush_vq [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_flush_vq [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_stop_vq [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_stop_vq [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2025-02-08 02:31:08,961 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2025-02-08 02:31:08,961 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure fput [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure fput [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure next_desc [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure next_desc [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure iov_length [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure iov_length [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_stop [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_stop [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure schedule [2025-02-08 02:31:08,962 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-02-08 02:31:08,962 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#14 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#15 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#16 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2025-02-08 02:31:08,964 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_has_feature [2025-02-08 02:31:08,964 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_has_feature [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2025-02-08 02:31:08,964 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-02-08 02:31:08,964 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#14 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#15 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#16 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure __rcu_read_lock [2025-02-08 02:31:08,965 INFO L138 BoogieDeclarations]: Found implementation of procedure __rcu_read_lock [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#14 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#15 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#16 [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_init [2025-02-08 02:31:08,965 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_init [2025-02-08 02:31:08,965 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_fileget [2025-02-08 02:31:08,966 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_fileget [2025-02-08 02:31:08,966 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_flush [2025-02-08 02:31:08,966 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_flush [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_held [2025-02-08 02:31:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_held [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:31:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2025-02-08 02:31:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure __get_user_bad [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2025-02-08 02:31:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#14 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#15 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#16 [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2025-02-08 02:31:08,967 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2025-02-08 02:31:08,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_mutex [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_mutex [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure __rcu_read_unlock [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure __rcu_read_unlock [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure translate_desc [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure translate_desc [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_put [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_put [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_ioctl [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_ioctl [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_disable_vq [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_disable_vq [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure mmput [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure mmput [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put_and_wait [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put_and_wait [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure copy_user_generic [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_user_generic [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_cpu_idle [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_cpu_idle [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_get_vq_desc [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_get_vq_desc [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_signal [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_signal [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_enable_notify [2025-02-08 02:31:08,968 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_enable_notify [2025-02-08 02:31:08,968 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_stop [2025-02-08 02:31:08,969 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_stop [2025-02-08 02:31:08,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:31:08,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:31:08,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:31:08,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:31:08,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:31:08,969 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-02-08 02:31:08,972 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#14 [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#15 [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#16 [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure __bad_percpu_size [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure memory_access_ok [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure memory_access_ok [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_seq_done [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_seq_done [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_release [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_release [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_disable_notify [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_disable_notify [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure prepare_to_wait [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure prepare_to_wait [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure warn_slowpath_null [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_update_used_flags [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_update_used_flags [2025-02-08 02:31:08,973 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_discard_vq_desc [2025-02-08 02:31:08,973 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_discard_vq_desc [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure lock_is_held [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_is_held [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_flush [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_flush [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_mutex [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_mutex [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure log_access_ok [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure log_access_ok [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure __init_waitqueue_head [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_waitqueue_head [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_signal [2025-02-08 02:31:08,974 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_signal [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-02-08 02:31:08,974 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-02-08 02:31:08,977 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_signal_used [2025-02-08 02:31:08,977 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_signal_used [2025-02-08 02:31:08,977 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_start [2025-02-08 02:31:08,977 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_start [2025-02-08 02:31:08,977 INFO L130 BoogieDeclarations]: Found specification of procedure finish_wait [2025-02-08 02:31:08,977 INFO L138 BoogieDeclarations]: Found implementation of procedure finish_wait [2025-02-08 02:31:08,977 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:31:08,977 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:31:08,977 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2025-02-08 02:31:08,977 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2025-02-08 02:31:09,879 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:31:09,883 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:31:10,232 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8351: call ULTIMATE.dealloc(vhost_add_used_~#descriptor~2#1.base, vhost_add_used_~#descriptor~2#1.offset);havoc vhost_add_used_~#descriptor~2#1.base, vhost_add_used_~#descriptor~2#1.offset;call ULTIMATE.dealloc(vhost_add_used_~#descriptor___0~2#1.base, vhost_add_used_~#descriptor___0~2#1.offset);havoc vhost_add_used_~#descriptor___0~2#1.base, vhost_add_used_~#descriptor___0~2#1.offset;call ULTIMATE.dealloc(vhost_add_used_~#descriptor___1~2#1.base, vhost_add_used_~#descriptor___1~2#1.offset);havoc vhost_add_used_~#descriptor___1~2#1.base, vhost_add_used_~#descriptor___1~2#1.offset; [2025-02-08 02:31:10,239 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11584: havoc #t~nondet1294; [2025-02-08 02:31:10,371 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6099: assume -9223372036854775808 <= #t~ret180 && #t~ret180 <= 9223372036854775807;~tmp___2~5 := #t~ret180;havoc #t~ret180; [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6099-1: SUMMARY for call #t~ret180 := ldv__builtin_expect((if ~flushing~0 < 0 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6095: call #t~mem178 := read~int#14(~work.base, 108 + ~work.offset, 4);call write~int#14(#t~mem178 - 1, ~work.base, 108 + ~work.offset, 4);havoc #t~mem178;call #t~mem179 := read~int#14(~work.base, 108 + ~work.offset, 4);~flushing~0 := #t~mem179;havoc #t~mem179; [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6095-1: SUMMARY for call spin_lock_irq(~dev.base, 204 + ~dev.offset); srcloc: null [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6093: SUMMARY for call finish_wait(~work.base, 24 + ~work.offset, ~#__wait~0.base, ~#__wait~0.offset); srcloc: null [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint vhost_work_flushFINAL: assume true; [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6098: SUMMARY for call spin_unlock_irq(~dev.base, 204 + ~dev.offset); srcloc: null [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6100: assume 0 != ~tmp___2~5; [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6100: assume !(0 != ~tmp___2~5);call ULTIMATE.dealloc(~#__wait~0.base, ~#__wait~0.offset);havoc ~#__wait~0.base, ~#__wait~0.offset; [2025-02-08 02:31:10,372 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6063: call ULTIMATE.dealloc(~#__wait~0.base, ~#__wait~0.offset);havoc ~#__wait~0.base, ~#__wait~0.offset; [2025-02-08 02:31:10,375 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11651: havoc #t~nondet1303; [2025-02-08 02:31:10,387 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6413: havoc #t~mem260.base, #t~mem260.offset;havoc #t~mem261.base, #t~mem261.offset; [2025-02-08 02:31:10,446 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11543: havoc get_user_pages_fast_#t~nondet1287#1; [2025-02-08 02:31:10,446 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11632: havoc set_page_dirty_lock_#t~nondet1300#1; [2025-02-08 02:31:10,446 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7399: call ULTIMATE.dealloc(set_bit_to_user_~#page~0#1.base, set_bit_to_user_~#page~0#1.offset);havoc set_bit_to_user_~#page~0#1.base, set_bit_to_user_~#page~0#1.offset; [2025-02-08 02:31:10,446 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7459: #res#1 := ~r~3#1; [2025-02-08 02:31:10,809 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9516: havoc ldv_mutex_unlock_51_~ldv_func_arg1#1.base, ldv_mutex_unlock_51_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_51_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_51_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_51 } true;call ULTIMATE.dealloc(~#out~0#1.base, ~#out~0#1.offset);havoc ~#out~0#1.base, ~#out~0#1.offset;call ULTIMATE.dealloc(~#in~0#1.base, ~#in~0#1.offset);havoc ~#in~0#1.base, ~#in~0#1.offset;call ULTIMATE.dealloc(~#msg~0#1.base, ~#msg~0#1.offset);havoc ~#msg~0#1.base, ~#msg~0#1.offset;call ULTIMATE.dealloc(~#descriptor~8#1.base, ~#descriptor~8#1.offset);havoc ~#descriptor~8#1.base, ~#descriptor~8#1.offset;call ULTIMATE.dealloc(~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset);havoc ~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset;call ULTIMATE.dealloc(~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset);havoc ~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset; [2025-02-08 02:31:10,809 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9318: havoc atomic_inc_~v#1.base, atomic_inc_~v#1.offset;havoc atomic_inc_#in~v#1.base, atomic_inc_#in~v#1.offset;assume { :end_inline_atomic_inc } true; [2025-02-08 02:31:10,809 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9683: assume { :begin_inline_ldv_mutex_unlock_53 } true;ldv_mutex_unlock_53_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_53_#in~ldv_func_arg1#1.offset := ~vq~3#1.base, 8 + ~vq~3#1.offset;havoc ldv_mutex_unlock_53_~ldv_func_arg1#1.base, ldv_mutex_unlock_53_~ldv_func_arg1#1.offset;ldv_mutex_unlock_53_~ldv_func_arg1#1.base, ldv_mutex_unlock_53_~ldv_func_arg1#1.offset := ldv_mutex_unlock_53_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_53_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:10,809 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10815: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_53_~ldv_func_arg1#1.base, ldv_mutex_unlock_53_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:10,809 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10799: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_51_~ldv_func_arg1#1.base, ldv_mutex_unlock_51_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:10,809 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10816: havoc ldv_mutex_unlock_53_~ldv_func_arg1#1.base, ldv_mutex_unlock_53_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_53_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_53_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_53 } true;call ULTIMATE.dealloc(~#out~0#1.base, ~#out~0#1.offset);havoc ~#out~0#1.base, ~#out~0#1.offset;call ULTIMATE.dealloc(~#in~0#1.base, ~#in~0#1.offset);havoc ~#in~0#1.base, ~#in~0#1.offset;call ULTIMATE.dealloc(~#msg~0#1.base, ~#msg~0#1.offset);havoc ~#msg~0#1.base, ~#msg~0#1.offset;call ULTIMATE.dealloc(~#descriptor~8#1.base, ~#descriptor~8#1.offset);havoc ~#descriptor~8#1.base, ~#descriptor~8#1.offset;call ULTIMATE.dealloc(~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset);havoc ~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset;call ULTIMATE.dealloc(~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset);havoc ~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset; [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10816-1: SUMMARY for call mutex_unlock(ldv_mutex_unlock_53_~ldv_func_arg1#1.base, ldv_mutex_unlock_53_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10800: SUMMARY for call mutex_unlock(ldv_mutex_unlock_51_~ldv_func_arg1#1.base, ldv_mutex_unlock_51_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9629: havoc kref_get_#t~ret945#1, kref_get_#t~ret946#1, kref_get_#t~ret947#1, kref_get_~kref#1.base, kref_get_~kref#1.offset, kref_get_~__ret_warn_on~3#1, kref_get_~tmp~52#1, kref_get_~tmp___0~35#1;havoc kref_get_#in~kref#1.base, kref_get_#in~kref#1.offset;assume { :end_inline_kref_get } true; [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9514: havoc ldv_mutex_lock_50_~ldv_func_arg1#1.base, ldv_mutex_lock_50_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_50_#in~ldv_func_arg1#1.base, ldv_mutex_lock_50_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_50 } true; [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9515: assume { :begin_inline_ldv_mutex_unlock_51 } true;ldv_mutex_unlock_51_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_51_#in~ldv_func_arg1#1.offset := ~vq~3#1.base, 8 + ~vq~3#1.offset;havoc ldv_mutex_unlock_51_~ldv_func_arg1#1.base, ldv_mutex_unlock_51_~ldv_func_arg1#1.offset;ldv_mutex_unlock_51_~ldv_func_arg1#1.base, ldv_mutex_unlock_51_~ldv_func_arg1#1.offset := ldv_mutex_unlock_51_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_51_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9515-1: SUMMARY for call tx_poll_start(~net#1.base, ~net#1.offset, ~sock~0#1.base, ~sock~0#1.offset); srcloc: null [2025-02-08 02:31:10,810 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9457: call ULTIMATE.dealloc(~#out~0#1.base, ~#out~0#1.offset);havoc ~#out~0#1.base, ~#out~0#1.offset;call ULTIMATE.dealloc(~#in~0#1.base, ~#in~0#1.offset);havoc ~#in~0#1.base, ~#in~0#1.offset;call ULTIMATE.dealloc(~#msg~0#1.base, ~#msg~0#1.offset);havoc ~#msg~0#1.base, ~#msg~0#1.offset;call ULTIMATE.dealloc(~#descriptor~8#1.base, ~#descriptor~8#1.offset);havoc ~#descriptor~8#1.base, ~#descriptor~8#1.offset;call ULTIMATE.dealloc(~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset);havoc ~#descriptor___0~5#1.base, ~#descriptor___0~5#1.offset;call ULTIMATE.dealloc(~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset);havoc ~#descriptor___1~4#1.base, ~#descriptor___1~4#1.offset; [2025-02-08 02:31:10,815 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11514: havoc #t~nondet1281; [2025-02-08 02:31:14,880 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5656: assume 0 == assume_abort_if_not_~cond#1;assume false; [2025-02-08 02:31:14,881 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5656: assume !(0 == assume_abort_if_not_~cond#1); [2025-02-08 02:31:14,881 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5668-1: #t~ret105#1 := ldv_is_err_#res#1;havoc ldv_is_err_~ptr#1.base, ldv_is_err_~ptr#1.offset;havoc ldv_is_err_#in~ptr#1.base, ldv_is_err_#in~ptr#1.offset;assume { :end_inline_ldv_is_err } true;assume -9223372036854775808 <= #t~ret105#1 && #t~ret105#1 <= 9223372036854775807;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == #t~ret105#1 then 1 else 0);havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; [2025-02-08 02:31:14,881 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5666: havoc ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:31:14,881 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5668: havoc assume_abort_if_not_~cond#1;havoc assume_abort_if_not_#in~cond#1;assume { :end_inline_assume_abort_if_not } true;havoc #t~ret105#1;#res#1.base, #res#1.offset := ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:31:14,921 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5331: havoc #t~mem16; [2025-02-08 02:31:15,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5857: assume -9223372036854775808 <= __copy_to_user_#t~ret139#1 && __copy_to_user_#t~ret139#1 <= 9223372036854775807;__copy_to_user_~tmp___1~3#1 := __copy_to_user_#t~ret139#1; [2025-02-08 02:31:15,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5857-1: SUMMARY for call __copy_to_user_#t~ret139#1 := ldv__builtin_expect((if 0 != __copy_to_user_~ret~2#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:15,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5845: assume -9223372036854775808 <= __copy_to_user_#t~ret138#1 && __copy_to_user_#t~ret138#1 <= 9223372036854775807;__copy_to_user_~tmp___0~6#1 := __copy_to_user_#t~ret138#1; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5845-1: SUMMARY for call __copy_to_user_#t~ret138#1 := ldv__builtin_expect((if 0 != __copy_to_user_~ret~2#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8529: call ULTIMATE.dealloc(~#descriptor~3#1.base, ~#descriptor~3#1.offset);havoc ~#descriptor~3#1.base, ~#descriptor~3#1.offset; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch137#1; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch137#1;havoc __copy_to_user_#t~switch137#1;havoc __copy_to_user_#t~ret138#1;havoc __copy_to_user_#t~ret139#1;havoc __copy_to_user_#t~ret140#1;havoc __copy_to_user_#t~switch137#1;havoc __copy_to_user_#t~ret138#1;havoc __copy_to_user_#t~ret139#1;havoc __copy_to_user_#t~ret140#1; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume 0 != __copy_to_user_~tmp___1~3#1;__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !(0 != __copy_to_user_~tmp___1~3#1);__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch137#1; [2025-02-08 02:31:15,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch137#1;__copy_to_user_#t~switch137#1 := true; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume 0 != __copy_to_user_~tmp___0~6#1;__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !(0 != __copy_to_user_~tmp___0~6#1);__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch137#1;__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch137#1;__copy_to_user_#t~switch137#1 := __copy_to_user_#t~switch137#1 || 10 == __copy_to_user_~size#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch137#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch137#1;__copy_to_user_#t~switch137#1 := __copy_to_user_#t~switch137#1 || 16 == __copy_to_user_~size#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5867: __copy_to_user_~tmp___2~4#1 := __copy_to_user_#t~ret140#1;__copy_to_user_#res#1 := (if __copy_to_user_~tmp___2~4#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4#1 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4#1 % 18446744073709551616 % 4294967296 - 4294967296); [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5867-1: SUMMARY for call __copy_to_user_#t~ret140#1 := copy_user_generic(__copy_to_user_~dst#1.base, __copy_to_user_~dst#1.offset, __copy_to_user_~src#1.base, __copy_to_user_~src#1.offset, __copy_to_user_~size#1); srcloc: null [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch137#1;__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch137#1;__copy_to_user_#t~switch137#1 := __copy_to_user_#t~switch137#1 || 8 == __copy_to_user_~size#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch137#1;__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch137#1;__copy_to_user_#t~switch137#1 := __copy_to_user_#t~switch137#1 || 4 == __copy_to_user_~size#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5826: assume __copy_to_user_#t~switch137#1;__copy_to_user_#res#1 := __copy_to_user_~ret~2#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5826: assume !__copy_to_user_#t~switch137#1;__copy_to_user_#t~switch137#1 := __copy_to_user_#t~switch137#1 || 2 == __copy_to_user_~size#1; [2025-02-08 02:31:15,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5826-1: __copy_to_user_#t~switch137#1 := 1 == __copy_to_user_~size#1; [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7484: assume 0 == vhost_log_write_~len#1 % 18446744073709551616;call vhost_log_write_#t~mem522#1.base, vhost_log_write_#t~mem522#1.offset := read~$Pointer$#14(vhost_log_write_~vq#1.base, 232 + vhost_log_write_~vq#1.offset, 8); [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7484: assume !(0 == vhost_log_write_~len#1 % 18446744073709551616);vhost_log_write_~i~9#1 := 1 + vhost_log_write_~i~9#1; [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8640-1: vhost_add_used_n_#res#1 := -14;call ULTIMATE.dealloc(vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset);havoc vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset; [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8607: assume vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8607: assume !vhost_add_used_n_#t~switch833#1;vhost_add_used_n_#t~switch833#1 := true; [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9945: assume 0 != ~tmp___11~4#1; [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9945: assume !(0 != ~tmp___11~4#1); [2025-02-08 02:31:16,016 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9962: havoc #t~mem1128#1.base, #t~mem1128#1.offset;havoc #t~ret1129#1; [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8624: assume 0 != vhost_add_used_n_~__ret_pu~0#1;call write~$Pointer$#15(136, 0, vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset, 8);call write~$Pointer$#15(137, 0, vhost_add_used_n_~#descriptor~4#1.base, 8 + vhost_add_used_n_~#descriptor~4#1.offset, 8);call write~$Pointer$#15(138, 0, vhost_add_used_n_~#descriptor~4#1.base, 16 + vhost_add_used_n_~#descriptor~4#1.offset, 8);call write~$Pointer$#15(139, 0, vhost_add_used_n_~#descriptor~4#1.base, 24 + vhost_add_used_n_~#descriptor~4#1.offset, 8);call write~int#15(1478, vhost_add_used_n_~#descriptor~4#1.base, 32 + vhost_add_used_n_~#descriptor~4#1.offset, 4);call write~int#15(0, vhost_add_used_n_~#descriptor~4#1.base, 36 + vhost_add_used_n_~#descriptor~4#1.offset, 1);call vhost_add_used_n_#t~mem834#1 := read~int#15(vhost_add_used_n_~#descriptor~4#1.base, 36 + vhost_add_used_n_~#descriptor~4#1.offset, 1); [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8624: assume !(0 != vhost_add_used_n_~__ret_pu~0#1);call vhost_add_used_n_#t~mem840#1 := read~int#14(vhost_add_used_n_~vq#1.base, 455 + vhost_add_used_n_~vq#1.offset, 1); [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9962-1: SUMMARY for call #t~ret1129#1 := eventfd_signal(#t~mem1128#1.base, #t~mem1128#1.offset, 1); srcloc: null [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9946: assume -2147483648 <= #t~ret1122#1 && #t~ret1122#1 <= 2147483647;~tmp___12~3#1 := #t~ret1122#1;havoc #t~ret1122#1; [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7485: assume 0 != (vhost_log_write_#t~mem522#1.base + vhost_log_write_#t~mem522#1.offset) % 18446744073709551616;havoc vhost_log_write_#t~mem522#1.base, vhost_log_write_#t~mem522#1.offset;call vhost_log_write_#t~mem523#1.base, vhost_log_write_#t~mem523#1.offset := read~$Pointer$#14(vhost_log_write_~vq#1.base, 232 + vhost_log_write_~vq#1.offset, 8); [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7485: assume !(0 != (vhost_log_write_#t~mem522#1.base + vhost_log_write_#t~mem522#1.offset) % 18446744073709551616);havoc vhost_log_write_#t~mem522#1.base, vhost_log_write_#t~mem522#1.offset; [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9781: assume -9223372036854775808 <= get_rx_bufs_#t~ret1072#1 && get_rx_bufs_#t~ret1072#1 <= 9223372036854775807;get_rx_bufs_~tmp___4~9#1 := get_rx_bufs_#t~ret1072#1;havoc get_rx_bufs_#t~ret1072#1; [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9781-1: SUMMARY for call get_rx_bufs_#t~ret1072#1 := ldv__builtin_expect((if 0 != (get_rx_bufs_~log#1.base + get_rx_bufs_~log#1.offset) % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9748: assume get_rx_bufs_#t~mem1059#1 % 4294967296 == get_rx_bufs_~d~0#1 % 4294967296;havoc get_rx_bufs_#t~mem1059#1;get_rx_bufs_~r~9#1 := 0; [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9748: assume !(get_rx_bufs_#t~mem1059#1 % 4294967296 == get_rx_bufs_~d~0#1 % 4294967296);havoc get_rx_bufs_#t~mem1059#1;call get_rx_bufs_#t~mem1060#1 := read~int#8(get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset, 4); [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9946-1: SUMMARY for call #t~ret1122#1 := memcpy_toiovecend(~vq~4#1.base, 16848 + ~vq~4#1.offset, ~#hdr~0#1.base, ~#hdr~0#1.offset, 0, (if ~vhost_hlen~0#1 % 18446744073709551616 % 4294967296 <= 2147483647 then ~vhost_hlen~0#1 % 18446744073709551616 % 4294967296 else ~vhost_hlen~0#1 % 18446744073709551616 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8823: havoc vhost_add_used_and_signal_n_#t~ret878#1, vhost_add_used_and_signal_n_~dev#1.base, vhost_add_used_and_signal_n_~dev#1.offset, vhost_add_used_and_signal_n_~vq#1.base, vhost_add_used_and_signal_n_~vq#1.offset, vhost_add_used_and_signal_n_~heads#1.base, vhost_add_used_and_signal_n_~heads#1.offset, vhost_add_used_and_signal_n_~count#1;havoc vhost_add_used_and_signal_n_#in~dev#1.base, vhost_add_used_and_signal_n_#in~dev#1.offset, vhost_add_used_and_signal_n_#in~vq#1.base, vhost_add_used_and_signal_n_#in~vq#1.offset, vhost_add_used_and_signal_n_#in~heads#1.base, vhost_add_used_and_signal_n_#in~heads#1.offset, vhost_add_used_and_signal_n_#in~count#1;assume { :end_inline_vhost_add_used_and_signal_n } true;havoc #t~mem1139#1.base, #t~mem1139#1.offset;havoc #t~mem1140#1; [2025-02-08 02:31:16,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8823-1: SUMMARY for call vhost_signal(vhost_add_used_and_signal_n_~dev#1.base, vhost_add_used_and_signal_n_~dev#1.offset, vhost_add_used_and_signal_n_~vq#1.base, vhost_add_used_and_signal_n_~vq#1.offset); srcloc: null [2025-02-08 02:31:16,019 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9996: call #t~mem1139#1.base, #t~mem1139#1.offset := read~$Pointer$#14(~vq~4#1.base, 17064 + ~vq~4#1.offset, 8);call #t~mem1140#1 := read~int#16(~#headcount~1#1.base, ~#headcount~1#1.offset, 2);assume { :begin_inline_vhost_add_used_and_signal_n } true;vhost_add_used_and_signal_n_#in~dev#1.base, vhost_add_used_and_signal_n_#in~dev#1.offset, vhost_add_used_and_signal_n_#in~vq#1.base, vhost_add_used_and_signal_n_#in~vq#1.offset, vhost_add_used_and_signal_n_#in~heads#1.base, vhost_add_used_and_signal_n_#in~heads#1.offset, vhost_add_used_and_signal_n_#in~count#1 := ~net#1.base, ~net#1.offset, ~vq~4#1.base, ~vq~4#1.offset, #t~mem1139#1.base, #t~mem1139#1.offset, #t~mem1140#1;havoc vhost_add_used_and_signal_n_#t~ret878#1, vhost_add_used_and_signal_n_~dev#1.base, vhost_add_used_and_signal_n_~dev#1.offset, vhost_add_used_and_signal_n_~vq#1.base, vhost_add_used_and_signal_n_~vq#1.offset, vhost_add_used_and_signal_n_~heads#1.base, vhost_add_used_and_signal_n_~heads#1.offset, vhost_add_used_and_signal_n_~count#1;vhost_add_used_and_signal_n_~dev#1.base, vhost_add_used_and_signal_n_~dev#1.offset := vhost_add_used_and_signal_n_#in~dev#1.base, vhost_add_used_and_signal_n_#in~dev#1.offset;vhost_add_used_and_signal_n_~vq#1.base, vhost_add_used_and_signal_n_~vq#1.offset := vhost_add_used_and_signal_n_#in~vq#1.base, vhost_add_used_and_signal_n_#in~vq#1.offset;vhost_add_used_and_signal_n_~heads#1.base, vhost_add_used_and_signal_n_~heads#1.offset := vhost_add_used_and_signal_n_#in~heads#1.base, vhost_add_used_and_signal_n_#in~heads#1.offset;vhost_add_used_and_signal_n_~count#1 := vhost_add_used_and_signal_n_#in~count#1;assume { :begin_inline_vhost_add_used_n } true;vhost_add_used_n_#in~vq#1.base, vhost_add_used_n_#in~vq#1.offset, vhost_add_used_n_#in~heads#1.base, vhost_add_used_n_#in~heads#1.offset, vhost_add_used_n_#in~count#1 := vhost_add_used_and_signal_n_~vq#1.base, vhost_add_used_and_signal_n_~vq#1.offset, vhost_add_used_and_signal_n_~heads#1.base, vhost_add_used_and_signal_n_~heads#1.offset, vhost_add_used_and_signal_n_~count#1;havoc vhost_add_used_n_#res#1;havoc vhost_add_used_n_#t~mem827#1, vhost_add_used_n_#t~mem828#1, vhost_add_used_n_#t~mem829#1, vhost_add_used_n_#t~ret830#1, vhost_add_used_n_#t~ret831#1, vhost_add_used_n_#t~mem832#1, vhost_add_used_n_#t~switch833#1, vhost_add_used_n_#t~mem834#1, vhost_add_used_n_#t~ret835#1, vhost_add_used_n_#t~ret836#1, vhost_add_used_n_#t~mem837#1.base, vhost_add_used_n_#t~mem837#1.offset, vhost_add_used_n_#t~mem838#1.base, vhost_add_used_n_#t~mem838#1.offset, vhost_add_used_n_#t~ret839#1, vhost_add_used_n_#t~mem840#1, vhost_add_used_n_#t~ret841#1, vhost_add_used_n_#t~mem842#1.base, vhost_add_used_n_#t~mem842#1.offset, vhost_add_used_n_#t~mem843#1, vhost_add_used_n_#t~ret844#1, vhost_add_used_n_#t~mem845#1.base, vhost_add_used_n_#t~mem845#1.offset, vhost_add_used_n_#t~mem846#1.base, vhost_add_used_n_#t~mem846#1.offset, vhost_add_used_n_#t~ret847#1, vhost_add_used_n_~vq#1.base, vhost_add_used_n_~vq#1.offset, vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset, vhost_add_used_n_~count#1, vhost_add_used_n_~start~1#1, vhost_add_used_n_~n~0#1, vhost_add_used_n_~r~6#1, vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset, vhost_add_used_n_~tmp~44#1, vhost_add_used_n_~__ret_pu~0#1, vhost_add_used_n_~__pu_val~0#1, vhost_add_used_n_~tmp___0~28#1;vhost_add_used_n_~vq#1.base, vhost_add_used_n_~vq#1.offset := vhost_add_used_n_#in~vq#1.base, vhost_add_used_n_#in~vq#1.offset;vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset := vhost_add_used_n_#in~heads#1.base, vhost_add_used_n_#in~heads#1.offset;vhost_add_used_n_~count#1 := vhost_add_used_n_#in~count#1;havoc vhost_add_used_n_~start~1#1;havoc vhost_add_used_n_~n~0#1;havoc vhost_add_used_n_~r~6#1;call vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset := #Ultimate.allocOnStack(37);havoc vhost_add_used_n_~tmp~44#1;havoc vhost_add_used_n_~__ret_pu~0#1;havoc vhost_add_used_n_~__pu_val~0#1;havoc vhost_add_used_n_~tmp___0~28#1;call vhost_add_used_n_#t~mem827#1 := read~int#14(vhost_add_used_n_~vq#1.base, 448 + vhost_add_used_n_~vq#1.offset, 2);call vhost_add_used_n_#t~mem828#1 := read~int#14(vhost_add_used_n_~vq#1.base, 164 + vhost_add_used_n_~vq#1.offset, 4);vhost_add_used_n_~start~1#1 := (if vhost_add_used_n_#t~mem827#1 % 65536 % 4294967296 % (vhost_add_used_n_#t~mem828#1 % 4294967296) % 4294967296 % 4294967296 <= 2147483647 then vhost_add_used_n_#t~mem827#1 % 65536 % 4294967296 % (vhost_add_used_n_#t~mem828#1 % 4294967296) % 4294967296 % 4294967296 else vhost_add_used_n_#t~mem827#1 % 65536 % 4294967296 % (vhost_add_used_n_#t~mem828#1 % 4294967296) % 4294967296 % 4294967296 - 4294967296);havoc vhost_add_used_n_#t~mem827#1;havoc vhost_add_used_n_#t~mem828#1;call vhost_add_used_n_#t~mem829#1 := read~int#14(vhost_add_used_n_~vq#1.base, 164 + vhost_add_used_n_~vq#1.offset, 4);vhost_add_used_n_~n~0#1 := (if (vhost_add_used_n_#t~mem829#1 - vhost_add_used_n_~start~1#1) % 4294967296 % 4294967296 <= 2147483647 then (vhost_add_used_n_#t~mem829#1 - vhost_add_used_n_~start~1#1) % 4294967296 % 4294967296 else (vhost_add_used_n_#t~mem829#1 - vhost_add_used_n_~start~1#1) % 4294967296 % 4294967296 - 4294967296);havoc vhost_add_used_n_#t~mem829#1; [2025-02-08 02:31:16,019 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8592: assume vhost_add_used_n_~n~0#1 % 4294967296 < vhost_add_used_n_~count#1 % 4294967296; [2025-02-08 02:31:16,019 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8592: assume !(vhost_add_used_n_~n~0#1 % 4294967296 < vhost_add_used_n_~count#1 % 4294967296); [2025-02-08 02:31:16,019 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7502-1: vhost_log_write_#res#1 := 0; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9897: assume -9223372036854775808 <= #t~ret1093#1 && #t~ret1093#1 <= 9223372036854775807;~tmp___2~24#1 := #t~ret1093#1;havoc #t~ret1093#1;call #t~mem1094#1.base, #t~mem1094#1.offset := read~$Pointer$#14(~vq~4#1.base, 17064 + ~vq~4#1.offset, 8);assume { :begin_inline_get_rx_bufs } true;get_rx_bufs_#in~vq#1.base, get_rx_bufs_#in~vq#1.offset, get_rx_bufs_#in~heads#1.base, get_rx_bufs_#in~heads#1.offset, get_rx_bufs_#in~datalen#1, get_rx_bufs_#in~iovcount#1.base, get_rx_bufs_#in~iovcount#1.offset, get_rx_bufs_#in~log#1.base, get_rx_bufs_#in~log#1.offset, get_rx_bufs_#in~log_num#1.base, get_rx_bufs_#in~log_num#1.offset, get_rx_bufs_#in~quota#1 := ~vq~4#1.base, ~vq~4#1.offset, #t~mem1094#1.base, #t~mem1094#1.offset, (if ~vhost_len~0#1 % 18446744073709551616 % 4294967296 <= 2147483647 then ~vhost_len~0#1 % 18446744073709551616 % 4294967296 else ~vhost_len~0#1 % 18446744073709551616 % 4294967296 - 4294967296), ~#in~2#1.base, ~#in~2#1.offset, ~vq_log~0#1.base, ~vq_log~0#1.offset, ~#log~2#1.base, ~#log~2#1.offset, (if 0 != ~tmp___2~24#1 then 1024 else 1);havoc get_rx_bufs_#res#1;havoc get_rx_bufs_#t~ret1056#1, get_rx_bufs_#t~mem1057#1.base, get_rx_bufs_#t~mem1057#1.offset, get_rx_bufs_#t~ret1058#1, get_rx_bufs_#t~mem1059#1, get_rx_bufs_#t~mem1060#1, get_rx_bufs_#t~ret1061#1, get_rx_bufs_#t~mem1062#1, get_rx_bufs_#t~ret1063#1, get_rx_bufs_#t~mem1064#1, get_rx_bufs_#t~ret1065#1, get_rx_bufs_#t~mem1066#1, get_rx_bufs_#t~mem1067#1, get_rx_bufs_#t~ret1068#1, get_rx_bufs_#t~mem1069#1.base, get_rx_bufs_#t~mem1069#1.offset, get_rx_bufs_#t~mem1070#1.base, get_rx_bufs_#t~mem1070#1.offset, get_rx_bufs_#t~ret1071#1, get_rx_bufs_#t~ret1072#1, get_rx_bufs_#t~mem1073#1, get_rx_bufs_#t~mem1074#1, get_rx_bufs_#t~mem1075#1, get_rx_bufs_#t~ret1076#1, get_rx_bufs_#t~mem1077#1, get_rx_bufs_#t~mem1078#1, get_rx_bufs_#t~mem1079#1, get_rx_bufs_#t~ret1080#1, get_rx_bufs_~vq#1.base, get_rx_bufs_~vq#1.offset, get_rx_bufs_~heads#1.base, get_rx_bufs_~heads#1.offset, get_rx_bufs_~datalen#1, get_rx_bufs_~iovcount#1.base, get_rx_bufs_~iovcount#1.offset, get_rx_bufs_~log#1.base, get_rx_bufs_~log#1.offset, get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset, get_rx_bufs_~quota#1, get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset, get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, get_rx_bufs_~seg~3#1, get_rx_bufs_~headcount~0#1, get_rx_bufs_~d~0#1, get_rx_bufs_~r~9#1, get_rx_bufs_~nlogs~0#1, get_rx_bufs_~tmp~59#1, get_rx_bufs_~tmp___0~39#1, get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset, get_rx_bufs_~tmp___1~28#1, get_rx_bufs_~tmp___2~23#1, get_rx_bufs_~tmp___3~15#1, get_rx_bufs_~tmp___4~9#1, get_rx_bufs_~tmp___5~9#1, get_rx_bufs_~tmp___6~7#1;get_rx_bufs_~vq#1.base, get_rx_bufs_~vq#1.offset := get_rx_bufs_#in~vq#1.base, get_rx_bufs_#in~vq#1.offset;get_rx_bufs_~heads#1.base, get_rx_bufs_~heads#1.offset := get_rx_bufs_#in~heads#1.base, get_rx_bufs_#in~heads#1.offset;get_rx_bufs_~datalen#1 := get_rx_bufs_#in~datalen#1;get_rx_bufs_~iovcount#1.base, get_rx_bufs_~iovcount#1.offset := get_rx_bufs_#in~iovcount#1.base, get_rx_bufs_#in~iovcount#1.offset;get_rx_bufs_~log#1.base, get_rx_bufs_~log#1.offset := get_rx_bufs_#in~log#1.base, get_rx_bufs_#in~log#1.offset;get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset := get_rx_bufs_#in~log_num#1.base, get_rx_bufs_#in~log_num#1.offset;get_rx_bufs_~quota#1 := get_rx_bufs_#in~quota#1;call get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset := #Ultimate.allocOnStack(4);call get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset := #Ultimate.allocOnStack(4);havoc get_rx_bufs_~seg~3#1;havoc get_rx_bufs_~headcount~0#1;havoc get_rx_bufs_~d~0#1;havoc get_rx_bufs_~r~9#1;havoc get_rx_bufs_~nlogs~0#1;havoc get_rx_bufs_~tmp~59#1;havoc get_rx_bufs_~tmp___0~39#1;call get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset := #Ultimate.allocOnStack(37);havoc get_rx_bufs_~tmp___1~28#1;havoc get_rx_bufs_~tmp___2~23#1;havoc get_rx_bufs_~tmp___3~15#1;havoc get_rx_bufs_~tmp___4~9#1;havoc get_rx_bufs_~tmp___5~9#1;havoc get_rx_bufs_~tmp___6~7#1;get_rx_bufs_~seg~3#1 := 0;get_rx_bufs_~headcount~0#1 := 0;get_rx_bufs_~nlogs~0#1 := 0; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9897-1: SUMMARY for call #t~ret1093#1 := ldv__builtin_expect((if 0 != ~mergeable~0#1 then 1 else 0), 1); srcloc: null [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7486: havoc vhost_log_write_#t~mem523#1.base, vhost_log_write_#t~mem523#1.offset;havoc vhost_log_write_#t~ret524#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7486-1: SUMMARY for call vhost_log_write_#t~ret524#1 := eventfd_signal(vhost_log_write_#t~mem523#1.base, vhost_log_write_#t~mem523#1.offset, 1); srcloc: null [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9997: assume -9223372036854775808 <= #t~ret1141#1 && #t~ret1141#1 <= 9223372036854775807;~tmp___16~3#1 := #t~ret1141#1;havoc #t~ret1141#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9997-1: SUMMARY for call #t~ret1141#1 := ldv__builtin_expect((if 0 != (~vq_log~0#1.base + ~vq_log~0#1.offset) % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9419: assume 0 != copy_iovec_hdr_~len#1 % 18446744073709551616 && copy_iovec_hdr_~seg~2#1 < copy_iovec_hdr_~iovcount#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9419: assume !(0 != copy_iovec_hdr_~len#1 % 18446744073709551616 && copy_iovec_hdr_~seg~2#1 < copy_iovec_hdr_~iovcount#1); [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8593: assume -2147483648 <= vhost_add_used_n_#t~ret830#1 && vhost_add_used_n_#t~ret830#1 <= 2147483647;vhost_add_used_n_~r~6#1 := vhost_add_used_n_#t~ret830#1;havoc vhost_add_used_n_#t~ret830#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8593-1: SUMMARY for call vhost_add_used_n_#t~ret830#1 := __vhost_add_used_n(vhost_add_used_n_~vq#1.base, vhost_add_used_n_~vq#1.offset, vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset, vhost_add_used_n_~n~0#1); srcloc: null [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9766-1: SUMMARY for call get_rx_bufs_#t~ret1065#1 := ldv__builtin_expect((if get_rx_bufs_#t~mem1064#1 % 256 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_#t~mem1064#1 % 256 % 18446744073709551616 else get_rx_bufs_#t~mem1064#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8643: assume -9223372036854775808 <= vhost_add_used_n_#t~ret841#1 && vhost_add_used_n_#t~ret841#1 <= 9223372036854775807;vhost_add_used_n_~tmp___0~28#1 := vhost_add_used_n_#t~ret841#1;havoc vhost_add_used_n_#t~mem840#1;havoc vhost_add_used_n_#t~ret841#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8643-1: SUMMARY for call vhost_add_used_n_#t~ret841#1 := ldv__builtin_expect((if vhost_add_used_n_#t~mem840#1 % 256 % 18446744073709551616 <= 9223372036854775807 then vhost_add_used_n_#t~mem840#1 % 256 % 18446744073709551616 else vhost_add_used_n_#t~mem840#1 % 256 % 18446744073709551616 - 18446744073709551616), 0); srcloc: null [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8610: assume vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8610: assume !vhost_add_used_n_#t~switch833#1;vhost_add_used_n_#t~switch833#1 := vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,020 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9766: assume -9223372036854775808 <= get_rx_bufs_#t~ret1065#1 && get_rx_bufs_#t~ret1065#1 <= 9223372036854775807;get_rx_bufs_~tmp___1~28#1 := get_rx_bufs_#t~ret1065#1;havoc get_rx_bufs_#t~mem1064#1;havoc get_rx_bufs_#t~ret1065#1; [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9981: assume -9223372036854775808 <= #t~ret1133#1 && #t~ret1133#1 <= 9223372036854775807;~tmp___13~3#1 := #t~ret1133#1;havoc #t~mem1132#1;havoc #t~ret1133#1; [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9981-1: SUMMARY for call #t~ret1133#1 := ldv__builtin_expect((if #t~mem1132#1 % 256 % 18446744073709551616 <= 9223372036854775807 then #t~mem1132#1 % 256 % 18446744073709551616 else #t~mem1132#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9948: assume 0 != ~tmp___12~3#1;call write~$Pointer$#15(198, 0, ~#descriptor___0~6#1.base, ~#descriptor___0~6#1.offset, 8);call write~$Pointer$#15(199, 0, ~#descriptor___0~6#1.base, 8 + ~#descriptor___0~6#1.offset, 8);call write~$Pointer$#15(200, 0, ~#descriptor___0~6#1.base, 16 + ~#descriptor___0~6#1.offset, 8);call write~$Pointer$#15(201, 0, ~#descriptor___0~6#1.base, 24 + ~#descriptor___0~6#1.offset, 8);call write~int#15(486, ~#descriptor___0~6#1.base, 32 + ~#descriptor___0~6#1.offset, 4);call write~int#15(0, ~#descriptor___0~6#1.base, 36 + ~#descriptor___0~6#1.offset, 1);call #t~mem1123#1 := read~int#15(~#descriptor___0~6#1.base, 36 + ~#descriptor___0~6#1.offset, 1); [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9948: assume !(0 != ~tmp___12~3#1); [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9717: call ULTIMATE.dealloc(get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset);havoc get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset;call ULTIMATE.dealloc(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset);havoc get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset;call ULTIMATE.dealloc(get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset);havoc get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset; [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8594: assume vhost_add_used_n_~r~6#1 < 0;vhost_add_used_n_#res#1 := vhost_add_used_n_~r~6#1;call ULTIMATE.dealloc(vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset);havoc vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset; [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8594: assume !(vhost_add_used_n_~r~6#1 < 0);vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset := vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset + 8 * (if vhost_add_used_n_~n~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_add_used_n_~n~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_add_used_n_~n~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);vhost_add_used_n_~count#1 := vhost_add_used_n_~count#1 - vhost_add_used_n_~n~0#1; [2025-02-08 02:31:16,021 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9783: assume 0 != get_rx_bufs_~tmp___4~9#1;call get_rx_bufs_#t~mem1073#1 := read~int#4(get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset, 4);get_rx_bufs_~nlogs~0#1 := (if (get_rx_bufs_#t~mem1073#1 + get_rx_bufs_~nlogs~0#1) % 4294967296 % 4294967296 <= 2147483647 then (get_rx_bufs_#t~mem1073#1 + get_rx_bufs_~nlogs~0#1) % 4294967296 % 4294967296 else (get_rx_bufs_#t~mem1073#1 + get_rx_bufs_~nlogs~0#1) % 4294967296 % 4294967296 - 4294967296);havoc get_rx_bufs_#t~mem1073#1;call get_rx_bufs_#t~mem1074#1 := read~int#4(get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset, 4);get_rx_bufs_~log#1.base, get_rx_bufs_~log#1.offset := get_rx_bufs_~log#1.base, get_rx_bufs_~log#1.offset + 16 * (if get_rx_bufs_#t~mem1074#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_#t~mem1074#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else get_rx_bufs_#t~mem1074#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);havoc get_rx_bufs_#t~mem1074#1; [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9783: assume !(0 != get_rx_bufs_~tmp___4~9#1); [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8644: assume 0 != vhost_add_used_n_~tmp___0~28#1;call vhost_add_used_n_#t~mem842#1.base, vhost_add_used_n_#t~mem842#1.offset := read~$Pointer$#14(vhost_add_used_n_~vq#1.base, 17080 + vhost_add_used_n_~vq#1.offset, 8);call vhost_add_used_n_#t~mem843#1 := read~int#14(vhost_add_used_n_~vq#1.base, 456 + vhost_add_used_n_~vq#1.offset, 8); [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8644: assume !(0 != vhost_add_used_n_~tmp___0~28#1); [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9767: assume 0 != get_rx_bufs_~tmp___1~28#1;call get_rx_bufs_#t~mem1066#1 := read~int#8(get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset, 4);call get_rx_bufs_#t~mem1067#1 := read~int#3(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, 4); [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9767: assume !(0 != get_rx_bufs_~tmp___1~28#1); [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9916: assume -9223372036854775808 <= #t~ret1101#1 && #t~ret1101#1 <= 9223372036854775807;~tmp___7~6#1 := #t~ret1101#1;havoc #t~ret1101#1; [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9916-1: SUMMARY for call #t~ret1101#1 := ldv__builtin_expect((if 0 != ~vhost_hlen~0#1 % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9982: assume 0 != ~tmp___13~3#1; [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9982: assume !(0 != ~tmp___13~3#1); [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8595: vhost_add_used_and_signal_n_#t~ret878#1 := vhost_add_used_n_#res#1;havoc vhost_add_used_n_#t~mem827#1, vhost_add_used_n_#t~mem828#1, vhost_add_used_n_#t~mem829#1, vhost_add_used_n_#t~ret830#1, vhost_add_used_n_#t~ret831#1, vhost_add_used_n_#t~mem832#1, vhost_add_used_n_#t~switch833#1, vhost_add_used_n_#t~mem834#1, vhost_add_used_n_#t~ret835#1, vhost_add_used_n_#t~ret836#1, vhost_add_used_n_#t~mem837#1.base, vhost_add_used_n_#t~mem837#1.offset, vhost_add_used_n_#t~mem838#1.base, vhost_add_used_n_#t~mem838#1.offset, vhost_add_used_n_#t~ret839#1, vhost_add_used_n_#t~mem840#1, vhost_add_used_n_#t~ret841#1, vhost_add_used_n_#t~mem842#1.base, vhost_add_used_n_#t~mem842#1.offset, vhost_add_used_n_#t~mem843#1, vhost_add_used_n_#t~ret844#1, vhost_add_used_n_#t~mem845#1.base, vhost_add_used_n_#t~mem845#1.offset, vhost_add_used_n_#t~mem846#1.base, vhost_add_used_n_#t~mem846#1.offset, vhost_add_used_n_#t~ret847#1, vhost_add_used_n_~vq#1.base, vhost_add_used_n_~vq#1.offset, vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset, vhost_add_used_n_~count#1, vhost_add_used_n_~start~1#1, vhost_add_used_n_~n~0#1, vhost_add_used_n_~r~6#1, vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset, vhost_add_used_n_~tmp~44#1, vhost_add_used_n_~__ret_pu~0#1, vhost_add_used_n_~__pu_val~0#1, vhost_add_used_n_~tmp___0~28#1;havoc vhost_add_used_n_#in~vq#1.base, vhost_add_used_n_#in~vq#1.offset, vhost_add_used_n_#in~heads#1.base, vhost_add_used_n_#in~heads#1.offset, vhost_add_used_n_#in~count#1;assume { :end_inline_vhost_add_used_n } true;assume -2147483648 <= vhost_add_used_and_signal_n_#t~ret878#1 && vhost_add_used_and_signal_n_#t~ret878#1 <= 2147483647;havoc vhost_add_used_and_signal_n_#t~ret878#1; [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9817: call ULTIMATE.dealloc(~#in~2#1.base, ~#in~2#1.offset);havoc ~#in~2#1.base, ~#in~2#1.offset;call ULTIMATE.dealloc(~#log~2#1.base, ~#log~2#1.offset);havoc ~#log~2#1.base, ~#log~2#1.offset;call ULTIMATE.dealloc(~#msg~1#1.base, ~#msg~1#1.offset);havoc ~#msg~1#1.base, ~#msg~1#1.offset;call ULTIMATE.dealloc(~#hdr~0#1.base, ~#hdr~0#1.offset);havoc ~#hdr~0#1.base, ~#hdr~0#1.offset;call ULTIMATE.dealloc(~#headcount~1#1.base, ~#headcount~1#1.offset);havoc ~#headcount~1#1.base, ~#headcount~1#1.offset;call ULTIMATE.dealloc(~#descriptor~10#1.base, ~#descriptor~10#1.offset);havoc ~#descriptor~10#1.base, ~#descriptor~10#1.offset;call ULTIMATE.dealloc(~#descriptor___0~6#1.base, ~#descriptor___0~6#1.offset);havoc ~#descriptor___0~6#1.base, ~#descriptor___0~6#1.offset;call ULTIMATE.dealloc(~#descriptor___1~5#1.base, ~#descriptor___1~5#1.offset);havoc ~#descriptor___1~5#1.base, ~#descriptor___1~5#1.offset; [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9900: assume -9223372036854775808 <= #t~ret1097#1 && #t~ret1097#1 <= 9223372036854775807;~tmp___4~10#1 := #t~ret1097#1;havoc #t~mem1096#1;havoc #t~ret1097#1; [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9900-1: SUMMARY for call #t~ret1097#1 := ldv__builtin_expect((if #t~mem1096#1 < 0 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,023 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9999: assume 0 != ~tmp___16~3#1;call #t~mem1142#1 := read~int#4(~#log~2#1.base, ~#log~2#1.offset, 4);assume { :begin_inline_vhost_log_write } true;vhost_log_write_#in~vq#1.base, vhost_log_write_#in~vq#1.offset, vhost_log_write_#in~log#1.base, vhost_log_write_#in~log#1.offset, vhost_log_write_#in~log_num#1, vhost_log_write_#in~len#1 := ~vq~4#1.base, ~vq~4#1.offset, ~vq_log~0#1.base, ~vq_log~0#1.offset, #t~mem1142#1, ~vhost_len~0#1;havoc vhost_log_write_#res#1;havoc vhost_log_write_#t~mem518#1, vhost_log_write_#t~mem519#1.base, vhost_log_write_#t~mem519#1.offset, vhost_log_write_#t~mem520#1, vhost_log_write_#t~ret521#1, vhost_log_write_#t~mem522#1.base, vhost_log_write_#t~mem522#1.offset, vhost_log_write_#t~mem523#1.base, vhost_log_write_#t~mem523#1.offset, vhost_log_write_#t~ret524#1, vhost_log_write_~vq#1.base, vhost_log_write_~vq#1.offset, vhost_log_write_~log#1.base, vhost_log_write_~log#1.offset, vhost_log_write_~log_num#1, vhost_log_write_~len#1, vhost_log_write_~i~9#1, vhost_log_write_~r~4#1, vhost_log_write_~l~0#1, vhost_log_write_~_min1~0#1, vhost_log_write_~_min2~0#1;vhost_log_write_~vq#1.base, vhost_log_write_~vq#1.offset := vhost_log_write_#in~vq#1.base, vhost_log_write_#in~vq#1.offset;vhost_log_write_~log#1.base, vhost_log_write_~log#1.offset := vhost_log_write_#in~log#1.base, vhost_log_write_#in~log#1.offset;vhost_log_write_~log_num#1 := vhost_log_write_#in~log_num#1;vhost_log_write_~len#1 := vhost_log_write_#in~len#1;havoc vhost_log_write_~i~9#1;havoc vhost_log_write_~r~4#1;havoc vhost_log_write_~l~0#1;havoc vhost_log_write_~_min1~0#1;havoc vhost_log_write_~_min2~0#1;vhost_log_write_~i~9#1 := 0; [2025-02-08 02:31:16,027 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9999: assume !(0 != ~tmp___16~3#1); [2025-02-08 02:31:16,027 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8645: assume -2147483648 <= vhost_add_used_n_#t~ret844#1 && vhost_add_used_n_#t~ret844#1 <= 2147483647;havoc vhost_add_used_n_#t~mem842#1.base, vhost_add_used_n_#t~mem842#1.offset;havoc vhost_add_used_n_#t~mem843#1;havoc vhost_add_used_n_#t~ret844#1;call vhost_add_used_n_#t~mem845#1.base, vhost_add_used_n_#t~mem845#1.offset := read~$Pointer$#14(vhost_add_used_n_~vq#1.base, 232 + vhost_add_used_n_~vq#1.offset, 8); [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8645-1: SUMMARY for call vhost_add_used_n_#t~ret844#1 := log_write(vhost_add_used_n_#t~mem842#1.base, vhost_add_used_n_#t~mem842#1.offset, 2 + vhost_add_used_n_#t~mem843#1, 2); srcloc: null [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9768: assume -2147483648 <= get_rx_bufs_#t~ret1068#1 && get_rx_bufs_#t~ret1068#1 <= 2147483647;havoc get_rx_bufs_#t~mem1066#1;havoc get_rx_bufs_#t~mem1067#1;havoc get_rx_bufs_#t~ret1068#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9768-1: SUMMARY for call get_rx_bufs_#t~ret1068#1 := __dynamic_pr_debug(get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset, 192, 0); srcloc: null [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9917: assume 0 != ~tmp___7~6#1;call #t~mem1102#1 := read~int#5(~#in~2#1.base, ~#in~2#1.offset, 4); [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9917: assume !(0 != ~tmp___7~6#1);call #t~mem1104#1 := read~int#5(~#in~2#1.base, ~#in~2#1.offset, 4);assume { :begin_inline_copy_iovec_hdr } true;copy_iovec_hdr_#in~from#1.base, copy_iovec_hdr_#in~from#1.offset, copy_iovec_hdr_#in~to#1.base, copy_iovec_hdr_#in~to#1.offset, copy_iovec_hdr_#in~len#1, copy_iovec_hdr_#in~iovcount#1 := ~vq~4#1.base, 464 + ~vq~4#1.offset, ~vq~4#1.base, 16848 + ~vq~4#1.offset, ~sock_hlen~0#1, (if #t~mem1104#1 % 4294967296 % 4294967296 <= 2147483647 then #t~mem1104#1 % 4294967296 % 4294967296 else #t~mem1104#1 % 4294967296 % 4294967296 - 4294967296);havoc copy_iovec_hdr_#t~mem963#1, copy_iovec_hdr_#t~mem964#1.base, copy_iovec_hdr_#t~mem964#1.offset, copy_iovec_hdr_~from#1.base, copy_iovec_hdr_~from#1.offset, copy_iovec_hdr_~to#1.base, copy_iovec_hdr_~to#1.offset, copy_iovec_hdr_~len#1, copy_iovec_hdr_~iovcount#1, copy_iovec_hdr_~seg~2#1, copy_iovec_hdr_~size~3#1, copy_iovec_hdr_~_min1~3#1, copy_iovec_hdr_~_min2~3#1;copy_iovec_hdr_~from#1.base, copy_iovec_hdr_~from#1.offset := copy_iovec_hdr_#in~from#1.base, copy_iovec_hdr_#in~from#1.offset;copy_iovec_hdr_~to#1.base, copy_iovec_hdr_~to#1.offset := copy_iovec_hdr_#in~to#1.base, copy_iovec_hdr_#in~to#1.offset;copy_iovec_hdr_~len#1 := copy_iovec_hdr_#in~len#1;copy_iovec_hdr_~iovcount#1 := copy_iovec_hdr_#in~iovcount#1;havoc copy_iovec_hdr_~seg~2#1;havoc copy_iovec_hdr_~size~3#1;havoc copy_iovec_hdr_~_min1~3#1;havoc copy_iovec_hdr_~_min2~3#1;copy_iovec_hdr_~seg~2#1 := 0; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7489-1: vhost_log_write_#res#1 := 0; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9983: assume -2147483648 <= #t~ret1134#1 && #t~ret1134#1 <= 2147483647;havoc #t~ret1134#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9983-1: SUMMARY for call #t~ret1134#1 := __dynamic_pr_debug(~#descriptor___1~5#1.base, ~#descriptor___1~5#1.offset, 207, 0); srcloc: null [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9934-1: SUMMARY for call #t~ret1118#1 := ldv__builtin_expect((if #t~mem1117#1 % 256 % 18446744073709551616 <= 9223372036854775807 then #t~mem1117#1 % 256 % 18446744073709551616 else #t~mem1117#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9901: assume 0 != ~tmp___4~10#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9901: assume !(0 != ~tmp___4~10#1);call #t~mem1098#1 := read~int#16(~#headcount~1#1.base, ~#headcount~1#1.offset, 2); [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9802: assume -9223372036854775808 <= get_rx_bufs_#t~ret1080#1 && get_rx_bufs_#t~ret1080#1 <= 9223372036854775807;get_rx_bufs_~tmp___6~7#1 := get_rx_bufs_#t~ret1080#1;havoc get_rx_bufs_#t~ret1080#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10000: #t~ret1143#1 := vhost_log_write_#res#1;havoc vhost_log_write_#t~mem518#1, vhost_log_write_#t~mem519#1.base, vhost_log_write_#t~mem519#1.offset, vhost_log_write_#t~mem520#1, vhost_log_write_#t~ret521#1, vhost_log_write_#t~mem522#1.base, vhost_log_write_#t~mem522#1.offset, vhost_log_write_#t~mem523#1.base, vhost_log_write_#t~mem523#1.offset, vhost_log_write_#t~ret524#1, vhost_log_write_~vq#1.base, vhost_log_write_~vq#1.offset, vhost_log_write_~log#1.base, vhost_log_write_~log#1.offset, vhost_log_write_~log_num#1, vhost_log_write_~len#1, vhost_log_write_~i~9#1, vhost_log_write_~r~4#1, vhost_log_write_~l~0#1, vhost_log_write_~_min1~0#1, vhost_log_write_~_min2~0#1;havoc vhost_log_write_#in~vq#1.base, vhost_log_write_#in~vq#1.offset, vhost_log_write_#in~log#1.base, vhost_log_write_#in~log#1.offset, vhost_log_write_#in~log_num#1, vhost_log_write_#in~len#1;assume { :end_inline_vhost_log_write } true;assume -2147483648 <= #t~ret1143#1 && #t~ret1143#1 <= 2147483647;havoc #t~mem1142#1;havoc #t~ret1143#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9934: assume -9223372036854775808 <= #t~ret1118#1 && #t~ret1118#1 <= 9223372036854775807;~tmp___8~5#1 := #t~ret1118#1;havoc #t~mem1117#1;havoc #t~ret1118#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8613: assume vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8613: assume !vhost_add_used_n_#t~switch833#1;vhost_add_used_n_#t~switch833#1 := vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9802-1: SUMMARY for call get_rx_bufs_#t~ret1080#1 := ldv__builtin_expect((if 0 != (get_rx_bufs_~log#1.base + get_rx_bufs_~log#1.offset) % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,028 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8646: assume 0 != (vhost_add_used_n_#t~mem845#1.base + vhost_add_used_n_#t~mem845#1.offset) % 18446744073709551616;havoc vhost_add_used_n_#t~mem845#1.base, vhost_add_used_n_#t~mem845#1.offset;call vhost_add_used_n_#t~mem846#1.base, vhost_add_used_n_#t~mem846#1.offset := read~$Pointer$#14(vhost_add_used_n_~vq#1.base, 232 + vhost_add_used_n_~vq#1.offset, 8); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8646: assume !(0 != (vhost_add_used_n_#t~mem845#1.base + vhost_add_used_n_#t~mem845#1.offset) % 18446744073709551616);havoc vhost_add_used_n_#t~mem845#1.base, vhost_add_used_n_#t~mem845#1.offset; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9918-1: SUMMARY for call #t~ret1103#1 := move_iovec_hdr(~vq~4#1.base, 464 + ~vq~4#1.offset, ~vq~4#1.base, 16848 + ~vq~4#1.offset, ~vhost_hlen~0#1, (if #t~mem1102#1 % 4294967296 % 4294967296 <= 2147483647 then #t~mem1102#1 % 4294967296 % 4294967296 else #t~mem1102#1 % 4294967296 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9918: assume -2147483648 <= #t~ret1103#1 && #t~ret1103#1 <= 2147483647;havoc #t~mem1102#1;havoc #t~ret1103#1; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9753: assume -9223372036854775808 <= get_rx_bufs_#t~ret1061#1 && get_rx_bufs_#t~ret1061#1 <= 9223372036854775807;get_rx_bufs_~tmp___2~23#1 := get_rx_bufs_#t~ret1061#1;havoc get_rx_bufs_#t~mem1060#1;havoc get_rx_bufs_#t~ret1061#1; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9753-1: SUMMARY for call get_rx_bufs_#t~ret1061#1 := ldv__builtin_expect((if 0 != get_rx_bufs_#t~mem1060#1 % 4294967296 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9935: assume 0 != ~tmp___8~5#1; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9935: assume !(0 != ~tmp___8~5#1); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9737: assume get_rx_bufs_~datalen#1 > 0 && get_rx_bufs_~headcount~0#1 % 4294967296 < get_rx_bufs_~quota#1 % 4294967296; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9737: assume !(get_rx_bufs_~datalen#1 > 0 && get_rx_bufs_~headcount~0#1 % 4294967296 < get_rx_bufs_~quota#1 % 4294967296);call get_rx_bufs_#t~mem1079#1 := read~int#14(get_rx_bufs_~heads#1.base, 4 + (get_rx_bufs_~heads#1.offset + 8 * (if (18446744073709551615 + get_rx_bufs_~headcount~0#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (18446744073709551615 + get_rx_bufs_~headcount~0#1) % 18446744073709551616 % 18446744073709551616 else (18446744073709551615 + get_rx_bufs_~headcount~0#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);call write~int#14(get_rx_bufs_#t~mem1079#1 + get_rx_bufs_~datalen#1, get_rx_bufs_~heads#1.base, 4 + (get_rx_bufs_~heads#1.offset + 8 * (if (18446744073709551615 + get_rx_bufs_~headcount~0#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (18446744073709551615 + get_rx_bufs_~headcount~0#1) % 18446744073709551616 % 18446744073709551616 else (18446744073709551615 + get_rx_bufs_~headcount~0#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);havoc get_rx_bufs_#t~mem1079#1;call write~int#5(get_rx_bufs_~seg~3#1, get_rx_bufs_~iovcount#1.base, get_rx_bufs_~iovcount#1.offset, 4); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8647: havoc vhost_add_used_n_#t~mem846#1.base, vhost_add_used_n_#t~mem846#1.offset;havoc vhost_add_used_n_#t~ret847#1; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8647-1: SUMMARY for call vhost_add_used_n_#t~ret847#1 := eventfd_signal(vhost_add_used_n_#t~mem846#1.base, vhost_add_used_n_#t~mem846#1.offset, 1); srcloc: null [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9754: assume 0 != get_rx_bufs_~tmp___2~23#1; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9754: assume !(0 != get_rx_bufs_~tmp___2~23#1);call get_rx_bufs_#t~mem1062#1 := read~int#3(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, 4); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7475: call vhost_log_write_#t~mem518#1 := read~int#14(vhost_log_write_~log#1.base, 8 + (vhost_log_write_~log#1.offset + 16 * (if vhost_log_write_~i~9#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_log_write_~i~9#1 % 18446744073709551616 % 18446744073709551616 else vhost_log_write_~i~9#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);vhost_log_write_~_min1~0#1 := vhost_log_write_#t~mem518#1;vhost_log_write_~_min2~0#1 := vhost_log_write_~len#1;vhost_log_write_~l~0#1 := (if vhost_log_write_~_min1~0#1 % 18446744073709551616 < vhost_log_write_~_min2~0#1 % 18446744073709551616 then vhost_log_write_~_min1~0#1 else vhost_log_write_~_min2~0#1);call vhost_log_write_#t~mem519#1.base, vhost_log_write_#t~mem519#1.offset := read~$Pointer$#14(vhost_log_write_~vq#1.base, 17080 + vhost_log_write_~vq#1.offset, 8);call vhost_log_write_#t~mem520#1 := read~int#14(vhost_log_write_~log#1.base, vhost_log_write_~log#1.offset + 16 * (if vhost_log_write_~i~9#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_log_write_~i~9#1 % 18446744073709551616 % 18446744073709551616 else vhost_log_write_~i~9#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 8); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8631: assume -9223372036854775808 <= vhost_add_used_n_#t~ret835#1 && vhost_add_used_n_#t~ret835#1 <= 9223372036854775807;vhost_add_used_n_~tmp~44#1 := vhost_add_used_n_#t~ret835#1;havoc vhost_add_used_n_#t~mem834#1;havoc vhost_add_used_n_#t~ret835#1; [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8631-1: SUMMARY for call vhost_add_used_n_#t~ret835#1 := ldv__builtin_expect((if vhost_add_used_n_#t~mem834#1 % 256 % 18446744073709551616 <= 9223372036854775807 then vhost_add_used_n_#t~mem834#1 % 256 % 18446744073709551616 else vhost_add_used_n_#t~mem834#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9804: assume 0 != get_rx_bufs_~tmp___6~7#1;call write~int#4(get_rx_bufs_~nlogs~0#1, get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset, 4); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9804: assume !(0 != get_rx_bufs_~tmp___6~7#1); [2025-02-08 02:31:16,029 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9936: assume -2147483648 <= #t~ret1119#1 && #t~ret1119#1 <= 2147483647;havoc #t~ret1119#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9936-1: SUMMARY for call #t~ret1119#1 := __dynamic_pr_debug(~#descriptor~10#1.base, ~#descriptor~10#1.offset, 197, 0); srcloc: null [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9986: assume 0 != (#t~mem1135#1.base + #t~mem1135#1.offset) % 18446744073709551616;havoc #t~mem1135#1.base, #t~mem1135#1.offset;call #t~mem1136#1.base, #t~mem1136#1.offset := read~$Pointer$#14(~vq~4#1.base, 224 + ~vq~4#1.offset, 8); [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9986: assume !(0 != (#t~mem1135#1.base + #t~mem1135#1.offset) % 18446744073709551616);havoc #t~mem1135#1.base, #t~mem1135#1.offset; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9788: call write~int#14(get_rx_bufs_~d~0#1, get_rx_bufs_~heads#1.base, get_rx_bufs_~heads#1.offset + 8 * (if get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 else get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 4);call get_rx_bufs_#t~mem1075#1 := read~int#3(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, 4); [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9986-1: call #t~mem1135#1.base, #t~mem1135#1.offset := read~$Pointer$#14(~vq~4#1.base, 224 + ~vq~4#1.offset, 8); [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10003: ~total_len~1#1 := ~total_len~1#1 + ~vhost_len~0#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9970: assume -9223372036854775808 <= #t~ret1130#1 && #t~ret1130#1 <= 9223372036854775807;~tmp___14~3#1 := #t~ret1130#1;havoc #t~ret1130#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8632: assume 0 != vhost_add_used_n_~tmp~44#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8632: assume !(0 != vhost_add_used_n_~tmp~44#1); [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9772: assume 0 != (get_rx_bufs_#t~mem1069#1.base + get_rx_bufs_#t~mem1069#1.offset) % 18446744073709551616;havoc get_rx_bufs_#t~mem1069#1.base, get_rx_bufs_#t~mem1069#1.offset;call get_rx_bufs_#t~mem1070#1.base, get_rx_bufs_#t~mem1070#1.offset := read~$Pointer$#14(get_rx_bufs_~vq#1.base, 224 + get_rx_bufs_~vq#1.offset, 8); [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9772: assume !(0 != (get_rx_bufs_#t~mem1069#1.base + get_rx_bufs_#t~mem1069#1.offset) % 18446744073709551616);havoc get_rx_bufs_#t~mem1069#1.base, get_rx_bufs_#t~mem1069#1.offset; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9772-1: call get_rx_bufs_#t~mem1069#1.base, get_rx_bufs_#t~mem1069#1.offset := read~$Pointer$#14(get_rx_bufs_~vq#1.base, 224 + get_rx_bufs_~vq#1.offset, 8); [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9739: assume -9223372036854775808 <= get_rx_bufs_#t~ret1056#1 && get_rx_bufs_#t~ret1056#1 <= 9223372036854775807;get_rx_bufs_~tmp~59#1 := get_rx_bufs_#t~ret1056#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9739-1: SUMMARY for call get_rx_bufs_#t~ret1056#1 := ldv__builtin_expect((if get_rx_bufs_~seg~3#1 > 1023 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9970-1: SUMMARY for call #t~ret1130#1 := ldv__builtin_expect((if 0 != ~mergeable~0#1 then 1 else 0), 1); srcloc: null [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9987: havoc #t~mem1136#1.base, #t~mem1136#1.offset;havoc #t~ret1137#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9987-1: SUMMARY for call #t~ret1137#1 := eventfd_signal(#t~mem1136#1.base, #t~mem1136#1.offset, 1); srcloc: null [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8616: assume vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8616: assume !vhost_add_used_n_#t~switch833#1;vhost_add_used_n_#t~switch833#1 := true; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9789: get_rx_bufs_~tmp___5~9#1 := get_rx_bufs_#t~ret1076#1;havoc get_rx_bufs_#t~mem1075#1;havoc get_rx_bufs_#t~ret1076#1;call write~int#14(get_rx_bufs_~tmp___5~9#1, get_rx_bufs_~heads#1.base, 4 + (get_rx_bufs_~heads#1.offset + 8 * (if get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 else get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);call get_rx_bufs_#t~mem1077#1 := read~int#14(get_rx_bufs_~heads#1.base, 4 + (get_rx_bufs_~heads#1.offset + 8 * (if get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 else get_rx_bufs_~headcount~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);get_rx_bufs_~datalen#1 := (if (get_rx_bufs_~datalen#1 - get_rx_bufs_#t~mem1077#1) % 4294967296 % 4294967296 <= 2147483647 then (get_rx_bufs_~datalen#1 - get_rx_bufs_#t~mem1077#1) % 4294967296 % 4294967296 else (get_rx_bufs_~datalen#1 - get_rx_bufs_#t~mem1077#1) % 4294967296 % 4294967296 - 4294967296);havoc get_rx_bufs_#t~mem1077#1;get_rx_bufs_~headcount~0#1 := 1 + get_rx_bufs_~headcount~0#1;call get_rx_bufs_#t~mem1078#1 := read~int#3(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, 4);get_rx_bufs_~seg~3#1 := (if (get_rx_bufs_~seg~3#1 + get_rx_bufs_#t~mem1078#1) % 4294967296 % 4294967296 <= 2147483647 then (get_rx_bufs_~seg~3#1 + get_rx_bufs_#t~mem1078#1) % 4294967296 % 4294967296 else (get_rx_bufs_~seg~3#1 + get_rx_bufs_#t~mem1078#1) % 4294967296 % 4294967296 - 4294967296);havoc get_rx_bufs_#t~mem1078#1; [2025-02-08 02:31:16,030 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9789-1: SUMMARY for call get_rx_bufs_#t~ret1076#1 := iov_length(get_rx_bufs_~vq#1.base, 464 + get_rx_bufs_~vq#1.offset + 16 * (if get_rx_bufs_~seg~3#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_~seg~3#1 % 18446744073709551616 % 18446744073709551616 else get_rx_bufs_~seg~3#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), get_rx_bufs_#t~mem1075#1 % 4294967296); srcloc: null [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9921: havoc copy_iovec_hdr_#t~mem963#1, copy_iovec_hdr_#t~mem964#1.base, copy_iovec_hdr_#t~mem964#1.offset, copy_iovec_hdr_~from#1.base, copy_iovec_hdr_~from#1.offset, copy_iovec_hdr_~to#1.base, copy_iovec_hdr_~to#1.offset, copy_iovec_hdr_~len#1, copy_iovec_hdr_~iovcount#1, copy_iovec_hdr_~seg~2#1, copy_iovec_hdr_~size~3#1, copy_iovec_hdr_~_min1~3#1, copy_iovec_hdr_~_min2~3#1;havoc copy_iovec_hdr_#in~from#1.base, copy_iovec_hdr_#in~from#1.offset, copy_iovec_hdr_#in~to#1.base, copy_iovec_hdr_#in~to#1.offset, copy_iovec_hdr_#in~len#1, copy_iovec_hdr_#in~iovcount#1;assume { :end_inline_copy_iovec_hdr } true;havoc #t~mem1104#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9409: call copy_iovec_hdr_#t~mem963#1 := read~int#14(copy_iovec_hdr_~from#1.base, 8 + copy_iovec_hdr_~from#1.offset, 8);copy_iovec_hdr_~_min1~3#1 := copy_iovec_hdr_#t~mem963#1;copy_iovec_hdr_~_min2~3#1 := copy_iovec_hdr_~len#1;copy_iovec_hdr_~size~3#1 := (if copy_iovec_hdr_~_min1~3#1 % 18446744073709551616 < copy_iovec_hdr_~_min2~3#1 % 18446744073709551616 then copy_iovec_hdr_~_min1~3#1 else copy_iovec_hdr_~_min2~3#1);call copy_iovec_hdr_#t~mem964#1.base, copy_iovec_hdr_#t~mem964#1.offset := read~$Pointer$#14(copy_iovec_hdr_~from#1.base, copy_iovec_hdr_~from#1.offset, 8);call write~$Pointer$#14(copy_iovec_hdr_#t~mem964#1.base, copy_iovec_hdr_#t~mem964#1.offset, copy_iovec_hdr_~to#1.base, copy_iovec_hdr_~to#1.offset, 8);havoc copy_iovec_hdr_#t~mem964#1.base, copy_iovec_hdr_#t~mem964#1.offset;call write~int#14(copy_iovec_hdr_~size~3#1, copy_iovec_hdr_~to#1.base, 8 + copy_iovec_hdr_~to#1.offset, 8);copy_iovec_hdr_~len#1 := copy_iovec_hdr_~len#1 - copy_iovec_hdr_~size~3#1;copy_iovec_hdr_~from#1.base, copy_iovec_hdr_~from#1.offset := copy_iovec_hdr_~from#1.base, 16 + copy_iovec_hdr_~from#1.offset;copy_iovec_hdr_~to#1.base, copy_iovec_hdr_~to#1.offset := copy_iovec_hdr_~to#1.base, 16 + copy_iovec_hdr_~to#1.offset;copy_iovec_hdr_~seg~2#1 := 1 + copy_iovec_hdr_~seg~2#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10004: assume -9223372036854775808 <= #t~ret1144#1 && #t~ret1144#1 <= 9223372036854775807;~tmp___17~1#1 := #t~ret1144#1;havoc #t~ret1144#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10004-1: SUMMARY for call #t~ret1144#1 := ldv__builtin_expect((if ~total_len~1#1 % 18446744073709551616 > 524287 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9971: assume 0 != ~tmp___14~3#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9971: assume !(0 != ~tmp___14~3#1); [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8633: assume -2147483648 <= vhost_add_used_n_#t~ret836#1 && vhost_add_used_n_#t~ret836#1 <= 2147483647;havoc vhost_add_used_n_#t~ret836#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8633-1: SUMMARY for call vhost_add_used_n_#t~ret836#1 := __dynamic_pr_debug(vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset, 140, 0); srcloc: null [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9773: havoc get_rx_bufs_#t~mem1070#1.base, get_rx_bufs_#t~mem1070#1.offset;havoc get_rx_bufs_#t~ret1071#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9773-1: SUMMARY for call get_rx_bufs_#t~ret1071#1 := eventfd_signal(get_rx_bufs_#t~mem1070#1.base, get_rx_bufs_#t~mem1070#1.offset, 1); srcloc: null [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9740: assume 0 != get_rx_bufs_~tmp~59#1;get_rx_bufs_~r~9#1 := -105; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9740: assume !(0 != get_rx_bufs_~tmp~59#1);call get_rx_bufs_#t~mem1057#1.base, get_rx_bufs_#t~mem1057#1.offset := read~$Pointer$#14(get_rx_bufs_~vq#1.base, get_rx_bufs_~vq#1.offset, 8); [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9905: assume 0 == #t~mem1098#1;havoc #t~mem1098#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9905: assume !(0 == #t~mem1098#1);havoc #t~mem1098#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7494: assume vhost_log_write_~i~9#1 % 4294967296 < vhost_log_write_~log_num#1 % 4294967296; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7494: assume !(vhost_log_write_~i~9#1 % 4294967296 < vhost_log_write_~log_num#1 % 4294967296); [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9955: assume -9223372036854775808 <= #t~ret1124#1 && #t~ret1124#1 <= 9223372036854775807;~tmp___10~5#1 := #t~ret1124#1;havoc #t~mem1123#1;havoc #t~ret1124#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9955-1: SUMMARY for call #t~ret1124#1 := ldv__builtin_expect((if #t~mem1123#1 % 256 % 18446744073709551616 <= 9223372036854775807 then #t~mem1123#1 % 256 % 18446744073709551616 else #t~mem1123#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8584: call ULTIMATE.dealloc(vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset);havoc vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9757: assume -9223372036854775808 <= get_rx_bufs_#t~ret1063#1 && get_rx_bufs_#t~ret1063#1 <= 9223372036854775807;get_rx_bufs_~tmp___3~15#1 := get_rx_bufs_#t~ret1063#1;havoc get_rx_bufs_#t~mem1062#1;havoc get_rx_bufs_#t~ret1063#1; [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9757-1: SUMMARY for call get_rx_bufs_#t~ret1063#1 := ldv__builtin_expect((if 0 == get_rx_bufs_#t~mem1062#1 % 4294967296 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,031 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10005: assume 0 != ~tmp___17~1#1; [2025-02-08 02:31:16,032 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10005: assume !(0 != ~tmp___17~1#1); [2025-02-08 02:31:16,032 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7478: assume -2147483648 <= vhost_log_write_#t~ret521#1 && vhost_log_write_#t~ret521#1 <= 2147483647;vhost_log_write_~r~4#1 := vhost_log_write_#t~ret521#1;havoc vhost_log_write_#t~mem519#1.base, vhost_log_write_#t~mem519#1.offset;havoc vhost_log_write_#t~mem520#1;havoc vhost_log_write_#t~ret521#1; [2025-02-08 02:31:16,032 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9972: assume -2147483648 <= #t~ret1131#1 && #t~ret1131#1 <= 2147483647;~tmp___15~3#1 := #t~ret1131#1;havoc #t~ret1131#1; [2025-02-08 02:31:16,032 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9972-1: SUMMARY for call #t~ret1131#1 := memcpy_toiovecend(~vq~4#1.base, 16848 + ~vq~4#1.offset, ~#headcount~1#1.base, ~#headcount~1#1.offset, 10, 2); srcloc: null [2025-02-08 02:31:16,032 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9906: ~tmp___5~10#1 := (if 0 == #t~ret1099#1 % 256 then 0 else 1);havoc #t~ret1099#1; [2025-02-08 02:31:16,032 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7478-1: SUMMARY for call vhost_log_write_#t~ret521#1 := log_write(vhost_log_write_#t~mem519#1.base, vhost_log_write_#t~mem519#1.offset, vhost_log_write_#t~mem520#1, vhost_log_write_~l~0#1); srcloc: null [2025-02-08 02:31:16,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9906-1: SUMMARY for call #t~ret1099#1 := vhost_enable_notify(~net#1.base, ~net#1.offset, ~vq~4#1.base, ~vq~4#1.offset); srcloc: null [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9956: assume 0 != ~tmp___10~5#1;call #t~mem1125#1.base, #t~mem1125#1.offset := read~$Pointer$#14(~vq~4#1.base, 464 + ~vq~4#1.offset, 8); [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9956: assume !(0 != ~tmp___10~5#1); [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8602: assume -2147483648 <= vhost_add_used_n_#t~ret831#1 && vhost_add_used_n_#t~ret831#1 <= 2147483647;vhost_add_used_n_~r~6#1 := vhost_add_used_n_#t~ret831#1;havoc vhost_add_used_n_#t~ret831#1;havoc vhost_add_used_n_#t~ret831#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9758: assume 0 != get_rx_bufs_~tmp___3~15#1;call write~$Pointer$#15(188, 0, get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset, 8);call write~$Pointer$#15(189, 0, get_rx_bufs_~#descriptor~9#1.base, 8 + get_rx_bufs_~#descriptor~9#1.offset, 8);call write~$Pointer$#15(190, 0, get_rx_bufs_~#descriptor~9#1.base, 16 + get_rx_bufs_~#descriptor~9#1.offset, 8);call write~$Pointer$#15(191, 0, get_rx_bufs_~#descriptor~9#1.base, 24 + get_rx_bufs_~#descriptor~9#1.offset, 8);call write~int#15(378, get_rx_bufs_~#descriptor~9#1.base, 32 + get_rx_bufs_~#descriptor~9#1.offset, 4);call write~int#15(0, get_rx_bufs_~#descriptor~9#1.base, 36 + get_rx_bufs_~#descriptor~9#1.offset, 1);call get_rx_bufs_#t~mem1064#1 := read~int#15(get_rx_bufs_~#descriptor~9#1.base, 36 + get_rx_bufs_~#descriptor~9#1.offset, 1); [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9758: assume !(0 != get_rx_bufs_~tmp___3~15#1); [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7479: assume vhost_log_write_~r~4#1 < 0;vhost_log_write_#res#1 := vhost_log_write_~r~4#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7479: assume !(vhost_log_write_~r~4#1 < 0);vhost_log_write_~len#1 := vhost_log_write_~len#1 - vhost_log_write_~l~0#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9940: havoc #t~mem1120#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9940-1: SUMMARY for call vhost_discard_vq_desc(~vq~4#1.base, ~vq~4#1.offset, #t~mem1120#1); srcloc: null [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9907: assume -9223372036854775808 <= #t~ret1100#1 && #t~ret1100#1 <= 9223372036854775807;~tmp___6~8#1 := #t~ret1100#1;havoc #t~ret1100#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9940-2: call #t~mem1120#1 := read~int#16(~#headcount~1#1.base, ~#headcount~1#1.offset, 2); [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9907-1: SUMMARY for call #t~ret1100#1 := ldv__builtin_expect((if ~tmp___5~10#1 % 256 % 18446744073709551616 <= 9223372036854775807 then ~tmp___5~10#1 % 256 % 18446744073709551616 else ~tmp___5~10#1 % 256 % 18446744073709551616 - 18446744073709551616), 0); srcloc: null [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8602-1: SUMMARY for call vhost_add_used_n_#t~ret831#1 := __vhost_add_used_n(vhost_add_used_n_~vq#1.base, vhost_add_used_n_~vq#1.offset, vhost_add_used_n_~heads#1.base, vhost_add_used_n_~heads#1.offset, vhost_add_used_n_~count#1); srcloc: null [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10006: SUMMARY for call vhost_poll_queue(~vq~4#1.base, 240 + ~vq~4#1.offset); srcloc: null [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8652-1: vhost_add_used_n_#res#1 := vhost_add_used_n_~r~6#1;call ULTIMATE.dealloc(vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset);havoc vhost_add_used_n_~#descriptor~4#1.base, vhost_add_used_n_~#descriptor~4#1.offset; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8619: assume vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8619: assume !vhost_add_used_n_#t~switch833#1;havoc vhost_add_used_n_#t~switch833#1;havoc vhost_add_used_n_#t~switch833#1; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9808: #t~ret1095#1 := get_rx_bufs_#res#1;havoc get_rx_bufs_#t~ret1056#1, get_rx_bufs_#t~mem1057#1.base, get_rx_bufs_#t~mem1057#1.offset, get_rx_bufs_#t~ret1058#1, get_rx_bufs_#t~mem1059#1, get_rx_bufs_#t~mem1060#1, get_rx_bufs_#t~ret1061#1, get_rx_bufs_#t~mem1062#1, get_rx_bufs_#t~ret1063#1, get_rx_bufs_#t~mem1064#1, get_rx_bufs_#t~ret1065#1, get_rx_bufs_#t~mem1066#1, get_rx_bufs_#t~mem1067#1, get_rx_bufs_#t~ret1068#1, get_rx_bufs_#t~mem1069#1.base, get_rx_bufs_#t~mem1069#1.offset, get_rx_bufs_#t~mem1070#1.base, get_rx_bufs_#t~mem1070#1.offset, get_rx_bufs_#t~ret1071#1, get_rx_bufs_#t~ret1072#1, get_rx_bufs_#t~mem1073#1, get_rx_bufs_#t~mem1074#1, get_rx_bufs_#t~mem1075#1, get_rx_bufs_#t~ret1076#1, get_rx_bufs_#t~mem1077#1, get_rx_bufs_#t~mem1078#1, get_rx_bufs_#t~mem1079#1, get_rx_bufs_#t~ret1080#1, get_rx_bufs_~vq#1.base, get_rx_bufs_~vq#1.offset, get_rx_bufs_~heads#1.base, get_rx_bufs_~heads#1.offset, get_rx_bufs_~datalen#1, get_rx_bufs_~iovcount#1.base, get_rx_bufs_~iovcount#1.offset, get_rx_bufs_~log#1.base, get_rx_bufs_~log#1.offset, get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset, get_rx_bufs_~quota#1, get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset, get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, get_rx_bufs_~seg~3#1, get_rx_bufs_~headcount~0#1, get_rx_bufs_~d~0#1, get_rx_bufs_~r~9#1, get_rx_bufs_~nlogs~0#1, get_rx_bufs_~tmp~59#1, get_rx_bufs_~tmp___0~39#1, get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset, get_rx_bufs_~tmp___1~28#1, get_rx_bufs_~tmp___2~23#1, get_rx_bufs_~tmp___3~15#1, get_rx_bufs_~tmp___4~9#1, get_rx_bufs_~tmp___5~9#1, get_rx_bufs_~tmp___6~7#1;havoc get_rx_bufs_#in~vq#1.base, get_rx_bufs_#in~vq#1.offset, get_rx_bufs_#in~heads#1.base, get_rx_bufs_#in~heads#1.offset, get_rx_bufs_#in~datalen#1, get_rx_bufs_#in~iovcount#1.base, get_rx_bufs_#in~iovcount#1.offset, get_rx_bufs_#in~log#1.base, get_rx_bufs_#in~log#1.offset, get_rx_bufs_#in~log_num#1.base, get_rx_bufs_#in~log_num#1.offset, get_rx_bufs_#in~quota#1;assume { :end_inline_get_rx_bufs } true;assume -2147483648 <= #t~ret1095#1 && #t~ret1095#1 <= 2147483647;~tmp___3~16#1 := #t~ret1095#1;havoc #t~mem1094#1.base, #t~mem1094#1.offset;havoc #t~ret1095#1;call write~int#16((if ~tmp___3~16#1 % 65536 <= 32767 then ~tmp___3~16#1 % 65536 else ~tmp___3~16#1 % 65536 - 65536), ~#headcount~1#1.base, ~#headcount~1#1.offset, 2);call #t~mem1096#1 := read~int#16(~#headcount~1#1.base, ~#headcount~1#1.offset, 2); [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9808-1: get_rx_bufs_#res#1 := get_rx_bufs_~headcount~0#1;call ULTIMATE.dealloc(get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset);havoc get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset;call ULTIMATE.dealloc(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset);havoc get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset;call ULTIMATE.dealloc(get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset);havoc get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset; [2025-02-08 02:31:16,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9990-1: SUMMARY for call vhost_discard_vq_desc(~vq~4#1.base, ~vq~4#1.offset, #t~mem1138#1); srcloc: null [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9957: assume -2147483648 <= #t~ret1126#1 && #t~ret1126#1 <= 2147483647;havoc #t~mem1125#1.base, #t~mem1125#1.offset;havoc #t~ret1126#1; [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9990-2: call #t~mem1138#1 := read~int#16(~#headcount~1#1.base, ~#headcount~1#1.offset, 2); [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9957-1: SUMMARY for call #t~ret1126#1 := __dynamic_pr_debug(~#descriptor___0~6#1.base, ~#descriptor___0~6#1.offset, 202, 0); srcloc: null [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9924: call #t~mem1105#1 := read~int#5(~#in~2#1.base, ~#in~2#1.offset, 4);call write~int#12(#t~mem1105#1 % 4294967296, ~#msg~1#1.base, 20 + ~#msg~1#1.offset, 8);havoc #t~mem1105#1;call #t~mem1113#1.base, #t~mem1113#1.offset := read~$Pointer$#14(~sock~1#1.base, 38 + ~sock~1#1.offset, 8);call #t~mem1114#1.base, #t~mem1114#1.offset := read~$Pointer$#14(#t~mem1113#1.base, 140 + #t~mem1113#1.offset, 8);assume { :begin_inline_##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int } true;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1108#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1108#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1109#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1109#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1110#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1110#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1111#1, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1112#1, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~#fp#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~#fp#1.offset := 0, 0, ~sock~1#1.base, ~sock~1#1.offset, ~#msg~1#1.base, ~#msg~1#1.offset, ~sock_len~0#1, 96, #t~mem1114#1.base, #t~mem1114#1.offset;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#res#1;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1108#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1108#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1109#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1109#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1110#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1110#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1111#1, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1112#1;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1108#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1108#1.offset := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1108#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1108#1.offset;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1109#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1109#1.offset := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1109#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1109#1.offset;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1110#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1110#1.offset := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1110#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1110#1.offset;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1111#1 := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1111#1;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1112#1 := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1112#1;#t~ret1115#1 := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#res#1;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1108#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1108#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1109#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1109#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1110#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1110#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1111#1, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#~1112#1;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1108#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1108#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1109#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1109#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1110#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1110#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1111#1, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~1112#1, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~#fp#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int_#in~#fp#1.offset;assume { :end_inline_##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~X~int~TO~int } true;assume -2147483648 <= #t~ret1115#1 && #t~ret1115#1 <= 2147483647;~err~2#1 := #t~ret1115#1;havoc #t~mem1113#1.base, #t~mem1113#1.offset;havoc #t~mem1114#1.base, #t~mem1114#1.offset;havoc #t~ret1115#1; [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9990: havoc #t~mem1138#1; [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8636: assume 0 != (vhost_add_used_n_#t~mem837#1.base + vhost_add_used_n_#t~mem837#1.offset) % 18446744073709551616;havoc vhost_add_used_n_#t~mem837#1.base, vhost_add_used_n_#t~mem837#1.offset;call vhost_add_used_n_#t~mem838#1.base, vhost_add_used_n_#t~mem838#1.offset := read~$Pointer$#14(vhost_add_used_n_~vq#1.base, 224 + vhost_add_used_n_~vq#1.offset, 8); [2025-02-08 02:31:16,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8636: assume !(0 != (vhost_add_used_n_#t~mem837#1.base + vhost_add_used_n_#t~mem837#1.offset) % 18446744073709551616);havoc vhost_add_used_n_#t~mem837#1.base, vhost_add_used_n_#t~mem837#1.offset; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8636-1: call vhost_add_used_n_#t~mem837#1.base, vhost_add_used_n_#t~mem837#1.offset := read~$Pointer$#14(vhost_add_used_n_~vq#1.base, 224 + vhost_add_used_n_~vq#1.offset, 8); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9908: assume 0 != ~tmp___6~8#1; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9908: assume !(0 != ~tmp___6~8#1); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9974: assume 0 != ~tmp___15~3#1;call write~$Pointer$#15(203, 0, ~#descriptor___1~5#1.base, ~#descriptor___1~5#1.offset, 8);call write~$Pointer$#15(204, 0, ~#descriptor___1~5#1.base, 8 + ~#descriptor___1~5#1.offset, 8);call write~$Pointer$#15(205, 0, ~#descriptor___1~5#1.base, 16 + ~#descriptor___1~5#1.offset, 8);call write~$Pointer$#15(206, 0, ~#descriptor___1~5#1.base, 24 + ~#descriptor___1~5#1.offset, 8);call write~int#15(494, ~#descriptor___1~5#1.base, 32 + ~#descriptor___1~5#1.offset, 4);call write~int#15(0, ~#descriptor___1~5#1.base, 36 + ~#descriptor___1~5#1.offset, 1);call #t~mem1132#1 := read~int#15(~#descriptor___1~5#1.base, 36 + ~#descriptor___1~5#1.offset, 1); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9974: assume !(0 != ~tmp___15~3#1); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9776: get_rx_bufs_~r~9#1 := -22; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8637: havoc vhost_add_used_n_#t~mem838#1.base, vhost_add_used_n_#t~mem838#1.offset;havoc vhost_add_used_n_#t~ret839#1; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8637-1: SUMMARY for call vhost_add_used_n_#t~ret839#1 := eventfd_signal(vhost_add_used_n_#t~mem838#1.base, vhost_add_used_n_#t~mem838#1.offset, 1); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8604: call vhost_add_used_n_#t~mem832#1 := read~int#14(vhost_add_used_n_~vq#1.base, 448 + vhost_add_used_n_~vq#1.offset, 2);vhost_add_used_n_~__pu_val~0#1 := vhost_add_used_n_#t~mem832#1;havoc vhost_add_used_n_#t~mem832#1;vhost_add_used_n_#t~switch833#1 := false; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8604-1: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9909: SUMMARY for call vhost_disable_notify(~net#1.base, ~net#1.offset, ~vq~4#1.base, ~vq~4#1.offset); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9810: get_rx_bufs_#res#1 := get_rx_bufs_~r~9#1;call ULTIMATE.dealloc(get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset);havoc get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset;call ULTIMATE.dealloc(get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset);havoc get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset;call ULTIMATE.dealloc(get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset);havoc get_rx_bufs_~#descriptor~9#1.base, get_rx_bufs_~#descriptor~9#1.offset; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9810-1: SUMMARY for call vhost_discard_vq_desc(get_rx_bufs_~vq#1.base, get_rx_bufs_~vq#1.offset, get_rx_bufs_~headcount~0#1); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9926-1: SUMMARY for call #t~ret1116#1 := ldv__builtin_expect((if ~err~2#1 % 18446744073709551616 != ~sock_len~0#1 % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9926: assume -9223372036854775808 <= #t~ret1116#1 && #t~ret1116#1 <= 9223372036854775807;~tmp___9~5#1 := #t~ret1116#1;havoc #t~ret1116#1; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9745: assume -2147483648 <= get_rx_bufs_#t~ret1058#1 && get_rx_bufs_#t~ret1058#1 <= 2147483647;get_rx_bufs_~tmp___0~39#1 := get_rx_bufs_#t~ret1058#1;havoc get_rx_bufs_#t~mem1057#1.base, get_rx_bufs_#t~mem1057#1.offset;havoc get_rx_bufs_#t~ret1058#1;get_rx_bufs_~d~0#1 := get_rx_bufs_~tmp___0~39#1;call get_rx_bufs_#t~mem1059#1 := read~int#14(get_rx_bufs_~vq#1.base, 164 + get_rx_bufs_~vq#1.offset, 4); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9745-1: SUMMARY for call get_rx_bufs_#t~ret1058#1 := vhost_get_vq_desc(get_rx_bufs_#t~mem1057#1.base, get_rx_bufs_#t~mem1057#1.offset, get_rx_bufs_~vq#1.base, get_rx_bufs_~vq#1.offset, get_rx_bufs_~vq#1.base, 464 + get_rx_bufs_~vq#1.offset + 16 * (if get_rx_bufs_~seg~3#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_rx_bufs_~seg~3#1 % 18446744073709551616 % 18446744073709551616 else get_rx_bufs_~seg~3#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1024 - get_rx_bufs_~seg~3#1, get_rx_bufs_~#out~1#1.base, get_rx_bufs_~#out~1#1.offset, get_rx_bufs_~#in~1#1.base, get_rx_bufs_~#in~1#1.offset, get_rx_bufs_~log#1.base, get_rx_bufs_~log#1.offset, get_rx_bufs_~log_num#1.base, get_rx_bufs_~log_num#1.offset); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9927: assume 0 != ~tmp___9~5#1;call write~$Pointer$#15(193, 0, ~#descriptor~10#1.base, ~#descriptor~10#1.offset, 8);call write~$Pointer$#15(194, 0, ~#descriptor~10#1.base, 8 + ~#descriptor~10#1.offset, 8);call write~$Pointer$#15(195, 0, ~#descriptor~10#1.base, 16 + ~#descriptor~10#1.offset, 8);call write~$Pointer$#15(196, 0, ~#descriptor~10#1.base, 24 + ~#descriptor~10#1.offset, 8);call write~int#15(478, ~#descriptor~10#1.base, 32 + ~#descriptor~10#1.offset, 4);call write~int#15(0, ~#descriptor~10#1.base, 36 + ~#descriptor~10#1.offset, 1);call #t~mem1117#1 := read~int#15(~#descriptor~10#1.base, 36 + ~#descriptor~10#1.offset, 1); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9927: assume !(0 != ~tmp___9~5#1); [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9944: assume -9223372036854775808 <= #t~ret1121#1 && #t~ret1121#1 <= 9223372036854775807;~tmp___11~4#1 := #t~ret1121#1;havoc #t~ret1121#1; [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9944-1: SUMMARY for call #t~ret1121#1 := ldv__builtin_expect((if 0 != ~vhost_hlen~0#1 % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9961: assume 0 != (#t~mem1127#1.base + #t~mem1127#1.offset) % 18446744073709551616;havoc #t~mem1127#1.base, #t~mem1127#1.offset;call #t~mem1128#1.base, #t~mem1128#1.offset := read~$Pointer$#14(~vq~4#1.base, 224 + ~vq~4#1.offset, 8); [2025-02-08 02:31:16,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9961: assume !(0 != (#t~mem1127#1.base + #t~mem1127#1.offset) % 18446744073709551616);havoc #t~mem1127#1.base, #t~mem1127#1.offset; [2025-02-08 02:31:16,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9961-1: call #t~mem1127#1.base, #t~mem1127#1.offset := read~$Pointer$#14(~vq~4#1.base, 224 + ~vq~4#1.offset, 8); [2025-02-08 02:31:16,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9895: ~sock_len~0#1 := ~sock_len~0#1 + ~sock_hlen~0#1;~vhost_len~0#1 := ~sock_len~0#1 + ~vhost_hlen~0#1; [2025-02-08 02:31:16,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6394: assume 0 != (vhost_dev_init_#t~mem254#1.base + vhost_dev_init_#t~mem254#1.offset) % 18446744073709551616;havoc vhost_dev_init_#t~mem253#1.base, vhost_dev_init_#t~mem253#1.offset;havoc vhost_dev_init_#t~mem254#1.base, vhost_dev_init_#t~mem254#1.offset;call vhost_dev_init_#t~mem255#1.base, vhost_dev_init_#t~mem255#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call vhost_dev_init_#t~mem256#1.base, vhost_dev_init_#t~mem256#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call vhost_dev_init_#t~mem257#1.base, vhost_dev_init_#t~mem257#1.offset := read~$Pointer$#14(vhost_dev_init_#t~mem256#1.base, 436 + (vhost_dev_init_#t~mem256#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6394: assume !(0 != (vhost_dev_init_#t~mem254#1.base + vhost_dev_init_#t~mem254#1.offset) % 18446744073709551616);havoc vhost_dev_init_#t~mem253#1.base, vhost_dev_init_#t~mem253#1.offset;havoc vhost_dev_init_#t~mem254#1.base, vhost_dev_init_#t~mem254#1.offset; [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6392-1: SUMMARY for call __mutex_init(vhost_dev_init_#t~mem251#1.base, 8 + (vhost_dev_init_#t~mem251#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 13, 0, vhost_dev_init_~#__key___1~0#1.base, vhost_dev_init_~#__key___1~0#1.offset); srcloc: null [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6392: havoc vhost_dev_init_#t~mem251#1.base, vhost_dev_init_#t~mem251#1.offset;call vhost_dev_init_#t~mem252#1.base, vhost_dev_init_#t~mem252#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8); [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6399: vhost_dev_init_~i~2#1 := 1 + vhost_dev_init_~i~2#1; [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6368: call ULTIMATE.dealloc(vhost_dev_init_~#__key~1#1.base, vhost_dev_init_~#__key~1#1.offset);havoc vhost_dev_init_~#__key~1#1.base, vhost_dev_init_~#__key~1#1.offset;call ULTIMATE.dealloc(vhost_dev_init_~#__key___0~0#1.base, vhost_dev_init_~#__key___0~0#1.offset);havoc vhost_dev_init_~#__key___0~0#1.base, vhost_dev_init_~#__key___0~0#1.offset;call ULTIMATE.dealloc(vhost_dev_init_~#__key___1~0#1.base, vhost_dev_init_~#__key___1~0#1.offset);havoc vhost_dev_init_~#__key___1~0#1.base, vhost_dev_init_~#__key___1~0#1.offset; [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6395-1: SUMMARY for call vhost_poll_init(vhost_dev_init_#t~mem255#1.base, 240 + (vhost_dev_init_#t~mem255#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), vhost_dev_init_#t~mem257#1.base, vhost_dev_init_#t~mem257#1.offset, 1, vhost_dev_init_~dev#1.base, vhost_dev_init_~dev#1.offset); srcloc: null [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6395: havoc vhost_dev_init_#t~mem255#1.base, vhost_dev_init_#t~mem255#1.offset;havoc vhost_dev_init_#t~mem256#1.base, vhost_dev_init_#t~mem256#1.offset;havoc vhost_dev_init_#t~mem257#1.base, vhost_dev_init_#t~mem257#1.offset; [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6393-1: SUMMARY for call vhost_vq_reset(vhost_dev_init_~dev#1.base, vhost_dev_init_~dev#1.offset, vhost_dev_init_#t~mem252#1.base, vhost_dev_init_#t~mem252#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6393: havoc vhost_dev_init_#t~mem252#1.base, vhost_dev_init_#t~mem252#1.offset;call vhost_dev_init_#t~mem253#1.base, vhost_dev_init_#t~mem253#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call vhost_dev_init_#t~mem254#1.base, vhost_dev_init_#t~mem254#1.offset := read~$Pointer$#14(vhost_dev_init_#t~mem253#1.base, 436 + (vhost_dev_init_#t~mem253#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6387: call vhost_dev_init_#t~mem246#1.base, vhost_dev_init_#t~mem246#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call write~$Pointer$#14(0, 0, vhost_dev_init_#t~mem246#1.base, 17088 + (vhost_dev_init_#t~mem246#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);call vhost_dev_init_#t~mem247#1.base, vhost_dev_init_#t~mem247#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call write~$Pointer$#14(0, 0, vhost_dev_init_#t~mem247#1.base, 17040 + (vhost_dev_init_#t~mem247#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_init_#t~mem247#1.base, vhost_dev_init_#t~mem247#1.offset;call vhost_dev_init_#t~mem248#1.base, vhost_dev_init_#t~mem248#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call write~$Pointer$#14(0, 0, vhost_dev_init_#t~mem248#1.base, 17064 + (vhost_dev_init_#t~mem248#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_init_#t~mem248#1.base, vhost_dev_init_#t~mem248#1.offset;call vhost_dev_init_#t~mem249#1.base, vhost_dev_init_#t~mem249#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call write~$Pointer$#14(0, 0, vhost_dev_init_#t~mem249#1.base, 17104 + (vhost_dev_init_#t~mem249#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_init_#t~mem249#1.base, vhost_dev_init_#t~mem249#1.offset;call vhost_dev_init_#t~mem250#1.base, vhost_dev_init_#t~mem250#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8);call write~$Pointer$#14(vhost_dev_init_~dev#1.base, vhost_dev_init_~dev#1.offset, vhost_dev_init_#t~mem250#1.base, vhost_dev_init_#t~mem250#1.offset + 17120 * (if vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_init_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 8);havoc vhost_dev_init_#t~mem250#1.base, vhost_dev_init_#t~mem250#1.offset;call vhost_dev_init_#t~mem251#1.base, vhost_dev_init_#t~mem251#1.offset := read~$Pointer$#14(vhost_dev_init_~dev#1.base, 176 + vhost_dev_init_~dev#1.offset, 8); [2025-02-08 02:31:16,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11523: havoc #t~ret1283.base, #t~ret1283.offset; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6684-1: SUMMARY for call #t~ret347 := log_access_ok(~log_base.base, ~log_base.offset, #t~mem345, #t~mem346); srcloc: null [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6683: assume 0 != ~log_all;call #t~mem345 := read~int#14(~m~0.base, ~m~0.offset, 8);call #t~mem346 := read~int#14(~m~0.base, 8 + ~m~0.offset, 8); [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6683: assume !(0 != ~log_all); [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6684: assume -2147483648 <= #t~ret347 && #t~ret347 <= 2147483647;~tmp~28 := #t~ret347;havoc #t~mem345;havoc #t~mem346;havoc #t~ret347; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6685: assume 0 == ~tmp~28;#res := 0; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6685: assume !(0 == ~tmp~28); [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6679-1: SUMMARY for call #t~ret344 := ldv__builtin_expect((if 0 == ~flag~1 % 18446744073709551616 then 1 else 0), 1); srcloc: null [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6679: assume -9223372036854775808 <= #t~ret344 && #t~ret344 <= 9223372036854775807;~tmp___1~10 := #t~ret344;havoc #t~ret344; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6680: assume 0 == ~tmp___1~10;#res := 0; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6680: assume !(0 == ~tmp___1~10); [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6674: ~m~0.base, ~m~0.offset := ~mem.base, 8 + ~mem.offset + 32 * (if ~i~5 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~5 % 18446744073709551616 % 18446744073709551616 else ~i~5 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call #t~mem342 := read~int#14(~m~0.base, 16 + ~m~0.offset, 8);~a~1 := #t~mem342;havoc #t~mem342; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6676-1: SUMMARY for call #t~ret343.base, #t~ret343.offset := current_thread_info(); srcloc: null [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6676: ~tmp___0~15.base, ~tmp___0~15.offset := #t~ret343.base, #t~ret343.offset;havoc #t~ret343.base, #t~ret343.offset;havoc #t~ret343.base, #t~ret343.offset; [2025-02-08 02:31:16,246 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6691: ~i~5 := 1 + ~i~5; [2025-02-08 02:31:16,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9379: call #t~mem959 := read~int#14(~from.base, 8 + ~from.offset, 8);~_min1~2 := #t~mem959;~_min2~2 := ~len;~size~2 := (if ~_min1~2 % 18446744073709551616 < ~_min2~2 % 18446744073709551616 then ~_min1~2 else ~_min2~2);call #t~mem960.base, #t~mem960.offset := read~$Pointer$#14(~from.base, ~from.offset, 8);call write~$Pointer$#14(#t~mem960.base, #t~mem960.offset, ~to.base, ~to.offset, 8);havoc #t~mem960.base, #t~mem960.offset;call write~int#14(~size~2, ~to.base, 8 + ~to.offset, 8);call #t~mem961 := read~int#14(~from.base, 8 + ~from.offset, 8);call write~int#14(#t~mem961 - ~size~2, ~from.base, 8 + ~from.offset, 8);havoc #t~mem961;call #t~mem962.base, #t~mem962.offset := read~$Pointer$#14(~from.base, ~from.offset, 8);call write~$Pointer$#14(#t~mem962.base, #t~mem962.offset + (if ~size~2 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~size~2 % 18446744073709551616 % 18446744073709551616 else ~size~2 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), ~from.base, ~from.offset, 8);havoc #t~mem962.base, #t~mem962.offset;~len := ~len - ~size~2;~from.base, ~from.offset := ~from.base, 16 + ~from.offset;~to.base, ~to.offset := ~to.base, 16 + ~to.offset;~seg~1 := 1 + ~seg~1; [2025-02-08 02:31:16,292 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6127: havoc list_add_tail_#t~mem6#1.base, list_add_tail_#t~mem6#1.offset, list_add_tail_~new#1.base, list_add_tail_~new#1.offset, list_add_tail_~head#1.base, list_add_tail_~head#1.offset;havoc list_add_tail_#in~new#1.base, list_add_tail_#in~new#1.offset, list_add_tail_#in~head#1.base, list_add_tail_#in~head#1.offset;assume { :end_inline_list_add_tail } true;call #t~mem185#1 := read~int#14(~work#1.base, 112 + ~work#1.offset, 4);call write~int#14(1 + #t~mem185#1, ~work#1.base, 112 + ~work#1.offset, 4);havoc #t~mem185#1;call #t~mem186#1.base, #t~mem186#1.offset := read~$Pointer$#14(~dev#1.base, 288 + ~dev#1.offset, 8); [2025-02-08 02:31:16,293 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6129: assume -2147483648 <= #t~ret187#1 && #t~ret187#1 <= 2147483647;havoc #t~mem186#1.base, #t~mem186#1.offset;havoc #t~ret187#1; [2025-02-08 02:31:16,293 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6129-1: SUMMARY for call #t~ret187#1 := wake_up_process(#t~mem186#1.base, #t~mem186#1.offset); srcloc: null [2025-02-08 02:31:16,293 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5260: havoc __list_add_~arg0#1.base, __list_add_~arg0#1.offset, __list_add_~arg1#1.base, __list_add_~arg1#1.offset, __list_add_~arg2#1.base, __list_add_~arg2#1.offset;havoc __list_add_#in~arg0#1.base, __list_add_#in~arg0#1.offset, __list_add_#in~arg1#1.base, __list_add_#in~arg1#1.offset, __list_add_#in~arg2#1.base, __list_add_#in~arg2#1.offset;assume { :end_inline___list_add } true;havoc list_add_tail_#t~mem6#1.base, list_add_tail_#t~mem6#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6559-1: SUMMARY for call vhost_ubuf_put_and_wait(#t~mem300#1.base, #t~mem300#1.offset); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6559: havoc #t~mem299#1.base, #t~mem299#1.offset;havoc #t~mem300#1.base, #t~mem300#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6555-1: SUMMARY for call vhost_poll_flush(#t~mem296#1.base, 240 + (#t~mem296#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616))); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6555: havoc #t~mem296#1.base, #t~mem296#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6580-1: SUMMARY for call fput(#t~mem322#1.base, #t~mem322#1.offset); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6580: havoc #t~mem321#1.base, #t~mem321#1.offset;havoc #t~mem322#1.base, #t~mem322#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6576-1: SUMMARY for call eventfd_ctx_put(#t~mem318#1.base, #t~mem318#1.offset); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6576: havoc #t~mem317#1.base, #t~mem317#1.offset;havoc #t~mem318#1.base, #t~mem318#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6572-1: SUMMARY for call fput(#t~mem314#1.base, #t~mem314#1.offset); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6572: havoc #t~mem313#1.base, #t~mem313#1.offset;havoc #t~mem314#1.base, #t~mem314#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6568-1: SUMMARY for call fput(#t~mem310#1.base, #t~mem310#1.offset); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6568: havoc #t~mem309#1.base, #t~mem309#1.offset;havoc #t~mem310#1.base, #t~mem310#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6564-1: SUMMARY for call eventfd_ctx_put(#t~mem306#1.base, #t~mem306#1.offset); srcloc: null [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6564: havoc #t~mem305#1.base, #t~mem305#1.offset;havoc #t~mem306#1.base, #t~mem306#1.offset; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6553-2: call #t~mem290#1.base, #t~mem290#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem291#1.base, #t~mem291#1.offset := read~$Pointer$#14(#t~mem290#1.base, 192 + (#t~mem290#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);#t~short294#1 := 0 != (#t~mem291#1.base + #t~mem291#1.offset) % 18446744073709551616; [2025-02-08 02:31:16,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6553-1: assume #t~short294#1;call #t~mem292#1.base, #t~mem292#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem293#1.base, #t~mem293#1.offset := read~$Pointer$#14(#t~mem292#1.base, 436 + (#t~mem292#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);#t~short294#1 := 0 != (#t~mem293#1.base + #t~mem293#1.offset) % 18446744073709551616; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6553-1: assume !#t~short294#1; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6553: assume #t~short294#1;havoc #t~mem290#1.base, #t~mem290#1.offset;havoc #t~mem291#1.base, #t~mem291#1.offset;havoc #t~mem292#1.base, #t~mem292#1.offset;havoc #t~mem293#1.base, #t~mem293#1.offset;havoc #t~short294#1;call #t~mem295#1.base, #t~mem295#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6553: assume !#t~short294#1;havoc #t~mem290#1.base, #t~mem290#1.offset;havoc #t~mem291#1.base, #t~mem291#1.offset;havoc #t~mem292#1.base, #t~mem292#1.offset;havoc #t~mem293#1.base, #t~mem293#1.offset;havoc #t~short294#1; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6355-1: SUMMARY for call vhost_vq_free_iovecs(vhost_dev_free_iovecs_#t~mem243#1.base, vhost_dev_free_iovecs_#t~mem243#1.offset + 17120 * (if vhost_dev_free_iovecs_~i~1#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_free_iovecs_~i~1#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_free_iovecs_~i~1#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6355: vhost_dev_free_iovecs_~i~1#1 := 1 + vhost_dev_free_iovecs_~i~1#1; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6355-2: call vhost_dev_free_iovecs_#t~mem243#1.base, vhost_dev_free_iovecs_#t~mem243#1.offset := read~$Pointer$#14(vhost_dev_free_iovecs_~dev#1.base, 176 + vhost_dev_free_iovecs_~dev#1.offset, 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6562: assume -2147483648 <= #t~ret302#1 && #t~ret302#1 <= 2147483647;havoc #t~mem301#1.base, #t~mem301#1.offset;havoc #t~ret302#1;call #t~mem303#1.base, #t~mem303#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem304#1.base, #t~mem304#1.offset := read~$Pointer$#14(#t~mem303#1.base, 224 + (#t~mem303#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558: assume 0 != (#t~mem298#1.base + #t~mem298#1.offset) % 18446744073709551616;havoc #t~mem297#1.base, #t~mem297#1.offset;havoc #t~mem298#1.base, #t~mem298#1.offset;call #t~mem299#1.base, #t~mem299#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem300#1.base, #t~mem300#1.offset := read~$Pointer$#14(#t~mem299#1.base, 17112 + (#t~mem299#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558: assume !(0 != (#t~mem298#1.base + #t~mem298#1.offset) % 18446744073709551616);havoc #t~mem297#1.base, #t~mem297#1.offset;havoc #t~mem298#1.base, #t~mem298#1.offset; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6562-2: call #t~mem301#1.base, #t~mem301#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6562-1: SUMMARY for call #t~ret302#1 := vhost_zerocopy_signal_used(#t~mem301#1.base, #t~mem301#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6554: havoc #t~mem295#1.base, #t~mem295#1.offset;call #t~mem296#1.base, #t~mem296#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6558-1: call #t~mem297#1.base, #t~mem297#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem298#1.base, #t~mem298#1.offset := read~$Pointer$#14(#t~mem297#1.base, 17112 + (#t~mem297#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6583-1: SUMMARY for call vhost_vq_reset(~dev#1.base, ~dev#1.offset, #t~mem323#1.base, #t~mem323#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6583: havoc #t~mem323#1.base, #t~mem323#1.offset;~i~4#1 := 1 + ~i~4#1; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6554-1: SUMMARY for call vhost_poll_stop(#t~mem295#1.base, 240 + (#t~mem295#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616))); srcloc: null [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6579-1: call #t~mem319#1.base, #t~mem319#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem320#1.base, #t~mem320#1.offset := read~$Pointer$#14(#t~mem319#1.base, 200 + (#t~mem319#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6579: assume 0 != (#t~mem320#1.base + #t~mem320#1.offset) % 18446744073709551616;havoc #t~mem319#1.base, #t~mem319#1.offset;havoc #t~mem320#1.base, #t~mem320#1.offset;call #t~mem321#1.base, #t~mem321#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem322#1.base, #t~mem322#1.offset := read~$Pointer$#14(#t~mem321#1.base, 200 + (#t~mem321#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6579: assume !(0 != (#t~mem320#1.base + #t~mem320#1.offset) % 18446744073709551616);havoc #t~mem319#1.base, #t~mem319#1.offset;havoc #t~mem320#1.base, #t~mem320#1.offset; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6583-2: call #t~mem323#1.base, #t~mem323#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6575-1: call #t~mem315#1.base, #t~mem315#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem316#1.base, #t~mem316#1.offset := read~$Pointer$#14(#t~mem315#1.base, 216 + (#t~mem315#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6575: assume 0 != (#t~mem316#1.base + #t~mem316#1.offset) % 18446744073709551616;havoc #t~mem315#1.base, #t~mem315#1.offset;havoc #t~mem316#1.base, #t~mem316#1.offset;call #t~mem317#1.base, #t~mem317#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem318#1.base, #t~mem318#1.offset := read~$Pointer$#14(#t~mem317#1.base, 216 + (#t~mem317#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6575: assume !(0 != (#t~mem316#1.base + #t~mem316#1.offset) % 18446744073709551616);havoc #t~mem315#1.base, #t~mem315#1.offset;havoc #t~mem316#1.base, #t~mem316#1.offset; [2025-02-08 02:31:16,449 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6571-1: call #t~mem311#1.base, #t~mem311#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem312#1.base, #t~mem312#1.offset := read~$Pointer$#14(#t~mem311#1.base, 192 + (#t~mem311#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,450 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6571: assume 0 != (#t~mem312#1.base + #t~mem312#1.offset) % 18446744073709551616;havoc #t~mem311#1.base, #t~mem311#1.offset;havoc #t~mem312#1.base, #t~mem312#1.offset;call #t~mem313#1.base, #t~mem313#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem314#1.base, #t~mem314#1.offset := read~$Pointer$#14(#t~mem313#1.base, 192 + (#t~mem313#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,450 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6571: assume !(0 != (#t~mem312#1.base + #t~mem312#1.offset) % 18446744073709551616);havoc #t~mem311#1.base, #t~mem311#1.offset;havoc #t~mem312#1.base, #t~mem312#1.offset; [2025-02-08 02:31:16,451 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6567-1: call #t~mem307#1.base, #t~mem307#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem308#1.base, #t~mem308#1.offset := read~$Pointer$#14(#t~mem307#1.base, 208 + (#t~mem307#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,451 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6567: assume 0 != (#t~mem308#1.base + #t~mem308#1.offset) % 18446744073709551616;havoc #t~mem307#1.base, #t~mem307#1.offset;havoc #t~mem308#1.base, #t~mem308#1.offset;call #t~mem309#1.base, #t~mem309#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem310#1.base, #t~mem310#1.offset := read~$Pointer$#14(#t~mem309#1.base, 208 + (#t~mem309#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,451 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6567: assume !(0 != (#t~mem308#1.base + #t~mem308#1.offset) % 18446744073709551616);havoc #t~mem307#1.base, #t~mem307#1.offset;havoc #t~mem308#1.base, #t~mem308#1.offset; [2025-02-08 02:31:16,451 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6563: assume 0 != (#t~mem304#1.base + #t~mem304#1.offset) % 18446744073709551616;havoc #t~mem303#1.base, #t~mem303#1.offset;havoc #t~mem304#1.base, #t~mem304#1.offset;call #t~mem305#1.base, #t~mem305#1.offset := read~$Pointer$#14(~dev#1.base, 176 + ~dev#1.offset, 8);call #t~mem306#1.base, #t~mem306#1.offset := read~$Pointer$#14(#t~mem305#1.base, 224 + (#t~mem305#1.offset + 17120 * (if ~i~4#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~4#1 % 18446744073709551616 % 18446744073709551616 else ~i~4#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:16,451 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6563: assume !(0 != (#t~mem304#1.base + #t~mem304#1.offset) % 18446744073709551616);havoc #t~mem303#1.base, #t~mem303#1.offset;havoc #t~mem304#1.base, #t~mem304#1.offset; [2025-02-08 02:31:16,504 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5676: havoc __kmalloc_#t~ret106#1.base, __kmalloc_#t~ret106#1.offset; [2025-02-08 02:31:16,508 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11497: havoc #t~nondet1279; [2025-02-08 02:31:16,523 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9285: call #t~mem936 := read~int#14(~iov.base, 8 + (~iov.offset + 16 * (if ~seg~0 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~seg~0 % 18446744073709551616 % 18446744073709551616 else ~seg~0 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);~ret~6 := #t~mem936 + ~ret~6;~seg~0 := 1 + ~seg~0; [2025-02-08 02:31:16,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11486: havoc #t~nondet1277; [2025-02-08 02:31:16,559 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5967: havoc #t~bitwise159;havoc #t~bitwise160; [2025-02-08 02:31:16,562 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5276: havoc #t~mem8.base, #t~mem8.offset; [2025-02-08 02:31:16,583 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6001: call ULTIMATE.dealloc(~#__key~0.base, ~#__key~0.offset);havoc ~#__key~0.base, ~#__key~0.offset; [2025-02-08 02:31:16,587 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11517: havoc #t~ret1282.base, #t~ret1282.offset; [2025-02-08 02:31:16,613 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11622: havoc rcu_lockdep_current_cpu_online_#t~nondet1299#1; [2025-02-08 02:31:16,618 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11674: havoc #t~nondet1306; [2025-02-08 02:31:16,630 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11490: havoc _copy_to_user_#t~nondet1278#1; [2025-02-08 02:31:16,719 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7682-1: SUMMARY for call #t~ret554#1 := ldv__builtin_expect((if ~ret~3#1 >= ~iov_size#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,719 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7389: assume find_region_~i~8#1 % 4294967296 < find_region_#t~mem509#1 % 4294967296;havoc find_region_#t~mem509#1; [2025-02-08 02:31:16,719 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7389: assume !(find_region_~i~8#1 % 4294967296 < find_region_#t~mem509#1 % 4294967296);havoc find_region_#t~mem509#1;find_region_#res#1.base, find_region_#res#1.offset := 0, 0;#t~ret555#1.base, #t~ret555#1.offset := find_region_#res#1.base, find_region_#res#1.offset;havoc find_region_#t~mem505#1, find_region_#t~mem506#1, find_region_#t~mem507#1, find_region_#t~short508#1, find_region_#t~mem509#1, find_region_~mem#1.base, find_region_~mem#1.offset, find_region_~addr#1, find_region_~len#1, find_region_~reg~0#1.base, find_region_~reg~0#1.offset, find_region_~i~8#1;havoc find_region_#in~mem#1.base, find_region_#in~mem#1.offset, find_region_#in~addr#1, find_region_#in~len#1;assume { :end_inline_find_region } true;~reg~1#1.base, ~reg~1#1.offset := #t~ret555#1.base, #t~ret555#1.offset;havoc #t~ret555#1.base, #t~ret555#1.offset; [2025-02-08 02:31:16,719 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7691: assume 0 != ~tmp___2~15#1;~ret~3#1 := -14; [2025-02-08 02:31:16,719 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7691: assume !(0 != ~tmp___2~15#1);~_iov~0#1.base, ~_iov~0#1.offset := ~iov#1.base, ~iov#1.offset + 16 * (if ~ret~3#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~ret~3#1 % 18446744073709551616 % 18446744073709551616 else ~ret~3#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call #t~mem557#1 := read~int#14(~reg~1#1.base, 8 + ~reg~1#1.offset, 8);call #t~mem558#1 := read~int#14(~reg~1#1.base, ~reg~1#1.offset, 8);~size~1#1 := #t~mem557#1 - ~addr#1 + #t~mem558#1;havoc #t~mem557#1;havoc #t~mem558#1;~_min1~1#1 := ~len#1 % 4294967296 - ~s~4#1;~_min2~1#1 := ~size~1#1;call write~int#14((if ~_min1~1#1 % 18446744073709551616 < ~_min2~1#1 % 18446744073709551616 then ~_min1~1#1 else ~_min2~1#1), ~_iov~0#1.base, 8 + ~_iov~0#1.offset, 8);call #t~mem559#1 := read~int#14(~reg~1#1.base, 16 + ~reg~1#1.offset, 8);call #t~mem560#1 := read~int#14(~reg~1#1.base, ~reg~1#1.offset, 8);call write~$Pointer$#14(0, (if (#t~mem559#1 + ~addr#1 - #t~mem560#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (#t~mem559#1 + ~addr#1 - #t~mem560#1) % 18446744073709551616 % 18446744073709551616 else (#t~mem559#1 + ~addr#1 - #t~mem560#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), ~_iov~0#1.base, ~_iov~0#1.offset, 8);havoc #t~mem559#1;havoc #t~mem560#1;~s~4#1 := ~s~4#1 + ~size~1#1;~addr#1 := ~addr#1 + ~size~1#1;~ret~3#1 := 1 + ~ret~3#1; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7683: assume 0 != ~tmp___1~18#1;~ret~3#1 := -105; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7683: assume !(0 != ~tmp___1~18#1);assume { :begin_inline_find_region } true;find_region_#in~mem#1.base, find_region_#in~mem#1.offset, find_region_#in~addr#1, find_region_#in~len#1 := ~mem~1#1.base, ~mem~1#1.offset, ~addr#1, ~len#1;havoc find_region_#res#1.base, find_region_#res#1.offset;havoc find_region_#t~mem505#1, find_region_#t~mem506#1, find_region_#t~mem507#1, find_region_#t~short508#1, find_region_#t~mem509#1, find_region_~mem#1.base, find_region_~mem#1.offset, find_region_~addr#1, find_region_~len#1, find_region_~reg~0#1.base, find_region_~reg~0#1.offset, find_region_~i~8#1;find_region_~mem#1.base, find_region_~mem#1.offset := find_region_#in~mem#1.base, find_region_#in~mem#1.offset;find_region_~addr#1 := find_region_#in~addr#1;find_region_~len#1 := find_region_#in~len#1;havoc find_region_~reg~0#1.base, find_region_~reg~0#1.offset;havoc find_region_~i~8#1;find_region_~i~8#1 := 0; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7382: find_region_~reg~0#1.base, find_region_~reg~0#1.offset := find_region_~mem#1.base, 8 + find_region_~mem#1.offset + 32 * (if find_region_~i~8#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then find_region_~i~8#1 % 18446744073709551616 % 18446744073709551616 else find_region_~i~8#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call find_region_#t~mem505#1 := read~int#14(find_region_~reg~0#1.base, find_region_~reg~0#1.offset, 8);find_region_#t~short508#1 := find_region_#t~mem505#1 % 18446744073709551616 <= find_region_~addr#1 % 18446744073709551616; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7383-1: assume find_region_#t~short508#1;call find_region_#t~mem506#1 := read~int#14(find_region_~reg~0#1.base, find_region_~reg~0#1.offset, 8);call find_region_#t~mem507#1 := read~int#14(find_region_~reg~0#1.base, 8 + find_region_~reg~0#1.offset, 8);find_region_#t~short508#1 := (find_region_#t~mem506#1 + find_region_#t~mem507#1 - 1) % 18446744073709551616 >= find_region_~addr#1 % 18446744073709551616; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7383-1: assume !find_region_#t~short508#1; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7383: assume find_region_#t~short508#1;havoc find_region_#t~mem505#1;havoc find_region_#t~mem506#1;havoc find_region_#t~mem507#1;havoc find_region_#t~short508#1;find_region_#res#1.base, find_region_#res#1.offset := find_region_~reg~0#1.base, find_region_~reg~0#1.offset; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7383: assume !find_region_#t~short508#1;havoc find_region_#t~mem505#1;havoc find_region_#t~mem506#1;havoc find_region_#t~mem507#1;havoc find_region_#t~short508#1;find_region_~i~8#1 := 1 + find_region_~i~8#1; [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7689-1: SUMMARY for call #t~ret556#1 := ldv__builtin_expect((if 0 == (~reg~1#1.base + ~reg~1#1.offset) % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:16,720 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7689: assume -9223372036854775808 <= #t~ret556#1 && #t~ret556#1 <= 9223372036854775807;~tmp___2~15#1 := #t~ret556#1;havoc #t~ret556#1; [2025-02-08 02:31:16,721 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7380: call find_region_#t~mem509#1 := read~int#14(find_region_~mem#1.base, find_region_~mem#1.offset, 4); [2025-02-08 02:31:16,721 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7682: assume -9223372036854775808 <= #t~ret554#1 && #t~ret554#1 <= 9223372036854775807;~tmp___1~18#1 := #t~ret554#1; [2025-02-08 02:31:18,033 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6312-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret219#1.base, vhost_dev_alloc_iovecs_#t~ret219#1.offset := kmalloc(16384, 208); srcloc: null [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6312: vhost_dev_alloc_iovecs_~tmp~21#1.base, vhost_dev_alloc_iovecs_~tmp~21#1.offset := vhost_dev_alloc_iovecs_#t~ret219#1.base, vhost_dev_alloc_iovecs_#t~ret219#1.offset;call vhost_dev_alloc_iovecs_#t~mem220#1.base, vhost_dev_alloc_iovecs_#t~mem220#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#14(vhost_dev_alloc_iovecs_~tmp~21#1.base, vhost_dev_alloc_iovecs_~tmp~21#1.offset, vhost_dev_alloc_iovecs_#t~mem220#1.base, 17040 + (vhost_dev_alloc_iovecs_#t~mem220#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_alloc_iovecs_#t~mem220#1.base, vhost_dev_alloc_iovecs_#t~mem220#1.offset; [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10408: call write~$Pointer$#14(vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset, vhost_net_set_backend_~vq~7#1.base, 17072 + vhost_net_set_backend_~vq~7#1.offset, 8);assume { :begin_inline_vhost_net_enable_vq } true;vhost_net_enable_vq_#in~n#1.base, vhost_net_enable_vq_#in~n#1.offset, vhost_net_enable_vq_#in~vq#1.base, vhost_net_enable_vq_#in~vq#1.offset := vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset;havoc vhost_net_enable_vq_#t~ret1152#1, vhost_net_enable_vq_#t~ret1153#1, vhost_net_enable_vq_#t~mem1154#1.base, vhost_net_enable_vq_#t~mem1154#1.offset, vhost_net_enable_vq_#t~mem1155#1.base, vhost_net_enable_vq_#t~mem1155#1.offset, vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_~vq#1.base, vhost_net_enable_vq_~vq#1.offset, vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset, vhost_net_enable_vq_~__warned~9#1, vhost_net_enable_vq_~tmp~62#1, vhost_net_enable_vq_~tmp___0~42#1;vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset := vhost_net_enable_vq_#in~n#1.base, vhost_net_enable_vq_#in~n#1.offset;vhost_net_enable_vq_~vq#1.base, vhost_net_enable_vq_~vq#1.offset := vhost_net_enable_vq_#in~vq#1.base, vhost_net_enable_vq_#in~vq#1.offset;havoc vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset;havoc vhost_net_enable_vq_~__warned~9#1;havoc vhost_net_enable_vq_~tmp~62#1;havoc vhost_net_enable_vq_~tmp___0~42#1; [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10408-1: SUMMARY for call vhost_net_disable_vq(vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset); srcloc: null [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6907-1: SUMMARY for call vhost_set_memory_#t~ret396#1 := copy_from_user(vhost_set_memory_~newmem~0#1.base, 8 + vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~m#1.base, 8 + vhost_set_memory_~m#1.offset, 32 * (vhost_set_memory_#t~mem395#1 % 4294967296)); srcloc: null [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6907: vhost_set_memory_~tmp___1~15#1 := vhost_set_memory_#t~ret396#1;havoc vhost_set_memory_#t~mem395#1;havoc vhost_set_memory_#t~ret396#1; [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10144: assume (vhost_net_enable_vq_~n#1.base + (17416 + vhost_net_enable_vq_~n#1.offset)) % 18446744073709551616 == (vhost_net_enable_vq_~vq#1.base + vhost_net_enable_vq_~vq#1.offset) % 18446744073709551616;call write~int#14(2, vhost_net_enable_vq_~n#1.base, 34928 + vhost_net_enable_vq_~n#1.offset, 4); [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10144: assume !((vhost_net_enable_vq_~n#1.base + (17416 + vhost_net_enable_vq_~n#1.offset)) % 18446744073709551616 == (vhost_net_enable_vq_~vq#1.base + vhost_net_enable_vq_~vq#1.offset) % 18446744073709551616);call vhost_net_enable_vq_#t~mem1155#1.base, vhost_net_enable_vq_#t~mem1155#1.offset := read~$Pointer$#14(vhost_net_enable_vq_~sock~2#1.base, 22 + vhost_net_enable_vq_~sock~2#1.offset, 8); [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7634: assume vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7634: assume !vhost_init_used_#t~switch550#1;vhost_init_used_#t~switch550#1 := true; [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10871: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_60_~ldv_func_arg1#1.base, ldv_mutex_unlock_60_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9220: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_18_~ldv_func_arg1#1.base, ldv_mutex_lock_18_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7172-1: SUMMARY for call vhost_set_vring_#t~ret467#1.base, vhost_set_vring_#t~ret467#1.offset := eventfd_fget(vhost_set_vring_#t~mem466#1); srcloc: null [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7172: vhost_set_vring_~tmp___14~0#1.base, vhost_set_vring_~tmp___14~0#1.offset := vhost_set_vring_#t~ret467#1.base, vhost_set_vring_#t~ret467#1.offset;havoc vhost_set_vring_#t~mem466#1;havoc vhost_set_vring_#t~ret467#1.base, vhost_set_vring_#t~ret467#1.offset;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := vhost_set_vring_~tmp___14~0#1.base, vhost_set_vring_~tmp___14~0#1.offset; [2025-02-08 02:31:18,034 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10872: SUMMARY for call mutex_unlock(ldv_mutex_unlock_60_~ldv_func_arg1#1.base, ldv_mutex_unlock_60_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6314: vhost_dev_alloc_iovecs_~tmp___0~11#1.base, vhost_dev_alloc_iovecs_~tmp___0~11#1.offset := vhost_dev_alloc_iovecs_#t~ret221#1.base, vhost_dev_alloc_iovecs_#t~ret221#1.offset;havoc vhost_dev_alloc_iovecs_#t~ret221#1.base, vhost_dev_alloc_iovecs_#t~ret221#1.offset;call vhost_dev_alloc_iovecs_#t~mem222#1.base, vhost_dev_alloc_iovecs_#t~mem222#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#14(vhost_dev_alloc_iovecs_~tmp___0~11#1.base, vhost_dev_alloc_iovecs_~tmp___0~11#1.offset, vhost_dev_alloc_iovecs_#t~mem222#1.base, 17088 + (vhost_dev_alloc_iovecs_#t~mem222#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_alloc_iovecs_#t~mem222#1.base, vhost_dev_alloc_iovecs_#t~mem222#1.offset; [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9221: SUMMARY for call mutex_lock(ldv_mutex_lock_18_~ldv_func_arg1#1.base, ldv_mutex_lock_18_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6314-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret221#1.base, vhost_dev_alloc_iovecs_#t~ret221#1.offset := kmalloc(16384, 208); srcloc: null [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10146: SUMMARY for call tx_poll_start(vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset); srcloc: null [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6909: assume 0 != vhost_set_memory_~tmp___1~15#1 % 18446744073709551616; [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6909: assume !(0 != vhost_set_memory_~tmp___1~15#1 % 18446744073709551616); [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10411: havoc vhost_net_enable_vq_#t~ret1152#1, vhost_net_enable_vq_#t~ret1153#1, vhost_net_enable_vq_#t~mem1154#1.base, vhost_net_enable_vq_#t~mem1154#1.offset, vhost_net_enable_vq_#t~mem1155#1.base, vhost_net_enable_vq_#t~mem1155#1.offset, vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_~vq#1.base, vhost_net_enable_vq_~vq#1.offset, vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset, vhost_net_enable_vq_~__warned~9#1, vhost_net_enable_vq_~tmp~62#1, vhost_net_enable_vq_~tmp___0~42#1;havoc vhost_net_enable_vq_#in~n#1.base, vhost_net_enable_vq_#in~n#1.offset, vhost_net_enable_vq_#in~vq#1.base, vhost_net_enable_vq_#in~vq#1.offset;assume { :end_inline_vhost_net_enable_vq } true;assume { :begin_inline_vhost_init_used } true;vhost_init_used_#in~vq#1.base, vhost_init_used_#in~vq#1.offset := vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset;havoc vhost_init_used_#res#1;havoc vhost_init_used_#t~mem548#1.base, vhost_init_used_#t~mem548#1.offset, vhost_init_used_#t~ret549#1, vhost_init_used_#t~switch550#1, vhost_init_used_~vq#1.base, vhost_init_used_~vq#1.offset, vhost_init_used_~r~5#1, vhost_init_used_~__ret_gu~2#1, vhost_init_used_~__val_gu~2#1;vhost_init_used_~vq#1.base, vhost_init_used_~vq#1.offset := vhost_init_used_#in~vq#1.base, vhost_init_used_#in~vq#1.offset;havoc vhost_init_used_~r~5#1;havoc vhost_init_used_~__ret_gu~2#1;havoc vhost_init_used_~__val_gu~2#1;call vhost_init_used_#t~mem548#1.base, vhost_init_used_#t~mem548#1.offset := read~$Pointer$#14(vhost_init_used_~vq#1.base, 17072 + vhost_init_used_~vq#1.offset, 8); [2025-02-08 02:31:18,035 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10279: assume 0 == (get_tap_socket_~file~0#1.base + get_tap_socket_~file~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10279: assume !(0 == (get_tap_socket_~file~0#1.base + get_tap_socket_~file~0#1.offset) % 18446744073709551616);assume { :begin_inline_tun_get_socket } true;tun_get_socket_#in~arg0#1.base, tun_get_socket_#in~arg0#1.offset := get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset;havoc tun_get_socket_#res#1.base, tun_get_socket_#res#1.offset;havoc tun_get_socket_#t~ret1302#1.base, tun_get_socket_#t~ret1302#1.offset, tun_get_socket_~arg0#1.base, tun_get_socket_~arg0#1.offset;tun_get_socket_~arg0#1.base, tun_get_socket_~arg0#1.offset := tun_get_socket_#in~arg0#1.base, tun_get_socket_#in~arg0#1.offset; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6910: vhost_set_memory_#res#1 := -14;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6910-1: SUMMARY for call kfree(vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset); srcloc: null [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7637: assume vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7637: assume !vhost_init_used_#t~switch550#1;havoc vhost_init_used_#t~switch550#1;havoc vhost_init_used_#t~switch550#1;call write~int#14(vhost_init_used_~__val_gu~2#1, vhost_init_used_~vq#1.base, 448 + vhost_init_used_~vq#1.offset, 2);vhost_init_used_#res#1 := vhost_init_used_~__ret_gu~2#1; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10412: vhost_net_set_backend_#t~ret1211#1 := vhost_init_used_#res#1;havoc vhost_init_used_#t~mem548#1.base, vhost_init_used_#t~mem548#1.offset, vhost_init_used_#t~ret549#1, vhost_init_used_#t~switch550#1, vhost_init_used_~vq#1.base, vhost_init_used_~vq#1.offset, vhost_init_used_~r~5#1, vhost_init_used_~__ret_gu~2#1, vhost_init_used_~__val_gu~2#1;havoc vhost_init_used_#in~vq#1.base, vhost_init_used_#in~vq#1.offset;assume { :end_inline_vhost_init_used } true;assume -2147483648 <= vhost_net_set_backend_#t~ret1211#1 && vhost_net_set_backend_#t~ret1211#1 <= 2147483647;vhost_net_set_backend_~r~12#1 := vhost_net_set_backend_#t~ret1211#1;havoc vhost_net_set_backend_#t~ret1211#1; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9355: assume -9223372036854775808 <= vhost_sock_zcopy_#t~ret956#1 && vhost_sock_zcopy_#t~ret956#1 <= 9223372036854775807;vhost_sock_zcopy_~tmp~54#1 := vhost_sock_zcopy_#t~ret956#1;havoc vhost_sock_zcopy_#t~ret956#1; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9355-1: SUMMARY for call vhost_sock_zcopy_#t~ret956#1 := ldv__builtin_expect((if 0 != ~experimental_zcopytx~0 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6316-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret223#1.base, vhost_dev_alloc_iovecs_#t~ret223#1.offset := kmalloc(8192, 208); srcloc: null [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6316: vhost_dev_alloc_iovecs_~tmp___1~7#1.base, vhost_dev_alloc_iovecs_~tmp___1~7#1.offset := vhost_dev_alloc_iovecs_#t~ret223#1.base, vhost_dev_alloc_iovecs_#t~ret223#1.offset;havoc vhost_dev_alloc_iovecs_#t~ret223#1.base, vhost_dev_alloc_iovecs_#t~ret223#1.offset;call vhost_dev_alloc_iovecs_#t~mem224#1.base, vhost_dev_alloc_iovecs_#t~mem224#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#14(vhost_dev_alloc_iovecs_~tmp___1~7#1.base, vhost_dev_alloc_iovecs_~tmp___1~7#1.offset, vhost_dev_alloc_iovecs_#t~mem224#1.base, 17064 + (vhost_dev_alloc_iovecs_#t~mem224#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_alloc_iovecs_#t~mem224#1.base, vhost_dev_alloc_iovecs_#t~mem224#1.offset; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10148: havoc vhost_net_enable_vq_#t~mem1155#1.base, vhost_net_enable_vq_#t~mem1155#1.offset; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10148-1: SUMMARY for call vhost_poll_start(vhost_net_enable_vq_~n#1.base, 34536 + vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_#t~mem1155#1.base, vhost_net_enable_vq_#t~mem1155#1.offset); srcloc: null [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10280: get_tap_socket_~tmp___0~45#1.base, get_tap_socket_~tmp___0~45#1.offset := get_tap_socket_#t~ret1188#1.base, get_tap_socket_#t~ret1188#1.offset;havoc get_tap_socket_#t~ret1188#1.base, get_tap_socket_#t~ret1188#1.offset;get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset := get_tap_socket_~tmp___0~45#1.base, get_tap_socket_~tmp___0~45#1.offset; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10280-1: SUMMARY for call get_tap_socket_#t~ret1188#1.base, get_tap_socket_#t~ret1188#1.offset := ERR_PTR(-9); srcloc: null [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10413: assume 0 != vhost_net_set_backend_~r~12#1; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10413: assume !(0 != vhost_net_set_backend_~r~12#1); [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9356: assume 0 != vhost_sock_zcopy_~tmp~54#1;call vhost_sock_zcopy_#t~mem957#1.base, vhost_sock_zcopy_#t~mem957#1.offset := read~$Pointer$#14(vhost_sock_zcopy_~sock#1.base, 30 + vhost_sock_zcopy_~sock#1.offset, 8);assume { :begin_inline_sock_flag } true;sock_flag_#in~sk#1.base, sock_flag_#in~sk#1.offset, sock_flag_#in~flag#1 := vhost_sock_zcopy_#t~mem957#1.base, vhost_sock_zcopy_#t~mem957#1.offset, 25;havoc sock_flag_#res#1;havoc sock_flag_#t~ret955#1, sock_flag_~sk#1.base, sock_flag_~sk#1.offset, sock_flag_~flag#1, sock_flag_~tmp~53#1;sock_flag_~sk#1.base, sock_flag_~sk#1.offset := sock_flag_#in~sk#1.base, sock_flag_#in~sk#1.offset;sock_flag_~flag#1 := sock_flag_#in~flag#1;havoc sock_flag_~tmp~53#1; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9356: assume !(0 != vhost_sock_zcopy_~tmp~54#1);vhost_sock_zcopy_~tmp___1~26#1 := 0; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10347: havoc ldv_mutex_lock_58_~ldv_func_arg1#1.base, ldv_mutex_lock_58_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_58_#in~ldv_func_arg1#1.base, ldv_mutex_lock_58_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_58 } true; [2025-02-08 02:31:18,036 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10545: #t~ret1232#1 := vhost_net_set_backend_#res#1;havoc vhost_net_set_backend_#t~ret1198#1, vhost_net_set_backend_#t~ret1199#1, vhost_net_set_backend_#t~ret1200#1.base, vhost_net_set_backend_#t~ret1200#1.offset, vhost_net_set_backend_#t~ret1201#1, vhost_net_set_backend_#t~ret1202#1, vhost_net_set_backend_#t~ret1203#1, vhost_net_set_backend_#t~ret1204#1, vhost_net_set_backend_#t~mem1205#1.base, vhost_net_set_backend_#t~mem1205#1.offset, vhost_net_set_backend_#t~ret1206#1, vhost_net_set_backend_#t~ret1207#1.base, vhost_net_set_backend_#t~ret1207#1.offset, vhost_net_set_backend_#t~ret1208#1, vhost_net_set_backend_#t~ret1209#1, vhost_net_set_backend_#t~mem1210#1.base, vhost_net_set_backend_#t~mem1210#1.offset, vhost_net_set_backend_#t~ret1211#1, vhost_net_set_backend_#t~ret1212#1, vhost_net_set_backend_#t~mem1213#1.base, vhost_net_set_backend_#t~mem1213#1.offset, vhost_net_set_backend_#t~mem1214#1.base, vhost_net_set_backend_#t~mem1214#1.offset, vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~index#1, vhost_net_set_backend_~fd#1, vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset, vhost_net_set_backend_~oldsock~0#1.base, vhost_net_set_backend_~oldsock~0#1.offset, vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset, vhost_net_set_backend_~ubufs~4#1.base, vhost_net_set_backend_~ubufs~4#1.offset, vhost_net_set_backend_~oldubufs~0#1.base, vhost_net_set_backend_~oldubufs~0#1.offset, vhost_net_set_backend_~r~12#1, vhost_net_set_backend_~tmp~67#1, vhost_net_set_backend_~tmp___0~47#1, vhost_net_set_backend_~tmp___1~33#1, vhost_net_set_backend_~tmp___2~26#1, vhost_net_set_backend_~__warned~11#1, vhost_net_set_backend_~tmp___3~17#1, vhost_net_set_backend_~tmp___4~11#1, vhost_net_set_backend_~tmp___5~11#1, vhost_net_set_backend_~tmp___6~9#1, vhost_net_set_backend_~tmp___7~7#1, vhost_net_set_backend_~tmp___8~6#1;havoc vhost_net_set_backend_#in~n#1.base, vhost_net_set_backend_#in~n#1.offset, vhost_net_set_backend_#in~index#1, vhost_net_set_backend_#in~fd#1;assume { :end_inline_vhost_net_set_backend } true;assume -9223372036854775808 <= #t~ret1232#1 && #t~ret1232#1 <= 9223372036854775807;~tmp___0~48#1 := #t~ret1232#1;#res#1 := ~tmp___0~48#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7110: vhost_set_vring_~tmp___6~2#1.base, vhost_set_vring_~tmp___6~2#1.offset := vhost_set_vring_#t~ret449#1.base, vhost_set_vring_#t~ret449#1.offset;havoc vhost_set_vring_#t~mem448#1;havoc vhost_set_vring_#t~ret449#1.base, vhost_set_vring_#t~ret449#1.offset;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := vhost_set_vring_~tmp___6~2#1.base, vhost_set_vring_~tmp___6~2#1.offset; [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7110-1: SUMMARY for call vhost_set_vring_#t~ret449#1.base, vhost_set_vring_#t~ret449#1.offset := eventfd_fget(vhost_set_vring_#t~mem448#1); srcloc: null [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6450: assume 0 != (vhost_dev_set_owner_#t~mem267#1.base + vhost_dev_set_owner_#t~mem267#1.offset) % 18446744073709551616;havoc vhost_dev_set_owner_#t~mem267#1.base, vhost_dev_set_owner_#t~mem267#1.offset;vhost_dev_set_owner_~err~0#1 := -16; [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6450: assume !(0 != (vhost_dev_set_owner_#t~mem267#1.base + vhost_dev_set_owner_#t~mem267#1.offset) % 18446744073709551616);havoc vhost_dev_set_owner_#t~mem267#1.base, vhost_dev_set_owner_#t~mem267#1.offset; [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318: vhost_dev_alloc_iovecs_~zcopy~0#1 := (if 0 == (if 0 != vhost_dev_alloc_iovecs_#t~bitwise226#1 % 4294967296 then 1 else 0) then 0 else 1);havoc vhost_dev_alloc_iovecs_#t~bitwise225#1;havoc vhost_dev_alloc_iovecs_#t~bitwise226#1; [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9357: vhost_sock_zcopy_#t~ret958#1 := sock_flag_#res#1;havoc sock_flag_#t~ret955#1, sock_flag_~sk#1.base, sock_flag_~sk#1.offset, sock_flag_~flag#1, sock_flag_~tmp~53#1;havoc sock_flag_#in~sk#1.base, sock_flag_#in~sk#1.offset, sock_flag_#in~flag#1;assume { :end_inline_sock_flag } true;vhost_sock_zcopy_~tmp___0~36#1 := (if 0 == vhost_sock_zcopy_#t~ret958#1 % 256 then 0 else 1);havoc vhost_sock_zcopy_#t~mem957#1.base, vhost_sock_zcopy_#t~mem957#1.offset;havoc vhost_sock_zcopy_#t~ret958#1; [2025-02-08 02:31:18,037 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10348: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret1198#1 && vhost_net_set_backend_#t~ret1198#1 <= 9223372036854775807;vhost_net_set_backend_~tmp~67#1 := vhost_net_set_backend_#t~ret1198#1;havoc vhost_net_set_backend_#t~ret1198#1;vhost_net_set_backend_~r~12#1 := (if vhost_net_set_backend_~tmp~67#1 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp~67#1 % 4294967296 else vhost_net_set_backend_~tmp~67#1 % 4294967296 - 4294967296); [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10348-1: SUMMARY for call vhost_net_set_backend_#t~ret1198#1 := vhost_dev_check_owner(vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-4: assume 0 == vhost_dev_alloc_iovecs_#t~bitwise225#1 % 4294967296 || 0 == ~vhost_zcopy_mask~0 % 4294967296;vhost_dev_alloc_iovecs_#t~bitwise226#1 := 0; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-4: assume !(0 == vhost_dev_alloc_iovecs_#t~bitwise225#1 % 4294967296 || 0 == ~vhost_zcopy_mask~0 % 4294967296); [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-3: assume vhost_dev_alloc_iovecs_#t~bitwise225#1 % 4294967296 == ~vhost_zcopy_mask~0 % 4294967296;vhost_dev_alloc_iovecs_#t~bitwise226#1 := vhost_dev_alloc_iovecs_#t~bitwise225#1; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-3: assume !(vhost_dev_alloc_iovecs_#t~bitwise225#1 % 4294967296 == ~vhost_zcopy_mask~0 % 4294967296); [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-2: havoc vhost_dev_alloc_iovecs_#t~bitwise226#1;assume vhost_dev_alloc_iovecs_#t~bitwise226#1 % 4294967296 <= vhost_dev_alloc_iovecs_#t~bitwise225#1 % 4294967296 && vhost_dev_alloc_iovecs_#t~bitwise226#1 % 4294967296 <= ~vhost_zcopy_mask~0 % 4294967296; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-1: [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-7: assume 0 == vhost_dev_alloc_iovecs_~i~0#1;vhost_dev_alloc_iovecs_#t~bitwise225#1 := 1; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-7: assume !(0 == vhost_dev_alloc_iovecs_~i~0#1); [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7177-1: SUMMARY for call vhost_set_vring_#t~ret468#1 := IS_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-6: havoc vhost_dev_alloc_iovecs_#t~bitwise225#1;assume vhost_dev_alloc_iovecs_#t~bitwise225#1 > 1; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7177: assume -9223372036854775808 <= vhost_set_vring_#t~ret468#1 && vhost_set_vring_#t~ret468#1 <= 9223372036854775807;vhost_set_vring_~tmp___15~0#1 := vhost_set_vring_#t~ret468#1; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6318-5: [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10943: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_69_~ldv_func_arg1#1.base, ldv_mutex_unlock_69_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6319: assume 0 != (if vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 <= 2147483647 then vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 else vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6319: assume !(0 != (if vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 <= 2147483647 then vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 else vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 - 4294967296)); [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9358: assume 0 != (if vhost_sock_zcopy_~tmp___0~36#1 % 256 % 4294967296 <= 2147483647 then vhost_sock_zcopy_~tmp___0~36#1 % 256 % 4294967296 else vhost_sock_zcopy_~tmp___0~36#1 % 256 % 4294967296 - 4294967296);vhost_sock_zcopy_~tmp___1~26#1 := 1; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9358: assume !(0 != (if vhost_sock_zcopy_~tmp___0~36#1 % 256 % 4294967296 <= 2147483647 then vhost_sock_zcopy_~tmp___0~36#1 % 256 % 4294967296 else vhost_sock_zcopy_~tmp___0~36#1 % 256 % 4294967296 - 4294967296));vhost_sock_zcopy_~tmp___1~26#1 := 0; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6914: assume -2147483648 <= vhost_set_memory_#t~ret397#1 && vhost_set_memory_#t~ret397#1 <= 2147483647;vhost_set_memory_~tmp___2~12#1 := vhost_set_memory_#t~ret397#1;havoc vhost_set_memory_#t~ret397#1; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6980-1: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6980: vhost_set_vring_#t~switch402#1 := false; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6914-1: SUMMARY for call vhost_set_memory_#t~ret397#1 := vhost_has_feature(vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, 26); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10944: SUMMARY for call mutex_unlock(ldv_mutex_unlock_69_~ldv_func_arg1#1.base, ldv_mutex_unlock_69_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11539: havoc get_task_mm_#t~ret1286#1.base, get_task_mm_#t~ret1286#1.offset;vhost_dev_set_owner_#t~ret269#1.base, vhost_dev_set_owner_#t~ret269#1.offset := get_task_mm_#res#1.base, get_task_mm_#res#1.offset;havoc get_task_mm_#t~ret1286#1.base, get_task_mm_#t~ret1286#1.offset, get_task_mm_~arg0#1.base, get_task_mm_~arg0#1.offset;havoc get_task_mm_#in~arg0#1.base, get_task_mm_#in~arg0#1.offset;assume { :end_inline_get_task_mm } true;call write~$Pointer$#14(vhost_dev_set_owner_#t~ret269#1.base, vhost_dev_set_owner_#t~ret269#1.offset, vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8);havoc vhost_dev_set_owner_#t~ret269#1.base, vhost_dev_set_owner_#t~ret269#1.offset; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6320-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret227#1.base, vhost_dev_alloc_iovecs_#t~ret227#1.offset := kmalloc(24576, 208); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6320: vhost_dev_alloc_iovecs_~tmp___2~7#1.base, vhost_dev_alloc_iovecs_~tmp___2~7#1.offset := vhost_dev_alloc_iovecs_#t~ret227#1.base, vhost_dev_alloc_iovecs_#t~ret227#1.offset;havoc vhost_dev_alloc_iovecs_#t~ret227#1.base, vhost_dev_alloc_iovecs_#t~ret227#1.offset;call vhost_dev_alloc_iovecs_#t~mem228#1.base, vhost_dev_alloc_iovecs_#t~mem228#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#14(vhost_dev_alloc_iovecs_~tmp___2~7#1.base, vhost_dev_alloc_iovecs_~tmp___2~7#1.offset, vhost_dev_alloc_iovecs_#t~mem228#1.base, 17104 + (vhost_dev_alloc_iovecs_#t~mem228#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc vhost_dev_alloc_iovecs_#t~mem228#1.base, vhost_dev_alloc_iovecs_#t~mem228#1.offset; [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7179-1: SUMMARY for call vhost_set_vring_#t~ret469#1 := PTR_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11539-3: SUMMARY for call get_task_mm_#t~ret1286#1.base, get_task_mm_#t~ret1286#1.offset := ldv_malloc(1690); srcloc: null [2025-02-08 02:31:18,038 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7179: assume -9223372036854775808 <= vhost_set_vring_#t~ret469#1 && vhost_set_vring_#t~ret469#1 <= 9223372036854775807;vhost_set_vring_~r~0#1 := vhost_set_vring_#t~ret469#1;havoc vhost_set_vring_#t~ret469#1; [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11539-2: get_task_mm_#res#1.base, get_task_mm_#res#1.offset := get_task_mm_#t~ret1286#1.base, get_task_mm_#t~ret1286#1.offset;havoc get_task_mm_#t~ret1286#1.base, get_task_mm_#t~ret1286#1.offset; [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10350: assume 0 != vhost_net_set_backend_~r~12#1; [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10350: assume !(0 != vhost_net_set_backend_~r~12#1); [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6915-1: SUMMARY for call vhost_set_memory_#t~ret398#1 := memory_access_ok(vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~tmp___2~12#1); srcloc: null [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6915: assume -2147483648 <= vhost_set_memory_#t~ret398#1 && vhost_set_memory_#t~ret398#1 <= 2147483647;vhost_set_memory_~tmp___3~5#1 := vhost_set_memory_#t~ret398#1;havoc vhost_set_memory_#t~ret398#1; [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10879: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_61_~ldv_func_arg1#1.base, ldv_mutex_lock_61_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,039 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10285: assume -9223372036854775808 <= get_tap_socket_#t~ret1190#1 && get_tap_socket_#t~ret1190#1 <= 9223372036854775807;get_tap_socket_~tmp___1~31#1 := get_tap_socket_#t~ret1190#1;havoc get_tap_socket_#t~ret1190#1; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9228: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_19_~ldv_func_arg1#1.base, ldv_mutex_unlock_19_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10285-1: SUMMARY for call get_tap_socket_#t~ret1190#1 := IS_ERR(get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6982: assume vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6982: assume !vhost_set_vring_#t~switch402#1;vhost_set_vring_#t~switch402#1 := vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6916: assume 0 == vhost_set_memory_~tmp___3~5#1; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6916: assume !(0 == vhost_set_memory_~tmp___3~5#1); [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10880: SUMMARY for call mutex_lock(ldv_mutex_lock_61_~ldv_func_arg1#1.base, ldv_mutex_lock_61_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9229: SUMMARY for call mutex_unlock(ldv_mutex_unlock_19_~ldv_func_arg1#1.base, ldv_mutex_unlock_19_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7115-1: SUMMARY for call vhost_set_vring_#t~ret450#1 := IS_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7115: assume -9223372036854775808 <= vhost_set_vring_#t~ret450#1 && vhost_set_vring_#t~ret450#1 <= 9223372036854775807;vhost_set_vring_~tmp___7~1#1 := vhost_set_vring_#t~ret450#1; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10286: assume 0 == get_tap_socket_~tmp___1~31#1;get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset := get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10286: assume !(0 == get_tap_socket_~tmp___1~31#1);assume { :begin_inline_macvtap_get_socket } true;macvtap_get_socket_#in~arg0#1.base, macvtap_get_socket_#in~arg0#1.offset := get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset;havoc macvtap_get_socket_#res#1.base, macvtap_get_socket_#res#1.offset;havoc macvtap_get_socket_#t~ret1292#1.base, macvtap_get_socket_#t~ret1292#1.offset, macvtap_get_socket_~arg0#1.base, macvtap_get_socket_~arg0#1.offset;macvtap_get_socket_~arg0#1.base, macvtap_get_socket_~arg0#1.offset := macvtap_get_socket_#in~arg0#1.base, macvtap_get_socket_#in~arg0#1.offset; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6917-1: SUMMARY for call kfree(vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6917: vhost_set_memory_#res#1 := -14;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6455-1: SUMMARY for call vhost_dev_set_owner_#t~ret268#1.base, vhost_dev_set_owner_#t~ret268#1.offset := get_current(); srcloc: null [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6455: vhost_dev_set_owner_~tmp~24#1.base, vhost_dev_set_owner_~tmp~24#1.offset := vhost_dev_set_owner_#t~ret268#1.base, vhost_dev_set_owner_#t~ret268#1.offset;havoc vhost_dev_set_owner_#t~ret268#1.base, vhost_dev_set_owner_#t~ret268#1.offset;assume { :begin_inline_get_task_mm } true;get_task_mm_#in~arg0#1.base, get_task_mm_#in~arg0#1.offset := vhost_dev_set_owner_~tmp~24#1.base, vhost_dev_set_owner_~tmp~24#1.offset;havoc get_task_mm_#res#1.base, get_task_mm_#res#1.offset;havoc get_task_mm_#t~ret1286#1.base, get_task_mm_#t~ret1286#1.offset, get_task_mm_~arg0#1.base, get_task_mm_~arg0#1.offset;get_task_mm_~arg0#1.base, get_task_mm_~arg0#1.offset := get_task_mm_#in~arg0#1.base, get_task_mm_#in~arg0#1.offset; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10419: havoc ldv_mutex_unlock_60_~ldv_func_arg1#1.base, ldv_mutex_unlock_60_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_60_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_60_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_60 } true; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10419-1: assume { :begin_inline_ldv_mutex_unlock_60 } true;ldv_mutex_unlock_60_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_60_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~vq~7#1.base, 8 + vhost_net_set_backend_~vq~7#1.offset;havoc ldv_mutex_unlock_60_~ldv_func_arg1#1.base, ldv_mutex_unlock_60_~ldv_func_arg1#1.offset;ldv_mutex_unlock_60_~ldv_func_arg1#1.base, ldv_mutex_unlock_60_~ldv_func_arg1#1.offset := ldv_mutex_unlock_60_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_60_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7248: assume 44801 == vhost_dev_ioctl_~ioctl#1 % 4294967296;assume { :begin_inline_vhost_dev_set_owner } true;vhost_dev_set_owner_#in~dev#1.base, vhost_dev_set_owner_#in~dev#1.offset := vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset;havoc vhost_dev_set_owner_#res#1;havoc vhost_dev_set_owner_#t~mem267#1.base, vhost_dev_set_owner_#t~mem267#1.offset, vhost_dev_set_owner_#t~ret268#1.base, vhost_dev_set_owner_#t~ret268#1.offset, vhost_dev_set_owner_#t~ret269#1.base, vhost_dev_set_owner_#t~ret269#1.offset, vhost_dev_set_owner_#t~ret270#1.base, vhost_dev_set_owner_#t~ret270#1.offset, vhost_dev_set_owner_#t~mem271#1, vhost_dev_set_owner_#t~ret272#1.base, vhost_dev_set_owner_#t~ret272#1.offset, vhost_dev_set_owner_#t~ret273#1, vhost_dev_set_owner_#t~ret274#1, vhost_dev_set_owner_#t~ret275#1, vhost_dev_set_owner_#t~ret276#1, vhost_dev_set_owner_#t~ret277#1, vhost_dev_set_owner_#t~ret278#1, vhost_dev_set_owner_#t~mem279#1.base, vhost_dev_set_owner_#t~mem279#1.offset, vhost_dev_set_owner_#t~mem280#1.base, vhost_dev_set_owner_#t~mem280#1.offset, vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset, vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset, vhost_dev_set_owner_~err~0#1, vhost_dev_set_owner_~tmp~24#1.base, vhost_dev_set_owner_~tmp~24#1.offset, vhost_dev_set_owner_~tmp___0~12#1.base, vhost_dev_set_owner_~tmp___0~12#1.offset, vhost_dev_set_owner_~tmp___1~8#1, vhost_dev_set_owner_~tmp___2~8#1, vhost_dev_set_owner_~tmp___3~2#1;vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset := vhost_dev_set_owner_#in~dev#1.base, vhost_dev_set_owner_#in~dev#1.offset;havoc vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset;havoc vhost_dev_set_owner_~err~0#1;havoc vhost_dev_set_owner_~tmp~24#1.base, vhost_dev_set_owner_~tmp~24#1.offset;havoc vhost_dev_set_owner_~tmp___0~12#1.base, vhost_dev_set_owner_~tmp___0~12#1.offset;havoc vhost_dev_set_owner_~tmp___1~8#1;havoc vhost_dev_set_owner_~tmp___2~8#1;havoc vhost_dev_set_owner_~tmp___3~2#1;call vhost_dev_set_owner_#t~mem267#1.base, vhost_dev_set_owner_#t~mem267#1.offset := read~$Pointer$#14(vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:31:18,040 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7248: assume !(44801 == vhost_dev_ioctl_~ioctl#1 % 4294967296); [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6786: assume -2147483648 <= vhost_log_access_ok_#t~ret364#1 && vhost_log_access_ok_#t~ret364#1 <= 2147483647;vhost_log_access_ok_~tmp~30#1 := vhost_log_access_ok_#t~ret364#1;havoc vhost_log_access_ok_#t~ret364#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6786-1: SUMMARY for call vhost_log_access_ok_#t~ret364#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10420: assume 0 != (vhost_net_set_backend_~oldubufs~0#1.base + vhost_net_set_backend_~oldubufs~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10420: assume !(0 != (vhost_net_set_backend_~oldubufs~0#1.base + vhost_net_set_backend_~oldubufs~0#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10354: assume vhost_net_set_backend_~index#1 % 4294967296 > 1;vhost_net_set_backend_~r~12#1 := -105; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10354: assume !(vhost_net_set_backend_~index#1 % 4294967296 > 1);vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset := vhost_net_set_backend_~n#1.base, 296 + vhost_net_set_backend_~n#1.offset + 17120 * (if vhost_net_set_backend_~index#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_net_set_backend_~index#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else vhost_net_set_backend_~index#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);assume { :begin_inline_ldv_mutex_lock_59 } true;ldv_mutex_lock_59_#in~ldv_func_arg1#1.base, ldv_mutex_lock_59_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~vq~7#1.base, 8 + vhost_net_set_backend_~vq~7#1.offset;havoc ldv_mutex_lock_59_~ldv_func_arg1#1.base, ldv_mutex_lock_59_~ldv_func_arg1#1.offset;ldv_mutex_lock_59_~ldv_func_arg1#1.base, ldv_mutex_lock_59_~ldv_func_arg1#1.offset := ldv_mutex_lock_59_#in~ldv_func_arg1#1.base, ldv_mutex_lock_59_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-2: assume vhost_dev_alloc_iovecs_#t~short239#1;call vhost_dev_alloc_iovecs_#t~mem237#1.base, vhost_dev_alloc_iovecs_#t~mem237#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem238#1.base, vhost_dev_alloc_iovecs_#t~mem238#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_#t~mem237#1.base, 17104 + (vhost_dev_alloc_iovecs_#t~mem237#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);vhost_dev_alloc_iovecs_#t~short239#1 := 0 == (vhost_dev_alloc_iovecs_#t~mem238#1.base + vhost_dev_alloc_iovecs_#t~mem238#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-2: assume !vhost_dev_alloc_iovecs_#t~short239#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-1: vhost_dev_alloc_iovecs_#t~short240#1 := vhost_dev_alloc_iovecs_#t~short239#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324: assume vhost_dev_alloc_iovecs_#t~short240#1;havoc vhost_dev_alloc_iovecs_#t~mem229#1.base, vhost_dev_alloc_iovecs_#t~mem229#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem230#1.base, vhost_dev_alloc_iovecs_#t~mem230#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem231#1.base, vhost_dev_alloc_iovecs_#t~mem231#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem232#1.base, vhost_dev_alloc_iovecs_#t~mem232#1.offset;havoc vhost_dev_alloc_iovecs_#t~short233#1;havoc vhost_dev_alloc_iovecs_#t~mem234#1.base, vhost_dev_alloc_iovecs_#t~mem234#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem235#1.base, vhost_dev_alloc_iovecs_#t~mem235#1.offset;havoc vhost_dev_alloc_iovecs_#t~short236#1;havoc vhost_dev_alloc_iovecs_#t~mem237#1.base, vhost_dev_alloc_iovecs_#t~mem237#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem238#1.base, vhost_dev_alloc_iovecs_#t~mem238#1.offset;havoc vhost_dev_alloc_iovecs_#t~short239#1;havoc vhost_dev_alloc_iovecs_#t~short240#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324: assume !vhost_dev_alloc_iovecs_#t~short240#1;havoc vhost_dev_alloc_iovecs_#t~mem229#1.base, vhost_dev_alloc_iovecs_#t~mem229#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem230#1.base, vhost_dev_alloc_iovecs_#t~mem230#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem231#1.base, vhost_dev_alloc_iovecs_#t~mem231#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem232#1.base, vhost_dev_alloc_iovecs_#t~mem232#1.offset;havoc vhost_dev_alloc_iovecs_#t~short233#1;havoc vhost_dev_alloc_iovecs_#t~mem234#1.base, vhost_dev_alloc_iovecs_#t~mem234#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem235#1.base, vhost_dev_alloc_iovecs_#t~mem235#1.offset;havoc vhost_dev_alloc_iovecs_#t~short236#1;havoc vhost_dev_alloc_iovecs_#t~mem237#1.base, vhost_dev_alloc_iovecs_#t~mem237#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem238#1.base, vhost_dev_alloc_iovecs_#t~mem238#1.offset;havoc vhost_dev_alloc_iovecs_#t~short239#1;havoc vhost_dev_alloc_iovecs_#t~short240#1;vhost_dev_alloc_iovecs_~i~0#1 := 1 + vhost_dev_alloc_iovecs_~i~0#1;call vhost_dev_alloc_iovecs_#t~mem241#1 := read~int#14(vhost_dev_alloc_iovecs_~dev#1.base, 184 + vhost_dev_alloc_iovecs_~dev#1.offset, 4); [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-6: vhost_dev_alloc_iovecs_#t~short236#1 := vhost_dev_alloc_iovecs_#t~short233#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-5: assume vhost_dev_alloc_iovecs_#t~short236#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-5: assume !vhost_dev_alloc_iovecs_#t~short236#1;call vhost_dev_alloc_iovecs_#t~mem234#1.base, vhost_dev_alloc_iovecs_#t~mem234#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem235#1.base, vhost_dev_alloc_iovecs_#t~mem235#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_#t~mem234#1.base, 17064 + (vhost_dev_alloc_iovecs_#t~mem234#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);vhost_dev_alloc_iovecs_#t~short236#1 := 0 == (vhost_dev_alloc_iovecs_#t~mem235#1.base + vhost_dev_alloc_iovecs_#t~mem235#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-4: vhost_dev_alloc_iovecs_#t~short240#1 := vhost_dev_alloc_iovecs_#t~short236#1; [2025-02-08 02:31:18,041 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7249: vhost_dev_ioctl_#t~ret481#1 := vhost_dev_set_owner_#res#1;havoc vhost_dev_set_owner_#t~mem267#1.base, vhost_dev_set_owner_#t~mem267#1.offset, vhost_dev_set_owner_#t~ret268#1.base, vhost_dev_set_owner_#t~ret268#1.offset, vhost_dev_set_owner_#t~ret269#1.base, vhost_dev_set_owner_#t~ret269#1.offset, vhost_dev_set_owner_#t~ret270#1.base, vhost_dev_set_owner_#t~ret270#1.offset, vhost_dev_set_owner_#t~mem271#1, vhost_dev_set_owner_#t~ret272#1.base, vhost_dev_set_owner_#t~ret272#1.offset, vhost_dev_set_owner_#t~ret273#1, vhost_dev_set_owner_#t~ret274#1, vhost_dev_set_owner_#t~ret275#1, vhost_dev_set_owner_#t~ret276#1, vhost_dev_set_owner_#t~ret277#1, vhost_dev_set_owner_#t~ret278#1, vhost_dev_set_owner_#t~mem279#1.base, vhost_dev_set_owner_#t~mem279#1.offset, vhost_dev_set_owner_#t~mem280#1.base, vhost_dev_set_owner_#t~mem280#1.offset, vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset, vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset, vhost_dev_set_owner_~err~0#1, vhost_dev_set_owner_~tmp~24#1.base, vhost_dev_set_owner_~tmp~24#1.offset, vhost_dev_set_owner_~tmp___0~12#1.base, vhost_dev_set_owner_~tmp___0~12#1.offset, vhost_dev_set_owner_~tmp___1~8#1, vhost_dev_set_owner_~tmp___2~8#1, vhost_dev_set_owner_~tmp___3~2#1;havoc vhost_dev_set_owner_#in~dev#1.base, vhost_dev_set_owner_#in~dev#1.offset;assume { :end_inline_vhost_dev_set_owner } true;assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret481#1 && vhost_dev_ioctl_#t~ret481#1 <= 9223372036854775807;vhost_dev_ioctl_~r~1#1 := vhost_dev_ioctl_#t~ret481#1;havoc vhost_dev_ioctl_#t~ret481#1; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-3: assume vhost_dev_alloc_iovecs_#t~short240#1; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-3: assume !vhost_dev_alloc_iovecs_#t~short240#1;vhost_dev_alloc_iovecs_#t~short239#1 := 0 != (if vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 <= 2147483647 then vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 else vhost_dev_alloc_iovecs_~zcopy~0#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7051-1: assume vhost_set_vring_#t~switch405#1;call write~int#14(vhost_set_vring_~idx~0#1, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, 4);call vhost_set_vring_#t~mem421#1 := read~int#14(vhost_set_vring_~vq~0#1.base, 444 + vhost_set_vring_~vq~0#1.offset, 2);call write~int#14(vhost_set_vring_#t~mem421#1 % 65536, vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7051-1: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := vhost_set_vring_#t~switch405#1 || 1076408081 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7051: assume 0 != vhost_set_vring_~tmp___1~16#1;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7051: assume !(0 != vhost_set_vring_~tmp___1~16#1); [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7117-1: SUMMARY for call vhost_set_vring_#t~ret451#1 := PTR_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-8: call vhost_dev_alloc_iovecs_#t~mem229#1.base, vhost_dev_alloc_iovecs_#t~mem229#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem230#1.base, vhost_dev_alloc_iovecs_#t~mem230#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_#t~mem229#1.base, 17040 + (vhost_dev_alloc_iovecs_#t~mem229#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);vhost_dev_alloc_iovecs_#t~short233#1 := 0 == (vhost_dev_alloc_iovecs_#t~mem230#1.base + vhost_dev_alloc_iovecs_#t~mem230#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7117: assume -9223372036854775808 <= vhost_set_vring_#t~ret451#1 && vhost_set_vring_#t~ret451#1 <= 9223372036854775807;vhost_set_vring_~r~0#1 := vhost_set_vring_#t~ret451#1;havoc vhost_set_vring_#t~ret451#1; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-7: assume vhost_dev_alloc_iovecs_#t~short233#1; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6324-7: assume !vhost_dev_alloc_iovecs_#t~short233#1;call vhost_dev_alloc_iovecs_#t~mem231#1.base, vhost_dev_alloc_iovecs_#t~mem231#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem232#1.base, vhost_dev_alloc_iovecs_#t~mem232#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_#t~mem231#1.base, 17088 + (vhost_dev_alloc_iovecs_#t~mem231#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);vhost_dev_alloc_iovecs_#t~short233#1 := 0 == (vhost_dev_alloc_iovecs_#t~mem232#1.base + vhost_dev_alloc_iovecs_#t~mem232#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6985: assume vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6985: assume !vhost_set_vring_#t~switch402#1;vhost_set_vring_#t~switch402#1 := true; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6787: assume 0 != vhost_log_access_ok_~tmp~30#1 && 0 == vhost_log_access_ok_~__warned~3#1 % 256; [2025-02-08 02:31:18,042 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6787: assume !(0 != vhost_log_access_ok_~tmp~30#1 && 0 == vhost_log_access_ok_~__warned~3#1 % 256); [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10421: assume { :begin_inline_ldv_mutex_lock_61 } true;ldv_mutex_lock_61_#in~ldv_func_arg1#1.base, ldv_mutex_lock_61_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~vq~7#1.base, 8 + vhost_net_set_backend_~vq~7#1.offset;havoc ldv_mutex_lock_61_~ldv_func_arg1#1.base, ldv_mutex_lock_61_~ldv_func_arg1#1.offset;ldv_mutex_lock_61_~ldv_func_arg1#1.base, ldv_mutex_lock_61_~ldv_func_arg1#1.offset := ldv_mutex_lock_61_#in~ldv_func_arg1#1.base, ldv_mutex_lock_61_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10421-1: SUMMARY for call vhost_ubuf_put_and_wait(vhost_net_set_backend_~oldubufs~0#1.base, vhost_net_set_backend_~oldubufs~0#1.offset); srcloc: null [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6457-1: SUMMARY for call vhost_dev_set_owner_#t~ret270#1.base, vhost_dev_set_owner_#t~ret270#1.offset := get_current(); srcloc: null [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6457: vhost_dev_set_owner_~tmp___0~12#1.base, vhost_dev_set_owner_~tmp___0~12#1.offset := vhost_dev_set_owner_#t~ret270#1.base, vhost_dev_set_owner_#t~ret270#1.offset;havoc vhost_dev_set_owner_#t~ret270#1.base, vhost_dev_set_owner_#t~ret270#1.offset;call vhost_dev_set_owner_#t~mem271#1 := read~int#14(vhost_dev_set_owner_~tmp___0~12#1.base, 1136 + vhost_dev_set_owner_~tmp___0~12#1.offset, 4);assume { :begin_inline_kthread_create_on_node } true;kthread_create_on_node_#in~arg0#1.base, kthread_create_on_node_#in~arg0#1.offset, kthread_create_on_node_#in~arg1#1.base, kthread_create_on_node_#in~arg1#1.offset, kthread_create_on_node_#in~arg2#1, kthread_create_on_node_#in~arg3#1.base, kthread_create_on_node_#in~arg3#1.offset := #funAddr~vhost_worker.base, #funAddr~vhost_worker.offset, vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset, -1, 14, 0;havoc kthread_create_on_node_#res#1.base, kthread_create_on_node_#res#1.offset;havoc kthread_create_on_node_#t~ret1288#1.base, kthread_create_on_node_#t~ret1288#1.offset, kthread_create_on_node_~arg0#1.base, kthread_create_on_node_~arg0#1.offset, kthread_create_on_node_~arg1#1.base, kthread_create_on_node_~arg1#1.offset, kthread_create_on_node_~arg2#1, kthread_create_on_node_~arg3#1.base, kthread_create_on_node_~arg3#1.offset;kthread_create_on_node_~arg0#1.base, kthread_create_on_node_~arg0#1.offset := kthread_create_on_node_#in~arg0#1.base, kthread_create_on_node_#in~arg0#1.offset;kthread_create_on_node_~arg1#1.base, kthread_create_on_node_~arg1#1.offset := kthread_create_on_node_#in~arg1#1.base, kthread_create_on_node_#in~arg1#1.offset;kthread_create_on_node_~arg2#1 := kthread_create_on_node_#in~arg2#1;kthread_create_on_node_~arg3#1.base, kthread_create_on_node_~arg3#1.offset := kthread_create_on_node_#in~arg3#1.base, kthread_create_on_node_#in~arg3#1.offset; [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6854: assume -2147483648 <= vhost_vq_access_ok_#t~ret385#1 && vhost_vq_access_ok_#t~ret385#1 <= 2147483647;vhost_vq_access_ok_~tmp~32#1 := vhost_vq_access_ok_#t~ret385#1;havoc vhost_vq_access_ok_#t~mem380#1.base, vhost_vq_access_ok_#t~mem380#1.offset;havoc vhost_vq_access_ok_#t~mem381#1;havoc vhost_vq_access_ok_#t~mem382#1.base, vhost_vq_access_ok_#t~mem382#1.offset;havoc vhost_vq_access_ok_#t~mem383#1.base, vhost_vq_access_ok_#t~mem383#1.offset;havoc vhost_vq_access_ok_#t~mem384#1.base, vhost_vq_access_ok_#t~mem384#1.offset;havoc vhost_vq_access_ok_#t~ret385#1; [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6788-1: SUMMARY for call vhost_log_access_ok_#t~ret365#1 := lock_is_held(vhost_log_access_ok_~dev#1.base, 128 + vhost_log_access_ok_~dev#1.offset); srcloc: null [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6788: assume -2147483648 <= vhost_log_access_ok_#t~ret365#1 && vhost_log_access_ok_#t~ret365#1 <= 2147483647;vhost_log_access_ok_~tmp___0~17#1 := vhost_log_access_ok_#t~ret365#1;havoc vhost_log_access_ok_#t~ret365#1; [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6854-1: SUMMARY for call vhost_vq_access_ok_#t~ret385#1 := vq_access_ok(vhost_vq_access_ok_#t~mem380#1.base, vhost_vq_access_ok_#t~mem380#1.offset, vhost_vq_access_ok_#t~mem381#1, vhost_vq_access_ok_#t~mem382#1.base, vhost_vq_access_ok_#t~mem382#1.offset, vhost_vq_access_ok_#t~mem383#1.base, vhost_vq_access_ok_#t~mem383#1.offset, vhost_vq_access_ok_#t~mem384#1.base, vhost_vq_access_ok_#t~mem384#1.offset); srcloc: null [2025-02-08 02:31:18,043 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10422: havoc ldv_mutex_lock_61_~ldv_func_arg1#1.base, ldv_mutex_lock_61_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_61_#in~ldv_func_arg1#1.base, ldv_mutex_lock_61_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_61 } true; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6855: assume 0 != vhost_vq_access_ok_~tmp~32#1;call vhost_vq_access_ok_#t~mem386#1.base, vhost_vq_access_ok_#t~mem386#1.offset := read~$Pointer$#14(vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem387#1.base, vhost_vq_access_ok_#t~mem387#1.offset := read~$Pointer$#14(vhost_vq_access_ok_~vq#1.base, 17080 + vhost_vq_access_ok_~vq#1.offset, 8); [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6855: assume !(0 != vhost_vq_access_ok_~tmp~32#1);vhost_vq_access_ok_~tmp___1~14#1 := 0; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6921-1: SUMMARY for call vhost_set_memory_#t~ret399#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6921: assume -2147483648 <= vhost_set_memory_#t~ret399#1 && vhost_set_memory_#t~ret399#1 <= 2147483647;vhost_set_memory_~tmp___4~3#1 := vhost_set_memory_#t~ret399#1;havoc vhost_set_memory_#t~ret399#1; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10951: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_70_~ldv_func_arg1#1.base, ldv_mutex_lock_70_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6789: assume 0 == vhost_log_access_ok_~tmp___0~17#1;vhost_log_access_ok_~__warned~3#1 := 1; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6789: assume !(0 == vhost_log_access_ok_~tmp___0~17#1); [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11546: havoc kthread_create_on_node_#t~ret1288#1.base, kthread_create_on_node_#t~ret1288#1.offset;vhost_dev_set_owner_#t~ret272#1.base, vhost_dev_set_owner_#t~ret272#1.offset := kthread_create_on_node_#res#1.base, kthread_create_on_node_#res#1.offset;havoc kthread_create_on_node_#t~ret1288#1.base, kthread_create_on_node_#t~ret1288#1.offset, kthread_create_on_node_~arg0#1.base, kthread_create_on_node_~arg0#1.offset, kthread_create_on_node_~arg1#1.base, kthread_create_on_node_~arg1#1.offset, kthread_create_on_node_~arg2#1, kthread_create_on_node_~arg3#1.base, kthread_create_on_node_~arg3#1.offset;havoc kthread_create_on_node_#in~arg0#1.base, kthread_create_on_node_#in~arg0#1.offset, kthread_create_on_node_#in~arg1#1.base, kthread_create_on_node_#in~arg1#1.offset, kthread_create_on_node_#in~arg2#1, kthread_create_on_node_#in~arg3#1.base, kthread_create_on_node_#in~arg3#1.offset;assume { :end_inline_kthread_create_on_node } true;vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset := vhost_dev_set_owner_#t~ret272#1.base, vhost_dev_set_owner_#t~ret272#1.offset;havoc vhost_dev_set_owner_#t~mem271#1;havoc vhost_dev_set_owner_#t~ret272#1.base, vhost_dev_set_owner_#t~ret272#1.offset; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6459-1: SUMMARY for call vhost_dev_set_owner_#t~ret273#1 := IS_ERR(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6459: assume -9223372036854775808 <= vhost_dev_set_owner_#t~ret273#1 && vhost_dev_set_owner_#t~ret273#1 <= 9223372036854775807;vhost_dev_set_owner_~tmp___2~8#1 := vhost_dev_set_owner_#t~ret273#1;havoc vhost_dev_set_owner_#t~ret273#1; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9366-1: vhost_sock_zcopy_#res#1 := (if 0 == (if 0 == vhost_sock_zcopy_~tmp___1~26#1 then 0 else 1) % 256 then 0 else 1); [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10291: assume -9223372036854775808 <= get_tap_socket_#t~ret1192#1 && get_tap_socket_#t~ret1192#1 <= 9223372036854775807;get_tap_socket_~tmp___2~25#1 := get_tap_socket_#t~ret1192#1;havoc get_tap_socket_#t~ret1192#1; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10291-1: SUMMARY for call get_tap_socket_#t~ret1192#1 := IS_ERR(get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset); srcloc: null [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11546-2: kthread_create_on_node_#res#1.base, kthread_create_on_node_#res#1.offset := kthread_create_on_node_#t~ret1288#1.base, kthread_create_on_node_#t~ret1288#1.offset;havoc kthread_create_on_node_#t~ret1288#1.base, kthread_create_on_node_#t~ret1288#1.offset; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10489: havoc ldv_mutex_lock_68_~ldv_func_arg1#1.base, ldv_mutex_lock_68_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_68_#in~ldv_func_arg1#1.base, ldv_mutex_lock_68_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_68 } true; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10423: assume -2147483648 <= vhost_net_set_backend_#t~ret1212#1 && vhost_net_set_backend_#t~ret1212#1 <= 2147483647;havoc vhost_net_set_backend_#t~ret1212#1;assume { :begin_inline_ldv_mutex_unlock_62 } true;ldv_mutex_unlock_62_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_62_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~vq~7#1.base, 8 + vhost_net_set_backend_~vq~7#1.offset;havoc ldv_mutex_unlock_62_~ldv_func_arg1#1.base, ldv_mutex_unlock_62_~ldv_func_arg1#1.offset;ldv_mutex_unlock_62_~ldv_func_arg1#1.base, ldv_mutex_unlock_62_~ldv_func_arg1#1.offset := ldv_mutex_unlock_62_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_62_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11546-3: SUMMARY for call kthread_create_on_node_#t~ret1288#1.base, kthread_create_on_node_#t~ret1288#1.offset := ldv_malloc(9365); srcloc: null [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10423-1: SUMMARY for call vhost_net_set_backend_#t~ret1212#1 := vhost_zerocopy_signal_used(vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset); srcloc: null [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7054: assume -2147483648 <= vhost_set_vring_#t~ret422#1 && vhost_set_vring_#t~ret422#1 <= 2147483647;vhost_set_vring_~tmp___1~16#1 := vhost_set_vring_#t~ret422#1; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6922: assume 0 != vhost_set_memory_~tmp___4~3#1 && 0 == vhost_set_memory_~__warned~5#1 % 256; [2025-02-08 02:31:18,044 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6922: assume !(0 != vhost_set_memory_~tmp___4~3#1 && 0 == vhost_set_memory_~__warned~5#1 % 256); [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6988: assume vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6988: assume !vhost_set_vring_#t~switch402#1;vhost_set_vring_#t~switch402#1 := vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7054-1: SUMMARY for call vhost_set_vring_#t~ret422#1 := copy_to_user(vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, 8); srcloc: null [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6856-1: SUMMARY for call vhost_vq_access_ok_#t~ret388#1 := vq_log_access_ok(vhost_vq_access_ok_#t~mem386#1.base, vhost_vq_access_ok_#t~mem386#1.offset, vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, vhost_vq_access_ok_#t~mem387#1.base, vhost_vq_access_ok_#t~mem387#1.offset); srcloc: null [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6856: assume -2147483648 <= vhost_vq_access_ok_#t~ret388#1 && vhost_vq_access_ok_#t~ret388#1 <= 2147483647;vhost_vq_access_ok_~tmp___0~19#1 := vhost_vq_access_ok_#t~ret388#1;havoc vhost_vq_access_ok_#t~mem386#1.base, vhost_vq_access_ok_#t~mem386#1.offset;havoc vhost_vq_access_ok_#t~mem387#1.base, vhost_vq_access_ok_#t~mem387#1.offset;havoc vhost_vq_access_ok_#t~ret388#1; [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10952: SUMMARY for call mutex_lock(ldv_mutex_lock_70_~ldv_func_arg1#1.base, ldv_mutex_lock_70_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490: assume 0 != vhost_net_set_features_#t~bitwise1225#1 % 18446744073709551616;havoc vhost_net_set_features_#t~bitwise1225#1;assume { :begin_inline_vhost_log_access_ok } true;vhost_log_access_ok_#in~dev#1.base, vhost_log_access_ok_#in~dev#1.offset := vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset;havoc vhost_log_access_ok_#res#1;havoc vhost_log_access_ok_#t~ret364#1, vhost_log_access_ok_#t~ret365#1, vhost_log_access_ok_#t~mem366#1.base, vhost_log_access_ok_#t~mem366#1.offset, vhost_log_access_ok_#t~ret367#1, vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset, vhost_log_access_ok_~__warned~3#1, vhost_log_access_ok_~tmp~30#1, vhost_log_access_ok_~tmp___0~17#1, vhost_log_access_ok_~tmp___1~12#1;vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset := vhost_log_access_ok_#in~dev#1.base, vhost_log_access_ok_#in~dev#1.offset;havoc vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset;havoc vhost_log_access_ok_~__warned~3#1;havoc vhost_log_access_ok_~tmp~30#1;havoc vhost_log_access_ok_~tmp___0~17#1;havoc vhost_log_access_ok_~tmp___1~12#1; [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490: assume !(0 != vhost_net_set_features_#t~bitwise1225#1 % 18446744073709551616);havoc vhost_net_set_features_#t~bitwise1225#1; [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6460: assume 0 != vhost_dev_set_owner_~tmp___2~8#1; [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6460: assume !(0 != vhost_dev_set_owner_~tmp___2~8#1);call write~$Pointer$#14(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset, vhost_dev_set_owner_~dev#1.base, 288 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:31:18,045 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10292: assume 0 != get_tap_socket_~tmp___2~25#1; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10292: assume !(0 != get_tap_socket_~tmp___2~25#1); [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490-1: [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490-2: havoc vhost_net_set_features_#t~bitwise1225#1;assume vhost_net_set_features_#t~bitwise1225#1 % 18446744073709551616 <= vhost_net_set_features_~features#1 % 18446744073709551616 && vhost_net_set_features_#t~bitwise1225#1 % 18446744073709551616 <= 67108864; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10424: havoc ldv_mutex_unlock_62_~ldv_func_arg1#1.base, ldv_mutex_unlock_62_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_62_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_62_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_62 } true; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7253-1: SUMMARY for call vhost_dev_ioctl_#t~ret482#1 := vhost_dev_check_owner(vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset); srcloc: null [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490-3: assume 67108864 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise1225#1 := vhost_net_set_features_~features#1; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490-3: assume !(67108864 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7253: assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret482#1 && vhost_dev_ioctl_#t~ret482#1 <= 9223372036854775807;vhost_dev_ioctl_~r~1#1 := vhost_dev_ioctl_#t~ret482#1;havoc vhost_dev_ioctl_#t~ret482#1; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490-4: assume 0 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise1225#1 := 0; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10490-4: assume !(0 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6923-1: SUMMARY for call vhost_set_memory_#t~ret400#1 := lock_is_held(vhost_set_memory_~d#1.base, 128 + vhost_set_memory_~d#1.offset); srcloc: null [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6923: assume -2147483648 <= vhost_set_memory_#t~ret400#1 && vhost_set_memory_#t~ret400#1 <= 2147483647;vhost_set_memory_~tmp___5~3#1 := vhost_set_memory_#t~ret400#1;havoc vhost_set_memory_#t~ret400#1; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6791: SUMMARY for call lockdep_rcu_suspicious(18, 0, 612, 19, 0); srcloc: null [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6857: assume 0 != vhost_vq_access_ok_~tmp___0~19#1;vhost_vq_access_ok_~tmp___1~14#1 := 1; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6857: assume !(0 != vhost_vq_access_ok_~tmp___0~19#1);vhost_vq_access_ok_~tmp___1~14#1 := 0; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10887: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_62_~ldv_func_arg1#1.base, ldv_mutex_unlock_62_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10491: vhost_net_set_features_#t~ret1226#1 := vhost_log_access_ok_#res#1;havoc vhost_log_access_ok_#t~ret364#1, vhost_log_access_ok_#t~ret365#1, vhost_log_access_ok_#t~mem366#1.base, vhost_log_access_ok_#t~mem366#1.offset, vhost_log_access_ok_#t~ret367#1, vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset, vhost_log_access_ok_~__warned~3#1, vhost_log_access_ok_~tmp~30#1, vhost_log_access_ok_~tmp___0~17#1, vhost_log_access_ok_~tmp___1~12#1;havoc vhost_log_access_ok_#in~dev#1.base, vhost_log_access_ok_#in~dev#1.offset;assume { :end_inline_vhost_log_access_ok } true;assume -2147483648 <= vhost_net_set_features_#t~ret1226#1 && vhost_net_set_features_#t~ret1226#1 <= 2147483647;vhost_net_set_features_~tmp~68#1 := vhost_net_set_features_#t~ret1226#1;havoc vhost_net_set_features_#t~ret1226#1; [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6461-1: SUMMARY for call vhost_dev_set_owner_#t~ret274#1 := PTR_ERR(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6461: assume -9223372036854775808 <= vhost_dev_set_owner_#t~ret274#1 && vhost_dev_set_owner_#t~ret274#1 <= 9223372036854775807;vhost_dev_set_owner_~tmp___1~8#1 := vhost_dev_set_owner_#t~ret274#1;havoc vhost_dev_set_owner_#t~ret274#1;vhost_dev_set_owner_~err~0#1 := (if vhost_dev_set_owner_~tmp___1~8#1 % 4294967296 <= 2147483647 then vhost_dev_set_owner_~tmp___1~8#1 % 4294967296 else vhost_dev_set_owner_~tmp___1~8#1 % 4294967296 - 4294967296); [2025-02-08 02:31:18,046 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7254: assume 0 != vhost_dev_ioctl_~r~1#1; [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7254: assume !(0 != vhost_dev_ioctl_~r~1#1);vhost_dev_ioctl_#t~switch483#1 := 1074310915 == vhost_dev_ioctl_~ioctl#1; [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10293: SUMMARY for call fput(get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset); srcloc: null [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7320-1: SUMMARY for call vhost_dev_ioctl_#t~ret492#1.base, vhost_dev_ioctl_#t~ret492#1.offset := eventfd_fget(vhost_dev_ioctl_~fd~0#1); srcloc: null [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7320: vhost_dev_ioctl_~tmp___1~17#1.base, vhost_dev_ioctl_~tmp___1~17#1.offset := vhost_dev_ioctl_#t~ret492#1.base, vhost_dev_ioctl_#t~ret492#1.offset;havoc vhost_dev_ioctl_#t~ret492#1.base, vhost_dev_ioctl_#t~ret492#1.offset;vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset := vhost_dev_ioctl_~tmp___1~17#1.base, vhost_dev_ioctl_~tmp___1~17#1.offset; [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7188-1: SUMMARY for call vhost_set_vring_#t~ret473#1.base, vhost_set_vring_#t~ret473#1.offset := eventfd_ctx_fileget(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7188: vhost_set_vring_~tmp___16~0#1.base, vhost_set_vring_~tmp___16~0#1.offset := vhost_set_vring_#t~ret473#1.base, vhost_set_vring_#t~ret473#1.offset;havoc vhost_set_vring_#t~ret473#1.base, vhost_set_vring_#t~ret473#1.offset;call write~$Pointer$#14(vhost_set_vring_~tmp___16~0#1.base, vhost_set_vring_~tmp___16~0#1.offset, vhost_set_vring_~vq~0#1.base, 224 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6924: assume 0 == vhost_set_memory_~tmp___5~3#1;vhost_set_memory_~__warned~5#1 := 1; [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6924: assume !(0 == vhost_set_memory_~tmp___5~3#1); [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10888: SUMMARY for call mutex_unlock(ldv_mutex_unlock_62_~ldv_func_arg1#1.base, ldv_mutex_unlock_62_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10492: assume 0 == vhost_net_set_features_~tmp~68#1;assume { :begin_inline_ldv_mutex_unlock_69 } true;ldv_mutex_unlock_69_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_69_#in~ldv_func_arg1#1.offset := vhost_net_set_features_~n#1.base, 16 + vhost_net_set_features_~n#1.offset;havoc ldv_mutex_unlock_69_~ldv_func_arg1#1.base, ldv_mutex_unlock_69_~ldv_func_arg1#1.offset;ldv_mutex_unlock_69_~ldv_func_arg1#1.base, ldv_mutex_unlock_69_~ldv_func_arg1#1.offset := ldv_mutex_unlock_69_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_69_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10492: assume !(0 == vhost_net_set_features_~tmp~68#1); [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6330: assume vhost_dev_alloc_iovecs_#t~mem241#1 > vhost_dev_alloc_iovecs_~i~0#1;havoc vhost_dev_alloc_iovecs_#t~mem241#1; [2025-02-08 02:31:18,047 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6330: assume !(vhost_dev_alloc_iovecs_#t~mem241#1 > vhost_dev_alloc_iovecs_~i~0#1);havoc vhost_dev_alloc_iovecs_#t~mem241#1;vhost_dev_alloc_iovecs_#res#1 := 0; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10360: havoc ldv_mutex_lock_59_~ldv_func_arg1#1.base, ldv_mutex_lock_59_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_59_#in~ldv_func_arg1#1.base, ldv_mutex_lock_59_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_59 } true;assume { :begin_inline_vhost_vq_access_ok } true;vhost_vq_access_ok_#in~vq#1.base, vhost_vq_access_ok_#in~vq#1.offset := vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset;havoc vhost_vq_access_ok_#res#1;havoc vhost_vq_access_ok_#t~mem380#1.base, vhost_vq_access_ok_#t~mem380#1.offset, vhost_vq_access_ok_#t~mem381#1, vhost_vq_access_ok_#t~mem382#1.base, vhost_vq_access_ok_#t~mem382#1.offset, vhost_vq_access_ok_#t~mem383#1.base, vhost_vq_access_ok_#t~mem383#1.offset, vhost_vq_access_ok_#t~mem384#1.base, vhost_vq_access_ok_#t~mem384#1.offset, vhost_vq_access_ok_#t~ret385#1, vhost_vq_access_ok_#t~mem386#1.base, vhost_vq_access_ok_#t~mem386#1.offset, vhost_vq_access_ok_#t~mem387#1.base, vhost_vq_access_ok_#t~mem387#1.offset, vhost_vq_access_ok_#t~ret388#1, vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, vhost_vq_access_ok_~tmp~32#1, vhost_vq_access_ok_~tmp___0~19#1, vhost_vq_access_ok_~tmp___1~14#1;vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset := vhost_vq_access_ok_#in~vq#1.base, vhost_vq_access_ok_#in~vq#1.offset;havoc vhost_vq_access_ok_~tmp~32#1;havoc vhost_vq_access_ok_~tmp___0~19#1;havoc vhost_vq_access_ok_~tmp___1~14#1;call vhost_vq_access_ok_#t~mem380#1.base, vhost_vq_access_ok_#t~mem380#1.offset := read~$Pointer$#14(vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem381#1 := read~int#14(vhost_vq_access_ok_~vq#1.base, 164 + vhost_vq_access_ok_~vq#1.offset, 4);call vhost_vq_access_ok_#t~mem382#1.base, vhost_vq_access_ok_#t~mem382#1.offset := read~$Pointer$#14(vhost_vq_access_ok_~vq#1.base, 168 + vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem383#1.base, vhost_vq_access_ok_#t~mem383#1.offset := read~$Pointer$#14(vhost_vq_access_ok_~vq#1.base, 176 + vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem384#1.base, vhost_vq_access_ok_#t~mem384#1.offset := read~$Pointer$#14(vhost_vq_access_ok_~vq#1.base, 184 + vhost_vq_access_ok_~vq#1.offset, 8); [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6991: assume vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6991: assume !vhost_set_vring_#t~switch402#1;vhost_set_vring_#t~switch402#1 := true; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10493: havoc ldv_mutex_unlock_69_~ldv_func_arg1#1.base, ldv_mutex_unlock_69_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_69_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_69_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_69 } true;vhost_net_set_features_#res#1 := -14; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10427: assume 0 != (vhost_net_set_backend_~oldsock~0#1.base + vhost_net_set_backend_~oldsock~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10427: assume !(0 != (vhost_net_set_backend_~oldsock~0#1.base + vhost_net_set_backend_~oldsock~0#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10229: call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset;get_socket_#t~ret1193#1.base, get_socket_#t~ret1193#1.offset := get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset;havoc get_raw_socket_#t~ret1169#1.base, get_raw_socket_#t~ret1169#1.offset, get_raw_socket_#t~ret1170#1.base, get_raw_socket_#t~ret1170#1.offset, get_raw_socket_#t~mem1171#1.base, get_raw_socket_#t~mem1171#1.offset, get_raw_socket_#t~mem1172#1, get_raw_socket_#t~mem1179#1.base, get_raw_socket_#t~mem1179#1.offset, get_raw_socket_#t~mem1180#1.base, get_raw_socket_#t~mem1180#1.offset, get_raw_socket_#t~ret1181#1, get_raw_socket_#t~mem1182#1, get_raw_socket_#t~mem1183#1, get_raw_socket_#t~mem1184#1.base, get_raw_socket_#t~mem1184#1.offset, get_raw_socket_#t~mem1185#1, get_raw_socket_#t~ret1186#1.base, get_raw_socket_#t~ret1186#1.offset, get_raw_socket_~fd#1, get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset, get_raw_socket_~tmp~64#1.base, get_raw_socket_~tmp~64#1.offset, get_raw_socket_~tmp___0~44#1.base, get_raw_socket_~tmp___0~44#1.offset, get_raw_socket_~tmp___1~30#1.base, get_raw_socket_~tmp___1~30#1.offset;havoc get_raw_socket_#in~fd#1;assume { :end_inline_get_raw_socket } true;get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset := get_socket_#t~ret1193#1.base, get_socket_#t~ret1193#1.offset;havoc get_socket_#t~ret1193#1.base, get_socket_#t~ret1193#1.offset; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10361: vhost_net_set_backend_#t~ret1199#1 := vhost_vq_access_ok_#res#1;havoc vhost_vq_access_ok_#t~mem380#1.base, vhost_vq_access_ok_#t~mem380#1.offset, vhost_vq_access_ok_#t~mem381#1, vhost_vq_access_ok_#t~mem382#1.base, vhost_vq_access_ok_#t~mem382#1.offset, vhost_vq_access_ok_#t~mem383#1.base, vhost_vq_access_ok_#t~mem383#1.offset, vhost_vq_access_ok_#t~mem384#1.base, vhost_vq_access_ok_#t~mem384#1.offset, vhost_vq_access_ok_#t~ret385#1, vhost_vq_access_ok_#t~mem386#1.base, vhost_vq_access_ok_#t~mem386#1.offset, vhost_vq_access_ok_#t~mem387#1.base, vhost_vq_access_ok_#t~mem387#1.offset, vhost_vq_access_ok_#t~ret388#1, vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, vhost_vq_access_ok_~tmp~32#1, vhost_vq_access_ok_~tmp___0~19#1, vhost_vq_access_ok_~tmp___1~14#1;havoc vhost_vq_access_ok_#in~vq#1.base, vhost_vq_access_ok_#in~vq#1.offset;assume { :end_inline_vhost_vq_access_ok } true;assume -2147483648 <= vhost_net_set_backend_#t~ret1199#1 && vhost_net_set_backend_#t~ret1199#1 <= 2147483647;vhost_net_set_backend_~tmp___0~47#1 := vhost_net_set_backend_#t~ret1199#1;havoc vhost_net_set_backend_#t~ret1199#1; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6926: SUMMARY for call lockdep_rcu_suspicious(22, 0, 669, 23, 0); srcloc: null [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10428: call vhost_net_set_backend_#t~mem1213#1.base, vhost_net_set_backend_#t~mem1213#1.offset := read~$Pointer$#14(vhost_net_set_backend_~oldsock~0#1.base, 22 + vhost_net_set_backend_~oldsock~0#1.offset, 8); [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10428-1: SUMMARY for call vhost_net_flush_vq(vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, (if vhost_net_set_backend_~index#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_net_set_backend_~index#1 % 4294967296 % 4294967296 else vhost_net_set_backend_~index#1 % 4294967296 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10362: assume 0 == vhost_net_set_backend_~tmp___0~47#1;vhost_net_set_backend_~r~12#1 := -14; [2025-02-08 02:31:18,048 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10362: assume !(0 == vhost_net_set_backend_~tmp___0~47#1);assume { :begin_inline_get_socket } true;get_socket_#in~fd#1 := vhost_net_set_backend_~fd#1;havoc get_socket_#res#1.base, get_socket_#res#1.offset;havoc get_socket_#t~ret1193#1.base, get_socket_#t~ret1193#1.offset, get_socket_#t~ret1194#1, get_socket_#t~ret1195#1.base, get_socket_#t~ret1195#1.offset, get_socket_#t~ret1196#1, get_socket_#t~ret1197#1.base, get_socket_#t~ret1197#1.offset, get_socket_~fd#1, get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset, get_socket_~tmp~66#1, get_socket_~tmp___0~46#1, get_socket_~tmp___1~32#1.base, get_socket_~tmp___1~32#1.offset;get_socket_~fd#1 := get_socket_#in~fd#1;havoc get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset;havoc get_socket_~tmp~66#1;havoc get_socket_~tmp___0~46#1;havoc get_socket_~tmp___1~32#1.base, get_socket_~tmp___1~32#1.offset; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10296-1: get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset := get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10429: havoc vhost_net_set_backend_#t~mem1213#1.base, vhost_net_set_backend_#t~mem1213#1.offset; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10429-1: SUMMARY for call fput(vhost_net_set_backend_#t~mem1213#1.base, vhost_net_set_backend_#t~mem1213#1.offset); srcloc: null [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-2: assume 0 == vhost_set_vring_~tmp___3~6#1;vhost_set_vring_~r~0#1 := -22; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-2: assume !(0 == vhost_set_vring_~tmp___3~6#1);call vhost_set_vring_#t~mem436#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 4 + vhost_set_vring_~#a~2#1.offset, 4); [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6994: assume vhost_set_vring_#t~switch402#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6994: assume !vhost_set_vring_#t~switch402#1;havoc vhost_set_vring_#t~switch402#1;havoc vhost_set_vring_#t~switch402#1;vhost_set_vring_~idx~0#1 := vhost_set_vring_~__val_gu~0#1;vhost_set_vring_~r~0#1 := vhost_set_vring_~__ret_gu~0#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-1: assume 0 != (if vhost_set_vring_#t~mem436#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_set_vring_#t~mem436#1 % 4294967296 % 4294967296 else vhost_set_vring_#t~mem436#1 % 4294967296 % 4294967296 - 4294967296) % 2;havoc vhost_set_vring_#t~mem436#1;call vhost_set_vring_#t~mem437#1.base, vhost_set_vring_#t~mem437#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 17080 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem438#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 32 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem439#1 := read~int#14(vhost_set_vring_~vq~0#1.base, 164 + vhost_set_vring_~vq~0#1.offset, 4); [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-1: assume !(0 != (if vhost_set_vring_#t~mem436#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_set_vring_#t~mem436#1 % 4294967296 % 4294967296 else vhost_set_vring_#t~mem436#1 % 4294967296 % 4294967296 - 4294967296) % 2);havoc vhost_set_vring_#t~mem436#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060: assume 0 == vhost_set_vring_~tmp___4~4#1;vhost_set_vring_~r~0#1 := -22; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060: assume !(0 == vhost_set_vring_~tmp___4~4#1); [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-6: assume vhost_set_vring_#t~short427#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-6: assume !vhost_set_vring_#t~short427#1;call vhost_set_vring_#t~mem426#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8);vhost_set_vring_#t~short427#1 := 0 != vhost_set_vring_#t~mem426#1 % 8 % 18446744073709551616; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-5: assume vhost_set_vring_#t~short429#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-5: assume !vhost_set_vring_#t~short429#1;call vhost_set_vring_#t~mem428#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 32 + vhost_set_vring_~#a~2#1.offset, 8);vhost_set_vring_#t~short429#1 := 0 != vhost_set_vring_#t~mem428#1 % 8 % 18446744073709551616; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-4: assume vhost_set_vring_#t~short429#1;havoc vhost_set_vring_#t~mem425#1;havoc vhost_set_vring_#t~mem426#1;havoc vhost_set_vring_#t~short427#1;havoc vhost_set_vring_#t~mem428#1;havoc vhost_set_vring_#t~short429#1;vhost_set_vring_~r~0#1 := -22; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-4: assume !vhost_set_vring_#t~short429#1;havoc vhost_set_vring_#t~mem425#1;havoc vhost_set_vring_#t~mem426#1;havoc vhost_set_vring_#t~short427#1;havoc vhost_set_vring_#t~mem428#1;havoc vhost_set_vring_#t~short429#1;call vhost_set_vring_#t~mem430#1.base, vhost_set_vring_#t~mem430#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 17072 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-3: assume 0 != (vhost_set_vring_#t~mem430#1.base + vhost_set_vring_#t~mem430#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem430#1.base, vhost_set_vring_#t~mem430#1.offset;call vhost_set_vring_#t~mem431#1 := read~int#14(vhost_set_vring_~vq~0#1.base, 164 + vhost_set_vring_~vq~0#1.offset, 4);call vhost_set_vring_#t~mem432#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 8 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem433#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem434#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-3: assume !(0 != (vhost_set_vring_#t~mem430#1.base + vhost_set_vring_#t~mem430#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem430#1.base, vhost_set_vring_#t~mem430#1.offset; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-9: assume vhost_set_vring_#t~switch405#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-9: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := vhost_set_vring_#t~switch405#1 || 1074310944 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-8: assume 0 != vhost_set_vring_~tmp___2~13#1 % 18446744073709551616;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-8: assume !(0 != vhost_set_vring_~tmp___2~13#1 % 18446744073709551616);call vhost_set_vring_#t~mem424#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 4 + vhost_set_vring_~#a~2#1.offset, 4); [2025-02-08 02:31:18,049 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-7: assume 0 != (vhost_set_vring_#t~mem424#1 - vhost_set_vring_#t~mem424#1 % 2) % 4294967296;havoc vhost_set_vring_#t~mem424#1;vhost_set_vring_~r~0#1 := -95; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7060-7: assume !(0 != (vhost_set_vring_#t~mem424#1 - vhost_set_vring_#t~mem424#1 % 2) % 4294967296);havoc vhost_set_vring_#t~mem424#1;call vhost_set_vring_#t~mem425#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8);vhost_set_vring_#t~short427#1 := 0 != (if vhost_set_vring_#t~mem425#1 % 18446744073709551616 % 4294967296 <= 2147483647 then vhost_set_vring_#t~mem425#1 % 18446744073709551616 % 4294967296 else vhost_set_vring_#t~mem425#1 % 18446744073709551616 % 4294967296 - 4294967296) % 2; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7259: assume vhost_dev_ioctl_#t~switch483#1;assume { :begin_inline_vhost_set_memory } true;vhost_set_memory_#in~d#1.base, vhost_set_memory_#in~d#1.offset, vhost_set_memory_#in~m#1.base, vhost_set_memory_#in~m#1.offset := vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset;havoc vhost_set_memory_#res#1;havoc vhost_set_memory_#t~ret389#1, vhost_set_memory_#t~mem390#1, vhost_set_memory_#t~mem391#1, vhost_set_memory_#t~mem392#1, vhost_set_memory_#t~ret393#1.base, vhost_set_memory_#t~ret393#1.offset, vhost_set_memory_#t~memcpy~res394#1.base, vhost_set_memory_#t~memcpy~res394#1.offset, vhost_set_memory_#t~mem395#1, vhost_set_memory_#t~ret396#1, vhost_set_memory_#t~ret397#1, vhost_set_memory_#t~ret398#1, vhost_set_memory_#t~ret399#1, vhost_set_memory_#t~ret400#1, vhost_set_memory_#t~mem401#1.base, vhost_set_memory_#t~mem401#1.offset, vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset, vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset, vhost_set_memory_~size~0#1, vhost_set_memory_~tmp~33#1, vhost_set_memory_~tmp___0~20#1.base, vhost_set_memory_~tmp___0~20#1.offset, vhost_set_memory_~__len~0#1, vhost_set_memory_~__ret~1#1.base, vhost_set_memory_~__ret~1#1.offset, vhost_set_memory_~tmp___1~15#1, vhost_set_memory_~tmp___2~12#1, vhost_set_memory_~tmp___3~5#1, vhost_set_memory_~__warned~5#1, vhost_set_memory_~tmp___4~3#1, vhost_set_memory_~tmp___5~3#1;vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset := vhost_set_memory_#in~d#1.base, vhost_set_memory_#in~d#1.offset;vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset := vhost_set_memory_#in~m#1.base, vhost_set_memory_#in~m#1.offset;call vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset := #Ultimate.allocOnStack(8);havoc vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset;havoc vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset;havoc vhost_set_memory_~size~0#1;havoc vhost_set_memory_~tmp~33#1;havoc vhost_set_memory_~tmp___0~20#1.base, vhost_set_memory_~tmp___0~20#1.offset;havoc vhost_set_memory_~__len~0#1;havoc vhost_set_memory_~__ret~1#1.base, vhost_set_memory_~__ret~1#1.offset;havoc vhost_set_memory_~tmp___1~15#1;havoc vhost_set_memory_~tmp___2~12#1;havoc vhost_set_memory_~tmp___3~5#1;havoc vhost_set_memory_~__warned~5#1;havoc vhost_set_memory_~tmp___4~3#1;havoc vhost_set_memory_~tmp___5~3#1;vhost_set_memory_~size~0#1 := 8; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7259: assume !vhost_dev_ioctl_#t~switch483#1;vhost_dev_ioctl_#t~switch483#1 := vhost_dev_ioctl_#t~switch483#1 || 1074310916 == vhost_dev_ioctl_~ioctl#1; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7325-1: SUMMARY for call vhost_dev_ioctl_#t~ret493#1 := IS_ERR(vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7325: assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret493#1 && vhost_dev_ioctl_#t~ret493#1 <= 9223372036854775807;vhost_dev_ioctl_~tmp___2~14#1 := vhost_dev_ioctl_#t~ret493#1; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7061-1: SUMMARY for call vhost_set_vring_#t~ret423#1 := copy_from_user(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 40); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7061: vhost_set_vring_~tmp___2~13#1 := vhost_set_vring_#t~ret423#1; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10959: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_71_~ldv_func_arg1#1.base, ldv_mutex_unlock_71_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6797: call vhost_log_access_ok_#t~mem366#1.base, vhost_log_access_ok_#t~mem366#1.offset := read~$Pointer$#14(vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, 8);vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset := vhost_log_access_ok_#t~mem366#1.base, vhost_log_access_ok_#t~mem366#1.offset;havoc vhost_log_access_ok_#t~mem366#1.base, vhost_log_access_ok_#t~mem366#1.offset; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6467-1: SUMMARY for call vhost_dev_set_owner_#t~ret275#1 := wake_up_process(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6467: assume -2147483648 <= vhost_dev_set_owner_#t~ret275#1 && vhost_dev_set_owner_#t~ret275#1 <= 2147483647;havoc vhost_dev_set_owner_#t~ret275#1;assume { :begin_inline_vhost_attach_cgroups } true;vhost_attach_cgroups_#in~dev#1.base, vhost_attach_cgroups_#in~dev#1.offset := vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset;havoc vhost_attach_cgroups_#res#1;havoc vhost_attach_cgroups_#t~ret265#1.base, vhost_attach_cgroups_#t~ret265#1.offset, vhost_attach_cgroups_#t~mem266#1, vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset;vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset := vhost_attach_cgroups_#in~dev#1.base, vhost_attach_cgroups_#in~dev#1.offset;call vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset := #Ultimate.allocOnStack(132); [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6798: assume -2147483648 <= vhost_log_access_ok_#t~ret367#1 && vhost_log_access_ok_#t~ret367#1 <= 2147483647;vhost_log_access_ok_~tmp___1~12#1 := vhost_log_access_ok_#t~ret367#1;havoc vhost_log_access_ok_#t~ret367#1;vhost_log_access_ok_#res#1 := vhost_log_access_ok_~tmp___1~12#1; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10960: SUMMARY for call mutex_unlock(ldv_mutex_unlock_71_~ldv_func_arg1#1.base, ldv_mutex_unlock_71_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6798-1: SUMMARY for call vhost_log_access_ok_#t~ret367#1 := memory_access_ok(vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset, 1); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7327-1: SUMMARY for call vhost_dev_ioctl_#t~ret494#1 := PTR_ERR(vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset); srcloc: null [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7327: assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret494#1 && vhost_dev_ioctl_#t~ret494#1 <= 9223372036854775807;vhost_dev_ioctl_~r~1#1 := vhost_dev_ioctl_#t~ret494#1;havoc vhost_dev_ioctl_#t~ret494#1; [2025-02-08 02:31:18,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10432: havoc ldv_mutex_unlock_63_~ldv_func_arg1#1.base, ldv_mutex_unlock_63_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_63_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_63_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_63 } true;vhost_net_set_backend_#res#1 := 0; [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10432-1: assume { :begin_inline_ldv_mutex_unlock_63 } true;ldv_mutex_unlock_63_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_63_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~n#1.base, 16 + vhost_net_set_backend_~n#1.offset;havoc ldv_mutex_unlock_63_~ldv_func_arg1#1.base, ldv_mutex_unlock_63_~ldv_func_arg1#1.offset;ldv_mutex_unlock_63_~ldv_func_arg1#1.base, ldv_mutex_unlock_63_~ldv_func_arg1#1.offset := ldv_mutex_unlock_63_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_63_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6865-1: vhost_vq_access_ok_#res#1 := vhost_vq_access_ok_~tmp___1~14#1; [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10895: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_63_~ldv_func_arg1#1.base, ldv_mutex_unlock_63_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10565: #t~ret1238#1 := vhost_net_set_features_#res#1;havoc vhost_net_set_features_#t~bitwise1223#1, vhost_net_set_features_#t~bitwise1224#1, vhost_net_set_features_#t~bitwise1225#1, vhost_net_set_features_#t~ret1226#1, vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset, vhost_net_set_features_~features#1, vhost_net_set_features_~vhost_hlen~1#1, vhost_net_set_features_~sock_hlen~1#1, vhost_net_set_features_~hdr_len~0#1, vhost_net_set_features_~i~12#1, vhost_net_set_features_~tmp~68#1;havoc vhost_net_set_features_#in~n#1.base, vhost_net_set_features_#in~n#1.offset, vhost_net_set_features_#in~features#1;assume { :end_inline_vhost_net_set_features } true;assume -2147483648 <= #t~ret1238#1 && #t~ret1238#1 <= 2147483647;~tmp___3~18#1 := #t~ret1238#1;#res#1 := ~tmp___3~18#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10499: call write~int#14(vhost_net_set_features_~features#1, vhost_net_set_features_~n#1.base, 172 + vhost_net_set_features_~n#1.offset, 4);vhost_net_set_features_~i~12#1 := 0; [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6469: assume 0 != vhost_dev_set_owner_~err~0#1; [2025-02-08 02:31:18,051 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6469: assume !(0 != vhost_dev_set_owner_~err~0#1);assume { :begin_inline_vhost_dev_alloc_iovecs } true;vhost_dev_alloc_iovecs_#in~dev#1.base, vhost_dev_alloc_iovecs_#in~dev#1.offset := vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset;havoc vhost_dev_alloc_iovecs_#res#1;havoc vhost_dev_alloc_iovecs_#t~ret219#1.base, vhost_dev_alloc_iovecs_#t~ret219#1.offset, vhost_dev_alloc_iovecs_#t~mem220#1.base, vhost_dev_alloc_iovecs_#t~mem220#1.offset, vhost_dev_alloc_iovecs_#t~ret221#1.base, vhost_dev_alloc_iovecs_#t~ret221#1.offset, vhost_dev_alloc_iovecs_#t~mem222#1.base, vhost_dev_alloc_iovecs_#t~mem222#1.offset, vhost_dev_alloc_iovecs_#t~ret223#1.base, vhost_dev_alloc_iovecs_#t~ret223#1.offset, vhost_dev_alloc_iovecs_#t~mem224#1.base, vhost_dev_alloc_iovecs_#t~mem224#1.offset, vhost_dev_alloc_iovecs_#t~bitwise225#1, vhost_dev_alloc_iovecs_#t~bitwise226#1, vhost_dev_alloc_iovecs_#t~ret227#1.base, vhost_dev_alloc_iovecs_#t~ret227#1.offset, vhost_dev_alloc_iovecs_#t~mem228#1.base, vhost_dev_alloc_iovecs_#t~mem228#1.offset, vhost_dev_alloc_iovecs_#t~mem229#1.base, vhost_dev_alloc_iovecs_#t~mem229#1.offset, vhost_dev_alloc_iovecs_#t~mem230#1.base, vhost_dev_alloc_iovecs_#t~mem230#1.offset, vhost_dev_alloc_iovecs_#t~mem231#1.base, vhost_dev_alloc_iovecs_#t~mem231#1.offset, vhost_dev_alloc_iovecs_#t~mem232#1.base, vhost_dev_alloc_iovecs_#t~mem232#1.offset, vhost_dev_alloc_iovecs_#t~short233#1, vhost_dev_alloc_iovecs_#t~mem234#1.base, vhost_dev_alloc_iovecs_#t~mem234#1.offset, vhost_dev_alloc_iovecs_#t~mem235#1.base, vhost_dev_alloc_iovecs_#t~mem235#1.offset, vhost_dev_alloc_iovecs_#t~short236#1, vhost_dev_alloc_iovecs_#t~mem237#1.base, vhost_dev_alloc_iovecs_#t~mem237#1.offset, vhost_dev_alloc_iovecs_#t~mem238#1.base, vhost_dev_alloc_iovecs_#t~mem238#1.offset, vhost_dev_alloc_iovecs_#t~short239#1, vhost_dev_alloc_iovecs_#t~short240#1, vhost_dev_alloc_iovecs_#t~mem241#1, vhost_dev_alloc_iovecs_#t~mem242#1.base, vhost_dev_alloc_iovecs_#t~mem242#1.offset, vhost_dev_alloc_iovecs_~dev#1.base, vhost_dev_alloc_iovecs_~dev#1.offset, vhost_dev_alloc_iovecs_~i~0#1, vhost_dev_alloc_iovecs_~zcopy~0#1, vhost_dev_alloc_iovecs_~tmp~21#1.base, vhost_dev_alloc_iovecs_~tmp~21#1.offset, vhost_dev_alloc_iovecs_~tmp___0~11#1.base, vhost_dev_alloc_iovecs_~tmp___0~11#1.offset, vhost_dev_alloc_iovecs_~tmp___1~7#1.base, vhost_dev_alloc_iovecs_~tmp___1~7#1.offset, vhost_dev_alloc_iovecs_~tmp___2~7#1.base, vhost_dev_alloc_iovecs_~tmp___2~7#1.offset;vhost_dev_alloc_iovecs_~dev#1.base, vhost_dev_alloc_iovecs_~dev#1.offset := vhost_dev_alloc_iovecs_#in~dev#1.base, vhost_dev_alloc_iovecs_#in~dev#1.offset;havoc vhost_dev_alloc_iovecs_~i~0#1;havoc vhost_dev_alloc_iovecs_~zcopy~0#1;havoc vhost_dev_alloc_iovecs_~tmp~21#1.base, vhost_dev_alloc_iovecs_~tmp~21#1.offset;havoc vhost_dev_alloc_iovecs_~tmp___0~11#1.base, vhost_dev_alloc_iovecs_~tmp___0~11#1.offset;havoc vhost_dev_alloc_iovecs_~tmp___1~7#1.base, vhost_dev_alloc_iovecs_~tmp___1~7#1.offset;havoc vhost_dev_alloc_iovecs_~tmp___2~7#1.base, vhost_dev_alloc_iovecs_~tmp___2~7#1.offset;vhost_dev_alloc_iovecs_~i~0#1 := 0; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262: assume vhost_dev_ioctl_#t~mem490#1 > vhost_dev_ioctl_~i~7#1;havoc vhost_dev_ioctl_#t~mem490#1; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262: assume !(vhost_dev_ioctl_#t~mem490#1 > vhost_dev_ioctl_~i~7#1);havoc vhost_dev_ioctl_#t~mem490#1; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-4: assume vhost_dev_ioctl_#t~switch483#1; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-4: assume !vhost_dev_ioctl_#t~switch483#1;vhost_dev_ioctl_#t~switch483#1 := vhost_dev_ioctl_#t~switch483#1 || 1074048775 == vhost_dev_ioctl_~ioctl#1; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-3: assume 0 != vhost_dev_ioctl_~tmp~35#1 % 18446744073709551616;vhost_dev_ioctl_~r~1#1 := -14; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-3: assume !(0 != vhost_dev_ioctl_~tmp~35#1 % 18446744073709551616);vhost_dev_ioctl_~i~7#1 := 0; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-2: assume 0 != (vhost_dev_ioctl_#t~mem488#1.base + vhost_dev_ioctl_#t~mem488#1.offset) % 18446744073709551616;havoc vhost_dev_ioctl_#t~mem488#1.base, vhost_dev_ioctl_#t~mem488#1.offset; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-2: assume !(0 != (vhost_dev_ioctl_#t~mem488#1.base + vhost_dev_ioctl_#t~mem488#1.offset) % 18446744073709551616);havoc vhost_dev_ioctl_#t~mem488#1.base, vhost_dev_ioctl_#t~mem488#1.offset;call write~$Pointer$#14(vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~vq~1#1.base, 17080 + vhost_dev_ioctl_~vq~1#1.offset, 8); [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10367: vhost_net_set_backend_#t~ret1200#1.base, vhost_net_set_backend_#t~ret1200#1.offset := get_socket_#res#1.base, get_socket_#res#1.offset;havoc get_socket_#t~ret1193#1.base, get_socket_#t~ret1193#1.offset, get_socket_#t~ret1194#1, get_socket_#t~ret1195#1.base, get_socket_#t~ret1195#1.offset, get_socket_#t~ret1196#1, get_socket_#t~ret1197#1.base, get_socket_#t~ret1197#1.offset, get_socket_~fd#1, get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset, get_socket_~tmp~66#1, get_socket_~tmp___0~46#1, get_socket_~tmp___1~32#1.base, get_socket_~tmp___1~32#1.offset;havoc get_socket_#in~fd#1;assume { :end_inline_get_socket } true;vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset := vhost_net_set_backend_#t~ret1200#1.base, vhost_net_set_backend_#t~ret1200#1.offset;havoc vhost_net_set_backend_#t~ret1200#1.base, vhost_net_set_backend_#t~ret1200#1.offset; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-1: assume 0 == vhost_dev_ioctl_~tmp___0~22#1;vhost_dev_ioctl_~r~1#1 := -14; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7262-1: assume !(0 == vhost_dev_ioctl_~tmp___0~22#1);call write~$Pointer$#14(vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~vq~1#1.base, 17080 + vhost_dev_ioctl_~vq~1#1.offset, 8); [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6932: call vhost_set_memory_#t~mem401#1.base, vhost_set_memory_#t~mem401#1.offset := read~$Pointer$#14(vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, 8);vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset := vhost_set_memory_#t~mem401#1.base, vhost_set_memory_#t~mem401#1.offset;havoc vhost_set_memory_#t~mem401#1.base, vhost_set_memory_#t~mem401#1.offset;havoc vhost_set_memory_#t~mem401#1.base, vhost_set_memory_#t~mem401#1.offset;call write~$Pointer$#14(vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, 8);assume { :begin_inline_synchronize_rcu } true;assume { :begin_inline_synchronize_sched } true; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10896: SUMMARY for call mutex_unlock(ldv_mutex_unlock_63_~ldv_func_arg1#1.base, ldv_mutex_unlock_63_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5611: havoc atomic_set_~v#1.base, atomic_set_~v#1.offset, atomic_set_~i#1;havoc atomic_set_#in~v#1.base, atomic_set_#in~v#1.offset, atomic_set_#in~i#1;assume { :end_inline_atomic_set } true; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6338: vhost_dev_alloc_iovecs_~i~0#1 := vhost_dev_alloc_iovecs_~i~0#1 - 1; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7263-1: SUMMARY for call vhost_dev_ioctl_#t~ret485#1 := copy_from_user(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset, 8); srcloc: null [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7263: vhost_dev_ioctl_~tmp~35#1 := vhost_dev_ioctl_#t~ret485#1; [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6338-2: call vhost_dev_alloc_iovecs_#t~mem242#1.base, vhost_dev_alloc_iovecs_#t~mem242#1.offset := read~$Pointer$#14(vhost_dev_alloc_iovecs_~dev#1.base, 176 + vhost_dev_alloc_iovecs_~dev#1.offset, 8); [2025-02-08 02:31:18,052 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6338-1: SUMMARY for call vhost_vq_free_iovecs(vhost_dev_alloc_iovecs_#t~mem242#1.base, vhost_dev_alloc_iovecs_#t~mem242#1.offset + 17120 * (if vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_alloc_iovecs_~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-1: assume (vhost_set_vring_#t~mem460#1.base + vhost_set_vring_#t~mem460#1.offset) % 18446744073709551616 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem460#1.base, vhost_set_vring_#t~mem460#1.offset;call vhost_set_vring_#t~mem461#1.base, vhost_set_vring_#t~mem461#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 200 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_#t~mem461#1.base, vhost_set_vring_#t~mem461#1.offset;havoc vhost_set_vring_#t~mem461#1.base, vhost_set_vring_#t~mem461#1.offset;call vhost_set_vring_#t~mem462#1.base, vhost_set_vring_#t~mem462#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 216 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset := vhost_set_vring_#t~mem462#1.base, vhost_set_vring_#t~mem462#1.offset;havoc vhost_set_vring_#t~mem462#1.base, vhost_set_vring_#t~mem462#1.offset;call write~$Pointer$#14(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~vq~0#1.base, 200 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-1: assume !((vhost_set_vring_#t~mem460#1.base + vhost_set_vring_#t~mem460#1.offset) % 18446744073709551616 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem460#1.base, vhost_set_vring_#t~mem460#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131: assume 0 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131: assume !(0 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616);call write~$Pointer$#14(0, 0, vhost_set_vring_~vq~0#1.base, 216 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10368: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret1201#1 && vhost_net_set_backend_#t~ret1201#1 <= 9223372036854775807;vhost_net_set_backend_~tmp___2~26#1 := vhost_net_set_backend_#t~ret1201#1;havoc vhost_net_set_backend_#t~ret1201#1; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10368-1: SUMMARY for call vhost_net_set_backend_#t~ret1201#1 := IS_ERR(vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset); srcloc: null [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7197: assume vhost_set_vring_#t~switch405#1;vhost_set_vring_~r~0#1 := -515; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7197: assume !vhost_set_vring_#t~switch405#1; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-5: assume vhost_set_vring_#t~switch405#1; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-5: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := vhost_set_vring_#t~switch405#1 || 1074310946 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-4: assume 0 != vhost_set_vring_~tmp___9~1#1 % 18446744073709551616;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-4: assume !(0 != vhost_set_vring_~tmp___9~1#1 % 18446744073709551616);call vhost_set_vring_#t~mem455#1 := read~int#14(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-3: assume -1 != vhost_set_vring_#t~mem455#1;havoc vhost_set_vring_#t~mem455#1;call vhost_set_vring_#t~mem456#1 := read~int#14(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-3: assume !(-1 != vhost_set_vring_#t~mem455#1);havoc vhost_set_vring_#t~mem455#1;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := 0, 0; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-2: assume 0 != vhost_set_vring_~tmp___11~0#1; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131-2: assume !(0 != vhost_set_vring_~tmp___11~0#1);call vhost_set_vring_#t~mem460#1.base, vhost_set_vring_#t~mem460#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 200 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10435: assume { :begin_inline_ldv_mutex_unlock_64 } true;ldv_mutex_unlock_64_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_64_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~vq~7#1.base, 8 + vhost_net_set_backend_~vq~7#1.offset;havoc ldv_mutex_unlock_64_~ldv_func_arg1#1.base, ldv_mutex_unlock_64_~ldv_func_arg1#1.offset;ldv_mutex_unlock_64_~ldv_func_arg1#1.base, ldv_mutex_unlock_64_~ldv_func_arg1#1.offset := ldv_mutex_unlock_64_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_64_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10435-1: SUMMARY for call fput(vhost_net_set_backend_#t~mem1214#1.base, vhost_net_set_backend_#t~mem1214#1.offset); srcloc: null [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10435-2: call vhost_net_set_backend_#t~mem1214#1.base, vhost_net_set_backend_#t~mem1214#1.offset := read~$Pointer$#14(vhost_net_set_backend_~sock~7#1.base, 22 + vhost_net_set_backend_~sock~7#1.offset, 8); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10369: assume 0 != vhost_net_set_backend_~tmp___2~26#1; [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10369: assume !(0 != vhost_net_set_backend_~tmp___2~26#1); [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7132-1: SUMMARY for call vhost_set_vring_#t~ret454#1 := copy_from_user(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:31:18,053 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7132: vhost_set_vring_~tmp___9~1#1 := vhost_set_vring_#t~ret454#1; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10370: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret1202#1 && vhost_net_set_backend_#t~ret1202#1 <= 9223372036854775807;vhost_net_set_backend_~tmp___1~33#1 := vhost_net_set_backend_#t~ret1202#1;havoc vhost_net_set_backend_#t~ret1202#1;vhost_net_set_backend_~r~12#1 := (if vhost_net_set_backend_~tmp___1~33#1 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp___1~33#1 % 4294967296 else vhost_net_set_backend_~tmp___1~33#1 % 4294967296 - 4294967296); [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10370-1: SUMMARY for call vhost_net_set_backend_#t~ret1202#1 := PTR_ERR(vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset); srcloc: null [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6935: assume { :end_inline_synchronize_rcu } true; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7001: assume vhost_set_vring_~r~0#1 < 0;vhost_set_vring_#res#1 := vhost_set_vring_~r~0#1;call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7001: assume !(vhost_set_vring_~r~0#1 < 0);call vhost_set_vring_#t~mem403#1 := read~int#14(vhost_set_vring_~d#1.base, 184 + vhost_set_vring_~d#1.offset, 4); [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10437: havoc ldv_mutex_unlock_64_~ldv_func_arg1#1.base, ldv_mutex_unlock_64_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_64_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_64_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_64 } true;assume { :begin_inline_ldv_mutex_unlock_65 } true;ldv_mutex_unlock_65_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_65_#in~ldv_func_arg1#1.offset := vhost_net_set_backend_~n#1.base, 16 + vhost_net_set_backend_~n#1.offset;havoc ldv_mutex_unlock_65_~ldv_func_arg1#1.base, ldv_mutex_unlock_65_~ldv_func_arg1#1.offset;ldv_mutex_unlock_65_~ldv_func_arg1#1.base, ldv_mutex_unlock_65_~ldv_func_arg1#1.offset := ldv_mutex_unlock_65_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_65_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6473: vhost_dev_set_owner_#t~ret277#1 := vhost_dev_alloc_iovecs_#res#1;havoc vhost_dev_alloc_iovecs_#t~ret219#1.base, vhost_dev_alloc_iovecs_#t~ret219#1.offset, vhost_dev_alloc_iovecs_#t~mem220#1.base, vhost_dev_alloc_iovecs_#t~mem220#1.offset, vhost_dev_alloc_iovecs_#t~ret221#1.base, vhost_dev_alloc_iovecs_#t~ret221#1.offset, vhost_dev_alloc_iovecs_#t~mem222#1.base, vhost_dev_alloc_iovecs_#t~mem222#1.offset, vhost_dev_alloc_iovecs_#t~ret223#1.base, vhost_dev_alloc_iovecs_#t~ret223#1.offset, vhost_dev_alloc_iovecs_#t~mem224#1.base, vhost_dev_alloc_iovecs_#t~mem224#1.offset, vhost_dev_alloc_iovecs_#t~bitwise225#1, vhost_dev_alloc_iovecs_#t~bitwise226#1, vhost_dev_alloc_iovecs_#t~ret227#1.base, vhost_dev_alloc_iovecs_#t~ret227#1.offset, vhost_dev_alloc_iovecs_#t~mem228#1.base, vhost_dev_alloc_iovecs_#t~mem228#1.offset, vhost_dev_alloc_iovecs_#t~mem229#1.base, vhost_dev_alloc_iovecs_#t~mem229#1.offset, vhost_dev_alloc_iovecs_#t~mem230#1.base, vhost_dev_alloc_iovecs_#t~mem230#1.offset, vhost_dev_alloc_iovecs_#t~mem231#1.base, vhost_dev_alloc_iovecs_#t~mem231#1.offset, vhost_dev_alloc_iovecs_#t~mem232#1.base, vhost_dev_alloc_iovecs_#t~mem232#1.offset, vhost_dev_alloc_iovecs_#t~short233#1, vhost_dev_alloc_iovecs_#t~mem234#1.base, vhost_dev_alloc_iovecs_#t~mem234#1.offset, vhost_dev_alloc_iovecs_#t~mem235#1.base, vhost_dev_alloc_iovecs_#t~mem235#1.offset, vhost_dev_alloc_iovecs_#t~short236#1, vhost_dev_alloc_iovecs_#t~mem237#1.base, vhost_dev_alloc_iovecs_#t~mem237#1.offset, vhost_dev_alloc_iovecs_#t~mem238#1.base, vhost_dev_alloc_iovecs_#t~mem238#1.offset, vhost_dev_alloc_iovecs_#t~short239#1, vhost_dev_alloc_iovecs_#t~short240#1, vhost_dev_alloc_iovecs_#t~mem241#1, vhost_dev_alloc_iovecs_#t~mem242#1.base, vhost_dev_alloc_iovecs_#t~mem242#1.offset, vhost_dev_alloc_iovecs_~dev#1.base, vhost_dev_alloc_iovecs_~dev#1.offset, vhost_dev_alloc_iovecs_~i~0#1, vhost_dev_alloc_iovecs_~zcopy~0#1, vhost_dev_alloc_iovecs_~tmp~21#1.base, vhost_dev_alloc_iovecs_~tmp~21#1.offset, vhost_dev_alloc_iovecs_~tmp___0~11#1.base, vhost_dev_alloc_iovecs_~tmp___0~11#1.offset, vhost_dev_alloc_iovecs_~tmp___1~7#1.base, vhost_dev_alloc_iovecs_~tmp___1~7#1.offset, vhost_dev_alloc_iovecs_~tmp___2~7#1.base, vhost_dev_alloc_iovecs_~tmp___2~7#1.offset;havoc vhost_dev_alloc_iovecs_#in~dev#1.base, vhost_dev_alloc_iovecs_#in~dev#1.offset;assume { :end_inline_vhost_dev_alloc_iovecs } true;assume -9223372036854775808 <= vhost_dev_set_owner_#t~ret277#1 && vhost_dev_set_owner_#t~ret277#1 <= 9223372036854775807;vhost_dev_set_owner_~tmp___3~2#1 := vhost_dev_set_owner_#t~ret277#1;havoc vhost_dev_set_owner_#t~ret277#1;vhost_dev_set_owner_~err~0#1 := (if vhost_dev_set_owner_~tmp___3~2#1 % 4294967296 <= 2147483647 then vhost_dev_set_owner_~tmp___3~2#1 % 4294967296 else vhost_dev_set_owner_~tmp___3~2#1 % 4294967296 - 4294967296); [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6341: assume vhost_dev_alloc_iovecs_~i~0#1 >= 0; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6341: assume !(vhost_dev_alloc_iovecs_~i~0#1 >= 0);vhost_dev_alloc_iovecs_#res#1 := -12; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: assume #Ultimate.C_memcpy_#t~loopctr1322#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616;call #Ultimate.C_memcpy_#t~mem1323#1.base, #Ultimate.C_memcpy_#t~mem1323#1.offset := read~unchecked~$Pointer$#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1322#1, 8);call write~unchecked~$Pointer$#14(#Ultimate.C_memcpy_#t~mem1323#1.base, #Ultimate.C_memcpy_#t~mem1323#1.offset, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1322#1, 8);#Ultimate.C_memcpy_#t~loopctr1322#1 := 8 + #Ultimate.C_memcpy_#t~loopctr1322#1; [2025-02-08 02:31:18,054 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: assume !(#Ultimate.C_memcpy_#t~loopctr1322#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616);assume #Ultimate.C_memcpy_#res#1.base == #Ultimate.C_memcpy_dest#1.base && #Ultimate.C_memcpy_#res#1.offset == #Ultimate.C_memcpy_dest#1.offset;vhost_set_memory_#t~memcpy~res394#1.base, vhost_set_memory_#t~memcpy~res394#1.offset := #Ultimate.C_memcpy_#res#1.base, #Ultimate.C_memcpy_#res#1.offset;havoc #Ultimate.C_memcpy_#t~loopctr1311#1, #Ultimate.C_memcpy_#t~mem1312#1, #Ultimate.C_memcpy_#t~mem1313#1, #Ultimate.C_memcpy_#t~mem1314#1, #Ultimate.C_memcpy_#t~mem1315#1, #Ultimate.C_memcpy_#t~mem1316#1, #Ultimate.C_memcpy_#t~mem1317#1, #Ultimate.C_memcpy_#t~mem1318#1, #Ultimate.C_memcpy_#t~mem1319#1, #Ultimate.C_memcpy_#t~mem1320#1, #Ultimate.C_memcpy_#t~mem1321#1, #Ultimate.C_memcpy_#t~loopctr1322#1, #Ultimate.C_memcpy_#t~mem1323#1.base, #Ultimate.C_memcpy_#t~mem1323#1.offset;havoc #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset, #Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset, #Ultimate.C_memcpy_size#1;assume { :end_inline_#Ultimate.C_memcpy } true;vhost_set_memory_~__ret~1#1.base, vhost_set_memory_~__ret~1#1.offset := vhost_set_memory_#t~memcpy~res394#1.base, vhost_set_memory_#t~memcpy~res394#1.offset;havoc vhost_set_memory_#t~memcpy~res394#1.base, vhost_set_memory_#t~memcpy~res394#1.offset;call vhost_set_memory_#t~mem395#1 := read~int#14(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: assume #Ultimate.C_memcpy_#t~loopctr1311#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616;call #Ultimate.C_memcpy_#t~mem1312#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 8);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1312#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 8);call #Ultimate.C_memcpy_#t~mem1313#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 8);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1313#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 8);call #Ultimate.C_memcpy_#t~mem1314#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 1);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1314#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 1);call #Ultimate.C_memcpy_#t~mem1315#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 8);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1315#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 8);call #Ultimate.C_memcpy_#t~mem1316#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 4);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1316#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 4);call #Ultimate.C_memcpy_#t~mem1317#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 1);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1317#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 1);call #Ultimate.C_memcpy_#t~mem1318#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 1);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1318#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 1);call #Ultimate.C_memcpy_#t~mem1319#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 2);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1319#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 2);call #Ultimate.C_memcpy_#t~mem1320#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 2);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1320#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 2);call #Ultimate.C_memcpy_#t~mem1321#1 := read~unchecked~int#14(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 4);call write~unchecked~int#14(#Ultimate.C_memcpy_#t~mem1321#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1311#1, 4);#Ultimate.C_memcpy_#t~loopctr1311#1 := 1 + #Ultimate.C_memcpy_#t~loopctr1311#1; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: assume !(#Ultimate.C_memcpy_#t~loopctr1311#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616);#Ultimate.C_memcpy_#t~loopctr1322#1 := 0; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6870: call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset;vhost_dev_ioctl_#t~ret484#1 := vhost_set_memory_#res#1;havoc vhost_set_memory_#t~ret389#1, vhost_set_memory_#t~mem390#1, vhost_set_memory_#t~mem391#1, vhost_set_memory_#t~mem392#1, vhost_set_memory_#t~ret393#1.base, vhost_set_memory_#t~ret393#1.offset, vhost_set_memory_#t~memcpy~res394#1.base, vhost_set_memory_#t~memcpy~res394#1.offset, vhost_set_memory_#t~mem395#1, vhost_set_memory_#t~ret396#1, vhost_set_memory_#t~ret397#1, vhost_set_memory_#t~ret398#1, vhost_set_memory_#t~ret399#1, vhost_set_memory_#t~ret400#1, vhost_set_memory_#t~mem401#1.base, vhost_set_memory_#t~mem401#1.offset, vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset, vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset, vhost_set_memory_~size~0#1, vhost_set_memory_~tmp~33#1, vhost_set_memory_~tmp___0~20#1.base, vhost_set_memory_~tmp___0~20#1.offset, vhost_set_memory_~__len~0#1, vhost_set_memory_~__ret~1#1.base, vhost_set_memory_~__ret~1#1.offset, vhost_set_memory_~tmp___1~15#1, vhost_set_memory_~tmp___2~12#1, vhost_set_memory_~tmp___3~5#1, vhost_set_memory_~__warned~5#1, vhost_set_memory_~tmp___4~3#1, vhost_set_memory_~tmp___5~3#1;havoc vhost_set_memory_#in~d#1.base, vhost_set_memory_#in~d#1.offset, vhost_set_memory_#in~m#1.base, vhost_set_memory_#in~m#1.offset;assume { :end_inline_vhost_set_memory } true;assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret484#1 && vhost_dev_ioctl_#t~ret484#1 <= 9223372036854775807;vhost_dev_ioctl_~r~1#1 := vhost_dev_ioctl_#t~ret484#1; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6936-1: SUMMARY for call kfree(vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset); srcloc: null [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6936: vhost_set_memory_#res#1 := 0;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10306: assume -1 == get_socket_~fd#1;get_socket_#res#1.base, get_socket_#res#1.offset := 0, 0; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10306: assume !(-1 == get_socket_~fd#1);assume { :begin_inline_get_raw_socket } true;get_raw_socket_#in~fd#1 := get_socket_~fd#1;havoc get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset;havoc get_raw_socket_#t~ret1169#1.base, get_raw_socket_#t~ret1169#1.offset, get_raw_socket_#t~ret1170#1.base, get_raw_socket_#t~ret1170#1.offset, get_raw_socket_#t~mem1171#1.base, get_raw_socket_#t~mem1171#1.offset, get_raw_socket_#t~mem1172#1, get_raw_socket_#t~mem1179#1.base, get_raw_socket_#t~mem1179#1.offset, get_raw_socket_#t~mem1180#1.base, get_raw_socket_#t~mem1180#1.offset, get_raw_socket_#t~ret1181#1, get_raw_socket_#t~mem1182#1, get_raw_socket_#t~mem1183#1, get_raw_socket_#t~mem1184#1.base, get_raw_socket_#t~mem1184#1.offset, get_raw_socket_#t~mem1185#1, get_raw_socket_#t~ret1186#1.base, get_raw_socket_#t~ret1186#1.offset, get_raw_socket_~fd#1, get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset, get_raw_socket_~tmp~64#1.base, get_raw_socket_~tmp~64#1.offset, get_raw_socket_~tmp___0~44#1.base, get_raw_socket_~tmp___0~44#1.offset, get_raw_socket_~tmp___1~30#1.base, get_raw_socket_~tmp___1~30#1.offset;get_raw_socket_~fd#1 := get_raw_socket_#in~fd#1;call get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset := #Ultimate.allocOnStack(52);call get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset := #Ultimate.allocOnStack(4);call get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset := #Ultimate.allocOnStack(4);havoc get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset;havoc get_raw_socket_~tmp~64#1.base, get_raw_socket_~tmp~64#1.offset;havoc get_raw_socket_~tmp___0~44#1.base, get_raw_socket_~tmp___0~44#1.offset;havoc get_raw_socket_~tmp___1~30#1.base, get_raw_socket_~tmp___1~30#1.offset;call write~int#6(52, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, 4);assume { :begin_inline_sockfd_lookup } true;sockfd_lookup_#in~arg0#1, sockfd_lookup_#in~arg1#1.base, sockfd_lookup_#in~arg1#1.offset := get_raw_socket_~fd#1, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset;havoc sockfd_lookup_#res#1.base, sockfd_lookup_#res#1.offset;havoc sockfd_lookup_#t~ret1301#1.base, sockfd_lookup_#t~ret1301#1.offset, sockfd_lookup_~arg0#1, sockfd_lookup_~arg1#1.base, sockfd_lookup_~arg1#1.offset;sockfd_lookup_~arg0#1 := sockfd_lookup_#in~arg0#1;sockfd_lookup_~arg1#1.base, sockfd_lookup_~arg1#1.offset := sockfd_lookup_#in~arg1#1.base, sockfd_lookup_#in~arg1#1.offset; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10504: havoc ldv_mutex_lock_70_~ldv_func_arg1#1.base, ldv_mutex_lock_70_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_70_#in~ldv_func_arg1#1.base, ldv_mutex_lock_70_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_70 } true;call write~int#14(vhost_net_set_features_~vhost_hlen~1#1, vhost_net_set_features_~n#1.base, 17048 + (296 + vhost_net_set_features_~n#1.offset + 17120 * vhost_net_set_features_~i~12#1), 8);call write~int#14(vhost_net_set_features_~sock_hlen~1#1, vhost_net_set_features_~n#1.base, 17056 + (296 + vhost_net_set_features_~n#1.offset + 17120 * vhost_net_set_features_~i~12#1), 8);assume { :begin_inline_ldv_mutex_unlock_71 } true;ldv_mutex_unlock_71_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_71_#in~ldv_func_arg1#1.offset := vhost_net_set_features_~n#1.base, 8 + (296 + vhost_net_set_features_~n#1.offset + 17120 * vhost_net_set_features_~i~12#1);havoc ldv_mutex_unlock_71_~ldv_func_arg1#1.base, ldv_mutex_unlock_71_~ldv_func_arg1#1.offset;ldv_mutex_unlock_71_~ldv_func_arg1#1.base, ldv_mutex_unlock_71_~ldv_func_arg1#1.offset := ldv_mutex_unlock_71_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_71_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10504-1: assume { :begin_inline_ldv_mutex_lock_70 } true;ldv_mutex_lock_70_#in~ldv_func_arg1#1.base, ldv_mutex_lock_70_#in~ldv_func_arg1#1.offset := vhost_net_set_features_~n#1.base, 8 + (296 + vhost_net_set_features_~n#1.offset + 17120 * vhost_net_set_features_~i~12#1);havoc ldv_mutex_lock_70_~ldv_func_arg1#1.base, ldv_mutex_lock_70_~ldv_func_arg1#1.offset;ldv_mutex_lock_70_~ldv_func_arg1#1.base, ldv_mutex_lock_70_~ldv_func_arg1#1.offset := ldv_mutex_lock_70_#in~ldv_func_arg1#1.base, ldv_mutex_lock_70_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7201-1: assume vhost_set_vring_#t~short475#1;call vhost_set_vring_#t~mem474#1.base, vhost_set_vring_#t~mem474#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 436 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_#t~short475#1 := 0 != (vhost_set_vring_#t~mem474#1.base + vhost_set_vring_#t~mem474#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,055 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7201-1: assume !vhost_set_vring_#t~short475#1; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7201: assume vhost_set_vring_#t~short475#1;havoc vhost_set_vring_#t~mem474#1.base, vhost_set_vring_#t~mem474#1.offset;havoc vhost_set_vring_#t~short475#1; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7201: assume !vhost_set_vring_#t~short475#1;havoc vhost_set_vring_#t~mem474#1.base, vhost_set_vring_#t~mem474#1.offset;havoc vhost_set_vring_#t~short475#1; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10240: assume 0 == (get_raw_socket_~sock~4#1.base + get_raw_socket_~sock~4#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10240: assume !(0 == (get_raw_socket_~sock~4#1.base + get_raw_socket_~sock~4#1.offset) % 18446744073709551616);call get_raw_socket_#t~mem1171#1.base, get_raw_socket_#t~mem1171#1.offset := read~$Pointer$#14(get_raw_socket_~sock~4#1.base, 30 + get_raw_socket_~sock~4#1.offset, 8);call get_raw_socket_#t~mem1172#1 := read~int#14(get_raw_socket_#t~mem1171#1.base, 720 + get_raw_socket_#t~mem1171#1.offset, 2); [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10967: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_72_~ldv_func_arg1#1.base, ldv_mutex_unlock_72_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10571: havoc ldv_mutex_lock_73_~ldv_func_arg1#1.base, ldv_mutex_lock_73_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_73_#in~ldv_func_arg1#1.base, ldv_mutex_lock_73_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_73 } true;assume { :begin_inline_vhost_dev_ioctl } true;vhost_dev_ioctl_#in~d#1.base, vhost_dev_ioctl_#in~d#1.offset, vhost_dev_ioctl_#in~ioctl#1, vhost_dev_ioctl_#in~arg#1 := ~n~3#1.base, ~n~3#1.offset, ~ioctl#1, ~arg#1;havoc vhost_dev_ioctl_#res#1;havoc vhost_dev_ioctl_#t~ret481#1, vhost_dev_ioctl_#t~ret482#1, vhost_dev_ioctl_#t~switch483#1, vhost_dev_ioctl_#t~ret484#1, vhost_dev_ioctl_#t~ret485#1, vhost_dev_ioctl_#t~mem486#1, vhost_dev_ioctl_#t~mem487#1.base, vhost_dev_ioctl_#t~mem487#1.offset, vhost_dev_ioctl_#t~mem488#1.base, vhost_dev_ioctl_#t~mem488#1.offset, vhost_dev_ioctl_#t~ret489#1, vhost_dev_ioctl_#t~mem490#1, vhost_dev_ioctl_#t~switch491#1, vhost_dev_ioctl_#t~ret492#1.base, vhost_dev_ioctl_#t~ret492#1.offset, vhost_dev_ioctl_#t~ret493#1, vhost_dev_ioctl_#t~ret494#1, vhost_dev_ioctl_#t~mem495#1.base, vhost_dev_ioctl_#t~mem495#1.offset, vhost_dev_ioctl_#t~mem496#1.base, vhost_dev_ioctl_#t~mem496#1.offset, vhost_dev_ioctl_#t~mem497#1.base, vhost_dev_ioctl_#t~mem497#1.offset, vhost_dev_ioctl_#t~ret498#1.base, vhost_dev_ioctl_#t~ret498#1.offset, vhost_dev_ioctl_#t~mem499#1.base, vhost_dev_ioctl_#t~mem499#1.offset, vhost_dev_ioctl_#t~mem500#1.base, vhost_dev_ioctl_#t~mem500#1.offset, vhost_dev_ioctl_#t~mem501#1.base, vhost_dev_ioctl_#t~mem501#1.offset, vhost_dev_ioctl_#t~mem502#1.base, vhost_dev_ioctl_#t~mem502#1.offset, vhost_dev_ioctl_#t~mem503#1, vhost_dev_ioctl_#t~ret504#1, vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~ioctl#1, vhost_dev_ioctl_~arg#1, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset, vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset, vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset, vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset, vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, vhost_dev_ioctl_~r~1#1, vhost_dev_ioctl_~i~7#1, vhost_dev_ioctl_~fd~0#1, vhost_dev_ioctl_~tmp~35#1, vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset, vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~tmp___0~22#1, vhost_dev_ioctl_~__ret_gu~1#1, vhost_dev_ioctl_~__val_gu~1#1, vhost_dev_ioctl_~tmp___1~17#1.base, vhost_dev_ioctl_~tmp___1~17#1.offset, vhost_dev_ioctl_~tmp___2~14#1, vhost_dev_ioctl_~tmp___3~7#1.base, vhost_dev_ioctl_~tmp___3~7#1.offset;vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset := vhost_dev_ioctl_#in~d#1.base, vhost_dev_ioctl_#in~d#1.offset;vhost_dev_ioctl_~ioctl#1 := vhost_dev_ioctl_#in~ioctl#1;vhost_dev_ioctl_~arg#1 := vhost_dev_ioctl_#in~arg#1;havoc vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset;havoc vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset;havoc vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset;havoc vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset;call vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset := #Ultimate.allocOnStack(8);havoc vhost_dev_ioctl_~r~1#1;havoc vhost_dev_ioctl_~i~7#1;havoc vhost_dev_ioctl_~fd~0#1;havoc vhost_dev_ioctl_~tmp~35#1;havoc vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset;havoc vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset;havoc vhost_dev_ioctl_~tmp___0~22#1;havoc vhost_dev_ioctl_~__ret_gu~1#1;havoc vhost_dev_ioctl_~__val_gu~1#1;havoc vhost_dev_ioctl_~tmp___1~17#1.base, vhost_dev_ioctl_~tmp___1~17#1.offset;havoc vhost_dev_ioctl_~tmp___2~14#1;havoc vhost_dev_ioctl_~tmp___3~7#1.base, vhost_dev_ioctl_~tmp___3~7#1.offset;vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset := 0, (if vhost_dev_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset := 0, 0;vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset := 0, 0; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6475: assume 0 != vhost_dev_set_owner_~err~0#1; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6475: assume !(0 != vhost_dev_set_owner_~err~0#1);vhost_dev_set_owner_#res#1 := 0; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7202: SUMMARY for call vhost_poll_stop(vhost_set_vring_~vq~0#1.base, 240 + vhost_set_vring_~vq~0#1.offset); srcloc: null [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10439: havoc ldv_mutex_unlock_65_~ldv_func_arg1#1.base, ldv_mutex_unlock_65_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_65_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_65_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_65 } true;vhost_net_set_backend_#res#1 := vhost_net_set_backend_~r~12#1; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10241: get_raw_socket_~tmp___0~44#1.base, get_raw_socket_~tmp___0~44#1.offset := get_raw_socket_#t~ret1170#1.base, get_raw_socket_#t~ret1170#1.offset;havoc get_raw_socket_#t~ret1170#1.base, get_raw_socket_#t~ret1170#1.offset;get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset := get_raw_socket_~tmp___0~44#1.base, get_raw_socket_~tmp___0~44#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset; [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10241-1: SUMMARY for call get_raw_socket_#t~ret1170#1.base, get_raw_socket_#t~ret1170#1.offset := ERR_PTR(-88); srcloc: null [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10968: SUMMARY for call mutex_unlock(ldv_mutex_unlock_72_~ldv_func_arg1#1.base, ldv_mutex_unlock_72_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7335-1: SUMMARY for call vhost_dev_ioctl_#t~ret498#1.base, vhost_dev_ioctl_#t~ret498#1.offset := eventfd_ctx_fileget(vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset); srcloc: null [2025-02-08 02:31:18,056 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7335: vhost_dev_ioctl_~tmp___3~7#1.base, vhost_dev_ioctl_~tmp___3~7#1.offset := vhost_dev_ioctl_#t~ret498#1.base, vhost_dev_ioctl_#t~ret498#1.offset;havoc vhost_dev_ioctl_#t~ret498#1.base, vhost_dev_ioctl_#t~ret498#1.offset;call write~$Pointer$#14(vhost_dev_ioctl_~tmp___3~7#1.base, vhost_dev_ioctl_~tmp___3~7#1.offset, vhost_dev_ioctl_~d#1.base, 196 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7005: assume vhost_set_vring_#t~mem403#1 % 4294967296 <= vhost_set_vring_~idx~0#1 % 4294967296;havoc vhost_set_vring_#t~mem403#1;vhost_set_vring_#res#1 := -105;call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset; [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7005: assume !(vhost_set_vring_#t~mem403#1 % 4294967296 <= vhost_set_vring_~idx~0#1 % 4294967296);havoc vhost_set_vring_#t~mem403#1;call vhost_set_vring_#t~mem404#1.base, vhost_set_vring_#t~mem404#1.offset := read~$Pointer$#14(vhost_set_vring_~d#1.base, 176 + vhost_set_vring_~d#1.offset, 8);vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset := vhost_set_vring_#t~mem404#1.base, vhost_set_vring_#t~mem404#1.offset + 17120 * (if vhost_set_vring_~idx~0#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_~idx~0#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_~idx~0#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);havoc vhost_set_vring_#t~mem404#1.base, vhost_set_vring_#t~mem404#1.offset;assume { :begin_inline_ldv_mutex_lock_14 } true;ldv_mutex_lock_14_#in~ldv_func_arg1#1.base, ldv_mutex_lock_14_#in~ldv_func_arg1#1.offset := vhost_set_vring_~vq~0#1.base, 8 + vhost_set_vring_~vq~0#1.offset;havoc ldv_mutex_lock_14_~ldv_func_arg1#1.base, ldv_mutex_lock_14_~ldv_func_arg1#1.offset;ldv_mutex_lock_14_~ldv_func_arg1#1.base, ldv_mutex_lock_14_~ldv_func_arg1#1.offset := ldv_mutex_lock_14_#in~ldv_func_arg1#1.base, ldv_mutex_lock_14_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10903: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_64_~ldv_func_arg1#1.base, ldv_mutex_unlock_64_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10507: havoc ldv_mutex_unlock_71_~ldv_func_arg1#1.base, ldv_mutex_unlock_71_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_71_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_71_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_71 } true;vhost_net_set_features_~i~12#1 := 1 + vhost_net_set_features_~i~12#1; [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10375: assume -2147483648 <= vhost_net_set_backend_#t~ret1203#1 && vhost_net_set_backend_#t~ret1203#1 <= 2147483647;vhost_net_set_backend_~tmp___3~17#1 := vhost_net_set_backend_#t~ret1203#1;havoc vhost_net_set_backend_#t~ret1203#1; [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10375-1: SUMMARY for call vhost_net_set_backend_#t~ret1203#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7072: vhost_set_vring_#t~short429#1 := vhost_set_vring_#t~short427#1; [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10904: SUMMARY for call mutex_unlock(ldv_mutex_unlock_64_~ldv_func_arg1#1.base, ldv_mutex_unlock_64_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10574-1: SUMMARY for call vhost_net_flush(~n~3#1.base, ~n~3#1.offset); srcloc: null [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10574: assume { :begin_inline_ldv_mutex_unlock_74 } true;ldv_mutex_unlock_74_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_74_#in~ldv_func_arg1#1.offset := ~n~3#1.base, 16 + ~n~3#1.offset;havoc ldv_mutex_unlock_74_~ldv_func_arg1#1.base, ldv_mutex_unlock_74_~ldv_func_arg1#1.offset;ldv_mutex_unlock_74_~ldv_func_arg1#1.base, ldv_mutex_unlock_74_~ldv_func_arg1#1.offset := ldv_mutex_unlock_74_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_74_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7139-1: SUMMARY for call vhost_set_vring_#t~ret457#1.base, vhost_set_vring_#t~ret457#1.offset := eventfd_fget(vhost_set_vring_#t~mem456#1); srcloc: null [2025-02-08 02:31:18,057 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7139: vhost_set_vring_~tmp___10~1#1.base, vhost_set_vring_~tmp___10~1#1.offset := vhost_set_vring_#t~ret457#1.base, vhost_set_vring_#t~ret457#1.offset;havoc vhost_set_vring_#t~mem456#1;havoc vhost_set_vring_#t~ret457#1.base, vhost_set_vring_#t~ret457#1.offset;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := vhost_set_vring_~tmp___10~1#1.base, vhost_set_vring_~tmp___10~1#1.offset; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10376: assume 0 != vhost_net_set_backend_~tmp___3~17#1 && 0 == vhost_net_set_backend_~__warned~11#1 % 256; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10376: assume !(0 != vhost_net_set_backend_~tmp___3~17#1 && 0 == vhost_net_set_backend_~__warned~11#1 % 256); [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7205: assume 0 != (vhost_set_vring_~ctx~0#1.base + vhost_set_vring_~ctx~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7205: assume !(0 != (vhost_set_vring_~ctx~0#1.base + vhost_set_vring_~ctx~0#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10575: havoc ldv_mutex_unlock_74_~ldv_func_arg1#1.base, ldv_mutex_unlock_74_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_74_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_74_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_74 } true;#res#1 := ~r~13#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7206: SUMMARY for call eventfd_ctx_put(vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset); srcloc: null [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10245: assume 3 != get_raw_socket_#t~mem1172#1 % 65536 % 4294967296;havoc get_raw_socket_#t~mem1171#1.base, get_raw_socket_#t~mem1171#1.offset;havoc get_raw_socket_#t~mem1172#1;call write~int#7(-94, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10245: assume !(3 != get_raw_socket_#t~mem1172#1 % 65536 % 4294967296);havoc get_raw_socket_#t~mem1171#1.base, get_raw_socket_#t~mem1171#1.offset;havoc get_raw_socket_#t~mem1172#1;call get_raw_socket_#t~mem1179#1.base, get_raw_socket_#t~mem1179#1.offset := read~$Pointer$#14(get_raw_socket_~sock~4#1.base, 38 + get_raw_socket_~sock~4#1.offset, 8);call get_raw_socket_#t~mem1180#1.base, get_raw_socket_#t~mem1180#1.offset := read~$Pointer$#14(get_raw_socket_#t~mem1179#1.base, 52 + get_raw_socket_#t~mem1179#1.offset, 8); [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9188: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_14_~ldv_func_arg1#1.base, ldv_mutex_lock_14_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7272: call vhost_dev_ioctl_#t~mem486#1 := read~int#14(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, 8);vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset := 0, (if vhost_dev_ioctl_#t~mem486#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_#t~mem486#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_#t~mem486#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call vhost_dev_ioctl_#t~mem487#1.base, vhost_dev_ioctl_#t~mem487#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 176 + vhost_dev_ioctl_~d#1.offset, 8);vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset := vhost_dev_ioctl_#t~mem487#1.base, vhost_dev_ioctl_#t~mem487#1.offset + 17120 * (if vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);assume { :begin_inline_ldv_mutex_lock_16 } true;ldv_mutex_lock_16_#in~ldv_func_arg1#1.base, ldv_mutex_lock_16_#in~ldv_func_arg1#1.offset := vhost_dev_ioctl_~vq~1#1.base, 8 + vhost_dev_ioctl_~vq~1#1.offset;havoc ldv_mutex_lock_16_~ldv_func_arg1#1.base, ldv_mutex_lock_16_~ldv_func_arg1#1.offset;ldv_mutex_lock_16_~ldv_func_arg1#1.base, ldv_mutex_lock_16_~ldv_func_arg1#1.offset := ldv_mutex_lock_16_#in~ldv_func_arg1#1.base, ldv_mutex_lock_16_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10377: assume -2147483648 <= vhost_net_set_backend_#t~ret1204#1 && vhost_net_set_backend_#t~ret1204#1 <= 2147483647;vhost_net_set_backend_~tmp___4~11#1 := vhost_net_set_backend_#t~ret1204#1;havoc vhost_net_set_backend_#t~ret1204#1; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10377-1: SUMMARY for call vhost_net_set_backend_#t~ret1204#1 := lock_is_held(vhost_net_set_backend_~vq~7#1.base, 120 + vhost_net_set_backend_~vq~7#1.offset); srcloc: null [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10311: assume -9223372036854775808 <= get_socket_#t~ret1194#1 && get_socket_#t~ret1194#1 <= 9223372036854775807;get_socket_~tmp~66#1 := get_socket_#t~ret1194#1;havoc get_socket_#t~ret1194#1; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10311-1: SUMMARY for call get_socket_#t~ret1194#1 := IS_ERR(get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset); srcloc: null [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10378: assume 0 == vhost_net_set_backend_~tmp___4~11#1;vhost_net_set_backend_~__warned~11#1 := 1; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10378: assume !(0 == vhost_net_set_backend_~tmp___4~11#1); [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10510: assume vhost_net_set_features_~i~12#1 <= 1; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10510: assume !(vhost_net_set_features_~i~12#1 <= 1); [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9189: SUMMARY for call mutex_lock(ldv_mutex_lock_14_~ldv_func_arg1#1.base, ldv_mutex_lock_14_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10312: assume 0 == get_socket_~tmp~66#1;get_socket_#res#1.base, get_socket_#res#1.offset := get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset; [2025-02-08 02:31:18,058 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10312: assume !(0 == get_socket_~tmp~66#1);assume { :begin_inline_get_tap_socket } true;get_tap_socket_#in~fd#1 := get_socket_~fd#1;havoc get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset;havoc get_tap_socket_#t~ret1187#1.base, get_tap_socket_#t~ret1187#1.offset, get_tap_socket_#t~ret1188#1.base, get_tap_socket_#t~ret1188#1.offset, get_tap_socket_#t~ret1189#1.base, get_tap_socket_#t~ret1189#1.offset, get_tap_socket_#t~ret1190#1, get_tap_socket_#t~ret1191#1.base, get_tap_socket_#t~ret1191#1.offset, get_tap_socket_#t~ret1192#1, get_tap_socket_~fd#1, get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset, get_tap_socket_~tmp~65#1.base, get_tap_socket_~tmp~65#1.offset, get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset, get_tap_socket_~tmp___0~45#1.base, get_tap_socket_~tmp___0~45#1.offset, get_tap_socket_~tmp___1~31#1, get_tap_socket_~tmp___2~25#1;get_tap_socket_~fd#1 := get_tap_socket_#in~fd#1;havoc get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset;havoc get_tap_socket_~tmp~65#1.base, get_tap_socket_~tmp~65#1.offset;havoc get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset;havoc get_tap_socket_~tmp___0~45#1.base, get_tap_socket_~tmp___0~45#1.offset;havoc get_tap_socket_~tmp___1~31#1;havoc get_tap_socket_~tmp___2~25#1;assume { :begin_inline_fget } true;fget_#in~arg0#1 := get_tap_socket_~fd#1;havoc fget_#res#1.base, fget_#res#1.offset;havoc fget_#t~ret1285#1.base, fget_#t~ret1285#1.offset, fget_~arg0#1;fget_~arg0#1 := fget_#in~arg0#1; [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10445: call ULTIMATE.dealloc(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset);havoc vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset;call ULTIMATE.dealloc(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset);havoc vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset;#t~ret1239#1 := vhost_net_reset_owner_#res#1;havoc vhost_net_reset_owner_#t~ret1215#1, vhost_net_reset_owner_#t~ret1216#1, vhost_net_reset_owner_#t~mem1217#1.base, vhost_net_reset_owner_#t~mem1217#1.offset, vhost_net_reset_owner_#t~mem1218#1.base, vhost_net_reset_owner_#t~mem1218#1.offset, vhost_net_reset_owner_#t~mem1219#1.base, vhost_net_reset_owner_#t~mem1219#1.offset, vhost_net_reset_owner_#t~mem1220#1.base, vhost_net_reset_owner_#t~mem1220#1.offset, vhost_net_reset_owner_#t~mem1221#1.base, vhost_net_reset_owner_#t~mem1221#1.offset, vhost_net_reset_owner_#t~mem1222#1.base, vhost_net_reset_owner_#t~mem1222#1.offset, vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset, vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, vhost_net_reset_owner_~err~3#1;havoc vhost_net_reset_owner_#in~n#1.base, vhost_net_reset_owner_#in~n#1.offset;assume { :end_inline_vhost_net_reset_owner } true;assume -9223372036854775808 <= #t~ret1239#1 && #t~ret1239#1 <= 9223372036854775807;~tmp___4~12#1 := #t~ret1239#1;#res#1 := ~tmp___4~12#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6481-1: SUMMARY for call vhost_dev_set_owner_#t~ret278#1 := kthread_stop(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6481: assume -2147483648 <= vhost_dev_set_owner_#t~ret278#1 && vhost_dev_set_owner_#t~ret278#1 <= 2147483647;call write~$Pointer$#14(0, 0, vhost_dev_set_owner_~dev#1.base, 288 + vhost_dev_set_owner_~dev#1.offset, 8);call vhost_dev_set_owner_#t~mem279#1.base, vhost_dev_set_owner_#t~mem279#1.offset := read~$Pointer$#14(vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7274: havoc ldv_mutex_lock_16_~ldv_func_arg1#1.base, ldv_mutex_lock_16_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_16_#in~ldv_func_arg1#1.base, ldv_mutex_lock_16_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_16 } true;call vhost_dev_ioctl_#t~mem488#1.base, vhost_dev_ioctl_#t~mem488#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~vq~1#1.base, 17072 + vhost_dev_ioctl_~vq~1#1.offset, 8); [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7010: havoc ldv_mutex_lock_14_~ldv_func_arg1#1.base, ldv_mutex_lock_14_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_14_#in~ldv_func_arg1#1.base, ldv_mutex_lock_14_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_14 } true;vhost_set_vring_#t~switch405#1 := 1074310928 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11635: havoc sockfd_lookup_#t~ret1301#1.base, sockfd_lookup_#t~ret1301#1.offset;get_raw_socket_#t~ret1169#1.base, get_raw_socket_#t~ret1169#1.offset := sockfd_lookup_#res#1.base, sockfd_lookup_#res#1.offset;havoc sockfd_lookup_#t~ret1301#1.base, sockfd_lookup_#t~ret1301#1.offset, sockfd_lookup_~arg0#1, sockfd_lookup_~arg1#1.base, sockfd_lookup_~arg1#1.offset;havoc sockfd_lookup_#in~arg0#1, sockfd_lookup_#in~arg1#1.base, sockfd_lookup_#in~arg1#1.offset;assume { :end_inline_sockfd_lookup } true;get_raw_socket_~tmp~64#1.base, get_raw_socket_~tmp~64#1.offset := get_raw_socket_#t~ret1169#1.base, get_raw_socket_#t~ret1169#1.offset;havoc get_raw_socket_#t~ret1169#1.base, get_raw_socket_#t~ret1169#1.offset;get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset := get_raw_socket_~tmp~64#1.base, get_raw_socket_~tmp~64#1.offset; [2025-02-08 02:31:18,059 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10380: SUMMARY for call lockdep_rcu_suspicious(212, 0, 749, 213, 0); srcloc: null [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11635-3: SUMMARY for call sockfd_lookup_#t~ret1301#1.base, sockfd_lookup_#t~ret1301#1.offset := ldv_malloc(46); srcloc: null [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11635-2: sockfd_lookup_#res#1.base, sockfd_lookup_#res#1.offset := sockfd_lookup_#t~ret1301#1.base, sockfd_lookup_#t~ret1301#1.offset;havoc sockfd_lookup_#t~ret1301#1.base, sockfd_lookup_#t~ret1301#1.offset; [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7209: assume 0 != (vhost_set_vring_~filep~0#1.base + vhost_set_vring_~filep~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7209: assume !(0 != (vhost_set_vring_~filep~0#1.base + vhost_set_vring_~filep~0#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7011: havoc vhost_set_vring_#t~switch405#1;havoc vhost_set_vring_#t~ret407#1;havoc vhost_set_vring_#t~mem415#1;havoc vhost_set_vring_#t~ret417#1;havoc vhost_set_vring_#t~mem419#1;havoc vhost_set_vring_#t~mem420#1;havoc vhost_set_vring_#t~mem421#1;havoc vhost_set_vring_#t~ret422#1;havoc vhost_set_vring_#t~ret423#1;havoc vhost_set_vring_#t~mem441#1;havoc vhost_set_vring_#t~mem442#1;havoc vhost_set_vring_#t~mem443#1;havoc vhost_set_vring_#t~mem444#1;havoc vhost_set_vring_#t~mem445#1;havoc vhost_set_vring_#t~ret446#1;havoc vhost_set_vring_#t~ret450#1;havoc vhost_set_vring_#t~ret454#1;havoc vhost_set_vring_#t~ret458#1;havoc vhost_set_vring_#t~ret464#1;havoc vhost_set_vring_#t~ret468#1;havoc vhost_set_vring_#t~switch405#1;havoc vhost_set_vring_#t~ret407#1;havoc vhost_set_vring_#t~mem415#1;havoc vhost_set_vring_#t~ret417#1;havoc vhost_set_vring_#t~mem419#1;havoc vhost_set_vring_#t~mem420#1;havoc vhost_set_vring_#t~mem421#1;havoc vhost_set_vring_#t~ret422#1;havoc vhost_set_vring_#t~ret423#1;havoc vhost_set_vring_#t~mem441#1;havoc vhost_set_vring_#t~mem442#1;havoc vhost_set_vring_#t~mem443#1;havoc vhost_set_vring_#t~mem444#1;havoc vhost_set_vring_#t~mem445#1;havoc vhost_set_vring_#t~ret446#1;havoc vhost_set_vring_#t~ret450#1;havoc vhost_set_vring_#t~ret454#1;havoc vhost_set_vring_#t~ret458#1;havoc vhost_set_vring_#t~ret464#1;havoc vhost_set_vring_#t~ret468#1;vhost_set_vring_#t~short475#1 := 0 != (if vhost_set_vring_~pollstop~0#1 % 256 % 4294967296 <= 2147483647 then vhost_set_vring_~pollstop~0#1 % 256 % 4294967296 else vhost_set_vring_~pollstop~0#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7210: SUMMARY for call fput(vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset); srcloc: null [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7276-1: SUMMARY for call vhost_dev_ioctl_#t~ret489#1 := vq_log_access_ok(vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset, vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset); srcloc: null [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7276: assume -2147483648 <= vhost_dev_ioctl_#t~ret489#1 && vhost_dev_ioctl_#t~ret489#1 <= 2147483647;vhost_dev_ioctl_~tmp___0~22#1 := vhost_dev_ioctl_#t~ret489#1;havoc vhost_dev_ioctl_#t~ret489#1; [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7078: assume -2147483648 <= vhost_set_vring_#t~ret435#1 && vhost_set_vring_#t~ret435#1 <= 2147483647;vhost_set_vring_~tmp___3~6#1 := vhost_set_vring_#t~ret435#1;havoc vhost_set_vring_#t~mem431#1;havoc vhost_set_vring_#t~mem432#1;havoc vhost_set_vring_#t~mem433#1;havoc vhost_set_vring_#t~mem434#1;havoc vhost_set_vring_#t~ret435#1; [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7144-1: SUMMARY for call vhost_set_vring_#t~ret458#1 := IS_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7144: assume -9223372036854775808 <= vhost_set_vring_#t~ret458#1 && vhost_set_vring_#t~ret458#1 <= 9223372036854775807;vhost_set_vring_~tmp___11~0#1 := vhost_set_vring_#t~ret458#1; [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-2: assume 0 == vhost_set_vring_#t~mem412#1 % 4294967296 || 0 == (vhost_set_vring_#t~mem411#1 - 1) % 4294967296;vhost_set_vring_#t~bitwise413#1 := 0; [2025-02-08 02:31:18,060 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-2: assume !(0 == vhost_set_vring_#t~mem412#1 % 4294967296 || 0 == (vhost_set_vring_#t~mem411#1 - 1) % 4294967296); [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-1: assume vhost_set_vring_#t~mem412#1 % 4294967296 == (vhost_set_vring_#t~mem411#1 - 1) % 4294967296;vhost_set_vring_#t~bitwise413#1 := vhost_set_vring_#t~mem412#1; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-1: assume !(vhost_set_vring_#t~mem412#1 % 4294967296 == (vhost_set_vring_#t~mem411#1 - 1) % 4294967296); [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012: assume vhost_set_vring_#t~short414#1;havoc vhost_set_vring_#t~mem408#1;havoc vhost_set_vring_#t~mem409#1;havoc vhost_set_vring_#t~short410#1;havoc vhost_set_vring_#t~mem412#1;havoc vhost_set_vring_#t~mem411#1;havoc vhost_set_vring_#t~bitwise413#1;havoc vhost_set_vring_#t~short414#1;vhost_set_vring_~r~0#1 := -22; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012: assume !vhost_set_vring_#t~short414#1;havoc vhost_set_vring_#t~mem408#1;havoc vhost_set_vring_#t~mem409#1;havoc vhost_set_vring_#t~short410#1;havoc vhost_set_vring_#t~mem412#1;havoc vhost_set_vring_#t~mem411#1;havoc vhost_set_vring_#t~bitwise413#1;havoc vhost_set_vring_#t~short414#1;call vhost_set_vring_#t~mem415#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);call write~int#14(vhost_set_vring_#t~mem415#1, vhost_set_vring_~vq~0#1.base, 164 + vhost_set_vring_~vq~0#1.offset, 4); [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7078-1: SUMMARY for call vhost_set_vring_#t~ret435#1 := vq_access_ok(vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset, vhost_set_vring_#t~mem431#1, 0, (if vhost_set_vring_#t~mem432#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem432#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem432#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 0, (if vhost_set_vring_#t~mem433#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem433#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem433#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 0, (if vhost_set_vring_#t~mem434#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem434#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem434#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-6: assume 0 != (vhost_set_vring_#t~mem406#1.base + vhost_set_vring_#t~mem406#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem406#1.base, vhost_set_vring_#t~mem406#1.offset;vhost_set_vring_~r~0#1 := -16; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-6: assume !(0 != (vhost_set_vring_#t~mem406#1.base + vhost_set_vring_#t~mem406#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem406#1.base, vhost_set_vring_#t~mem406#1.offset; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-5: assume 0 != vhost_set_vring_~tmp~34#1 % 18446744073709551616;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-5: assume !(0 != vhost_set_vring_~tmp~34#1 % 18446744073709551616);call vhost_set_vring_#t~mem408#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);vhost_set_vring_#t~short410#1 := 0 == vhost_set_vring_#t~mem408#1 % 4294967296; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-4: assume vhost_set_vring_#t~short410#1; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-4: assume !vhost_set_vring_#t~short410#1;call vhost_set_vring_#t~mem409#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);vhost_set_vring_#t~short410#1 := vhost_set_vring_#t~mem409#1 % 4294967296 > 65535; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-3: assume vhost_set_vring_#t~short414#1; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-3: assume !vhost_set_vring_#t~short414#1;call vhost_set_vring_#t~mem412#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);call vhost_set_vring_#t~mem411#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-7: assume vhost_set_vring_#t~switch405#1;call vhost_set_vring_#t~mem406#1.base, vhost_set_vring_#t~mem406#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 17072 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7012-7: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := vhost_set_vring_#t~switch405#1 || 1074310930 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10514: assume { :begin_inline_ldv_mutex_unlock_72 } true;ldv_mutex_unlock_72_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_72_#in~ldv_func_arg1#1.offset := vhost_net_set_features_~n#1.base, 16 + vhost_net_set_features_~n#1.offset;havoc ldv_mutex_unlock_72_~ldv_func_arg1#1.base, ldv_mutex_unlock_72_~ldv_func_arg1#1.offset;ldv_mutex_unlock_72_~ldv_func_arg1#1.base, ldv_mutex_unlock_72_~ldv_func_arg1#1.offset := ldv_mutex_unlock_72_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_72_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6484: assume 0 != (vhost_dev_set_owner_#t~mem279#1.base + vhost_dev_set_owner_#t~mem279#1.offset) % 18446744073709551616;havoc vhost_dev_set_owner_#t~mem279#1.base, vhost_dev_set_owner_#t~mem279#1.offset;call vhost_dev_set_owner_#t~mem280#1.base, vhost_dev_set_owner_#t~mem280#1.offset := read~$Pointer$#14(vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6484: assume !(0 != (vhost_dev_set_owner_#t~mem279#1.base + vhost_dev_set_owner_#t~mem279#1.offset) % 18446744073709551616);havoc vhost_dev_set_owner_#t~mem279#1.base, vhost_dev_set_owner_#t~mem279#1.offset; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7343: vhost_dev_ioctl_~i~7#1 := 0; [2025-02-08 02:31:18,061 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10316: get_socket_#t~ret1195#1.base, get_socket_#t~ret1195#1.offset := get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset;havoc get_tap_socket_#t~ret1187#1.base, get_tap_socket_#t~ret1187#1.offset, get_tap_socket_#t~ret1188#1.base, get_tap_socket_#t~ret1188#1.offset, get_tap_socket_#t~ret1189#1.base, get_tap_socket_#t~ret1189#1.offset, get_tap_socket_#t~ret1190#1, get_tap_socket_#t~ret1191#1.base, get_tap_socket_#t~ret1191#1.offset, get_tap_socket_#t~ret1192#1, get_tap_socket_~fd#1, get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset, get_tap_socket_~tmp~65#1.base, get_tap_socket_~tmp~65#1.offset, get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset, get_tap_socket_~tmp___0~45#1.base, get_tap_socket_~tmp___0~45#1.offset, get_tap_socket_~tmp___1~31#1, get_tap_socket_~tmp___2~25#1;havoc get_tap_socket_#in~fd#1;assume { :end_inline_get_tap_socket } true;get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset := get_socket_#t~ret1195#1.base, get_socket_#t~ret1195#1.offset;havoc get_socket_#t~ret1195#1.base, get_socket_#t~ret1195#1.offset; [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10250: assume -2147483648 <= get_raw_socket_#t~ret1181#1 && get_raw_socket_#t~ret1181#1 <= 2147483647;call write~int#7(get_raw_socket_#t~ret1181#1, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4);havoc get_raw_socket_#t~mem1179#1.base, get_raw_socket_#t~mem1179#1.offset;havoc get_raw_socket_#t~mem1180#1.base, get_raw_socket_#t~mem1180#1.offset;havoc get_raw_socket_#t~ret1181#1;call get_raw_socket_#t~mem1182#1 := read~int#7(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10514-1: SUMMARY for call vhost_net_flush(vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset); srcloc: null [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10250-1: SUMMARY for call get_raw_socket_#t~ret1181#1 := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int(get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset, get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, 0, get_raw_socket_#t~mem1180#1.base, get_raw_socket_#t~mem1180#1.offset); srcloc: null [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10911: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_65_~ldv_func_arg1#1.base, ldv_mutex_unlock_65_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10515: havoc ldv_mutex_unlock_72_~ldv_func_arg1#1.base, ldv_mutex_unlock_72_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_72_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_72_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_72 } true;vhost_net_set_features_#res#1 := 0; [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6485-1: SUMMARY for call mmput(vhost_dev_set_owner_#t~mem280#1.base, vhost_dev_set_owner_#t~mem280#1.offset); srcloc: null [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6485: havoc vhost_dev_set_owner_#t~mem280#1.base, vhost_dev_set_owner_#t~mem280#1.offset; [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10317: assume -9223372036854775808 <= get_socket_#t~ret1196#1 && get_socket_#t~ret1196#1 <= 9223372036854775807;get_socket_~tmp___0~46#1 := get_socket_#t~ret1196#1;havoc get_socket_#t~ret1196#1; [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10317-1: SUMMARY for call get_socket_#t~ret1196#1 := IS_ERR(get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset); srcloc: null [2025-02-08 02:31:18,062 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7146: assume -9223372036854775808 <= vhost_set_vring_#t~ret459#1 && vhost_set_vring_#t~ret459#1 <= 9223372036854775807;vhost_set_vring_~r~0#1 := vhost_set_vring_#t~ret459#1;havoc vhost_set_vring_#t~ret459#1; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7146-1: SUMMARY for call vhost_set_vring_#t~ret459#1 := PTR_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10912: SUMMARY for call mutex_unlock(ldv_mutex_unlock_65_~ldv_func_arg1#1.base, ldv_mutex_unlock_65_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10252: assume 0 != get_raw_socket_#t~mem1182#1;havoc get_raw_socket_#t~mem1182#1; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10252: assume !(0 != get_raw_socket_#t~mem1182#1);havoc get_raw_socket_#t~mem1182#1;call get_raw_socket_#t~mem1183#1 := read~int#14(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, 2); [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7213-2: vhost_set_vring_#t~short477#1 := 0 != (if vhost_set_vring_~pollstart~0#1 % 256 % 4294967296 <= 2147483647 then vhost_set_vring_~pollstart~0#1 % 256 % 4294967296 else vhost_set_vring_~pollstart~0#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7213-1: assume vhost_set_vring_#t~short477#1;call vhost_set_vring_#t~mem476#1.base, vhost_set_vring_#t~mem476#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 436 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_#t~short477#1 := 0 != (vhost_set_vring_#t~mem476#1.base + vhost_set_vring_#t~mem476#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7213-1: assume !vhost_set_vring_#t~short477#1; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7213: assume vhost_set_vring_#t~short477#1;havoc vhost_set_vring_#t~mem476#1.base, vhost_set_vring_#t~mem476#1.offset;havoc vhost_set_vring_#t~short477#1;call vhost_set_vring_#t~mem478#1.base, vhost_set_vring_#t~mem478#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 192 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7213: assume !vhost_set_vring_#t~short477#1;havoc vhost_set_vring_#t~mem476#1.base, vhost_set_vring_#t~mem476#1.offset;havoc vhost_set_vring_#t~short477#1; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10318: assume 0 == get_socket_~tmp___0~46#1;get_socket_#res#1.base, get_socket_#res#1.offset := get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10318: assume !(0 == get_socket_~tmp___0~46#1); [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6949: call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset;vhost_dev_ioctl_#t~ret504#1 := vhost_set_vring_#res#1;havoc vhost_set_vring_#t~switch402#1, vhost_set_vring_#t~mem403#1, vhost_set_vring_#t~mem404#1.base, vhost_set_vring_#t~mem404#1.offset, vhost_set_vring_#t~switch405#1, vhost_set_vring_#t~mem406#1.base, vhost_set_vring_#t~mem406#1.offset, vhost_set_vring_#t~ret407#1, vhost_set_vring_#t~mem408#1, vhost_set_vring_#t~mem409#1, vhost_set_vring_#t~short410#1, vhost_set_vring_#t~mem412#1, vhost_set_vring_#t~mem411#1, vhost_set_vring_#t~bitwise413#1, vhost_set_vring_#t~short414#1, vhost_set_vring_#t~mem415#1, vhost_set_vring_#t~mem416#1.base, vhost_set_vring_#t~mem416#1.offset, vhost_set_vring_#t~ret417#1, vhost_set_vring_#t~mem418#1, vhost_set_vring_#t~mem419#1, vhost_set_vring_#t~mem420#1, vhost_set_vring_#t~mem421#1, vhost_set_vring_#t~ret422#1, vhost_set_vring_#t~ret423#1, vhost_set_vring_#t~mem424#1, vhost_set_vring_#t~mem425#1, vhost_set_vring_#t~mem426#1, vhost_set_vring_#t~short427#1, vhost_set_vring_#t~mem428#1, vhost_set_vring_#t~short429#1, vhost_set_vring_#t~mem430#1.base, vhost_set_vring_#t~mem430#1.offset, vhost_set_vring_#t~mem431#1, vhost_set_vring_#t~mem432#1, vhost_set_vring_#t~mem433#1, vhost_set_vring_#t~mem434#1, vhost_set_vring_#t~ret435#1, vhost_set_vring_#t~mem436#1, vhost_set_vring_#t~mem437#1.base, vhost_set_vring_#t~mem437#1.offset, vhost_set_vring_#t~mem438#1, vhost_set_vring_#t~mem439#1, vhost_set_vring_#t~ret440#1, vhost_set_vring_#t~mem441#1, vhost_set_vring_#t~mem442#1, vhost_set_vring_#t~mem443#1, vhost_set_vring_#t~mem444#1, vhost_set_vring_#t~mem445#1, vhost_set_vring_#t~ret446#1, vhost_set_vring_#t~mem447#1, vhost_set_vring_#t~mem448#1, vhost_set_vring_#t~ret449#1.base, vhost_set_vring_#t~ret449#1.offset, vhost_set_vring_#t~ret450#1, vhost_set_vring_#t~ret451#1, vhost_set_vring_#t~mem452#1.base, vhost_set_vring_#t~mem452#1.offset, vhost_set_vring_#t~mem453#1.base, vhost_set_vring_#t~mem453#1.offset, vhost_set_vring_#t~ret454#1, vhost_set_vring_#t~mem455#1, vhost_set_vring_#t~mem456#1, vhost_set_vring_#t~ret457#1.base, vhost_set_vring_#t~ret457#1.offset, vhost_set_vring_#t~ret458#1, vhost_set_vring_#t~ret459#1, vhost_set_vring_#t~mem460#1.base, vhost_set_vring_#t~mem460#1.offset, vhost_set_vring_#t~mem461#1.base, vhost_set_vring_#t~mem461#1.offset, vhost_set_vring_#t~mem462#1.base, vhost_set_vring_#t~mem462#1.offset, vhost_set_vring_#t~ret463#1.base, vhost_set_vring_#t~ret463#1.offset, vhost_set_vring_#t~ret464#1, vhost_set_vring_#t~mem465#1, vhost_set_vring_#t~mem466#1, vhost_set_vring_#t~ret467#1.base, vhost_set_vring_#t~ret467#1.offset, vhost_set_vring_#t~ret468#1, vhost_set_vring_#t~ret469#1, vhost_set_vring_#t~mem470#1.base, vhost_set_vring_#t~mem470#1.offset, vhost_set_vring_#t~mem471#1.base, vhost_set_vring_#t~mem471#1.offset, vhost_set_vring_#t~mem472#1.base, vhost_set_vring_#t~mem472#1.offset, vhost_set_vring_#t~ret473#1.base, vhost_set_vring_#t~ret473#1.offset, vhost_set_vring_#t~mem474#1.base, vhost_set_vring_#t~mem474#1.offset, vhost_set_vring_#t~short475#1, vhost_set_vring_#t~mem476#1.base, vhost_set_vring_#t~mem476#1.offset, vhost_set_vring_#t~short477#1, vhost_set_vring_#t~mem478#1.base, vhost_set_vring_#t~mem478#1.offset, vhost_set_vring_#t~mem479#1.base, vhost_set_vring_#t~mem479#1.offset, vhost_set_vring_#t~short480#1, vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset, vhost_set_vring_~ioctl#1, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset, vhost_set_vring_~pollstart~0#1, vhost_set_vring_~pollstop~0#1, vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset, vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset, vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset, vhost_set_vring_~idx~0#1, vhost_set_vring_~r~0#1, vhost_set_vring_~__ret_gu~0#1, vhost_set_vring_~__val_gu~0#1, vhost_set_vring_~tmp~34#1, vhost_set_vring_~tmp___0~21#1, vhost_set_vring_~tmp___1~16#1, vhost_set_vring_~tmp___2~13#1, vhost_set_vring_~tmp___3~6#1, vhost_set_vring_~tmp___4~4#1, vhost_set_vring_~tmp___5~4#1, vhost_set_vring_~tmp___6~2#1.base, vhost_set_vring_~tmp___6~2#1.offset, vhost_set_vring_~tmp___7~1#1, vhost_set_vring_~tmp___8~1#1.base, vhost_set_vring_~tmp___8~1#1.offset, vhost_set_vring_~tmp___9~1#1, vhost_set_vring_~tmp___10~1#1.base, vhost_set_vring_~tmp___10~1#1.offset, vhost_set_vring_~tmp___11~0#1, vhost_set_vring_~tmp___12~0#1.base, vhost_set_vring_~tmp___12~0#1.offset, vhost_set_vring_~tmp___13~0#1, vhost_set_vring_~tmp___14~0#1.base, vhost_set_vring_~tmp___14~0#1.offset, vhost_set_vring_~tmp___15~0#1, vhost_set_vring_~tmp___16~0#1.base, vhost_set_vring_~tmp___16~0#1.offset;havoc vhost_set_vring_#in~d#1.base, vhost_set_vring_#in~d#1.offset, vhost_set_vring_#in~ioctl#1, vhost_set_vring_#in~argp#1.base, vhost_set_vring_#in~argp#1.offset;assume { :end_inline_vhost_set_vring } true;assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret504#1 && vhost_dev_ioctl_#t~ret504#1 <= 9223372036854775807;vhost_dev_ioctl_~r~1#1 := vhost_dev_ioctl_#t~ret504#1; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10451: havoc ldv_mutex_lock_66_~ldv_func_arg1#1.base, ldv_mutex_lock_66_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_66_#in~ldv_func_arg1#1.base, ldv_mutex_lock_66_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_66 } true; [2025-02-08 02:31:18,063 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7346: havoc ldv_mutex_lock_18_~ldv_func_arg1#1.base, ldv_mutex_lock_18_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_18_#in~ldv_func_arg1#1.base, ldv_mutex_lock_18_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_18 } true;call vhost_dev_ioctl_#t~mem500#1.base, vhost_dev_ioctl_#t~mem500#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 176 + vhost_dev_ioctl_~d#1.offset, 8);call vhost_dev_ioctl_#t~mem501#1.base, vhost_dev_ioctl_#t~mem501#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 196 + vhost_dev_ioctl_~d#1.offset, 8);call write~$Pointer$#14(vhost_dev_ioctl_#t~mem501#1.base, vhost_dev_ioctl_#t~mem501#1.offset, vhost_dev_ioctl_#t~mem500#1.base, 232 + (vhost_dev_ioctl_#t~mem500#1.offset + 17120 * (if vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);call vhost_dev_ioctl_#t~mem502#1.base, vhost_dev_ioctl_#t~mem502#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 176 + vhost_dev_ioctl_~d#1.offset, 8);assume { :begin_inline_ldv_mutex_unlock_19 } true;ldv_mutex_unlock_19_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_19_#in~ldv_func_arg1#1.offset := vhost_dev_ioctl_#t~mem502#1.base, 8 + (vhost_dev_ioctl_#t~mem502#1.offset + 17120 * (if vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616));havoc ldv_mutex_unlock_19_~ldv_func_arg1#1.base, ldv_mutex_unlock_19_~ldv_func_arg1#1.offset;ldv_mutex_unlock_19_~ldv_func_arg1#1.base, ldv_mutex_unlock_19_~ldv_func_arg1#1.offset := ldv_mutex_unlock_19_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_19_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7214: havoc vhost_set_vring_#t~mem478#1.base, vhost_set_vring_#t~mem478#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9196: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_15_~ldv_func_arg1#1.base, ldv_mutex_unlock_15_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7346-1: call vhost_dev_ioctl_#t~mem499#1.base, vhost_dev_ioctl_#t~mem499#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 176 + vhost_dev_ioctl_~d#1.offset, 8);assume { :begin_inline_ldv_mutex_lock_18 } true;ldv_mutex_lock_18_#in~ldv_func_arg1#1.base, ldv_mutex_lock_18_#in~ldv_func_arg1#1.offset := vhost_dev_ioctl_#t~mem499#1.base, 8 + (vhost_dev_ioctl_#t~mem499#1.offset + 17120 * (if vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_~i~7#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616));havoc ldv_mutex_lock_18_~ldv_func_arg1#1.base, ldv_mutex_lock_18_~ldv_func_arg1#1.offset;ldv_mutex_lock_18_~ldv_func_arg1#1.base, ldv_mutex_lock_18_~ldv_func_arg1#1.offset := ldv_mutex_lock_18_#in~ldv_func_arg1#1.base, ldv_mutex_lock_18_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7214-1: SUMMARY for call vhost_poll_start(vhost_set_vring_~vq~0#1.base, 240 + vhost_set_vring_~vq~0#1.offset, vhost_set_vring_#t~mem478#1.base, vhost_set_vring_#t~mem478#1.offset); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10452: assume -9223372036854775808 <= vhost_net_reset_owner_#t~ret1215#1 && vhost_net_reset_owner_#t~ret1215#1 <= 9223372036854775807;vhost_net_reset_owner_~err~3#1 := vhost_net_reset_owner_#t~ret1215#1;havoc vhost_net_reset_owner_#t~ret1215#1; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6488: call write~$Pointer$#14(0, 0, vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8);vhost_dev_set_owner_#res#1 := vhost_dev_set_owner_~err~0#1; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10452-1: SUMMARY for call vhost_net_reset_owner_#t~ret1215#1 := vhost_dev_check_owner(vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10386: call vhost_net_set_backend_#t~mem1205#1.base, vhost_net_set_backend_#t~mem1205#1.offset := read~$Pointer$#14(vhost_net_set_backend_~vq~7#1.base, 17072 + vhost_net_set_backend_~vq~7#1.offset, 8);vhost_net_set_backend_~oldsock~0#1.base, vhost_net_set_backend_~oldsock~0#1.offset := vhost_net_set_backend_#t~mem1205#1.base, vhost_net_set_backend_#t~mem1205#1.offset;havoc vhost_net_set_backend_#t~mem1205#1.base, vhost_net_set_backend_#t~mem1205#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11641: havoc tun_get_socket_#t~ret1302#1.base, tun_get_socket_#t~ret1302#1.offset;get_tap_socket_#t~ret1189#1.base, get_tap_socket_#t~ret1189#1.offset := tun_get_socket_#res#1.base, tun_get_socket_#res#1.offset;havoc tun_get_socket_#t~ret1302#1.base, tun_get_socket_#t~ret1302#1.offset, tun_get_socket_~arg0#1.base, tun_get_socket_~arg0#1.offset;havoc tun_get_socket_#in~arg0#1.base, tun_get_socket_#in~arg0#1.offset;assume { :end_inline_tun_get_socket } true;get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset := get_tap_socket_#t~ret1189#1.base, get_tap_socket_#t~ret1189#1.offset;havoc get_tap_socket_#t~ret1189#1.base, get_tap_socket_#t~ret1189#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11641-3: SUMMARY for call tun_get_socket_#t~ret1302#1.base, tun_get_socket_#t~ret1302#1.offset := ldv_malloc(46); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11641-2: tun_get_socket_#res#1.base, tun_get_socket_#res#1.offset := tun_get_socket_#t~ret1302#1.base, tun_get_socket_#t~ret1302#1.offset;havoc tun_get_socket_#t~ret1302#1.base, tun_get_socket_#t~ret1302#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9197: SUMMARY for call mutex_unlock(ldv_mutex_unlock_15_~ldv_func_arg1#1.base, ldv_mutex_unlock_15_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10453: assume 0 != vhost_net_reset_owner_~err~3#1; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10453: assume !(0 != vhost_net_reset_owner_~err~3#1); [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11576-3: SUMMARY for call macvtap_get_socket_#t~ret1292#1.base, macvtap_get_socket_#t~ret1292#1.offset := ldv_malloc(46); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10387: assume (vhost_net_set_backend_~sock~7#1.base + vhost_net_set_backend_~sock~7#1.offset) % 18446744073709551616 != (vhost_net_set_backend_~oldsock~0#1.base + vhost_net_set_backend_~oldsock~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10387: assume !((vhost_net_set_backend_~sock~7#1.base + vhost_net_set_backend_~sock~7#1.offset) % 18446744073709551616 != (vhost_net_set_backend_~oldsock~0#1.base + vhost_net_set_backend_~oldsock~0#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11576: havoc macvtap_get_socket_#t~ret1292#1.base, macvtap_get_socket_#t~ret1292#1.offset;get_tap_socket_#t~ret1191#1.base, get_tap_socket_#t~ret1191#1.offset := macvtap_get_socket_#res#1.base, macvtap_get_socket_#res#1.offset;havoc macvtap_get_socket_#t~ret1292#1.base, macvtap_get_socket_#t~ret1292#1.offset, macvtap_get_socket_~arg0#1.base, macvtap_get_socket_~arg0#1.offset;havoc macvtap_get_socket_#in~arg0#1.base, macvtap_get_socket_#in~arg0#1.offset;assume { :end_inline_macvtap_get_socket } true;get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset := get_tap_socket_#t~ret1191#1.base, get_tap_socket_#t~ret1191#1.offset;havoc get_tap_socket_#t~ret1191#1.base, get_tap_socket_#t~ret1191#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7348: havoc ldv_mutex_unlock_19_~ldv_func_arg1#1.base, ldv_mutex_unlock_19_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_19_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_19_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_19 } true;vhost_dev_ioctl_~i~7#1 := 1 + vhost_dev_ioctl_~i~7#1;call vhost_dev_ioctl_#t~mem503#1 := read~int#14(vhost_dev_ioctl_~d#1.base, 184 + vhost_dev_ioctl_~d#1.offset, 4); [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11576-2: macvtap_get_socket_#res#1.base, macvtap_get_socket_#res#1.offset := macvtap_get_socket_#t~ret1292#1.base, macvtap_get_socket_#t~ret1292#1.offset;havoc macvtap_get_socket_#t~ret1292#1.base, macvtap_get_socket_#t~ret1292#1.offset; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7018: vhost_set_vring_~tmp~34#1 := vhost_set_vring_#t~ret407#1; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6886: vhost_set_memory_~tmp~33#1 := vhost_set_memory_#t~ret389#1;havoc vhost_set_memory_#t~ret389#1; [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7018-1: SUMMARY for call vhost_set_vring_#t~ret407#1 := copy_from_user(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:31:18,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6886-1: SUMMARY for call vhost_set_memory_#t~ret389#1 := copy_from_user(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset, vhost_set_memory_~size~0#1); srcloc: null [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7613: assume 0 == (vhost_init_used_#t~mem548#1.base + vhost_init_used_#t~mem548#1.offset) % 18446744073709551616;havoc vhost_init_used_#t~mem548#1.base, vhost_init_used_#t~mem548#1.offset;vhost_init_used_#res#1 := 0; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7613: assume !(0 == (vhost_init_used_#t~mem548#1.base + vhost_init_used_#t~mem548#1.offset) % 18446744073709551616);havoc vhost_init_used_#t~mem548#1.base, vhost_init_used_#t~mem548#1.offset; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10388: assume 0 != (vhost_net_set_backend_~sock~7#1.base + vhost_net_set_backend_~sock~7#1.offset) % 18446744073709551616;assume { :begin_inline_vhost_sock_zcopy } true;vhost_sock_zcopy_#in~sock#1.base, vhost_sock_zcopy_#in~sock#1.offset := vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset;havoc vhost_sock_zcopy_#res#1;havoc vhost_sock_zcopy_#t~ret956#1, vhost_sock_zcopy_#t~mem957#1.base, vhost_sock_zcopy_#t~mem957#1.offset, vhost_sock_zcopy_#t~ret958#1, vhost_sock_zcopy_~sock#1.base, vhost_sock_zcopy_~sock#1.offset, vhost_sock_zcopy_~tmp~54#1, vhost_sock_zcopy_~tmp___0~36#1, vhost_sock_zcopy_~tmp___1~26#1;vhost_sock_zcopy_~sock#1.base, vhost_sock_zcopy_~sock#1.offset := vhost_sock_zcopy_#in~sock#1.base, vhost_sock_zcopy_#in~sock#1.offset;havoc vhost_sock_zcopy_~tmp~54#1;havoc vhost_sock_zcopy_~tmp___0~36#1;havoc vhost_sock_zcopy_~tmp___1~26#1; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10388: assume !(0 != (vhost_net_set_backend_~sock~7#1.base + vhost_net_set_backend_~sock~7#1.offset) % 18446744073709551616);vhost_net_set_backend_~tmp___6~9#1 := 0; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10322: get_socket_~tmp___1~32#1.base, get_socket_~tmp___1~32#1.offset := get_socket_#t~ret1197#1.base, get_socket_#t~ret1197#1.offset;havoc get_socket_#t~ret1197#1.base, get_socket_#t~ret1197#1.offset;get_socket_#res#1.base, get_socket_#res#1.offset := get_socket_~tmp___1~32#1.base, get_socket_~tmp___1~32#1.offset; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7217-1: assume { :begin_inline_ldv_mutex_unlock_15 } true;ldv_mutex_unlock_15_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_15_#in~ldv_func_arg1#1.offset := vhost_set_vring_~vq~0#1.base, 8 + vhost_set_vring_~vq~0#1.offset;havoc ldv_mutex_unlock_15_~ldv_func_arg1#1.base, ldv_mutex_unlock_15_~ldv_func_arg1#1.offset;ldv_mutex_unlock_15_~ldv_func_arg1#1.base, ldv_mutex_unlock_15_~ldv_func_arg1#1.offset := ldv_mutex_unlock_15_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_15_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7217: havoc ldv_mutex_unlock_15_~ldv_func_arg1#1.base, ldv_mutex_unlock_15_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_15_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_15_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_15 } true;vhost_set_vring_#t~short480#1 := 0 != (if vhost_set_vring_~pollstop~0#1 % 256 % 4294967296 <= 2147483647 then vhost_set_vring_~pollstop~0#1 % 256 % 4294967296 else vhost_set_vring_~pollstop~0#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10322-1: SUMMARY for call get_socket_#t~ret1197#1.base, get_socket_#t~ret1197#1.offset := ERR_PTR(-88); srcloc: null [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10256: assume 17 != get_raw_socket_#t~mem1183#1 % 65536 % 4294967296;havoc get_raw_socket_#t~mem1183#1;call write~int#7(-96, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10256: assume !(17 != get_raw_socket_#t~mem1183#1 % 65536 % 4294967296);havoc get_raw_socket_#t~mem1183#1;get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset := get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset; [2025-02-08 02:31:18,065 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6887: assume 0 != vhost_set_memory_~tmp~33#1 % 18446744073709551616;vhost_set_memory_#res#1 := -14;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6887: assume !(0 != vhost_set_memory_~tmp~33#1 % 18446744073709551616);call vhost_set_memory_#t~mem390#1 := read~int#14(vhost_set_memory_~#mem~0#1.base, 4 + vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10983: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_74_~ldv_func_arg1#1.base, ldv_mutex_unlock_74_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10389: vhost_net_set_backend_#t~ret1206#1 := vhost_sock_zcopy_#res#1;havoc vhost_sock_zcopy_#t~ret956#1, vhost_sock_zcopy_#t~mem957#1.base, vhost_sock_zcopy_#t~mem957#1.offset, vhost_sock_zcopy_#t~ret958#1, vhost_sock_zcopy_~sock#1.base, vhost_sock_zcopy_~sock#1.offset, vhost_sock_zcopy_~tmp~54#1, vhost_sock_zcopy_~tmp___0~36#1, vhost_sock_zcopy_~tmp___1~26#1;havoc vhost_sock_zcopy_#in~sock#1.base, vhost_sock_zcopy_#in~sock#1.offset;assume { :end_inline_vhost_sock_zcopy } true;vhost_net_set_backend_~tmp___5~11#1 := (if 0 == vhost_net_set_backend_#t~ret1206#1 % 256 then 0 else 1);havoc vhost_net_set_backend_#t~ret1206#1; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7218: assume vhost_set_vring_#t~short480#1;havoc vhost_set_vring_#t~mem479#1.base, vhost_set_vring_#t~mem479#1.offset;havoc vhost_set_vring_#t~short480#1; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7218: assume !vhost_set_vring_#t~short480#1;havoc vhost_set_vring_#t~mem479#1.base, vhost_set_vring_#t~mem479#1.offset;havoc vhost_set_vring_#t~short480#1; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7086: assume -2147483648 <= vhost_set_vring_#t~ret440#1 && vhost_set_vring_#t~ret440#1 <= 2147483647;vhost_set_vring_~tmp___4~4#1 := vhost_set_vring_#t~ret440#1;havoc vhost_set_vring_#t~mem437#1.base, vhost_set_vring_#t~mem437#1.offset;havoc vhost_set_vring_#t~mem438#1;havoc vhost_set_vring_#t~mem439#1;havoc vhost_set_vring_#t~ret440#1; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7218-1: assume vhost_set_vring_#t~short480#1;call vhost_set_vring_#t~mem479#1.base, vhost_set_vring_#t~mem479#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 436 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_#t~short480#1 := 0 != (vhost_set_vring_#t~mem479#1.base + vhost_set_vring_#t~mem479#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7218-1: assume !vhost_set_vring_#t~short480#1; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9002: call ULTIMATE.dealloc(vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset);havoc vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset;vhost_net_set_backend_#t~ret1207#1.base, vhost_net_set_backend_#t~ret1207#1.offset := vhost_ubuf_alloc_#res#1.base, vhost_ubuf_alloc_#res#1.offset;havoc vhost_ubuf_alloc_#t~ret922#1.base, vhost_ubuf_alloc_#t~ret922#1.offset, vhost_ubuf_alloc_#t~ret923#1.base, vhost_ubuf_alloc_#t~ret923#1.offset, vhost_ubuf_alloc_~vq#1.base, vhost_ubuf_alloc_~vq#1.offset, vhost_ubuf_alloc_~zcopy#1, vhost_ubuf_alloc_~ubufs~1#1.base, vhost_ubuf_alloc_~ubufs~1#1.offset, vhost_ubuf_alloc_~tmp~49#1.base, vhost_ubuf_alloc_~tmp~49#1.offset, vhost_ubuf_alloc_~tmp___0~32#1.base, vhost_ubuf_alloc_~tmp___0~32#1.offset, vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset;havoc vhost_ubuf_alloc_#in~vq#1.base, vhost_ubuf_alloc_#in~vq#1.offset, vhost_ubuf_alloc_#in~zcopy#1;assume { :end_inline_vhost_ubuf_alloc } true;vhost_net_set_backend_~ubufs~4#1.base, vhost_net_set_backend_~ubufs~4#1.offset := vhost_net_set_backend_#t~ret1207#1.base, vhost_net_set_backend_#t~ret1207#1.offset;havoc vhost_net_set_backend_#t~ret1207#1.base, vhost_net_set_backend_#t~ret1207#1.offset; [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7086-1: SUMMARY for call vhost_set_vring_#t~ret440#1 := log_access_ok(vhost_set_vring_#t~mem437#1.base, vhost_set_vring_#t~mem437#1.offset, vhost_set_vring_#t~mem438#1, 4 + 8 * (vhost_set_vring_#t~mem439#1 % 4294967296)); srcloc: null [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10984: SUMMARY for call mutex_unlock(ldv_mutex_unlock_74_~ldv_func_arg1#1.base, ldv_mutex_unlock_74_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,066 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7219: SUMMARY for call vhost_poll_flush(vhost_set_vring_~vq~0#1.base, 240 + vhost_set_vring_~vq~0#1.offset); srcloc: null [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7285-1: assume { :begin_inline_ldv_mutex_unlock_17 } true;ldv_mutex_unlock_17_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_17_#in~ldv_func_arg1#1.offset := vhost_dev_ioctl_~vq~1#1.base, 8 + vhost_dev_ioctl_~vq~1#1.offset;havoc ldv_mutex_unlock_17_~ldv_func_arg1#1.base, ldv_mutex_unlock_17_~ldv_func_arg1#1.offset;ldv_mutex_unlock_17_~ldv_func_arg1#1.base, ldv_mutex_unlock_17_~ldv_func_arg1#1.offset := ldv_mutex_unlock_17_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_17_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7285: havoc ldv_mutex_unlock_17_~ldv_func_arg1#1.base, ldv_mutex_unlock_17_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_17_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_17_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_17 } true;vhost_dev_ioctl_~i~7#1 := 1 + vhost_dev_ioctl_~i~7#1;call vhost_dev_ioctl_#t~mem490#1 := read~int#14(vhost_dev_ioctl_~d#1.base, 184 + vhost_dev_ioctl_~d#1.offset, 4); [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10390: assume 0 != (if vhost_net_set_backend_~tmp___5~11#1 % 256 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp___5~11#1 % 256 % 4294967296 else vhost_net_set_backend_~tmp___5~11#1 % 256 % 4294967296 - 4294967296);vhost_net_set_backend_~tmp___6~9#1 := 1; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10390: assume !(0 != (if vhost_net_set_backend_~tmp___5~11#1 % 256 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp___5~11#1 % 256 % 4294967296 else vhost_net_set_backend_~tmp___5~11#1 % 256 % 4294967296 - 4294967296));vhost_net_set_backend_~tmp___6~9#1 := 0; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10457: SUMMARY for call vhost_net_stop(vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset, vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset); srcloc: null [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9004: assume 0 == vhost_ubuf_alloc_~zcopy#1 % 256;vhost_ubuf_alloc_#res#1.base, vhost_ubuf_alloc_#res#1.offset := 0, 0;call ULTIMATE.dealloc(vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset);havoc vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9004: assume !(0 == vhost_ubuf_alloc_~zcopy#1 % 256); [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5503: assume { :end_inline_synchronize_sched } true; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7617-1: SUMMARY for call vhost_init_used_#t~ret549#1 := vhost_update_used_flags(vhost_init_used_~vq#1.base, vhost_init_used_~vq#1.offset); srcloc: null [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10458: assume { :begin_inline_vhost_dev_reset_owner } true;vhost_dev_reset_owner_#in~dev#1.base, vhost_dev_reset_owner_#in~dev#1.offset := vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset;havoc vhost_dev_reset_owner_#res#1;havoc vhost_dev_reset_owner_#t~ret281#1.base, vhost_dev_reset_owner_#t~ret281#1.offset, vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, vhost_dev_reset_owner_~tmp~25#1.base, vhost_dev_reset_owner_~tmp~25#1.offset;vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset := vhost_dev_reset_owner_#in~dev#1.base, vhost_dev_reset_owner_#in~dev#1.offset;havoc vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset;havoc vhost_dev_reset_owner_~tmp~25#1.base, vhost_dev_reset_owner_~tmp~25#1.offset; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7617: assume -2147483648 <= vhost_init_used_#t~ret549#1 && vhost_init_used_#t~ret549#1 <= 2147483647;vhost_init_used_~r~5#1 := vhost_init_used_#t~ret549#1;havoc vhost_init_used_#t~ret549#1; [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7155-1: SUMMARY for call vhost_set_vring_#t~ret463#1.base, vhost_set_vring_#t~ret463#1.offset := eventfd_ctx_fileget(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10458-1: SUMMARY for call vhost_net_flush(vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset); srcloc: null [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7155: vhost_set_vring_~tmp___12~0#1.base, vhost_set_vring_~tmp___12~0#1.offset := vhost_set_vring_#t~ret463#1.base, vhost_set_vring_#t~ret463#1.offset;havoc vhost_set_vring_#t~ret463#1.base, vhost_set_vring_#t~ret463#1.offset;call write~$Pointer$#14(vhost_set_vring_~tmp___12~0#1.base, vhost_set_vring_~tmp___12~0#1.offset, vhost_set_vring_~vq~0#1.base, 216 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,067 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6891: assume 0 != vhost_set_memory_#t~mem390#1 % 4294967296;havoc vhost_set_memory_#t~mem390#1;vhost_set_memory_#res#1 := -95;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,068 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6891: assume !(0 != vhost_set_memory_#t~mem390#1 % 4294967296);havoc vhost_set_memory_#t~mem390#1;call vhost_set_memory_#t~mem391#1 := read~int#14(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:31:18,068 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10128: assume -2147483648 <= vhost_net_enable_vq_#t~ret1152#1 && vhost_net_enable_vq_#t~ret1152#1 <= 2147483647;vhost_net_enable_vq_~tmp~62#1 := vhost_net_enable_vq_#t~ret1152#1;havoc vhost_net_enable_vq_#t~ret1152#1; [2025-02-08 02:31:18,068 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10128-1: SUMMARY for call vhost_net_enable_vq_#t~ret1152#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:31:18,068 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7618: assume 0 != vhost_init_used_~r~5#1;vhost_init_used_#res#1 := vhost_init_used_~r~5#1; [2025-02-08 02:31:18,068 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7618: assume !(0 != vhost_init_used_~r~5#1);call write~int#14(0, vhost_init_used_~vq#1.base, 454 + vhost_init_used_~vq#1.offset, 1); [2025-02-08 02:31:18,068 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10459: vhost_net_reset_owner_#t~ret1216#1 := vhost_dev_reset_owner_#res#1;havoc vhost_dev_reset_owner_#t~ret281#1.base, vhost_dev_reset_owner_#t~ret281#1.offset, vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, vhost_dev_reset_owner_~tmp~25#1.base, vhost_dev_reset_owner_~tmp~25#1.offset;havoc vhost_dev_reset_owner_#in~dev#1.base, vhost_dev_reset_owner_#in~dev#1.offset;assume { :end_inline_vhost_dev_reset_owner } true;assume -9223372036854775808 <= vhost_net_reset_owner_#t~ret1216#1 && vhost_net_reset_owner_#t~ret1216#1 <= 9223372036854775807;vhost_net_reset_owner_~err~3#1 := vhost_net_reset_owner_#t~ret1216#1;havoc vhost_net_reset_owner_#t~ret1216#1;assume { :begin_inline_ldv_mutex_unlock_67 } true;ldv_mutex_unlock_67_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_67_#in~ldv_func_arg1#1.offset := vhost_net_reset_owner_~n#1.base, 16 + vhost_net_reset_owner_~n#1.offset;havoc ldv_mutex_unlock_67_~ldv_func_arg1#1.base, ldv_mutex_unlock_67_~ldv_func_arg1#1.offset;ldv_mutex_unlock_67_~ldv_func_arg1#1.base, ldv_mutex_unlock_67_~ldv_func_arg1#1.offset := ldv_mutex_unlock_67_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_67_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9204: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_16_~ldv_func_arg1#1.base, ldv_mutex_lock_16_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7222-1: vhost_set_vring_#res#1 := vhost_set_vring_~r~0#1;call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7024-2: havoc vhost_set_vring_#t~bitwise413#1;assume vhost_set_vring_#t~bitwise413#1 % 4294967296 <= vhost_set_vring_#t~mem412#1 % 4294967296 && vhost_set_vring_#t~bitwise413#1 % 4294967296 <= (vhost_set_vring_#t~mem411#1 - 1) % 4294967296; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7024-1: [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7024: vhost_set_vring_#t~short414#1 := 0 != vhost_set_vring_#t~bitwise413#1 % 4294967296; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10129: assume 0 != vhost_net_enable_vq_~tmp~62#1 && 0 == vhost_net_enable_vq_~__warned~9#1 % 256; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10129: assume !(0 != vhost_net_enable_vq_~tmp~62#1 && 0 == vhost_net_enable_vq_~__warned~9#1 % 256); [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7024-3: vhost_set_vring_#t~short414#1 := vhost_set_vring_#t~short410#1; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9205: SUMMARY for call mutex_lock(ldv_mutex_lock_16_~ldv_func_arg1#1.base, ldv_mutex_lock_16_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10130: assume -2147483648 <= vhost_net_enable_vq_#t~ret1153#1 && vhost_net_enable_vq_#t~ret1153#1 <= 2147483647;vhost_net_enable_vq_~tmp___0~42#1 := vhost_net_enable_vq_#t~ret1153#1;havoc vhost_net_enable_vq_#t~ret1153#1; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10130-1: SUMMARY for call vhost_net_enable_vq_#t~ret1153#1 := lock_is_held(vhost_net_enable_vq_~vq#1.base, 120 + vhost_net_enable_vq_~vq#1.offset); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10461: havoc ldv_mutex_unlock_67_~ldv_func_arg1#1.base, ldv_mutex_unlock_67_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_67_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_67_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_67 } true;call vhost_net_reset_owner_#t~mem1217#1.base, vhost_net_reset_owner_#t~mem1217#1.offset := read~$Pointer$#10(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, 8); [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7356: SUMMARY for call eventfd_ctx_put(vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10263-2: call get_raw_socket_#t~mem1184#1.base, get_raw_socket_#t~mem1184#1.offset := read~$Pointer$#14(get_raw_socket_~sock~4#1.base, 22 + get_raw_socket_~sock~4#1.offset, 8); [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10131: assume 0 == vhost_net_enable_vq_~tmp___0~42#1;vhost_net_enable_vq_~__warned~9#1 := 1; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10131: assume !(0 == vhost_net_enable_vq_~tmp___0~42#1); [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10263: call get_raw_socket_#t~mem1185#1 := read~int#7(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10263-1: SUMMARY for call fput(get_raw_socket_#t~mem1184#1.base, get_raw_socket_#t~mem1184#1.offset); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9008: vhost_ubuf_alloc_~tmp~49#1.base, vhost_ubuf_alloc_~tmp~49#1.offset := vhost_ubuf_alloc_#t~ret922#1.base, vhost_ubuf_alloc_#t~ret922#1.offset;havoc vhost_ubuf_alloc_#t~ret922#1.base, vhost_ubuf_alloc_#t~ret922#1.offset;vhost_ubuf_alloc_~ubufs~1#1.base, vhost_ubuf_alloc_~ubufs~1#1.offset := vhost_ubuf_alloc_~tmp~49#1.base, vhost_ubuf_alloc_~tmp~49#1.offset; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9008-1: SUMMARY for call vhost_ubuf_alloc_#t~ret922#1.base, vhost_ubuf_alloc_#t~ret922#1.offset := kmalloc(104, 208); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6498: vhost_dev_reset_owner_~tmp~25#1.base, vhost_dev_reset_owner_~tmp~25#1.offset := vhost_dev_reset_owner_#t~ret281#1.base, vhost_dev_reset_owner_#t~ret281#1.offset;havoc vhost_dev_reset_owner_#t~ret281#1.base, vhost_dev_reset_owner_#t~ret281#1.offset;vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset := vhost_dev_reset_owner_~tmp~25#1.base, vhost_dev_reset_owner_~tmp~25#1.offset; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6498-1: SUMMARY for call vhost_dev_reset_owner_#t~ret281#1.base, vhost_dev_reset_owner_#t~ret281#1.offset := kmalloc(8, 208); srcloc: null [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10462: assume 0 != (vhost_net_reset_owner_#t~mem1217#1.base + vhost_net_reset_owner_#t~mem1217#1.offset) % 18446744073709551616;havoc vhost_net_reset_owner_#t~mem1217#1.base, vhost_net_reset_owner_#t~mem1217#1.offset;call vhost_net_reset_owner_#t~mem1218#1.base, vhost_net_reset_owner_#t~mem1218#1.offset := read~$Pointer$#10(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, 8);call vhost_net_reset_owner_#t~mem1219#1.base, vhost_net_reset_owner_#t~mem1219#1.offset := read~$Pointer$#14(vhost_net_reset_owner_#t~mem1218#1.base, 22 + vhost_net_reset_owner_#t~mem1218#1.offset, 8); [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10462: assume !(0 != (vhost_net_reset_owner_#t~mem1217#1.base + vhost_net_reset_owner_#t~mem1217#1.offset) % 18446744073709551616);havoc vhost_net_reset_owner_#t~mem1217#1.base, vhost_net_reset_owner_#t~mem1217#1.offset; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10264: get_raw_socket_~tmp___1~30#1.base, get_raw_socket_~tmp___1~30#1.offset := get_raw_socket_#t~ret1186#1.base, get_raw_socket_#t~ret1186#1.offset;havoc get_raw_socket_#t~mem1185#1;havoc get_raw_socket_#t~ret1186#1.base, get_raw_socket_#t~ret1186#1.offset;get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset := get_raw_socket_~tmp___1~30#1.base, get_raw_socket_~tmp___1~30#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset; [2025-02-08 02:31:18,069 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10264-1: SUMMARY for call get_raw_socket_#t~ret1186#1.base, get_raw_socket_#t~ret1186#1.offset := ERR_PTR(get_raw_socket_#t~mem1185#1); srcloc: null [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6895: assume vhost_set_memory_#t~mem391#1 % 4294967296 > 64;havoc vhost_set_memory_#t~mem391#1;vhost_set_memory_#res#1 := -7;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6895: assume !(vhost_set_memory_#t~mem391#1 % 4294967296 > 64);havoc vhost_set_memory_#t~mem391#1;call vhost_set_memory_#t~mem392#1 := read~int#14(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6433-1: SUMMARY for call vhost_attach_cgroups_#t~ret265#1.base, vhost_attach_cgroups_#t~ret265#1.offset := get_current(); srcloc: null [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6433: call write~$Pointer$#14(vhost_attach_cgroups_#t~ret265#1.base, vhost_attach_cgroups_#t~ret265#1.offset, vhost_attach_cgroups_~#attach~0#1.base, 120 + vhost_attach_cgroups_~#attach~0#1.offset, 8);havoc vhost_attach_cgroups_#t~ret265#1.base, vhost_attach_cgroups_#t~ret265#1.offset; [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10463: havoc vhost_net_reset_owner_#t~mem1218#1.base, vhost_net_reset_owner_#t~mem1218#1.offset;havoc vhost_net_reset_owner_#t~mem1219#1.base, vhost_net_reset_owner_#t~mem1219#1.offset; [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10463-1: SUMMARY for call fput(vhost_net_reset_owner_#t~mem1219#1.base, vhost_net_reset_owner_#t~mem1219#1.offset); srcloc: null [2025-02-08 02:31:18,070 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10133: SUMMARY for call lockdep_rcu_suspicious(208, 0, 589, 209, 0); srcloc: null [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9010: assume 0 == (vhost_ubuf_alloc_~ubufs~1#1.base + vhost_ubuf_alloc_~ubufs~1#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9010: assume !(0 == (vhost_ubuf_alloc_~ubufs~1#1.base + vhost_ubuf_alloc_~ubufs~1#1.offset) % 18446744073709551616);assume { :begin_inline_kref_init } true;kref_init_#in~kref#1.base, kref_init_#in~kref#1.offset := vhost_ubuf_alloc_~ubufs~1#1.base, vhost_ubuf_alloc_~ubufs~1#1.offset;havoc kref_init_~kref#1.base, kref_init_~kref#1.offset;kref_init_~kref#1.base, kref_init_~kref#1.offset := kref_init_#in~kref#1.base, kref_init_#in~kref#1.offset;assume { :begin_inline_atomic_set } true;atomic_set_#in~v#1.base, atomic_set_#in~v#1.offset, atomic_set_#in~i#1 := kref_init_~kref#1.base, kref_init_~kref#1.offset, 1;havoc atomic_set_~v#1.base, atomic_set_~v#1.offset, atomic_set_~i#1;atomic_set_~v#1.base, atomic_set_~v#1.offset := atomic_set_#in~v#1.base, atomic_set_#in~v#1.offset;atomic_set_~i#1 := atomic_set_#in~i#1;call write~int#14(atomic_set_~i#1, atomic_set_~v#1.base, atomic_set_~v#1.offset, 4); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7623-1: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7623: vhost_init_used_#t~switch550#1 := false; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6434: SUMMARY for call vhost_work_init(vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset, #funAddr~vhost_attach_cgroups_work.base, #funAddr~vhost_attach_cgroups_work.offset); srcloc: null [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6500: assume 0 == (vhost_dev_reset_owner_~memory~0#1.base + vhost_dev_reset_owner_~memory~0#1.offset) % 18446744073709551616;vhost_dev_reset_owner_#res#1 := -12; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6500: assume !(0 == (vhost_dev_reset_owner_~memory~0#1.base + vhost_dev_reset_owner_~memory~0#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-3: assume 0 != (vhost_dev_ioctl_~eventfp~1#1.base + vhost_dev_ioctl_~eventfp~1#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-3: assume !(0 != (vhost_dev_ioctl_~eventfp~1#1.base + vhost_dev_ioctl_~eventfp~1#1.offset) % 18446744073709551616);call write~$Pointer$#14(0, 0, vhost_dev_ioctl_~d#1.base, 196 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-2: assume vhost_dev_ioctl_#t~mem503#1 > vhost_dev_ioctl_~i~7#1;havoc vhost_dev_ioctl_#t~mem503#1; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-2: assume !(vhost_dev_ioctl_#t~mem503#1 > vhost_dev_ioctl_~i~7#1);havoc vhost_dev_ioctl_#t~mem503#1; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-1: assume 0 != (vhost_dev_ioctl_~ctx~1#1.base + vhost_dev_ioctl_~ctx~1#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-1: assume !(0 != (vhost_dev_ioctl_~ctx~1#1.base + vhost_dev_ioctl_~ctx~1#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293: assume 0 != (vhost_dev_ioctl_~filep~1#1.base + vhost_dev_ioctl_~filep~1#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293: assume !(0 != (vhost_dev_ioctl_~filep~1#1.base + vhost_dev_ioctl_~filep~1#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10398: assume { :begin_inline_vhost_ubuf_alloc } true;vhost_ubuf_alloc_#in~vq#1.base, vhost_ubuf_alloc_#in~vq#1.offset, vhost_ubuf_alloc_#in~zcopy#1 := vhost_net_set_backend_~vq~7#1.base, vhost_net_set_backend_~vq~7#1.offset, (if 0 == (if (if 0 == vhost_net_set_backend_~tmp___6~9#1 then 0 else 1) % 256 % 4294967296 <= 2147483647 then (if 0 == vhost_net_set_backend_~tmp___6~9#1 then 0 else 1) % 256 % 4294967296 else (if 0 == vhost_net_set_backend_~tmp___6~9#1 then 0 else 1) % 256 % 4294967296 - 4294967296) then 0 else 1);havoc vhost_ubuf_alloc_#res#1.base, vhost_ubuf_alloc_#res#1.offset;havoc vhost_ubuf_alloc_#t~ret922#1.base, vhost_ubuf_alloc_#t~ret922#1.offset, vhost_ubuf_alloc_#t~ret923#1.base, vhost_ubuf_alloc_#t~ret923#1.offset, vhost_ubuf_alloc_~vq#1.base, vhost_ubuf_alloc_~vq#1.offset, vhost_ubuf_alloc_~zcopy#1, vhost_ubuf_alloc_~ubufs~1#1.base, vhost_ubuf_alloc_~ubufs~1#1.offset, vhost_ubuf_alloc_~tmp~49#1.base, vhost_ubuf_alloc_~tmp~49#1.offset, vhost_ubuf_alloc_~tmp___0~32#1.base, vhost_ubuf_alloc_~tmp___0~32#1.offset, vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset;vhost_ubuf_alloc_~vq#1.base, vhost_ubuf_alloc_~vq#1.offset := vhost_ubuf_alloc_#in~vq#1.base, vhost_ubuf_alloc_#in~vq#1.offset;vhost_ubuf_alloc_~zcopy#1 := vhost_ubuf_alloc_#in~zcopy#1;havoc vhost_ubuf_alloc_~ubufs~1#1.base, vhost_ubuf_alloc_~ubufs~1#1.offset;havoc vhost_ubuf_alloc_~tmp~49#1.base, vhost_ubuf_alloc_~tmp~49#1.offset;havoc vhost_ubuf_alloc_~tmp___0~32#1.base, vhost_ubuf_alloc_~tmp___0~32#1.offset;call vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset := #Ultimate.allocOnStack(8); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-7: assume vhost_dev_ioctl_~r~1#1 < 0; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-7: assume !(vhost_dev_ioctl_~r~1#1 < 0); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-6: assume -1 != vhost_dev_ioctl_~fd~0#1; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-6: assume !(-1 != vhost_dev_ioctl_~fd~0#1);vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset := 0, 0; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-5: assume 0 != vhost_dev_ioctl_~tmp___2~14#1; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-5: assume !(0 != vhost_dev_ioctl_~tmp___2~14#1);call vhost_dev_ioctl_#t~mem495#1.base, vhost_dev_ioctl_#t~mem495#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 188 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9011: vhost_ubuf_alloc_~tmp___0~32#1.base, vhost_ubuf_alloc_~tmp___0~32#1.offset := vhost_ubuf_alloc_#t~ret923#1.base, vhost_ubuf_alloc_#t~ret923#1.offset;havoc vhost_ubuf_alloc_#t~ret923#1.base, vhost_ubuf_alloc_#t~ret923#1.offset;vhost_ubuf_alloc_#res#1.base, vhost_ubuf_alloc_#res#1.offset := vhost_ubuf_alloc_~tmp___0~32#1.base, vhost_ubuf_alloc_~tmp___0~32#1.offset;call ULTIMATE.dealloc(vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset);havoc vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset; [2025-02-08 02:31:18,071 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-4: assume (vhost_dev_ioctl_#t~mem495#1.base + vhost_dev_ioctl_#t~mem495#1.offset) % 18446744073709551616 != (vhost_dev_ioctl_~eventfp~1#1.base + vhost_dev_ioctl_~eventfp~1#1.offset) % 18446744073709551616;havoc vhost_dev_ioctl_#t~mem495#1.base, vhost_dev_ioctl_#t~mem495#1.offset;call vhost_dev_ioctl_#t~mem496#1.base, vhost_dev_ioctl_#t~mem496#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 188 + vhost_dev_ioctl_~d#1.offset, 8);vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset := vhost_dev_ioctl_#t~mem496#1.base, vhost_dev_ioctl_#t~mem496#1.offset;havoc vhost_dev_ioctl_#t~mem496#1.base, vhost_dev_ioctl_#t~mem496#1.offset;call vhost_dev_ioctl_#t~mem497#1.base, vhost_dev_ioctl_#t~mem497#1.offset := read~$Pointer$#14(vhost_dev_ioctl_~d#1.base, 196 + vhost_dev_ioctl_~d#1.offset, 8);vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset := vhost_dev_ioctl_#t~mem497#1.base, vhost_dev_ioctl_#t~mem497#1.offset;havoc vhost_dev_ioctl_#t~mem497#1.base, vhost_dev_ioctl_#t~mem497#1.offset; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-4: assume !((vhost_dev_ioctl_#t~mem495#1.base + vhost_dev_ioctl_#t~mem495#1.offset) % 18446744073709551616 != (vhost_dev_ioctl_~eventfp~1#1.base + vhost_dev_ioctl_~eventfp~1#1.offset) % 18446744073709551616);havoc vhost_dev_ioctl_#t~mem495#1.base, vhost_dev_ioctl_#t~mem495#1.offset;vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset := vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9011-1: SUMMARY for call vhost_ubuf_alloc_#t~ret923#1.base, vhost_ubuf_alloc_#t~ret923#1.offset := ERR_PTR(-12); srcloc: null [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-11: assume vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-11: assume !vhost_dev_ioctl_#t~switch491#1;vhost_dev_ioctl_#t~switch491#1 := true; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-10: assume vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-10: assume !vhost_dev_ioctl_#t~switch491#1;vhost_dev_ioctl_#t~switch491#1 := vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-9: assume vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-9: assume !vhost_dev_ioctl_#t~switch491#1;vhost_dev_ioctl_#t~switch491#1 := true; [2025-02-08 02:31:18,072 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-8: assume vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-8: assume !vhost_dev_ioctl_#t~switch491#1;havoc vhost_dev_ioctl_#t~switch491#1;vhost_dev_ioctl_~fd~0#1 := (if vhost_dev_ioctl_~__val_gu~1#1 % 18446744073709551616 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~__val_gu~1#1 % 18446744073709551616 % 4294967296 else vhost_dev_ioctl_~__val_gu~1#1 % 18446744073709551616 % 4294967296 - 4294967296);vhost_dev_ioctl_~r~1#1 := vhost_dev_ioctl_~__ret_gu~1#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-13: assume vhost_dev_ioctl_#t~switch483#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-13: assume !vhost_dev_ioctl_#t~switch483#1;vhost_dev_ioctl_#t~switch483#1 := true; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-12: assume vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7293-12: assume !vhost_dev_ioctl_#t~switch491#1;vhost_dev_ioctl_#t~switch491#1 := vhost_dev_ioctl_#t~switch491#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10927: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_67_~ldv_func_arg1#1.base, ldv_mutex_unlock_67_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6435: SUMMARY for call vhost_work_queue(vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset); srcloc: null [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7294: vhost_dev_ioctl_#t~switch491#1 := false; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7360: SUMMARY for call fput(vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset); srcloc: null [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10399: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret1208#1 && vhost_net_set_backend_#t~ret1208#1 <= 9223372036854775807;vhost_net_set_backend_~tmp___8~6#1 := vhost_net_set_backend_#t~ret1208#1;havoc vhost_net_set_backend_#t~ret1208#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7294-1: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10399-1: SUMMARY for call vhost_net_set_backend_#t~ret1208#1 := IS_ERR(vhost_net_set_backend_~ubufs~4#1.base, vhost_net_set_backend_~ubufs~4#1.offset); srcloc: null [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7096: call vhost_set_vring_#t~mem441#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 4 + vhost_set_vring_~#a~2#1.offset, 4);call write~int#14((if 0 == (if 0 != (if vhost_set_vring_#t~mem441#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_set_vring_#t~mem441#1 % 4294967296 % 4294967296 else vhost_set_vring_#t~mem441#1 % 4294967296 % 4294967296 - 4294967296) % 2 then 1 else 0) then 0 else 1), vhost_set_vring_~vq~0#1.base, 455 + vhost_set_vring_~vq~0#1.offset, 1);call vhost_set_vring_#t~mem442#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 8 + vhost_set_vring_~#a~2#1.offset, 8);call write~$Pointer$#14(0, (if vhost_set_vring_#t~mem442#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem442#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem442#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), vhost_set_vring_~vq~0#1.base, 168 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem443#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8);call write~$Pointer$#14(0, (if vhost_set_vring_#t~mem443#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem443#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem443#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), vhost_set_vring_~vq~0#1.base, 176 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem444#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 32 + vhost_set_vring_~#a~2#1.offset, 8);call write~int#14(vhost_set_vring_#t~mem444#1, vhost_set_vring_~vq~0#1.base, 456 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem445#1 := read~int#14(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8);call write~$Pointer$#14(0, (if vhost_set_vring_#t~mem445#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem445#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem445#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), vhost_set_vring_~vq~0#1.base, 184 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10928: SUMMARY for call mutex_unlock(ldv_mutex_unlock_67_~ldv_func_arg1#1.base, ldv_mutex_unlock_67_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10466: assume 0 != (vhost_net_reset_owner_#t~mem1220#1.base + vhost_net_reset_owner_#t~mem1220#1.offset) % 18446744073709551616;havoc vhost_net_reset_owner_#t~mem1220#1.base, vhost_net_reset_owner_#t~mem1220#1.offset;call vhost_net_reset_owner_#t~mem1221#1.base, vhost_net_reset_owner_#t~mem1221#1.offset := read~$Pointer$#2(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, 8);call vhost_net_reset_owner_#t~mem1222#1.base, vhost_net_reset_owner_#t~mem1222#1.offset := read~$Pointer$#14(vhost_net_reset_owner_#t~mem1221#1.base, 22 + vhost_net_reset_owner_#t~mem1221#1.offset, 8); [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10466: assume !(0 != (vhost_net_reset_owner_#t~mem1220#1.base + vhost_net_reset_owner_#t~mem1220#1.offset) % 18446744073709551616);havoc vhost_net_reset_owner_#t~mem1220#1.base, vhost_net_reset_owner_#t~mem1220#1.offset; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7625: assume vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7625: assume !vhost_init_used_#t~switch550#1;vhost_init_used_#t~switch550#1 := true; [2025-02-08 02:31:18,073 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6436-1: SUMMARY for call vhost_work_flush(vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset); srcloc: null [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6436: call vhost_attach_cgroups_#t~mem266#1 := read~int#14(vhost_attach_cgroups_~#attach~0#1.base, 128 + vhost_attach_cgroups_~#attach~0#1.offset, 4);vhost_attach_cgroups_#res#1 := vhost_attach_cgroups_#t~mem266#1;havoc vhost_attach_cgroups_#t~mem266#1;call ULTIMATE.dealloc(vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset);havoc vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10466-1: call vhost_net_reset_owner_#t~mem1220#1.base, vhost_net_reset_owner_#t~mem1220#1.offset := read~$Pointer$#2(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, 8); [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10400: assume 0 != vhost_net_set_backend_~tmp___8~6#1; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10400: assume !(0 != vhost_net_set_backend_~tmp___8~6#1);call vhost_net_set_backend_#t~mem1210#1.base, vhost_net_set_backend_#t~mem1210#1.offset := read~$Pointer$#14(vhost_net_set_backend_~vq~7#1.base, 17112 + vhost_net_set_backend_~vq~7#1.offset, 8);vhost_net_set_backend_~oldubufs~0#1.base, vhost_net_set_backend_~oldubufs~0#1.offset := vhost_net_set_backend_#t~mem1210#1.base, vhost_net_set_backend_#t~mem1210#1.offset;havoc vhost_net_set_backend_#t~mem1210#1.base, vhost_net_set_backend_#t~mem1210#1.offset;call write~$Pointer$#14(vhost_net_set_backend_~ubufs~4#1.base, vhost_net_set_backend_~ubufs~4#1.offset, vhost_net_set_backend_~vq~7#1.base, 17112 + vhost_net_set_backend_~vq~7#1.offset, 8); [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031-1: assume 0 != vhost_set_vring_~tmp___0~21#1 % 18446744073709551616;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031-1: assume !(0 != vhost_set_vring_~tmp___0~21#1 % 18446744073709551616);call vhost_set_vring_#t~mem418#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031: assume vhost_set_vring_#t~mem418#1 % 4294967296 > 65535;havoc vhost_set_vring_#t~mem418#1;vhost_set_vring_~r~0#1 := -22; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031: assume !(vhost_set_vring_#t~mem418#1 % 4294967296 > 65535);havoc vhost_set_vring_#t~mem418#1;call vhost_set_vring_#t~mem419#1 := read~int#14(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);call write~int#14(vhost_set_vring_#t~mem419#1, vhost_set_vring_~vq~0#1.base, 444 + vhost_set_vring_~vq~0#1.offset, 2);call vhost_set_vring_#t~mem420#1 := read~int#14(vhost_set_vring_~vq~0#1.base, 444 + vhost_set_vring_~vq~0#1.offset, 2);call write~int#14(vhost_set_vring_#t~mem420#1, vhost_set_vring_~vq~0#1.base, 446 + vhost_set_vring_~vq~0#1.offset, 2); [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6899-1: SUMMARY for call vhost_set_memory_#t~ret393#1.base, vhost_set_memory_#t~ret393#1.offset := kmalloc(32 * (vhost_set_memory_#t~mem392#1 % 4294967296) + vhost_set_memory_~size~0#1, 208); srcloc: null [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6899: vhost_set_memory_~tmp___0~20#1.base, vhost_set_memory_~tmp___0~20#1.offset := vhost_set_memory_#t~ret393#1.base, vhost_set_memory_#t~ret393#1.offset;havoc vhost_set_memory_#t~mem392#1;havoc vhost_set_memory_#t~ret393#1.base, vhost_set_memory_#t~ret393#1.offset;vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset := vhost_set_memory_~tmp___0~20#1.base, vhost_set_memory_~tmp___0~20#1.offset; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031-3: assume vhost_set_vring_#t~switch405#1;call vhost_set_vring_#t~mem416#1.base, vhost_set_vring_#t~mem416#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 17072 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031-3: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := vhost_set_vring_#t~switch405#1 || -1073172718 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031-2: assume 0 != (vhost_set_vring_#t~mem416#1.base + vhost_set_vring_#t~mem416#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem416#1.base, vhost_set_vring_#t~mem416#1.offset;vhost_set_vring_~r~0#1 := -16; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7031-2: assume !(0 != (vhost_set_vring_#t~mem416#1.base + vhost_set_vring_#t~mem416#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem416#1.base, vhost_set_vring_#t~mem416#1.offset; [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10863: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_59_~ldv_func_arg1#1.base, ldv_mutex_lock_59_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,074 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10467: havoc vhost_net_reset_owner_#t~mem1221#1.base, vhost_net_reset_owner_#t~mem1221#1.offset;havoc vhost_net_reset_owner_#t~mem1222#1.base, vhost_net_reset_owner_#t~mem1222#1.offset; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10467-1: SUMMARY for call fput(vhost_net_reset_owner_#t~mem1222#1.base, vhost_net_reset_owner_#t~mem1222#1.offset); srcloc: null [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6437: havoc vhost_attach_cgroups_#t~mem266#1;call ULTIMATE.dealloc(vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset);havoc vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset;vhost_dev_set_owner_#t~ret276#1 := vhost_attach_cgroups_#res#1;havoc vhost_attach_cgroups_#t~ret265#1.base, vhost_attach_cgroups_#t~ret265#1.offset, vhost_attach_cgroups_#t~mem266#1, vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset;havoc vhost_attach_cgroups_#in~dev#1.base, vhost_attach_cgroups_#in~dev#1.offset;assume { :end_inline_vhost_attach_cgroups } true;assume -2147483648 <= vhost_dev_set_owner_#t~ret276#1 && vhost_dev_set_owner_#t~ret276#1 <= 2147483647;vhost_dev_set_owner_~err~0#1 := vhost_dev_set_owner_#t~ret276#1;havoc vhost_dev_set_owner_#t~ret276#1; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9212: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_17_~ldv_func_arg1#1.base, ldv_mutex_unlock_17_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-2: assume 0 != vhost_set_vring_~tmp___15~0#1; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-2: assume !(0 != vhost_set_vring_~tmp___15~0#1);call vhost_set_vring_#t~mem470#1.base, vhost_set_vring_#t~mem470#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 208 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10401: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret1209#1 && vhost_net_set_backend_#t~ret1209#1 <= 9223372036854775807;vhost_net_set_backend_~tmp___7~7#1 := vhost_net_set_backend_#t~ret1209#1;havoc vhost_net_set_backend_#t~ret1209#1;vhost_net_set_backend_~r~12#1 := (if vhost_net_set_backend_~tmp___7~7#1 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp___7~7#1 % 4294967296 else vhost_net_set_backend_~tmp___7~7#1 % 4294967296 - 4294967296); [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-1: assume (vhost_set_vring_#t~mem470#1.base + vhost_set_vring_#t~mem470#1.offset) % 18446744073709551616 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem470#1.base, vhost_set_vring_#t~mem470#1.offset;call vhost_set_vring_#t~mem471#1.base, vhost_set_vring_#t~mem471#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 208 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_#t~mem471#1.base, vhost_set_vring_#t~mem471#1.offset;havoc vhost_set_vring_#t~mem471#1.base, vhost_set_vring_#t~mem471#1.offset;call write~$Pointer$#14(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~vq~0#1.base, 208 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem472#1.base, vhost_set_vring_#t~mem472#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 224 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset := vhost_set_vring_#t~mem472#1.base, vhost_set_vring_#t~mem472#1.offset;havoc vhost_set_vring_#t~mem472#1.base, vhost_set_vring_#t~mem472#1.offset; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-1: assume !((vhost_set_vring_#t~mem470#1.base + vhost_set_vring_#t~mem470#1.offset) % 18446744073709551616 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem470#1.base, vhost_set_vring_#t~mem470#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10401-1: SUMMARY for call vhost_net_set_backend_#t~ret1209#1 := PTR_ERR(vhost_net_set_backend_~ubufs~4#1.base, vhost_net_set_backend_~ubufs~4#1.offset); srcloc: null [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9344: assume -2147483648 <= sock_flag_#t~ret955#1 && sock_flag_#t~ret955#1 <= 2147483647;sock_flag_~tmp~53#1 := sock_flag_#t~ret955#1;havoc sock_flag_#t~ret955#1;sock_flag_#res#1 := (if 0 == (if 0 != sock_flag_~tmp~53#1 then 1 else 0) then 0 else 1); [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164: assume 0 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164: assume !(0 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616);call write~$Pointer$#14(0, 0, vhost_set_vring_~vq~0#1.base, 224 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9344-1: SUMMARY for call sock_flag_#t~ret955#1 := variable_test_bit(sock_flag_~flag#1, sock_flag_~sk#1.base, 524 + sock_flag_~sk#1.offset); srcloc: null [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-5: assume vhost_set_vring_#t~switch405#1; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-5: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := true; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-4: assume 0 != vhost_set_vring_~tmp___13~0#1 % 18446744073709551616;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-4: assume !(0 != vhost_set_vring_~tmp___13~0#1 % 18446744073709551616);call vhost_set_vring_#t~mem465#1 := read~int#14(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:31:18,075 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-3: assume -1 != vhost_set_vring_#t~mem465#1;havoc vhost_set_vring_#t~mem465#1;call vhost_set_vring_#t~mem466#1 := read~int#14(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7164-3: assume !(-1 != vhost_set_vring_#t~mem465#1);havoc vhost_set_vring_#t~mem465#1;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := 0, 0; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10864: SUMMARY for call mutex_lock(ldv_mutex_lock_59_~ldv_func_arg1#1.base, ldv_mutex_lock_59_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6504-1: SUMMARY for call vhost_dev_cleanup(vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, 1); srcloc: null [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6504: call write~int#14(0, vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, 4);call write~$Pointer$#14(vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, 8);vhost_dev_reset_owner_#res#1 := 0; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9213: SUMMARY for call mutex_unlock(ldv_mutex_unlock_17_~ldv_func_arg1#1.base, ldv_mutex_unlock_17_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7231: call ULTIMATE.dealloc(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset);havoc vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset;#t~ret1240#1 := vhost_dev_ioctl_#res#1;havoc vhost_dev_ioctl_#t~ret481#1, vhost_dev_ioctl_#t~ret482#1, vhost_dev_ioctl_#t~switch483#1, vhost_dev_ioctl_#t~ret484#1, vhost_dev_ioctl_#t~ret485#1, vhost_dev_ioctl_#t~mem486#1, vhost_dev_ioctl_#t~mem487#1.base, vhost_dev_ioctl_#t~mem487#1.offset, vhost_dev_ioctl_#t~mem488#1.base, vhost_dev_ioctl_#t~mem488#1.offset, vhost_dev_ioctl_#t~ret489#1, vhost_dev_ioctl_#t~mem490#1, vhost_dev_ioctl_#t~switch491#1, vhost_dev_ioctl_#t~ret492#1.base, vhost_dev_ioctl_#t~ret492#1.offset, vhost_dev_ioctl_#t~ret493#1, vhost_dev_ioctl_#t~ret494#1, vhost_dev_ioctl_#t~mem495#1.base, vhost_dev_ioctl_#t~mem495#1.offset, vhost_dev_ioctl_#t~mem496#1.base, vhost_dev_ioctl_#t~mem496#1.offset, vhost_dev_ioctl_#t~mem497#1.base, vhost_dev_ioctl_#t~mem497#1.offset, vhost_dev_ioctl_#t~ret498#1.base, vhost_dev_ioctl_#t~ret498#1.offset, vhost_dev_ioctl_#t~mem499#1.base, vhost_dev_ioctl_#t~mem499#1.offset, vhost_dev_ioctl_#t~mem500#1.base, vhost_dev_ioctl_#t~mem500#1.offset, vhost_dev_ioctl_#t~mem501#1.base, vhost_dev_ioctl_#t~mem501#1.offset, vhost_dev_ioctl_#t~mem502#1.base, vhost_dev_ioctl_#t~mem502#1.offset, vhost_dev_ioctl_#t~mem503#1, vhost_dev_ioctl_#t~ret504#1, vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~ioctl#1, vhost_dev_ioctl_~arg#1, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset, vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset, vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset, vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset, vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, vhost_dev_ioctl_~r~1#1, vhost_dev_ioctl_~i~7#1, vhost_dev_ioctl_~fd~0#1, vhost_dev_ioctl_~tmp~35#1, vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset, vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~tmp___0~22#1, vhost_dev_ioctl_~__ret_gu~1#1, vhost_dev_ioctl_~__val_gu~1#1, vhost_dev_ioctl_~tmp___1~17#1.base, vhost_dev_ioctl_~tmp___1~17#1.offset, vhost_dev_ioctl_~tmp___2~14#1, vhost_dev_ioctl_~tmp___3~7#1.base, vhost_dev_ioctl_~tmp___3~7#1.offset;havoc vhost_dev_ioctl_#in~d#1.base, vhost_dev_ioctl_#in~d#1.offset, vhost_dev_ioctl_#in~ioctl#1, vhost_dev_ioctl_#in~arg#1;assume { :end_inline_vhost_dev_ioctl } true;assume -9223372036854775808 <= #t~ret1240#1 && #t~ret1240#1 <= 9223372036854775807;~tmp___5~12#1 := #t~ret1240#1;~r~13#1 := (if ~tmp___5~12#1 % 4294967296 <= 2147483647 then ~tmp___5~12#1 % 4294967296 else ~tmp___5~12#1 % 4294967296 - 4294967296); [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7165-1: SUMMARY for call vhost_set_vring_#t~ret464#1 := copy_from_user(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7165: vhost_set_vring_~tmp___13~0#1 := vhost_set_vring_#t~ret464#1; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9015: havoc kref_init_~kref#1.base, kref_init_~kref#1.offset;havoc kref_init_#in~kref#1.base, kref_init_#in~kref#1.offset;assume { :end_inline_kref_init } true; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6901: assume 0 == (vhost_set_memory_~newmem~0#1.base + vhost_set_memory_~newmem~0#1.offset) % 18446744073709551616;vhost_set_memory_#res#1 := -12;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6901: assume !(0 == (vhost_set_memory_~newmem~0#1.base + vhost_set_memory_~newmem~0#1.offset) % 18446744073709551616);vhost_set_memory_~__len~0#1 := vhost_set_memory_~size~0#1;assume { :begin_inline_#Ultimate.C_memcpy } true;#Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset, #Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset, #Ultimate.C_memcpy_size#1 := vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~__len~0#1;havoc #Ultimate.C_memcpy_#res#1.base, #Ultimate.C_memcpy_#res#1.offset;havoc #Ultimate.C_memcpy_#t~loopctr1311#1, #Ultimate.C_memcpy_#t~mem1312#1, #Ultimate.C_memcpy_#t~mem1313#1, #Ultimate.C_memcpy_#t~mem1314#1, #Ultimate.C_memcpy_#t~mem1315#1, #Ultimate.C_memcpy_#t~mem1316#1, #Ultimate.C_memcpy_#t~mem1317#1, #Ultimate.C_memcpy_#t~mem1318#1, #Ultimate.C_memcpy_#t~mem1319#1, #Ultimate.C_memcpy_#t~mem1320#1, #Ultimate.C_memcpy_#t~mem1321#1, #Ultimate.C_memcpy_#t~loopctr1322#1, #Ultimate.C_memcpy_#t~mem1323#1.base, #Ultimate.C_memcpy_#t~mem1323#1.offset;#Ultimate.C_memcpy_#t~loopctr1311#1 := 0; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7628: assume vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7628: assume !vhost_init_used_#t~switch550#1;vhost_init_used_#t~switch550#1 := vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7364: assume vhost_dev_ioctl_#t~switch483#1;assume { :begin_inline_vhost_set_vring } true;vhost_set_vring_#in~d#1.base, vhost_set_vring_#in~d#1.offset, vhost_set_vring_#in~ioctl#1, vhost_set_vring_#in~argp#1.base, vhost_set_vring_#in~argp#1.offset := vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296), vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset;havoc vhost_set_vring_#res#1;havoc vhost_set_vring_#t~switch402#1, vhost_set_vring_#t~mem403#1, vhost_set_vring_#t~mem404#1.base, vhost_set_vring_#t~mem404#1.offset, vhost_set_vring_#t~switch405#1, vhost_set_vring_#t~mem406#1.base, vhost_set_vring_#t~mem406#1.offset, vhost_set_vring_#t~ret407#1, vhost_set_vring_#t~mem408#1, vhost_set_vring_#t~mem409#1, vhost_set_vring_#t~short410#1, vhost_set_vring_#t~mem412#1, vhost_set_vring_#t~mem411#1, vhost_set_vring_#t~bitwise413#1, vhost_set_vring_#t~short414#1, vhost_set_vring_#t~mem415#1, vhost_set_vring_#t~mem416#1.base, vhost_set_vring_#t~mem416#1.offset, vhost_set_vring_#t~ret417#1, vhost_set_vring_#t~mem418#1, vhost_set_vring_#t~mem419#1, vhost_set_vring_#t~mem420#1, vhost_set_vring_#t~mem421#1, vhost_set_vring_#t~ret422#1, vhost_set_vring_#t~ret423#1, vhost_set_vring_#t~mem424#1, vhost_set_vring_#t~mem425#1, vhost_set_vring_#t~mem426#1, vhost_set_vring_#t~short427#1, vhost_set_vring_#t~mem428#1, vhost_set_vring_#t~short429#1, vhost_set_vring_#t~mem430#1.base, vhost_set_vring_#t~mem430#1.offset, vhost_set_vring_#t~mem431#1, vhost_set_vring_#t~mem432#1, vhost_set_vring_#t~mem433#1, vhost_set_vring_#t~mem434#1, vhost_set_vring_#t~ret435#1, vhost_set_vring_#t~mem436#1, vhost_set_vring_#t~mem437#1.base, vhost_set_vring_#t~mem437#1.offset, vhost_set_vring_#t~mem438#1, vhost_set_vring_#t~mem439#1, vhost_set_vring_#t~ret440#1, vhost_set_vring_#t~mem441#1, vhost_set_vring_#t~mem442#1, vhost_set_vring_#t~mem443#1, vhost_set_vring_#t~mem444#1, vhost_set_vring_#t~mem445#1, vhost_set_vring_#t~ret446#1, vhost_set_vring_#t~mem447#1, vhost_set_vring_#t~mem448#1, vhost_set_vring_#t~ret449#1.base, vhost_set_vring_#t~ret449#1.offset, vhost_set_vring_#t~ret450#1, vhost_set_vring_#t~ret451#1, vhost_set_vring_#t~mem452#1.base, vhost_set_vring_#t~mem452#1.offset, vhost_set_vring_#t~mem453#1.base, vhost_set_vring_#t~mem453#1.offset, vhost_set_vring_#t~ret454#1, vhost_set_vring_#t~mem455#1, vhost_set_vring_#t~mem456#1, vhost_set_vring_#t~ret457#1.base, vhost_set_vring_#t~ret457#1.offset, vhost_set_vring_#t~ret458#1, vhost_set_vring_#t~ret459#1, vhost_set_vring_#t~mem460#1.base, vhost_set_vring_#t~mem460#1.offset, vhost_set_vring_#t~mem461#1.base, vhost_set_vring_#t~mem461#1.offset, vhost_set_vring_#t~mem462#1.base, vhost_set_vring_#t~mem462#1.offset, vhost_set_vring_#t~ret463#1.base, vhost_set_vring_#t~ret463#1.offset, vhost_set_vring_#t~ret464#1, vhost_set_vring_#t~mem465#1, vhost_set_vring_#t~mem466#1, vhost_set_vring_#t~ret467#1.base, vhost_set_vring_#t~ret467#1.offset, vhost_set_vring_#t~ret468#1, vhost_set_vring_#t~ret469#1, vhost_set_vring_#t~mem470#1.base, vhost_set_vring_#t~mem470#1.offset, vhost_set_vring_#t~mem471#1.base, vhost_set_vring_#t~mem471#1.offset, vhost_set_vring_#t~mem472#1.base, vhost_set_vring_#t~mem472#1.offset, vhost_set_vring_#t~ret473#1.base, vhost_set_vring_#t~ret473#1.offset, vhost_set_vring_#t~mem474#1.base, vhost_set_vring_#t~mem474#1.offset, vhost_set_vring_#t~short475#1, vhost_set_vring_#t~mem476#1.base, vhost_set_vring_#t~mem476#1.offset, vhost_set_vring_#t~short477#1, vhost_set_vring_#t~mem478#1.base, vhost_set_vring_#t~mem478#1.offset, vhost_set_vring_#t~mem479#1.base, vhost_set_vring_#t~mem479#1.offset, vhost_set_vring_#t~short480#1, vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset, vhost_set_vring_~ioctl#1, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset, vhost_set_vring_~pollstart~0#1, vhost_set_vring_~pollstop~0#1, vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset, vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset, vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset, vhost_set_vring_~idx~0#1, vhost_set_vring_~r~0#1, vhost_set_vring_~__ret_gu~0#1, vhost_set_vring_~__val_gu~0#1, vhost_set_vring_~tmp~34#1, vhost_set_vring_~tmp___0~21#1, vhost_set_vring_~tmp___1~16#1, vhost_set_vring_~tmp___2~13#1, vhost_set_vring_~tmp___3~6#1, vhost_set_vring_~tmp___4~4#1, vhost_set_vring_~tmp___5~4#1, vhost_set_vring_~tmp___6~2#1.base, vhost_set_vring_~tmp___6~2#1.offset, vhost_set_vring_~tmp___7~1#1, vhost_set_vring_~tmp___8~1#1.base, vhost_set_vring_~tmp___8~1#1.offset, vhost_set_vring_~tmp___9~1#1, vhost_set_vring_~tmp___10~1#1.base, vhost_set_vring_~tmp___10~1#1.offset, vhost_set_vring_~tmp___11~0#1, vhost_set_vring_~tmp___12~0#1.base, vhost_set_vring_~tmp___12~0#1.offset, vhost_set_vring_~tmp___13~0#1, vhost_set_vring_~tmp___14~0#1.base, vhost_set_vring_~tmp___14~0#1.offset, vhost_set_vring_~tmp___15~0#1, vhost_set_vring_~tmp___16~0#1.base, vhost_set_vring_~tmp___16~0#1.offset;vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset := vhost_set_vring_#in~d#1.base, vhost_set_vring_#in~d#1.offset;vhost_set_vring_~ioctl#1 := vhost_set_vring_#in~ioctl#1;vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset := vhost_set_vring_#in~argp#1.base, vhost_set_vring_#in~argp#1.offset;havoc vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset;havoc vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset;havoc vhost_set_vring_~pollstart~0#1;havoc vhost_set_vring_~pollstop~0#1;havoc vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset;havoc vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset;havoc vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset;call vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset := #Ultimate.allocOnStack(8);call vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset := #Ultimate.allocOnStack(8);call vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset := #Ultimate.allocOnStack(40);havoc vhost_set_vring_~idx~0#1;havoc vhost_set_vring_~r~0#1;havoc vhost_set_vring_~__ret_gu~0#1;havoc vhost_set_vring_~__val_gu~0#1;havoc vhost_set_vring_~tmp~34#1;havoc vhost_set_vring_~tmp___0~21#1;havoc vhost_set_vring_~tmp___1~16#1;havoc vhost_set_vring_~tmp___2~13#1;havoc vhost_set_vring_~tmp___3~6#1;havoc vhost_set_vring_~tmp___4~4#1;havoc vhost_set_vring_~tmp___5~4#1;havoc vhost_set_vring_~tmp___6~2#1.base, vhost_set_vring_~tmp___6~2#1.offset;havoc vhost_set_vring_~tmp___7~1#1;havoc vhost_set_vring_~tmp___8~1#1.base, vhost_set_vring_~tmp___8~1#1.offset;havoc vhost_set_vring_~tmp___9~1#1;havoc vhost_set_vring_~tmp___10~1#1.base, vhost_set_vring_~tmp___10~1#1.offset;havoc vhost_set_vring_~tmp___11~0#1;havoc vhost_set_vring_~tmp___12~0#1.base, vhost_set_vring_~tmp___12~0#1.offset;havoc vhost_set_vring_~tmp___13~0#1;havoc vhost_set_vring_~tmp___14~0#1.base, vhost_set_vring_~tmp___14~0#1.offset;havoc vhost_set_vring_~tmp___15~0#1;havoc vhost_set_vring_~tmp___16~0#1.base, vhost_set_vring_~tmp___16~0#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := 0, 0;vhost_set_vring_~pollstart~0#1 := 0;vhost_set_vring_~pollstop~0#1 := 0;vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset := 0, 0;vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset := vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7364: assume !vhost_dev_ioctl_#t~switch483#1;havoc vhost_dev_ioctl_#t~switch483#1;havoc vhost_dev_ioctl_#t~ret484#1;havoc vhost_dev_ioctl_#t~ret485#1;havoc vhost_dev_ioctl_#t~mem487#1.base, vhost_dev_ioctl_#t~mem487#1.offset;havoc vhost_dev_ioctl_#t~switch491#1;havoc vhost_dev_ioctl_#t~ret493#1;havoc vhost_dev_ioctl_#t~mem500#1.base, vhost_dev_ioctl_#t~mem500#1.offset;havoc vhost_dev_ioctl_#t~mem501#1.base, vhost_dev_ioctl_#t~mem501#1.offset;havoc vhost_dev_ioctl_#t~mem502#1.base, vhost_dev_ioctl_#t~mem502#1.offset;havoc vhost_dev_ioctl_#t~ret504#1;havoc vhost_dev_ioctl_#t~switch483#1;havoc vhost_dev_ioctl_#t~ret484#1;havoc vhost_dev_ioctl_#t~ret485#1;havoc vhost_dev_ioctl_#t~mem487#1.base, vhost_dev_ioctl_#t~mem487#1.offset;havoc vhost_dev_ioctl_#t~switch491#1;havoc vhost_dev_ioctl_#t~ret493#1;havoc vhost_dev_ioctl_#t~mem500#1.base, vhost_dev_ioctl_#t~mem500#1.offset;havoc vhost_dev_ioctl_#t~mem501#1.base, vhost_dev_ioctl_#t~mem501#1.offset;havoc vhost_dev_ioctl_#t~mem502#1.base, vhost_dev_ioctl_#t~mem502#1.offset;havoc vhost_dev_ioctl_#t~ret504#1;vhost_dev_ioctl_#res#1 := vhost_dev_ioctl_~r~1#1;call ULTIMATE.dealloc(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset);havoc vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10139: call vhost_net_enable_vq_#t~mem1154#1.base, vhost_net_enable_vq_#t~mem1154#1.offset := read~$Pointer$#14(vhost_net_enable_vq_~vq#1.base, 17072 + vhost_net_enable_vq_~vq#1.offset, 8);vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset := vhost_net_enable_vq_#t~mem1154#1.base, vhost_net_enable_vq_#t~mem1154#1.offset;havoc vhost_net_enable_vq_#t~mem1154#1.base, vhost_net_enable_vq_#t~mem1154#1.offset; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9016: call write~$Pointer$#14(vhost_ubuf_alloc_~vq#1.base, vhost_ubuf_alloc_~vq#1.offset, vhost_ubuf_alloc_~ubufs~1#1.base, 88 + vhost_ubuf_alloc_~ubufs~1#1.offset, 8);vhost_ubuf_alloc_#res#1.base, vhost_ubuf_alloc_#res#1.offset := vhost_ubuf_alloc_~ubufs~1#1.base, vhost_ubuf_alloc_~ubufs~1#1.offset;call ULTIMATE.dealloc(vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset);havoc vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9016-1: SUMMARY for call __init_waitqueue_head(vhost_ubuf_alloc_~ubufs~1#1.base, 4 + vhost_ubuf_alloc_~ubufs~1#1.offset, 171, 0, vhost_ubuf_alloc_~#__key~2#1.base, vhost_ubuf_alloc_~#__key~2#1.offset); srcloc: null [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10470-1: vhost_net_reset_owner_#res#1 := vhost_net_reset_owner_~err~3#1;call ULTIMATE.dealloc(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset);havoc vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset;call ULTIMATE.dealloc(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset);havoc vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10140: assume 0 == (vhost_net_enable_vq_~sock~2#1.base + vhost_net_enable_vq_~sock~2#1.offset) % 18446744073709551616; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10140: assume !(0 == (vhost_net_enable_vq_~sock~2#1.base + vhost_net_enable_vq_~sock~2#1.offset) % 18446744073709551616); [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102: assume (vhost_set_vring_#t~mem452#1.base + vhost_set_vring_#t~mem452#1.offset) % 18446744073709551616 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem452#1.base, vhost_set_vring_#t~mem452#1.offset;call vhost_set_vring_#t~mem453#1.base, vhost_set_vring_#t~mem453#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 192 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_#t~mem453#1.base, vhost_set_vring_#t~mem453#1.offset;havoc vhost_set_vring_#t~mem453#1.base, vhost_set_vring_#t~mem453#1.offset;vhost_set_vring_~pollstop~0#1 := (if 0 == (if 0 != (vhost_set_vring_~filep~0#1.base + vhost_set_vring_~filep~0#1.offset) % 18446744073709551616 then 1 else 0) then 0 else 1);vhost_set_vring_~tmp___8~1#1.base, vhost_set_vring_~tmp___8~1#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset;call write~$Pointer$#14(vhost_set_vring_~tmp___8~1#1.base, vhost_set_vring_~tmp___8~1#1.offset, vhost_set_vring_~vq~0#1.base, 192 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~pollstart~0#1 := (if 0 == (if 0 != (vhost_set_vring_~tmp___8~1#1.base + vhost_set_vring_~tmp___8~1#1.offset) % 18446744073709551616 then 1 else 0) then 0 else 1); [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102: assume !((vhost_set_vring_#t~mem452#1.base + vhost_set_vring_#t~mem452#1.offset) % 18446744073709551616 != (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem452#1.base, vhost_set_vring_#t~mem452#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-4: assume vhost_set_vring_#t~switch405#1; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-4: assume !vhost_set_vring_#t~switch405#1;vhost_set_vring_#t~switch405#1 := vhost_set_vring_#t~switch405#1 || 1074310945 == vhost_set_vring_~ioctl#1; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-3: assume 0 != vhost_set_vring_~tmp___5~4#1 % 18446744073709551616;vhost_set_vring_~r~0#1 := -14; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-3: assume !(0 != vhost_set_vring_~tmp___5~4#1 % 18446744073709551616);call vhost_set_vring_#t~mem447#1 := read~int#14(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-2: assume -1 != vhost_set_vring_#t~mem447#1;havoc vhost_set_vring_#t~mem447#1;call vhost_set_vring_#t~mem448#1 := read~int#14(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-2: assume !(-1 != vhost_set_vring_#t~mem447#1);havoc vhost_set_vring_#t~mem447#1;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := 0, 0; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-1: assume 0 != vhost_set_vring_~tmp___7~1#1; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7102-1: assume !(0 != vhost_set_vring_~tmp___7~1#1);call vhost_set_vring_#t~mem452#1.base, vhost_set_vring_#t~mem452#1.offset := read~$Pointer$#14(vhost_set_vring_~vq~0#1.base, 192 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7631: assume vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7631: assume !vhost_init_used_#t~switch550#1;vhost_init_used_#t~switch550#1 := vhost_init_used_#t~switch550#1; [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7103-1: SUMMARY for call vhost_set_vring_#t~ret446#1 := copy_from_user(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7103: vhost_set_vring_~tmp___5~4#1 := vhost_set_vring_#t~ret446#1; [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7037-1: SUMMARY for call vhost_set_vring_#t~ret417#1 := copy_from_user(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7037: vhost_set_vring_~tmp___0~21#1 := vhost_set_vring_#t~ret417#1; [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11530: havoc fget_#t~ret1285#1.base, fget_#t~ret1285#1.offset;get_tap_socket_#t~ret1187#1.base, get_tap_socket_#t~ret1187#1.offset := fget_#res#1.base, fget_#res#1.offset;havoc fget_#t~ret1285#1.base, fget_#t~ret1285#1.offset, fget_~arg0#1;havoc fget_#in~arg0#1;assume { :end_inline_fget } true;get_tap_socket_~tmp~65#1.base, get_tap_socket_~tmp~65#1.offset := get_tap_socket_#t~ret1187#1.base, get_tap_socket_#t~ret1187#1.offset;havoc get_tap_socket_#t~ret1187#1.base, get_tap_socket_#t~ret1187#1.offset;get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset := get_tap_socket_~tmp~65#1.base, get_tap_socket_~tmp~65#1.offset; [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11530-2: fget_#res#1.base, fget_#res#1.offset := fget_#t~ret1285#1.base, fget_#t~ret1285#1.offset;havoc fget_#t~ret1285#1.base, fget_#t~ret1285#1.offset; [2025-02-08 02:31:18,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11530-3: SUMMARY for call fget_#t~ret1285#1.base, fget_#t~ret1285#1.offset := ldv_malloc(340); srcloc: null [2025-02-08 02:31:18,094 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11464: havoc #t~nondet1276; [2025-02-08 02:31:18,140 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9057: SUMMARY for call finish_wait(~ubufs.base, 4 + ~ubufs.offset, ~#__wait~1.base, ~#__wait~1.offset); srcloc: null [2025-02-08 02:31:18,140 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint vhost_ubuf_put_and_waitFINAL: assume true; [2025-02-08 02:31:18,140 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9059: call ULTIMATE.dealloc(~#__wait~1.base, ~#__wait~1.offset);havoc ~#__wait~1.base, ~#__wait~1.offset; [2025-02-08 02:31:18,140 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9059-1: SUMMARY for call kfree(~ubufs.base, ~ubufs.offset); srcloc: null [2025-02-08 02:31:18,140 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9031: call ULTIMATE.dealloc(~#__wait~1.base, ~#__wait~1.offset);havoc ~#__wait~1.base, ~#__wait~1.offset; [2025-02-08 02:31:18,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11618: havoc #t~nondet1298; [2025-02-08 02:31:18,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5729: havoc warn_slowpath_fmt_~arg0#1.base, warn_slowpath_fmt_~arg0#1.offset, warn_slowpath_fmt_~arg1#1, warn_slowpath_fmt_~arg2#1.base, warn_slowpath_fmt_~arg2#1.offset;havoc warn_slowpath_fmt_#in~arg0#1.base, warn_slowpath_fmt_#in~arg0#1.offset, warn_slowpath_fmt_#in~arg1#1, warn_slowpath_fmt_#in~arg2#1.base, warn_slowpath_fmt_#in~arg2#1.offset;assume { :end_inline_warn_slowpath_fmt } true; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11580: havoc memcpy_fromiovec_#t~nondet1293#1;get_indirect_#t~ret602#1 := memcpy_fromiovec_#res#1;havoc memcpy_fromiovec_#t~nondet1293#1, memcpy_fromiovec_~arg0#1.base, memcpy_fromiovec_~arg0#1.offset, memcpy_fromiovec_~arg1#1.base, memcpy_fromiovec_~arg1#1.offset, memcpy_fromiovec_~arg2#1;havoc memcpy_fromiovec_#in~arg0#1.base, memcpy_fromiovec_#in~arg0#1.offset, memcpy_fromiovec_#in~arg1#1.base, memcpy_fromiovec_#in~arg1#1.offset, memcpy_fromiovec_#in~arg2#1;assume { :end_inline_memcpy_fromiovec } true;assume -2147483648 <= get_indirect_#t~ret602#1 && get_indirect_#t~ret602#1 <= 2147483647;get_indirect_~tmp___8~2#1 := get_indirect_#t~ret602#1;havoc get_indirect_#t~mem601#1.base, get_indirect_#t~mem601#1.offset;havoc get_indirect_#t~ret602#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7864-1: SUMMARY for call get_indirect_#t~ret605#1 := ldv__builtin_expect((if get_indirect_#t~mem604#1 % 256 % 18446744073709551616 <= 9223372036854775807 then get_indirect_#t~mem604#1 % 256 % 18446744073709551616 else get_indirect_#t~mem604#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7864: assume -9223372036854775808 <= get_indirect_#t~ret605#1 && get_indirect_#t~ret605#1 <= 9223372036854775807;get_indirect_~tmp___7~2#1 := get_indirect_#t~ret605#1;havoc get_indirect_#t~mem604#1;havoc get_indirect_#t~ret605#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7947-1: SUMMARY for call get_indirect_#t~ret647#1 := eventfd_signal(get_indirect_#t~mem646#1.base, get_indirect_#t~mem646#1.offset, 1); srcloc: null [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7914: assume 0 != (get_indirect_#t~mem628#1.base + get_indirect_#t~mem628#1.offset) % 18446744073709551616;havoc get_indirect_#t~mem628#1.base, get_indirect_#t~mem628#1.offset;call get_indirect_#t~mem629#1.base, get_indirect_#t~mem629#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7914: assume !(0 != (get_indirect_#t~mem628#1.base + get_indirect_#t~mem628#1.offset) % 18446744073709551616);havoc get_indirect_#t~mem628#1.base, get_indirect_#t~mem628#1.offset; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7947: havoc get_indirect_#t~mem646#1.base, get_indirect_#t~mem646#1.offset;havoc get_indirect_#t~ret647#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7914-1: call get_indirect_#t~mem628#1.base, get_indirect_#t~mem628#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7898: assume -2147483648 <= get_indirect_#t~ret623#1 && get_indirect_#t~ret623#1 <= 2147483647;get_indirect_~ret~4#1 := get_indirect_#t~ret623#1;havoc get_indirect_#t~mem621#1;havoc get_indirect_#t~mem622#1;havoc get_indirect_#t~ret623#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7898-1: SUMMARY for call get_indirect_#t~ret623#1 := translate_desc(get_indirect_~dev#1.base, get_indirect_~dev#1.offset, get_indirect_#t~mem621#1, get_indirect_#t~mem622#1, get_indirect_~iov#1.base, get_indirect_~iov#1.offset + 16 * (if get_indirect_~iov_count~0#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_indirect_~iov_count~0#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else get_indirect_~iov_count~0#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), (if (get_indirect_~iov_size#1 - get_indirect_~iov_count~0#1) % 4294967296 % 4294967296 <= 2147483647 then (get_indirect_~iov_size#1 - get_indirect_~iov_count~0#1) % 4294967296 % 4294967296 else (get_indirect_~iov_size#1 - get_indirect_~iov_count~0#1) % 4294967296 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7865: assume 0 != get_indirect_~tmp___7~2#1;call get_indirect_#t~mem606#1 := read~int#14(get_indirect_~indirect#1.base, get_indirect_~indirect#1.offset, 8); [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7865: assume !(0 != get_indirect_~tmp___7~2#1); [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7915-1: SUMMARY for call get_indirect_#t~ret630#1 := eventfd_signal(get_indirect_#t~mem629#1.base, get_indirect_#t~mem629#1.offset, 1); srcloc: null [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7915: havoc get_indirect_#t~mem629#1.base, get_indirect_#t~mem629#1.offset;havoc get_indirect_#t~ret630#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7866: assume -2147483648 <= get_indirect_#t~ret607#1 && get_indirect_#t~ret607#1 <= 2147483647;havoc get_indirect_#t~mem606#1;havoc get_indirect_#t~ret607#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7932-1: SUMMARY for call get_indirect_#t~ret641#1 := ldv__builtin_expect((if 0 != get_indirect_#t~mem640#1 % 4294967296 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7932: assume -9223372036854775808 <= get_indirect_#t~ret641#1 && get_indirect_#t~ret641#1 <= 9223372036854775807;get_indirect_~tmp___16~1#1 := get_indirect_#t~ret641#1;havoc get_indirect_#t~mem640#1;havoc get_indirect_#t~ret641#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5785: assume -9223372036854775808 <= __copy_from_user_#t~ret133#1 && __copy_from_user_#t~ret133#1 <= 9223372036854775807;__copy_from_user_~tmp___0~5#1 := __copy_from_user_#t~ret133#1; [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7866-1: SUMMARY for call get_indirect_#t~ret607#1 := __dynamic_pr_debug(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset, 50, 0); srcloc: null [2025-02-08 02:31:19,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5785-1: SUMMARY for call __copy_from_user_#t~ret133#1 := ldv__builtin_expect((if 0 != __copy_from_user_~ret~1#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7900-1: SUMMARY for call get_indirect_#t~ret624#1 := ldv__builtin_expect((if get_indirect_~ret~4#1 < 0 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7900: assume -9223372036854775808 <= get_indirect_#t~ret624#1 && get_indirect_#t~ret624#1 <= 9223372036854775807;get_indirect_~tmp___13~1#1 := get_indirect_#t~ret624#1;havoc get_indirect_#t~ret624#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7933: assume 0 != get_indirect_~tmp___16~1#1;call write~$Pointer$#15(61, 0, get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset, 8);call write~$Pointer$#15(62, 0, get_indirect_~#descriptor___6~0#1.base, 8 + get_indirect_~#descriptor___6~0#1.offset, 8);call write~$Pointer$#15(63, 0, get_indirect_~#descriptor___6~0#1.base, 16 + get_indirect_~#descriptor___6~0#1.offset, 8);call write~$Pointer$#15(64, 0, get_indirect_~#descriptor___6~0#1.base, 24 + get_indirect_~#descriptor___6~0#1.offset, 8);call write~int#15(1230, get_indirect_~#descriptor___6~0#1.base, 32 + get_indirect_~#descriptor___6~0#1.offset, 4);call write~int#15(0, get_indirect_~#descriptor___6~0#1.base, 36 + get_indirect_~#descriptor___6~0#1.offset, 1);call get_indirect_#t~mem642#1 := read~int#15(get_indirect_~#descriptor___6~0#1.base, 36 + get_indirect_~#descriptor___6~0#1.offset, 1); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7933: assume !(0 != get_indirect_~tmp___16~1#1);call get_indirect_#t~mem648#1 := read~int#8(get_indirect_~out_num#1.base, get_indirect_~out_num#1.offset, 4);call write~int#8(get_indirect_#t~mem648#1 + get_indirect_~ret~4#1, get_indirect_~out_num#1.base, get_indirect_~out_num#1.offset, 4);havoc get_indirect_#t~mem648#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7950-1: get_indirect_#res#1 := -22;call ULTIMATE.dealloc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset);havoc get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset);havoc get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset);havoc get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset);havoc get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset);havoc get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset);havoc get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset);havoc get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset);havoc get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset);havoc get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967: call ULTIMATE.dealloc(~#desc~1#1.base, ~#desc~1#1.offset);havoc ~#desc~1#1.base, ~#desc~1#1.offset;call ULTIMATE.dealloc(~#descriptor~1#1.base, ~#descriptor~1#1.offset);havoc ~#descriptor~1#1.base, ~#descriptor~1#1.offset;call ULTIMATE.dealloc(~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset);havoc ~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset;call ULTIMATE.dealloc(~#descriptor___1~1#1.base, ~#descriptor___1~1#1.offset);havoc ~#descriptor___1~1#1.base, ~#descriptor___1~1#1.offset;call ULTIMATE.dealloc(~#descriptor___2~1#1.base, ~#descriptor___2~1#1.offset);havoc ~#descriptor___2~1#1.base, ~#descriptor___2~1#1.offset;call ULTIMATE.dealloc(~#descriptor___3~1#1.base, ~#descriptor___3~1#1.offset);havoc ~#descriptor___3~1#1.base, ~#descriptor___3~1#1.offset;call ULTIMATE.dealloc(~#descriptor___4~1#1.base, ~#descriptor___4~1#1.offset);havoc ~#descriptor___4~1#1.base, ~#descriptor___4~1#1.offset;call ULTIMATE.dealloc(~#descriptor___5~1#1.base, ~#descriptor___5~1#1.offset);havoc ~#descriptor___5~1#1.base, ~#descriptor___5~1#1.offset;call ULTIMATE.dealloc(~#descriptor___6~1#1.base, ~#descriptor___6~1#1.offset);havoc ~#descriptor___6~1#1.base, ~#descriptor___6~1#1.offset;call ULTIMATE.dealloc(~#descriptor___7~0#1.base, ~#descriptor___7~0#1.offset);havoc ~#descriptor___7~0#1.base, ~#descriptor___7~0#1.offset;call ULTIMATE.dealloc(~#descriptor___8~0#1.base, ~#descriptor___8~0#1.offset);havoc ~#descriptor___8~0#1.base, ~#descriptor___8~0#1.offset; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7901: assume 0 != get_indirect_~tmp___13~1#1;call write~$Pointer$#15(56, 0, get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset, 8);call write~$Pointer$#15(57, 0, get_indirect_~#descriptor___5~0#1.base, 8 + get_indirect_~#descriptor___5~0#1.offset, 8);call write~$Pointer$#15(58, 0, get_indirect_~#descriptor___5~0#1.base, 16 + get_indirect_~#descriptor___5~0#1.offset, 8);call write~$Pointer$#15(59, 0, get_indirect_~#descriptor___5~0#1.base, 24 + get_indirect_~#descriptor___5~0#1.offset, 8);call write~int#15(1214, get_indirect_~#descriptor___5~0#1.base, 32 + get_indirect_~#descriptor___5~0#1.offset, 4);call write~int#15(0, get_indirect_~#descriptor___5~0#1.base, 36 + get_indirect_~#descriptor___5~0#1.offset, 1);call get_indirect_#t~mem625#1 := read~int#15(get_indirect_~#descriptor___5~0#1.base, 36 + get_indirect_~#descriptor___5~0#1.offset, 1); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7901: assume !(0 != get_indirect_~tmp___13~1#1);call get_indirect_#t~mem631#1 := read~int#14(get_indirect_~#desc~0#1.base, 12 + get_indirect_~#desc~0#1.offset, 2); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch132#1;__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch132#1;__copy_from_user_#t~switch132#1 := __copy_from_user_#t~switch132#1 || 8 == __copy_from_user_~size#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7885-1: SUMMARY for call get_indirect_#t~ret615#1 := ldv__builtin_expect((if get_indirect_#t~mem614#1 % 256 % 18446744073709551616 <= 9223372036854775807 then get_indirect_#t~mem614#1 % 256 % 18446744073709551616 else get_indirect_#t~mem614#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7918-1: get_indirect_#res#1 := get_indirect_~ret~4#1;call ULTIMATE.dealloc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset);havoc get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset);havoc get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset);havoc get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset);havoc get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset);havoc get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset);havoc get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset);havoc get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset);havoc get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset);havoc get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7885: assume -9223372036854775808 <= get_indirect_#t~ret615#1 && get_indirect_#t~ret615#1 <= 9223372036854775807;get_indirect_~tmp___10~2#1 := get_indirect_#t~ret615#1;havoc get_indirect_#t~mem614#1;havoc get_indirect_#t~ret615#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7886: assume 0 != get_indirect_~tmp___10~2#1;call get_indirect_#t~mem616#1 := read~int#14(get_indirect_~indirect#1.base, get_indirect_~indirect#1.offset, 8); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7886: assume !(0 != get_indirect_~tmp___10~2#1); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7870: assume 0 != (get_indirect_#t~mem608#1.base + get_indirect_#t~mem608#1.offset) % 18446744073709551616;havoc get_indirect_#t~mem608#1.base, get_indirect_#t~mem608#1.offset;call get_indirect_#t~mem609#1.base, get_indirect_#t~mem609#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7870: assume !(0 != (get_indirect_#t~mem608#1.base + get_indirect_#t~mem608#1.offset) % 18446744073709551616);havoc get_indirect_#t~mem608#1.base, get_indirect_#t~mem608#1.offset; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8250: assume -9223372036854775808 <= #t~ret729#1 && #t~ret729#1 <= 9223372036854775807;~tmp___17~0#1 := #t~ret729#1;havoc #t~mem728#1;havoc #t~ret729#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7870-1: call get_indirect_#t~mem608#1.base, get_indirect_#t~mem608#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8250-1: SUMMARY for call #t~ret729#1 := ldv__builtin_expect((if #t~mem728#1 % 256 % 18446744073709551616 <= 9223372036854775807 then #t~mem728#1 % 256 % 18446744073709551616 else #t~mem728#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7887-1: SUMMARY for call get_indirect_#t~ret617#1 := __dynamic_pr_debug(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset, 55, 0); srcloc: null [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7887: assume -2147483648 <= get_indirect_#t~ret617#1 && get_indirect_#t~ret617#1 <= 2147483647;havoc get_indirect_#t~mem616#1;havoc get_indirect_#t~ret617#1; [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7871-1: SUMMARY for call get_indirect_#t~ret610#1 := eventfd_signal(get_indirect_#t~mem609#1.base, get_indirect_#t~mem609#1.offset, 1); srcloc: null [2025-02-08 02:31:19,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7871: havoc get_indirect_#t~mem609#1.base, get_indirect_#t~mem609#1.offset;havoc get_indirect_#t~ret610#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8251: assume 0 != ~tmp___17~0#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8251: assume !(0 != ~tmp___17~0#1); [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921-3: assume 2 == (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296);get_indirect_#t~bitwise632#1 := (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921-3: assume !(2 == (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch132#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch132#1;havoc __copy_from_user_#t~switch132#1;havoc __copy_from_user_#t~ret133#1;havoc __copy_from_user_#t~ret134#1;havoc __copy_from_user_#t~ret135#1;havoc __copy_from_user_#t~switch132#1;havoc __copy_from_user_#t~ret133#1;havoc __copy_from_user_#t~ret134#1;havoc __copy_from_user_#t~ret135#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921-2: havoc get_indirect_#t~bitwise632#1;assume (((((if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296) < 0 || get_indirect_#t~bitwise632#1 <= (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296)) && get_indirect_#t~bitwise632#1 <= 2) && get_indirect_#t~bitwise632#1 >= 0) && ((if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296) >= 0 || get_indirect_#t~bitwise632#1 > 2 + (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296))) && get_indirect_#t~bitwise632#1 >= -2147483648; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921-1: [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921: assume 0 != get_indirect_#t~bitwise632#1;havoc get_indirect_#t~mem631#1;havoc get_indirect_#t~bitwise632#1;call get_indirect_#t~mem633#1 := read~int#3(get_indirect_~in_num#1.base, get_indirect_~in_num#1.offset, 4);call write~int#3(get_indirect_#t~mem633#1 + get_indirect_~ret~4#1, get_indirect_~in_num#1.base, get_indirect_~in_num#1.offset, 4);havoc get_indirect_#t~mem633#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921: assume !(0 != get_indirect_#t~bitwise632#1);havoc get_indirect_#t~mem631#1;havoc get_indirect_#t~bitwise632#1;call get_indirect_#t~mem640#1 := read~int#3(get_indirect_~in_num#1.base, get_indirect_~in_num#1.offset, 4); [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921-4: assume 0 == (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296);get_indirect_#t~bitwise632#1 := 0; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7921-4: assume !(0 == (if get_indirect_#t~mem631#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem631#1 % 65536 % 4294967296 else get_indirect_#t~mem631#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8252-1: SUMMARY for call #t~ret730#1 := __dynamic_pr_debug(~#descriptor___6~1#1.base, ~#descriptor___6~1#1.offset, 105, 0); srcloc: null [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8252: assume -2147483648 <= #t~ret730#1 && #t~ret730#1 <= 2147483647;havoc #t~ret730#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7955-1: SUMMARY for call get_indirect_#t~ret649#1 := next_desc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset); srcloc: null [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7955: get_indirect_~i~10#1 := get_indirect_#t~ret649#1;havoc get_indirect_#t~ret649#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5808-1: SUMMARY for call __copy_from_user_#t~ret135#1 := copy_user_generic(__copy_from_user_~dst#1.base, __copy_from_user_~dst#1.offset, __copy_from_user_~src#1.base, __copy_from_user_~src#1.offset, __copy_from_user_~size#1); srcloc: null [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7856-1: SUMMARY for call get_indirect_#t~ret603#1 := ldv__builtin_expect((if 0 != get_indirect_~tmp___8~2#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7856: assume -9223372036854775808 <= get_indirect_#t~ret603#1 && get_indirect_#t~ret603#1 <= 9223372036854775807;get_indirect_~tmp___9~2#1 := get_indirect_#t~ret603#1;havoc get_indirect_#t~ret603#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5808: __copy_from_user_~tmp___2~3#1 := __copy_from_user_#t~ret135#1;__copy_from_user_#res#1 := (if __copy_from_user_~tmp___2~3#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3#1 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3#1 % 18446744073709551616 % 4294967296 - 4294967296); [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8088: havoc #t~mem672#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7923-1: SUMMARY for call get_indirect_#t~ret634#1 := ldv__builtin_expect((if 0 != (get_indirect_~log#1.base + get_indirect_~log#1.offset) % 18446744073709551616 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7923: assume -9223372036854775808 <= get_indirect_#t~ret634#1 && get_indirect_#t~ret634#1 <= 9223372036854775807;get_indirect_~tmp___14~1#1 := get_indirect_#t~ret634#1;havoc get_indirect_#t~ret634#1; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7956: assume 4294967295 != get_indirect_~i~10#1 % 4294967296; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7956: assume !(4294967295 != get_indirect_~i~10#1 % 4294967296);get_indirect_#res#1 := 0;call ULTIMATE.dealloc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset);havoc get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset);havoc get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset);havoc get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset);havoc get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset);havoc get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset);havoc get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset);havoc get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset);havoc get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset);havoc get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset; [2025-02-08 02:31:19,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7857: assume 0 != get_indirect_~tmp___9~2#1;call write~$Pointer$#15(46, 0, get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset, 8);call write~$Pointer$#15(47, 0, get_indirect_~#descriptor___3~0#1.base, 8 + get_indirect_~#descriptor___3~0#1.offset, 8);call write~$Pointer$#15(48, 0, get_indirect_~#descriptor___3~0#1.base, 16 + get_indirect_~#descriptor___3~0#1.offset, 8);call write~$Pointer$#15(49, 0, get_indirect_~#descriptor___3~0#1.base, 24 + get_indirect_~#descriptor___3~0#1.offset, 8);call write~int#15(1201, get_indirect_~#descriptor___3~0#1.base, 32 + get_indirect_~#descriptor___3~0#1.offset, 4);call write~int#15(0, get_indirect_~#descriptor___3~0#1.base, 36 + get_indirect_~#descriptor___3~0#1.offset, 1);call get_indirect_#t~mem604#1 := read~int#15(get_indirect_~#descriptor___3~0#1.base, 36 + get_indirect_~#descriptor___3~0#1.offset, 1); [2025-02-08 02:31:19,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7857: assume !(0 != get_indirect_~tmp___9~2#1);call get_indirect_#t~mem611#1 := read~int#14(get_indirect_~#desc~0#1.base, 12 + get_indirect_~#desc~0#1.offset, 2); [2025-02-08 02:31:19,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch132#1;__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch132#1;__copy_from_user_#t~switch132#1 := __copy_from_user_#t~switch132#1 || 10 == __copy_from_user_~size#1; [2025-02-08 02:31:19,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7940-1: SUMMARY for call get_indirect_#t~ret643#1 := ldv__builtin_expect((if get_indirect_#t~mem642#1 % 256 % 18446744073709551616 <= 9223372036854775807 then get_indirect_#t~mem642#1 % 256 % 18446744073709551616 else get_indirect_#t~mem642#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:19,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7940: assume -9223372036854775808 <= get_indirect_#t~ret643#1 && get_indirect_#t~ret643#1 <= 9223372036854775807;get_indirect_~tmp___15~1#1 := get_indirect_#t~ret643#1;havoc get_indirect_#t~mem642#1;havoc get_indirect_#t~ret643#1; [2025-02-08 02:31:19,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7874-1: get_indirect_#res#1 := -22;call ULTIMATE.dealloc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset);havoc get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset);havoc get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset);havoc get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset);havoc get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset);havoc get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset);havoc get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset);havoc get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset);havoc get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset);havoc get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset; [2025-02-08 02:31:19,140 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7891-1: call get_indirect_#t~mem618#1.base, get_indirect_#t~mem618#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7891: assume 0 != (get_indirect_#t~mem618#1.base + get_indirect_#t~mem618#1.offset) % 18446744073709551616;havoc get_indirect_#t~mem618#1.base, get_indirect_#t~mem618#1.offset;call get_indirect_#t~mem619#1.base, get_indirect_#t~mem619#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7891: assume !(0 != (get_indirect_#t~mem618#1.base + get_indirect_#t~mem618#1.offset) % 18446744073709551616);havoc get_indirect_#t~mem618#1.base, get_indirect_#t~mem618#1.offset; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7908-1: SUMMARY for call get_indirect_#t~ret626#1 := ldv__builtin_expect((if get_indirect_#t~mem625#1 % 256 % 18446744073709551616 <= 9223372036854775807 then get_indirect_#t~mem625#1 % 256 % 18446744073709551616 else get_indirect_#t~mem625#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume 0 != __copy_from_user_~tmp___1~2#1;__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !(0 != __copy_from_user_~tmp___1~2#1);__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7908: assume -9223372036854775808 <= get_indirect_#t~ret626#1 && get_indirect_#t~ret626#1 <= 9223372036854775807;get_indirect_~tmp___12~1#1 := get_indirect_#t~ret626#1;havoc get_indirect_#t~mem625#1;havoc get_indirect_#t~ret626#1; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7941: assume 0 != get_indirect_~tmp___15~1#1; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7941: assume !(0 != get_indirect_~tmp___15~1#1); [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch132#1; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch132#1;__copy_from_user_#t~switch132#1 := true; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5761: assume __copy_from_user_#t~switch132#1;__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,141 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5761: assume !__copy_from_user_#t~switch132#1;__copy_from_user_#t~switch132#1 := __copy_from_user_#t~switch132#1 || 2 == __copy_from_user_~size#1; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5761-1: __copy_from_user_#t~switch132#1 := 1 == __copy_from_user_~size#1; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7892-1: SUMMARY for call get_indirect_#t~ret620#1 := eventfd_signal(get_indirect_#t~mem619#1.base, get_indirect_#t~mem619#1.offset, 1); srcloc: null [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7892: havoc get_indirect_#t~mem619#1.base, get_indirect_#t~mem619#1.offset;havoc get_indirect_#t~ret620#1; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7925: assume 0 != get_indirect_~tmp___14~1#1;call get_indirect_#t~mem635#1 := read~int#4(get_indirect_~log_num#1.base, get_indirect_~log_num#1.offset, 4);call get_indirect_#t~mem636#1 := read~int#14(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset, 8);call write~int#14(get_indirect_#t~mem636#1, get_indirect_~log#1.base, get_indirect_~log#1.offset + 16 * (if get_indirect_#t~mem635#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_indirect_#t~mem635#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else get_indirect_#t~mem635#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 8);havoc get_indirect_#t~mem635#1;havoc get_indirect_#t~mem636#1;call get_indirect_#t~mem637#1 := read~int#4(get_indirect_~log_num#1.base, get_indirect_~log_num#1.offset, 4);call get_indirect_#t~mem638#1 := read~int#14(get_indirect_~#desc~0#1.base, 8 + get_indirect_~#desc~0#1.offset, 4);call write~int#14(get_indirect_#t~mem638#1 % 4294967296, get_indirect_~log#1.base, 8 + (get_indirect_~log#1.offset + 16 * (if get_indirect_#t~mem637#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then get_indirect_#t~mem637#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else get_indirect_#t~mem637#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8);havoc get_indirect_#t~mem637#1;havoc get_indirect_#t~mem638#1;call get_indirect_#t~mem639#1 := read~int#4(get_indirect_~log_num#1.base, get_indirect_~log_num#1.offset, 4);call write~int#4(1 + get_indirect_#t~mem639#1, get_indirect_~log_num#1.base, get_indirect_~log_num#1.offset, 4);havoc get_indirect_#t~mem639#1; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7925: assume !(0 != get_indirect_~tmp___14~1#1); [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7942: assume -2147483648 <= get_indirect_#t~ret644#1 && get_indirect_#t~ret644#1 <= 2147483647;havoc get_indirect_#t~ret644#1; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7942-1: SUMMARY for call get_indirect_#t~ret644#1 := __dynamic_pr_debug(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset, 65, 0); srcloc: null [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7909: assume 0 != get_indirect_~tmp___12~1#1; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7909: assume !(0 != get_indirect_~tmp___12~1#1); [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8256-1: call #t~mem731#1.base, #t~mem731#1.offset := read~$Pointer$#14(~vq#1.base, 224 + ~vq#1.offset, 8); [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8256: assume 0 != (#t~mem731#1.base + #t~mem731#1.offset) % 18446744073709551616;havoc #t~mem731#1.base, #t~mem731#1.offset;call #t~mem732#1.base, #t~mem732#1.offset := read~$Pointer$#14(~vq#1.base, 224 + ~vq#1.offset, 8); [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8256: assume !(0 != (#t~mem731#1.base + #t~mem731#1.offset) % 18446744073709551616);havoc #t~mem731#1.base, #t~mem731#1.offset; [2025-02-08 02:31:19,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7910: assume -2147483648 <= get_indirect_#t~ret627#1 && get_indirect_#t~ret627#1 <= 2147483647;havoc get_indirect_#t~ret627#1; [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-3: havoc get_indirect_#t~bitwise612#1;assume (((((if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296) < 0 || get_indirect_#t~bitwise612#1 <= (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296)) && get_indirect_#t~bitwise612#1 <= 4) && get_indirect_#t~bitwise612#1 >= 0) && ((if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296) >= 0 || get_indirect_#t~bitwise612#1 > 4 + (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296))) && get_indirect_#t~bitwise612#1 >= -2147483648; [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-2: [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-1: SUMMARY for call get_indirect_#t~ret613#1 := ldv__builtin_expect((if 0 != get_indirect_#t~bitwise612#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7910-1: SUMMARY for call get_indirect_#t~ret627#1 := __dynamic_pr_debug(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset, 60, 0); srcloc: null [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877: assume -9223372036854775808 <= get_indirect_#t~ret613#1 && get_indirect_#t~ret613#1 <= 9223372036854775807;get_indirect_~tmp___11~1#1 := get_indirect_#t~ret613#1;havoc get_indirect_#t~mem611#1;havoc get_indirect_#t~bitwise612#1;havoc get_indirect_#t~ret613#1; [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8257-1: SUMMARY for call #t~ret733#1 := eventfd_signal(#t~mem732#1.base, #t~mem732#1.offset, 1); srcloc: null [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-5: assume 0 == (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296);get_indirect_#t~bitwise612#1 := 0; [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-5: assume !(0 == (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8257: havoc #t~mem732#1.base, #t~mem732#1.offset;havoc #t~ret733#1; [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-4: assume 4 == (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296);get_indirect_#t~bitwise612#1 := (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-4: assume !(4 == (if get_indirect_#t~mem611#1 % 65536 % 4294967296 <= 2147483647 then get_indirect_#t~mem611#1 % 65536 % 4294967296 else get_indirect_#t~mem611#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:31:19,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7878: assume 0 != get_indirect_~tmp___11~1#1;call write~$Pointer$#15(51, 0, get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset, 8);call write~$Pointer$#15(52, 0, get_indirect_~#descriptor___4~0#1.base, 8 + get_indirect_~#descriptor___4~0#1.offset, 8);call write~$Pointer$#15(53, 0, get_indirect_~#descriptor___4~0#1.base, 16 + get_indirect_~#descriptor___4~0#1.offset, 8);call write~$Pointer$#15(54, 0, get_indirect_~#descriptor___4~0#1.base, 24 + get_indirect_~#descriptor___4~0#1.offset, 8);call write~int#15(1206, get_indirect_~#descriptor___4~0#1.base, 32 + get_indirect_~#descriptor___4~0#1.offset, 4);call write~int#15(0, get_indirect_~#descriptor___4~0#1.base, 36 + get_indirect_~#descriptor___4~0#1.offset, 1);call get_indirect_#t~mem614#1 := read~int#15(get_indirect_~#descriptor___4~0#1.base, 36 + get_indirect_~#descriptor___4~0#1.offset, 1); [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7878: assume !(0 != get_indirect_~tmp___11~1#1);call get_indirect_#t~mem621#1 := read~int#14(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset, 8);call get_indirect_#t~mem622#1 := read~int#14(get_indirect_~#desc~0#1.base, 8 + get_indirect_~#desc~0#1.offset, 4); [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7895-1: get_indirect_#res#1 := -22;call ULTIMATE.dealloc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset);havoc get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset);havoc get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset);havoc get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset);havoc get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset);havoc get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset);havoc get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset);havoc get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset);havoc get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset);havoc get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8242: assume -9223372036854775808 <= #t~ret727#1 && #t~ret727#1 <= 9223372036854775807;~tmp___18~0#1 := #t~ret727#1;havoc #t~ret727#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume 0 != __copy_from_user_~tmp___0~5#1;__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !(0 != __copy_from_user_~tmp___0~5#1);__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch132#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch132#1;__copy_from_user_#t~switch132#1 := __copy_from_user_#t~switch132#1 || 16 == __copy_from_user_~size#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8242-1: SUMMARY for call #t~ret727#1 := ldv__builtin_expect((if ~ret~5#1 < 0 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5798: assume -9223372036854775808 <= __copy_from_user_#t~ret134#1 && __copy_from_user_#t~ret134#1 <= 9223372036854775807;__copy_from_user_~tmp___1~2#1 := __copy_from_user_#t~ret134#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5798-1: SUMMARY for call __copy_from_user_#t~ret134#1 := ldv__builtin_expect((if 0 != __copy_from_user_~ret~1#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8243: assume 0 != ~tmp___18~0#1;call write~$Pointer$#15(101, 0, ~#descriptor___6~1#1.base, ~#descriptor___6~1#1.offset, 8);call write~$Pointer$#15(102, 0, ~#descriptor___6~1#1.base, 8 + ~#descriptor___6~1#1.offset, 8);call write~$Pointer$#15(103, 0, ~#descriptor___6~1#1.base, 16 + ~#descriptor___6~1#1.offset, 8);call write~$Pointer$#15(104, 0, ~#descriptor___6~1#1.base, 24 + ~#descriptor___6~1#1.offset, 8);call write~int#15(1326, ~#descriptor___6~1#1.base, 32 + ~#descriptor___6~1#1.offset, 4);call write~int#15(0, ~#descriptor___6~1#1.base, 36 + ~#descriptor___6~1#1.offset, 1);call #t~mem728#1 := read~int#15(~#descriptor___6~1#1.base, 36 + ~#descriptor___6~1#1.offset, 1); [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8243: assume !(0 != ~tmp___18~0#1); [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7731: call ULTIMATE.dealloc(get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset);havoc get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset);havoc get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset);havoc get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset);havoc get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset);havoc get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset);havoc get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset);havoc get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset);havoc get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset;call ULTIMATE.dealloc(get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset);havoc get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset;#t~ret726#1 := get_indirect_#res#1;havoc get_indirect_#t~mem563#1, get_indirect_#t~ret564#1, get_indirect_#t~mem565#1, get_indirect_#t~ret566#1, get_indirect_#t~mem567#1, get_indirect_#t~ret568#1, get_indirect_#t~mem569#1.base, get_indirect_#t~mem569#1.offset, get_indirect_#t~mem570#1.base, get_indirect_#t~mem570#1.offset, get_indirect_#t~ret571#1, get_indirect_#t~mem572#1, get_indirect_#t~mem573#1, get_indirect_#t~mem574#1.base, get_indirect_#t~mem574#1.offset, get_indirect_#t~ret575#1, get_indirect_#t~ret576#1, get_indirect_#t~mem577#1, get_indirect_#t~ret578#1, get_indirect_#t~ret579#1, get_indirect_#t~mem580#1.base, get_indirect_#t~mem580#1.offset, get_indirect_#t~mem581#1.base, get_indirect_#t~mem581#1.offset, get_indirect_#t~ret582#1, get_indirect_#t~mem583#1, get_indirect_#t~ret584#1, get_indirect_#t~mem585#1, get_indirect_#t~ret586#1, get_indirect_#t~mem587#1, get_indirect_#t~ret588#1, get_indirect_#t~mem589#1.base, get_indirect_#t~mem589#1.offset, get_indirect_#t~mem590#1.base, get_indirect_#t~mem590#1.offset, get_indirect_#t~ret591#1, get_indirect_#t~mem592#1, get_indirect_#t~mem593#1, get_indirect_#t~ret594#1, get_indirect_#t~mem595#1, get_indirect_#t~ret596#1, get_indirect_#t~ret597#1, get_indirect_#t~mem598#1.base, get_indirect_#t~mem598#1.offset, get_indirect_#t~mem599#1.base, get_indirect_#t~mem599#1.offset, get_indirect_#t~ret600#1, get_indirect_#t~mem601#1.base, get_indirect_#t~mem601#1.offset, get_indirect_#t~ret602#1, get_indirect_#t~ret603#1, get_indirect_#t~mem604#1, get_indirect_#t~ret605#1, get_indirect_#t~mem606#1, get_indirect_#t~ret607#1, get_indirect_#t~mem608#1.base, get_indirect_#t~mem608#1.offset, get_indirect_#t~mem609#1.base, get_indirect_#t~mem609#1.offset, get_indirect_#t~ret610#1, get_indirect_#t~mem611#1, get_indirect_#t~bitwise612#1, get_indirect_#t~ret613#1, get_indirect_#t~mem614#1, get_indirect_#t~ret615#1, get_indirect_#t~mem616#1, get_indirect_#t~ret617#1, get_indirect_#t~mem618#1.base, get_indirect_#t~mem618#1.offset, get_indirect_#t~mem619#1.base, get_indirect_#t~mem619#1.offset, get_indirect_#t~ret620#1, get_indirect_#t~mem621#1, get_indirect_#t~mem622#1, get_indirect_#t~ret623#1, get_indirect_#t~ret624#1, get_indirect_#t~mem625#1, get_indirect_#t~ret626#1, get_indirect_#t~ret627#1, get_indirect_#t~mem628#1.base, get_indirect_#t~mem628#1.offset, get_indirect_#t~mem629#1.base, get_indirect_#t~mem629#1.offset, get_indirect_#t~ret630#1, get_indirect_#t~mem631#1, get_indirect_#t~bitwise632#1, get_indirect_#t~mem633#1, get_indirect_#t~ret634#1, get_indirect_#t~mem635#1, get_indirect_#t~mem636#1, get_indirect_#t~mem637#1, get_indirect_#t~mem638#1, get_indirect_#t~mem639#1, get_indirect_#t~mem640#1, get_indirect_#t~ret641#1, get_indirect_#t~mem642#1, get_indirect_#t~ret643#1, get_indirect_#t~ret644#1, get_indirect_#t~mem645#1.base, get_indirect_#t~mem645#1.offset, get_indirect_#t~mem646#1.base, get_indirect_#t~mem646#1.offset, get_indirect_#t~ret647#1, get_indirect_#t~mem648#1, get_indirect_#t~ret649#1, get_indirect_~dev#1.base, get_indirect_~dev#1.offset, get_indirect_~vq#1.base, get_indirect_~vq#1.offset, get_indirect_~iov#1.base, get_indirect_~iov#1.offset, get_indirect_~iov_size#1, get_indirect_~out_num#1.base, get_indirect_~out_num#1.offset, get_indirect_~in_num#1.base, get_indirect_~in_num#1.offset, get_indirect_~log#1.base, get_indirect_~log#1.offset, get_indirect_~log_num#1.base, get_indirect_~log_num#1.offset, get_indirect_~indirect#1.base, get_indirect_~indirect#1.offset, get_indirect_~#desc~0#1.base, get_indirect_~#desc~0#1.offset, get_indirect_~i~10#1, get_indirect_~count~0#1, get_indirect_~found~0#1, get_indirect_~ret~4#1, get_indirect_~#descriptor~0#1.base, get_indirect_~#descriptor~0#1.offset, get_indirect_~tmp~40#1, get_indirect_~tmp___0~24#1, get_indirect_~#descriptor___0~0#1.base, get_indirect_~#descriptor___0~0#1.offset, get_indirect_~tmp___1~19#1, get_indirect_~tmp___2~16#1, get_indirect_~#descriptor___1~0#1.base, get_indirect_~#descriptor___1~0#1.offset, get_indirect_~tmp___3~8#1, get_indirect_~tmp___4~5#1, get_indirect_~iov_count~0#1, get_indirect_~#descriptor___2~0#1.base, get_indirect_~#descriptor___2~0#1.offset, get_indirect_~tmp___5~5#1, get_indirect_~tmp___6~3#1, get_indirect_~#descriptor___3~0#1.base, get_indirect_~#descriptor___3~0#1.offset, get_indirect_~tmp___7~2#1, get_indirect_~tmp___8~2#1, get_indirect_~tmp___9~2#1, get_indirect_~#descriptor___4~0#1.base, get_indirect_~#descriptor___4~0#1.offset, get_indirect_~tmp___10~2#1, get_indirect_~tmp___11~1#1, get_indirect_~#descriptor___5~0#1.base, get_indirect_~#descriptor___5~0#1.offset, get_indirect_~tmp___12~1#1, get_indirect_~tmp___13~1#1, get_indirect_~tmp___14~1#1, get_indirect_~#descriptor___6~0#1.base, get_indirect_~#descriptor___6~0#1.offset, get_indirect_~tmp___15~1#1, get_indirect_~tmp___16~1#1;havoc get_indirect_#in~dev#1.base, get_indirect_#in~dev#1.offset, get_indirect_#in~vq#1.base, get_indirect_#in~vq#1.offset, get_indirect_#in~iov#1.base, get_indirect_#in~iov#1.offset, get_indirect_#in~iov_size#1, get_indirect_#in~out_num#1.base, get_indirect_#in~out_num#1.offset, get_indirect_#in~in_num#1.base, get_indirect_#in~in_num#1.offset, get_indirect_#in~log#1.base, get_indirect_#in~log#1.offset, get_indirect_#in~log_num#1.base, get_indirect_#in~log_num#1.offset, get_indirect_#in~indirect#1.base, get_indirect_#in~indirect#1.offset;assume { :end_inline_get_indirect } true;assume -2147483648 <= #t~ret726#1 && #t~ret726#1 <= 2147483647;~ret~5#1 := #t~ret726#1;havoc #t~ret726#1; [2025-02-08 02:31:19,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7946: assume 0 != (get_indirect_#t~mem645#1.base + get_indirect_#t~mem645#1.offset) % 18446744073709551616;havoc get_indirect_#t~mem645#1.base, get_indirect_#t~mem645#1.offset;call get_indirect_#t~mem646#1.base, get_indirect_#t~mem646#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7946: assume !(0 != (get_indirect_#t~mem645#1.base + get_indirect_#t~mem645#1.offset) % 18446744073709551616);havoc get_indirect_#t~mem645#1.base, get_indirect_#t~mem645#1.offset; [2025-02-08 02:31:19,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch132#1;__copy_from_user_#res#1 := __copy_from_user_~ret~1#1; [2025-02-08 02:31:19,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch132#1;__copy_from_user_#t~switch132#1 := __copy_from_user_#t~switch132#1 || 4 == __copy_from_user_~size#1; [2025-02-08 02:31:19,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7946-1: call get_indirect_#t~mem645#1.base, get_indirect_#t~mem645#1.offset := read~$Pointer$#14(get_indirect_~vq#1.base, 224 + get_indirect_~vq#1.offset, 8); [2025-02-08 02:31:19,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8260: #res#1 := ~ret~5#1;call ULTIMATE.dealloc(~#desc~1#1.base, ~#desc~1#1.offset);havoc ~#desc~1#1.base, ~#desc~1#1.offset;call ULTIMATE.dealloc(~#descriptor~1#1.base, ~#descriptor~1#1.offset);havoc ~#descriptor~1#1.base, ~#descriptor~1#1.offset;call ULTIMATE.dealloc(~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset);havoc ~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset;call ULTIMATE.dealloc(~#descriptor___1~1#1.base, ~#descriptor___1~1#1.offset);havoc ~#descriptor___1~1#1.base, ~#descriptor___1~1#1.offset;call ULTIMATE.dealloc(~#descriptor___2~1#1.base, ~#descriptor___2~1#1.offset);havoc ~#descriptor___2~1#1.base, ~#descriptor___2~1#1.offset;call ULTIMATE.dealloc(~#descriptor___3~1#1.base, ~#descriptor___3~1#1.offset);havoc ~#descriptor___3~1#1.base, ~#descriptor___3~1#1.offset;call ULTIMATE.dealloc(~#descriptor___4~1#1.base, ~#descriptor___4~1#1.offset);havoc ~#descriptor___4~1#1.base, ~#descriptor___4~1#1.offset;call ULTIMATE.dealloc(~#descriptor___5~1#1.base, ~#descriptor___5~1#1.offset);havoc ~#descriptor___5~1#1.base, ~#descriptor___5~1#1.offset;call ULTIMATE.dealloc(~#descriptor___6~1#1.base, ~#descriptor___6~1#1.offset);havoc ~#descriptor___6~1#1.base, ~#descriptor___6~1#1.offset;call ULTIMATE.dealloc(~#descriptor___7~0#1.base, ~#descriptor___7~0#1.offset);havoc ~#descriptor___7~0#1.base, ~#descriptor___7~0#1.offset;call ULTIMATE.dealloc(~#descriptor___8~0#1.base, ~#descriptor___8~0#1.offset);havoc ~#descriptor___8~0#1.base, ~#descriptor___8~0#1.offset; [2025-02-08 02:31:19,149 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11527: havoc #t~nondet1284; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8880: assume 0 != ~tmp___0~30#1;call #t~mem895#1.base, #t~mem895#1.offset := read~$Pointer$#14(~vq#1.base, 184 + ~vq#1.offset, 8);call #t~mem896#1 := read~int#14(~vq#1.base, 164 + ~vq#1.offset, 4); [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8880: assume !(0 != ~tmp___0~30#1); [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8872: assume 0 != ~r~7#1;call write~$Pointer$#15(156, 0, ~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset, 8);call write~$Pointer$#15(157, 0, ~#descriptor___0~4#1.base, 8 + ~#descriptor___0~4#1.offset, 8);call write~$Pointer$#15(158, 0, ~#descriptor___0~4#1.base, 16 + ~#descriptor___0~4#1.offset, 8);call write~$Pointer$#15(159, 0, ~#descriptor___0~4#1.base, 24 + ~#descriptor___0~4#1.offset, 8);call write~int#15(1574, ~#descriptor___0~4#1.base, 32 + ~#descriptor___0~4#1.offset, 4);call write~int#15(0, ~#descriptor___0~4#1.base, 36 + ~#descriptor___0~4#1.offset, 1);call #t~mem893#1 := read~int#15(~#descriptor___0~4#1.base, 36 + ~#descriptor___0~4#1.offset, 1); [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8872: assume !(0 != ~r~7#1); [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8881: assume -2147483648 <= #t~ret897#1 && #t~ret897#1 <= 2147483647;havoc #t~mem895#1.base, #t~mem895#1.offset;havoc #t~mem896#1;havoc #t~ret897#1; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8881-1: SUMMARY for call #t~ret897#1 := __dynamic_pr_debug(~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset, 160, 0); srcloc: null [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8890: #res#1 := 0;call ULTIMATE.dealloc(~#descriptor~6#1.base, ~#descriptor~6#1.offset);havoc ~#descriptor~6#1.base, ~#descriptor~6#1.offset;call ULTIMATE.dealloc(~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset);havoc ~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset;call ULTIMATE.dealloc(~#descriptor___1~3#1.base, ~#descriptor___1~3#1.offset);havoc ~#descriptor___1~3#1.base, ~#descriptor___1~3#1.offset; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8886-1: call #t~mem898#1.base, #t~mem898#1.offset := read~$Pointer$#14(~vq#1.base, 224 + ~vq#1.offset, 8); [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8886: assume 0 != (#t~mem898#1.base + #t~mem898#1.offset) % 18446744073709551616;havoc #t~mem898#1.base, #t~mem898#1.offset;call #t~mem899#1.base, #t~mem899#1.offset := read~$Pointer$#14(~vq#1.base, 224 + ~vq#1.offset, 8); [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8886: assume !(0 != (#t~mem898#1.base + #t~mem898#1.offset) % 18446744073709551616);havoc #t~mem898#1.base, #t~mem898#1.offset; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8944: havoc #t~mem910#1;call ULTIMATE.dealloc(~#descriptor~6#1.base, ~#descriptor~6#1.offset);havoc ~#descriptor~6#1.base, ~#descriptor~6#1.offset;call ULTIMATE.dealloc(~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset);havoc ~#descriptor___0~4#1.base, ~#descriptor___0~4#1.offset;call ULTIMATE.dealloc(~#descriptor___1~3#1.base, ~#descriptor___1~3#1.offset);havoc ~#descriptor___1~3#1.base, ~#descriptor___1~3#1.offset; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8887: havoc #t~mem899#1.base, #t~mem899#1.offset;havoc #t~ret900#1; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8887-1: SUMMARY for call #t~ret900#1 := eventfd_signal(#t~mem899#1.base, #t~mem899#1.offset, 1); srcloc: null [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8879: assume -9223372036854775808 <= #t~ret894#1 && #t~ret894#1 <= 9223372036854775807;~tmp___0~30#1 := #t~ret894#1;havoc #t~mem893#1;havoc #t~ret894#1; [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8879-1: SUMMARY for call #t~ret894#1 := ldv__builtin_expect((if #t~mem893#1 % 256 % 18446744073709551616 <= 9223372036854775807 then #t~mem893#1 % 256 % 18446744073709551616 else #t~mem893#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:31:19,325 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8871: #t~ret892#1 := vhost_update_avail_event_#res#1;havoc vhost_update_avail_event_#t~switch536#1, vhost_update_avail_event_#t~mem537#1, vhost_update_avail_event_#t~ret538#1, vhost_update_avail_event_#t~mem539#1.base, vhost_update_avail_event_#t~mem539#1.offset, vhost_update_avail_event_#t~mem540#1, vhost_update_avail_event_#t~mem541#1.base, vhost_update_avail_event_#t~mem541#1.offset, vhost_update_avail_event_#t~mem543#1, vhost_update_avail_event_#t~mem542#1.base, vhost_update_avail_event_#t~mem542#1.offset, vhost_update_avail_event_#t~ret544#1, vhost_update_avail_event_#t~mem545#1.base, vhost_update_avail_event_#t~mem545#1.offset, vhost_update_avail_event_#t~mem546#1.base, vhost_update_avail_event_#t~mem546#1.offset, vhost_update_avail_event_#t~ret547#1, vhost_update_avail_event_~vq#1.base, vhost_update_avail_event_~vq#1.offset, vhost_update_avail_event_~avail_event#1, vhost_update_avail_event_~__pu_err~1#1, vhost_update_avail_event_~used~1#1.base, vhost_update_avail_event_~used~1#1.offset, vhost_update_avail_event_~tmp~38#1;havoc vhost_update_avail_event_#in~vq#1.base, vhost_update_avail_event_#in~vq#1.offset, vhost_update_avail_event_#in~avail_event#1;assume { :end_inline_vhost_update_avail_event } true;assume -2147483648 <= #t~ret892#1 && #t~ret892#1 <= 2147483647;~r~7#1 := #t~ret892#1;havoc #t~mem891#1;havoc #t~ret892#1; [2025-02-08 02:31:19,333 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11554: havoc #t~nondet1290; [2025-02-08 02:31:19,368 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11510: havoc cgroup_attach_task_all_#t~nondet1280#1;vhost_attach_cgroups_work_#t~ret264#1 := cgroup_attach_task_all_#res#1;havoc cgroup_attach_task_all_#t~nondet1280#1, cgroup_attach_task_all_~arg0#1.base, cgroup_attach_task_all_~arg0#1.offset, cgroup_attach_task_all_~arg1#1.base, cgroup_attach_task_all_~arg1#1.offset;havoc cgroup_attach_task_all_#in~arg0#1.base, cgroup_attach_task_all_#in~arg0#1.offset, cgroup_attach_task_all_#in~arg1#1.base, cgroup_attach_task_all_#in~arg1#1.offset;assume { :end_inline_cgroup_attach_task_all } true;assume -2147483648 <= vhost_attach_cgroups_work_#t~ret264#1 && vhost_attach_cgroups_work_#t~ret264#1 <= 2147483647;call write~int#14(vhost_attach_cgroups_work_#t~ret264#1, vhost_attach_cgroups_work_~s~0#1.base, 128 + vhost_attach_cgroups_work_~s~0#1.offset, 4);havoc vhost_attach_cgroups_work_#t~mem263#1.base, vhost_attach_cgroups_work_#t~mem263#1.offset;havoc vhost_attach_cgroups_work_#t~ret264#1; [2025-02-08 02:31:19,369 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: havoc handle_rx_net_~work#1.base, handle_rx_net_~work#1.offset, handle_rx_net_~net~3#1.base, handle_rx_net_~net~3#1.offset, handle_rx_net_~__mptr~8#1.base, handle_rx_net_~__mptr~8#1.offset;havoc handle_rx_net_#in~work#1.base, handle_rx_net_#in~work#1.offset;assume { :end_inline_handle_rx_net } true; [2025-02-08 02:31:19,369 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-2: havoc handle_rx_kick_#t~mem1148#1.base, handle_rx_kick_#t~mem1148#1.offset, handle_rx_kick_~work#1.base, handle_rx_kick_~work#1.offset, handle_rx_kick_~vq~6#1.base, handle_rx_kick_~vq~6#1.offset, handle_rx_kick_~__mptr~6#1.base, handle_rx_kick_~__mptr~6#1.offset, handle_rx_kick_~net~1#1.base, handle_rx_kick_~net~1#1.offset, handle_rx_kick_~__mptr___0~1#1.base, handle_rx_kick_~__mptr___0~1#1.offset;havoc handle_rx_kick_#in~work#1.base, handle_rx_kick_#in~work#1.offset;assume { :end_inline_handle_rx_kick } true; [2025-02-08 02:31:19,369 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-5: havoc vhost_zerocopy_done_signal_~kref#1.base, vhost_zerocopy_done_signal_~kref#1.offset, vhost_zerocopy_done_signal_~ubufs~0#1.base, vhost_zerocopy_done_signal_~ubufs~0#1.offset, vhost_zerocopy_done_signal_~__mptr~4#1.base, vhost_zerocopy_done_signal_~__mptr~4#1.offset;havoc vhost_zerocopy_done_signal_#in~kref#1.base, vhost_zerocopy_done_signal_#in~kref#1.offset;assume { :end_inline_vhost_zerocopy_done_signal } true; [2025-02-08 02:31:19,369 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-6: havoc vhost_attach_cgroups_work_#t~ret262#1.base, vhost_attach_cgroups_work_#t~ret262#1.offset, vhost_attach_cgroups_work_#t~mem263#1.base, vhost_attach_cgroups_work_#t~mem263#1.offset, vhost_attach_cgroups_work_#t~ret264#1, vhost_attach_cgroups_work_~work#1.base, vhost_attach_cgroups_work_~work#1.offset, vhost_attach_cgroups_work_~s~0#1.base, vhost_attach_cgroups_work_~s~0#1.offset, vhost_attach_cgroups_work_~__mptr~3#1.base, vhost_attach_cgroups_work_~__mptr~3#1.offset, vhost_attach_cgroups_work_~tmp~23#1.base, vhost_attach_cgroups_work_~tmp~23#1.offset;havoc vhost_attach_cgroups_work_#in~work#1.base, vhost_attach_cgroups_work_#in~work#1.offset;assume { :end_inline_vhost_attach_cgroups_work } true; [2025-02-08 02:31:19,398 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9181: havoc ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_13 } true;havoc #t~mem355#1.base, #t~mem355#1.offset; [2025-02-08 02:31:19,398 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9181-1: SUMMARY for call mutex_unlock(ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:19,398 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9180: SUMMARY for call ldv_mutex_unlock_mutex(ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:19,398 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6714: call #t~mem355#1.base, #t~mem355#1.offset := read~$Pointer$#14(~d#1.base, 176 + ~d#1.offset, 8);assume { :begin_inline_ldv_mutex_unlock_13 } true;ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset := #t~mem355#1.base, 8 + (#t~mem355#1.offset + 17120 * (if ~i~6#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~6#1 % 18446744073709551616 % 18446744073709551616 else ~i~6#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616));havoc ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset;ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset := ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:19,398 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6715: assume 0 == ~ok~0#1;#res#1 := 0; [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6715: assume !(0 == ~ok~0#1);~i~6#1 := 1 + ~i~6#1; [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6710: assume -2147483648 <= #t~ret354#1 && #t~ret354#1 <= 2147483647;~ok~0#1 := #t~ret354#1;havoc #t~mem352#1.base, #t~mem352#1.offset;havoc #t~mem353#1.base, #t~mem353#1.offset;havoc #t~ret354#1; [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9173: havoc ldv_mutex_lock_12_~ldv_func_arg1#1.base, ldv_mutex_lock_12_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_12_#in~ldv_func_arg1#1.base, ldv_mutex_lock_12_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_12 } true;call #t~mem350#1.base, #t~mem350#1.offset := read~$Pointer$#14(~d#1.base, 176 + ~d#1.offset, 8);call #t~mem351#1.base, #t~mem351#1.offset := read~$Pointer$#14(#t~mem350#1.base, 17072 + (#t~mem350#1.offset + 17120 * (if ~i~6#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~6#1 % 18446744073709551616 % 18446744073709551616 else ~i~6#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9173-1: SUMMARY for call mutex_lock(ldv_mutex_lock_12_~ldv_func_arg1#1.base, ldv_mutex_lock_12_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9172: SUMMARY for call ldv_mutex_lock_mutex(ldv_mutex_lock_12_~ldv_func_arg1#1.base, ldv_mutex_lock_12_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6708: call #t~mem349#1.base, #t~mem349#1.offset := read~$Pointer$#14(~d#1.base, 176 + ~d#1.offset, 8);assume { :begin_inline_ldv_mutex_lock_12 } true;ldv_mutex_lock_12_#in~ldv_func_arg1#1.base, ldv_mutex_lock_12_#in~ldv_func_arg1#1.offset := #t~mem349#1.base, 8 + (#t~mem349#1.offset + 17120 * (if ~i~6#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~6#1 % 18446744073709551616 % 18446744073709551616 else ~i~6#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616));havoc ldv_mutex_lock_12_~ldv_func_arg1#1.base, ldv_mutex_lock_12_~ldv_func_arg1#1.offset;ldv_mutex_lock_12_~ldv_func_arg1#1.base, ldv_mutex_lock_12_~ldv_func_arg1#1.offset := ldv_mutex_lock_12_#in~ldv_func_arg1#1.base, ldv_mutex_lock_12_#in~ldv_func_arg1#1.offset; [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6710-1: SUMMARY for call #t~ret354#1 := vq_memory_access_ok(#t~mem353#1.base, #t~mem353#1.offset, ~mem#1.base, ~mem#1.offset, ~log_all#1); srcloc: null [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6709: assume 0 != (#t~mem351#1.base + #t~mem351#1.offset) % 18446744073709551616;havoc #t~mem350#1.base, #t~mem350#1.offset;havoc #t~mem351#1.base, #t~mem351#1.offset;call #t~mem352#1.base, #t~mem352#1.offset := read~$Pointer$#14(~d#1.base, 176 + ~d#1.offset, 8);call #t~mem353#1.base, #t~mem353#1.offset := read~$Pointer$#14(#t~mem352#1.base, 17080 + (#t~mem352#1.offset + 17120 * (if ~i~6#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~6#1 % 18446744073709551616 % 18446744073709551616 else ~i~6#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 8); [2025-02-08 02:31:19,399 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6709: assume !(0 != (#t~mem351#1.base + #t~mem351#1.offset) % 18446744073709551616);havoc #t~mem350#1.base, #t~mem350#1.offset;havoc #t~mem351#1.base, #t~mem351#1.offset;~ok~0#1 := 1; [2025-02-08 02:31:19,448 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10207: call ULTIMATE.dealloc(~#tx_sock~0.base, ~#tx_sock~0.offset);havoc ~#tx_sock~0.base, ~#tx_sock~0.offset;call ULTIMATE.dealloc(~#rx_sock~0.base, ~#rx_sock~0.offset);havoc ~#rx_sock~0.base, ~#rx_sock~0.offset; [2025-02-08 02:31:19,503 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8950: call ULTIMATE.dealloc(~#descriptor~7.base, ~#descriptor~7.offset);havoc ~#descriptor~7.base, ~#descriptor~7.offset; [2025-02-08 02:31:19,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11567: havoc #t~nondet1291; [2025-02-08 02:31:19,666 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8801: havoc #t~mem875#1.base, #t~mem875#1.offset;havoc #t~ret876#1; [2025-02-08 02:31:19,667 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8801-1: SUMMARY for call #t~ret876#1 := eventfd_signal(#t~mem875#1.base, #t~mem875#1.offset, 1); srcloc: null [2025-02-08 02:31:19,667 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8790: vhost_notify_#t~ret872#1 := vring_need_event_#res#1;havoc vring_need_event_~event_idx#1, vring_need_event_~new_idx#1, vring_need_event_~old#1;havoc vring_need_event_#in~event_idx#1, vring_need_event_#in~new_idx#1, vring_need_event_#in~old#1;assume { :end_inline_vring_need_event } true;assume -2147483648 <= vhost_notify_#t~ret872#1 && vhost_notify_#t~ret872#1 <= 2147483647;vhost_notify_~tmp___7~4#1 := vhost_notify_#t~ret872#1;havoc vhost_notify_#t~ret872#1;vhost_notify_#res#1 := (if 0 == (if 0 != vhost_notify_~tmp___7~4#1 then 1 else 0) then 0 else 1);call ULTIMATE.dealloc(vhost_notify_~#descriptor~5#1.base, vhost_notify_~#descriptor~5#1.offset);havoc vhost_notify_~#descriptor~5#1.base, vhost_notify_~#descriptor~5#1.offset;call ULTIMATE.dealloc(vhost_notify_~#descriptor___0~3#1.base, vhost_notify_~#descriptor___0~3#1.offset);havoc vhost_notify_~#descriptor___0~3#1.base, vhost_notify_~#descriptor___0~3#1.offset; [2025-02-08 02:31:19,667 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8800: assume 0 != (if ~tmp~46#1 % 256 % 4294967296 <= 2147483647 then ~tmp~46#1 % 256 % 4294967296 else ~tmp~46#1 % 256 % 4294967296 - 4294967296);call #t~mem875#1.base, #t~mem875#1.offset := read~$Pointer$#14(~vq#1.base, 216 + ~vq#1.offset, 8); [2025-02-08 02:31:19,667 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8800: assume !(0 != (if ~tmp~46#1 % 256 % 4294967296 <= 2147483647 then ~tmp~46#1 % 256 % 4294967296 else ~tmp~46#1 % 256 % 4294967296 - 4294967296)); [2025-02-08 02:31:19,667 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8664: call ULTIMATE.dealloc(vhost_notify_~#descriptor~5#1.base, vhost_notify_~#descriptor~5#1.offset);havoc vhost_notify_~#descriptor~5#1.base, vhost_notify_~#descriptor~5#1.offset;call ULTIMATE.dealloc(vhost_notify_~#descriptor___0~3#1.base, vhost_notify_~#descriptor___0~3#1.offset);havoc vhost_notify_~#descriptor___0~3#1.base, vhost_notify_~#descriptor___0~3#1.offset;#t~ret874#1 := vhost_notify_#res#1;havoc vhost_notify_#t~ret848#1, vhost_notify_#t~mem849#1, vhost_notify_#t~mem850#1, vhost_notify_#t~ret851#1, vhost_notify_#t~ret852#1, vhost_notify_#t~switch853#1, vhost_notify_#t~ret854#1, vhost_notify_#t~mem855#1, vhost_notify_#t~ret856#1, vhost_notify_#t~ret857#1, vhost_notify_#t~mem858#1.base, vhost_notify_#t~mem858#1.offset, vhost_notify_#t~mem859#1.base, vhost_notify_#t~mem859#1.offset, vhost_notify_#t~ret860#1, vhost_notify_#t~mem861#1, vhost_notify_#t~mem862#1, vhost_notify_#t~mem863#1, vhost_notify_#t~ret864#1, vhost_notify_#t~switch865#1, vhost_notify_#t~mem866#1, vhost_notify_#t~ret867#1, vhost_notify_#t~ret868#1, vhost_notify_#t~mem869#1.base, vhost_notify_#t~mem869#1.offset, vhost_notify_#t~mem870#1.base, vhost_notify_#t~mem870#1.offset, vhost_notify_#t~ret871#1, vhost_notify_#t~ret872#1, vhost_notify_~dev#1.base, vhost_notify_~dev#1.offset, vhost_notify_~vq#1.base, vhost_notify_~vq#1.offset, vhost_notify_~old~1#1, vhost_notify_~new~1#1, vhost_notify_~event~0#1, vhost_notify_~v~0#1, vhost_notify_~tmp~45#1, vhost_notify_~tmp___0~29#1, vhost_notify_~flags~1#1, vhost_notify_~#descriptor~5#1.base, vhost_notify_~#descriptor~5#1.offset, vhost_notify_~tmp___1~23#1, vhost_notify_~__gu_err~1#1, vhost_notify_~__gu_val~1#1, vhost_notify_~tmp___2~20#1, vhost_notify_~tmp___3~12#1, vhost_notify_~tmp___4~7#1, vhost_notify_~tmp___5~7#1, vhost_notify_~#descriptor___0~3#1.base, vhost_notify_~#descriptor___0~3#1.offset, vhost_notify_~tmp___6~5#1, vhost_notify_~__ret_gu~3#1, vhost_notify_~__val_gu~3#1, vhost_notify_~tmp___7~4#1;havoc vhost_notify_#in~dev#1.base, vhost_notify_#in~dev#1.offset, vhost_notify_#in~vq#1.base, vhost_notify_#in~vq#1.offset;assume { :end_inline_vhost_notify } true;~tmp~46#1 := (if 0 == #t~ret874#1 % 256 then 0 else 1);havoc #t~ret874#1; [2025-02-08 02:31:19,688 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519-1: call #t~mem283.base, #t~mem283.offset := read~$Pointer$#14(~vq.base, 17064 + ~vq.offset, 8);call #t~mem284 := read~int#14(#t~mem283.base, 4 + (#t~mem283.offset + 8 * (if ~i~3 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~3 % 18446744073709551616 % 18446744073709551616 else ~i~3 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4); [2025-02-08 02:31:19,688 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519: assume 1 == #t~mem284 % 4294967296;havoc #t~mem283.base, #t~mem283.offset;havoc #t~mem284;call #t~mem285.base, #t~mem285.offset := read~$Pointer$#14(~vq.base, 17064 + ~vq.offset, 8);call write~int#14(0, #t~mem285.base, 4 + (#t~mem285.offset + 8 * (if ~i~3 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~3 % 18446744073709551616 % 18446744073709551616 else ~i~3 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);havoc #t~mem285.base, #t~mem285.offset;call #t~mem286.base, #t~mem286.offset := read~$Pointer$#14(~vq.base, ~vq.offset, 8);call #t~mem287.base, #t~mem287.offset := read~$Pointer$#14(~vq.base, 17064 + ~vq.offset, 8);call #t~mem288 := read~int#14(#t~mem287.base, #t~mem287.offset + 8 * (if ~i~3 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~3 % 18446744073709551616 % 18446744073709551616 else ~i~3 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 4); [2025-02-08 02:31:19,688 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6519: assume !(1 == #t~mem284 % 4294967296);havoc #t~mem283.base, #t~mem283.offset;havoc #t~mem284; [2025-02-08 02:31:19,688 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6521-1: SUMMARY for call vhost_add_used_and_signal(#t~mem286.base, #t~mem286.offset, ~vq.base, ~vq.offset, #t~mem288, 0); srcloc: null [2025-02-08 02:31:19,688 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6521: havoc #t~mem286.base, #t~mem286.offset;havoc #t~mem287.base, #t~mem287.offset;havoc #t~mem288;~j~0 := 1 + ~j~0;~i~3 := (if 1 + ~i~3 < 0 && 0 != (1 + ~i~3) % 1024 then (1 + ~i~3) % 1024 - 1024 else (1 + ~i~3) % 1024); [2025-02-08 02:31:19,711 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6034: #t~ret170#1 := vhost_poll_wakeup_#res#1;havoc vhost_poll_wakeup_#t~mem161#1, vhost_poll_wakeup_#t~bitwise162#1, vhost_poll_wakeup_~wait#1.base, vhost_poll_wakeup_~wait#1.offset, vhost_poll_wakeup_~mode#1, vhost_poll_wakeup_~sync#1, vhost_poll_wakeup_~key#1.base, vhost_poll_wakeup_~key#1.offset, vhost_poll_wakeup_~poll~1#1.base, vhost_poll_wakeup_~poll~1#1.offset, vhost_poll_wakeup_~__mptr~1#1.base, vhost_poll_wakeup_~__mptr~1#1.offset;havoc vhost_poll_wakeup_#in~wait#1.base, vhost_poll_wakeup_#in~wait#1.offset, vhost_poll_wakeup_#in~mode#1, vhost_poll_wakeup_#in~sync#1, vhost_poll_wakeup_#in~key#1.base, vhost_poll_wakeup_#in~key#1.offset;assume { :end_inline_vhost_poll_wakeup } true;assume -2147483648 <= #t~ret170#1 && #t~ret170#1 <= 2147483647;havoc #t~ret170#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10651-1: SUMMARY for call main_#t~ret1249#1 := vhost_net_open(main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_group2~0#1.base, main_~var_group2~0#1.offset); srcloc: null [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10651: assume -2147483648 <= main_#t~ret1249#1 && main_#t~ret1249#1 <= 2147483647;main_~res_vhost_net_open_13~0#1 := main_#t~ret1249#1;havoc main_#t~ret1249#1;assume { :begin_inline_ldv_check_return_value } true;ldv_check_return_value_#in~arg0#1 := main_~res_vhost_net_open_13~0#1;havoc ldv_check_return_value_~arg0#1;ldv_check_return_value_~arg0#1 := ldv_check_return_value_#in~arg0#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10585: vhost_net_compat_ioctl_#t~ret1241#1.base, vhost_net_compat_ioctl_#t~ret1241#1.offset := compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;havoc compat_ptr_#in~uptr#1;assume { :end_inline_compat_ptr } true;vhost_net_compat_ioctl_~tmp~70#1.base, vhost_net_compat_ioctl_~tmp~70#1.offset := vhost_net_compat_ioctl_#t~ret1241#1.base, vhost_net_compat_ioctl_#t~ret1241#1.offset;havoc vhost_net_compat_ioctl_#t~ret1241#1.base, vhost_net_compat_ioctl_#t~ret1241#1.offset; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10664: assume -2147483648 <= main_#t~ret1250#1 && main_#t~ret1250#1 <= 2147483647;havoc main_#t~ret1250#1;main_~ldv_s_vhost_net_fops_file_operations~0#1 := 0; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10664-1: SUMMARY for call main_#t~ret1250#1 := vhost_net_release(main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_group2~0#1.base, main_~var_group2~0#1.offset); srcloc: null [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10652: havoc ldv_check_return_value_~arg0#1;havoc ldv_check_return_value_#in~arg0#1;assume { :end_inline_ldv_check_return_value } true; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10586: assume -9223372036854775808 <= vhost_net_compat_ioctl_#t~ret1242#1 && vhost_net_compat_ioctl_#t~ret1242#1 <= 9223372036854775807;vhost_net_compat_ioctl_~tmp___0~49#1 := vhost_net_compat_ioctl_#t~ret1242#1;havoc vhost_net_compat_ioctl_#t~ret1242#1;vhost_net_compat_ioctl_#res#1 := vhost_net_compat_ioctl_~tmp___0~49#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10677: assume main_#t~switch1248#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10677: assume !main_#t~switch1248#1;havoc main_#t~switch1248#1;havoc main_#t~ret1251#1;havoc main_#t~ret1252#1;havoc main_#t~switch1248#1;havoc main_#t~ret1251#1;havoc main_#t~ret1252#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10648: assume 0 != main_~res_vhost_net_open_13~0#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10648: assume !(0 != main_~res_vhost_net_open_13~0#1);main_~ldv_s_vhost_net_fops_file_operations~0#1 := 1 + main_~ldv_s_vhost_net_fops_file_operations~0#1; [2025-02-08 02:31:20,534 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10586-1: SUMMARY for call vhost_net_compat_ioctl_#t~ret1242#1 := vhost_net_ioctl(vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset, vhost_net_compat_ioctl_~ioctl#1, vhost_net_compat_ioctl_~tmp~70#1.base + vhost_net_compat_ioctl_~tmp~70#1.offset); srcloc: null [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10648-2: assume main_#t~switch1248#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10648-2: assume !main_#t~switch1248#1;main_#t~switch1248#1 := main_#t~switch1248#1 || 1 == main_~tmp___0~50#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10648-1: assume 0 == main_~ldv_s_vhost_net_fops_file_operations~0#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10648-1: assume !(0 == main_~ldv_s_vhost_net_fops_file_operations~0#1); [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10669: assume main_#t~switch1248#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10669: assume !main_#t~switch1248#1;main_#t~switch1248#1 := main_#t~switch1248#1 || 3 == main_~tmp___0~50#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10673: assume main_#t~switch1248#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10673: assume !main_#t~switch1248#1;main_#t~switch1248#1 := true; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10661-1: assume main_#t~switch1248#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10661-1: assume !main_#t~switch1248#1;main_#t~switch1248#1 := main_#t~switch1248#1 || 2 == main_~tmp___0~50#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10661: assume 1 == main_~ldv_s_vhost_net_fops_file_operations~0#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10661: assume !(1 == main_~ldv_s_vhost_net_fops_file_operations~0#1); [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10674: assume { :begin_inline_vhost_net_compat_ioctl } true;vhost_net_compat_ioctl_#in~f#1.base, vhost_net_compat_ioctl_#in~f#1.offset, vhost_net_compat_ioctl_#in~ioctl#1, vhost_net_compat_ioctl_#in~arg#1 := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_vhost_net_compat_ioctl_28_p1~0#1, main_~var_vhost_net_compat_ioctl_28_p2~0#1;havoc vhost_net_compat_ioctl_#res#1;havoc vhost_net_compat_ioctl_#t~ret1241#1.base, vhost_net_compat_ioctl_#t~ret1241#1.offset, vhost_net_compat_ioctl_#t~ret1242#1, vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset, vhost_net_compat_ioctl_~ioctl#1, vhost_net_compat_ioctl_~arg#1, vhost_net_compat_ioctl_~tmp~70#1.base, vhost_net_compat_ioctl_~tmp~70#1.offset, vhost_net_compat_ioctl_~tmp___0~49#1;vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset := vhost_net_compat_ioctl_#in~f#1.base, vhost_net_compat_ioctl_#in~f#1.offset;vhost_net_compat_ioctl_~ioctl#1 := vhost_net_compat_ioctl_#in~ioctl#1;vhost_net_compat_ioctl_~arg#1 := vhost_net_compat_ioctl_#in~arg#1;havoc vhost_net_compat_ioctl_~tmp~70#1.base, vhost_net_compat_ioctl_~tmp~70#1.offset;havoc vhost_net_compat_ioctl_~tmp___0~49#1;assume { :begin_inline_compat_ptr } true;compat_ptr_#in~uptr#1 := vhost_net_compat_ioctl_~arg#1;havoc compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;compat_ptr_~uptr#1 := compat_ptr_#in~uptr#1;compat_ptr_#res#1.base, compat_ptr_#res#1.offset := 0, (if compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11595: havoc misc_register_#t~nondet1296#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10674-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10670: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L11591: havoc misc_deregister_#t~nondet1295#1; [2025-02-08 02:31:20,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10650: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:31:20,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10675: main_#t~ret1252#1 := vhost_net_compat_ioctl_#res#1;havoc vhost_net_compat_ioctl_#t~ret1241#1.base, vhost_net_compat_ioctl_#t~ret1241#1.offset, vhost_net_compat_ioctl_#t~ret1242#1, vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset, vhost_net_compat_ioctl_~ioctl#1, vhost_net_compat_ioctl_~arg#1, vhost_net_compat_ioctl_~tmp~70#1.base, vhost_net_compat_ioctl_~tmp~70#1.offset, vhost_net_compat_ioctl_~tmp___0~49#1;havoc vhost_net_compat_ioctl_#in~f#1.base, vhost_net_compat_ioctl_#in~f#1.offset, vhost_net_compat_ioctl_#in~ioctl#1, vhost_net_compat_ioctl_#in~arg#1;assume { :end_inline_vhost_net_compat_ioctl } true;assume -9223372036854775808 <= main_#t~ret1252#1 && main_#t~ret1252#1 <= 9223372036854775807; [2025-02-08 02:31:20,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10646: havoc main_#t~nondet1247#1;assume -2147483648 <= main_#t~nondet1247#1 && main_#t~nondet1247#1 <= 2147483647;main_~tmp___0~50#1 := main_#t~nondet1247#1;main_#t~switch1248#1 := 0 == main_~tmp___0~50#1; [2025-02-08 02:31:20,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10671-1: SUMMARY for call main_#t~ret1251#1 := vhost_net_ioctl(main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_vhost_net_ioctl_27_p1~0#1, main_~var_vhost_net_ioctl_27_p2~0#1); srcloc: null [2025-02-08 02:31:20,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10671: assume -9223372036854775808 <= main_#t~ret1251#1 && main_#t~ret1251#1 <= 9223372036854775807; [2025-02-08 02:31:20,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10601: havoc vhost_enable_zcopy_#t~bitwise217#1, vhost_enable_zcopy_#t~bitwise218#1, vhost_enable_zcopy_~vq#1;havoc vhost_enable_zcopy_#in~vq#1;assume { :end_inline_vhost_enable_zcopy } true; [2025-02-08 02:31:20,536 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L10663: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:31:20,917 INFO L? ?]: Removed 1420 outVars from TransFormulas that were not future-live. [2025-02-08 02:31:20,917 INFO L308 CfgBuilder]: Performing block encoding [2025-02-08 02:31:20,967 INFO L332 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-02-08 02:31:20,968 INFO L337 CfgBuilder]: Removed 0 assume(true) statements. [2025-02-08 02:31:20,968 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:31:20 BoogieIcfgContainer [2025-02-08 02:31:20,968 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-02-08 02:31:20,971 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-02-08 02:31:20,971 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-02-08 02:31:20,975 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-02-08 02:31:20,976 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.02 02:31:03" (1/3) ... [2025-02-08 02:31:20,976 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36cb85b9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:31:20, skipping insertion in model container [2025-02-08 02:31:20,976 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:31:07" (2/3) ... [2025-02-08 02:31:20,976 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@36cb85b9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:31:20, skipping insertion in model container [2025-02-08 02:31:20,977 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:31:20" (3/3) ... [2025-02-08 02:31:20,978 INFO L128 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2025-02-08 02:31:20,991 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-02-08 02:31:20,992 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i that has 113 procedures, 1445 locations, 1 initial locations, 2 loop locations, and 1 error locations. [2025-02-08 02:31:21,081 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-02-08 02:31:21,096 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@1509f463, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-02-08 02:31:21,096 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-02-08 02:31:21,104 INFO L276 IsEmpty]: Start isEmpty. Operand has 1383 states, 894 states have (on average 1.332214765100671) internal successors, (1191), 976 states have internal predecessors, (1191), 332 states have call successors, (332), 92 states have call predecessors, (332), 91 states have return successors, (331), 326 states have call predecessors, (331), 331 states have call successors, (331) [2025-02-08 02:31:21,110 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2025-02-08 02:31:21,110 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:31:21,110 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:31:21,111 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:31:21,116 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:31:21,116 INFO L85 PathProgramCache]: Analyzing trace with hash -1374137906, now seen corresponding path program 1 times [2025-02-08 02:31:21,122 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:31:21,123 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1134041948] [2025-02-08 02:31:21,123 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:31:21,123 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:31:21,446 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 19 statements into 1 equivalence classes. [2025-02-08 02:31:21,596 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 19 of 19 statements. [2025-02-08 02:31:21,597 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:31:21,597 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:31:21,926 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:31:21,927 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:31:21,927 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1134041948] [2025-02-08 02:31:21,928 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1134041948] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:31:21,929 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:31:21,929 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:31:21,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [332354887] [2025-02-08 02:31:21,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:31:21,934 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:31:21,935 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:31:21,951 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:31:21,952 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:21,958 INFO L87 Difference]: Start difference. First operand has 1383 states, 894 states have (on average 1.332214765100671) internal successors, (1191), 976 states have internal predecessors, (1191), 332 states have call successors, (332), 92 states have call predecessors, (332), 91 states have return successors, (331), 326 states have call predecessors, (331), 331 states have call successors, (331) Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:21,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:31:21,994 INFO L93 Difference]: Finished difference Result 49 states and 64 transitions. [2025-02-08 02:31:21,995 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:31:21,996 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 19 [2025-02-08 02:31:21,996 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:31:22,004 INFO L225 Difference]: With dead ends: 49 [2025-02-08 02:31:22,005 INFO L226 Difference]: Without dead ends: 23 [2025-02-08 02:31:22,007 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:22,012 INFO L435 NwaCegarLoop]: 37 mSDtfsCounter, 28 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 37 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:31:22,013 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [28 Valid, 37 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:31:22,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23 states. [2025-02-08 02:31:22,038 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23 to 23. [2025-02-08 02:31:22,039 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23 states, 16 states have (on average 1.125) internal successors, (18), 18 states have internal predecessors, (18), 5 states have call successors, (5), 2 states have call predecessors, (5), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:31:22,044 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23 states to 23 states and 25 transitions. [2025-02-08 02:31:22,046 INFO L78 Accepts]: Start accepts. Automaton has 23 states and 25 transitions. Word has length 19 [2025-02-08 02:31:22,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:31:22,048 INFO L471 AbstractCegarLoop]: Abstraction has 23 states and 25 transitions. [2025-02-08 02:31:22,048 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:22,049 INFO L276 IsEmpty]: Start isEmpty. Operand 23 states and 25 transitions. [2025-02-08 02:31:22,049 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 21 [2025-02-08 02:31:22,050 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:31:22,050 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:31:22,050 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-02-08 02:31:22,050 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:31:22,051 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:31:22,051 INFO L85 PathProgramCache]: Analyzing trace with hash 350732191, now seen corresponding path program 1 times [2025-02-08 02:31:22,051 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:31:22,051 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1576798364] [2025-02-08 02:31:22,052 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:31:22,052 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:31:22,438 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 20 statements into 1 equivalence classes. [2025-02-08 02:31:22,514 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 20 of 20 statements. [2025-02-08 02:31:22,514 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:31:22,514 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:31:22,644 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:31:22,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:31:22,645 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1576798364] [2025-02-08 02:31:22,645 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1576798364] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:31:22,645 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:31:22,645 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:31:22,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1217558391] [2025-02-08 02:31:22,646 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:31:22,647 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:31:22,648 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:31:22,649 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:31:22,649 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:22,649 INFO L87 Difference]: Start difference. First operand 23 states and 25 transitions. Second operand has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:22,655 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:31:22,656 INFO L93 Difference]: Finished difference Result 25 states and 26 transitions. [2025-02-08 02:31:22,656 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:31:22,657 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 20 [2025-02-08 02:31:22,657 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:31:22,657 INFO L225 Difference]: With dead ends: 25 [2025-02-08 02:31:22,657 INFO L226 Difference]: Without dead ends: 22 [2025-02-08 02:31:22,658 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:22,659 INFO L435 NwaCegarLoop]: 22 mSDtfsCounter, 10 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 10 SdHoareTripleChecker+Valid, 22 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:31:22,659 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [10 Valid, 22 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:31:22,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22 states. [2025-02-08 02:31:22,662 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22 to 22. [2025-02-08 02:31:22,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22 states, 16 states have (on average 1.0625) internal successors, (17), 17 states have internal predecessors, (17), 4 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:31:22,664 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22 states to 22 states and 23 transitions. [2025-02-08 02:31:22,665 INFO L78 Accepts]: Start accepts. Automaton has 22 states and 23 transitions. Word has length 20 [2025-02-08 02:31:22,665 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:31:22,666 INFO L471 AbstractCegarLoop]: Abstraction has 22 states and 23 transitions. [2025-02-08 02:31:22,666 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.666666666666667) internal successors, (14), 3 states have internal predecessors, (14), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:22,666 INFO L276 IsEmpty]: Start isEmpty. Operand 22 states and 23 transitions. [2025-02-08 02:31:22,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 22 [2025-02-08 02:31:22,667 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:31:22,667 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:31:22,667 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2025-02-08 02:31:22,667 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:31:22,667 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:31:22,671 INFO L85 PathProgramCache]: Analyzing trace with hash -2012870673, now seen corresponding path program 1 times [2025-02-08 02:31:22,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:31:22,671 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861096546] [2025-02-08 02:31:22,671 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:31:22,671 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:31:22,821 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 21 statements into 1 equivalence classes. [2025-02-08 02:31:22,844 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 21 of 21 statements. [2025-02-08 02:31:22,844 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:31:22,845 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:31:22,979 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:31:22,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:31:22,980 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861096546] [2025-02-08 02:31:22,980 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861096546] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:31:22,980 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:31:22,980 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:31:22,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1437029382] [2025-02-08 02:31:22,980 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:31:22,984 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:31:22,984 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:31:22,984 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:31:22,984 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:22,985 INFO L87 Difference]: Start difference. First operand 22 states and 23 transitions. Second operand has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:22,990 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:31:22,991 INFO L93 Difference]: Finished difference Result 24 states and 24 transitions. [2025-02-08 02:31:22,991 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:31:22,991 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 21 [2025-02-08 02:31:22,993 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:31:22,993 INFO L225 Difference]: With dead ends: 24 [2025-02-08 02:31:22,993 INFO L226 Difference]: Without dead ends: 21 [2025-02-08 02:31:22,995 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:22,996 INFO L435 NwaCegarLoop]: 20 mSDtfsCounter, 7 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 20 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:31:22,996 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 20 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:31:22,996 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21 states. [2025-02-08 02:31:23,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21 to 21. [2025-02-08 02:31:23,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21 states, 16 states have (on average 1.0) internal successors, (16), 16 states have internal predecessors, (16), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:31:23,002 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21 states to 21 states and 21 transitions. [2025-02-08 02:31:23,002 INFO L78 Accepts]: Start accepts. Automaton has 21 states and 21 transitions. Word has length 21 [2025-02-08 02:31:23,002 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:31:23,002 INFO L471 AbstractCegarLoop]: Abstraction has 21 states and 21 transitions. [2025-02-08 02:31:23,003 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.0) internal successors, (15), 3 states have internal predecessors, (15), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:23,003 INFO L276 IsEmpty]: Start isEmpty. Operand 21 states and 21 transitions. [2025-02-08 02:31:23,003 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2025-02-08 02:31:23,005 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:31:23,005 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:31:23,005 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2025-02-08 02:31:23,005 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:31:23,005 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:31:23,006 INFO L85 PathProgramCache]: Analyzing trace with hash 2024850848, now seen corresponding path program 1 times [2025-02-08 02:31:23,006 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:31:23,006 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [144166766] [2025-02-08 02:31:23,006 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:31:23,006 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:31:23,155 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 22 statements into 1 equivalence classes. [2025-02-08 02:31:23,178 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 22 of 22 statements. [2025-02-08 02:31:23,179 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:31:23,179 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:31:23,277 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:31:23,278 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:31:23,278 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [144166766] [2025-02-08 02:31:23,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [144166766] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:31:23,278 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:31:23,278 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:31:23,278 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [931633727] [2025-02-08 02:31:23,278 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:31:23,279 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:31:23,279 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:31:23,279 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:31:23,279 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:23,280 INFO L87 Difference]: Start difference. First operand 21 states and 21 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:23,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:31:23,282 INFO L93 Difference]: Finished difference Result 21 states and 21 transitions. [2025-02-08 02:31:23,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:31:23,282 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 22 [2025-02-08 02:31:23,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:31:23,283 INFO L225 Difference]: With dead ends: 21 [2025-02-08 02:31:23,283 INFO L226 Difference]: Without dead ends: 0 [2025-02-08 02:31:23,283 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:31:23,284 INFO L435 NwaCegarLoop]: 18 mSDtfsCounter, 3 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 18 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:31:23,284 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 18 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:31:23,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2025-02-08 02:31:23,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2025-02-08 02:31:23,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:31:23,285 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2025-02-08 02:31:23,285 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 22 [2025-02-08 02:31:23,285 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:31:23,286 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2025-02-08 02:31:23,286 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:31:23,286 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2025-02-08 02:31:23,286 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2025-02-08 02:31:23,289 INFO L782 garLoopResultBuilder]: Registering result SAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2025-02-08 02:31:23,290 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2025-02-08 02:31:23,292 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2025-02-08 02:31:23,294 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2025-02-08 02:31:23,371 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-02-08 02:31:23,384 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.02 02:31:23 BoogieIcfgContainer [2025-02-08 02:31:23,385 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-02-08 02:31:23,385 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-02-08 02:31:23,385 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-02-08 02:31:23,386 INFO L274 PluginConnector]: Witness Printer initialized [2025-02-08 02:31:23,387 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:31:20" (3/4) ... [2025-02-08 02:31:23,389 INFO L146 WitnessPrinter]: Generating witness for correct program [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_add_used_and_signal [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure memcpy_toiovecend [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure handle_tx_net [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_vq_free_iovecs [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure list_empty [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kref_sub [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __rcu_read_lock [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vq_access_ok [2025-02-08 02:31:23,395 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_flush [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure wake_up_process [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_dev_check_owner [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure log_write [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure handle_tx [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure variable_test_bit [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_init [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure debug_lockdep_rcu_enabled [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure get_current [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_vq_reset [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_ctx_fileget [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_malloc [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_flush [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vq_log_access_ok [2025-02-08 02:31:23,396 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure rcu_read_lock_held [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kfree [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __get_user_bad [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_ubuf_put [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_unlock [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_to_user [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_lock_mutex [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __rcu_read_unlock [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_error [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure translate_desc [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_ctx_put [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_ioctl [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_disable_vq [2025-02-08 02:31:23,397 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __dynamic_pr_debug [2025-02-08 02:31:23,398 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __put_user_bad [2025-02-08 02:31:23,398 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mmput [2025-02-08 02:31:23,398 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kref_put [2025-02-08 02:31:23,398 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock_irq [2025-02-08 02:31:23,398 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv__builtin_expect [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_ubuf_put_and_wait [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure atomic_read [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __vhost_add_used_n [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_user_generic [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure tx_poll_start [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_queue [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure handle_rx [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure handle_tx_kick [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_open [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_lock [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spinlock_check [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ERR_PTR [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure rcu_is_cpu_idle [2025-02-08 02:31:23,399 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_from_user [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_get_vq_desc [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_fget [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_init [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_signal [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_enable_notify [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_stop [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure lockdep_rcu_suspicious [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure INIT_LIST_HEAD [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __bad_percpu_size [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kthread_stop [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~TO~VOID [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure memory_access_ok [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_lock_irq [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vq_memory_access_ok [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure current_thread_info [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure move_iovec_hdr [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_seq_done [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __wake_up [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_release [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure PTR_ERR [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock_irqrestore [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_queue [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_stop [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_dev_cleanup [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_zerocopy_callback [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_disable_notify [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure might_fault [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure prepare_to_wait [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_flush_vq [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure warn_slowpath_null [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_stop_vq [2025-02-08 02:31:23,400 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_update_used_flags [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_discard_vq_desc [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __mutex_init [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure lock_is_held [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kmalloc [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_flush [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure fput [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _raw_spin_lock_irqsave [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_unlock_mutex [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure next_desc [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure log_access_ok [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure iov_length [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure tx_poll_stop [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __init_waitqueue_head [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure set_bit [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_signal [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_handler_precall [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure schedule [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_zerocopy_signal_used [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_start [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _copy_from_user [2025-02-08 02:31:23,401 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure finish_wait [2025-02-08 02:31:23,402 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_has_feature [2025-02-08 02:31:23,402 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure IS_ERR [2025-02-08 02:31:23,471 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 609 nodes and edges [2025-02-08 02:31:23,479 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 151 nodes and edges [2025-02-08 02:31:23,487 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2025-02-08 02:31:23,493 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 23 nodes and edges [2025-02-08 02:31:23,502 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 7 nodes and edges [2025-02-08 02:31:23,509 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2025-02-08 02:31:23,513 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2025-02-08 02:31:23,516 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2025-02-08 02:31:23,810 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-02-08 02:31:23,811 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-02-08 02:31:23,811 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-02-08 02:31:23,812 INFO L158 Benchmark]: Toolchain (without parser) took 20060.10ms. Allocated memory was 142.6MB in the beginning and 369.1MB in the end (delta: 226.5MB). Free memory was 99.3MB in the beginning and 58.6MB in the end (delta: 40.7MB). Peak memory consumption was 278.9MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,812 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 201.3MB. Free memory is still 123.9MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:31:23,812 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3519.20ms. Allocated memory was 142.6MB in the beginning and 151.0MB in the end (delta: 8.4MB). Free memory was 98.8MB in the beginning and 77.3MB in the end (delta: 21.5MB). Peak memory consumption was 111.9MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,813 INFO L158 Benchmark]: Boogie Procedure Inliner took 313.67ms. Allocated memory is still 151.0MB. Free memory was 77.3MB in the beginning and 41.3MB in the end (delta: 36.1MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,813 INFO L158 Benchmark]: Boogie Preprocessor took 1306.80ms. Allocated memory was 151.0MB in the beginning and 302.0MB in the end (delta: 151.0MB). Free memory was 41.3MB in the beginning and 169.5MB in the end (delta: -128.3MB). Peak memory consumption was 157.2MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,813 INFO L158 Benchmark]: IcfgBuilder took 12072.99ms. Allocated memory is still 302.0MB. Free memory was 169.5MB in the beginning and 76.4MB in the end (delta: 93.2MB). Peak memory consumption was 169.2MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,813 INFO L158 Benchmark]: TraceAbstraction took 2413.97ms. Allocated memory was 302.0MB in the beginning and 369.1MB in the end (delta: 67.1MB). Free memory was 73.8MB in the beginning and 110.0MB in the end (delta: -36.2MB). Peak memory consumption was 32.1MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,814 INFO L158 Benchmark]: Witness Printer took 425.46ms. Allocated memory is still 369.1MB. Free memory was 110.0MB in the beginning and 58.6MB in the end (delta: 51.4MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. [2025-02-08 02:31:23,815 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 201.3MB. Free memory is still 123.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3519.20ms. Allocated memory was 142.6MB in the beginning and 151.0MB in the end (delta: 8.4MB). Free memory was 98.8MB in the beginning and 77.3MB in the end (delta: 21.5MB). Peak memory consumption was 111.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 313.67ms. Allocated memory is still 151.0MB. Free memory was 77.3MB in the beginning and 41.3MB in the end (delta: 36.1MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 1306.80ms. Allocated memory was 151.0MB in the beginning and 302.0MB in the end (delta: 151.0MB). Free memory was 41.3MB in the beginning and 169.5MB in the end (delta: -128.3MB). Peak memory consumption was 157.2MB. Max. memory is 16.1GB. * IcfgBuilder took 12072.99ms. Allocated memory is still 302.0MB. Free memory was 169.5MB in the beginning and 76.4MB in the end (delta: 93.2MB). Peak memory consumption was 169.2MB. Max. memory is 16.1GB. * TraceAbstraction took 2413.97ms. Allocated memory was 302.0MB in the beginning and 369.1MB in the end (delta: 67.1MB). Free memory was 73.8MB in the beginning and 110.0MB in the end (delta: -36.2MB). Peak memory consumption was 32.1MB. Max. memory is 16.1GB. * Witness Printer took 425.46ms. Allocated memory is still 369.1MB. Free memory was 110.0MB in the beginning and 58.6MB in the end (delta: 51.4MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5233]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5233] - GenericResultAtLocation [Line: 5241]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("bt %2,%1\n\tsbb %0,%0": "=r" (oldbit): "m" (*((unsigned long *)addr)), "Ir" (nr)); [5241-5242] - GenericResultAtLocation [Line: 5287]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [5287] - GenericResultAtLocation [Line: 5290]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [5290] - GenericResultAtLocation [Line: 5293]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [5293] - GenericResultAtLocation [Line: 5296]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [5296] - GenericResultAtLocation [Line: 5345]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; subl %2,%0; sete %1": "+m" (v->counter), "=qm" (c): "ir" (i): "memory"); [5345-5346] - GenericResultAtLocation [Line: 5396]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& kernel_stack)); [5396] - GenericResultAtLocation [Line: 5399]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5399] - GenericResultAtLocation [Line: 5402]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5402] - GenericResultAtLocation [Line: 5405]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5405] - GenericResultAtLocation [Line: 5485]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5485] - GenericResultAtLocation [Line: 5493]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5493] - GenericResultAtLocation [Line: 5496]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5496] - GenericResultAtLocation [Line: 5696]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\tcall %P4\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (3*32+16)\n .byte 662b-661b\n .byte 6641f-6631f\n .long 661b - .\n .long 6632f - .\n .word (9*32+ 9)\n .byte 662b-661b\n .byte 6642f-6632f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n .byte 0xff + (6642f-6632f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\tcall %P5\n6641:\n\t6632:\n\tcall %P6\n6642:\n\t.popsection": "=a" (ret), "=D" (to), "=S" (from), "=d" (len): [old] "i" (& copy_user_generic_unrolled), [new1] "i" (& copy_user_generic_string), [new2] "i" (& copy_user_enhanced_fast_string), "1" (to), "2" (from), "3" (len): "memory", "rcx", "r8", "r9", "r10", "r11"); [5696-5700] - GenericResultAtLocation [Line: 5762]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=q" (*((u8 *)dst)): "m" (*((struct __large_struct *)src)), "i" (1), "0" (ret)); [5762-5764] - GenericResultAtLocation [Line: 5767]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u16 *)dst)): "m" (*((struct __large_struct *)src)), "i" (2), "0" (ret)); [5767-5769] - GenericResultAtLocation [Line: 5772]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u32 *)dst)): "m" (*((struct __large_struct *)src)), "i" (4), "0" (ret)); [5772-5774] - GenericResultAtLocation [Line: 5777]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (8), "0" (ret)); [5777-5779] - GenericResultAtLocation [Line: 5782]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (10), "0" (ret)); [5782-5784] - GenericResultAtLocation [Line: 5790]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u16 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (2), "0" (ret)); [5790-5792] - GenericResultAtLocation [Line: 5795]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)src)), "i" (16), "0" (ret)); [5795-5797] - GenericResultAtLocation [Line: 5803]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret), "=r" (*((u64 *)dst + 8U)): "m" (*((struct __large_struct *)src + 8U)), "i" (8), "0" (ret)); [5803-5805] - GenericResultAtLocation [Line: 5827]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "iq" (*((u8 *)src)), "m" (*((struct __large_struct *)dst)), "i" (1), "0" (ret)); [5827-5828] - GenericResultAtLocation [Line: 5831]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "ir" (*((u16 *)src)), "m" (*((struct __large_struct *)dst)), "i" (2), "0" (ret)); [5831-5832] - GenericResultAtLocation [Line: 5835]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "ir" (*((u32 *)src)), "m" (*((struct __large_struct *)dst)), "i" (4), "0" (ret)); [5835-5836] - GenericResultAtLocation [Line: 5839]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)dst)), "i" (8), "0" (ret)); [5839-5840] - GenericResultAtLocation [Line: 5843]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)dst)), "i" (10), "0" (ret)); [5843-5844] - GenericResultAtLocation [Line: 5850]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5850] - GenericResultAtLocation [Line: 5851]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "ir" (*((u16 *)src + 4UL)), "m" (*((struct __large_struct *)dst + 4U)), "i" (2), "0" (ret)); [5851-5852] - GenericResultAtLocation [Line: 5855]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)dst)), "i" (16), "0" (ret)); [5855-5856] - GenericResultAtLocation [Line: 5862]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [5862] - GenericResultAtLocation [Line: 5863]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (ret): "er" (*((u64 *)src + 1UL)), "m" (*((struct __large_struct *)dst + 1U)), "i" (8), "0" (ret)); [5863-5864] - GenericResultAtLocation [Line: 6101]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (169), "i" (12UL)); [6101-6102] - GenericResultAtLocation [Line: 6210]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %b0, %1\n": "+q" (__ret), "+m" (tmp___1->state): : "memory", "cc"); [6210-6211] - GenericResultAtLocation [Line: 6215]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %w0, %1\n": "+r" (__ret), "+m" (tmp___2->state): : "memory", "cc"); [6215-6216] - GenericResultAtLocation [Line: 6220]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0, %1\n": "+r" (__ret), "+m" (tmp___3->state): : "memory", "cc"); [6220-6221] - GenericResultAtLocation [Line: 6225]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %q0, %1\n": "+r" (__ret), "+m" (tmp___4->state): : "memory", "cc"); [6225-6226] - GenericResultAtLocation [Line: 6650]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (log_base + a), "g" ((long )((sz + 32767UL) / 32768UL)), "rm" (tmp->addr_limit.seg)); [6650-6651] - GenericResultAtLocation [Line: 6677]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" ((void *)a), "g" ((long )m->memory_size), "rm" (tmp___0->addr_limit.seg)); [6677-6678] - GenericResultAtLocation [Line: 6750]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (desc), "g" ((long )((unsigned long )num * 16UL)), "rm" (tmp___0->addr_limit.seg)); [6750-6751] - GenericResultAtLocation [Line: 6755]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___0), "=r" (roksum___0): "1" (avail), "g" ((long )(((unsigned long )num + 2UL) * 2UL + s)), "rm" (tmp___2->addr_limit.seg)); [6755-6756] - GenericResultAtLocation [Line: 6760]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___1), "=r" (roksum___1): "1" (used), "g" ((long )(((unsigned long )num * 8UL + s) + 4UL)), "rm" (tmp___4->addr_limit.seg)); [6760-6762] - GenericResultAtLocation [Line: 6933]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6933] - GenericResultAtLocation [Line: 6983]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6983] - GenericResultAtLocation [Line: 6986]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6986] - GenericResultAtLocation [Line: 6989]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6989] - GenericResultAtLocation [Line: 6992]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6992] - GenericResultAtLocation [Line: 6995]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [6995] - GenericResultAtLocation [Line: 7297]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7297] - GenericResultAtLocation [Line: 7300]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7300] - GenericResultAtLocation [Line: 7303]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7303] - GenericResultAtLocation [Line: 7306]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7306] - GenericResultAtLocation [Line: 7309]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [7309] - GenericResultAtLocation [Line: 7414]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (983), "i" (12UL)); [7414-7415] - GenericResultAtLocation [Line: 7471]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7471] - GenericResultAtLocation [Line: 7498]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (1038), "i" (12UL)); [7498-7499] - GenericResultAtLocation [Line: 7514]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "iq" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7514-7516] - GenericResultAtLocation [Line: 7519]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7519-7521] - GenericResultAtLocation [Line: 7524]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7524-7526] - GenericResultAtLocation [Line: 7529]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "er" (vq->used_flags), "m" (*((struct __large_struct *)(& (vq->used)->flags))), "i" (-14), "0" (__pu_err)); [7529-7531] - GenericResultAtLocation [Line: 7543]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7543] - GenericResultAtLocation [Line: 7565]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "iq" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7565-7567] - GenericResultAtLocation [Line: 7570]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7570-7572] - GenericResultAtLocation [Line: 7575]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7575-7577] - GenericResultAtLocation [Line: 7580]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "er" (vq->avail_idx), "m" (*((struct __large_struct *)(& (vq->used)->ring) + (unsigned long )vq->num)), "i" (-14), "0" (__pu_err)); [7580-7582] - GenericResultAtLocation [Line: 7594]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7594] - GenericResultAtLocation [Line: 7626]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7626] - GenericResultAtLocation [Line: 7629]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7629] - GenericResultAtLocation [Line: 7632]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7632] - GenericResultAtLocation [Line: 7635]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7635] - GenericResultAtLocation [Line: 7638]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->used)->idx)); [7638] - GenericResultAtLocation [Line: 8020]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8020-8022] - GenericResultAtLocation [Line: 8025]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8025-8027] - GenericResultAtLocation [Line: 8030]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8030-8032] - GenericResultAtLocation [Line: 8035]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8035-8037] - GenericResultAtLocation [Line: 8091]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8091] - GenericResultAtLocation [Line: 8095]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=q" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8095-8097] - GenericResultAtLocation [Line: 8100]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8100-8102] - GenericResultAtLocation [Line: 8105]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8105-8107] - GenericResultAtLocation [Line: 8110]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring) + (unsigned long )((unsigned int )last_avail_idx % vq->num))), "i" (-14), "0" (__gu_err___0)); [8110-8112] - GenericResultAtLocation [Line: 8332]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/vhost_net.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/13/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/vhost.c.prepared"), "i" (1365), "i" (12UL)); [8332-8333] - GenericResultAtLocation [Line: 8367]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "iq" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8367-8369] - GenericResultAtLocation [Line: 8372]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8372-8374] - GenericResultAtLocation [Line: 8377]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8377-8379] - GenericResultAtLocation [Line: 8382]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err): "er" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [8382-8384] - GenericResultAtLocation [Line: 8412]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "iq" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8412-8414] - GenericResultAtLocation [Line: 8417]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "ir" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8417-8419] - GenericResultAtLocation [Line: 8422]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "ir" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8422-8424] - GenericResultAtLocation [Line: 8427]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___0): "er" ((unsigned int )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [8427-8429] - GenericResultAtLocation [Line: 8454]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8454] - GenericResultAtLocation [Line: 8458]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %b1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "iq" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8458-8460] - GenericResultAtLocation [Line: 8463]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %w1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "ir" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8463-8465] - GenericResultAtLocation [Line: 8468]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %k1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "ir" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8468-8470] - GenericResultAtLocation [Line: 8473]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %1,%2\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__pu_err___1): "er" ((unsigned int )vq->last_used_idx + 1U), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [8473-8475] - GenericResultAtLocation [Line: 8502]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8502] - GenericResultAtLocation [Line: 8560]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8560] - GenericResultAtLocation [Line: 8603]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8603] - GenericResultAtLocation [Line: 8608]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8608] - GenericResultAtLocation [Line: 8611]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8611] - GenericResultAtLocation [Line: 8614]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8614] - GenericResultAtLocation [Line: 8617]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8617] - GenericResultAtLocation [Line: 8620]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [8620] - GenericResultAtLocation [Line: 8678]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [8678] - GenericResultAtLocation [Line: 8693]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8693-8695] - GenericResultAtLocation [Line: 8698]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8698-8700] - GenericResultAtLocation [Line: 8703]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8703-8705] - GenericResultAtLocation [Line: 8708]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [8708-8710] - GenericResultAtLocation [Line: 8754]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_1": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8754] - GenericResultAtLocation [Line: 8757]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_2": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8757] - GenericResultAtLocation [Line: 8760]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_4": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8760] - GenericResultAtLocation [Line: 8763]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_8": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8763] - GenericResultAtLocation [Line: 8766]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_X": "=a" (__ret_gu), "=d" (__val_gu): "0" ((u16 *)(& (vq->avail)->ring) + (unsigned long )vq->num)); [8766] - GenericResultAtLocation [Line: 8894]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [8894] - GenericResultAtLocation [Line: 8898]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovb %2,%b1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorb %b1,%b1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8898-8900] - GenericResultAtLocation [Line: 8903]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovw %2,%w1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorw %w1,%w1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8903-8905] - GenericResultAtLocation [Line: 8908]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovl %2,%k1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorl %k1,%k1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8908-8910] - GenericResultAtLocation [Line: 8913]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xcb\n6641:\n\t.popsection\n1:\tmovq %2,%1\n2: 661:\n\t.byte 0x66,0x66,0x90\n\n662:\n.pushsection .altinstructions,\"a\"\n .long 661b - .\n .long 6631f - .\n .word (9*32+20)\n .byte 662b-661b\n .byte 6641f-6631f\n.popsection\n.pushsection .discard,\"aw\",@progbits\n .byte 0xff + (6641f-6631f) - (662b-661b)\n.popsection\n.pushsection .altinstr_replacement, \"ax\"\n6631:\n\t.byte 0x0f,0x01,0xca\n6641:\n\t.popsection\n.section .fixup,\"ax\"\n3:\tmov %3,%0\n\txorq %1,%1\n\tjmp 2b\n.previous\n .pushsection \"__ex_table\",\"a\"\n .balign 8\n .long (1b) - .\n .long (3b) - .\n .popsection\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [8913-8915] - GenericResultAtLocation [Line: 9236]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [9236] - GenericResultAtLocation [Line: 10174]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10174] - GenericResultAtLocation [Line: 10409]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10409] - GenericResultAtLocation [Line: 10500]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10500] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 10992]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 113 procedures, 1445 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.3s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 48 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 48 mSDsluCounter, 97 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 0 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 5 IncrementalHoareTripleChecker+Invalid, 5 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 97 mSDtfsCounter, 5 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 12 GetRequests, 8 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1383occurred in iteration=0, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 4 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 82 NumberOfCodeBlocks, 82 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 78 ConstructedInterpolants, 0 QuantifiedInterpolants, 186 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 8/8 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2025-02-08 02:31:23,880 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE