./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 48c9605d Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash b2aa4e276fef98ba32541b7a5096dd8f6960cfce1e583e06c0f77e654ad49c9d --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:05:21,088 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:05:21,168 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-02-08 02:05:21,172 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:05:21,173 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:05:21,200 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:05:21,201 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:05:21,201 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:05:21,202 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:05:21,202 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:05:21,202 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:05:21,202 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:05:21,202 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:05:21,202 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:05:21,202 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:05:21,204 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:05:21,204 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:05:21,204 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-02-08 02:05:21,205 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:05:21,205 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:05:21,205 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:05:21,205 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:05:21,205 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:05:21,205 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:05:21,206 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:05:21,206 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:05:21,206 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:05:21,206 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:05:21,206 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:05:21,206 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:05:21,207 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:05:21,207 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b2aa4e276fef98ba32541b7a5096dd8f6960cfce1e583e06c0f77e654ad49c9d [2025-02-08 02:05:21,498 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:05:21,510 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:05:21,513 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:05:21,515 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:05:21,516 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:05:21,517 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i [2025-02-08 02:05:22,859 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/ce81b1837/58772fbcd20e466e9ae6c8c913e59aa8/FLAG731932e4f [2025-02-08 02:05:23,587 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:05:23,588 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i [2025-02-08 02:05:23,655 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/ce81b1837/58772fbcd20e466e9ae6c8c913e59aa8/FLAG731932e4f [2025-02-08 02:05:23,675 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/ce81b1837/58772fbcd20e466e9ae6c8c913e59aa8 [2025-02-08 02:05:23,678 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:05:23,680 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:05:23,682 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:05:23,682 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:05:23,687 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:05:23,688 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:05:23" (1/1) ... [2025-02-08 02:05:23,689 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62536908 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:23, skipping insertion in model container [2025-02-08 02:05:23,689 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:05:23" (1/1) ... [2025-02-08 02:05:23,827 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:05:25,576 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i[345844,345857] [2025-02-08 02:05:25,903 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:05:25,946 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:05:26,032 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".section .smp_locks,\"a\"\n" ".balign 4\n" ".long 671f - .\n" ".previous\n" "671:" "\n\tlock; " "bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5021-5027] [2025-02-08 02:05:26,035 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "b " "%%" "gs" ":" "%P" "1" ",%0": "=q" (pfo_ret__): "p" (& current_task)); [5056-5063] [2025-02-08 02:05:26,035 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "w " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& current_task)); [5066-5073] [2025-02-08 02:05:26,035 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "l " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& current_task)); [5076-5083] [2025-02-08 02:05:26,036 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "q " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& current_task)); [5086-5093] [2025-02-08 02:05:26,037 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "b " "%%" "gs" ":" "%P" "1" ",%0": "=q" (pfo_ret__): "p" (& kernel_stack)); [5143-5150] [2025-02-08 02:05:26,038 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "w " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5153-5160] [2025-02-08 02:05:26,038 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "l " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5163-5170] [2025-02-08 02:05:26,039 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("mov" "q " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5173-5180] [2025-02-08 02:05:26,046 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t" "call %P[old]" "\n662:\n" ".section .altinstructions,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "661b\n" " " ".quad" " " "663f\n" "\t .word " "(3*32+16)" "\n" "\t .byte 662b-661b\n" "\t .byte 664f-663f\n" ".previous\n" ".section .discard,\"aw\",@progbits\n" "\t .byte 0xff + (664f-663f) - (662b-661b)\n" ".previous\n" ".section .altinstr_replacement, \"ax\"\n" "663:\n\t" "call %P[new]" "\n664:\n" ".previous": "=a" (ret), "=D" (to), "=S" (from), "=d" (len): [old] "i" (& copy_user_generic_unrolled), [new] "i" (& copy_user_generic_string), "1" (to), "2" (from), "3" (len): "memory", "rcx", "r8", "r9", "r10", "r11"); [5376-5407] [2025-02-08 02:05:26,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=q" (*((u8 *)dst)): "m" (*((struct __large_struct *)((u8 *)src))), "i" (1), "0" (ret)); [5522-5552] [2025-02-08 02:05:26,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u16 *)dst)): "m" (*((struct __large_struct *)((u16 *)src))), "i" (2), "0" (ret)); [5555-5585] [2025-02-08 02:05:26,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u32 *)dst)): "m" (*((struct __large_struct *)((u32 *)src))), "i" (4), "0" (ret)); [5588-5618] [2025-02-08 02:05:26,048 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)((u64 *)src))), "i" (8), "0" (ret)); [5621-5651] [2025-02-08 02:05:26,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)((u64 *)src))), "i" (10), "0" (ret)); [5655-5685] [2025-02-08 02:05:26,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u16 *)((char *)dst + 8))): "m" (*((struct __large_struct *)((u16 *)((char *)src + 8)))), "i" (2), "0" (ret)); [5692-5722] [2025-02-08 02:05:26,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)((u64 *)src))), "i" (16), "0" (ret)); [5726-5756] [2025-02-08 02:05:26,049 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)((char *)dst + 8))): "m" (*((struct __large_struct *)((u64 *)((char *)src + 8)))), "i" (8), "0" (ret)); [5763-5793] [2025-02-08 02:05:26,052 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "iq" (*((u8 *)src)), "m" (*((struct __large_struct *)((u8 *)dst))), "i" (1), "0" (ret)); [5846-5869] [2025-02-08 02:05:26,052 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "ir" (*((u16 *)src)), "m" (*((struct __large_struct *)((u16 *)dst))), "i" (2), "0" (ret)); [5872-5895] [2025-02-08 02:05:26,052 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "ir" (*((u32 *)src)), "m" (*((struct __large_struct *)((u32 *)dst))), "i" (4), "0" (ret)); [5898-5921] [2025-02-08 02:05:26,052 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)((u64 *)dst))), "i" (8), "0" (ret)); [5924-5947] [2025-02-08 02:05:26,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)((u64 *)dst))), "i" (10), "0" (ret)); [5951-5974] [2025-02-08 02:05:26,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("": : : "memory"); [5981] [2025-02-08 02:05:26,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "ir" (*((u16 *)src + 4)), "m" (*((struct __large_struct *)((u16 *)dst + 4))), "i" (2), "0" (ret)); [5982-6005] [2025-02-08 02:05:26,053 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)((u64 *)dst))), "i" (16), "0" (ret)); [6009-6032] [2025-02-08 02:05:26,055 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("": : : "memory"); [6039] [2025-02-08 02:05:26,055 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src + 1)), "m" (*((struct __large_struct *)((u64 *)dst + 1))), "i" (8), "0" (ret)); [6040-6063] [2025-02-08 02:05:26,057 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6103] [2025-02-08 02:05:26,057 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6110] [2025-02-08 02:05:26,057 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6123] [2025-02-08 02:05:26,076 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (128), "i" (sizeof(struct bug_entry ))); [6412-6418] [2025-02-08 02:05:26,129 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %0,%1": "=q" (__x), "+m" (*__ptr): "0" (__x): "memory"); [6579] [2025-02-08 02:05:26,130 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %0,%1": "=r" (__x), "+m" (*__ptr___0): "0" (__x): "memory"); [6586] [2025-02-08 02:05:26,130 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0,%1": "=r" (__x), "+m" (*__ptr___1): "0" (__x): "memory"); [6593] [2025-02-08 02:05:26,130 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %0,%1": "=r" (__x), "+m" (*__ptr___2): "0" (__x): "memory"); [6600] [2025-02-08 02:05:26,149 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (log_base + a), "g" ((long )((((sz + 32768UL) - 1UL) / 4096UL) / 8UL)), "rm" (tmp___7->addr_limit.seg)); [7174-7175] [2025-02-08 02:05:26,150 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" ((void *)a), "g" ((long )m->memory_size), "rm" (tmp___8->addr_limit.seg)); [7218-7219] [2025-02-08 02:05:26,151 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (desc), "g" ((long )((unsigned long )num * sizeof(*desc))), "rm" (tmp___10->addr_limit.seg)); [7322-7323] [2025-02-08 02:05:26,153 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___0), "=r" (roksum___0): "1" (avail), "g" ((long )((sizeof(*avail) + (unsigned long )num * sizeof(avail->ring[0])) + s)), "rm" (tmp___13->addr_limit.seg)); [7336-7338] [2025-02-08 02:05:26,153 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___1), "=r" (roksum___1): "1" (used), "g" ((long )((sizeof(*used) + (unsigned long )num * sizeof(used->ring[0])) + s)), "rm" (tmp___16->addr_limit.seg)); [7351-7353] [2025-02-08 02:05:26,172 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7615] [2025-02-08 02:05:26,173 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7649-7650] [2025-02-08 02:05:26,173 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7653-7654] [2025-02-08 02:05:26,173 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7657-7658] [2025-02-08 02:05:26,173 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7661-7662] [2025-02-08 02:05:26,173 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7665-7666] [2025-02-08 02:05:26,175 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7696-7697] [2025-02-08 02:05:26,175 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7700-7701] [2025-02-08 02:05:26,175 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7704-7705] [2025-02-08 02:05:26,175 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7708-7709] [2025-02-08 02:05:26,176 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7712-7713] [2025-02-08 02:05:26,178 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7794-7795] [2025-02-08 02:05:26,178 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7798-7799] [2025-02-08 02:05:26,178 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7802-7803] [2025-02-08 02:05:26,179 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7806-7807] [2025-02-08 02:05:26,179 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7810-7811] [2025-02-08 02:05:26,192 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8309-8310] [2025-02-08 02:05:26,193 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8313-8314] [2025-02-08 02:05:26,193 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8317-8318] [2025-02-08 02:05:26,193 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8321-8322] [2025-02-08 02:05:26,194 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8325-8326] [2025-02-08 02:05:26,197 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (903), "i" (sizeof(struct bug_entry ))); [8472-8478] [2025-02-08 02:05:26,199 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8571] [2025-02-08 02:05:26,201 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (958), "i" (sizeof(struct bug_entry ))); [8614-8620] [2025-02-08 02:05:26,223 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9289-9319] [2025-02-08 02:05:26,226 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9322-9352] [2025-02-08 02:05:26,226 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9355-9385] [2025-02-08 02:05:26,227 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9388-9418] [2025-02-08 02:05:26,229 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [9523] [2025-02-08 02:05:26,230 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=q" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9543-9573] [2025-02-08 02:05:26,231 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9576-9606] [2025-02-08 02:05:26,232 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9609-9639] [2025-02-08 02:05:26,232 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9642-9672] [2025-02-08 02:05:26,239 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (1234), "i" (sizeof(struct bug_entry ))); [10073-10079] [2025-02-08 02:05:26,243 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "iq" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10148-10171] [2025-02-08 02:05:26,243 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10174-10197] [2025-02-08 02:05:26,244 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10200-10223] [2025-02-08 02:05:26,244 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "er" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10226-10249] [2025-02-08 02:05:26,245 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "iq" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10318-10342] [2025-02-08 02:05:26,245 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "ir" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10345-10369] [2025-02-08 02:05:26,247 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "ir" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10372-10396] [2025-02-08 02:05:26,247 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "er" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10399-10423] [2025-02-08 02:05:26,248 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10473] [2025-02-08 02:05:26,249 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "iq" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10493-10517] [2025-02-08 02:05:26,249 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "ir" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10520-10544] [2025-02-08 02:05:26,249 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "ir" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10547-10571] [2025-02-08 02:05:26,249 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "er" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10574-10598] [2025-02-08 02:05:26,250 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10653] [2025-02-08 02:05:26,255 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10743] [2025-02-08 02:05:26,257 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10793] [2025-02-08 02:05:26,258 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10812-10813] [2025-02-08 02:05:26,258 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10816-10817] [2025-02-08 02:05:26,258 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10820-10821] [2025-02-08 02:05:26,258 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10824-10825] [2025-02-08 02:05:26,258 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10828-10829] [2025-02-08 02:05:26,260 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [10917] [2025-02-08 02:05:26,261 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [10955-10985] [2025-02-08 02:05:26,261 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [10988-11018] [2025-02-08 02:05:26,262 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [11021-11051] [2025-02-08 02:05:26,263 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [11054-11084] [2025-02-08 02:05:26,264 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11169-11170] [2025-02-08 02:05:26,264 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11173-11174] [2025-02-08 02:05:26,264 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11177-11178] [2025-02-08 02:05:26,265 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11181-11182] [2025-02-08 02:05:26,265 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11185-11186] [2025-02-08 02:05:26,270 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11329-11330] [2025-02-08 02:05:26,270 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11333-11334] [2025-02-08 02:05:26,270 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11337-11338] [2025-02-08 02:05:26,271 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11341-11342] [2025-02-08 02:05:26,271 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11345-11346] [2025-02-08 02:05:26,272 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11409-11410] [2025-02-08 02:05:26,273 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11413-11414] [2025-02-08 02:05:26,273 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11417-11418] [2025-02-08 02:05:26,273 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11421-11422] [2025-02-08 02:05:26,274 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11425-11426] [2025-02-08 02:05:26,274 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [11475] [2025-02-08 02:05:26,275 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [11494] [2025-02-08 02:05:26,276 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11514-11544] [2025-02-08 02:05:26,276 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11547-11577] [2025-02-08 02:05:26,277 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11580-11610] [2025-02-08 02:05:26,278 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11613-11643] [2025-02-08 02:05:26,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11739-11740] [2025-02-08 02:05:26,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11743-11744] [2025-02-08 02:05:26,281 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11747-11748] [2025-02-08 02:05:26,282 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11751-11752] [2025-02-08 02:05:26,282 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11755-11756] [2025-02-08 02:05:26,283 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i[345844,345857] [2025-02-08 02:05:26,324 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [13165] [2025-02-08 02:05:26,330 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [13453] [2025-02-08 02:05:26,332 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [13559] [2025-02-08 02:05:26,345 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:05:26,471 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:05:26,471 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26 WrapperNode [2025-02-08 02:05:26,472 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:05:26,473 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:05:26,474 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:05:26,474 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:05:26,479 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:26,559 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:26,702 INFO L138 Inliner]: procedures = 229, calls = 2017, calls flagged for inlining = 101, calls inlined = 56, statements flattened = 3423 [2025-02-08 02:05:26,703 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:05:26,704 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:05:26,704 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:05:26,704 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:05:26,713 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:26,713 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:26,730 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,064 INFO L175 MemorySlicer]: Split 697 memory accesses to 49 slices as follows [7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 0, 27, 356, 2, 16, 9, 6, 1, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7, 1, 5, 7, 7, 7, 6, 7, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7]. 51 percent of accesses are in the largest equivalence class. The 295 initializations are split as follows [7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 7, 0, 0, 0, 2, 16, 9, 0, 0, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7, 0, 0, 7, 7, 7, 0, 7, 8, 7, 7, 7, 7, 7, 7, 7, 7, 7]. The 156 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 27, 121, 0, 0, 0, 2, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0, 0, 0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-02-08 02:05:27,065 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,065 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,172 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,181 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,224 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,244 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,285 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:05:27,287 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:05:27,287 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:05:27,287 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:05:27,288 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (1/1) ... [2025-02-08 02:05:27,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:05:27,305 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:05:27,320 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:05:27,326 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:05:27,348 INFO L130 BoogieDeclarations]: Found specification of procedure vq_access_ok [2025-02-08 02:05:27,348 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_access_ok [2025-02-08 02:05:27,348 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:05:27,348 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:05:27,348 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:05:27,348 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:05:27,348 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#14 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#15 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#16 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#17 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#18 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#19 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#20 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#21 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#22 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#23 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#24 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#25 [2025-02-08 02:05:27,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#26 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#27 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#28 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#29 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#30 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#31 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#32 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#33 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#34 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#35 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#36 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#37 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#38 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#39 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#40 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#41 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#42 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#43 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#44 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#45 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#46 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#47 [2025-02-08 02:05:27,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#48 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_flush [2025-02-08 02:05:27,351 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_flush [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2025-02-08 02:05:27,351 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#14 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#15 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#16 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#17 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#18 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#19 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#20 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#21 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#22 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#23 [2025-02-08 02:05:27,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#24 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#25 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#26 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#27 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#28 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#29 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#30 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#31 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#32 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#33 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#34 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#35 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#36 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#37 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#38 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#39 [2025-02-08 02:05:27,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#40 [2025-02-08 02:05:27,353 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#41 [2025-02-08 02:05:27,353 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#42 [2025-02-08 02:05:27,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#43 [2025-02-08 02:05:27,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#44 [2025-02-08 02:05:27,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#45 [2025-02-08 02:05:27,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#46 [2025-02-08 02:05:27,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#47 [2025-02-08 02:05:27,354 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#48 [2025-02-08 02:05:27,356 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_check_owner [2025-02-08 02:05:27,356 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_check_owner [2025-02-08 02:05:27,356 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2025-02-08 02:05:27,356 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2025-02-08 02:05:27,356 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2025-02-08 02:05:27,356 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2025-02-08 02:05:27,356 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_reset [2025-02-08 02:05:27,356 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_reset [2025-02-08 02:05:27,356 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:05:27,356 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure vq_log_access_ok [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_log_access_ok [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_start [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_start [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_queue [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_queue [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_open [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_open [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure ERR_PTR [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure ERR_PTR [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_fget [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_fget [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_init [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_init [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure vq_memory_access_ok [2025-02-08 02:05:27,357 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_memory_access_ok [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-02-08 02:05:27,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#14 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#15 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#16 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#17 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#18 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#19 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#20 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#21 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#22 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#23 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#24 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#25 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#26 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#27 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#28 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#29 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#30 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#31 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#32 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#33 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#34 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#35 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#36 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#37 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#38 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#39 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#40 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#41 [2025-02-08 02:05:27,358 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#42 [2025-02-08 02:05:27,359 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#43 [2025-02-08 02:05:27,359 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#44 [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#45 [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#46 [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#47 [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#48 [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2025-02-08 02:05:27,362 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_queue [2025-02-08 02:05:27,362 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_queue [2025-02-08 02:05:27,362 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_stop [2025-02-08 02:05:27,363 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_stop [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2025-02-08 02:05:27,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#7 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#8 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#9 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#10 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#11 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#12 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#13 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#14 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#15 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#16 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#17 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#18 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#19 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#20 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#21 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#22 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#23 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#24 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#25 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#26 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#27 [2025-02-08 02:05:27,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#28 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#29 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#30 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#31 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#32 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#33 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#34 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#35 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#36 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#37 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#38 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#39 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#40 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#41 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#42 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#43 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#44 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#45 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#46 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#47 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#48 [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2025-02-08 02:05:27,364 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2025-02-08 02:05:27,364 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_flush_vq [2025-02-08 02:05:27,364 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_flush_vq [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_stop_vq [2025-02-08 02:05:27,364 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_stop_vq [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2025-02-08 02:05:27,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2025-02-08 02:05:27,364 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2025-02-08 02:05:27,364 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2025-02-08 02:05:27,365 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2025-02-08 02:05:27,365 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2025-02-08 02:05:27,365 INFO L130 BoogieDeclarations]: Found specification of procedure fput [2025-02-08 02:05:27,367 INFO L138 BoogieDeclarations]: Found implementation of procedure fput [2025-02-08 02:05:27,367 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2025-02-08 02:05:27,367 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2025-02-08 02:05:27,368 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_stop [2025-02-08 02:05:27,368 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_stop [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure schedule [2025-02-08 02:05:27,368 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#14 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#15 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#16 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#17 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#18 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#19 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#20 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#21 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#22 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#23 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#24 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#25 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#26 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#27 [2025-02-08 02:05:27,368 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#28 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#29 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#30 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#31 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#32 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#33 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#34 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#35 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#36 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#37 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#38 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#39 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#40 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#41 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#42 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#43 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#44 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#45 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#46 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#47 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#48 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_has_feature [2025-02-08 02:05:27,369 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_has_feature [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2025-02-08 02:05:27,369 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-02-08 02:05:27,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#14 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#15 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#16 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#17 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#18 [2025-02-08 02:05:27,373 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#19 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#20 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#21 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#22 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#23 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#24 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#25 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#26 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#27 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#28 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#29 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#30 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#31 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#32 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#33 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#34 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#35 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#36 [2025-02-08 02:05:27,374 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#37 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#38 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#39 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#40 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#41 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#42 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#43 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#44 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#45 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#46 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#47 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#48 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#14 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#15 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#16 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#17 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#18 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#19 [2025-02-08 02:05:27,375 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#20 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#21 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#22 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#23 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#24 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#25 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#26 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#27 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#28 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#29 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#30 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#31 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#32 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#33 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#34 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#35 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#36 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#37 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#38 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#39 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#40 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#41 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#42 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#43 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#44 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#45 [2025-02-08 02:05:27,376 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#46 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#47 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#48 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_init [2025-02-08 02:05:27,381 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_init [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_fileget [2025-02-08 02:05:27,381 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_fileget [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_flush [2025-02-08 02:05:27,381 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_flush [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:05:27,381 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-02-08 02:05:27,381 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#14 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#15 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#16 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#17 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#18 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#19 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#20 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#21 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#22 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#23 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#24 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#25 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#26 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#27 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#28 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#29 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#30 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#31 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#32 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#33 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#34 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#35 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#36 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#37 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#38 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#39 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#40 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#41 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#42 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#43 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#44 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#45 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#46 [2025-02-08 02:05:27,382 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#47 [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#48 [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_put [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_put [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_ioctl [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_ioctl [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_disable_vq [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_disable_vq [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_exit [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_exit [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure mmput [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure mmput [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2025-02-08 02:05:27,383 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:05:27,383 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2025-02-08 02:05:27,386 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2025-02-08 02:05:27,386 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:05:27,386 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_stop [2025-02-08 02:05:27,386 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_stop [2025-02-08 02:05:27,386 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#14 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#15 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#16 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#17 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#18 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#19 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#20 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#21 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#22 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#23 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#24 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#25 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#26 [2025-02-08 02:05:27,387 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#27 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#28 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#29 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#30 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#31 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#32 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#33 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#34 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#35 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#36 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#37 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#38 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#39 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#40 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#41 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#42 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#43 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#44 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#45 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#46 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#47 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#48 [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure __bad_percpu_size [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure memory_access_ok [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure memory_access_ok [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_seq_done [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_seq_done [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_init [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_init [2025-02-08 02:05:27,388 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_release [2025-02-08 02:05:27,388 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_release [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2025-02-08 02:05:27,389 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure lock_is_held [2025-02-08 02:05:27,389 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_is_held [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_flush [2025-02-08 02:05:27,389 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_flush [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure log_access_ok [2025-02-08 02:05:27,389 INFO L138 BoogieDeclarations]: Found implementation of procedure log_access_ok [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_dereference [2025-02-08 02:05:27,389 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_dereference [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-02-08 02:05:27,389 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-02-08 02:05:27,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-02-08 02:05:27,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-02-08 02:05:27,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-02-08 02:05:27,390 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#20 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#21 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#22 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#23 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#24 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#25 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#26 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#27 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#28 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#29 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#30 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#31 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#32 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#33 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#34 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#35 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#36 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#37 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#38 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#39 [2025-02-08 02:05:27,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#40 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#41 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#42 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#43 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#44 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#45 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#46 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#47 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#48 [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_start [2025-02-08 02:05:27,392 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_start [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:05:27,392 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:05:27,392 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2025-02-08 02:05:27,392 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2025-02-08 02:05:28,225 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:05:28,230 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:05:28,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14095: havoc #t~nondet988; [2025-02-08 02:05:28,367 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13967: havoc #t~nondet968; [2025-02-08 02:05:28,378 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13917: havoc #t~malloc962.base, #t~malloc962.offset; [2025-02-08 02:05:28,396 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5235: havoc _raw_spin_unlock_irqrestore_~arg0#1.base, _raw_spin_unlock_irqrestore_~arg0#1.offset, _raw_spin_unlock_irqrestore_~arg1#1;havoc _raw_spin_unlock_irqrestore_#in~arg0#1.base, _raw_spin_unlock_irqrestore_#in~arg0#1.offset, _raw_spin_unlock_irqrestore_#in~arg1#1;assume { :end_inline__raw_spin_unlock_irqrestore } true; [2025-02-08 02:05:28,440 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6479: havoc list_add_tail_#t~mem2#1.base, list_add_tail_#t~mem2#1.offset, list_add_tail_~new#1.base, list_add_tail_~new#1.offset, list_add_tail_~head#1.base, list_add_tail_~head#1.offset;havoc list_add_tail_#in~new#1.base, list_add_tail_#in~new#1.offset, list_add_tail_#in~head#1.base, list_add_tail_#in~head#1.offset;assume { :end_inline_list_add_tail } true;call #t~mem50#1 := read~int#16(~work#1.base, 108 + ~work#1.offset, 4);call write~int#16(1 + #t~mem50#1, ~work#1.base, 108 + ~work#1.offset, 4);havoc #t~mem50#1;call #t~mem51#1.base, #t~mem51#1.offset := read~$Pointer$#16(~dev#1.base, 280 + ~dev#1.offset, 8); [2025-02-08 02:05:28,441 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6481-1: SUMMARY for call #t~ret52#1 := wake_up_process(#t~mem51#1.base, #t~mem51#1.offset); srcloc: null [2025-02-08 02:05:28,444 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6481: assume -2147483648 <= #t~ret52#1 && #t~ret52#1 <= 2147483647;havoc #t~mem51#1.base, #t~mem51#1.offset;havoc #t~ret52#1; [2025-02-08 02:05:28,444 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4995: havoc __list_add_~arg0#1.base, __list_add_~arg0#1.offset, __list_add_~arg1#1.base, __list_add_~arg1#1.offset, __list_add_~arg2#1.base, __list_add_~arg2#1.offset;havoc __list_add_#in~arg0#1.base, __list_add_#in~arg0#1.offset, __list_add_#in~arg1#1.base, __list_add_#in~arg1#1.offset, __list_add_#in~arg2#1.base, __list_add_#in~arg2#1.offset;assume { :end_inline___list_add } true;havoc list_add_tail_#t~mem2#1.base, list_add_tail_#t~mem2#1.offset; [2025-02-08 02:05:28,494 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13920: havoc __kmalloc_#t~ret963#1.base, __kmalloc_#t~ret963#1.offset; [2025-02-08 02:05:28,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6219: havoc #t~bitwise25;havoc #t~bitwise26; [2025-02-08 02:05:28,546 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6263: havoc __init_waitqueue_head_~arg0#1.base, __init_waitqueue_head_~arg0#1.offset, __init_waitqueue_head_~arg1#1.base, __init_waitqueue_head_~arg1#1.offset;havoc __init_waitqueue_head_#in~arg0#1.base, __init_waitqueue_head_#in~arg0#1.offset, __init_waitqueue_head_#in~arg1#1.base, __init_waitqueue_head_#in~arg1#1.offset;assume { :end_inline___init_waitqueue_head } true; [2025-02-08 02:05:28,561 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13943: havoc _copy_to_user_#t~nondet965#1; [2025-02-08 02:05:28,584 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14007: havoc #t~nondet977; [2025-02-08 02:05:28,604 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14023: havoc #t~nondet979; [2025-02-08 02:05:28,664 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6301: #t~ret36#1 := vhost_poll_wakeup_#res#1;havoc vhost_poll_wakeup_#t~mem27#1, vhost_poll_wakeup_#t~bitwise28#1, vhost_poll_wakeup_~wait#1.base, vhost_poll_wakeup_~wait#1.offset, vhost_poll_wakeup_~mode#1, vhost_poll_wakeup_~sync#1, vhost_poll_wakeup_~key#1.base, vhost_poll_wakeup_~key#1.offset, vhost_poll_wakeup_~poll~1#1.base, vhost_poll_wakeup_~poll~1#1.offset, vhost_poll_wakeup_~__mptr~1#1.base, vhost_poll_wakeup_~__mptr~1#1.offset;havoc vhost_poll_wakeup_#in~wait#1.base, vhost_poll_wakeup_#in~wait#1.offset, vhost_poll_wakeup_#in~mode#1, vhost_poll_wakeup_#in~sync#1, vhost_poll_wakeup_#in~key#1.base, vhost_poll_wakeup_#in~key#1.offset;assume { :end_inline_vhost_poll_wakeup } true;assume -2147483648 <= #t~ret36#1 && #t~ret36#1 <= 2147483647;havoc #t~ret36#1; [2025-02-08 02:05:29,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13690: assume -9223372036854775808 <= vhost_net_compat_ioctl_#t~ret948#1 && vhost_net_compat_ioctl_#t~ret948#1 <= 9223372036854775807;vhost_net_compat_ioctl_~tmp___8~37#1 := vhost_net_compat_ioctl_#t~ret948#1;havoc vhost_net_compat_ioctl_#t~ret948#1;vhost_net_compat_ioctl_#res#1 := vhost_net_compat_ioctl_~tmp___8~37#1; [2025-02-08 02:05:29,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13855: havoc ldv_check_return_value_~arg0#1;havoc ldv_check_return_value_#in~arg0#1;assume { :end_inline_ldv_check_return_value } true; [2025-02-08 02:05:29,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13876-1: SUMMARY for call main_#t~ret957#1 := vhost_net_ioctl(main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_vhost_net_ioctl_26_p1~0#1, main_~var_vhost_net_ioctl_26_p2~0#1); srcloc: null [2025-02-08 02:05:29,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13876: assume -9223372036854775808 <= main_#t~ret957#1 && main_#t~ret957#1 <= 9223372036854775807;havoc main_#t~ret957#1; [2025-02-08 02:05:29,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13690-1: SUMMARY for call vhost_net_compat_ioctl_#t~ret948#1 := vhost_net_ioctl(vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset, vhost_net_compat_ioctl_~ioctl#1, vhost_net_compat_ioctl_~tmp___7~48#1.base + vhost_net_compat_ioctl_~tmp___7~48#1.offset); srcloc: null [2025-02-08 02:05:29,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13868-1: SUMMARY for call main_#t~ret956#1 := vhost_net_release(main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_group2~0#1.base, main_~var_group2~0#1.offset); srcloc: null [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13868: assume -2147483648 <= main_#t~ret956#1 && main_#t~ret956#1 <= 2147483647;havoc main_#t~ret956#1;main_~ldv_s_vhost_net_fops_file_operations~0#1 := 0; [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13852: assume 0 == main_~ldv_s_vhost_net_fops_file_operations~0#1; [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13852: assume !(0 == main_~ldv_s_vhost_net_fops_file_operations~0#1); [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13881: main_#t~ret958#1 := vhost_net_compat_ioctl_#res#1;havoc vhost_net_compat_ioctl_#t~ret947#1.base, vhost_net_compat_ioctl_#t~ret947#1.offset, vhost_net_compat_ioctl_#t~ret948#1, vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset, vhost_net_compat_ioctl_~ioctl#1, vhost_net_compat_ioctl_~arg#1, vhost_net_compat_ioctl_~tmp___7~48#1.base, vhost_net_compat_ioctl_~tmp___7~48#1.offset, vhost_net_compat_ioctl_~tmp___8~37#1;havoc vhost_net_compat_ioctl_#in~f#1.base, vhost_net_compat_ioctl_#in~f#1.offset, vhost_net_compat_ioctl_#in~ioctl#1, vhost_net_compat_ioctl_#in~arg#1;assume { :end_inline_vhost_net_compat_ioctl } true;assume -9223372036854775808 <= main_#t~ret958#1 && main_#t~ret958#1 <= 9223372036854775807;havoc main_#t~ret958#1; [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13881-1: assume { :begin_inline_vhost_net_compat_ioctl } true;vhost_net_compat_ioctl_#in~f#1.base, vhost_net_compat_ioctl_#in~f#1.offset, vhost_net_compat_ioctl_#in~ioctl#1, vhost_net_compat_ioctl_#in~arg#1 := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_vhost_net_compat_ioctl_27_p1~0#1, main_~var_vhost_net_compat_ioctl_27_p2~0#1;havoc vhost_net_compat_ioctl_#res#1;havoc vhost_net_compat_ioctl_#t~ret947#1.base, vhost_net_compat_ioctl_#t~ret947#1.offset, vhost_net_compat_ioctl_#t~ret948#1, vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset, vhost_net_compat_ioctl_~ioctl#1, vhost_net_compat_ioctl_~arg#1, vhost_net_compat_ioctl_~tmp___7~48#1.base, vhost_net_compat_ioctl_~tmp___7~48#1.offset, vhost_net_compat_ioctl_~tmp___8~37#1;vhost_net_compat_ioctl_~f#1.base, vhost_net_compat_ioctl_~f#1.offset := vhost_net_compat_ioctl_#in~f#1.base, vhost_net_compat_ioctl_#in~f#1.offset;vhost_net_compat_ioctl_~ioctl#1 := vhost_net_compat_ioctl_#in~ioctl#1;vhost_net_compat_ioctl_~arg#1 := vhost_net_compat_ioctl_#in~arg#1;havoc vhost_net_compat_ioctl_~tmp___7~48#1.base, vhost_net_compat_ioctl_~tmp___7~48#1.offset;havoc vhost_net_compat_ioctl_~tmp___8~37#1;assume { :begin_inline_compat_ptr } true;compat_ptr_#in~uptr#1 := vhost_net_compat_ioctl_~arg#1;havoc compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;compat_ptr_~uptr#1 := compat_ptr_#in~uptr#1;compat_ptr_#res#1.base, compat_ptr_#res#1.offset := 0, (if compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13857: assume 0 != ~res_vhost_net_open_12~0; [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13857: assume !(0 != ~res_vhost_net_open_12~0);main_~ldv_s_vhost_net_fops_file_operations~0#1 := 1 + main_~ldv_s_vhost_net_fops_file_operations~0#1; [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13866: assume 1 == main_~ldv_s_vhost_net_fops_file_operations~0#1; [2025-02-08 02:05:29,928 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13866: assume !(1 == main_~ldv_s_vhost_net_fops_file_operations~0#1); [2025-02-08 02:05:29,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13850: assume false; [2025-02-08 02:05:29,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13850: assume !false; [2025-02-08 02:05:29,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13854-1: SUMMARY for call main_#t~ret955#1 := vhost_net_open(main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_group2~0#1.base, main_~var_group2~0#1.offset); srcloc: null [2025-02-08 02:05:29,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13854: assume -2147483648 <= main_#t~ret955#1 && main_#t~ret955#1 <= 2147483647;~res_vhost_net_open_12~0 := main_#t~ret955#1;havoc main_#t~ret955#1;assume { :begin_inline_ldv_check_return_value } true;ldv_check_return_value_#in~arg0#1 := ~res_vhost_net_open_12~0;havoc ldv_check_return_value_~arg0#1;ldv_check_return_value_~arg0#1 := ldv_check_return_value_#in~arg0#1; [2025-02-08 02:05:29,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13689: vhost_net_compat_ioctl_#t~ret947#1.base, vhost_net_compat_ioctl_#t~ret947#1.offset := compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;havoc compat_ptr_#in~uptr#1;assume { :end_inline_compat_ptr } true;vhost_net_compat_ioctl_~tmp___7~48#1.base, vhost_net_compat_ioctl_~tmp___7~48#1.offset := vhost_net_compat_ioctl_#t~ret947#1.base, vhost_net_compat_ioctl_#t~ret947#1.offset;havoc vhost_net_compat_ioctl_#t~ret947#1.base, vhost_net_compat_ioctl_#t~ret947#1.offset; [2025-02-08 02:05:29,981 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6369: havoc prepare_to_wait_~arg0#1.base, prepare_to_wait_~arg0#1.offset, prepare_to_wait_~arg1#1.base, prepare_to_wait_~arg1#1.offset, prepare_to_wait_~arg2#1;havoc prepare_to_wait_#in~arg0#1.base, prepare_to_wait_#in~arg0#1.offset, prepare_to_wait_#in~arg1#1.base, prepare_to_wait_#in~arg1#1.offset, prepare_to_wait_#in~arg2#1;assume { :end_inline_prepare_to_wait } true; [2025-02-08 02:05:29,981 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6384: havoc finish_wait_~arg0#1.base, finish_wait_~arg0#1.offset, finish_wait_~arg1#1.base, finish_wait_~arg1#1.offset;havoc finish_wait_#in~arg0#1.base, finish_wait_#in~arg0#1.offset, finish_wait_#in~arg1#1.base, finish_wait_#in~arg1#1.offset;assume { :end_inline_finish_wait } true; [2025-02-08 02:05:29,981 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6370: ~tmp___9~0#1 := (if 0 == #t~ret43#1 % 256 then 0 else 1);havoc #t~ret43#1; [2025-02-08 02:05:29,981 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6372: assume 0 != ~tmp___9~0#1 % 256; [2025-02-08 02:05:29,982 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6372: assume !(0 != ~tmp___9~0#1 % 256); [2025-02-08 02:05:29,982 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6370-1: SUMMARY for call #t~ret43#1 := vhost_work_seq_done(~dev#1.base, ~dev#1.offset, ~work#1.base, ~work#1.offset, ~seq~0#1); srcloc: null [2025-02-08 02:05:29,982 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6333: call ULTIMATE.dealloc(~#__wait~0#1.base, ~#__wait~0#1.offset);havoc ~#__wait~0#1.base, ~#__wait~0#1.offset; [2025-02-08 02:05:29,982 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6377: SUMMARY for call schedule(); srcloc: null [2025-02-08 02:05:29,992 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5054: assume false; [2025-02-08 02:05:29,992 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5054: assume !false; [2025-02-08 02:05:29,992 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint get_currentFINAL: assume true; [2025-02-08 02:05:29,992 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5103: #res.base, #res.offset := ~pfo_ret__~0.base, ~pfo_ret__~0.offset; [2025-02-08 02:05:29,992 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5097: SUMMARY for call __bad_percpu_size(); srcloc: null [2025-02-08 02:05:33,837 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6817: havoc __raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset, __raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset, __raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset;havoc __raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset, __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset, __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset;assume { :end_inline___raw_spin_lock_init } true; [2025-02-08 02:05:33,844 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13976: havoc #t~ret970.base, #t~ret970.offset; [2025-02-08 02:05:34,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7131: havoc warn_slowpath_null_~arg0#1.base, warn_slowpath_null_~arg0#1.offset, warn_slowpath_null_~arg1#1;havoc warn_slowpath_null_#in~arg0#1.base, warn_slowpath_null_#in~arg0#1.offset, warn_slowpath_null_#in~arg1#1;assume { :end_inline_warn_slowpath_null } true; [2025-02-08 02:05:34,202 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13950: havoc #t~nondet966; [2025-02-08 02:05:34,219 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5014: havoc #t~mem3.base, #t~mem3.offset; [2025-02-08 02:05:34,223 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13970: havoc #t~ret969.base, #t~ret969.offset; [2025-02-08 02:05:35,259 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13083: assume -2147483648 <= vhost_net_enable_vq_#t~ret871#1 && vhost_net_enable_vq_#t~ret871#1 <= 2147483647;vhost_net_enable_vq_~tmp___7~40#1 := vhost_net_enable_vq_#t~ret871#1;havoc vhost_net_enable_vq_#t~ret871#1; [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13083-1: SUMMARY for call vhost_net_enable_vq_#t~ret871#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6939: assume 0 != vhost_dev_set_owner_~tmp___10~2#1; [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6939: assume !(0 != vhost_dev_set_owner_~tmp___10~2#1);call write~$Pointer$#16(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset, vhost_dev_set_owner_~dev#1.base, 280 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6972: assume vhost_dev_set_owner_#t~mem137#1.base != 0 || vhost_dev_set_owner_#t~mem137#1.offset != 0;havoc vhost_dev_set_owner_#t~mem137#1.base, vhost_dev_set_owner_#t~mem137#1.offset;call vhost_dev_set_owner_#t~mem138#1.base, vhost_dev_set_owner_#t~mem138#1.offset := read~$Pointer$#16(vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6972: assume !(vhost_dev_set_owner_#t~mem137#1.base != 0 || vhost_dev_set_owner_#t~mem137#1.offset != 0);havoc vhost_dev_set_owner_#t~mem137#1.base, vhost_dev_set_owner_#t~mem137#1.offset; [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13248: assume get_raw_socket_~sock~4#1.base == 0 && get_raw_socket_~sock~4#1.offset == 0; [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13248: assume !(get_raw_socket_~sock~4#1.base == 0 && get_raw_socket_~sock~4#1.offset == 0);call get_raw_socket_#t~mem890#1.base, get_raw_socket_#t~mem890#1.offset := read~$Pointer$#16(get_raw_socket_~sock~4#1.base, 30 + get_raw_socket_~sock~4#1.offset, 8);call get_raw_socket_#t~mem891#1 := read~int#16(get_raw_socket_#t~mem890#1.base, 700 + get_raw_socket_#t~mem890#1.offset, 4); [2025-02-08 02:05:35,260 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7831: assume 1074310928 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7831: assume !(1074310928 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7864: assume 0 != vhost_set_vring_~tmp___7~15#1 % 18446744073709551616;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7864: assume !(0 != vhost_set_vring_~tmp___7~15#1 % 18446744073709551616);call vhost_set_vring_#t~mem249#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6708: assume vhost_dev_alloc_iovecs_~i~0#1 < vhost_dev_alloc_iovecs_#t~mem69#1;havoc vhost_dev_alloc_iovecs_#t~mem69#1; [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6708: assume !(vhost_dev_alloc_iovecs_~i~0#1 < vhost_dev_alloc_iovecs_#t~mem69#1);havoc vhost_dev_alloc_iovecs_#t~mem69#1; [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7567: assume 0 != vhost_set_memory_~tmp___9~12#1 % 18446744073709551616; [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7567: assume !(0 != vhost_set_memory_~tmp___9~12#1 % 18446744073709551616); [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7600: SUMMARY for call lockdep_rcu_dereference(13, 0, 574); srcloc: null [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7501: assume 0 != vhost_vq_access_ok_~tmp___7~13#1;call vhost_vq_access_ok_#t~mem225#1.base, vhost_vq_access_ok_#t~mem225#1.offset := read~$Pointer$#16(vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem226#1.base, vhost_vq_access_ok_#t~mem226#1.offset := read~$Pointer$#16(vhost_vq_access_ok_~vq#1.base, 17072 + vhost_vq_access_ok_~vq#1.offset, 8); [2025-02-08 02:05:35,261 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7501: assume !(0 != vhost_vq_access_ok_~tmp___7~13#1);vhost_vq_access_ok_~tmp___9~11#1 := 0; [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8294: assume false; [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8294: assume !false; [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13414-1: SUMMARY for call vhost_net_set_backend_#t~ret917#1 := PTR_ERR(vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset); srcloc: null [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13348: assume !(0 != get_socket_~tmp___7~44#1);get_socket_#res#1.base, get_socket_#res#1.offset := get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset; [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13348: assume 0 != get_socket_~tmp___7~44#1;assume { :begin_inline_get_tap_socket } true;get_tap_socket_#in~fd#1 := get_socket_~fd#1;havoc get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset;havoc get_tap_socket_#t~ret902#1.base, get_tap_socket_#t~ret902#1.offset, get_tap_socket_#t~ret903#1.base, get_tap_socket_#t~ret903#1.offset, get_tap_socket_#t~ret904#1.base, get_tap_socket_#t~ret904#1.offset, get_tap_socket_#t~ret905#1, get_tap_socket_#t~ret906#1.base, get_tap_socket_#t~ret906#1.offset, get_tap_socket_#t~ret907#1, get_tap_socket_~fd#1, get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset, get_tap_socket_~tmp___7~43#1.base, get_tap_socket_~tmp___7~43#1.offset, get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset, get_tap_socket_~tmp___8~33#1.base, get_tap_socket_~tmp___8~33#1.offset, get_tap_socket_~tmp___9~25#1, get_tap_socket_~tmp___10~19#1, get_tap_socket_~tmp~16#1.base, get_tap_socket_~tmp~16#1.offset, get_tap_socket_~tmp___11~17#1, get_tap_socket_~tmp___12~14#1;get_tap_socket_~fd#1 := get_tap_socket_#in~fd#1;havoc get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset;havoc get_tap_socket_~tmp___7~43#1.base, get_tap_socket_~tmp___7~43#1.offset;havoc get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset;havoc get_tap_socket_~tmp___8~33#1.base, get_tap_socket_~tmp___8~33#1.offset;havoc get_tap_socket_~tmp___9~25#1;havoc get_tap_socket_~tmp___10~19#1;havoc get_tap_socket_~tmp~16#1.base, get_tap_socket_~tmp~16#1.offset;havoc get_tap_socket_~tmp___11~17#1;havoc get_tap_socket_~tmp___12~14#1;assume { :begin_inline_fget } true;fget_#in~arg0#1 := get_tap_socket_~fd#1;havoc fget_#res#1.base, fget_#res#1.offset;havoc fget_#t~ret972#1.base, fget_#t~ret972#1.offset, fget_~arg0#1;fget_~arg0#1 := fget_#in~arg0#1; [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8162: assume vhost_set_vring_~pollstart~0#1.base != 0 || vhost_set_vring_~pollstart~0#1.offset != 0;call vhost_set_vring_#t~mem325#1.base, vhost_set_vring_#t~mem325#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 428 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8162: assume !(vhost_set_vring_~pollstart~0#1.base != 0 || vhost_set_vring_~pollstart~0#1.offset != 0); [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13414: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret917#1 && vhost_net_set_backend_#t~ret917#1 <= 9223372036854775807;vhost_net_set_backend_~tmp___13~13#1 := vhost_net_set_backend_#t~ret917#1;havoc vhost_net_set_backend_#t~ret917#1;vhost_net_set_backend_~tmp___9~27#1 := vhost_net_set_backend_~tmp___13~13#1;vhost_net_set_backend_~r~12#1 := (if vhost_net_set_backend_~tmp___9~27#1 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp___9~27#1 % 4294967296 else vhost_net_set_backend_~tmp___9~27#1 % 4294967296 - 4294967296); [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8228: assume 1074310916 == (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296) % 18446744073709551616; [2025-02-08 02:05:35,262 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8228: assume !(1074310916 == (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296) % 18446744073709551616); [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6907-1: SUMMARY for call vhost_attach_cgroups_#t~ret123#1.base, vhost_attach_cgroups_#t~ret123#1.offset := get_current(); srcloc: null [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7964-1: SUMMARY for call vhost_set_vring_#t~ret281#1 := vq_access_ok(vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset, vhost_set_vring_#t~mem277#1, 0, (if vhost_set_vring_#t~mem278#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem278#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem278#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 0, (if vhost_set_vring_#t~mem279#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem279#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem279#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 0, (if vhost_set_vring_#t~mem280#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem280#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem280#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7931: assume 0 != (vhost_set_vring_#t~mem263#1 - vhost_set_vring_#t~mem263#1 % 2) % 4294967296;havoc vhost_set_vring_#t~mem263#1;vhost_set_vring_~r~1#1 := -95; [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7931: assume !(0 != (vhost_set_vring_#t~mem263#1 - vhost_set_vring_#t~mem263#1 % 2) % 4294967296);havoc vhost_set_vring_#t~mem263#1;call vhost_set_vring_#t~mem264#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 8 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem265#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 8 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6907: call write~$Pointer$#16(vhost_attach_cgroups_#t~ret123#1.base, vhost_attach_cgroups_#t~ret123#1.offset, vhost_attach_cgroups_~#attach~0#1.base, 116 + vhost_attach_cgroups_~#attach~0#1.offset, 8);havoc vhost_attach_cgroups_#t~ret123#1.base, vhost_attach_cgroups_#t~ret123#1.offset; [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7964: assume -2147483648 <= vhost_set_vring_#t~ret281#1 && vhost_set_vring_#t~ret281#1 <= 2147483647;vhost_set_vring_~tmp___11~6#1 := vhost_set_vring_#t~ret281#1;havoc vhost_set_vring_#t~mem277#1;havoc vhost_set_vring_#t~mem278#1;havoc vhost_set_vring_#t~mem279#1;havoc vhost_set_vring_#t~mem280#1;havoc vhost_set_vring_#t~ret281#1; [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7634: assume false; [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7634: assume !false; [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13547: vhost_net_set_features_#t~ret933#1 := vhost_log_access_ok_#res#1;havoc vhost_log_access_ok_#t~ret201#1, vhost_log_access_ok_#t~ret202#1, vhost_log_access_ok_#t~mem203#1.base, vhost_log_access_ok_#t~mem203#1.offset, vhost_log_access_ok_#t~ret204#1, vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset, vhost_log_access_ok_~tmp___7~12#1, vhost_log_access_ok_~tmp___8~10#1, vhost_log_access_ok_~tmp___9~9#1;havoc vhost_log_access_ok_#in~dev#1.base, vhost_log_access_ok_#in~dev#1.offset;assume { :end_inline_vhost_log_access_ok } true;assume -2147483648 <= vhost_net_set_features_#t~ret933#1 && vhost_net_set_features_#t~ret933#1 <= 2147483647;vhost_net_set_features_~tmp___7~46#1 := vhost_net_set_features_#t~ret933#1;havoc vhost_net_set_features_#t~ret933#1; [2025-02-08 02:05:35,263 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13514: assume vhost_net_reset_owner_#t~mem927#1.base != 0 || vhost_net_reset_owner_#t~mem927#1.offset != 0;havoc vhost_net_reset_owner_#t~mem927#1.base, vhost_net_reset_owner_#t~mem927#1.offset;call vhost_net_reset_owner_#t~mem928#1.base, vhost_net_reset_owner_#t~mem928#1.offset := read~$Pointer$#20(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, 8);call vhost_net_reset_owner_#t~mem929#1.base, vhost_net_reset_owner_#t~mem929#1.offset := read~$Pointer$#16(vhost_net_reset_owner_#t~mem928#1.base, 22 + vhost_net_reset_owner_#t~mem928#1.offset, 8); [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13514: assume !(vhost_net_reset_owner_#t~mem927#1.base != 0 || vhost_net_reset_owner_#t~mem927#1.offset != 0);havoc vhost_net_reset_owner_#t~mem927#1.base, vhost_net_reset_owner_#t~mem927#1.offset; [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13580: SUMMARY for call vhost_net_flush(vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset); srcloc: null [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13250: get_raw_socket_~tmp~15#1.base, get_raw_socket_~tmp~15#1.offset := get_raw_socket_#t~ret889#1.base, get_raw_socket_#t~ret889#1.offset;havoc get_raw_socket_#t~ret889#1.base, get_raw_socket_#t~ret889#1.offset;get_raw_socket_~tmp___8~32#1.base, get_raw_socket_~tmp___8~32#1.offset := get_raw_socket_~tmp~15#1.base, get_raw_socket_~tmp~15#1.offset;get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset := get_raw_socket_~tmp___8~32#1.base, get_raw_socket_~tmp___8~32#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset; [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8361: assume vhost_dev_ioctl_~eventfp~1#1.base != 0 || vhost_dev_ioctl_~eventfp~1#1.offset != 0; [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8361: assume !(vhost_dev_ioctl_~eventfp~1#1.base != 0 || vhost_dev_ioctl_~eventfp~1#1.offset != 0);call write~$Pointer$#16(0, 0, vhost_dev_ioctl_~d#1.base, 192 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8163: assume vhost_set_vring_#t~mem325#1.base != 0 || vhost_set_vring_#t~mem325#1.offset != 0;havoc vhost_set_vring_#t~mem325#1.base, vhost_set_vring_#t~mem325#1.offset;call vhost_set_vring_#t~mem326#1.base, vhost_set_vring_#t~mem326#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 188 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8163: assume !(vhost_set_vring_#t~mem325#1.base != 0 || vhost_set_vring_#t~mem325#1.offset != 0);havoc vhost_set_vring_#t~mem325#1.base, vhost_set_vring_#t~mem325#1.offset; [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13514-1: call vhost_net_reset_owner_#t~mem927#1.base, vhost_net_reset_owner_#t~mem927#1.offset := read~$Pointer$#20(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, 8); [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6974: havoc vhost_dev_set_owner_#t~mem138#1.base, vhost_dev_set_owner_#t~mem138#1.offset; [2025-02-08 02:05:35,264 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8031: assume (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616 != (vhost_set_vring_#t~mem302#1.base + vhost_set_vring_#t~mem302#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem302#1.base, vhost_set_vring_#t~mem302#1.offset;call vhost_set_vring_#t~mem303#1.base, vhost_set_vring_#t~mem303#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 188 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_#t~mem303#1.base, vhost_set_vring_#t~mem303#1.offset;havoc vhost_set_vring_#t~mem303#1.base, vhost_set_vring_#t~mem303#1.offset;vhost_set_vring_~pollstop~0#1.base, vhost_set_vring_~pollstop~0#1.offset := vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset;vhost_set_vring_~tmp___17~1#1.base, vhost_set_vring_~tmp___17~1#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset;call write~$Pointer$#16(vhost_set_vring_~tmp___17~1#1.base, vhost_set_vring_~tmp___17~1#1.offset, vhost_set_vring_~vq~0#1.base, 188 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~pollstart~0#1.base, vhost_set_vring_~pollstart~0#1.offset := vhost_set_vring_~tmp___17~1#1.base, vhost_set_vring_~tmp___17~1#1.offset; [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8031: assume !((vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616 != (vhost_set_vring_#t~mem302#1.base + vhost_set_vring_#t~mem302#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem302#1.base, vhost_set_vring_#t~mem302#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset; [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8064: assume 0 != vhost_set_vring_~tmp___20~0#1; [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8064: assume !(0 != vhost_set_vring_~tmp___20~0#1);call vhost_set_vring_#t~mem310#1.base, vhost_set_vring_#t~mem310#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 196 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13085: assume 0 != vhost_net_enable_vq_~tmp___7~40#1; [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13085: assume !(0 != vhost_net_enable_vq_~tmp___7~40#1); [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6908: SUMMARY for call vhost_work_init(vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset, #funAddr~vhost_attach_cgroups_work.base, #funAddr~vhost_attach_cgroups_work.offset); srcloc: null [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6941-1: SUMMARY for call vhost_dev_set_owner_#t~ret132#1 := PTR_ERR(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13250-1: SUMMARY for call get_raw_socket_#t~ret889#1.base, get_raw_socket_#t~ret889#1.offset := ERR_PTR(-88); srcloc: null [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6974-1: SUMMARY for call mmput(vhost_dev_set_owner_#t~mem138#1.base, vhost_dev_set_owner_#t~mem138#1.offset); srcloc: null [2025-02-08 02:05:35,265 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6941: assume -9223372036854775808 <= vhost_dev_set_owner_#t~ret132#1 && vhost_dev_set_owner_#t~ret132#1 <= 9223372036854775807;vhost_dev_set_owner_~tmp___12~1#1 := vhost_dev_set_owner_#t~ret132#1;havoc vhost_dev_set_owner_#t~ret132#1;vhost_dev_set_owner_~tmp___9~4#1 := vhost_dev_set_owner_~tmp___12~1#1;vhost_dev_set_owner_~err~0#1 := (if vhost_dev_set_owner_~tmp___9~4#1 % 4294967296 <= 2147483647 then vhost_dev_set_owner_~tmp___9~4#1 % 4294967296 else vhost_dev_set_owner_~tmp___9~4#1 % 4294967296 - 4294967296); [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7503-1: SUMMARY for call vhost_vq_access_ok_#t~ret227#1 := vq_log_access_ok(vhost_vq_access_ok_#t~mem225#1.base, vhost_vq_access_ok_#t~mem225#1.offset, vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, vhost_vq_access_ok_#t~mem226#1.base, vhost_vq_access_ok_#t~mem226#1.offset); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7503: assume -2147483648 <= vhost_vq_access_ok_#t~ret227#1 && vhost_vq_access_ok_#t~ret227#1 <= 2147483647;vhost_vq_access_ok_~tmp___8~12#1 := vhost_vq_access_ok_#t~ret227#1;havoc vhost_vq_access_ok_#t~mem225#1.base, vhost_vq_access_ok_#t~mem225#1.offset;havoc vhost_vq_access_ok_#t~mem226#1.base, vhost_vq_access_ok_#t~mem226#1.offset;havoc vhost_vq_access_ok_#t~ret227#1; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7569-1: SUMMARY for call kfree(vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13581: vhost_net_set_features_#res#1 := 0; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7569: vhost_set_memory_#res#1 := -14;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13581-1: SUMMARY for call mutex_unlock(vhost_net_set_features_~n#1.base, 16 + vhost_net_set_features_~n#1.offset); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7834: assume 1074310930 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7834: assume !(1074310930 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13119: havoc vhost_net_enable_vq_#t~mem874#1.base, vhost_net_enable_vq_#t~mem874#1.offset; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13119-1: SUMMARY for call vhost_poll_start(vhost_net_enable_vq_~n#1.base, 34464 + vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_#t~mem874#1.base, vhost_net_enable_vq_#t~mem874#1.offset); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13086: assume 0 == ~__warned___31~0 % 256; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13086: assume !(0 == ~__warned___31~0 % 256); [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7900: assume vhost_set_vring_#t~mem257#1 % 4294967296 > 65535;havoc vhost_set_vring_#t~mem257#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7900: assume !(vhost_set_vring_#t~mem257#1 % 4294967296 > 65535);havoc vhost_set_vring_#t~mem257#1;call vhost_set_vring_#t~mem258#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);call write~int#16(vhost_set_vring_#t~mem258#1, vhost_set_vring_~vq~0#1.base, 436 + vhost_set_vring_~vq~0#1.offset, 2);havoc vhost_set_vring_#t~mem258#1;call vhost_set_vring_#t~mem259#1 := read~int#16(vhost_set_vring_~vq~0#1.base, 436 + vhost_set_vring_~vq~0#1.offset, 2);call write~int#16(vhost_set_vring_#t~mem259#1, vhost_set_vring_~vq~0#1.base, 438 + vhost_set_vring_~vq~0#1.offset, 2);havoc vhost_set_vring_#t~mem259#1; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6909: SUMMARY for call vhost_work_queue(vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13516-1: SUMMARY for call fput(vhost_net_reset_owner_#t~mem929#1.base, vhost_net_reset_owner_#t~mem929#1.offset); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13450: assume (vhost_net_set_backend_~sock~7#1.base + vhost_net_set_backend_~sock~7#1.offset) % 18446744073709551616 != (vhost_net_set_backend_~oldsock~0#1.base + vhost_net_set_backend_~oldsock~0#1.offset) % 18446744073709551616; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13450: assume !((vhost_net_set_backend_~sock~7#1.base + vhost_net_set_backend_~sock~7#1.offset) % 18446744073709551616 != (vhost_net_set_backend_~oldsock~0#1.base + vhost_net_set_backend_~oldsock~0#1.offset) % 18446744073709551616); [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7537-1: SUMMARY for call vhost_set_memory_#t~ret231#1 := copy_from_user(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset, vhost_set_memory_~size~0#1); srcloc: null [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13549: assume 0 != vhost_net_set_features_~tmp___7~46#1; [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13549: assume !(0 != vhost_net_set_features_~tmp___7~46#1); [2025-02-08 02:05:35,266 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7537: vhost_set_memory_~tmp~10#1 := vhost_set_memory_#t~ret231#1;havoc vhost_set_memory_#t~ret231#1;vhost_set_memory_~tmp___7~14#1 := vhost_set_memory_~tmp~10#1; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13516: havoc vhost_net_reset_owner_#t~mem928#1.base, vhost_net_reset_owner_#t~mem928#1.offset;havoc vhost_net_reset_owner_#t~mem929#1.base, vhost_net_reset_owner_#t~mem929#1.offset; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8363-1: SUMMARY for call vhost_dev_ioctl_#t~ret345#1.base, vhost_dev_ioctl_#t~ret345#1.offset := eventfd_ctx_fileget(vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset); srcloc: null [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8363: vhost_dev_ioctl_~tmp___11~7#1.base, vhost_dev_ioctl_~tmp___11~7#1.offset := vhost_dev_ioctl_#t~ret345#1.base, vhost_dev_ioctl_#t~ret345#1.offset;havoc vhost_dev_ioctl_#t~ret345#1.base, vhost_dev_ioctl_#t~ret345#1.offset;call write~$Pointer$#16(vhost_dev_ioctl_~tmp___11~7#1.base, vhost_dev_ioctl_~tmp___11~7#1.offset, vhost_dev_ioctl_~d#1.base, 192 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8396: assume vhost_dev_ioctl_~filep~1#1.base != 0 || vhost_dev_ioctl_~filep~1#1.offset != 0; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8396: assume !(vhost_dev_ioctl_~filep~1#1.base != 0 || vhost_dev_ioctl_~filep~1#1.offset != 0); [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8231: assume 1074048775 == (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296) % 18446744073709551616; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8231: assume !(1074048775 == (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296) % 18446744073709551616); [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13318-1: SUMMARY for call get_tap_socket_#t~ret907#1 := IS_ERR(get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset); srcloc: null [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8297: assume false; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8297: assume !false; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8066: assume -9223372036854775808 <= vhost_set_vring_#t~ret309#1 && vhost_set_vring_#t~ret309#1 <= 9223372036854775807;vhost_set_vring_~tmp___34~0#1 := vhost_set_vring_#t~ret309#1;havoc vhost_set_vring_#t~ret309#1;vhost_set_vring_~r~1#1 := vhost_set_vring_~tmp___34~0#1; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8099: assume -1 == vhost_set_vring_#t~mem315#1;havoc vhost_set_vring_#t~mem315#1;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := 0, 0; [2025-02-08 02:05:35,267 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8099: assume !(-1 == vhost_set_vring_#t~mem315#1);havoc vhost_set_vring_#t~mem315#1;call vhost_set_vring_#t~mem316#1 := read~int#16(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13318: assume -9223372036854775808 <= get_tap_socket_#t~ret907#1 && get_tap_socket_#t~ret907#1 <= 9223372036854775807;get_tap_socket_~tmp___12~14#1 := get_tap_socket_#t~ret907#1;havoc get_tap_socket_#t~ret907#1;get_tap_socket_~tmp___10~19#1 := get_tap_socket_~tmp___12~14#1; [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8165-1: SUMMARY for call vhost_poll_start(vhost_set_vring_~vq~0#1.base, 236 + vhost_set_vring_~vq~0#1.offset, vhost_set_vring_#t~mem326#1.base, vhost_set_vring_#t~mem326#1.offset); srcloc: null [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8165: havoc vhost_set_vring_#t~mem326#1.base, vhost_set_vring_#t~mem326#1.offset; [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13384: SUMMARY for call mutex_lock_nested(vhost_net_set_backend_~n#1.base, 16 + vhost_net_set_backend_~n#1.offset, 0); srcloc: null [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6910: call vhost_attach_cgroups_#t~mem124#1 := read~int#16(vhost_attach_cgroups_~#attach~0#1.base, 124 + vhost_attach_cgroups_~#attach~0#1.offset, 4);vhost_attach_cgroups_#res#1 := vhost_attach_cgroups_#t~mem124#1;havoc vhost_attach_cgroups_#t~mem124#1;call ULTIMATE.dealloc(vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset);havoc vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset; [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8066-1: SUMMARY for call vhost_set_vring_#t~ret309#1 := PTR_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6910-1: SUMMARY for call vhost_work_flush(vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset); srcloc: null [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6745-1: SUMMARY for call kfree(vhost_dev_alloc_iovecs_#t~mem89#1.base, vhost_dev_alloc_iovecs_#t~mem89#1.offset); srcloc: null [2025-02-08 02:05:35,268 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6745: havoc vhost_dev_alloc_iovecs_#t~mem88#1.base, vhost_dev_alloc_iovecs_#t~mem88#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem89#1.base, vhost_dev_alloc_iovecs_#t~mem89#1.offset;call vhost_dev_alloc_iovecs_#t~mem90#1.base, vhost_dev_alloc_iovecs_#t~mem90#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem91#1.base, vhost_dev_alloc_iovecs_#t~mem91#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_#t~mem90#1.base, 17080 + (vhost_dev_alloc_iovecs_#t~mem90#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8); [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7637: assume true; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7637: assume !true; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7505: assume 0 != vhost_vq_access_ok_~tmp___8~12#1;vhost_vq_access_ok_~tmp___9~11#1 := 1; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7505: assume !(0 != vhost_vq_access_ok_~tmp___8~12#1);vhost_vq_access_ok_~tmp___9~11#1 := 0; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13649: ~tmp___15~8#1 := #t~ret940#1;havoc #t~ret940#1;~tmp___10~22#1 := ~tmp___15~8#1; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13649-1: SUMMARY for call #t~ret940#1 := copy_from_user(~#features~0#1.base, ~#features~0#1.offset, ~featurep~0#1.base, ~featurep~0#1.offset, 8); srcloc: null [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13385: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret913#1 && vhost_net_set_backend_#t~ret913#1 <= 9223372036854775807;vhost_net_set_backend_~tmp___7~45#1 := vhost_net_set_backend_#t~ret913#1;havoc vhost_net_set_backend_#t~ret913#1;vhost_net_set_backend_~r~12#1 := (if vhost_net_set_backend_~tmp___7~45#1 % 4294967296 <= 2147483647 then vhost_net_set_backend_~tmp___7~45#1 % 4294967296 else vhost_net_set_backend_~tmp___7~45#1 % 4294967296 - 4294967296); [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13385-1: SUMMARY for call vhost_net_set_backend_#t~ret913#1 := vhost_dev_check_owner(vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset); srcloc: null [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7968: assume !(0 != vhost_set_vring_~tmp___11~6#1);vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7968: assume 0 != vhost_set_vring_~tmp___11~6#1;call vhost_set_vring_#t~mem282#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 4 + vhost_set_vring_~#a~2#1.offset, 4); [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14079-2: sockfd_lookup_#res#1.base, sockfd_lookup_#res#1.offset := sockfd_lookup_#t~ret986#1.base, sockfd_lookup_#t~ret986#1.offset;havoc sockfd_lookup_#t~ret986#1.base, sockfd_lookup_#t~ret986#1.offset; [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14079-3: SUMMARY for call sockfd_lookup_#t~ret986#1.base, sockfd_lookup_#t~ret986#1.offset := ldv_malloc(46); srcloc: null [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6746: havoc vhost_dev_alloc_iovecs_#t~mem90#1.base, vhost_dev_alloc_iovecs_#t~mem90#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem91#1.base, vhost_dev_alloc_iovecs_#t~mem91#1.offset;call vhost_dev_alloc_iovecs_#t~mem92#1.base, vhost_dev_alloc_iovecs_#t~mem92#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem93#1.base, vhost_dev_alloc_iovecs_#t~mem93#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_#t~mem92#1.base, 17056 + (vhost_dev_alloc_iovecs_#t~mem92#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8); [2025-02-08 02:05:35,269 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13088-1: SUMMARY for call vhost_net_enable_vq_#t~ret872#1 := lock_is_held(vhost_net_enable_vq_~vq#1.base, 116 + vhost_net_enable_vq_~vq#1.offset); srcloc: null [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14079: havoc sockfd_lookup_#t~ret986#1.base, sockfd_lookup_#t~ret986#1.offset;get_raw_socket_#t~ret888#1.base, get_raw_socket_#t~ret888#1.offset := sockfd_lookup_#res#1.base, sockfd_lookup_#res#1.offset;havoc sockfd_lookup_#t~ret986#1.base, sockfd_lookup_#t~ret986#1.offset, sockfd_lookup_~arg0#1, sockfd_lookup_~arg1#1.base, sockfd_lookup_~arg1#1.offset;havoc sockfd_lookup_#in~arg0#1, sockfd_lookup_#in~arg1#1.base, sockfd_lookup_#in~arg1#1.offset;assume { :end_inline_sockfd_lookup } true;get_raw_socket_~tmp___7~42#1.base, get_raw_socket_~tmp___7~42#1.offset := get_raw_socket_#t~ret888#1.base, get_raw_socket_#t~ret888#1.offset;havoc get_raw_socket_#t~ret888#1.base, get_raw_socket_#t~ret888#1.offset;get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset := get_raw_socket_~tmp___7~42#1.base, get_raw_socket_~tmp___7~42#1.offset; [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7869: assume 0 == vhost_set_vring_#t~mem249#1 % 4294967296;havoc vhost_set_vring_#t~mem249#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7869: assume !(0 == vhost_set_vring_#t~mem249#1 % 4294967296);havoc vhost_set_vring_#t~mem249#1;call vhost_set_vring_#t~mem250#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13088: assume -2147483648 <= vhost_net_enable_vq_#t~ret872#1 && vhost_net_enable_vq_#t~ret872#1 <= 2147483647;vhost_net_enable_vq_~tmp___8~30#1 := vhost_net_enable_vq_#t~ret872#1;havoc vhost_net_enable_vq_#t~ret872#1; [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6713-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret72#1.base, vhost_dev_alloc_iovecs_#t~ret72#1.offset := kmalloc(16384, 208); srcloc: null [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6746-1: SUMMARY for call kfree(vhost_dev_alloc_iovecs_#t~mem91#1.base, vhost_dev_alloc_iovecs_#t~mem91#1.offset); srcloc: null [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6713: vhost_dev_alloc_iovecs_~tmp___7~5#1.base, vhost_dev_alloc_iovecs_~tmp___7~5#1.offset := vhost_dev_alloc_iovecs_#t~ret72#1.base, vhost_dev_alloc_iovecs_#t~ret72#1.offset;havoc vhost_dev_alloc_iovecs_#t~ret72#1.base, vhost_dev_alloc_iovecs_#t~ret72#1.offset;call vhost_dev_alloc_iovecs_#t~mem73#1.base, vhost_dev_alloc_iovecs_#t~mem73#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#16(vhost_dev_alloc_iovecs_~tmp___7~5#1.base, vhost_dev_alloc_iovecs_~tmp___7~5#1.offset, vhost_dev_alloc_iovecs_#t~mem73#1.base, 17032 + (vhost_dev_alloc_iovecs_#t~mem73#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8);havoc vhost_dev_alloc_iovecs_#t~mem73#1.base, vhost_dev_alloc_iovecs_#t~mem73#1.offset; [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8398: SUMMARY for call fput(vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset); srcloc: null [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13452-1: SUMMARY for call vhost_net_disable_vq(vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset); srcloc: null [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13485: call ULTIMATE.dealloc(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset);havoc vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset;call ULTIMATE.dealloc(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset);havoc vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset;#t~ret945#1 := vhost_net_reset_owner_#res#1;havoc vhost_net_reset_owner_#t~ret922#1, vhost_net_reset_owner_#t~ret923#1, vhost_net_reset_owner_#t~mem924#1.base, vhost_net_reset_owner_#t~mem924#1.offset, vhost_net_reset_owner_#t~mem925#1.base, vhost_net_reset_owner_#t~mem925#1.offset, vhost_net_reset_owner_#t~mem926#1.base, vhost_net_reset_owner_#t~mem926#1.offset, vhost_net_reset_owner_#t~mem927#1.base, vhost_net_reset_owner_#t~mem927#1.offset, vhost_net_reset_owner_#t~mem928#1.base, vhost_net_reset_owner_#t~mem928#1.offset, vhost_net_reset_owner_#t~mem929#1.base, vhost_net_reset_owner_#t~mem929#1.offset, vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset, vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, vhost_net_reset_owner_~err~3#1;havoc vhost_net_reset_owner_#in~n#1.base, vhost_net_reset_owner_#in~n#1.offset;assume { :end_inline_vhost_net_reset_owner } true;assume -9223372036854775808 <= #t~ret945#1 && #t~ret945#1 <= 9223372036854775807;~tmp___12~16#1 := #t~ret945#1;havoc #t~ret945#1;#res#1 := ~tmp___12~16#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,270 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13452: call write~$Pointer$#16(vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset, vhost_net_set_backend_~vq~6#1.base, 17064 + vhost_net_set_backend_~vq~6#1.offset, 8);assume { :begin_inline_vhost_net_enable_vq } true;vhost_net_enable_vq_#in~n#1.base, vhost_net_enable_vq_#in~n#1.offset, vhost_net_enable_vq_#in~vq#1.base, vhost_net_enable_vq_#in~vq#1.offset := vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset;havoc vhost_net_enable_vq_#t~ret871#1, vhost_net_enable_vq_#t~ret872#1, vhost_net_enable_vq_#t~mem873#1.base, vhost_net_enable_vq_#t~mem873#1.offset, vhost_net_enable_vq_#t~mem874#1.base, vhost_net_enable_vq_#t~mem874#1.offset, vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_~vq#1.base, vhost_net_enable_vq_~vq#1.offset, vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset, vhost_net_enable_vq_~tmp___7~40#1, vhost_net_enable_vq_~tmp___8~30#1;vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset := vhost_net_enable_vq_#in~n#1.base, vhost_net_enable_vq_#in~n#1.offset;vhost_net_enable_vq_~vq#1.base, vhost_net_enable_vq_~vq#1.offset := vhost_net_enable_vq_#in~vq#1.base, vhost_net_enable_vq_#in~vq#1.offset;havoc vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset;havoc vhost_net_enable_vq_~tmp___7~40#1;havoc vhost_net_enable_vq_~tmp___8~30#1; [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8002: vhost_set_vring_~tmp___29~0#1 := vhost_set_vring_#t~ret296#1;havoc vhost_set_vring_#t~ret296#1;vhost_set_vring_~tmp___14~4#1 := vhost_set_vring_~tmp___29~0#1; [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6978: call write~$Pointer$#16(0, 0, vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8);vhost_dev_set_owner_#res#1 := vhost_dev_set_owner_~err~0#1; [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13353: get_socket_#t~ret910#1.base, get_socket_#t~ret910#1.offset := get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset;havoc get_tap_socket_#t~ret902#1.base, get_tap_socket_#t~ret902#1.offset, get_tap_socket_#t~ret903#1.base, get_tap_socket_#t~ret903#1.offset, get_tap_socket_#t~ret904#1.base, get_tap_socket_#t~ret904#1.offset, get_tap_socket_#t~ret905#1, get_tap_socket_#t~ret906#1.base, get_tap_socket_#t~ret906#1.offset, get_tap_socket_#t~ret907#1, get_tap_socket_~fd#1, get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset, get_tap_socket_~tmp___7~43#1.base, get_tap_socket_~tmp___7~43#1.offset, get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset, get_tap_socket_~tmp___8~33#1.base, get_tap_socket_~tmp___8~33#1.offset, get_tap_socket_~tmp___9~25#1, get_tap_socket_~tmp___10~19#1, get_tap_socket_~tmp~16#1.base, get_tap_socket_~tmp~16#1.offset, get_tap_socket_~tmp___11~17#1, get_tap_socket_~tmp___12~14#1;havoc get_tap_socket_#in~fd#1;assume { :end_inline_get_tap_socket } true;get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset := get_socket_#t~ret910#1.base, get_socket_#t~ret910#1.offset;havoc get_socket_#t~ret910#1.base, get_socket_#t~ret910#1.offset; [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7936: assume vhost_set_vring_#t~mem264#1 % 18446744073709551616 != vhost_set_vring_#t~mem265#1 % 18446744073709551616;havoc vhost_set_vring_#t~mem264#1;havoc vhost_set_vring_#t~mem265#1;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7936: assume !(vhost_set_vring_#t~mem264#1 % 18446744073709551616 != vhost_set_vring_#t~mem265#1 % 18446744073709551616);havoc vhost_set_vring_#t~mem264#1;havoc vhost_set_vring_#t~mem265#1;call vhost_set_vring_#t~mem266#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem267#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6912: havoc vhost_attach_cgroups_#t~mem124#1;call ULTIMATE.dealloc(vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset);havoc vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset;vhost_dev_set_owner_#t~ret134#1 := vhost_attach_cgroups_#res#1;havoc vhost_attach_cgroups_#t~ret123#1.base, vhost_attach_cgroups_#t~ret123#1.offset, vhost_attach_cgroups_#t~mem124#1, vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset;havoc vhost_attach_cgroups_#in~dev#1.base, vhost_attach_cgroups_#in~dev#1.offset;assume { :end_inline_vhost_attach_cgroups } true;assume -2147483648 <= vhost_dev_set_owner_#t~ret134#1 && vhost_dev_set_owner_#t~ret134#1 <= 2147483647;vhost_dev_set_owner_~err~0#1 := vhost_dev_set_owner_#t~ret134#1;havoc vhost_dev_set_owner_#t~ret134#1; [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8002-1: SUMMARY for call vhost_set_vring_#t~ret296#1 := copy_from_user(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:05:35,271 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6747-1: SUMMARY for call kfree(vhost_dev_alloc_iovecs_#t~mem93#1.base, vhost_dev_alloc_iovecs_#t~mem93#1.offset); srcloc: null [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6747: havoc vhost_dev_alloc_iovecs_#t~mem92#1.base, vhost_dev_alloc_iovecs_#t~mem92#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem93#1.base, vhost_dev_alloc_iovecs_#t~mem93#1.offset;vhost_dev_alloc_iovecs_~i~0#1 := vhost_dev_alloc_iovecs_~i~0#1 - 1; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7837: assume 3221794578 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7837: assume !(3221794578 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7540: assume 0 != vhost_set_memory_~tmp___7~14#1 % 18446744073709551616;vhost_set_memory_#res#1 := -14;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7540: assume !(0 != vhost_set_memory_~tmp___7~14#1 % 18446744073709551616);call vhost_set_memory_#t~mem232#1 := read~int#16(vhost_set_memory_~#mem~0#1.base, 4 + vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13354: assume -9223372036854775808 <= get_socket_#t~ret911#1 && get_socket_#t~ret911#1 <= 9223372036854775807;get_socket_~tmp___10~20#1 := get_socket_#t~ret911#1;havoc get_socket_#t~ret911#1;get_socket_~tmp___8~34#1 := get_socket_~tmp___10~20#1; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8267-1: SUMMARY for call mutex_lock_nested(vhost_dev_ioctl_~vq~1#1.base, 8 + vhost_dev_ioctl_~vq~1#1.offset, 0); srcloc: null [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13552-1: SUMMARY for call mutex_unlock(vhost_net_set_features_~n#1.base, 16 + vhost_net_set_features_~n#1.offset); srcloc: null [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8267: call vhost_dev_ioctl_#t~mem337#1.base, vhost_dev_ioctl_#t~mem337#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~vq~1#1.base, 17064 + vhost_dev_ioctl_~vq~1#1.offset, 8); [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8300: assume true; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8300: assume !true; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13552: vhost_net_set_features_#res#1 := -14; [2025-02-08 02:05:35,272 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13090: assume 0 != vhost_net_enable_vq_~tmp___8~30#1; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13090: assume !(0 != vhost_net_enable_vq_~tmp___8~30#1);~__warned___31~0 := 1; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13354-1: SUMMARY for call get_socket_#t~ret911#1 := IS_ERR(get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset); srcloc: null [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13321: assume 0 != get_tap_socket_~tmp___10~19#1; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13321: assume !(0 != get_tap_socket_~tmp___10~19#1); [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6715-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret76#1.base, vhost_dev_alloc_iovecs_#t~ret76#1.offset := kmalloc(16384, 208); srcloc: null [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6715: vhost_dev_alloc_iovecs_~tmp___8~3#1.base, vhost_dev_alloc_iovecs_~tmp___8~3#1.offset := vhost_dev_alloc_iovecs_#t~ret76#1.base, vhost_dev_alloc_iovecs_#t~ret76#1.offset;havoc vhost_dev_alloc_iovecs_#t~ret76#1.base, vhost_dev_alloc_iovecs_#t~ret76#1.offset;call vhost_dev_alloc_iovecs_#t~mem77#1.base, vhost_dev_alloc_iovecs_#t~mem77#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#16(vhost_dev_alloc_iovecs_~tmp___8~3#1.base, vhost_dev_alloc_iovecs_~tmp___8~3#1.offset, vhost_dev_alloc_iovecs_#t~mem77#1.base, 17080 + (vhost_dev_alloc_iovecs_#t~mem77#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8);havoc vhost_dev_alloc_iovecs_#t~mem77#1.base, vhost_dev_alloc_iovecs_#t~mem77#1.offset; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7640: assume false; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7640: assume !false; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7673: assume 0 != init_used_~r~0#1;init_used_#res#1 := init_used_~r~0#1; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7673: assume !(0 != init_used_~r~0#1);call write~int#16(0, init_used_~vq#1.base, 446 + init_used_~vq#1.offset, 1); [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8334: assume vhost_dev_ioctl_~r~2#1 < 0; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8334: assume !(vhost_dev_ioctl_~r~2#1 < 0); [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13388: assume 0 != vhost_net_set_backend_~r~12#1; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13388: assume !(0 != vhost_net_set_backend_~r~12#1); [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13520-1: vhost_net_reset_owner_#res#1 := vhost_net_reset_owner_~err~3#1;call ULTIMATE.dealloc(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset);havoc vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset;call ULTIMATE.dealloc(vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset);havoc vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8235: assume false;assume { :begin_inline_vhost_set_memory } true;vhost_set_memory_#in~d#1.base, vhost_set_memory_#in~d#1.offset, vhost_set_memory_#in~m#1.base, vhost_set_memory_#in~m#1.offset := vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset;havoc vhost_set_memory_#res#1;havoc vhost_set_memory_#t~ret231#1, vhost_set_memory_#t~mem232#1, vhost_set_memory_#t~mem233#1, vhost_set_memory_#t~mem234#1, vhost_set_memory_#t~ret235#1.base, vhost_set_memory_#t~ret235#1.offset, vhost_set_memory_#t~memcpy~res236#1.base, vhost_set_memory_#t~memcpy~res236#1.offset, vhost_set_memory_#t~mem237#1, vhost_set_memory_#t~ret238#1, vhost_set_memory_#t~ret239#1, vhost_set_memory_#t~ret240#1, vhost_set_memory_#t~ret241#1, vhost_set_memory_#t~ret242#1, vhost_set_memory_#t~mem243#1.base, vhost_set_memory_#t~mem243#1.offset, vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset, vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset, vhost_set_memory_~size~0#1, vhost_set_memory_~tmp___7~14#1, vhost_set_memory_~tmp___8~13#1.base, vhost_set_memory_~tmp___8~13#1.offset, vhost_set_memory_~__len~0#1, vhost_set_memory_~__ret~0#1.base, vhost_set_memory_~__ret~0#1.offset, vhost_set_memory_~tmp___9~12#1, vhost_set_memory_~tmp___10~7#1, vhost_set_memory_~tmp___11~5#1, vhost_set_memory_~tmp___12~4#1, vhost_set_memory_~tmp___13~3#1, vhost_set_memory_~tmp~10#1, vhost_set_memory_~tmp___14~3#1;vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset := vhost_set_memory_#in~d#1.base, vhost_set_memory_#in~d#1.offset;vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset := vhost_set_memory_#in~m#1.base, vhost_set_memory_#in~m#1.offset;call vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset := #Ultimate.allocOnStack(8);havoc vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset;havoc vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset;havoc vhost_set_memory_~size~0#1;havoc vhost_set_memory_~tmp___7~14#1;havoc vhost_set_memory_~tmp___8~13#1.base, vhost_set_memory_~tmp___8~13#1.offset;havoc vhost_set_memory_~__len~0#1;havoc vhost_set_memory_~__ret~0#1.base, vhost_set_memory_~__ret~0#1.offset;havoc vhost_set_memory_~tmp___9~12#1;havoc vhost_set_memory_~tmp___10~7#1;havoc vhost_set_memory_~tmp___11~5#1;havoc vhost_set_memory_~tmp___12~4#1;havoc vhost_set_memory_~tmp___13~3#1;havoc vhost_set_memory_~tmp~10#1;havoc vhost_set_memory_~tmp___14~3#1;vhost_set_memory_~size~0#1 := 8; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8235: assume !false;vhost_dev_ioctl_#res#1 := vhost_dev_ioctl_~r~2#1;call ULTIMATE.dealloc(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset);havoc vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset; [2025-02-08 02:05:35,273 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8103-1: SUMMARY for call vhost_set_vring_#t~ret317#1.base, vhost_set_vring_#t~ret317#1.offset := eventfd_fget(vhost_set_vring_#t~mem316#1); srcloc: null [2025-02-08 02:05:35,274 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8103: vhost_set_vring_~tmp___23~0#1.base, vhost_set_vring_~tmp___23~0#1.offset := vhost_set_vring_#t~ret317#1.base, vhost_set_vring_#t~ret317#1.offset;havoc vhost_set_vring_#t~mem316#1;havoc vhost_set_vring_#t~ret317#1.base, vhost_set_vring_#t~ret317#1.offset;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := vhost_set_vring_~tmp___23~0#1.base, vhost_set_vring_~tmp___23~0#1.offset; [2025-02-08 02:05:35,274 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8136: vhost_set_vring_~r~1#1 := -515; [2025-02-08 02:05:35,274 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13256: assume 3 != get_raw_socket_#t~mem891#1 % 4294967296;havoc get_raw_socket_#t~mem890#1.base, get_raw_socket_#t~mem890#1.offset;havoc get_raw_socket_#t~mem891#1;call write~int#33(-94, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:05:35,274 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13256: assume !(3 != get_raw_socket_#t~mem891#1 % 4294967296);havoc get_raw_socket_#t~mem890#1.base, get_raw_socket_#t~mem890#1.offset;havoc get_raw_socket_#t~mem891#1;call get_raw_socket_#t~mem894#1.base, get_raw_socket_#t~mem894#1.offset := read~$Pointer$#16(get_raw_socket_~sock~4#1.base, 38 + get_raw_socket_~sock~4#1.offset, 8);call get_raw_socket_#t~mem895#1.base, get_raw_socket_#t~mem895#1.offset := read~$Pointer$#16(get_raw_socket_#t~mem894#1.base, 52 + get_raw_socket_#t~mem894#1.offset, 8); [2025-02-08 02:05:35,274 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13983-2: fget_#res#1.base, fget_#res#1.offset := fget_#t~ret972#1.base, fget_#t~ret972#1.offset;havoc fget_#t~ret972#1.base, fget_#t~ret972#1.offset; [2025-02-08 02:05:35,274 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13983-3: SUMMARY for call fget_#t~ret972#1.base, fget_#t~ret972#1.offset := ldv_malloc(316); srcloc: null [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13983: havoc fget_#t~ret972#1.base, fget_#t~ret972#1.offset;get_tap_socket_#t~ret902#1.base, get_tap_socket_#t~ret902#1.offset := fget_#res#1.base, fget_#res#1.offset;havoc fget_#t~ret972#1.base, fget_#t~ret972#1.offset, fget_~arg0#1;havoc fget_#in~arg0#1;assume { :end_inline_fget } true;get_tap_socket_~tmp___7~43#1.base, get_tap_socket_~tmp___7~43#1.offset := get_tap_socket_#t~ret902#1.base, get_tap_socket_#t~ret902#1.offset;havoc get_tap_socket_#t~ret902#1.base, get_tap_socket_#t~ret902#1.offset;get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset := get_tap_socket_~tmp___7~43#1.base, get_tap_socket_~tmp___7~43#1.offset; [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7575-1: SUMMARY for call vhost_set_memory_#t~ret239#1 := vhost_has_feature(vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, 26); srcloc: null [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7575: assume -2147483648 <= vhost_set_memory_#t~ret239#1 && vhost_set_memory_#t~ret239#1 <= 2147483647;vhost_set_memory_~tmp___10~7#1 := vhost_set_memory_#t~ret239#1;havoc vhost_set_memory_#t~ret239#1; [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13653: assume 0 != ~tmp___10~22#1 % 18446744073709551616;#res#1 := -14;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13653: assume !(0 != ~tmp___10~22#1 % 18446744073709551616);call #t~mem941#1 := read~int#16(~#features~0#1.base, ~#features~0#1.offset, 8); [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13620: assume false; [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13620: assume !false;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13323: SUMMARY for call fput(get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset); srcloc: null [2025-02-08 02:05:35,275 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13455: havoc vhost_net_enable_vq_#t~ret871#1, vhost_net_enable_vq_#t~ret872#1, vhost_net_enable_vq_#t~mem873#1.base, vhost_net_enable_vq_#t~mem873#1.offset, vhost_net_enable_vq_#t~mem874#1.base, vhost_net_enable_vq_#t~mem874#1.offset, vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_~vq#1.base, vhost_net_enable_vq_~vq#1.offset, vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset, vhost_net_enable_vq_~tmp___7~40#1, vhost_net_enable_vq_~tmp___8~30#1;havoc vhost_net_enable_vq_#in~n#1.base, vhost_net_enable_vq_#in~n#1.offset, vhost_net_enable_vq_#in~vq#1.base, vhost_net_enable_vq_#in~vq#1.offset;assume { :end_inline_vhost_net_enable_vq } true; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13422: assume true; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13422: assume !true;call vhost_net_set_backend_#t~mem920#1.base, vhost_net_set_backend_#t~mem920#1.offset := read~$Pointer$#16(vhost_net_set_backend_~vq~6#1.base, 17064 + vhost_net_set_backend_~vq~6#1.offset, 8);vhost_net_set_backend_~oldsock~0#1.base, vhost_net_set_backend_~oldsock~0#1.offset := vhost_net_set_backend_#t~mem920#1.base, vhost_net_set_backend_#t~mem920#1.offset; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8269: assume vhost_dev_ioctl_#t~mem337#1.base != 0 || vhost_dev_ioctl_#t~mem337#1.offset != 0;havoc vhost_dev_ioctl_#t~mem337#1.base, vhost_dev_ioctl_#t~mem337#1.offset; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8269: assume !(vhost_dev_ioctl_#t~mem337#1.base != 0 || vhost_dev_ioctl_#t~mem337#1.offset != 0);havoc vhost_dev_ioctl_#t~mem337#1.base, vhost_dev_ioctl_#t~mem337#1.offset;call write~$Pointer$#16(vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~vq~1#1.base, 17072 + vhost_dev_ioctl_~vq~1#1.offset, 8); [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7840: assume 1076408081 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7840: assume !(1076408081 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7873: assume vhost_set_vring_#t~mem250#1 % 4294967296 > 65535;havoc vhost_set_vring_#t~mem250#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7873: assume !(vhost_set_vring_#t~mem250#1 % 4294967296 > 65535);havoc vhost_set_vring_#t~mem250#1;call vhost_set_vring_#t~mem252#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);call vhost_set_vring_#t~mem251#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6717-1: SUMMARY for call vhost_dev_alloc_iovecs_#t~ret80#1.base, vhost_dev_alloc_iovecs_#t~ret80#1.offset := kmalloc(8192, 208); srcloc: null [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6717: vhost_dev_alloc_iovecs_~tmp___9~2#1.base, vhost_dev_alloc_iovecs_~tmp___9~2#1.offset := vhost_dev_alloc_iovecs_#t~ret80#1.base, vhost_dev_alloc_iovecs_#t~ret80#1.offset;havoc vhost_dev_alloc_iovecs_#t~ret80#1.base, vhost_dev_alloc_iovecs_#t~ret80#1.offset;call vhost_dev_alloc_iovecs_#t~mem81#1.base, vhost_dev_alloc_iovecs_#t~mem81#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call write~$Pointer$#16(vhost_dev_alloc_iovecs_~tmp___9~2#1.base, vhost_dev_alloc_iovecs_~tmp___9~2#1.offset, vhost_dev_alloc_iovecs_#t~mem81#1.base, 17056 + (vhost_dev_alloc_iovecs_#t~mem81#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8);havoc vhost_dev_alloc_iovecs_#t~mem81#1.base, vhost_dev_alloc_iovecs_#t~mem81#1.offset;call vhost_dev_alloc_iovecs_#t~mem82#1.base, vhost_dev_alloc_iovecs_#t~mem82#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem83#1.base, vhost_dev_alloc_iovecs_#t~mem83#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_#t~mem82#1.base, 17032 + (vhost_dev_alloc_iovecs_#t~mem82#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8); [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7576-1: SUMMARY for call vhost_set_memory_#t~ret240#1 := memory_access_ok(vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~tmp___10~7#1); srcloc: null [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7576: assume -2147483648 <= vhost_set_memory_#t~ret240#1 && vhost_set_memory_#t~ret240#1 <= 2147483647;vhost_set_memory_~tmp___11~5#1 := vhost_set_memory_#t~ret240#1;havoc vhost_set_memory_#t~ret240#1; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8303: assume false; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8303: assume !false; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13357: assume 0 != get_socket_~tmp___8~34#1; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13357: assume !(0 != get_socket_~tmp___8~34#1);get_socket_#res#1.base, get_socket_#res#1.offset := get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8006: assume 0 != vhost_set_vring_~tmp___14~4#1 % 18446744073709551616;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8006: assume !(0 != vhost_set_vring_~tmp___14~4#1 % 18446744073709551616);call vhost_set_vring_#t~mem297#1 := read~int#16(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8072: assume (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616 != (vhost_set_vring_#t~mem310#1.base + vhost_set_vring_#t~mem310#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem310#1.base, vhost_set_vring_#t~mem310#1.offset;call vhost_set_vring_#t~mem311#1.base, vhost_set_vring_#t~mem311#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 196 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_#t~mem311#1.base, vhost_set_vring_#t~mem311#1.offset;havoc vhost_set_vring_#t~mem311#1.base, vhost_set_vring_#t~mem311#1.offset;call vhost_set_vring_#t~mem312#1.base, vhost_set_vring_#t~mem312#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 212 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset := vhost_set_vring_#t~mem312#1.base, vhost_set_vring_#t~mem312#1.offset;havoc vhost_set_vring_#t~mem312#1.base, vhost_set_vring_#t~mem312#1.offset;call write~$Pointer$#16(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~vq~0#1.base, 196 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8072: assume !((vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616 != (vhost_set_vring_#t~mem310#1.base + vhost_set_vring_#t~mem310#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem310#1.base, vhost_set_vring_#t~mem310#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7940: assume vhost_set_vring_#t~mem266#1 % 18446744073709551616 != vhost_set_vring_#t~mem267#1 % 18446744073709551616;havoc vhost_set_vring_#t~mem266#1;havoc vhost_set_vring_#t~mem267#1;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,276 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7940: assume !(vhost_set_vring_#t~mem266#1 % 18446744073709551616 != vhost_set_vring_#t~mem267#1 % 18446744073709551616);havoc vhost_set_vring_#t~mem266#1;havoc vhost_set_vring_#t~mem267#1;call vhost_set_vring_#t~mem268#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem269#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7973: assume 0 != vhost_set_vring_#t~mem282#1 % 2 % 4294967296;havoc vhost_set_vring_#t~mem282#1;call vhost_set_vring_#t~mem283#1.base, vhost_set_vring_#t~mem283#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 17072 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem284#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 32 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem286#1 := read~int#16(vhost_set_vring_~vq~0#1.base, 160 + vhost_set_vring_~vq~0#1.offset, 4); [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7973: assume !(0 != vhost_set_vring_#t~mem282#1 % 2 % 4294967296);havoc vhost_set_vring_#t~mem282#1; [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7643: assume false; [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7643: assume !false; [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544: assume 0 != vhost_set_memory_#t~mem232#1 % 4294967296;havoc vhost_set_memory_#t~mem232#1;vhost_set_memory_#res#1 := -95;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544: assume !(0 != vhost_set_memory_#t~mem232#1 % 4294967296);havoc vhost_set_memory_#t~mem232#1;call vhost_set_memory_#t~mem233#1 := read~int#16(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:05:35,277 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8271-1: SUMMARY for call vhost_dev_ioctl_#t~ret338#1 := vq_log_access_ok(vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset, vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset); srcloc: null [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8271: assume -2147483648 <= vhost_dev_ioctl_#t~ret338#1 && vhost_dev_ioctl_#t~ret338#1 <= 2147483647;vhost_dev_ioctl_~tmp___8~15#1 := vhost_dev_ioctl_#t~ret338#1;havoc vhost_dev_ioctl_#t~ret338#1; [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8172: SUMMARY for call mutex_unlock(vhost_set_vring_~vq~0#1.base, 8 + vhost_set_vring_~vq~0#1.offset); srcloc: null [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6950: assume -2147483648 <= vhost_dev_set_owner_#t~ret133#1 && vhost_dev_set_owner_#t~ret133#1 <= 2147483647;havoc vhost_dev_set_owner_#t~ret133#1;assume { :begin_inline_vhost_attach_cgroups } true;vhost_attach_cgroups_#in~dev#1.base, vhost_attach_cgroups_#in~dev#1.offset := vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset;havoc vhost_attach_cgroups_#res#1;havoc vhost_attach_cgroups_#t~ret123#1.base, vhost_attach_cgroups_#t~ret123#1.offset, vhost_attach_cgroups_#t~mem124#1, vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset, vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset;vhost_attach_cgroups_~dev#1.base, vhost_attach_cgroups_~dev#1.offset := vhost_attach_cgroups_#in~dev#1.base, vhost_attach_cgroups_#in~dev#1.offset;call vhost_attach_cgroups_~#attach~0#1.base, vhost_attach_cgroups_~#attach~0#1.offset := #Ultimate.allocOnStack(128); [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14085-2: tun_get_socket_#res#1.base, tun_get_socket_#res#1.offset := tun_get_socket_#t~ret987#1.base, tun_get_socket_#t~ret987#1.offset;havoc tun_get_socket_#t~ret987#1.base, tun_get_socket_#t~ret987#1.offset; [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14085-3: SUMMARY for call tun_get_socket_#t~ret987#1.base, tun_get_socket_#t~ret987#1.offset := ldv_malloc(46); srcloc: null [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14085: havoc tun_get_socket_#t~ret987#1.base, tun_get_socket_#t~ret987#1.offset;get_tap_socket_#t~ret904#1.base, get_tap_socket_#t~ret904#1.offset := tun_get_socket_#res#1.base, tun_get_socket_#res#1.offset;havoc tun_get_socket_#t~ret987#1.base, tun_get_socket_#t~ret987#1.offset, tun_get_socket_~arg0#1.base, tun_get_socket_~arg0#1.offset;havoc tun_get_socket_#in~arg0#1.base, tun_get_socket_#in~arg0#1.offset;assume { :end_inline_tun_get_socket } true;get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset := get_tap_socket_#t~ret904#1.base, get_tap_socket_#t~ret904#1.offset;havoc get_tap_socket_#t~ret904#1.base, get_tap_socket_#t~ret904#1.offset; [2025-02-08 02:05:35,278 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13094: SUMMARY for call lockdep_rcu_dereference(195, 0, 475); srcloc: null [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6950-1: SUMMARY for call vhost_dev_set_owner_#t~ret133#1 := wake_up_process(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7578: assume 0 != vhost_set_memory_~tmp___11~5#1; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7578: assume !(0 != vhost_set_memory_~tmp___11~5#1); [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8338: assume -1 == vhost_dev_ioctl_~fd~0#1;vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset := 0, 0; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8338: assume !(-1 == vhost_dev_ioctl_~fd~0#1); [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13623: ~tmp~19#1 := #t~ret935#1;havoc #t~ret935#1;~tmp___7~47#1 := ~tmp~19#1; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13623-1: SUMMARY for call #t~ret935#1 := copy_from_user(~#backend~0#1.base, ~#backend~0#1.offset, ~argp~1#1.base, ~argp~1#1.offset, 8); srcloc: null [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13425: assume -2147483648 <= vhost_net_set_backend_#t~ret918#1 && vhost_net_set_backend_#t~ret918#1 <= 2147483647;vhost_net_set_backend_~tmp___11~19#1 := vhost_net_set_backend_#t~ret918#1;havoc vhost_net_set_backend_#t~ret918#1; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13425-1: SUMMARY for call vhost_net_set_backend_#t~ret918#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13392: assume vhost_net_set_backend_~index#1 % 4294967296 >= 2;vhost_net_set_backend_~r~12#1 := -105; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13392: assume !(vhost_net_set_backend_~index#1 % 4294967296 >= 2);vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset := vhost_net_set_backend_~n#1.base, 288 + vhost_net_set_backend_~n#1.offset + 17088 * (if vhost_net_set_backend_~index#1 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then vhost_net_set_backend_~index#1 % 4294967296 % 18446744073709551616 else vhost_net_set_backend_~index#1 % 4294967296 % 18446744073709551616 - 18446744073709551616); [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7975-1: SUMMARY for call vhost_set_vring_#t~ret288#1 := log_access_ok(vhost_set_vring_#t~mem283#1.base, vhost_set_vring_#t~mem283#1.offset, vhost_set_vring_#t~mem284#1, 4 + 8 * (vhost_set_vring_#t~mem286#1 % 4294967296)); srcloc: null [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7975: assume -2147483648 <= vhost_set_vring_#t~ret288#1 && vhost_set_vring_#t~ret288#1 <= 2147483647;vhost_set_vring_~tmp___12~5#1 := vhost_set_vring_#t~ret288#1;havoc vhost_set_vring_#t~mem283#1.base, vhost_set_vring_#t~mem283#1.offset;havoc vhost_set_vring_#t~mem284#1;havoc vhost_set_vring_#t~mem286#1;havoc vhost_set_vring_#t~ret288#1; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7843: assume 1074310944 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7843: assume !(1074310944 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6720: assume vhost_dev_alloc_iovecs_#t~mem83#1.base == 0 && vhost_dev_alloc_iovecs_#t~mem83#1.offset == 0;havoc vhost_dev_alloc_iovecs_#t~mem82#1.base, vhost_dev_alloc_iovecs_#t~mem82#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem83#1.base, vhost_dev_alloc_iovecs_#t~mem83#1.offset; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6720: assume !(vhost_dev_alloc_iovecs_#t~mem83#1.base == 0 && vhost_dev_alloc_iovecs_#t~mem83#1.offset == 0);havoc vhost_dev_alloc_iovecs_#t~mem82#1.base, vhost_dev_alloc_iovecs_#t~mem82#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem83#1.base, vhost_dev_alloc_iovecs_#t~mem83#1.offset;call vhost_dev_alloc_iovecs_#t~mem84#1.base, vhost_dev_alloc_iovecs_#t~mem84#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem85#1.base, vhost_dev_alloc_iovecs_#t~mem85#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_#t~mem84#1.base, 17080 + (vhost_dev_alloc_iovecs_#t~mem84#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8); [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7777: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7414: assume -2147483648 <= vhost_log_access_ok_#t~ret204#1 && vhost_log_access_ok_#t~ret204#1 <= 2147483647;vhost_log_access_ok_~tmp___9~9#1 := vhost_log_access_ok_#t~ret204#1;havoc vhost_log_access_ok_#t~ret204#1;vhost_log_access_ok_#res#1 := vhost_log_access_ok_~tmp___9~9#1; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657-4: assume 0 == #t~mem941#1 % 18446744073709551616;#t~bitwise942#1 := 0; [2025-02-08 02:05:35,279 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657-4: assume !(0 == #t~mem941#1 % 18446744073709551616); [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7513-1: vhost_vq_access_ok_#res#1 := vhost_vq_access_ok_~tmp___9~11#1; [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13492: SUMMARY for call mutex_lock_nested(vhost_net_reset_owner_~n#1.base, 16 + vhost_net_reset_owner_~n#1.offset, 0); srcloc: null [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657-2: havoc #t~bitwise942#1;assume #t~bitwise942#1 % 18446744073709551616 <= #t~mem941#1 % 18446744073709551616 && #t~bitwise942#1 % 18446744073709551616 <= 1152921503583404031; [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13558: call write~int#16(vhost_net_set_features_~features#1, vhost_net_set_features_~n#1.base, 168 + vhost_net_set_features_~n#1.offset, 4);vhost_net_set_features_~i~11#1 := 0; [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657-3: assume 1152921503583404031 == #t~mem941#1 % 18446744073709551616;#t~bitwise942#1 := #t~mem941#1; [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657-3: assume !(1152921503583404031 == #t~mem941#1 % 18446744073709551616); [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8372: vhost_dev_ioctl_~i~6#1 := 0; [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657: assume 0 != #t~bitwise942#1 % 18446744073709551616;havoc #t~mem941#1;havoc #t~bitwise942#1;#res#1 := -95;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,280 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657: assume !(0 != #t~bitwise942#1 % 18446744073709551616);havoc #t~mem941#1;havoc #t~bitwise942#1;call #t~mem943#1 := read~int#16(~#features~0#1.base, ~#features~0#1.offset, 8);assume { :begin_inline_vhost_net_set_features } true;vhost_net_set_features_#in~n#1.base, vhost_net_set_features_#in~n#1.offset, vhost_net_set_features_#in~features#1 := ~n~3#1.base, ~n~3#1.offset, #t~mem943#1;havoc vhost_net_set_features_#res#1;havoc vhost_net_set_features_#t~bitwise930#1, vhost_net_set_features_#t~bitwise931#1, vhost_net_set_features_#t~bitwise932#1, vhost_net_set_features_#t~ret933#1, vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset, vhost_net_set_features_~features#1, vhost_net_set_features_~vhost_hlen~1#1, vhost_net_set_features_~sock_hlen~1#1, vhost_net_set_features_~hdr_len~0#1, vhost_net_set_features_~i~11#1, vhost_net_set_features_~tmp___7~46#1;vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset := vhost_net_set_features_#in~n#1.base, vhost_net_set_features_#in~n#1.offset;vhost_net_set_features_~features#1 := vhost_net_set_features_#in~features#1;havoc vhost_net_set_features_~vhost_hlen~1#1;havoc vhost_net_set_features_~sock_hlen~1#1;havoc vhost_net_set_features_~hdr_len~0#1;havoc vhost_net_set_features_~i~11#1;havoc vhost_net_set_features_~tmp___7~46#1; [2025-02-08 02:05:35,281 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8405: assume { :begin_inline_vhost_set_vring } true;vhost_set_vring_#in~d#1.base, vhost_set_vring_#in~d#1.offset, vhost_set_vring_#in~ioctl#1, vhost_set_vring_#in~argp#1.base, vhost_set_vring_#in~argp#1.offset := vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296), vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset;havoc vhost_set_vring_#res#1;havoc vhost_set_vring_#t~mem245#1, vhost_set_vring_#t~mem246#1.base, vhost_set_vring_#t~mem246#1.offset, vhost_set_vring_#t~mem247#1.base, vhost_set_vring_#t~mem247#1.offset, vhost_set_vring_#t~ret248#1, vhost_set_vring_#t~mem249#1, vhost_set_vring_#t~mem250#1, vhost_set_vring_#t~mem252#1, vhost_set_vring_#t~mem251#1, vhost_set_vring_#t~bitwise253#1, vhost_set_vring_#t~mem254#1, vhost_set_vring_#t~mem255#1.base, vhost_set_vring_#t~mem255#1.offset, vhost_set_vring_#t~ret256#1, vhost_set_vring_#t~mem257#1, vhost_set_vring_#t~mem258#1, vhost_set_vring_#t~mem259#1, vhost_set_vring_#t~mem260#1, vhost_set_vring_#t~ret261#1, vhost_set_vring_#t~ret262#1, vhost_set_vring_#t~mem263#1, vhost_set_vring_#t~mem264#1, vhost_set_vring_#t~mem265#1, vhost_set_vring_#t~mem266#1, vhost_set_vring_#t~mem267#1, vhost_set_vring_#t~mem268#1, vhost_set_vring_#t~mem269#1, vhost_set_vring_#t~mem271#1, vhost_set_vring_#t~mem273#1, vhost_set_vring_#t~mem275#1, vhost_set_vring_#t~mem276#1.base, vhost_set_vring_#t~mem276#1.offset, vhost_set_vring_#t~mem277#1, vhost_set_vring_#t~mem278#1, vhost_set_vring_#t~mem279#1, vhost_set_vring_#t~mem280#1, vhost_set_vring_#t~ret281#1, vhost_set_vring_#t~mem282#1, vhost_set_vring_#t~mem283#1.base, vhost_set_vring_#t~mem283#1.offset, vhost_set_vring_#t~mem284#1, vhost_set_vring_#t~mem286#1, vhost_set_vring_#t~ret288#1, vhost_set_vring_#t~mem289#1, vhost_set_vring_#t~ret290#1, vhost_set_vring_#t~mem291#1, vhost_set_vring_#t~mem292#1, vhost_set_vring_#t~mem293#1, vhost_set_vring_#t~mem294#1, vhost_set_vring_#t~mem295#1, vhost_set_vring_#t~ret296#1, vhost_set_vring_#t~mem297#1, vhost_set_vring_#t~mem298#1, vhost_set_vring_#t~ret299#1.base, vhost_set_vring_#t~ret299#1.offset, vhost_set_vring_#t~ret300#1, vhost_set_vring_#t~ret301#1, vhost_set_vring_#t~mem302#1.base, vhost_set_vring_#t~mem302#1.offset, vhost_set_vring_#t~mem303#1.base, vhost_set_vring_#t~mem303#1.offset, vhost_set_vring_#t~ret304#1, vhost_set_vring_#t~mem305#1, vhost_set_vring_#t~mem306#1, vhost_set_vring_#t~ret307#1.base, vhost_set_vring_#t~ret307#1.offset, vhost_set_vring_#t~ret308#1, vhost_set_vring_#t~ret309#1, vhost_set_vring_#t~mem310#1.base, vhost_set_vring_#t~mem310#1.offset, vhost_set_vring_#t~mem311#1.base, vhost_set_vring_#t~mem311#1.offset, vhost_set_vring_#t~mem312#1.base, vhost_set_vring_#t~mem312#1.offset, vhost_set_vring_#t~ret313#1.base, vhost_set_vring_#t~ret313#1.offset, vhost_set_vring_#t~ret314#1, vhost_set_vring_#t~mem315#1, vhost_set_vring_#t~mem316#1, vhost_set_vring_#t~ret317#1.base, vhost_set_vring_#t~ret317#1.offset, vhost_set_vring_#t~ret318#1, vhost_set_vring_#t~ret319#1, vhost_set_vring_#t~mem320#1.base, vhost_set_vring_#t~mem320#1.offset, vhost_set_vring_#t~mem321#1.base, vhost_set_vring_#t~mem321#1.offset, vhost_set_vring_#t~mem322#1.base, vhost_set_vring_#t~mem322#1.offset, vhost_set_vring_#t~ret323#1.base, vhost_set_vring_#t~ret323#1.offset, vhost_set_vring_#t~mem324#1.base, vhost_set_vring_#t~mem324#1.offset, vhost_set_vring_#t~mem325#1.base, vhost_set_vring_#t~mem325#1.offset, vhost_set_vring_#t~mem326#1.base, vhost_set_vring_#t~mem326#1.offset, vhost_set_vring_#t~mem327#1.base, vhost_set_vring_#t~mem327#1.offset, vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset, vhost_set_vring_~ioctl#1, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset, vhost_set_vring_~pollstart~0#1.base, vhost_set_vring_~pollstart~0#1.offset, vhost_set_vring_~pollstop~0#1.base, vhost_set_vring_~pollstop~0#1.offset, vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset, vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset, vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset, vhost_set_vring_~idx~0#1, vhost_set_vring_~r~1#1, vhost_set_vring_~__ret_gu~1#1, vhost_set_vring_~__val_gu~1#1, vhost_set_vring_~tmp___7~15#1, vhost_set_vring_~tmp___8~14#1, vhost_set_vring_~tmp___9~13#1, vhost_set_vring_~tmp___10~8#1, vhost_set_vring_~tmp___11~6#1, vhost_set_vring_~tmp___12~5#1, vhost_set_vring_~tmp___13~4#1, vhost_set_vring_~tmp___14~4#1, vhost_set_vring_~tmp___15~3#1.base, vhost_set_vring_~tmp___15~3#1.offset, vhost_set_vring_~tmp___16~2#1, vhost_set_vring_~tmp___17~1#1.base, vhost_set_vring_~tmp___17~1#1.offset, vhost_set_vring_~tmp___18~1#1, vhost_set_vring_~tmp___19~1#1.base, vhost_set_vring_~tmp___19~1#1.offset, vhost_set_vring_~tmp___20~0#1, vhost_set_vring_~tmp___21~0#1.base, vhost_set_vring_~tmp___21~0#1.offset, vhost_set_vring_~tmp___22~0#1, vhost_set_vring_~tmp___23~0#1.base, vhost_set_vring_~tmp___23~0#1.offset, vhost_set_vring_~tmp___24~0#1, vhost_set_vring_~tmp___25~0#1.base, vhost_set_vring_~tmp___25~0#1.offset, vhost_set_vring_~tmp~11#1, vhost_set_vring_~tmp___26~0#1, vhost_set_vring_~tmp___27~0#1, vhost_set_vring_~tmp___28~0#1, vhost_set_vring_~tmp___29~0#1, vhost_set_vring_~tmp___30~0#1, vhost_set_vring_~tmp___31~0#1, vhost_set_vring_~tmp___32~0#1, vhost_set_vring_~tmp___33~0#1, vhost_set_vring_~tmp___34~0#1, vhost_set_vring_~tmp___35~0#1, vhost_set_vring_~tmp___36~0#1, vhost_set_vring_~tmp___37~0#1;vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset := vhost_set_vring_#in~d#1.base, vhost_set_vring_#in~d#1.offset;vhost_set_vring_~ioctl#1 := vhost_set_vring_#in~ioctl#1;vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset := vhost_set_vring_#in~argp#1.base, vhost_set_vring_#in~argp#1.offset;havoc vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset;havoc vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset;havoc vhost_set_vring_~pollstart~0#1.base, vhost_set_vring_~pollstart~0#1.offset;havoc vhost_set_vring_~pollstop~0#1.base, vhost_set_vring_~pollstop~0#1.offset;havoc vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset;havoc vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset;havoc vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset;call vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset := #Ultimate.allocOnStack(8);call vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset := #Ultimate.allocOnStack(8);call vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset := #Ultimate.allocOnStack(40);havoc vhost_set_vring_~idx~0#1;havoc vhost_set_vring_~r~1#1;havoc vhost_set_vring_~__ret_gu~1#1;havoc vhost_set_vring_~__val_gu~1#1;havoc vhost_set_vring_~tmp___7~15#1;havoc vhost_set_vring_~tmp___8~14#1;havoc vhost_set_vring_~tmp___9~13#1;havoc vhost_set_vring_~tmp___10~8#1;havoc vhost_set_vring_~tmp___11~6#1;havoc vhost_set_vring_~tmp___12~5#1;havoc vhost_set_vring_~tmp___13~4#1;havoc vhost_set_vring_~tmp___14~4#1;havoc vhost_set_vring_~tmp___15~3#1.base, vhost_set_vring_~tmp___15~3#1.offset;havoc vhost_set_vring_~tmp___16~2#1;havoc vhost_set_vring_~tmp___17~1#1.base, vhost_set_vring_~tmp___17~1#1.offset;havoc vhost_set_vring_~tmp___18~1#1;havoc vhost_set_vring_~tmp___19~1#1.base, vhost_set_vring_~tmp___19~1#1.offset;havoc vhost_set_vring_~tmp___20~0#1;havoc vhost_set_vring_~tmp___21~0#1.base, vhost_set_vring_~tmp___21~0#1.offset;havoc vhost_set_vring_~tmp___22~0#1;havoc vhost_set_vring_~tmp___23~0#1.base, vhost_set_vring_~tmp___23~0#1.offset;havoc vhost_set_vring_~tmp___24~0#1;havoc vhost_set_vring_~tmp___25~0#1.base, vhost_set_vring_~tmp___25~0#1.offset;havoc vhost_set_vring_~tmp~11#1;havoc vhost_set_vring_~tmp___26~0#1;havoc vhost_set_vring_~tmp___27~0#1;havoc vhost_set_vring_~tmp___28~0#1;havoc vhost_set_vring_~tmp___29~0#1;havoc vhost_set_vring_~tmp___30~0#1;havoc vhost_set_vring_~tmp___31~0#1;havoc vhost_set_vring_~tmp___32~0#1;havoc vhost_set_vring_~tmp___33~0#1;havoc vhost_set_vring_~tmp___34~0#1;havoc vhost_set_vring_~tmp___35~0#1;havoc vhost_set_vring_~tmp___36~0#1;havoc vhost_set_vring_~tmp___37~0#1;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := 0, 0;vhost_set_vring_~pollstart~0#1.base, vhost_set_vring_~pollstart~0#1.offset := 0, 0;vhost_set_vring_~pollstop~0#1.base, vhost_set_vring_~pollstop~0#1.offset := 0, 0;vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset := 0, 0;vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset := vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5300: assume { :end_inline_synchronize_sched } true; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7414-1: SUMMARY for call vhost_log_access_ok_#t~ret204#1 := memory_access_ok(vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset, 1); srcloc: null [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13657-1: [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8174: assume vhost_set_vring_~pollstop~0#1.base != 0 || vhost_set_vring_~pollstop~0#1.offset != 0;call vhost_set_vring_#t~mem327#1.base, vhost_set_vring_#t~mem327#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 428 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8174: assume !(vhost_set_vring_~pollstop~0#1.base != 0 || vhost_set_vring_~pollstop~0#1.offset != 0); [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8273: assume 0 != vhost_dev_ioctl_~tmp___8~15#1;call write~$Pointer$#16(vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~vq~1#1.base, 17072 + vhost_dev_ioctl_~vq~1#1.offset, 8); [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8273: assume !(0 != vhost_dev_ioctl_~tmp___8~15#1);vhost_dev_ioctl_~r~2#1 := -14; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8108-1: SUMMARY for call vhost_set_vring_#t~ret318#1 := IS_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13327-1: get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset := get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8108: assume -9223372036854775808 <= vhost_set_vring_#t~ret318#1 && vhost_set_vring_#t~ret318#1 <= 9223372036854775807;vhost_set_vring_~tmp___36~0#1 := vhost_set_vring_#t~ret318#1;havoc vhost_set_vring_#t~ret318#1;vhost_set_vring_~tmp___24~0#1 := vhost_set_vring_~tmp___36~0#1; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8141: assume vhost_set_vring_~pollstop~0#1.base != 0 || vhost_set_vring_~pollstop~0#1.offset != 0;call vhost_set_vring_#t~mem324#1.base, vhost_set_vring_#t~mem324#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 428 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8141: assume !(vhost_set_vring_~pollstop~0#1.base != 0 || vhost_set_vring_~pollstop~0#1.offset != 0); [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7910: call write~int#16(vhost_set_vring_~idx~0#1, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, 4);call vhost_set_vring_#t~mem260#1 := read~int#16(vhost_set_vring_~vq~0#1.base, 436 + vhost_set_vring_~vq~0#1.offset, 2);call write~int#16(vhost_set_vring_#t~mem260#1 % 65536, vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);havoc vhost_set_vring_#t~mem260#1; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-3: assume vhost_set_vring_#t~mem252#1 % 4294967296 == (vhost_set_vring_#t~mem251#1 - 1) % 4294967296;vhost_set_vring_#t~bitwise253#1 := vhost_set_vring_#t~mem252#1; [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-3: assume !(vhost_set_vring_#t~mem252#1 % 4294967296 == (vhost_set_vring_#t~mem251#1 - 1) % 4294967296); [2025-02-08 02:05:35,282 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-2: havoc vhost_set_vring_#t~bitwise253#1;assume vhost_set_vring_#t~bitwise253#1 % 4294967296 <= vhost_set_vring_#t~mem252#1 % 4294967296 && vhost_set_vring_#t~bitwise253#1 % 4294967296 <= (vhost_set_vring_#t~mem251#1 - 1) % 4294967296; [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-1: [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877: assume 0 != vhost_set_vring_#t~bitwise253#1 % 4294967296;havoc vhost_set_vring_#t~mem252#1;havoc vhost_set_vring_#t~mem251#1;havoc vhost_set_vring_#t~bitwise253#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877: assume !(0 != vhost_set_vring_#t~bitwise253#1 % 4294967296);havoc vhost_set_vring_#t~mem252#1;havoc vhost_set_vring_#t~mem251#1;havoc vhost_set_vring_#t~bitwise253#1;call vhost_set_vring_#t~mem254#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4);call write~int#16(vhost_set_vring_#t~mem254#1, vhost_set_vring_~vq~0#1.base, 160 + vhost_set_vring_~vq~0#1.offset, 4);havoc vhost_set_vring_#t~mem254#1; [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7679: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-4: assume 0 == vhost_set_vring_#t~mem252#1 % 4294967296 || 0 == (vhost_set_vring_#t~mem251#1 - 1) % 4294967296;vhost_set_vring_#t~bitwise253#1 := 0; [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-4: assume !(0 == vhost_set_vring_#t~mem252#1 % 4294967296 || 0 == (vhost_set_vring_#t~mem251#1 - 1) % 4294967296); [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13427: assume 0 != vhost_net_set_backend_~tmp___11~19#1; [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13427: assume !(0 != vhost_net_set_backend_~tmp___11~19#1); [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13493: assume -9223372036854775808 <= vhost_net_reset_owner_#t~ret922#1 && vhost_net_reset_owner_#t~ret922#1 <= 9223372036854775807;vhost_net_reset_owner_~err~3#1 := vhost_net_reset_owner_#t~ret922#1;havoc vhost_net_reset_owner_#t~ret922#1; [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13493-1: SUMMARY for call vhost_net_reset_owner_#t~ret922#1 := vhost_dev_check_owner(vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset); srcloc: null [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13460: SUMMARY for call mutex_unlock(vhost_net_set_backend_~vq~6#1.base, 8 + vhost_net_set_backend_~vq~6#1.offset); srcloc: null [2025-02-08 02:05:35,283 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8307: assume false; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8307: assume !false;vhost_dev_ioctl_~fd~0#1 := (if vhost_dev_ioctl_~__val_gu~2#1 % 18446744073709551616 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~__val_gu~2#1 % 18446744073709551616 % 4294967296 else vhost_dev_ioctl_~__val_gu~2#1 % 18446744073709551616 % 4294967296 - 4294967296);vhost_dev_ioctl_~r~2#1 := vhost_dev_ioctl_~__ret_gu~2#1; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8142: assume vhost_set_vring_#t~mem324#1.base != 0 || vhost_set_vring_#t~mem324#1.offset != 0;havoc vhost_set_vring_#t~mem324#1.base, vhost_set_vring_#t~mem324#1.offset; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8142: assume !(vhost_set_vring_#t~mem324#1.base != 0 || vhost_set_vring_#t~mem324#1.offset != 0);havoc vhost_set_vring_#t~mem324#1.base, vhost_set_vring_#t~mem324#1.offset; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8175: assume vhost_set_vring_#t~mem327#1.base != 0 || vhost_set_vring_#t~mem327#1.offset != 0;havoc vhost_set_vring_#t~mem327#1.base, vhost_set_vring_#t~mem327#1.offset; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8175: assume !(vhost_set_vring_#t~mem327#1.base != 0 || vhost_set_vring_#t~mem327#1.offset != 0);havoc vhost_set_vring_#t~mem327#1.base, vhost_set_vring_#t~mem327#1.offset; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13262-1: SUMMARY for call get_raw_socket_#t~ret896#1 := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int(get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset, get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, 0, get_raw_socket_#t~mem895#1.base, get_raw_socket_#t~mem895#1.offset); srcloc: null [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8043-1: SUMMARY for call vhost_set_vring_#t~ret304#1 := copy_from_user(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8043: vhost_set_vring_~tmp___32~0#1 := vhost_set_vring_#t~ret304#1;havoc vhost_set_vring_#t~ret304#1;vhost_set_vring_~tmp___18~1#1 := vhost_set_vring_~tmp___32~0#1; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13262: assume -2147483648 <= get_raw_socket_#t~ret896#1 && get_raw_socket_#t~ret896#1 <= 2147483647;call write~int#33(get_raw_socket_#t~ret896#1, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4);havoc get_raw_socket_#t~mem894#1.base, get_raw_socket_#t~mem894#1.offset;havoc get_raw_socket_#t~mem895#1.base, get_raw_socket_#t~mem895#1.offset;havoc get_raw_socket_#t~ret896#1;call get_raw_socket_#t~mem897#1 := read~int#33(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8076: assume vhost_set_vring_~eventfp~0#1.base != 0 || vhost_set_vring_~eventfp~0#1.offset != 0; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8076: assume !(vhost_set_vring_~eventfp~0#1.base != 0 || vhost_set_vring_~eventfp~0#1.offset != 0);call write~$Pointer$#16(0, 0, vhost_set_vring_~vq~0#1.base, 212 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7944: assume vhost_set_vring_#t~mem268#1 % 18446744073709551616 != vhost_set_vring_#t~mem269#1 % 18446744073709551616;havoc vhost_set_vring_#t~mem268#1;havoc vhost_set_vring_#t~mem269#1;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7944: assume !(vhost_set_vring_#t~mem268#1 % 18446744073709551616 != vhost_set_vring_#t~mem269#1 % 18446744073709551616);havoc vhost_set_vring_#t~mem268#1;havoc vhost_set_vring_#t~mem269#1;call vhost_set_vring_#t~mem271#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7977: assume 0 != vhost_set_vring_~tmp___12~5#1; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7977: assume !(0 != vhost_set_vring_~tmp___12~5#1);vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6953: assume 0 != vhost_dev_set_owner_~err~0#1; [2025-02-08 02:05:35,284 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6953: assume !(0 != vhost_dev_set_owner_~err~0#1);assume { :begin_inline_vhost_dev_alloc_iovecs } true;vhost_dev_alloc_iovecs_#in~dev#1.base, vhost_dev_alloc_iovecs_#in~dev#1.offset := vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset;havoc vhost_dev_alloc_iovecs_#res#1;havoc vhost_dev_alloc_iovecs_#t~mem69#1, vhost_dev_alloc_iovecs_#t~ret72#1.base, vhost_dev_alloc_iovecs_#t~ret72#1.offset, vhost_dev_alloc_iovecs_#t~mem73#1.base, vhost_dev_alloc_iovecs_#t~mem73#1.offset, vhost_dev_alloc_iovecs_#t~ret76#1.base, vhost_dev_alloc_iovecs_#t~ret76#1.offset, vhost_dev_alloc_iovecs_#t~mem77#1.base, vhost_dev_alloc_iovecs_#t~mem77#1.offset, vhost_dev_alloc_iovecs_#t~ret80#1.base, vhost_dev_alloc_iovecs_#t~ret80#1.offset, vhost_dev_alloc_iovecs_#t~mem81#1.base, vhost_dev_alloc_iovecs_#t~mem81#1.offset, vhost_dev_alloc_iovecs_#t~mem82#1.base, vhost_dev_alloc_iovecs_#t~mem82#1.offset, vhost_dev_alloc_iovecs_#t~mem83#1.base, vhost_dev_alloc_iovecs_#t~mem83#1.offset, vhost_dev_alloc_iovecs_#t~mem84#1.base, vhost_dev_alloc_iovecs_#t~mem84#1.offset, vhost_dev_alloc_iovecs_#t~mem85#1.base, vhost_dev_alloc_iovecs_#t~mem85#1.offset, vhost_dev_alloc_iovecs_#t~mem86#1.base, vhost_dev_alloc_iovecs_#t~mem86#1.offset, vhost_dev_alloc_iovecs_#t~mem87#1.base, vhost_dev_alloc_iovecs_#t~mem87#1.offset, vhost_dev_alloc_iovecs_#t~mem88#1.base, vhost_dev_alloc_iovecs_#t~mem88#1.offset, vhost_dev_alloc_iovecs_#t~mem89#1.base, vhost_dev_alloc_iovecs_#t~mem89#1.offset, vhost_dev_alloc_iovecs_#t~mem90#1.base, vhost_dev_alloc_iovecs_#t~mem90#1.offset, vhost_dev_alloc_iovecs_#t~mem91#1.base, vhost_dev_alloc_iovecs_#t~mem91#1.offset, vhost_dev_alloc_iovecs_#t~mem92#1.base, vhost_dev_alloc_iovecs_#t~mem92#1.offset, vhost_dev_alloc_iovecs_#t~mem93#1.base, vhost_dev_alloc_iovecs_#t~mem93#1.offset, vhost_dev_alloc_iovecs_~dev#1.base, vhost_dev_alloc_iovecs_~dev#1.offset, vhost_dev_alloc_iovecs_~i~0#1, vhost_dev_alloc_iovecs_~tmp___7~5#1.base, vhost_dev_alloc_iovecs_~tmp___7~5#1.offset, vhost_dev_alloc_iovecs_~tmp___8~3#1.base, vhost_dev_alloc_iovecs_~tmp___8~3#1.offset, vhost_dev_alloc_iovecs_~tmp___9~2#1.base, vhost_dev_alloc_iovecs_~tmp___9~2#1.offset;vhost_dev_alloc_iovecs_~dev#1.base, vhost_dev_alloc_iovecs_~dev#1.offset := vhost_dev_alloc_iovecs_#in~dev#1.base, vhost_dev_alloc_iovecs_#in~dev#1.offset;havoc vhost_dev_alloc_iovecs_~i~0#1;havoc vhost_dev_alloc_iovecs_~tmp___7~5#1.base, vhost_dev_alloc_iovecs_~tmp___7~5#1.offset;havoc vhost_dev_alloc_iovecs_~tmp___8~3#1.base, vhost_dev_alloc_iovecs_~tmp___8~3#1.offset;havoc vhost_dev_alloc_iovecs_~tmp___9~2#1.base, vhost_dev_alloc_iovecs_~tmp___9~2#1.offset;vhost_dev_alloc_iovecs_~i~0#1 := 0; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7779: assume false; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7779: assume !false; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7647: assume false; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7647: assume !false;init_used_~r~0#1 := init_used_~__ret_pu~0#1; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7581-1: SUMMARY for call kfree(vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset); srcloc: null [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7548: assume vhost_set_memory_#t~mem233#1 % 4294967296 > 64;havoc vhost_set_memory_#t~mem233#1;vhost_set_memory_#res#1 := -7;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7548: assume !(vhost_set_memory_#t~mem233#1 % 4294967296 > 64);havoc vhost_set_memory_#t~mem233#1;call vhost_set_memory_#t~mem234#1 := read~int#16(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7581: vhost_set_memory_#res#1 := -14;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8374: assume true;call vhost_dev_ioctl_#t~mem346#1 := read~int#16(vhost_dev_ioctl_~d#1.base, 180 + vhost_dev_ioctl_~d#1.offset, 4); [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8374: assume !true; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13362: get_socket_~tmp___11~18#1.base, get_socket_~tmp___11~18#1.offset := get_socket_#t~ret912#1.base, get_socket_#t~ret912#1.offset;havoc get_socket_#t~ret912#1.base, get_socket_#t~ret912#1.offset;get_socket_~tmp___9~26#1.base, get_socket_~tmp___9~26#1.offset := get_socket_~tmp___11~18#1.base, get_socket_~tmp___11~18#1.offset;get_socket_#res#1.base, get_socket_#res#1.offset := get_socket_~tmp___9~26#1.base, get_socket_~tmp___9~26#1.offset; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13428: assume 0 == ~__warned___33~0 % 256; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13428: assume !(0 == ~__warned___33~0 % 256); [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8011: assume -1 == vhost_set_vring_#t~mem297#1;havoc vhost_set_vring_#t~mem297#1;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := 0, 0; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8011: assume !(-1 == vhost_set_vring_#t~mem297#1);havoc vhost_set_vring_#t~mem297#1;call vhost_set_vring_#t~mem298#1 := read~int#16(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13362-1: SUMMARY for call get_socket_#t~ret912#1.base, get_socket_#t~ret912#1.offset := ERR_PTR(-88); srcloc: null [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7846: assume 1074310945 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7846: assume !(1074310945 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7912-1: SUMMARY for call vhost_set_vring_#t~ret261#1 := copy_to_user(vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, 8); srcloc: null [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7912: assume -2147483648 <= vhost_set_vring_#t~ret261#1 && vhost_set_vring_#t~ret261#1 <= 2147483647;vhost_set_vring_~tmp___27~0#1 := vhost_set_vring_#t~ret261#1;havoc vhost_set_vring_#t~ret261#1;vhost_set_vring_~tmp___9~13#1 := vhost_set_vring_~tmp___27~0#1; [2025-02-08 02:05:35,285 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6723: assume vhost_dev_alloc_iovecs_#t~mem85#1.base == 0 && vhost_dev_alloc_iovecs_#t~mem85#1.offset == 0;havoc vhost_dev_alloc_iovecs_#t~mem84#1.base, vhost_dev_alloc_iovecs_#t~mem84#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem85#1.base, vhost_dev_alloc_iovecs_#t~mem85#1.offset; [2025-02-08 02:05:35,286 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6723: assume !(vhost_dev_alloc_iovecs_#t~mem85#1.base == 0 && vhost_dev_alloc_iovecs_#t~mem85#1.offset == 0);havoc vhost_dev_alloc_iovecs_#t~mem84#1.base, vhost_dev_alloc_iovecs_#t~mem84#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem85#1.base, vhost_dev_alloc_iovecs_#t~mem85#1.offset;call vhost_dev_alloc_iovecs_#t~mem86#1.base, vhost_dev_alloc_iovecs_#t~mem86#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem87#1.base, vhost_dev_alloc_iovecs_#t~mem87#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_#t~mem86#1.base, 17056 + (vhost_dev_alloc_iovecs_#t~mem86#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8); [2025-02-08 02:05:35,286 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13627: assume 0 != ~tmp___7~47#1 % 18446744073709551616;#res#1 := -14;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,286 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13627: assume !(0 != ~tmp___7~47#1 % 18446744073709551616);call #t~mem936#1 := read~int#16(~#backend~0#1.base, ~#backend~0#1.offset, 4);call #t~mem937#1 := read~int#16(~#backend~0#1.base, 4 + ~#backend~0#1.offset, 4);assume { :begin_inline_vhost_net_set_backend } true;vhost_net_set_backend_#in~n#1.base, vhost_net_set_backend_#in~n#1.offset, vhost_net_set_backend_#in~index#1, vhost_net_set_backend_#in~fd#1 := ~n~3#1.base, ~n~3#1.offset, #t~mem936#1, #t~mem937#1;havoc vhost_net_set_backend_#res#1;havoc vhost_net_set_backend_#t~ret913#1, vhost_net_set_backend_#t~ret914#1, vhost_net_set_backend_#t~ret915#1.base, vhost_net_set_backend_#t~ret915#1.offset, vhost_net_set_backend_#t~ret916#1, vhost_net_set_backend_#t~ret917#1, vhost_net_set_backend_#t~ret918#1, vhost_net_set_backend_#t~ret919#1, vhost_net_set_backend_#t~mem920#1.base, vhost_net_set_backend_#t~mem920#1.offset, vhost_net_set_backend_#t~mem921#1.base, vhost_net_set_backend_#t~mem921#1.offset, vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~index#1, vhost_net_set_backend_~fd#1, vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset, vhost_net_set_backend_~oldsock~0#1.base, vhost_net_set_backend_~oldsock~0#1.offset, vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset, vhost_net_set_backend_~r~12#1, vhost_net_set_backend_~tmp___7~45#1, vhost_net_set_backend_~tmp___8~35#1, vhost_net_set_backend_~tmp___9~27#1, vhost_net_set_backend_~tmp___10~21#1, vhost_net_set_backend_~tmp___11~19#1, vhost_net_set_backend_~tmp___12~15#1, vhost_net_set_backend_~tmp~18#1, vhost_net_set_backend_~tmp___13~13#1;vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset := vhost_net_set_backend_#in~n#1.base, vhost_net_set_backend_#in~n#1.offset;vhost_net_set_backend_~index#1 := vhost_net_set_backend_#in~index#1;vhost_net_set_backend_~fd#1 := vhost_net_set_backend_#in~fd#1;havoc vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset;havoc vhost_net_set_backend_~oldsock~0#1.base, vhost_net_set_backend_~oldsock~0#1.offset;havoc vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset;havoc vhost_net_set_backend_~r~12#1;havoc vhost_net_set_backend_~tmp___7~45#1;havoc vhost_net_set_backend_~tmp___8~35#1;havoc vhost_net_set_backend_~tmp___9~27#1;havoc vhost_net_set_backend_~tmp___10~21#1;havoc vhost_net_set_backend_~tmp___11~19#1;havoc vhost_net_set_backend_~tmp___12~15#1;havoc vhost_net_set_backend_~tmp~18#1;havoc vhost_net_set_backend_~tmp___13~13#1; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7681: assume false; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7681: assume !false; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8342: vhost_dev_ioctl_~tmp___9~14#1.base, vhost_dev_ioctl_~tmp___9~14#1.offset := vhost_dev_ioctl_#t~ret339#1.base, vhost_dev_ioctl_#t~ret339#1.offset;havoc vhost_dev_ioctl_#t~ret339#1.base, vhost_dev_ioctl_#t~ret339#1.offset;vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset := vhost_dev_ioctl_~tmp___9~14#1.base, vhost_dev_ioctl_~tmp___9~14#1.offset; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8243-1: SUMMARY for call vhost_dev_ioctl_#t~ret331#1 := copy_from_user(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset, 8); srcloc: null [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13495: assume 0 != vhost_net_reset_owner_~err~3#1; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13495: assume !(0 != vhost_net_reset_owner_~err~3#1); [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8243: vhost_dev_ioctl_~tmp~12#1 := vhost_dev_ioctl_#t~ret331#1;havoc vhost_dev_ioctl_#t~ret331#1;vhost_dev_ioctl_~tmp___7~16#1 := vhost_dev_ioctl_~tmp~12#1; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13462: assume vhost_net_set_backend_~oldsock~0#1.base != 0 || vhost_net_set_backend_~oldsock~0#1.offset != 0; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13462: assume !(vhost_net_set_backend_~oldsock~0#1.base != 0 || vhost_net_set_backend_~oldsock~0#1.offset != 0); [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8342-1: SUMMARY for call vhost_dev_ioctl_#t~ret339#1.base, vhost_dev_ioctl_#t~ret339#1.offset := eventfd_fget(vhost_dev_ioctl_~fd~0#1); srcloc: null [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8078: vhost_set_vring_~tmp___21~0#1.base, vhost_set_vring_~tmp___21~0#1.offset := vhost_set_vring_#t~ret313#1.base, vhost_set_vring_#t~ret313#1.offset;havoc vhost_set_vring_#t~ret313#1.base, vhost_set_vring_#t~ret313#1.offset;call write~$Pointer$#16(vhost_set_vring_~tmp___21~0#1.base, vhost_set_vring_~tmp___21~0#1.offset, vhost_set_vring_~vq~0#1.base, 212 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8111: assume 0 != vhost_set_vring_~tmp___24~0#1; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8111: assume !(0 != vhost_set_vring_~tmp___24~0#1);call vhost_set_vring_#t~mem320#1.base, vhost_set_vring_#t~mem320#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 204 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8144: SUMMARY for call vhost_poll_stop(vhost_set_vring_~vq~0#1.base, 236 + vhost_set_vring_~vq~0#1.offset); srcloc: null [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8177: SUMMARY for call vhost_poll_flush(vhost_set_vring_~vq~0#1.base, 236 + vhost_set_vring_~vq~0#1.offset); srcloc: null [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6988-1: SUMMARY for call vhost_dev_reset_owner_#t~ret139#1.base, vhost_dev_reset_owner_#t~ret139#1.offset := kmalloc(8, 208); srcloc: null [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6988: vhost_dev_reset_owner_~tmp___7~8#1.base, vhost_dev_reset_owner_~tmp___7~8#1.offset := vhost_dev_reset_owner_#t~ret139#1.base, vhost_dev_reset_owner_#t~ret139#1.offset;havoc vhost_dev_reset_owner_#t~ret139#1.base, vhost_dev_reset_owner_#t~ret139#1.offset;vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset := vhost_dev_reset_owner_~tmp___7~8#1.base, vhost_dev_reset_owner_~tmp___7~8#1.offset; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8078-1: SUMMARY for call vhost_set_vring_#t~ret313#1.base, vhost_set_vring_#t~ret313#1.offset := eventfd_ctx_fileget(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13562: assume true; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13562: assume !true; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8376: assume !(vhost_dev_ioctl_~i~6#1 < vhost_dev_ioctl_#t~mem346#1);havoc vhost_dev_ioctl_#t~mem346#1; [2025-02-08 02:05:35,287 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8376: assume vhost_dev_ioctl_~i~6#1 < vhost_dev_ioctl_#t~mem346#1;havoc vhost_dev_ioctl_#t~mem346#1;call vhost_dev_ioctl_#t~mem347#1.base, vhost_dev_ioctl_#t~mem347#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 172 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13430-1: SUMMARY for call vhost_net_set_backend_#t~ret919#1 := lock_is_held(vhost_net_set_backend_~vq~6#1.base, 116 + vhost_net_set_backend_~vq~6#1.offset); srcloc: null [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7385: assume true; [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7385: assume !true;call vhost_log_access_ok_#t~mem203#1.base, vhost_log_access_ok_#t~mem203#1.offset := read~$Pointer$#16(vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, 8);vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset := vhost_log_access_ok_#t~mem203#1.base, vhost_log_access_ok_#t~mem203#1.offset;havoc vhost_log_access_ok_#t~mem203#1.base, vhost_log_access_ok_#t~mem203#1.offset; [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8211: assume 44801 == vhost_dev_ioctl_~ioctl#1 % 4294967296;assume { :begin_inline_vhost_dev_set_owner } true;vhost_dev_set_owner_#in~dev#1.base, vhost_dev_set_owner_#in~dev#1.offset := vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset;havoc vhost_dev_set_owner_#res#1;havoc vhost_dev_set_owner_#t~mem125#1.base, vhost_dev_set_owner_#t~mem125#1.offset, vhost_dev_set_owner_#t~ret126#1.base, vhost_dev_set_owner_#t~ret126#1.offset, vhost_dev_set_owner_#t~ret127#1.base, vhost_dev_set_owner_#t~ret127#1.offset, vhost_dev_set_owner_#t~ret128#1.base, vhost_dev_set_owner_#t~ret128#1.offset, vhost_dev_set_owner_#t~mem129#1, vhost_dev_set_owner_#t~ret130#1.base, vhost_dev_set_owner_#t~ret130#1.offset, vhost_dev_set_owner_#t~ret131#1, vhost_dev_set_owner_#t~ret132#1, vhost_dev_set_owner_#t~ret133#1, vhost_dev_set_owner_#t~ret134#1, vhost_dev_set_owner_#t~ret135#1, vhost_dev_set_owner_#t~ret136#1, vhost_dev_set_owner_#t~mem137#1.base, vhost_dev_set_owner_#t~mem137#1.offset, vhost_dev_set_owner_#t~mem138#1.base, vhost_dev_set_owner_#t~mem138#1.offset, vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset, vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset, vhost_dev_set_owner_~err~0#1, vhost_dev_set_owner_~tmp___7~7#1.base, vhost_dev_set_owner_~tmp___7~7#1.offset, vhost_dev_set_owner_~tmp___8~5#1.base, vhost_dev_set_owner_~tmp___8~5#1.offset, vhost_dev_set_owner_~tmp___9~4#1, vhost_dev_set_owner_~tmp___10~2#1, vhost_dev_set_owner_~tmp___11~1#1, vhost_dev_set_owner_~tmp~9#1, vhost_dev_set_owner_~tmp___12~1#1;vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset := vhost_dev_set_owner_#in~dev#1.base, vhost_dev_set_owner_#in~dev#1.offset;havoc vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset;havoc vhost_dev_set_owner_~err~0#1;havoc vhost_dev_set_owner_~tmp___7~7#1.base, vhost_dev_set_owner_~tmp___7~7#1.offset;havoc vhost_dev_set_owner_~tmp___8~5#1.base, vhost_dev_set_owner_~tmp___8~5#1.offset;havoc vhost_dev_set_owner_~tmp___9~4#1;havoc vhost_dev_set_owner_~tmp___10~2#1;havoc vhost_dev_set_owner_~tmp___11~1#1;havoc vhost_dev_set_owner_~tmp~9#1;havoc vhost_dev_set_owner_~tmp___12~1#1;call vhost_dev_set_owner_#t~mem125#1.base, vhost_dev_set_owner_#t~mem125#1.offset := read~$Pointer$#16(vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8211: assume !(44801 == vhost_dev_ioctl_~ioctl#1 % 4294967296); [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13430: assume -2147483648 <= vhost_net_set_backend_#t~ret919#1 && vhost_net_set_backend_#t~ret919#1 <= 2147483647;vhost_net_set_backend_~tmp___12~15#1 := vhost_net_set_backend_#t~ret919#1;havoc vhost_net_set_backend_#t~ret919#1; [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13265: assume 0 != get_raw_socket_#t~mem897#1;havoc get_raw_socket_#t~mem897#1; [2025-02-08 02:05:35,288 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13265: assume !(0 != get_raw_socket_#t~mem897#1);havoc get_raw_socket_#t~mem897#1;call get_raw_socket_#t~mem898#1 := read~int#32(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, 2); [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7782: assume false; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7782: assume !false; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13992-3: SUMMARY for call get_task_mm_#t~ret973#1.base, get_task_mm_#t~ret973#1.offset := ldv_malloc(1694); srcloc: null [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint vhost_net_ioctlFINAL: assume true; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13992-2: get_task_mm_#res#1.base, get_task_mm_#res#1.offset := get_task_mm_#t~ret973#1.base, get_task_mm_#t~ret973#1.offset;havoc get_task_mm_#t~ret973#1.base, get_task_mm_#t~ret973#1.offset; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13992: havoc get_task_mm_#t~ret973#1.base, get_task_mm_#t~ret973#1.offset;vhost_dev_set_owner_#t~ret127#1.base, vhost_dev_set_owner_#t~ret127#1.offset := get_task_mm_#res#1.base, get_task_mm_#res#1.offset;havoc get_task_mm_#t~ret973#1.base, get_task_mm_#t~ret973#1.offset, get_task_mm_~arg0#1.base, get_task_mm_~arg0#1.offset;havoc get_task_mm_#in~arg0#1.base, get_task_mm_#in~arg0#1.offset;assume { :end_inline_get_task_mm } true;call write~$Pointer$#16(vhost_dev_set_owner_#t~ret127#1.base, vhost_dev_set_owner_#t~ret127#1.offset, vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8);havoc vhost_dev_set_owner_#t~ret127#1.base, vhost_dev_set_owner_#t~ret127#1.offset; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530: assume 0 != vhost_net_set_features_#t~bitwise930#1 % 18446744073709551616;havoc vhost_net_set_features_#t~bitwise930#1;vhost_net_set_features_~hdr_len~0#1 := 12; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530: assume !(0 != vhost_net_set_features_#t~bitwise930#1 % 18446744073709551616);havoc vhost_net_set_features_#t~bitwise930#1;vhost_net_set_features_~hdr_len~0#1 := 10; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7617: assume { :end_inline_synchronize_rcu } true; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13662: #t~ret944#1 := vhost_net_set_features_#res#1;havoc vhost_net_set_features_#t~bitwise930#1, vhost_net_set_features_#t~bitwise931#1, vhost_net_set_features_#t~bitwise932#1, vhost_net_set_features_#t~ret933#1, vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset, vhost_net_set_features_~features#1, vhost_net_set_features_~vhost_hlen~1#1, vhost_net_set_features_~sock_hlen~1#1, vhost_net_set_features_~hdr_len~0#1, vhost_net_set_features_~i~11#1, vhost_net_set_features_~tmp___7~46#1;havoc vhost_net_set_features_#in~n#1.base, vhost_net_set_features_#in~n#1.offset, vhost_net_set_features_#in~features#1;assume { :end_inline_vhost_net_set_features } true;assume -2147483648 <= #t~ret944#1 && #t~ret944#1 <= 2147483647;~tmp___11~20#1 := #t~ret944#1;havoc #t~mem943#1;havoc #t~ret944#1;#res#1 := ~tmp___11~20#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13299: assume get_tap_socket_~file~0#1.base == 0 && get_tap_socket_~file~0#1.offset == 0; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13299: assume !(get_tap_socket_~file~0#1.base == 0 && get_tap_socket_~file~0#1.offset == 0);assume { :begin_inline_tun_get_socket } true;tun_get_socket_#in~arg0#1.base, tun_get_socket_#in~arg0#1.offset := get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset;havoc tun_get_socket_#res#1.base, tun_get_socket_#res#1.offset;havoc tun_get_socket_#t~ret987#1.base, tun_get_socket_#t~ret987#1.offset, tun_get_socket_~arg0#1.base, tun_get_socket_~arg0#1.offset;tun_get_socket_~arg0#1.base, tun_get_socket_~arg0#1.offset := tun_get_socket_#in~arg0#1.base, tun_get_socket_#in~arg0#1.offset; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530-3: assume 32768 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise930#1 := vhost_net_set_features_~features#1; [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530-3: assume !(32768 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:05:35,289 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13464-1: SUMMARY for call vhost_net_flush_vq(vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, (if vhost_net_set_backend_~index#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_net_set_backend_~index#1 % 4294967296 % 4294967296 else vhost_net_set_backend_~index#1 % 4294967296 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530-4: assume 0 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise930#1 := 0; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530-4: assume !(0 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530-1: [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13530-2: havoc vhost_net_set_features_#t~bitwise930#1;assume vhost_net_set_features_#t~bitwise930#1 % 18446744073709551616 <= vhost_net_set_features_~features#1 % 18446744073709551616 && vhost_net_set_features_#t~bitwise930#1 % 18446744073709551616 <= 32768; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13464: call vhost_net_set_backend_#t~mem921#1.base, vhost_net_set_backend_#t~mem921#1.offset := read~$Pointer$#16(vhost_net_set_backend_~oldsock~0#1.base, 22 + vhost_net_set_backend_~oldsock~0#1.offset, 8); [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8047: assume 0 != vhost_set_vring_~tmp___18~1#1 % 18446744073709551616;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8047: assume !(0 != vhost_set_vring_~tmp___18~1#1 % 18446744073709551616);call vhost_set_vring_#t~mem305#1 := read~int#16(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8113-1: SUMMARY for call vhost_set_vring_#t~ret319#1 := PTR_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8113: assume -9223372036854775808 <= vhost_set_vring_#t~ret319#1 && vhost_set_vring_#t~ret319#1 <= 9223372036854775807;vhost_set_vring_~tmp___37~0#1 := vhost_set_vring_#t~ret319#1;havoc vhost_set_vring_#t~ret319#1;vhost_set_vring_~r~1#1 := vhost_set_vring_~tmp___37~0#1; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7915: assume 0 != vhost_set_vring_~tmp___9~13#1;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7915: assume !(0 != vhost_set_vring_~tmp___9~13#1); [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13233: call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset;get_socket_#t~ret908#1.base, get_socket_#t~ret908#1.offset := get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset;havoc get_raw_socket_#t~ret888#1.base, get_raw_socket_#t~ret888#1.offset, get_raw_socket_#t~ret889#1.base, get_raw_socket_#t~ret889#1.offset, get_raw_socket_#t~mem890#1.base, get_raw_socket_#t~mem890#1.offset, get_raw_socket_#t~mem891#1, get_raw_socket_#t~mem894#1.base, get_raw_socket_#t~mem894#1.offset, get_raw_socket_#t~mem895#1.base, get_raw_socket_#t~mem895#1.offset, get_raw_socket_#t~ret896#1, get_raw_socket_#t~mem897#1, get_raw_socket_#t~mem898#1, get_raw_socket_#t~mem899#1.base, get_raw_socket_#t~mem899#1.offset, get_raw_socket_#t~mem900#1, get_raw_socket_#t~ret901#1.base, get_raw_socket_#t~ret901#1.offset, get_raw_socket_~fd#1, get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset, get_raw_socket_~tmp___7~42#1.base, get_raw_socket_~tmp___7~42#1.offset, get_raw_socket_~tmp___8~32#1.base, get_raw_socket_~tmp___8~32#1.offset, get_raw_socket_~tmp___9~24#1.base, get_raw_socket_~tmp___9~24#1.offset, get_raw_socket_~tmp~15#1.base, get_raw_socket_~tmp~15#1.offset, get_raw_socket_~tmp___10~18#1.base, get_raw_socket_~tmp___10~18#1.offset;havoc get_raw_socket_#in~fd#1;assume { :end_inline_get_raw_socket } true;get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset := get_socket_#t~ret908#1.base, get_socket_#t~ret908#1.offset;havoc get_socket_#t~ret908#1.base, get_socket_#t~ret908#1.offset; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6726: assume vhost_dev_alloc_iovecs_#t~mem87#1.base == 0 && vhost_dev_alloc_iovecs_#t~mem87#1.offset == 0;havoc vhost_dev_alloc_iovecs_#t~mem86#1.base, vhost_dev_alloc_iovecs_#t~mem86#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem87#1.base, vhost_dev_alloc_iovecs_#t~mem87#1.offset; [2025-02-08 02:05:35,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6726: assume !(vhost_dev_alloc_iovecs_#t~mem87#1.base == 0 && vhost_dev_alloc_iovecs_#t~mem87#1.offset == 0);havoc vhost_dev_alloc_iovecs_#t~mem86#1.base, vhost_dev_alloc_iovecs_#t~mem86#1.offset;havoc vhost_dev_alloc_iovecs_#t~mem87#1.base, vhost_dev_alloc_iovecs_#t~mem87#1.offset;vhost_dev_alloc_iovecs_~i~0#1 := 1 + vhost_dev_alloc_iovecs_~i~0#1; [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7849: assume 1074310946 == vhost_set_vring_~ioctl#1 % 18446744073709551616; [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7849: assume !(1074310946 == vhost_set_vring_~ioctl#1 % 18446744073709551616); [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7618: vhost_set_memory_#res#1 := 0;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7684: assume true; [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7684: assume !true; [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7519: call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset;vhost_dev_ioctl_#t~ret330#1 := vhost_set_memory_#res#1;havoc vhost_set_memory_#t~ret231#1, vhost_set_memory_#t~mem232#1, vhost_set_memory_#t~mem233#1, vhost_set_memory_#t~mem234#1, vhost_set_memory_#t~ret235#1.base, vhost_set_memory_#t~ret235#1.offset, vhost_set_memory_#t~memcpy~res236#1.base, vhost_set_memory_#t~memcpy~res236#1.offset, vhost_set_memory_#t~mem237#1, vhost_set_memory_#t~ret238#1, vhost_set_memory_#t~ret239#1, vhost_set_memory_#t~ret240#1, vhost_set_memory_#t~ret241#1, vhost_set_memory_#t~ret242#1, vhost_set_memory_#t~mem243#1.base, vhost_set_memory_#t~mem243#1.offset, vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, vhost_set_memory_~m#1.base, vhost_set_memory_~m#1.offset, vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset, vhost_set_memory_~size~0#1, vhost_set_memory_~tmp___7~14#1, vhost_set_memory_~tmp___8~13#1.base, vhost_set_memory_~tmp___8~13#1.offset, vhost_set_memory_~__len~0#1, vhost_set_memory_~__ret~0#1.base, vhost_set_memory_~__ret~0#1.offset, vhost_set_memory_~tmp___9~12#1, vhost_set_memory_~tmp___10~7#1, vhost_set_memory_~tmp___11~5#1, vhost_set_memory_~tmp___12~4#1, vhost_set_memory_~tmp___13~3#1, vhost_set_memory_~tmp~10#1, vhost_set_memory_~tmp___14~3#1;havoc vhost_set_memory_#in~d#1.base, vhost_set_memory_#in~d#1.offset, vhost_set_memory_#in~m#1.base, vhost_set_memory_#in~m#1.offset;assume { :end_inline_vhost_set_memory } true;assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret330#1 && vhost_dev_ioctl_#t~ret330#1 <= 9223372036854775807;vhost_dev_ioctl_~r~2#1 := vhost_dev_ioctl_#t~ret330#1;havoc vhost_dev_ioctl_#t~ret330#1; [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7618-1: SUMMARY for call kfree(vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset); srcloc: null [2025-02-08 02:05:35,291 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13564: assume vhost_net_set_features_~i~11#1 < 2; [2025-02-08 02:05:35,294 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13564: assume !(vhost_net_set_features_~i~11#1 < 2); [2025-02-08 02:05:35,294 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8246: assume 0 != vhost_dev_ioctl_~tmp___7~16#1 % 18446744073709551616;vhost_dev_ioctl_~r~2#1 := -14; [2025-02-08 02:05:35,294 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8246: assume !(0 != vhost_dev_ioctl_~tmp___7~16#1 % 18446744073709551616);call vhost_dev_ioctl_#t~mem332#1 := read~int#16(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, 8);call vhost_dev_ioctl_#t~mem333#1 := read~int#16(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, 8); [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13399: assume { :begin_inline_vhost_vq_access_ok } true;vhost_vq_access_ok_#in~vq#1.base, vhost_vq_access_ok_#in~vq#1.offset := vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset;havoc vhost_vq_access_ok_#res#1;havoc vhost_vq_access_ok_#t~mem219#1.base, vhost_vq_access_ok_#t~mem219#1.offset, vhost_vq_access_ok_#t~mem220#1, vhost_vq_access_ok_#t~mem221#1.base, vhost_vq_access_ok_#t~mem221#1.offset, vhost_vq_access_ok_#t~mem222#1.base, vhost_vq_access_ok_#t~mem222#1.offset, vhost_vq_access_ok_#t~mem223#1.base, vhost_vq_access_ok_#t~mem223#1.offset, vhost_vq_access_ok_#t~ret224#1, vhost_vq_access_ok_#t~mem225#1.base, vhost_vq_access_ok_#t~mem225#1.offset, vhost_vq_access_ok_#t~mem226#1.base, vhost_vq_access_ok_#t~mem226#1.offset, vhost_vq_access_ok_#t~ret227#1, vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, vhost_vq_access_ok_~tmp___7~13#1, vhost_vq_access_ok_~tmp___8~12#1, vhost_vq_access_ok_~tmp___9~11#1;vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset := vhost_vq_access_ok_#in~vq#1.base, vhost_vq_access_ok_#in~vq#1.offset;havoc vhost_vq_access_ok_~tmp___7~13#1;havoc vhost_vq_access_ok_~tmp___8~12#1;havoc vhost_vq_access_ok_~tmp___9~11#1;call vhost_vq_access_ok_#t~mem219#1.base, vhost_vq_access_ok_#t~mem219#1.offset := read~$Pointer$#16(vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem220#1 := read~int#16(vhost_vq_access_ok_~vq#1.base, 160 + vhost_vq_access_ok_~vq#1.offset, 4);call vhost_vq_access_ok_#t~mem221#1.base, vhost_vq_access_ok_#t~mem221#1.offset := read~$Pointer$#16(vhost_vq_access_ok_~vq#1.base, 164 + vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem222#1.base, vhost_vq_access_ok_#t~mem222#1.offset := read~$Pointer$#16(vhost_vq_access_ok_~vq#1.base, 172 + vhost_vq_access_ok_~vq#1.offset, 8);call vhost_vq_access_ok_#t~mem223#1.base, vhost_vq_access_ok_#t~mem223#1.offset := read~$Pointer$#16(vhost_vq_access_ok_~vq#1.base, 180 + vhost_vq_access_ok_~vq#1.offset, 8); [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13399-1: SUMMARY for call mutex_lock_nested(vhost_net_set_backend_~vq~6#1.base, 8 + vhost_net_set_backend_~vq~6#1.offset, 0); srcloc: null [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13465: havoc vhost_net_set_backend_#t~mem921#1.base, vhost_net_set_backend_#t~mem921#1.offset; [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8213: vhost_dev_ioctl_#t~ret328#1 := vhost_dev_set_owner_#res#1;havoc vhost_dev_set_owner_#t~mem125#1.base, vhost_dev_set_owner_#t~mem125#1.offset, vhost_dev_set_owner_#t~ret126#1.base, vhost_dev_set_owner_#t~ret126#1.offset, vhost_dev_set_owner_#t~ret127#1.base, vhost_dev_set_owner_#t~ret127#1.offset, vhost_dev_set_owner_#t~ret128#1.base, vhost_dev_set_owner_#t~ret128#1.offset, vhost_dev_set_owner_#t~mem129#1, vhost_dev_set_owner_#t~ret130#1.base, vhost_dev_set_owner_#t~ret130#1.offset, vhost_dev_set_owner_#t~ret131#1, vhost_dev_set_owner_#t~ret132#1, vhost_dev_set_owner_#t~ret133#1, vhost_dev_set_owner_#t~ret134#1, vhost_dev_set_owner_#t~ret135#1, vhost_dev_set_owner_#t~ret136#1, vhost_dev_set_owner_#t~mem137#1.base, vhost_dev_set_owner_#t~mem137#1.offset, vhost_dev_set_owner_#t~mem138#1.base, vhost_dev_set_owner_#t~mem138#1.offset, vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset, vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset, vhost_dev_set_owner_~err~0#1, vhost_dev_set_owner_~tmp___7~7#1.base, vhost_dev_set_owner_~tmp___7~7#1.offset, vhost_dev_set_owner_~tmp___8~5#1.base, vhost_dev_set_owner_~tmp___8~5#1.offset, vhost_dev_set_owner_~tmp___9~4#1, vhost_dev_set_owner_~tmp___10~2#1, vhost_dev_set_owner_~tmp___11~1#1, vhost_dev_set_owner_~tmp~9#1, vhost_dev_set_owner_~tmp___12~1#1;havoc vhost_dev_set_owner_#in~dev#1.base, vhost_dev_set_owner_#in~dev#1.offset;assume { :end_inline_vhost_dev_set_owner } true;assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret328#1 && vhost_dev_ioctl_#t~ret328#1 <= 9223372036854775807;vhost_dev_ioctl_~r~2#1 := vhost_dev_ioctl_#t~ret328#1;havoc vhost_dev_ioctl_#t~ret328#1; [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13465-1: SUMMARY for call fput(vhost_net_set_backend_#t~mem921#1.base, vhost_net_set_backend_#t~mem921#1.offset); srcloc: null [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13432: assume 0 != vhost_net_set_backend_~tmp___12~15#1; [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13432: assume !(0 != vhost_net_set_backend_~tmp___12~15#1);~__warned___33~0 := 1; [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8015-1: SUMMARY for call vhost_set_vring_#t~ret299#1.base, vhost_set_vring_#t~ret299#1.offset := eventfd_fget(vhost_set_vring_#t~mem298#1); srcloc: null [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6958: vhost_dev_set_owner_#t~ret135#1 := vhost_dev_alloc_iovecs_#res#1;havoc vhost_dev_alloc_iovecs_#t~mem69#1, vhost_dev_alloc_iovecs_#t~ret72#1.base, vhost_dev_alloc_iovecs_#t~ret72#1.offset, vhost_dev_alloc_iovecs_#t~mem73#1.base, vhost_dev_alloc_iovecs_#t~mem73#1.offset, vhost_dev_alloc_iovecs_#t~ret76#1.base, vhost_dev_alloc_iovecs_#t~ret76#1.offset, vhost_dev_alloc_iovecs_#t~mem77#1.base, vhost_dev_alloc_iovecs_#t~mem77#1.offset, vhost_dev_alloc_iovecs_#t~ret80#1.base, vhost_dev_alloc_iovecs_#t~ret80#1.offset, vhost_dev_alloc_iovecs_#t~mem81#1.base, vhost_dev_alloc_iovecs_#t~mem81#1.offset, vhost_dev_alloc_iovecs_#t~mem82#1.base, vhost_dev_alloc_iovecs_#t~mem82#1.offset, vhost_dev_alloc_iovecs_#t~mem83#1.base, vhost_dev_alloc_iovecs_#t~mem83#1.offset, vhost_dev_alloc_iovecs_#t~mem84#1.base, vhost_dev_alloc_iovecs_#t~mem84#1.offset, vhost_dev_alloc_iovecs_#t~mem85#1.base, vhost_dev_alloc_iovecs_#t~mem85#1.offset, vhost_dev_alloc_iovecs_#t~mem86#1.base, vhost_dev_alloc_iovecs_#t~mem86#1.offset, vhost_dev_alloc_iovecs_#t~mem87#1.base, vhost_dev_alloc_iovecs_#t~mem87#1.offset, vhost_dev_alloc_iovecs_#t~mem88#1.base, vhost_dev_alloc_iovecs_#t~mem88#1.offset, vhost_dev_alloc_iovecs_#t~mem89#1.base, vhost_dev_alloc_iovecs_#t~mem89#1.offset, vhost_dev_alloc_iovecs_#t~mem90#1.base, vhost_dev_alloc_iovecs_#t~mem90#1.offset, vhost_dev_alloc_iovecs_#t~mem91#1.base, vhost_dev_alloc_iovecs_#t~mem91#1.offset, vhost_dev_alloc_iovecs_#t~mem92#1.base, vhost_dev_alloc_iovecs_#t~mem92#1.offset, vhost_dev_alloc_iovecs_#t~mem93#1.base, vhost_dev_alloc_iovecs_#t~mem93#1.offset, vhost_dev_alloc_iovecs_~dev#1.base, vhost_dev_alloc_iovecs_~dev#1.offset, vhost_dev_alloc_iovecs_~i~0#1, vhost_dev_alloc_iovecs_~tmp___7~5#1.base, vhost_dev_alloc_iovecs_~tmp___7~5#1.offset, vhost_dev_alloc_iovecs_~tmp___8~3#1.base, vhost_dev_alloc_iovecs_~tmp___8~3#1.offset, vhost_dev_alloc_iovecs_~tmp___9~2#1.base, vhost_dev_alloc_iovecs_~tmp___9~2#1.offset;havoc vhost_dev_alloc_iovecs_#in~dev#1.base, vhost_dev_alloc_iovecs_#in~dev#1.offset;assume { :end_inline_vhost_dev_alloc_iovecs } true;assume -9223372036854775808 <= vhost_dev_set_owner_#t~ret135#1 && vhost_dev_set_owner_#t~ret135#1 <= 9223372036854775807;vhost_dev_set_owner_~tmp___11~1#1 := vhost_dev_set_owner_#t~ret135#1;havoc vhost_dev_set_owner_#t~ret135#1;vhost_dev_set_owner_~err~0#1 := (if vhost_dev_set_owner_~tmp___11~1#1 % 4294967296 <= 2147483647 then vhost_dev_set_owner_~tmp___11~1#1 % 4294967296 else vhost_dev_set_owner_~tmp___11~1#1 % 4294967296 - 4294967296); [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8015: vhost_set_vring_~tmp___15~3#1.base, vhost_set_vring_~tmp___15~3#1.offset := vhost_set_vring_#t~ret299#1.base, vhost_set_vring_#t~ret299#1.offset;havoc vhost_set_vring_#t~mem298#1;havoc vhost_set_vring_#t~ret299#1.base, vhost_set_vring_#t~ret299#1.offset;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := vhost_set_vring_~tmp___15~3#1.base, vhost_set_vring_~tmp___15~3#1.offset; [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7949: assume 0 != vhost_set_vring_#t~mem271#1 % 2 % 18446744073709551616;havoc vhost_set_vring_#t~mem271#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7949: assume !(0 != vhost_set_vring_#t~mem271#1 % 2 % 18446744073709551616);havoc vhost_set_vring_#t~mem271#1;call vhost_set_vring_#t~mem273#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,295 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7586: assume true; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7586: assume !true;call vhost_set_memory_#t~mem243#1.base, vhost_set_memory_#t~mem243#1.offset := read~$Pointer$#16(vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, 8);vhost_set_memory_~oldmem~0#1.base, vhost_set_memory_~oldmem~0#1.offset := vhost_set_memory_#t~mem243#1.base, vhost_set_memory_#t~mem243#1.offset;havoc vhost_set_memory_#t~mem243#1.base, vhost_set_memory_#t~mem243#1.offset;havoc vhost_set_memory_#t~mem243#1.base, vhost_set_memory_#t~mem243#1.offset;call write~$Pointer$#16(vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~d#1.base, vhost_set_memory_~d#1.offset, 8);assume { :begin_inline_synchronize_rcu } true;assume { :begin_inline_synchronize_sched } true; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7553-1: SUMMARY for call vhost_set_memory_#t~ret235#1.base, vhost_set_memory_#t~ret235#1.offset := kmalloc(vhost_set_memory_~size~0#1 + 32 * (vhost_set_memory_#t~mem234#1 % 4294967296), 208); srcloc: null [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7553: vhost_set_memory_~tmp___8~13#1.base, vhost_set_memory_~tmp___8~13#1.offset := vhost_set_memory_#t~ret235#1.base, vhost_set_memory_#t~ret235#1.offset;havoc vhost_set_memory_#t~mem234#1;havoc vhost_set_memory_#t~ret235#1.base, vhost_set_memory_#t~ret235#1.offset;vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset := vhost_set_memory_~tmp___8~13#1.base, vhost_set_memory_~tmp___8~13#1.offset; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7388-1: SUMMARY for call vhost_log_access_ok_#t~ret201#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7388: assume -2147483648 <= vhost_log_access_ok_#t~ret201#1 && vhost_log_access_ok_#t~ret201#1 <= 2147483647;vhost_log_access_ok_~tmp___7~12#1 := vhost_log_access_ok_#t~ret201#1;havoc vhost_log_access_ok_#t~ret201#1; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13301: get_tap_socket_~tmp~16#1.base, get_tap_socket_~tmp~16#1.offset := get_tap_socket_#t~ret903#1.base, get_tap_socket_#t~ret903#1.offset;havoc get_tap_socket_#t~ret903#1.base, get_tap_socket_#t~ret903#1.offset;get_tap_socket_~tmp___8~33#1.base, get_tap_socket_~tmp___8~33#1.offset := get_tap_socket_~tmp~16#1.base, get_tap_socket_~tmp~16#1.offset;get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset := get_tap_socket_~tmp___8~33#1.base, get_tap_socket_~tmp___8~33#1.offset; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13301-1: SUMMARY for call get_tap_socket_#t~ret903#1.base, get_tap_socket_#t~ret903#1.offset := ERR_PTR(-9); srcloc: null [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13400: vhost_net_set_backend_#t~ret914#1 := vhost_vq_access_ok_#res#1;havoc vhost_vq_access_ok_#t~mem219#1.base, vhost_vq_access_ok_#t~mem219#1.offset, vhost_vq_access_ok_#t~mem220#1, vhost_vq_access_ok_#t~mem221#1.base, vhost_vq_access_ok_#t~mem221#1.offset, vhost_vq_access_ok_#t~mem222#1.base, vhost_vq_access_ok_#t~mem222#1.offset, vhost_vq_access_ok_#t~mem223#1.base, vhost_vq_access_ok_#t~mem223#1.offset, vhost_vq_access_ok_#t~ret224#1, vhost_vq_access_ok_#t~mem225#1.base, vhost_vq_access_ok_#t~mem225#1.offset, vhost_vq_access_ok_#t~mem226#1.base, vhost_vq_access_ok_#t~mem226#1.offset, vhost_vq_access_ok_#t~ret227#1, vhost_vq_access_ok_~vq#1.base, vhost_vq_access_ok_~vq#1.offset, vhost_vq_access_ok_~tmp___7~13#1, vhost_vq_access_ok_~tmp___8~12#1, vhost_vq_access_ok_~tmp___9~11#1;havoc vhost_vq_access_ok_#in~vq#1.base, vhost_vq_access_ok_#in~vq#1.offset;assume { :end_inline_vhost_vq_access_ok } true;assume -2147483648 <= vhost_net_set_backend_#t~ret914#1 && vhost_net_set_backend_#t~ret914#1 <= 2147483647;vhost_net_set_backend_~tmp___8~35#1 := vhost_net_set_backend_#t~ret914#1;havoc vhost_net_set_backend_#t~ret914#1; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6926: assume vhost_dev_set_owner_#t~mem125#1.base != 0 || vhost_dev_set_owner_#t~mem125#1.offset != 0;havoc vhost_dev_set_owner_#t~mem125#1.base, vhost_dev_set_owner_#t~mem125#1.offset;vhost_dev_set_owner_~err~0#1 := -16; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6926: assume !(vhost_dev_set_owner_#t~mem125#1.base != 0 || vhost_dev_set_owner_#t~mem125#1.offset != 0);havoc vhost_dev_set_owner_#t~mem125#1.base, vhost_dev_set_owner_#t~mem125#1.offset; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6992: assume vhost_dev_reset_owner_~memory~0#1.base == 0 && vhost_dev_reset_owner_~memory~0#1.offset == 0;vhost_dev_reset_owner_#res#1 := -12; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6992: assume !(vhost_dev_reset_owner_~memory~0#1.base == 0 && vhost_dev_reset_owner_~memory~0#1.offset == 0); [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7785: assume true; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7785: assume !true; [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13500: SUMMARY for call vhost_net_stop(vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset, vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset); srcloc: null [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8347-1: SUMMARY for call vhost_dev_ioctl_#t~ret340#1 := IS_ERR(vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset); srcloc: null [2025-02-08 02:05:35,296 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8347: assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret340#1 && vhost_dev_ioctl_#t~ret340#1 <= 9223372036854775807;vhost_dev_ioctl_~tmp___12~6#1 := vhost_dev_ioctl_#t~ret340#1;havoc vhost_dev_ioctl_#t~ret340#1;vhost_dev_ioctl_~tmp___10~9#1 := vhost_dev_ioctl_~tmp___12~6#1; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13632: #t~ret938#1 := vhost_net_set_backend_#res#1;havoc vhost_net_set_backend_#t~ret913#1, vhost_net_set_backend_#t~ret914#1, vhost_net_set_backend_#t~ret915#1.base, vhost_net_set_backend_#t~ret915#1.offset, vhost_net_set_backend_#t~ret916#1, vhost_net_set_backend_#t~ret917#1, vhost_net_set_backend_#t~ret918#1, vhost_net_set_backend_#t~ret919#1, vhost_net_set_backend_#t~mem920#1.base, vhost_net_set_backend_#t~mem920#1.offset, vhost_net_set_backend_#t~mem921#1.base, vhost_net_set_backend_#t~mem921#1.offset, vhost_net_set_backend_~n#1.base, vhost_net_set_backend_~n#1.offset, vhost_net_set_backend_~index#1, vhost_net_set_backend_~fd#1, vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset, vhost_net_set_backend_~oldsock~0#1.base, vhost_net_set_backend_~oldsock~0#1.offset, vhost_net_set_backend_~vq~6#1.base, vhost_net_set_backend_~vq~6#1.offset, vhost_net_set_backend_~r~12#1, vhost_net_set_backend_~tmp___7~45#1, vhost_net_set_backend_~tmp___8~35#1, vhost_net_set_backend_~tmp___9~27#1, vhost_net_set_backend_~tmp___10~21#1, vhost_net_set_backend_~tmp___11~19#1, vhost_net_set_backend_~tmp___12~15#1, vhost_net_set_backend_~tmp~18#1, vhost_net_set_backend_~tmp___13~13#1;havoc vhost_net_set_backend_#in~n#1.base, vhost_net_set_backend_#in~n#1.offset, vhost_net_set_backend_#in~index#1, vhost_net_set_backend_#in~fd#1;assume { :end_inline_vhost_net_set_backend } true;assume -9223372036854775808 <= #t~ret938#1 && #t~ret938#1 <= 9223372036854775807;~tmp___8~36#1 := #t~ret938#1;havoc #t~mem936#1;havoc #t~mem937#1;havoc #t~ret938#1;#res#1 := ~tmp___8~36#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13269: assume 17 != (if get_raw_socket_#t~mem898#1 % 65536 % 4294967296 <= 2147483647 then get_raw_socket_#t~mem898#1 % 65536 % 4294967296 else get_raw_socket_#t~mem898#1 % 65536 % 4294967296 - 4294967296);havoc get_raw_socket_#t~mem898#1;call write~int#33(-96, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13269: assume !(17 != (if get_raw_socket_#t~mem898#1 % 65536 % 4294967296 <= 2147483647 then get_raw_socket_#t~mem898#1 % 65536 % 4294967296 else get_raw_socket_#t~mem898#1 % 65536 % 4294967296 - 4294967296));havoc get_raw_socket_#t~mem898#1;get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset := get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7819: assume vhost_set_vring_~r~1#1 < 0;vhost_set_vring_#res#1 := vhost_set_vring_~r~1#1;call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7819: assume !(vhost_set_vring_~r~1#1 < 0);call vhost_set_vring_#t~mem245#1 := read~int#16(vhost_set_vring_~d#1.base, 180 + vhost_set_vring_~d#1.offset, 4); [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7885-1: call vhost_set_vring_#t~mem255#1.base, vhost_set_vring_#t~mem255#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 17064 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7885: assume vhost_set_vring_#t~mem255#1.base != 0 || vhost_set_vring_#t~mem255#1.offset != 0;havoc vhost_set_vring_#t~mem255#1.base, vhost_set_vring_#t~mem255#1.offset;vhost_set_vring_~r~1#1 := -16; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7885: assume !(vhost_set_vring_#t~mem255#1.base != 0 || vhost_set_vring_#t~mem255#1.offset != 0);havoc vhost_set_vring_#t~mem255#1.base, vhost_set_vring_#t~mem255#1.offset; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7687: assume false; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7687: assume !false; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7390: assume 0 != vhost_log_access_ok_~tmp___7~12#1; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7390: assume !(0 != vhost_log_access_ok_~tmp___7~12#1); [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13402: assume !(0 != vhost_net_set_backend_~tmp___8~35#1);vhost_net_set_backend_~r~12#1 := -14; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13402: assume 0 != vhost_net_set_backend_~tmp___8~35#1;assume { :begin_inline_get_socket } true;get_socket_#in~fd#1 := vhost_net_set_backend_~fd#1;havoc get_socket_#res#1.base, get_socket_#res#1.offset;havoc get_socket_#t~ret908#1.base, get_socket_#t~ret908#1.offset, get_socket_#t~ret909#1, get_socket_#t~ret910#1.base, get_socket_#t~ret910#1.offset, get_socket_#t~ret911#1, get_socket_#t~ret912#1.base, get_socket_#t~ret912#1.offset, get_socket_~fd#1, get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset, get_socket_~tmp___7~44#1, get_socket_~tmp___8~34#1, get_socket_~tmp___9~26#1.base, get_socket_~tmp___9~26#1.offset, get_socket_~tmp~17#1, get_socket_~tmp___10~20#1, get_socket_~tmp___11~18#1.base, get_socket_~tmp___11~18#1.offset;get_socket_~fd#1 := get_socket_#in~fd#1;havoc get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset;havoc get_socket_~tmp___7~44#1;havoc get_socket_~tmp___8~34#1;havoc get_socket_~tmp___9~26#1.base, get_socket_~tmp___9~26#1.offset;havoc get_socket_~tmp~17#1;havoc get_socket_~tmp___10~20#1;havoc get_socket_~tmp___11~18#1.base, get_socket_~tmp___11~18#1.offset; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13501: assume { :begin_inline_vhost_dev_reset_owner } true;vhost_dev_reset_owner_#in~dev#1.base, vhost_dev_reset_owner_#in~dev#1.offset := vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset;havoc vhost_dev_reset_owner_#res#1;havoc vhost_dev_reset_owner_#t~ret139#1.base, vhost_dev_reset_owner_#t~ret139#1.offset, vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, vhost_dev_reset_owner_~tmp___7~8#1.base, vhost_dev_reset_owner_~tmp___7~8#1.offset;vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset := vhost_dev_reset_owner_#in~dev#1.base, vhost_dev_reset_owner_#in~dev#1.offset;havoc vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset;havoc vhost_dev_reset_owner_~tmp___7~8#1.base, vhost_dev_reset_owner_~tmp___7~8#1.offset; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13501-1: SUMMARY for call vhost_net_flush(vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset); srcloc: null [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8282: vhost_dev_ioctl_~i~6#1 := 1 + vhost_dev_ioctl_~i~6#1; [2025-02-08 02:05:35,297 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8381-1: SUMMARY for call mutex_lock_nested(vhost_dev_ioctl_#t~mem347#1.base, 8 + (vhost_dev_ioctl_#t~mem347#1.offset + 17088 * vhost_dev_ioctl_~i~6#1), 0); srcloc: null [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8381: havoc vhost_dev_ioctl_#t~mem347#1.base, vhost_dev_ioctl_#t~mem347#1.offset;call vhost_dev_ioctl_#t~mem348#1.base, vhost_dev_ioctl_#t~mem348#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 172 + vhost_dev_ioctl_~d#1.offset, 8);call vhost_dev_ioctl_#t~mem349#1.base, vhost_dev_ioctl_#t~mem349#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 192 + vhost_dev_ioctl_~d#1.offset, 8);call write~$Pointer$#16(vhost_dev_ioctl_#t~mem349#1.base, vhost_dev_ioctl_#t~mem349#1.offset, vhost_dev_ioctl_#t~mem348#1.base, 228 + (vhost_dev_ioctl_#t~mem348#1.offset + 17088 * vhost_dev_ioctl_~i~6#1), 8);havoc vhost_dev_ioctl_#t~mem348#1.base, vhost_dev_ioctl_#t~mem348#1.offset;havoc vhost_dev_ioctl_#t~mem349#1.base, vhost_dev_ioctl_#t~mem349#1.offset;call vhost_dev_ioctl_#t~mem350#1.base, vhost_dev_ioctl_#t~mem350#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 172 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8183-1: vhost_set_vring_#res#1 := vhost_set_vring_~r~1#1;call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset; [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8150: assume vhost_set_vring_~ctx~0#1.base != 0 || vhost_set_vring_~ctx~0#1.offset != 0; [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8150: assume !(vhost_set_vring_~ctx~0#1.base != 0 || vhost_set_vring_~ctx~0#1.offset != 0); [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8282-1: SUMMARY for call mutex_unlock(vhost_dev_ioctl_~vq~1#1.base, 8 + vhost_dev_ioctl_~vq~1#1.offset); srcloc: null [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6961: assume 0 != vhost_dev_set_owner_~err~0#1; [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6961: assume !(0 != vhost_dev_set_owner_~err~0#1);vhost_dev_set_owner_#res#1 := 0; [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7853: assume false;call vhost_set_vring_#t~mem247#1.base, vhost_set_vring_#t~mem247#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 17064 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7853: assume !false; [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13667: assume { :begin_inline_vhost_net_reset_owner } true;vhost_net_reset_owner_#in~n#1.base, vhost_net_reset_owner_#in~n#1.offset := ~n~3#1.base, ~n~3#1.offset;havoc vhost_net_reset_owner_#res#1;havoc vhost_net_reset_owner_#t~ret922#1, vhost_net_reset_owner_#t~ret923#1, vhost_net_reset_owner_#t~mem924#1.base, vhost_net_reset_owner_#t~mem924#1.offset, vhost_net_reset_owner_#t~mem925#1.base, vhost_net_reset_owner_#t~mem925#1.offset, vhost_net_reset_owner_#t~mem926#1.base, vhost_net_reset_owner_#t~mem926#1.offset, vhost_net_reset_owner_#t~mem927#1.base, vhost_net_reset_owner_#t~mem927#1.offset, vhost_net_reset_owner_#t~mem928#1.base, vhost_net_reset_owner_#t~mem928#1.offset, vhost_net_reset_owner_#t~mem929#1.base, vhost_net_reset_owner_#t~mem929#1.offset, vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset, vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, vhost_net_reset_owner_~err~3#1;vhost_net_reset_owner_~n#1.base, vhost_net_reset_owner_~n#1.offset := vhost_net_reset_owner_#in~n#1.base, vhost_net_reset_owner_#in~n#1.offset;call vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset := #Ultimate.allocOnStack(8);call vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset := #Ultimate.allocOnStack(8);havoc vhost_net_reset_owner_~err~3#1;call write~$Pointer$#37(0, 0, vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, 8);call write~$Pointer$#20(0, 0, vhost_net_reset_owner_~#rx_sock~1#1.base, vhost_net_reset_owner_~#rx_sock~1#1.offset, 8); [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7589-1: SUMMARY for call vhost_set_memory_#t~ret241#1 := debug_lockdep_rcu_enabled(); srcloc: null [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7556: assume vhost_set_memory_~newmem~0#1.base == 0 && vhost_set_memory_~newmem~0#1.offset == 0;vhost_set_memory_#res#1 := -12;call ULTIMATE.dealloc(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset);havoc vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset; [2025-02-08 02:05:35,298 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7556: assume !(vhost_set_memory_~newmem~0#1.base == 0 && vhost_set_memory_~newmem~0#1.offset == 0);vhost_set_memory_~__len~0#1 := vhost_set_memory_~size~0#1;assume { :begin_inline_#Ultimate.C_memcpy } true;#Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset, #Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset, #Ultimate.C_memcpy_size#1 := vhost_set_memory_~newmem~0#1.base, vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, vhost_set_memory_~__len~0#1;havoc #Ultimate.C_memcpy_#res#1.base, #Ultimate.C_memcpy_#res#1.offset;havoc #Ultimate.C_memcpy_#t~loopctr996#1, #Ultimate.C_memcpy_#t~mem997#1, #Ultimate.C_memcpy_#t~mem998#1, #Ultimate.C_memcpy_#t~mem999#1, #Ultimate.C_memcpy_#t~mem1000#1, #Ultimate.C_memcpy_#t~mem1001#1, #Ultimate.C_memcpy_#t~mem1002#1, #Ultimate.C_memcpy_#t~mem1003#1, #Ultimate.C_memcpy_#t~mem1004#1, #Ultimate.C_memcpy_#t~mem1005#1, #Ultimate.C_memcpy_#t~loopctr1006#1, #Ultimate.C_memcpy_#t~mem1007#1.base, #Ultimate.C_memcpy_#t~mem1007#1.offset;#Ultimate.C_memcpy_#t~loopctr996#1 := 0; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7589: assume -2147483648 <= vhost_set_memory_#t~ret241#1 && vhost_set_memory_#t~ret241#1 <= 2147483647;vhost_set_memory_~tmp___12~4#1 := vhost_set_memory_#t~ret241#1;havoc vhost_set_memory_#t~ret241#1; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535-4: assume 0 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise931#1 := 0; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535-4: assume !(0 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7391: assume 0 == ~__warned___23~0 % 256; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7391: assume !(0 == ~__warned___23~0 % 256); [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535-2: havoc vhost_net_set_features_#t~bitwise931#1;assume vhost_net_set_features_#t~bitwise931#1 % 18446744073709551616 <= vhost_net_set_features_~features#1 % 18446744073709551616 && vhost_net_set_features_#t~bitwise931#1 % 18446744073709551616 <= 134217728; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535-3: assume 134217728 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise931#1 := vhost_net_set_features_~features#1; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535-3: assume !(134217728 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13436: SUMMARY for call lockdep_rcu_dereference(197, 0, 634); srcloc: null [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535: assume 0 != vhost_net_set_features_#t~bitwise931#1 % 18446744073709551616;havoc vhost_net_set_features_#t~bitwise931#1;vhost_net_set_features_~vhost_hlen~1#1 := vhost_net_set_features_~hdr_len~0#1;vhost_net_set_features_~sock_hlen~1#1 := 0; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535: assume !(0 != vhost_net_set_features_#t~bitwise931#1 % 18446744073709551616);havoc vhost_net_set_features_#t~bitwise931#1;vhost_net_set_features_~vhost_hlen~1#1 := 0;vhost_net_set_features_~sock_hlen~1#1 := vhost_net_set_features_~hdr_len~0#1; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13502: vhost_net_reset_owner_#t~ret923#1 := vhost_dev_reset_owner_#res#1;havoc vhost_dev_reset_owner_#t~ret139#1.base, vhost_dev_reset_owner_#t~ret139#1.offset, vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, vhost_dev_reset_owner_~tmp___7~8#1.base, vhost_dev_reset_owner_~tmp___7~8#1.offset;havoc vhost_dev_reset_owner_#in~dev#1.base, vhost_dev_reset_owner_#in~dev#1.offset;assume { :end_inline_vhost_dev_reset_owner } true;assume -9223372036854775808 <= vhost_net_reset_owner_#t~ret923#1 && vhost_net_reset_owner_#t~ret923#1 <= 9223372036854775807;vhost_net_reset_owner_~err~3#1 := vhost_net_reset_owner_#t~ret923#1;havoc vhost_net_reset_owner_#t~ret923#1; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13535-1: [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8052: assume -1 == vhost_set_vring_#t~mem305#1;havoc vhost_set_vring_#t~mem305#1;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := 0, 0; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8052: assume !(-1 == vhost_set_vring_#t~mem305#1);havoc vhost_set_vring_#t~mem305#1;call vhost_set_vring_#t~mem306#1 := read~int#16(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7953: assume 0 != vhost_set_vring_#t~mem273#1 % 8 % 18446744073709551616;havoc vhost_set_vring_#t~mem273#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7953: assume !(0 != vhost_set_vring_#t~mem273#1 % 8 % 18446744073709551616);havoc vhost_set_vring_#t~mem273#1;call vhost_set_vring_#t~mem275#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 32 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,299 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7788: assume false; [2025-02-08 02:05:35,302 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7788: assume !false; [2025-02-08 02:05:35,302 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8383-1: SUMMARY for call mutex_unlock(vhost_dev_ioctl_#t~mem350#1.base, 8 + (vhost_dev_ioctl_#t~mem350#1.offset + 17088 * vhost_dev_ioctl_~i~6#1)); srcloc: null [2025-02-08 02:05:35,302 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8350: assume 0 != vhost_dev_ioctl_~tmp___10~9#1; [2025-02-08 02:05:35,302 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8350: assume !(0 != vhost_dev_ioctl_~tmp___10~9#1);call vhost_dev_ioctl_#t~mem342#1.base, vhost_dev_ioctl_#t~mem342#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 184 + vhost_dev_ioctl_~d#1.offset, 8); [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8383: havoc vhost_dev_ioctl_#t~mem350#1.base, vhost_dev_ioctl_#t~mem350#1.offset;vhost_dev_ioctl_~i~6#1 := 1 + vhost_dev_ioctl_~i~6#1; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13470-1: SUMMARY for call mutex_unlock(vhost_net_set_backend_~n#1.base, 16 + vhost_net_set_backend_~n#1.offset); srcloc: null [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8251: assume vhost_dev_ioctl_#t~mem332#1 % 18446744073709551616 != vhost_dev_ioctl_#t~mem333#1 % 18446744073709551616;havoc vhost_dev_ioctl_#t~mem332#1;havoc vhost_dev_ioctl_#t~mem333#1;vhost_dev_ioctl_~r~2#1 := -14; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8251: assume !(vhost_dev_ioctl_#t~mem332#1 % 18446744073709551616 != vhost_dev_ioctl_#t~mem333#1 % 18446744073709551616);havoc vhost_dev_ioctl_#t~mem332#1;havoc vhost_dev_ioctl_#t~mem333#1;vhost_dev_ioctl_~i~6#1 := 0; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13470: vhost_net_set_backend_#res#1 := 0; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13569: call write~int#16(vhost_net_set_features_~vhost_hlen~1#1, vhost_net_set_features_~n#1.base, 17040 + (288 + vhost_net_set_features_~n#1.offset + 17088 * vhost_net_set_features_~i~11#1), 8);call write~int#16(vhost_net_set_features_~sock_hlen~1#1, vhost_net_set_features_~n#1.base, 17048 + (288 + vhost_net_set_features_~n#1.offset + 17088 * vhost_net_set_features_~i~11#1), 8); [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13569-1: SUMMARY for call mutex_lock_nested(vhost_net_set_features_~n#1.base, 8 + (288 + vhost_net_set_features_~n#1.offset + 17088 * vhost_net_set_features_~i~11#1), 0); srcloc: null [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8119: assume (vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616 != (vhost_set_vring_#t~mem320#1.base + vhost_set_vring_#t~mem320#1.offset) % 18446744073709551616;havoc vhost_set_vring_#t~mem320#1.base, vhost_set_vring_#t~mem320#1.offset;call vhost_set_vring_#t~mem321#1.base, vhost_set_vring_#t~mem321#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 204 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_#t~mem321#1.base, vhost_set_vring_#t~mem321#1.offset;havoc vhost_set_vring_#t~mem321#1.base, vhost_set_vring_#t~mem321#1.offset;call write~$Pointer$#16(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~vq~0#1.base, 204 + vhost_set_vring_~vq~0#1.offset, 8);call vhost_set_vring_#t~mem322#1.base, vhost_set_vring_#t~mem322#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 220 + vhost_set_vring_~vq~0#1.offset, 8);vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset := vhost_set_vring_#t~mem322#1.base, vhost_set_vring_#t~mem322#1.offset;havoc vhost_set_vring_#t~mem322#1.base, vhost_set_vring_#t~mem322#1.offset; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8119: assume !((vhost_set_vring_~eventfp~0#1.base + vhost_set_vring_~eventfp~0#1.offset) % 18446744073709551616 != (vhost_set_vring_#t~mem320#1.base + vhost_set_vring_#t~mem320#1.offset) % 18446744073709551616);havoc vhost_set_vring_#t~mem320#1.base, vhost_set_vring_#t~mem320#1.offset;vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset := vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8152: SUMMARY for call eventfd_ctx_put(vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset); srcloc: null [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7987-1: call vhost_set_vring_#t~mem289#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8);assume { :begin_inline_init_used } true;init_used_#in~vq#1.base, init_used_#in~vq#1.offset, init_used_#in~used#1.base, init_used_#in~used#1.offset := vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset, 0, (if vhost_set_vring_#t~mem289#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem289#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem289#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);havoc init_used_#res#1;havoc init_used_#t~mem244#1, init_used_~vq#1.base, init_used_~vq#1.offset, init_used_~used#1.base, init_used_~used#1.offset, init_used_~r~0#1, init_used_~__ret_pu~0#1, init_used_~__pu_val~0#1, init_used_~__ret_gu~0#1, init_used_~__val_gu~0#1;init_used_~vq#1.base, init_used_~vq#1.offset := init_used_#in~vq#1.base, init_used_#in~vq#1.offset;init_used_~used#1.base, init_used_~used#1.offset := init_used_#in~used#1.base, init_used_#in~used#1.offset;havoc init_used_~r~0#1;havoc init_used_~__ret_pu~0#1;havoc init_used_~__pu_val~0#1;havoc init_used_~__ret_gu~0#1;havoc init_used_~__val_gu~0#1; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8020-1: SUMMARY for call vhost_set_vring_#t~ret300#1 := IS_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7987: vhost_set_vring_#t~ret290#1 := init_used_#res#1;havoc init_used_#t~mem244#1, init_used_~vq#1.base, init_used_~vq#1.offset, init_used_~used#1.base, init_used_~used#1.offset, init_used_~r~0#1, init_used_~__ret_pu~0#1, init_used_~__pu_val~0#1, init_used_~__ret_gu~0#1, init_used_~__val_gu~0#1;havoc init_used_#in~vq#1.base, init_used_#in~vq#1.offset, init_used_#in~used#1.base, init_used_#in~used#1.offset;assume { :end_inline_init_used } true;assume -2147483648 <= vhost_set_vring_#t~ret290#1 && vhost_set_vring_#t~ret290#1 <= 2147483647;vhost_set_vring_~tmp___13~4#1 := vhost_set_vring_#t~ret290#1;havoc vhost_set_vring_#t~mem289#1;havoc vhost_set_vring_#t~ret290#1;vhost_set_vring_~r~1#1 := vhost_set_vring_~tmp___13~4#1; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8020: assume -9223372036854775808 <= vhost_set_vring_#t~ret300#1 && vhost_set_vring_#t~ret300#1 <= 9223372036854775807;vhost_set_vring_~tmp___30~0#1 := vhost_set_vring_#t~ret300#1;havoc vhost_set_vring_#t~ret300#1;vhost_set_vring_~tmp___16~2#1 := vhost_set_vring_~tmp___30~0#1; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7855: assume vhost_set_vring_#t~mem247#1.base != 0 || vhost_set_vring_#t~mem247#1.offset != 0;havoc vhost_set_vring_#t~mem247#1.base, vhost_set_vring_#t~mem247#1.offset;vhost_set_vring_~r~1#1 := -16; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7855: assume !(vhost_set_vring_#t~mem247#1.base != 0 || vhost_set_vring_#t~mem247#1.offset != 0);havoc vhost_set_vring_#t~mem247#1.base, vhost_set_vring_#t~mem247#1.offset; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13999-2: kthread_create_on_node_#res#1.base, kthread_create_on_node_#res#1.offset := kthread_create_on_node_#t~ret975#1.base, kthread_create_on_node_#t~ret975#1.offset;havoc kthread_create_on_node_#t~ret975#1.base, kthread_create_on_node_#t~ret975#1.offset; [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14032-3: SUMMARY for call macvtap_get_socket_#t~ret980#1.base, macvtap_get_socket_#t~ret980#1.offset := ldv_malloc(46); srcloc: null [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13999-3: SUMMARY for call kthread_create_on_node_#t~ret975#1.base, kthread_create_on_node_#t~ret975#1.offset := ldv_malloc(10473); srcloc: null [2025-02-08 02:05:35,303 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7690: assume false; [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7690: assume !false; [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13999: havoc kthread_create_on_node_#t~ret975#1.base, kthread_create_on_node_#t~ret975#1.offset;vhost_dev_set_owner_#t~ret130#1.base, vhost_dev_set_owner_#t~ret130#1.offset := kthread_create_on_node_#res#1.base, kthread_create_on_node_#res#1.offset;havoc kthread_create_on_node_#t~ret975#1.base, kthread_create_on_node_#t~ret975#1.offset, kthread_create_on_node_~arg0#1.base, kthread_create_on_node_~arg0#1.offset, kthread_create_on_node_~arg1#1.base, kthread_create_on_node_~arg1#1.offset, kthread_create_on_node_~arg2#1, kthread_create_on_node_~arg3#1.base, kthread_create_on_node_~arg3#1.offset;havoc kthread_create_on_node_#in~arg0#1.base, kthread_create_on_node_#in~arg0#1.offset, kthread_create_on_node_#in~arg1#1.base, kthread_create_on_node_#in~arg1#1.offset, kthread_create_on_node_#in~arg2#1, kthread_create_on_node_#in~arg3#1.base, kthread_create_on_node_#in~arg3#1.offset;assume { :end_inline_kthread_create_on_node } true;vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset := vhost_dev_set_owner_#t~ret130#1.base, vhost_dev_set_owner_#t~ret130#1.offset;havoc vhost_dev_set_owner_#t~mem129#1;havoc vhost_dev_set_owner_#t~ret130#1.base, vhost_dev_set_owner_#t~ret130#1.offset; [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14032-2: macvtap_get_socket_#res#1.base, macvtap_get_socket_#res#1.offset := macvtap_get_socket_#t~ret980#1.base, macvtap_get_socket_#t~ret980#1.offset;havoc macvtap_get_socket_#t~ret980#1.base, macvtap_get_socket_#t~ret980#1.offset; [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14032: havoc macvtap_get_socket_#t~ret980#1.base, macvtap_get_socket_#t~ret980#1.offset;get_tap_socket_#t~ret906#1.base, get_tap_socket_#t~ret906#1.offset := macvtap_get_socket_#res#1.base, macvtap_get_socket_#res#1.offset;havoc macvtap_get_socket_#t~ret980#1.base, macvtap_get_socket_#t~ret980#1.offset, macvtap_get_socket_~arg0#1.base, macvtap_get_socket_~arg0#1.offset;havoc macvtap_get_socket_#in~arg0#1.base, macvtap_get_socket_#in~arg0#1.offset;assume { :end_inline_macvtap_get_socket } true;get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset := get_tap_socket_#t~ret906#1.base, get_tap_socket_#t~ret906#1.offset;havoc get_tap_socket_#t~ret906#1.base, get_tap_socket_#t~ret906#1.offset; [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7591: assume 0 != vhost_set_memory_~tmp___12~4#1; [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7591: assume !(0 != vhost_set_memory_~tmp___12~4#1); [2025-02-08 02:05:35,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13339: assume -1 == get_socket_~fd#1;get_socket_#res#1.base, get_socket_#res#1.offset := 0, 0; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13339: assume !(-1 == get_socket_~fd#1);assume { :begin_inline_get_raw_socket } true;get_raw_socket_#in~fd#1 := get_socket_~fd#1;havoc get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset;havoc get_raw_socket_#t~ret888#1.base, get_raw_socket_#t~ret888#1.offset, get_raw_socket_#t~ret889#1.base, get_raw_socket_#t~ret889#1.offset, get_raw_socket_#t~mem890#1.base, get_raw_socket_#t~mem890#1.offset, get_raw_socket_#t~mem891#1, get_raw_socket_#t~mem894#1.base, get_raw_socket_#t~mem894#1.offset, get_raw_socket_#t~mem895#1.base, get_raw_socket_#t~mem895#1.offset, get_raw_socket_#t~ret896#1, get_raw_socket_#t~mem897#1, get_raw_socket_#t~mem898#1, get_raw_socket_#t~mem899#1.base, get_raw_socket_#t~mem899#1.offset, get_raw_socket_#t~mem900#1, get_raw_socket_#t~ret901#1.base, get_raw_socket_#t~ret901#1.offset, get_raw_socket_~fd#1, get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset, get_raw_socket_~tmp___7~42#1.base, get_raw_socket_~tmp___7~42#1.offset, get_raw_socket_~tmp___8~32#1.base, get_raw_socket_~tmp___8~32#1.offset, get_raw_socket_~tmp___9~24#1.base, get_raw_socket_~tmp___9~24#1.offset, get_raw_socket_~tmp~15#1.base, get_raw_socket_~tmp~15#1.offset, get_raw_socket_~tmp___10~18#1.base, get_raw_socket_~tmp___10~18#1.offset;get_raw_socket_~fd#1 := get_raw_socket_#in~fd#1;call get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset := #Ultimate.allocOnStack(52);call get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset := #Ultimate.allocOnStack(4);call get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset := #Ultimate.allocOnStack(4);havoc get_raw_socket_~sock~4#1.base, get_raw_socket_~sock~4#1.offset;havoc get_raw_socket_~tmp___7~42#1.base, get_raw_socket_~tmp___7~42#1.offset;havoc get_raw_socket_~tmp___8~32#1.base, get_raw_socket_~tmp___8~32#1.offset;havoc get_raw_socket_~tmp___9~24#1.base, get_raw_socket_~tmp___9~24#1.offset;havoc get_raw_socket_~tmp~15#1.base, get_raw_socket_~tmp~15#1.offset;havoc get_raw_socket_~tmp___10~18#1.base, get_raw_socket_~tmp___10~18#1.offset;call write~int#21(52, get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset, 4);assume { :begin_inline_sockfd_lookup } true;sockfd_lookup_#in~arg0#1, sockfd_lookup_#in~arg1#1.base, sockfd_lookup_#in~arg1#1.offset := get_raw_socket_~fd#1, get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset;havoc sockfd_lookup_#res#1.base, sockfd_lookup_#res#1.offset;havoc sockfd_lookup_#t~ret986#1.base, sockfd_lookup_#t~ret986#1.offset, sockfd_lookup_~arg0#1, sockfd_lookup_~arg1#1.base, sockfd_lookup_~arg1#1.offset;sockfd_lookup_~arg0#1 := sockfd_lookup_#in~arg0#1;sockfd_lookup_~arg1#1.base, sockfd_lookup_~arg1#1.offset := sockfd_lookup_#in~arg1#1.base, sockfd_lookup_#in~arg1#1.offset; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7393-1: SUMMARY for call vhost_log_access_ok_#t~ret202#1 := lock_is_held(vhost_log_access_ok_~dev#1.base, 124 + vhost_log_access_ok_~dev#1.offset); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7393: assume -2147483648 <= vhost_log_access_ok_#t~ret202#1 && vhost_log_access_ok_#t~ret202#1 <= 2147483647;vhost_log_access_ok_~tmp___8~10#1 := vhost_log_access_ok_#t~ret202#1;havoc vhost_log_access_ok_#t~ret202#1; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8219-1: SUMMARY for call vhost_dev_ioctl_#t~ret329#1 := vhost_dev_check_owner(vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8219: assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret329#1 && vhost_dev_ioctl_#t~ret329#1 <= 9223372036854775807;vhost_dev_ioctl_~r~2#1 := vhost_dev_ioctl_#t~ret329#1;havoc vhost_dev_ioctl_#t~ret329#1; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13108: assume vhost_net_enable_vq_~sock~2#1.base == 0 && vhost_net_enable_vq_~sock~2#1.offset == 0; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13108: assume !(vhost_net_enable_vq_~sock~2#1.base == 0 && vhost_net_enable_vq_~sock~2#1.offset == 0); [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7922: vhost_set_vring_~tmp___28~0#1 := vhost_set_vring_#t~ret262#1;havoc vhost_set_vring_#t~ret262#1;vhost_set_vring_~tmp___10~8#1 := vhost_set_vring_~tmp___28~0#1; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6997-1: SUMMARY for call vhost_dev_cleanup(vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6997: call write~int#16(0, vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, 4);call write~$Pointer$#16(vhost_dev_reset_owner_~memory~0#1.base, vhost_dev_reset_owner_~memory~0#1.offset, vhost_dev_reset_owner_~dev#1.base, vhost_dev_reset_owner_~dev#1.offset, 8);vhost_dev_reset_owner_#res#1 := 0; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7823: assume vhost_set_vring_~idx~0#1 % 4294967296 >= vhost_set_vring_#t~mem245#1 % 4294967296;havoc vhost_set_vring_#t~mem245#1;vhost_set_vring_#res#1 := -105;call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7823: assume !(vhost_set_vring_~idx~0#1 % 4294967296 >= vhost_set_vring_#t~mem245#1 % 4294967296);havoc vhost_set_vring_#t~mem245#1;call vhost_set_vring_#t~mem246#1.base, vhost_set_vring_#t~mem246#1.offset := read~$Pointer$#16(vhost_set_vring_~d#1.base, 172 + vhost_set_vring_~d#1.offset, 8);vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset := vhost_set_vring_#t~mem246#1.base, vhost_set_vring_#t~mem246#1.offset + 17088 * (if vhost_set_vring_~idx~0#1 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_~idx~0#1 % 4294967296 % 18446744073709551616 else vhost_set_vring_~idx~0#1 % 4294967296 % 18446744073709551616 - 18446744073709551616);havoc vhost_set_vring_#t~mem246#1.base, vhost_set_vring_#t~mem246#1.offset; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7922-1: SUMMARY for call vhost_set_vring_#t~ret262#1 := copy_from_user(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 40); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7592: assume 0 == ~__warned___25~0 % 256; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7592: assume !(0 == ~__warned___25~0 % 256); [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13637: call write~int#16(1023442944, ~#features~0#1.base, ~#features~0#1.offset, 8); [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8352-1: SUMMARY for call vhost_dev_ioctl_#t~ret341#1 := PTR_ERR(vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8352: assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret341#1 && vhost_dev_ioctl_#t~ret341#1 <= 9223372036854775807;vhost_dev_ioctl_~tmp___13~5#1 := vhost_dev_ioctl_#t~ret341#1;havoc vhost_dev_ioctl_#t~ret341#1;vhost_dev_ioctl_~r~2#1 := vhost_dev_ioctl_~tmp___13~5#1; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6932-1: SUMMARY for call vhost_dev_set_owner_#t~ret126#1.base, vhost_dev_set_owner_#t~ret126#1.offset := get_current(); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6932: vhost_dev_set_owner_~tmp___7~7#1.base, vhost_dev_set_owner_~tmp___7~7#1.offset := vhost_dev_set_owner_#t~ret126#1.base, vhost_dev_set_owner_#t~ret126#1.offset;havoc vhost_dev_set_owner_#t~ret126#1.base, vhost_dev_set_owner_#t~ret126#1.offset;assume { :begin_inline_get_task_mm } true;get_task_mm_#in~arg0#1.base, get_task_mm_#in~arg0#1.offset := vhost_dev_set_owner_~tmp___7~7#1.base, vhost_dev_set_owner_~tmp___7~7#1.offset;havoc get_task_mm_#res#1.base, get_task_mm_#res#1.offset;havoc get_task_mm_#t~ret973#1.base, get_task_mm_#t~ret973#1.offset, get_task_mm_~arg0#1.base, get_task_mm_~arg0#1.offset;get_task_mm_~arg0#1.base, get_task_mm_~arg0#1.offset := get_task_mm_#in~arg0#1.base, get_task_mm_#in~arg0#1.offset; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13572-1: SUMMARY for call mutex_unlock(vhost_net_set_features_~n#1.base, 8 + (288 + vhost_net_set_features_~n#1.offset + 17088 * vhost_net_set_features_~i~11#1)); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13506: call vhost_net_reset_owner_#t~mem924#1.base, vhost_net_reset_owner_#t~mem924#1.offset := read~$Pointer$#37(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, 8); [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13638-1: SUMMARY for call #t~ret939#1 := copy_to_user(~featurep~0#1.base, ~featurep~0#1.offset, ~#features~0#1.base, ~#features~0#1.offset, 8); srcloc: null [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13572: vhost_net_set_features_~i~11#1 := 1 + vhost_net_set_features_~i~11#1; [2025-02-08 02:05:35,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7395: assume 0 != vhost_log_access_ok_~tmp___8~10#1; [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7395: assume !(0 != vhost_log_access_ok_~tmp___8~10#1);~__warned___23~0 := 1; [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13638: assume -2147483648 <= #t~ret939#1 && #t~ret939#1 <= 2147483647;~tmp___14~12#1 := #t~ret939#1;havoc #t~ret939#1;~tmp___9~28#1 := ~tmp___14~12#1; [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13506-1: SUMMARY for call mutex_unlock(vhost_net_reset_owner_~n#1.base, 16 + vhost_net_reset_owner_~n#1.offset); srcloc: null [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8221: assume 0 != vhost_dev_ioctl_~r~2#1; [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8221: assume !(0 != vhost_dev_ioctl_~r~2#1); [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7990: assume 0 != vhost_set_vring_~r~1#1; [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7990: assume !(0 != vhost_set_vring_~r~1#1);call vhost_set_vring_#t~mem291#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 4 + vhost_set_vring_~#a~2#1.offset, 4);call write~int#16((if 0 == (if 0 == (if !(0 == vhost_set_vring_#t~mem291#1 % 2 % 4294967296) then 1 else 0) then 0 else 1) % 256 then 0 else 1), vhost_set_vring_~vq~0#1.base, 447 + vhost_set_vring_~vq~0#1.offset, 1);havoc vhost_set_vring_#t~mem291#1;call vhost_set_vring_#t~mem292#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 8 + vhost_set_vring_~#a~2#1.offset, 8);call write~$Pointer$#16(0, (if vhost_set_vring_#t~mem292#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem292#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem292#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), vhost_set_vring_~vq~0#1.base, 164 + vhost_set_vring_~vq~0#1.offset, 8);havoc vhost_set_vring_#t~mem292#1;call vhost_set_vring_#t~mem293#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8);call write~$Pointer$#16(0, (if vhost_set_vring_#t~mem293#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem293#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem293#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), vhost_set_vring_~vq~0#1.base, 172 + vhost_set_vring_~vq~0#1.offset, 8);havoc vhost_set_vring_#t~mem293#1;call vhost_set_vring_#t~mem294#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 32 + vhost_set_vring_~#a~2#1.offset, 8);call write~int#16(vhost_set_vring_#t~mem294#1, vhost_set_vring_~vq~0#1.base, 448 + vhost_set_vring_~vq~0#1.offset, 8);havoc vhost_set_vring_#t~mem294#1;call vhost_set_vring_#t~mem295#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8);call write~$Pointer$#16(0, (if vhost_set_vring_#t~mem295#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_set_vring_#t~mem295#1 % 18446744073709551616 % 18446744073709551616 else vhost_set_vring_#t~mem295#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), vhost_set_vring_~vq~0#1.base, 180 + vhost_set_vring_~vq~0#1.offset, 8);havoc vhost_set_vring_#t~mem295#1; [2025-02-08 02:05:35,306 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8056-1: SUMMARY for call vhost_set_vring_#t~ret307#1.base, vhost_set_vring_#t~ret307#1.offset := eventfd_fget(vhost_set_vring_#t~mem306#1); srcloc: null [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8023: assume 0 != vhost_set_vring_~tmp___16~2#1; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8023: assume !(0 != vhost_set_vring_~tmp___16~2#1);call vhost_set_vring_#t~mem302#1.base, vhost_set_vring_#t~mem302#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 188 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8056: vhost_set_vring_~tmp___19~1#1.base, vhost_set_vring_~tmp___19~1#1.offset := vhost_set_vring_#t~ret307#1.base, vhost_set_vring_#t~ret307#1.offset;havoc vhost_set_vring_#t~mem306#1;havoc vhost_set_vring_#t~ret307#1.base, vhost_set_vring_#t~ret307#1.offset;vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset := vhost_set_vring_~tmp___19~1#1.base, vhost_set_vring_~tmp___19~1#1.offset; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7891-1: SUMMARY for call vhost_set_vring_#t~ret256#1 := copy_from_user(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7891: vhost_set_vring_~tmp___26~0#1 := vhost_set_vring_#t~ret256#1;havoc vhost_set_vring_#t~ret256#1;vhost_set_vring_~tmp___8~14#1 := vhost_set_vring_~tmp___26~0#1; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7957: assume 0 != vhost_set_vring_#t~mem275#1 % 8 % 18446744073709551616;havoc vhost_set_vring_#t~mem275#1;vhost_set_vring_~r~1#1 := -22; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7957: assume !(0 != vhost_set_vring_#t~mem275#1 % 8 % 18446744073709551616);havoc vhost_set_vring_#t~mem275#1;call vhost_set_vring_#t~mem276#1.base, vhost_set_vring_#t~mem276#1.offset := read~$Pointer$#16(vhost_set_vring_~vq~0#1.base, 17064 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7792: assume false; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7792: assume !false;vhost_set_vring_~idx~0#1 := vhost_set_vring_~__val_gu~1#1;vhost_set_vring_~r~1#1 := vhost_set_vring_~__ret_gu~1#1; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7594: assume -2147483648 <= vhost_set_memory_#t~ret242#1 && vhost_set_memory_#t~ret242#1 <= 2147483647;vhost_set_memory_~tmp___13~3#1 := vhost_set_memory_#t~ret242#1;havoc vhost_set_memory_#t~ret242#1; [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7594-1: SUMMARY for call vhost_set_memory_#t~ret242#1 := lock_is_held(vhost_set_memory_~d#1.base, 124 + vhost_set_memory_~d#1.offset); srcloc: null [2025-02-08 02:05:35,307 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13672-1: SUMMARY for call mutex_lock_nested(~n~3#1.base, 16 + ~n~3#1.offset, 0); srcloc: null [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13672: assume { :begin_inline_vhost_dev_ioctl } true;vhost_dev_ioctl_#in~d#1.base, vhost_dev_ioctl_#in~d#1.offset, vhost_dev_ioctl_#in~ioctl#1, vhost_dev_ioctl_#in~arg#1 := ~n~3#1.base, ~n~3#1.offset, ~ioctl#1, ~arg#1;havoc vhost_dev_ioctl_#res#1;havoc vhost_dev_ioctl_#t~ret328#1, vhost_dev_ioctl_#t~ret329#1, vhost_dev_ioctl_#t~ret330#1, vhost_dev_ioctl_#t~ret331#1, vhost_dev_ioctl_#t~mem332#1, vhost_dev_ioctl_#t~mem333#1, vhost_dev_ioctl_#t~mem334#1, vhost_dev_ioctl_#t~mem335#1, vhost_dev_ioctl_#t~mem336#1.base, vhost_dev_ioctl_#t~mem336#1.offset, vhost_dev_ioctl_#t~mem337#1.base, vhost_dev_ioctl_#t~mem337#1.offset, vhost_dev_ioctl_#t~ret338#1, vhost_dev_ioctl_#t~ret339#1.base, vhost_dev_ioctl_#t~ret339#1.offset, vhost_dev_ioctl_#t~ret340#1, vhost_dev_ioctl_#t~ret341#1, vhost_dev_ioctl_#t~mem342#1.base, vhost_dev_ioctl_#t~mem342#1.offset, vhost_dev_ioctl_#t~mem343#1.base, vhost_dev_ioctl_#t~mem343#1.offset, vhost_dev_ioctl_#t~mem344#1.base, vhost_dev_ioctl_#t~mem344#1.offset, vhost_dev_ioctl_#t~ret345#1.base, vhost_dev_ioctl_#t~ret345#1.offset, vhost_dev_ioctl_#t~mem346#1, vhost_dev_ioctl_#t~mem347#1.base, vhost_dev_ioctl_#t~mem347#1.offset, vhost_dev_ioctl_#t~mem348#1.base, vhost_dev_ioctl_#t~mem348#1.offset, vhost_dev_ioctl_#t~mem349#1.base, vhost_dev_ioctl_#t~mem349#1.offset, vhost_dev_ioctl_#t~mem350#1.base, vhost_dev_ioctl_#t~mem350#1.offset, vhost_dev_ioctl_#t~ret351#1, vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~ioctl#1, vhost_dev_ioctl_~arg#1, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset, vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset, vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset, vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset, vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, vhost_dev_ioctl_~r~2#1, vhost_dev_ioctl_~i~6#1, vhost_dev_ioctl_~fd~0#1, vhost_dev_ioctl_~tmp___7~16#1, vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset, vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~tmp___8~15#1, vhost_dev_ioctl_~__ret_gu~2#1, vhost_dev_ioctl_~__val_gu~2#1, vhost_dev_ioctl_~tmp___9~14#1.base, vhost_dev_ioctl_~tmp___9~14#1.offset, vhost_dev_ioctl_~tmp___10~9#1, vhost_dev_ioctl_~tmp___11~7#1.base, vhost_dev_ioctl_~tmp___11~7#1.offset, vhost_dev_ioctl_~tmp~12#1, vhost_dev_ioctl_~tmp___12~6#1, vhost_dev_ioctl_~tmp___13~5#1;vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset := vhost_dev_ioctl_#in~d#1.base, vhost_dev_ioctl_#in~d#1.offset;vhost_dev_ioctl_~ioctl#1 := vhost_dev_ioctl_#in~ioctl#1;vhost_dev_ioctl_~arg#1 := vhost_dev_ioctl_#in~arg#1;havoc vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset;havoc vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset;havoc vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset;havoc vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset;call vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset := #Ultimate.allocOnStack(8);havoc vhost_dev_ioctl_~r~2#1;havoc vhost_dev_ioctl_~i~6#1;havoc vhost_dev_ioctl_~fd~0#1;havoc vhost_dev_ioctl_~tmp___7~16#1;havoc vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset;havoc vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset;havoc vhost_dev_ioctl_~tmp___8~15#1;havoc vhost_dev_ioctl_~__ret_gu~2#1;havoc vhost_dev_ioctl_~__val_gu~2#1;havoc vhost_dev_ioctl_~tmp___9~14#1.base, vhost_dev_ioctl_~tmp___9~14#1.offset;havoc vhost_dev_ioctl_~tmp___10~9#1;havoc vhost_dev_ioctl_~tmp___11~7#1.base, vhost_dev_ioctl_~tmp___11~7#1.offset;havoc vhost_dev_ioctl_~tmp~12#1;havoc vhost_dev_ioctl_~tmp___12~6#1;havoc vhost_dev_ioctl_~tmp___13~5#1;vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset := 0, (if vhost_dev_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset := 0, 0;vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset := 0, 0; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13309: assume -9223372036854775808 <= get_tap_socket_#t~ret905#1 && get_tap_socket_#t~ret905#1 <= 9223372036854775807;get_tap_socket_~tmp___11~17#1 := get_tap_socket_#t~ret905#1;havoc get_tap_socket_#t~ret905#1;get_tap_socket_~tmp___9~25#1 := get_tap_socket_~tmp___11~17#1; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13309-1: SUMMARY for call get_tap_socket_#t~ret905#1 := IS_ERR(get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset); srcloc: null [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8090: vhost_set_vring_~tmp___35~0#1 := vhost_set_vring_#t~ret314#1;havoc vhost_set_vring_#t~ret314#1;vhost_set_vring_~tmp___22~0#1 := vhost_set_vring_~tmp___35~0#1; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8123: assume vhost_set_vring_~eventfp~0#1.base != 0 || vhost_set_vring_~eventfp~0#1.offset != 0; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8123: assume !(vhost_set_vring_~eventfp~0#1.base != 0 || vhost_set_vring_~eventfp~0#1.offset != 0);call write~$Pointer$#16(0, 0, vhost_set_vring_~vq~0#1.base, 220 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8156: assume vhost_set_vring_~filep~0#1.base != 0 || vhost_set_vring_~filep~0#1.offset != 0; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8156: assume !(vhost_set_vring_~filep~0#1.base != 0 || vhost_set_vring_~filep~0#1.offset != 0); [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13408: vhost_net_set_backend_#t~ret915#1.base, vhost_net_set_backend_#t~ret915#1.offset := get_socket_#res#1.base, get_socket_#res#1.offset;havoc get_socket_#t~ret908#1.base, get_socket_#t~ret908#1.offset, get_socket_#t~ret909#1, get_socket_#t~ret910#1.base, get_socket_#t~ret910#1.offset, get_socket_#t~ret911#1, get_socket_#t~ret912#1.base, get_socket_#t~ret912#1.offset, get_socket_~fd#1, get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset, get_socket_~tmp___7~44#1, get_socket_~tmp___8~34#1, get_socket_~tmp___9~26#1.base, get_socket_~tmp___9~26#1.offset, get_socket_~tmp~17#1, get_socket_~tmp___10~20#1, get_socket_~tmp___11~18#1.base, get_socket_~tmp___11~18#1.offset;havoc get_socket_#in~fd#1;assume { :end_inline_get_socket } true;vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset := vhost_net_set_backend_#t~ret915#1.base, vhost_net_set_backend_#t~ret915#1.offset;havoc vhost_net_set_backend_#t~ret915#1.base, vhost_net_set_backend_#t~ret915#1.offset; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6934: vhost_dev_set_owner_~tmp___8~5#1.base, vhost_dev_set_owner_~tmp___8~5#1.offset := vhost_dev_set_owner_#t~ret128#1.base, vhost_dev_set_owner_#t~ret128#1.offset;havoc vhost_dev_set_owner_#t~ret128#1.base, vhost_dev_set_owner_#t~ret128#1.offset;call vhost_dev_set_owner_#t~mem129#1 := read~int#16(vhost_dev_set_owner_~tmp___8~5#1.base, 1149 + vhost_dev_set_owner_~tmp___8~5#1.offset, 4);assume { :begin_inline_kthread_create_on_node } true;kthread_create_on_node_#in~arg0#1.base, kthread_create_on_node_#in~arg0#1.offset, kthread_create_on_node_#in~arg1#1.base, kthread_create_on_node_#in~arg1#1.offset, kthread_create_on_node_#in~arg2#1, kthread_create_on_node_#in~arg3#1.base, kthread_create_on_node_#in~arg3#1.offset := #funAddr~vhost_worker.base, #funAddr~vhost_worker.offset, vhost_dev_set_owner_~dev#1.base, vhost_dev_set_owner_~dev#1.offset, -1, 8, 0;havoc kthread_create_on_node_#res#1.base, kthread_create_on_node_#res#1.offset;havoc kthread_create_on_node_#t~ret975#1.base, kthread_create_on_node_#t~ret975#1.offset, kthread_create_on_node_~arg0#1.base, kthread_create_on_node_~arg0#1.offset, kthread_create_on_node_~arg1#1.base, kthread_create_on_node_~arg1#1.offset, kthread_create_on_node_~arg2#1, kthread_create_on_node_~arg3#1.base, kthread_create_on_node_~arg3#1.offset;kthread_create_on_node_~arg0#1.base, kthread_create_on_node_~arg0#1.offset := kthread_create_on_node_#in~arg0#1.base, kthread_create_on_node_#in~arg0#1.offset;kthread_create_on_node_~arg1#1.base, kthread_create_on_node_~arg1#1.offset := kthread_create_on_node_#in~arg1#1.base, kthread_create_on_node_#in~arg1#1.offset;kthread_create_on_node_~arg2#1 := kthread_create_on_node_#in~arg2#1;kthread_create_on_node_~arg3#1.base, kthread_create_on_node_~arg3#1.offset := kthread_create_on_node_#in~arg3#1.base, kthread_create_on_node_#in~arg3#1.offset; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8090-1: SUMMARY for call vhost_set_vring_#t~ret314#1 := copy_from_user(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6934-1: SUMMARY for call vhost_dev_set_owner_#t~ret128#1.base, vhost_dev_set_owner_#t~ret128#1.offset := get_current(); srcloc: null [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7694: assume false; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7694: assume !false;call write~int#16(init_used_~__val_gu~0#1, init_used_~vq#1.base, 440 + init_used_~vq#1.offset, 2);init_used_#res#1 := init_used_~__ret_gu~0#1; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13475: SUMMARY for call mutex_unlock(vhost_net_set_backend_~vq~6#1.base, 8 + vhost_net_set_backend_~vq~6#1.offset); srcloc: null [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13508: assume vhost_net_reset_owner_#t~mem924#1.base != 0 || vhost_net_reset_owner_#t~mem924#1.offset != 0;havoc vhost_net_reset_owner_#t~mem924#1.base, vhost_net_reset_owner_#t~mem924#1.offset;call vhost_net_reset_owner_#t~mem925#1.base, vhost_net_reset_owner_#t~mem925#1.offset := read~$Pointer$#37(vhost_net_reset_owner_~#tx_sock~1#1.base, vhost_net_reset_owner_~#tx_sock~1#1.offset, 8);call vhost_net_reset_owner_#t~mem926#1.base, vhost_net_reset_owner_#t~mem926#1.offset := read~$Pointer$#16(vhost_net_reset_owner_#t~mem925#1.base, 22 + vhost_net_reset_owner_#t~mem925#1.offset, 8); [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13508: assume !(vhost_net_reset_owner_#t~mem924#1.base != 0 || vhost_net_reset_owner_#t~mem924#1.offset != 0);havoc vhost_net_reset_owner_#t~mem924#1.base, vhost_net_reset_owner_#t~mem924#1.offset; [2025-02-08 02:05:35,308 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13277-2: call get_raw_socket_#t~mem899#1.base, get_raw_socket_#t~mem899#1.offset := read~$Pointer$#16(get_raw_socket_~sock~4#1.base, 22 + get_raw_socket_~sock~4#1.offset, 8); [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13277: havoc get_raw_socket_#t~mem899#1.base, get_raw_socket_#t~mem899#1.offset;call get_raw_socket_#t~mem900#1 := read~int#33(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset, 4); [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13277-1: SUMMARY for call fput(get_raw_socket_#t~mem899#1.base, get_raw_socket_#t~mem899#1.offset); srcloc: null [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13409: assume -9223372036854775808 <= vhost_net_set_backend_#t~ret916#1 && vhost_net_set_backend_#t~ret916#1 <= 9223372036854775807;vhost_net_set_backend_~tmp~18#1 := vhost_net_set_backend_#t~ret916#1;havoc vhost_net_set_backend_#t~ret916#1;vhost_net_set_backend_~tmp___10~21#1 := vhost_net_set_backend_~tmp~18#1; [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13409-1: SUMMARY for call vhost_net_set_backend_#t~ret916#1 := IS_ERR(vhost_net_set_backend_~sock~7#1.base, vhost_net_set_backend_~sock~7#1.offset); srcloc: null [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7926: assume 0 != vhost_set_vring_~tmp___10~8#1 % 18446744073709551616;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7926: assume !(0 != vhost_set_vring_~tmp___10~8#1 % 18446744073709551616);call vhost_set_vring_#t~mem263#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 4 + vhost_set_vring_~#a~2#1.offset, 4); [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6968-1: SUMMARY for call vhost_dev_set_owner_#t~ret136#1 := kthread_stop(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8025-1: SUMMARY for call vhost_set_vring_#t~ret301#1 := PTR_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6968: assume -2147483648 <= vhost_dev_set_owner_#t~ret136#1 && vhost_dev_set_owner_#t~ret136#1 <= 2147483647;havoc vhost_dev_set_owner_#t~ret136#1;call write~$Pointer$#16(0, 0, vhost_dev_set_owner_~dev#1.base, 280 + vhost_dev_set_owner_~dev#1.offset, 8);call vhost_dev_set_owner_#t~mem137#1.base, vhost_dev_set_owner_#t~mem137#1.offset := read~$Pointer$#16(vhost_dev_set_owner_~dev#1.base, 8 + vhost_dev_set_owner_~dev#1.offset, 8); [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8025: assume -9223372036854775808 <= vhost_set_vring_#t~ret301#1 && vhost_set_vring_#t~ret301#1 <= 9223372036854775807;vhost_set_vring_~tmp___31~0#1 := vhost_set_vring_#t~ret301#1;havoc vhost_set_vring_#t~ret301#1;vhost_set_vring_~r~1#1 := vhost_set_vring_~tmp___31~0#1; [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13112: assume (vhost_net_enable_vq_~vq#1.base + vhost_net_enable_vq_~vq#1.offset) % 18446744073709551616 == (vhost_net_enable_vq_~n#1.base + (17376 + vhost_net_enable_vq_~n#1.offset)) % 18446744073709551616;call write~int#16(2, vhost_net_enable_vq_~n#1.base, 34848 + vhost_net_enable_vq_~n#1.offset, 4); [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13112: assume !((vhost_net_enable_vq_~vq#1.base + vhost_net_enable_vq_~vq#1.offset) % 18446744073709551616 == (vhost_net_enable_vq_~n#1.base + (17376 + vhost_net_enable_vq_~n#1.offset)) % 18446744073709551616);call vhost_net_enable_vq_#t~mem874#1.base, vhost_net_enable_vq_#t~mem874#1.offset := read~$Pointer$#16(vhost_net_enable_vq_~sock~2#1.base, 22 + vhost_net_enable_vq_~sock~2#1.offset, 8); [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7563-1: SUMMARY for call vhost_set_memory_#t~ret238#1 := copy_from_user(vhost_set_memory_~newmem~0#1.base, 8 + vhost_set_memory_~newmem~0#1.offset, vhost_set_memory_~m#1.base, 8 + vhost_set_memory_~m#1.offset, 32 * (vhost_set_memory_#t~mem237#1 % 4294967296)); srcloc: null [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7563: vhost_set_memory_~tmp___14~3#1 := vhost_set_memory_#t~ret238#1;havoc vhost_set_memory_#t~mem237#1;havoc vhost_set_memory_#t~ret238#1;vhost_set_memory_~tmp___9~12#1 := vhost_set_memory_~tmp___14~3#1; [2025-02-08 02:05:35,309 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7596: assume 0 != vhost_set_memory_~tmp___13~3#1; [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7596: assume !(0 != vhost_set_memory_~tmp___13~3#1);~__warned___25~0 := 1; [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8158: SUMMARY for call fput(vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset); srcloc: null [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8191: call ULTIMATE.dealloc(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset);havoc vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset;#t~ret946#1 := vhost_dev_ioctl_#res#1;havoc vhost_dev_ioctl_#t~ret328#1, vhost_dev_ioctl_#t~ret329#1, vhost_dev_ioctl_#t~ret330#1, vhost_dev_ioctl_#t~ret331#1, vhost_dev_ioctl_#t~mem332#1, vhost_dev_ioctl_#t~mem333#1, vhost_dev_ioctl_#t~mem334#1, vhost_dev_ioctl_#t~mem335#1, vhost_dev_ioctl_#t~mem336#1.base, vhost_dev_ioctl_#t~mem336#1.offset, vhost_dev_ioctl_#t~mem337#1.base, vhost_dev_ioctl_#t~mem337#1.offset, vhost_dev_ioctl_#t~ret338#1, vhost_dev_ioctl_#t~ret339#1.base, vhost_dev_ioctl_#t~ret339#1.offset, vhost_dev_ioctl_#t~ret340#1, vhost_dev_ioctl_#t~ret341#1, vhost_dev_ioctl_#t~mem342#1.base, vhost_dev_ioctl_#t~mem342#1.offset, vhost_dev_ioctl_#t~mem343#1.base, vhost_dev_ioctl_#t~mem343#1.offset, vhost_dev_ioctl_#t~mem344#1.base, vhost_dev_ioctl_#t~mem344#1.offset, vhost_dev_ioctl_#t~ret345#1.base, vhost_dev_ioctl_#t~ret345#1.offset, vhost_dev_ioctl_#t~mem346#1, vhost_dev_ioctl_#t~mem347#1.base, vhost_dev_ioctl_#t~mem347#1.offset, vhost_dev_ioctl_#t~mem348#1.base, vhost_dev_ioctl_#t~mem348#1.offset, vhost_dev_ioctl_#t~mem349#1.base, vhost_dev_ioctl_#t~mem349#1.offset, vhost_dev_ioctl_#t~mem350#1.base, vhost_dev_ioctl_#t~mem350#1.offset, vhost_dev_ioctl_#t~ret351#1, vhost_dev_ioctl_~d#1.base, vhost_dev_ioctl_~d#1.offset, vhost_dev_ioctl_~ioctl#1, vhost_dev_ioctl_~arg#1, vhost_dev_ioctl_~argp~0#1.base, vhost_dev_ioctl_~argp~0#1.offset, vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset, vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset, vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset, vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, vhost_dev_ioctl_~r~2#1, vhost_dev_ioctl_~i~6#1, vhost_dev_ioctl_~fd~0#1, vhost_dev_ioctl_~tmp___7~16#1, vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset, vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset, vhost_dev_ioctl_~tmp___8~15#1, vhost_dev_ioctl_~__ret_gu~2#1, vhost_dev_ioctl_~__val_gu~2#1, vhost_dev_ioctl_~tmp___9~14#1.base, vhost_dev_ioctl_~tmp___9~14#1.offset, vhost_dev_ioctl_~tmp___10~9#1, vhost_dev_ioctl_~tmp___11~7#1.base, vhost_dev_ioctl_~tmp___11~7#1.offset, vhost_dev_ioctl_~tmp~12#1, vhost_dev_ioctl_~tmp___12~6#1, vhost_dev_ioctl_~tmp___13~5#1;havoc vhost_dev_ioctl_#in~d#1.base, vhost_dev_ioctl_#in~d#1.offset, vhost_dev_ioctl_#in~ioctl#1, vhost_dev_ioctl_#in~arg#1;assume { :end_inline_vhost_dev_ioctl } true;assume -9223372036854775808 <= #t~ret946#1 && #t~ret946#1 <= 9223372036854775807;~tmp___13~14#1 := #t~ret946#1;havoc #t~ret946#1;~r~13#1 := (if ~tmp___13~14#1 % 4294967296 <= 2147483647 then ~tmp___13~14#1 % 4294967296 else ~tmp___13~14#1 % 4294967296 - 4294967296); [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: assume #Ultimate.C_memcpy_#t~loopctr1006#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616;call #Ultimate.C_memcpy_#t~mem1007#1.base, #Ultimate.C_memcpy_#t~mem1007#1.offset := read~unchecked~$Pointer$#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr1006#1, 8);call write~unchecked~$Pointer$#16(#Ultimate.C_memcpy_#t~mem1007#1.base, #Ultimate.C_memcpy_#t~mem1007#1.offset, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr1006#1, 8);#Ultimate.C_memcpy_#t~loopctr1006#1 := 8 + #Ultimate.C_memcpy_#t~loopctr1006#1; [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: assume !(#Ultimate.C_memcpy_#t~loopctr1006#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616);assume #Ultimate.C_memcpy_#res#1.base == #Ultimate.C_memcpy_dest#1.base && #Ultimate.C_memcpy_#res#1.offset == #Ultimate.C_memcpy_dest#1.offset;vhost_set_memory_#t~memcpy~res236#1.base, vhost_set_memory_#t~memcpy~res236#1.offset := #Ultimate.C_memcpy_#res#1.base, #Ultimate.C_memcpy_#res#1.offset;havoc #Ultimate.C_memcpy_#t~loopctr996#1, #Ultimate.C_memcpy_#t~mem997#1, #Ultimate.C_memcpy_#t~mem998#1, #Ultimate.C_memcpy_#t~mem999#1, #Ultimate.C_memcpy_#t~mem1000#1, #Ultimate.C_memcpy_#t~mem1001#1, #Ultimate.C_memcpy_#t~mem1002#1, #Ultimate.C_memcpy_#t~mem1003#1, #Ultimate.C_memcpy_#t~mem1004#1, #Ultimate.C_memcpy_#t~mem1005#1, #Ultimate.C_memcpy_#t~loopctr1006#1, #Ultimate.C_memcpy_#t~mem1007#1.base, #Ultimate.C_memcpy_#t~mem1007#1.offset;havoc #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset, #Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset, #Ultimate.C_memcpy_size#1;assume { :end_inline_#Ultimate.C_memcpy } true;vhost_set_memory_~__ret~0#1.base, vhost_set_memory_~__ret~0#1.offset := vhost_set_memory_#t~memcpy~res236#1.base, vhost_set_memory_#t~memcpy~res236#1.offset;havoc vhost_set_memory_#t~memcpy~res236#1.base, vhost_set_memory_#t~memcpy~res236#1.offset;call vhost_set_memory_#t~mem237#1 := read~int#16(vhost_set_memory_~#mem~0#1.base, vhost_set_memory_~#mem~0#1.offset, 4); [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13278-1: SUMMARY for call get_raw_socket_#t~ret901#1.base, get_raw_socket_#t~ret901#1.offset := ERR_PTR(get_raw_socket_#t~mem900#1); srcloc: null [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: assume #Ultimate.C_memcpy_#t~loopctr996#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616;call #Ultimate.C_memcpy_#t~mem997#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 4);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem997#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 4);call #Ultimate.C_memcpy_#t~mem998#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 1);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem998#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 1);call #Ultimate.C_memcpy_#t~mem999#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 8);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem999#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 8);call #Ultimate.C_memcpy_#t~mem1000#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 1);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem1000#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 1);call #Ultimate.C_memcpy_#t~mem1001#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 4);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem1001#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 4);call #Ultimate.C_memcpy_#t~mem1002#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 2);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem1002#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 2);call #Ultimate.C_memcpy_#t~mem1003#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 8);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem1003#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 8);call #Ultimate.C_memcpy_#t~mem1004#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 8);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem1004#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 8);call #Ultimate.C_memcpy_#t~mem1005#1 := read~unchecked~int#16(#Ultimate.C_memcpy_src#1.base, #Ultimate.C_memcpy_src#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 1);call write~unchecked~int#16(#Ultimate.C_memcpy_#t~mem1005#1, #Ultimate.C_memcpy_dest#1.base, #Ultimate.C_memcpy_dest#1.offset + #Ultimate.C_memcpy_#t~loopctr996#1, 1);#Ultimate.C_memcpy_#t~loopctr996#1 := 1 + #Ultimate.C_memcpy_#t~loopctr996#1; [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: assume !(#Ultimate.C_memcpy_#t~loopctr996#1 % 18446744073709551616 < #Ultimate.C_memcpy_size#1 % 18446744073709551616);#Ultimate.C_memcpy_#t~loopctr1006#1 := 0; [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13278: get_raw_socket_~tmp___10~18#1.base, get_raw_socket_~tmp___10~18#1.offset := get_raw_socket_#t~ret901#1.base, get_raw_socket_#t~ret901#1.offset;havoc get_raw_socket_#t~mem900#1;havoc get_raw_socket_#t~ret901#1.base, get_raw_socket_#t~ret901#1.offset;get_raw_socket_~tmp___9~24#1.base, get_raw_socket_~tmp___9~24#1.offset := get_raw_socket_~tmp___10~18#1.base, get_raw_socket_~tmp___10~18#1.offset;get_raw_socket_#res#1.base, get_raw_socket_#res#1.offset := get_raw_socket_~tmp___9~24#1.base, get_raw_socket_~tmp___9~24#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset);havoc get_raw_socket_~#uaddr~0#1.base, get_raw_socket_~#uaddr~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset);havoc get_raw_socket_~#uaddr_len~0#1.base, get_raw_socket_~#uaddr_len~0#1.offset;call ULTIMATE.dealloc(get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset);havoc get_raw_socket_~#r~11#1.base, get_raw_socket_~#r~11#1.offset; [2025-02-08 02:05:35,310 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8125-1: SUMMARY for call vhost_set_vring_#t~ret323#1.base, vhost_set_vring_#t~ret323#1.offset := eventfd_ctx_fileget(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,311 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8125: vhost_set_vring_~tmp___25~0#1.base, vhost_set_vring_~tmp___25~0#1.offset := vhost_set_vring_#t~ret323#1.base, vhost_set_vring_#t~ret323#1.offset;havoc vhost_set_vring_#t~ret323#1.base, vhost_set_vring_#t~ret323#1.offset;call write~$Pointer$#16(vhost_set_vring_~tmp___25~0#1.base, vhost_set_vring_~tmp___25~0#1.offset, vhost_set_vring_~vq~0#1.base, 220 + vhost_set_vring_~vq~0#1.offset, 8); [2025-02-08 02:05:35,311 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6936-1: SUMMARY for call vhost_dev_set_owner_#t~ret131#1 := IS_ERR(vhost_dev_set_owner_~worker~0#1.base, vhost_dev_set_owner_~worker~0#1.offset); srcloc: null [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6936: assume -9223372036854775808 <= vhost_dev_set_owner_#t~ret131#1 && vhost_dev_set_owner_#t~ret131#1 <= 9223372036854775807;vhost_dev_set_owner_~tmp~9#1 := vhost_dev_set_owner_#t~ret131#1;havoc vhost_dev_set_owner_#t~ret131#1;vhost_dev_set_owner_~tmp___10~2#1 := vhost_dev_set_owner_~tmp~9#1; [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6738: assume true; [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6738: assume !true;vhost_dev_alloc_iovecs_#res#1 := -12; [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7861-1: SUMMARY for call vhost_set_vring_#t~ret248#1 := copy_from_user(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, 8); srcloc: null [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7861: vhost_set_vring_~tmp~11#1 := vhost_set_vring_#t~ret248#1;havoc vhost_set_vring_#t~ret248#1;vhost_set_vring_~tmp___7~15#1 := vhost_set_vring_~tmp~11#1; [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13080: assume true; [2025-02-08 02:05:35,312 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13080: assume !true;call vhost_net_enable_vq_#t~mem873#1.base, vhost_net_enable_vq_#t~mem873#1.offset := read~$Pointer$#16(vhost_net_enable_vq_~vq#1.base, 17064 + vhost_net_enable_vq_~vq#1.offset, 8);vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset := vhost_net_enable_vq_#t~mem873#1.base, vhost_net_enable_vq_#t~mem873#1.offset; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13675: SUMMARY for call vhost_net_flush(~n~3#1.base, ~n~3#1.offset); srcloc: null [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13642: assume 0 != ~tmp___9~28#1;#res#1 := -14;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13642: assume !(0 != ~tmp___9~28#1);#res#1 := 0;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8390: assume vhost_dev_ioctl_~ctx~1#1.base != 0 || vhost_dev_ioctl_~ctx~1#1.offset != 0; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8390: assume !(vhost_dev_ioctl_~ctx~1#1.base != 0 || vhost_dev_ioctl_~ctx~1#1.offset != 0); [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7399: SUMMARY for call lockdep_rcu_dereference(11, 0, 517); srcloc: null [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13510-1: SUMMARY for call fput(vhost_net_reset_owner_#t~mem926#1.base, vhost_net_reset_owner_#t~mem926#1.offset); srcloc: null [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8258: assume true;call vhost_dev_ioctl_#t~mem334#1 := read~int#16(vhost_dev_ioctl_~d#1.base, 180 + vhost_dev_ioctl_~d#1.offset, 4); [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8258: assume !true; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13543: SUMMARY for call mutex_lock_nested(vhost_net_set_features_~n#1.base, 16 + vhost_net_set_features_~n#1.offset, 0); srcloc: null [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13510: havoc vhost_net_reset_owner_#t~mem925#1.base, vhost_net_reset_owner_#t~mem925#1.offset;havoc vhost_net_reset_owner_#t~mem926#1.base, vhost_net_reset_owner_#t~mem926#1.offset; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8225: assume 1074310915 == (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296) % 18446744073709551616; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8225: assume !(1074310915 == (if vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 <= 2147483647 then vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 else vhost_dev_ioctl_~ioctl#1 % 4294967296 % 4294967296 - 4294967296) % 18446744073709551616); [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13345: assume -9223372036854775808 <= get_socket_#t~ret909#1 && get_socket_#t~ret909#1 <= 9223372036854775807;get_socket_~tmp~17#1 := get_socket_#t~ret909#1;havoc get_socket_#t~ret909#1;get_socket_~tmp___7~44#1 := get_socket_~tmp~17#1; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13312: assume !(0 != get_tap_socket_~tmp___9~25#1);get_tap_socket_#res#1.base, get_tap_socket_#res#1.offset := get_tap_socket_~sock~5#1.base, get_tap_socket_~sock~5#1.offset; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13312: assume 0 != get_tap_socket_~tmp___9~25#1;assume { :begin_inline_macvtap_get_socket } true;macvtap_get_socket_#in~arg0#1.base, macvtap_get_socket_#in~arg0#1.offset := get_tap_socket_~file~0#1.base, get_tap_socket_~file~0#1.offset;havoc macvtap_get_socket_#res#1.base, macvtap_get_socket_#res#1.offset;havoc macvtap_get_socket_#t~ret980#1.base, macvtap_get_socket_#t~ret980#1.offset, macvtap_get_socket_~arg0#1.base, macvtap_get_socket_~arg0#1.offset;macvtap_get_socket_~arg0#1.base, macvtap_get_socket_~arg0#1.offset := macvtap_get_socket_#in~arg0#1.base, macvtap_get_socket_#in~arg0#1.offset; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13345-1: SUMMARY for call get_socket_#t~ret909#1 := IS_ERR(get_socket_~sock~6#1.base, get_socket_~sock~6#1.offset); srcloc: null [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7895: assume 0 != vhost_set_vring_~tmp___8~14#1 % 18446744073709551616;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7895: assume !(0 != vhost_set_vring_~tmp___8~14#1 % 18446744073709551616);call vhost_set_vring_#t~mem257#1 := read~int#16(vhost_set_vring_~#s~3#1.base, 4 + vhost_set_vring_~#s~3#1.offset, 4); [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6706: assume true;call vhost_dev_alloc_iovecs_#t~mem69#1 := read~int#16(vhost_dev_alloc_iovecs_~dev#1.base, 180 + vhost_dev_alloc_iovecs_~dev#1.offset, 4); [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6706: assume !true;vhost_dev_alloc_iovecs_#res#1 := 0; [2025-02-08 02:05:35,313 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7829: SUMMARY for call mutex_lock_nested(vhost_set_vring_~vq~0#1.base, 8 + vhost_set_vring_~vq~0#1.offset, 0); srcloc: null [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13676-1: SUMMARY for call mutex_unlock(~n~3#1.base, 16 + ~n~3#1.offset); srcloc: null [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7631-1: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7631: call init_used_#t~mem244#1 := read~int#16(init_used_~vq#1.base, 442 + init_used_~vq#1.offset, 2);init_used_~__pu_val~0#1 := init_used_#t~mem244#1;havoc init_used_#t~mem244#1; [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13676: #res#1 := ~r~13#1;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7499-1: SUMMARY for call vhost_vq_access_ok_#t~ret224#1 := vq_access_ok(vhost_vq_access_ok_#t~mem219#1.base, vhost_vq_access_ok_#t~mem219#1.offset, vhost_vq_access_ok_#t~mem220#1, vhost_vq_access_ok_#t~mem221#1.base, vhost_vq_access_ok_#t~mem221#1.offset, vhost_vq_access_ok_#t~mem222#1.base, vhost_vq_access_ok_#t~mem222#1.offset, vhost_vq_access_ok_#t~mem223#1.base, vhost_vq_access_ok_#t~mem223#1.offset); srcloc: null [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7499: assume -2147483648 <= vhost_vq_access_ok_#t~ret224#1 && vhost_vq_access_ok_#t~ret224#1 <= 2147483647;vhost_vq_access_ok_~tmp___7~13#1 := vhost_vq_access_ok_#t~ret224#1;havoc vhost_vq_access_ok_#t~mem219#1.base, vhost_vq_access_ok_#t~mem219#1.offset;havoc vhost_vq_access_ok_#t~mem220#1;havoc vhost_vq_access_ok_#t~mem221#1.base, vhost_vq_access_ok_#t~mem221#1.offset;havoc vhost_vq_access_ok_#t~mem222#1.base, vhost_vq_access_ok_#t~mem222#1.offset;havoc vhost_vq_access_ok_#t~mem223#1.base, vhost_vq_access_ok_#t~mem223#1.offset;havoc vhost_vq_access_ok_#t~ret224#1; [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8358: assume (vhost_dev_ioctl_~eventfp~1#1.base + vhost_dev_ioctl_~eventfp~1#1.offset) % 18446744073709551616 != (vhost_dev_ioctl_#t~mem342#1.base + vhost_dev_ioctl_#t~mem342#1.offset) % 18446744073709551616;havoc vhost_dev_ioctl_#t~mem342#1.base, vhost_dev_ioctl_#t~mem342#1.offset;call vhost_dev_ioctl_#t~mem343#1.base, vhost_dev_ioctl_#t~mem343#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 184 + vhost_dev_ioctl_~d#1.offset, 8);vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset := vhost_dev_ioctl_#t~mem343#1.base, vhost_dev_ioctl_#t~mem343#1.offset;havoc vhost_dev_ioctl_#t~mem343#1.base, vhost_dev_ioctl_#t~mem343#1.offset;call vhost_dev_ioctl_#t~mem344#1.base, vhost_dev_ioctl_#t~mem344#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 192 + vhost_dev_ioctl_~d#1.offset, 8);vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset := vhost_dev_ioctl_#t~mem344#1.base, vhost_dev_ioctl_#t~mem344#1.offset;havoc vhost_dev_ioctl_#t~mem344#1.base, vhost_dev_ioctl_#t~mem344#1.offset; [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8358: assume !((vhost_dev_ioctl_~eventfp~1#1.base + vhost_dev_ioctl_~eventfp~1#1.offset) % 18446744073709551616 != (vhost_dev_ioctl_#t~mem342#1.base + vhost_dev_ioctl_#t~mem342#1.offset) % 18446744073709551616);havoc vhost_dev_ioctl_#t~mem342#1.base, vhost_dev_ioctl_#t~mem342#1.offset;vhost_dev_ioctl_~filep~1#1.base, vhost_dev_ioctl_~filep~1#1.offset := vhost_dev_ioctl_~eventfp~1#1.base, vhost_dev_ioctl_~eventfp~1#1.offset; [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13412: assume 0 != vhost_net_set_backend_~tmp___10~21#1; [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13412: assume !(0 != vhost_net_set_backend_~tmp___10~21#1); [2025-02-08 02:05:35,314 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8292: SUMMARY for call might_fault(); srcloc: null [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8094: assume 0 != vhost_set_vring_~tmp___22~0#1 % 18446744073709551616;vhost_set_vring_~r~1#1 := -14; [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8094: assume !(0 != vhost_set_vring_~tmp___22~0#1 % 18446744073709551616);call vhost_set_vring_#t~mem315#1 := read~int#16(vhost_set_vring_~#f~0#1.base, 4 + vhost_set_vring_~#f~0#1.offset, 4); [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13115: SUMMARY for call tx_poll_start(vhost_net_enable_vq_~n#1.base, vhost_net_enable_vq_~n#1.offset, vhost_net_enable_vq_~sock~2#1.base, vhost_net_enable_vq_~sock~2#1.offset); srcloc: null [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7962: assume vhost_set_vring_#t~mem276#1.base != 0 || vhost_set_vring_#t~mem276#1.offset != 0;havoc vhost_set_vring_#t~mem276#1.base, vhost_set_vring_#t~mem276#1.offset;call vhost_set_vring_#t~mem277#1 := read~int#16(vhost_set_vring_~vq~0#1.base, 160 + vhost_set_vring_~vq~0#1.offset, 4);call vhost_set_vring_#t~mem278#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 8 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem279#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 24 + vhost_set_vring_~#a~2#1.offset, 8);call vhost_set_vring_#t~mem280#1 := read~int#16(vhost_set_vring_~#a~2#1.base, 16 + vhost_set_vring_~#a~2#1.offset, 8); [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7962: assume !(vhost_set_vring_#t~mem276#1.base != 0 || vhost_set_vring_#t~mem276#1.offset != 0);havoc vhost_set_vring_#t~mem276#1.base, vhost_set_vring_#t~mem276#1.offset; [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8061-1: SUMMARY for call vhost_set_vring_#t~ret308#1 := IS_ERR(vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset); srcloc: null [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8061: assume -9223372036854775808 <= vhost_set_vring_#t~ret308#1 && vhost_set_vring_#t~ret308#1 <= 9223372036854775807;vhost_set_vring_~tmp___33~0#1 := vhost_set_vring_#t~ret308#1;havoc vhost_set_vring_#t~ret308#1;vhost_set_vring_~tmp___20~0#1 := vhost_set_vring_~tmp___33~0#1; [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7731: call ULTIMATE.dealloc(vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset);havoc vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset);havoc vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset;call ULTIMATE.dealloc(vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset);havoc vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset;vhost_dev_ioctl_#t~ret351#1 := vhost_set_vring_#res#1;havoc vhost_set_vring_#t~mem245#1, vhost_set_vring_#t~mem246#1.base, vhost_set_vring_#t~mem246#1.offset, vhost_set_vring_#t~mem247#1.base, vhost_set_vring_#t~mem247#1.offset, vhost_set_vring_#t~ret248#1, vhost_set_vring_#t~mem249#1, vhost_set_vring_#t~mem250#1, vhost_set_vring_#t~mem252#1, vhost_set_vring_#t~mem251#1, vhost_set_vring_#t~bitwise253#1, vhost_set_vring_#t~mem254#1, vhost_set_vring_#t~mem255#1.base, vhost_set_vring_#t~mem255#1.offset, vhost_set_vring_#t~ret256#1, vhost_set_vring_#t~mem257#1, vhost_set_vring_#t~mem258#1, vhost_set_vring_#t~mem259#1, vhost_set_vring_#t~mem260#1, vhost_set_vring_#t~ret261#1, vhost_set_vring_#t~ret262#1, vhost_set_vring_#t~mem263#1, vhost_set_vring_#t~mem264#1, vhost_set_vring_#t~mem265#1, vhost_set_vring_#t~mem266#1, vhost_set_vring_#t~mem267#1, vhost_set_vring_#t~mem268#1, vhost_set_vring_#t~mem269#1, vhost_set_vring_#t~mem271#1, vhost_set_vring_#t~mem273#1, vhost_set_vring_#t~mem275#1, vhost_set_vring_#t~mem276#1.base, vhost_set_vring_#t~mem276#1.offset, vhost_set_vring_#t~mem277#1, vhost_set_vring_#t~mem278#1, vhost_set_vring_#t~mem279#1, vhost_set_vring_#t~mem280#1, vhost_set_vring_#t~ret281#1, vhost_set_vring_#t~mem282#1, vhost_set_vring_#t~mem283#1.base, vhost_set_vring_#t~mem283#1.offset, vhost_set_vring_#t~mem284#1, vhost_set_vring_#t~mem286#1, vhost_set_vring_#t~ret288#1, vhost_set_vring_#t~mem289#1, vhost_set_vring_#t~ret290#1, vhost_set_vring_#t~mem291#1, vhost_set_vring_#t~mem292#1, vhost_set_vring_#t~mem293#1, vhost_set_vring_#t~mem294#1, vhost_set_vring_#t~mem295#1, vhost_set_vring_#t~ret296#1, vhost_set_vring_#t~mem297#1, vhost_set_vring_#t~mem298#1, vhost_set_vring_#t~ret299#1.base, vhost_set_vring_#t~ret299#1.offset, vhost_set_vring_#t~ret300#1, vhost_set_vring_#t~ret301#1, vhost_set_vring_#t~mem302#1.base, vhost_set_vring_#t~mem302#1.offset, vhost_set_vring_#t~mem303#1.base, vhost_set_vring_#t~mem303#1.offset, vhost_set_vring_#t~ret304#1, vhost_set_vring_#t~mem305#1, vhost_set_vring_#t~mem306#1, vhost_set_vring_#t~ret307#1.base, vhost_set_vring_#t~ret307#1.offset, vhost_set_vring_#t~ret308#1, vhost_set_vring_#t~ret309#1, vhost_set_vring_#t~mem310#1.base, vhost_set_vring_#t~mem310#1.offset, vhost_set_vring_#t~mem311#1.base, vhost_set_vring_#t~mem311#1.offset, vhost_set_vring_#t~mem312#1.base, vhost_set_vring_#t~mem312#1.offset, vhost_set_vring_#t~ret313#1.base, vhost_set_vring_#t~ret313#1.offset, vhost_set_vring_#t~ret314#1, vhost_set_vring_#t~mem315#1, vhost_set_vring_#t~mem316#1, vhost_set_vring_#t~ret317#1.base, vhost_set_vring_#t~ret317#1.offset, vhost_set_vring_#t~ret318#1, vhost_set_vring_#t~ret319#1, vhost_set_vring_#t~mem320#1.base, vhost_set_vring_#t~mem320#1.offset, vhost_set_vring_#t~mem321#1.base, vhost_set_vring_#t~mem321#1.offset, vhost_set_vring_#t~mem322#1.base, vhost_set_vring_#t~mem322#1.offset, vhost_set_vring_#t~ret323#1.base, vhost_set_vring_#t~ret323#1.offset, vhost_set_vring_#t~mem324#1.base, vhost_set_vring_#t~mem324#1.offset, vhost_set_vring_#t~mem325#1.base, vhost_set_vring_#t~mem325#1.offset, vhost_set_vring_#t~mem326#1.base, vhost_set_vring_#t~mem326#1.offset, vhost_set_vring_#t~mem327#1.base, vhost_set_vring_#t~mem327#1.offset, vhost_set_vring_~d#1.base, vhost_set_vring_~d#1.offset, vhost_set_vring_~ioctl#1, vhost_set_vring_~argp#1.base, vhost_set_vring_~argp#1.offset, vhost_set_vring_~eventfp~0#1.base, vhost_set_vring_~eventfp~0#1.offset, vhost_set_vring_~filep~0#1.base, vhost_set_vring_~filep~0#1.offset, vhost_set_vring_~pollstart~0#1.base, vhost_set_vring_~pollstart~0#1.offset, vhost_set_vring_~pollstop~0#1.base, vhost_set_vring_~pollstop~0#1.offset, vhost_set_vring_~ctx~0#1.base, vhost_set_vring_~ctx~0#1.offset, vhost_set_vring_~idxp~0#1.base, vhost_set_vring_~idxp~0#1.offset, vhost_set_vring_~vq~0#1.base, vhost_set_vring_~vq~0#1.offset, vhost_set_vring_~#s~3#1.base, vhost_set_vring_~#s~3#1.offset, vhost_set_vring_~#f~0#1.base, vhost_set_vring_~#f~0#1.offset, vhost_set_vring_~#a~2#1.base, vhost_set_vring_~#a~2#1.offset, vhost_set_vring_~idx~0#1, vhost_set_vring_~r~1#1, vhost_set_vring_~__ret_gu~1#1, vhost_set_vring_~__val_gu~1#1, vhost_set_vring_~tmp___7~15#1, vhost_set_vring_~tmp___8~14#1, vhost_set_vring_~tmp___9~13#1, vhost_set_vring_~tmp___10~8#1, vhost_set_vring_~tmp___11~6#1, vhost_set_vring_~tmp___12~5#1, vhost_set_vring_~tmp___13~4#1, vhost_set_vring_~tmp___14~4#1, vhost_set_vring_~tmp___15~3#1.base, vhost_set_vring_~tmp___15~3#1.offset, vhost_set_vring_~tmp___16~2#1, vhost_set_vring_~tmp___17~1#1.base, vhost_set_vring_~tmp___17~1#1.offset, vhost_set_vring_~tmp___18~1#1, vhost_set_vring_~tmp___19~1#1.base, vhost_set_vring_~tmp___19~1#1.offset, vhost_set_vring_~tmp___20~0#1, vhost_set_vring_~tmp___21~0#1.base, vhost_set_vring_~tmp___21~0#1.offset, vhost_set_vring_~tmp___22~0#1, vhost_set_vring_~tmp___23~0#1.base, vhost_set_vring_~tmp___23~0#1.offset, vhost_set_vring_~tmp___24~0#1, vhost_set_vring_~tmp___25~0#1.base, vhost_set_vring_~tmp___25~0#1.offset, vhost_set_vring_~tmp~11#1, vhost_set_vring_~tmp___26~0#1, vhost_set_vring_~tmp___27~0#1, vhost_set_vring_~tmp___28~0#1, vhost_set_vring_~tmp___29~0#1, vhost_set_vring_~tmp___30~0#1, vhost_set_vring_~tmp___31~0#1, vhost_set_vring_~tmp___32~0#1, vhost_set_vring_~tmp___33~0#1, vhost_set_vring_~tmp___34~0#1, vhost_set_vring_~tmp___35~0#1, vhost_set_vring_~tmp___36~0#1, vhost_set_vring_~tmp___37~0#1;havoc vhost_set_vring_#in~d#1.base, vhost_set_vring_#in~d#1.offset, vhost_set_vring_#in~ioctl#1, vhost_set_vring_#in~argp#1.base, vhost_set_vring_#in~argp#1.offset;assume { :end_inline_vhost_set_vring } true;assume -9223372036854775808 <= vhost_dev_ioctl_#t~ret351#1 && vhost_dev_ioctl_#t~ret351#1 <= 9223372036854775807;vhost_dev_ioctl_~r~2#1 := vhost_dev_ioctl_#t~ret351#1;havoc vhost_dev_ioctl_#t~ret351#1; [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6740: assume !(vhost_dev_alloc_iovecs_~i~0#1 >= 0); [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6740: assume vhost_dev_alloc_iovecs_~i~0#1 >= 0;call vhost_dev_alloc_iovecs_#t~mem88#1.base, vhost_dev_alloc_iovecs_#t~mem88#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_~dev#1.base, 172 + vhost_dev_alloc_iovecs_~dev#1.offset, 8);call vhost_dev_alloc_iovecs_#t~mem89#1.base, vhost_dev_alloc_iovecs_#t~mem89#1.offset := read~$Pointer$#16(vhost_dev_alloc_iovecs_#t~mem88#1.base, 17032 + (vhost_dev_alloc_iovecs_#t~mem88#1.offset + 17088 * vhost_dev_alloc_iovecs_~i~0#1), 8); [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8392: SUMMARY for call eventfd_ctx_put(vhost_dev_ioctl_~ctx~1#1.base, vhost_dev_ioctl_~ctx~1#1.offset); srcloc: null [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545-4: assume 0 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise932#1 := 0; [2025-02-08 02:05:35,315 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545-4: assume !(0 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545-2: havoc vhost_net_set_features_#t~bitwise932#1;assume vhost_net_set_features_#t~bitwise932#1 % 18446744073709551616 <= vhost_net_set_features_~features#1 % 18446744073709551616 && vhost_net_set_features_#t~bitwise932#1 % 18446744073709551616 <= 67108864; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13479: vhost_net_set_backend_#res#1 := vhost_net_set_backend_~r~12#1; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545-3: assume 67108864 == vhost_net_set_features_~features#1 % 18446744073709551616;vhost_net_set_features_#t~bitwise932#1 := vhost_net_set_features_~features#1; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545-3: assume !(67108864 == vhost_net_set_features_~features#1 % 18446744073709551616); [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13479-1: SUMMARY for call mutex_unlock(vhost_net_set_backend_~n#1.base, 16 + vhost_net_set_backend_~n#1.offset); srcloc: null [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8260: assume !(vhost_dev_ioctl_~i~6#1 < vhost_dev_ioctl_#t~mem334#1);havoc vhost_dev_ioctl_#t~mem334#1; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8260: assume vhost_dev_ioctl_~i~6#1 < vhost_dev_ioctl_#t~mem334#1;havoc vhost_dev_ioctl_#t~mem334#1;call vhost_dev_ioctl_#t~mem335#1 := read~int#16(vhost_dev_ioctl_~#p~0#1.base, vhost_dev_ioctl_~#p~0#1.offset, 8);vhost_dev_ioctl_~base~0#1.base, vhost_dev_ioctl_~base~0#1.offset := 0, (if vhost_dev_ioctl_#t~mem335#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then vhost_dev_ioctl_#t~mem335#1 % 18446744073709551616 % 18446744073709551616 else vhost_dev_ioctl_#t~mem335#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);havoc vhost_dev_ioctl_#t~mem335#1;call vhost_dev_ioctl_#t~mem336#1.base, vhost_dev_ioctl_#t~mem336#1.offset := read~$Pointer$#16(vhost_dev_ioctl_~d#1.base, 172 + vhost_dev_ioctl_~d#1.offset, 8);vhost_dev_ioctl_~vq~1#1.base, vhost_dev_ioctl_~vq~1#1.offset := vhost_dev_ioctl_#t~mem336#1.base, vhost_dev_ioctl_#t~mem336#1.offset + 17088 * vhost_dev_ioctl_~i~6#1;havoc vhost_dev_ioctl_#t~mem336#1.base, vhost_dev_ioctl_#t~mem336#1.offset; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545: assume 0 != vhost_net_set_features_#t~bitwise932#1 % 18446744073709551616;havoc vhost_net_set_features_#t~bitwise932#1;assume { :begin_inline_vhost_log_access_ok } true;vhost_log_access_ok_#in~dev#1.base, vhost_log_access_ok_#in~dev#1.offset := vhost_net_set_features_~n#1.base, vhost_net_set_features_~n#1.offset;havoc vhost_log_access_ok_#res#1;havoc vhost_log_access_ok_#t~ret201#1, vhost_log_access_ok_#t~ret202#1, vhost_log_access_ok_#t~mem203#1.base, vhost_log_access_ok_#t~mem203#1.offset, vhost_log_access_ok_#t~ret204#1, vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset, vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset, vhost_log_access_ok_~tmp___7~12#1, vhost_log_access_ok_~tmp___8~10#1, vhost_log_access_ok_~tmp___9~9#1;vhost_log_access_ok_~dev#1.base, vhost_log_access_ok_~dev#1.offset := vhost_log_access_ok_#in~dev#1.base, vhost_log_access_ok_#in~dev#1.offset;havoc vhost_log_access_ok_~mp~0#1.base, vhost_log_access_ok_~mp~0#1.offset;havoc vhost_log_access_ok_~tmp___7~12#1;havoc vhost_log_access_ok_~tmp___8~10#1;havoc vhost_log_access_ok_~tmp___9~9#1; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545: assume !(0 != vhost_net_set_features_#t~bitwise932#1 % 18446744073709551616);havoc vhost_net_set_features_#t~bitwise932#1; [2025-02-08 02:05:35,316 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13545-1: [2025-02-08 02:05:35,322 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14047: havoc misc_deregister_#t~nondet983#1; [2025-02-08 02:05:35,348 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13939: havoc _copy_from_user_#t~nondet964#1;#t~ret10#1 := _copy_from_user_#res#1;havoc _copy_from_user_#t~nondet964#1, _copy_from_user_~arg0#1.base, _copy_from_user_~arg0#1.offset, _copy_from_user_~arg1#1.base, _copy_from_user_~arg1#1.offset, _copy_from_user_~arg2#1;havoc _copy_from_user_#in~arg0#1.base, _copy_from_user_#in~arg0#1.offset, _copy_from_user_#in~arg1#1.base, _copy_from_user_#in~arg1#1.offset, _copy_from_user_#in~arg2#1;assume { :end_inline__copy_from_user } true;~tmp___3~0#1 := #t~ret10#1;havoc #t~ret10#1;~n#1 := ~tmp___3~0#1; [2025-02-08 02:05:35,349 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5456: havoc warn_slowpath_fmt_~arg0#1.base, warn_slowpath_fmt_~arg0#1.offset, warn_slowpath_fmt_~arg1#1, warn_slowpath_fmt_~arg2#1.base, warn_slowpath_fmt_~arg2#1.offset;havoc warn_slowpath_fmt_#in~arg0#1.base, warn_slowpath_fmt_#in~arg0#1.offset, warn_slowpath_fmt_#in~arg1#1, warn_slowpath_fmt_#in~arg2#1.base, warn_slowpath_fmt_#in~arg2#1.offset;assume { :end_inline_warn_slowpath_fmt } true; [2025-02-08 02:05:35,383 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5184: SUMMARY for call __bad_percpu_size(); srcloc: null [2025-02-08 02:05:35,384 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5141: assume false; [2025-02-08 02:05:35,384 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5141: assume !false; [2025-02-08 02:05:35,384 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint current_thread_infoFINAL: assume true; [2025-02-08 02:05:35,384 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5190: ~ti~0.base, ~ti~0.offset := 0, (if (40 + ~pfo_ret__~1 - 8192) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (40 + ~pfo_ret__~1 - 8192) % 18446744073709551616 % 18446744073709551616 else (40 + ~pfo_ret__~1 - 8192) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);#res.base, #res.offset := ~ti~0.base, ~ti~0.offset; [2025-02-08 02:05:35,393 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L14051: havoc misc_register_#t~nondet984#1; [2025-02-08 02:05:35,416 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L13204: call ULTIMATE.dealloc(~#tx_sock~0.base, ~#tx_sock~0.offset);havoc ~#tx_sock~0.base, ~#tx_sock~0.offset;call ULTIMATE.dealloc(~#rx_sock~0.base, ~#rx_sock~0.offset);havoc ~#rx_sock~0.base, ~#rx_sock~0.offset; [2025-02-08 02:05:35,622 INFO L? ?]: Removed 539 outVars from TransFormulas that were not future-live. [2025-02-08 02:05:35,622 INFO L308 CfgBuilder]: Performing block encoding [2025-02-08 02:05:35,656 INFO L332 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-02-08 02:05:35,656 INFO L337 CfgBuilder]: Removed 0 assume(true) statements. [2025-02-08 02:05:35,657 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:05:35 BoogieIcfgContainer [2025-02-08 02:05:35,657 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-02-08 02:05:35,659 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-02-08 02:05:35,659 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-02-08 02:05:35,663 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-02-08 02:05:35,663 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.02 02:05:23" (1/3) ... [2025-02-08 02:05:35,663 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@120c7cb5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:05:35, skipping insertion in model container [2025-02-08 02:05:35,663 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:05:26" (2/3) ... [2025-02-08 02:05:35,663 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@120c7cb5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:05:35, skipping insertion in model container [2025-02-08 02:05:35,663 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:05:35" (3/3) ... [2025-02-08 02:05:35,664 INFO L128 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-vhost-vhost_net.ko.cil.out.i [2025-02-08 02:05:35,678 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-02-08 02:05:35,682 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG usb_urb-drivers-vhost-vhost_net.ko.cil.out.i that has 66 procedures, 584 locations, 1 initial locations, 36 loop locations, and 1 error locations. [2025-02-08 02:05:35,738 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-02-08 02:05:35,750 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@272e63a1, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-02-08 02:05:35,751 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-02-08 02:05:35,756 INFO L276 IsEmpty]: Start isEmpty. Operand has 40 states, 24 states have (on average 1.4583333333333333) internal successors, (35), 34 states have internal predecessors, (35), 4 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) [2025-02-08 02:05:35,762 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2025-02-08 02:05:35,762 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:05:35,763 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:05:35,763 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:05:35,769 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:05:35,769 INFO L85 PathProgramCache]: Analyzing trace with hash 603238285, now seen corresponding path program 1 times [2025-02-08 02:05:35,776 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:05:35,776 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1478992997] [2025-02-08 02:05:35,776 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:05:35,777 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:05:36,614 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 18 statements into 1 equivalence classes. [2025-02-08 02:05:36,840 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 18 of 18 statements. [2025-02-08 02:05:36,840 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:05:36,840 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:05:37,100 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-02-08 02:05:37,101 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:05:37,101 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1478992997] [2025-02-08 02:05:37,101 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1478992997] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:05:37,102 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:05:37,102 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-02-08 02:05:37,103 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1127570773] [2025-02-08 02:05:37,104 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:05:37,107 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2025-02-08 02:05:37,108 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:05:37,126 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2025-02-08 02:05:37,127 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2025-02-08 02:05:37,129 INFO L87 Difference]: Start difference. First operand has 40 states, 24 states have (on average 1.4583333333333333) internal successors, (35), 34 states have internal predecessors, (35), 4 states have call successors, (4), 3 states have call predecessors, (4), 3 states have return successors, (4), 4 states have call predecessors, (4), 4 states have call successors, (4) Second operand has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:05:37,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:05:37,142 INFO L93 Difference]: Finished difference Result 40 states and 43 transitions. [2025-02-08 02:05:37,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2025-02-08 02:05:37,144 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 18 [2025-02-08 02:05:37,144 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:05:37,148 INFO L225 Difference]: With dead ends: 40 [2025-02-08 02:05:37,149 INFO L226 Difference]: Without dead ends: 0 [2025-02-08 02:05:37,153 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2025-02-08 02:05:37,156 INFO L435 NwaCegarLoop]: 23 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 23 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:05:37,156 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 23 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:05:37,168 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2025-02-08 02:05:37,172 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2025-02-08 02:05:37,173 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:05:37,177 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2025-02-08 02:05:37,178 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 18 [2025-02-08 02:05:37,179 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:05:37,179 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2025-02-08 02:05:37,179 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 6.5) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:05:37,179 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2025-02-08 02:05:37,179 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2025-02-08 02:05:37,181 INFO L782 garLoopResultBuilder]: Registering result SAFE for location ldv_blast_assertErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2025-02-08 02:05:37,182 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-02-08 02:05:37,184 INFO L422 BasicCegarLoop]: Path program histogram: [1] [2025-02-08 02:05:37,185 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2025-02-08 02:05:37,205 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-02-08 02:05:37,216 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.02 02:05:37 BoogieIcfgContainer [2025-02-08 02:05:37,216 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-02-08 02:05:37,217 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-02-08 02:05:37,217 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-02-08 02:05:37,217 INFO L274 PluginConnector]: Witness Printer initialized [2025-02-08 02:05:37,218 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:05:35" (3/4) ... [2025-02-08 02:05:37,219 INFO L146 WitnessPrinter]: Generating witness for correct program [2025-02-08 02:05:37,224 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_from_user [2025-02-08 02:05:37,224 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_fget [2025-02-08 02:05:37,224 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_init [2025-02-08 02:05:37,224 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure list_empty [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_stop [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure INIT_LIST_HEAD [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __bad_percpu_size [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kthread_stop [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vq_access_ok [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure memory_access_ok [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_flush [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure wake_up_process [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_lock_irq [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vq_memory_access_ok [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure current_thread_info [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_dev_check_owner [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_seq_done [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_init [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_init [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure debug_lockdep_rcu_enabled [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure get_current [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_release [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure PTR_ERR [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_vq_reset [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_ctx_fileget [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock_irqrestore [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_malloc [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_flush [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_work_queue [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_stop [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vq_log_access_ok [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_blast_assert [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_dev_cleanup [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kfree [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure might_fault [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_flush_vq [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_stop_vq [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_unlock [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_to_user [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2025-02-08 02:05:37,225 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure eventfd_ctx_put [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __mutex_init [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure lock_is_held [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kmalloc [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_ioctl [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_disable_vq [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_flush [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure fput [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _raw_spin_lock_irqsave [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_exit [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mmput [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure log_access_ok [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_lock_nested [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock_irq [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure lockdep_rcu_dereference [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure tx_poll_stop [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure tx_poll_start [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_queue [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_net_open [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure schedule [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_poll_start [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure vhost_has_feature [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spinlock_check [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ERR_PTR [2025-02-08 02:05:37,226 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure IS_ERR [2025-02-08 02:05:37,242 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 112 nodes and edges [2025-02-08 02:05:37,243 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 53 nodes and edges [2025-02-08 02:05:37,243 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 28 nodes and edges [2025-02-08 02:05:37,244 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 13 nodes and edges [2025-02-08 02:05:37,245 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2025-02-08 02:05:37,246 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2025-02-08 02:05:37,247 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2025-02-08 02:05:37,248 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2025-02-08 02:05:37,422 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-02-08 02:05:37,422 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-02-08 02:05:37,422 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-02-08 02:05:37,424 INFO L158 Benchmark]: Toolchain (without parser) took 13743.21ms. Allocated memory was 167.8MB in the beginning and 444.6MB in the end (delta: 276.8MB). Free memory was 108.6MB in the beginning and 122.6MB in the end (delta: -14.0MB). Peak memory consumption was 256.6MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,424 INFO L158 Benchmark]: CDTParser took 1.19ms. Allocated memory is still 201.3MB. Free memory is still 116.5MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:05:37,425 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2791.03ms. Allocated memory is still 167.8MB. Free memory was 108.6MB in the beginning and 87.0MB in the end (delta: 21.6MB). Peak memory consumption was 109.8MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,425 INFO L158 Benchmark]: Boogie Procedure Inliner took 230.03ms. Allocated memory is still 167.8MB. Free memory was 87.0MB in the beginning and 67.5MB in the end (delta: 19.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,426 INFO L158 Benchmark]: Boogie Preprocessor took 581.28ms. Allocated memory was 167.8MB in the beginning and 444.6MB in the end (delta: 276.8MB). Free memory was 67.5MB in the beginning and 267.3MB in the end (delta: -199.8MB). Peak memory consumption was 84.8MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,426 INFO L158 Benchmark]: IcfgBuilder took 8370.04ms. Allocated memory is still 444.6MB. Free memory was 267.3MB in the beginning and 326.1MB in the end (delta: -58.8MB). Peak memory consumption was 172.2MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,427 INFO L158 Benchmark]: TraceAbstraction took 1557.21ms. Allocated memory is still 444.6MB. Free memory was 326.1MB in the beginning and 147.8MB in the end (delta: 178.3MB). Peak memory consumption was 178.3MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,427 INFO L158 Benchmark]: Witness Printer took 205.89ms. Allocated memory is still 444.6MB. Free memory was 147.8MB in the beginning and 122.6MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2025-02-08 02:05:37,429 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 1.19ms. Allocated memory is still 201.3MB. Free memory is still 116.5MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2791.03ms. Allocated memory is still 167.8MB. Free memory was 108.6MB in the beginning and 87.0MB in the end (delta: 21.6MB). Peak memory consumption was 109.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 230.03ms. Allocated memory is still 167.8MB. Free memory was 87.0MB in the beginning and 67.5MB in the end (delta: 19.5MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 581.28ms. Allocated memory was 167.8MB in the beginning and 444.6MB in the end (delta: 276.8MB). Free memory was 67.5MB in the beginning and 267.3MB in the end (delta: -199.8MB). Peak memory consumption was 84.8MB. Max. memory is 16.1GB. * IcfgBuilder took 8370.04ms. Allocated memory is still 444.6MB. Free memory was 267.3MB in the beginning and 326.1MB in the end (delta: -58.8MB). Peak memory consumption was 172.2MB. Max. memory is 16.1GB. * TraceAbstraction took 1557.21ms. Allocated memory is still 444.6MB. Free memory was 326.1MB in the beginning and 147.8MB in the end (delta: 178.3MB). Peak memory consumption was 178.3MB. Max. memory is 16.1GB. * Witness Printer took 205.89ms. Allocated memory is still 444.6MB. Free memory was 147.8MB in the beginning and 122.6MB in the end (delta: 25.2MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 5021]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".section .smp_locks,\"a\"\n" ".balign 4\n" ".long 671f - .\n" ".previous\n" "671:" "\n\tlock; " "bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [5021-5027] - GenericResultAtLocation [Line: 5056]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "b " "%%" "gs" ":" "%P" "1" ",%0": "=q" (pfo_ret__): "p" (& current_task)); [5056-5063] - GenericResultAtLocation [Line: 5066]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "w " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& current_task)); [5066-5073] - GenericResultAtLocation [Line: 5076]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "l " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& current_task)); [5076-5083] - GenericResultAtLocation [Line: 5086]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "q " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& current_task)); [5086-5093] - GenericResultAtLocation [Line: 5143]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "b " "%%" "gs" ":" "%P" "1" ",%0": "=q" (pfo_ret__): "p" (& kernel_stack)); [5143-5150] - GenericResultAtLocation [Line: 5153]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "w " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5153-5160] - GenericResultAtLocation [Line: 5163]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "l " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5163-5170] - GenericResultAtLocation [Line: 5173]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("mov" "q " "%%" "gs" ":" "%P" "1" ",%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [5173-5180] - GenericResultAtLocation [Line: 5376]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("661:\n\t" "call %P[old]" "\n662:\n" ".section .altinstructions,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "661b\n" " " ".quad" " " "663f\n" "\t .word " "(3*32+16)" "\n" "\t .byte 662b-661b\n" "\t .byte 664f-663f\n" ".previous\n" ".section .discard,\"aw\",@progbits\n" "\t .byte 0xff + (664f-663f) - (662b-661b)\n" ".previous\n" ".section .altinstr_replacement, \"ax\"\n" "663:\n\t" "call %P[new]" "\n664:\n" ".previous": "=a" (ret), "=D" (to), "=S" (from), "=d" (len): [old] "i" (& copy_user_generic_unrolled), [new] "i" (& copy_user_generic_string), "1" (to), "2" (from), "3" (len): "memory", "rcx", "r8", "r9", "r10", "r11"); [5376-5407] - GenericResultAtLocation [Line: 5522]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=q" (*((u8 *)dst)): "m" (*((struct __large_struct *)((u8 *)src))), "i" (1), "0" (ret)); [5522-5552] - GenericResultAtLocation [Line: 5555]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u16 *)dst)): "m" (*((struct __large_struct *)((u16 *)src))), "i" (2), "0" (ret)); [5555-5585] - GenericResultAtLocation [Line: 5588]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u32 *)dst)): "m" (*((struct __large_struct *)((u32 *)src))), "i" (4), "0" (ret)); [5588-5618] - GenericResultAtLocation [Line: 5621]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)((u64 *)src))), "i" (8), "0" (ret)); [5621-5651] - GenericResultAtLocation [Line: 5655]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)((u64 *)src))), "i" (10), "0" (ret)); [5655-5685] - GenericResultAtLocation [Line: 5692]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u16 *)((char *)dst + 8))): "m" (*((struct __large_struct *)((u16 *)((char *)src + 8)))), "i" (2), "0" (ret)); [5692-5722] - GenericResultAtLocation [Line: 5726]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)dst)): "m" (*((struct __large_struct *)((u64 *)src))), "i" (16), "0" (ret)); [5726-5756] - GenericResultAtLocation [Line: 5763]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret), "=r" (*((u64 *)((char *)dst + 8))): "m" (*((struct __large_struct *)((u64 *)((char *)src + 8)))), "i" (8), "0" (ret)); [5763-5793] - GenericResultAtLocation [Line: 5846]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "iq" (*((u8 *)src)), "m" (*((struct __large_struct *)((u8 *)dst))), "i" (1), "0" (ret)); [5846-5869] - GenericResultAtLocation [Line: 5872]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "ir" (*((u16 *)src)), "m" (*((struct __large_struct *)((u16 *)dst))), "i" (2), "0" (ret)); [5872-5895] - GenericResultAtLocation [Line: 5898]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "ir" (*((u32 *)src)), "m" (*((struct __large_struct *)((u32 *)dst))), "i" (4), "0" (ret)); [5898-5921] - GenericResultAtLocation [Line: 5924]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)((u64 *)dst))), "i" (8), "0" (ret)); [5924-5947] - GenericResultAtLocation [Line: 5951]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)((u64 *)dst))), "i" (10), "0" (ret)); [5951-5974] - GenericResultAtLocation [Line: 5981]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("": : : "memory"); [5981] - GenericResultAtLocation [Line: 5982]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "ir" (*((u16 *)src + 4)), "m" (*((struct __large_struct *)((u16 *)dst + 4))), "i" (2), "0" (ret)); [5982-6005] - GenericResultAtLocation [Line: 6009]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src)), "m" (*((struct __large_struct *)((u64 *)dst))), "i" (16), "0" (ret)); [6009-6032] - GenericResultAtLocation [Line: 6039]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("": : : "memory"); [6039] - GenericResultAtLocation [Line: 6040]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (ret): "er" (*((u64 *)src + 1)), "m" (*((struct __large_struct *)((u64 *)dst + 1))), "i" (8), "0" (ret)); [6040-6063] - GenericResultAtLocation [Line: 6103]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6103] - GenericResultAtLocation [Line: 6110]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6110] - GenericResultAtLocation [Line: 6123]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [6123] - GenericResultAtLocation [Line: 6412]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (128), "i" (sizeof(struct bug_entry ))); [6412-6418] - GenericResultAtLocation [Line: 6579]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgb %0,%1": "=q" (__x), "+m" (*__ptr): "0" (__x): "memory"); [6579] - GenericResultAtLocation [Line: 6586]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgw %0,%1": "=r" (__x), "+m" (*__ptr___0): "0" (__x): "memory"); [6586] - GenericResultAtLocation [Line: 6593]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgl %0,%1": "=r" (__x), "+m" (*__ptr___1): "0" (__x): "memory"); [6593] - GenericResultAtLocation [Line: 6600]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("xchgq %0,%1": "=r" (__x), "+m" (*__ptr___2): "0" (__x): "memory"); [6600] - GenericResultAtLocation [Line: 7174]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (log_base + a), "g" ((long )((((sz + 32768UL) - 1UL) / 4096UL) / 8UL)), "rm" (tmp___7->addr_limit.seg)); [7174-7175] - GenericResultAtLocation [Line: 7218]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" ((void *)a), "g" ((long )m->memory_size), "rm" (tmp___8->addr_limit.seg)); [7218-7219] - GenericResultAtLocation [Line: 7322]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag), "=r" (roksum): "1" (desc), "g" ((long )((unsigned long )num * sizeof(*desc))), "rm" (tmp___10->addr_limit.seg)); [7322-7323] - GenericResultAtLocation [Line: 7336]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___0), "=r" (roksum___0): "1" (avail), "g" ((long )((sizeof(*avail) + (unsigned long )num * sizeof(avail->ring[0])) + s)), "rm" (tmp___13->addr_limit.seg)); [7336-7338] - GenericResultAtLocation [Line: 7351]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("add %3,%1 ; sbb %0,%0 ; cmp %1,%4 ; sbb $0,%0": "=&r" (flag___1), "=r" (roksum___1): "1" (used), "g" ((long )((sizeof(*used) + (unsigned long )num * sizeof(used->ring[0])) + s)), "rm" (tmp___16->addr_limit.seg)); [7351-7353] - GenericResultAtLocation [Line: 7615]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [7615] - GenericResultAtLocation [Line: 7649]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7649-7650] - GenericResultAtLocation [Line: 7653]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7653-7654] - GenericResultAtLocation [Line: 7657]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7657-7658] - GenericResultAtLocation [Line: 7661]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7661-7662] - GenericResultAtLocation [Line: 7665]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& used->flags): "ebx"); [7665-7666] - GenericResultAtLocation [Line: 7696]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7696-7697] - GenericResultAtLocation [Line: 7700]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7700-7701] - GenericResultAtLocation [Line: 7704]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7704-7705] - GenericResultAtLocation [Line: 7708]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7708-7709] - GenericResultAtLocation [Line: 7712]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" (& used->idx)); [7712-7713] - GenericResultAtLocation [Line: 7794]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7794-7795] - GenericResultAtLocation [Line: 7798]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7798-7799] - GenericResultAtLocation [Line: 7802]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7802-7803] - GenericResultAtLocation [Line: 7806]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7806-7807] - GenericResultAtLocation [Line: 7810]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" (idxp)); [7810-7811] - GenericResultAtLocation [Line: 8309]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8309-8310] - GenericResultAtLocation [Line: 8313]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8313-8314] - GenericResultAtLocation [Line: 8317]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8317-8318] - GenericResultAtLocation [Line: 8321]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8321-8322] - GenericResultAtLocation [Line: 8325]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" ((int *)argp)); [8325-8326] - GenericResultAtLocation [Line: 8472]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (903), "i" (sizeof(struct bug_entry ))); [8472-8478] - GenericResultAtLocation [Line: 8571]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [8571] - GenericResultAtLocation [Line: 8614]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (958), "i" (sizeof(struct bug_entry ))); [8614-8620] - GenericResultAtLocation [Line: 9289]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9289-9319] - GenericResultAtLocation [Line: 9322]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9322-9352] - GenericResultAtLocation [Line: 9355]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9355-9385] - GenericResultAtLocation [Line: 9388]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [9388-9418] - GenericResultAtLocation [Line: 9523]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [9523] - GenericResultAtLocation [Line: 9543]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=q" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9543-9573] - GenericResultAtLocation [Line: 9576]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9576-9606] - GenericResultAtLocation [Line: 9609]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9609-9639] - GenericResultAtLocation [Line: 9642]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err___0), "=r" (__gu_val___0): "m" (*((struct __large_struct *)(& (vq->avail)->ring[(unsigned int )last_avail_idx % vq->num]))), "i" (-14), "0" (__gu_err___0)); [9642-9672] - GenericResultAtLocation [Line: 10073]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n" ".pushsection __bug_table,\"a\"\n" "2:\t.long 1b - 2b, %c0 - 2b\n" "\t.word %c1, 0\n" "\t.org 2b+%c2\n" ".popsection": : "i" ("/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c"), "i" (1234), "i" (sizeof(struct bug_entry ))); [10073-10079] - GenericResultAtLocation [Line: 10148]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "iq" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10148-10171] - GenericResultAtLocation [Line: 10174]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10174-10197] - GenericResultAtLocation [Line: 10200]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "ir" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10200-10223] - GenericResultAtLocation [Line: 10226]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err): "er" (head), "m" (*((struct __large_struct *)(& used->id))), "i" (-14), "0" (__pu_err)); [10226-10249] - GenericResultAtLocation [Line: 10318]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "iq" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10318-10342] - GenericResultAtLocation [Line: 10345]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "ir" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10345-10369] - GenericResultAtLocation [Line: 10372]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "ir" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10372-10396] - GenericResultAtLocation [Line: 10399]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___0): "er" ((__u32 )len), "m" (*((struct __large_struct *)(& used->len))), "i" (-14), "0" (__pu_err___0)); [10399-10423] - GenericResultAtLocation [Line: 10473]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10473] - GenericResultAtLocation [Line: 10493]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %" "b" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "iq" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10493-10517] - GenericResultAtLocation [Line: 10520]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %" "w" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "ir" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10520-10544] - GenericResultAtLocation [Line: 10547]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %" "k" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "ir" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10547-10571] - GenericResultAtLocation [Line: 10574]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %" "" "1,%2\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__pu_err___1): "er" ((__u16 )((int )vq->last_used_idx + 1)), "m" (*((struct __large_struct *)(& (vq->used)->idx))), "i" (-14), "0" (__pu_err___1)); [10574-10598] - GenericResultAtLocation [Line: 10653]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10653] - GenericResultAtLocation [Line: 10743]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10743] - GenericResultAtLocation [Line: 10793]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [10793] - GenericResultAtLocation [Line: 10812]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10812-10813] - GenericResultAtLocation [Line: 10816]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10816-10817] - GenericResultAtLocation [Line: 10820]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10820-10821] - GenericResultAtLocation [Line: 10824]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10824-10825] - GenericResultAtLocation [Line: 10828]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->idx): "ebx"); [10828-10829] - GenericResultAtLocation [Line: 10917]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [10917] - GenericResultAtLocation [Line: 10955]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [10955-10985] - GenericResultAtLocation [Line: 10988]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [10988-11018] - GenericResultAtLocation [Line: 11021]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [11021-11051] - GenericResultAtLocation [Line: 11054]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->flags))), "i" (-14), "0" (__gu_err)); [11054-11084] - GenericResultAtLocation [Line: 11169]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "1": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11169-11170] - GenericResultAtLocation [Line: 11173]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "2": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11173-11174] - GenericResultAtLocation [Line: 11177]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "4": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11177-11178] - GenericResultAtLocation [Line: 11181]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "8": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11181-11182] - GenericResultAtLocation [Line: 11185]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __get_user_" "X": "=a" (__ret_gu), "=d" (__val_gu): "0" (& (vq->avail)->ring[vq->num])); [11185-11186] - GenericResultAtLocation [Line: 11329]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11329-11330] - GenericResultAtLocation [Line: 11333]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11333-11334] - GenericResultAtLocation [Line: 11337]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11337-11338] - GenericResultAtLocation [Line: 11341]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11341-11342] - GenericResultAtLocation [Line: 11345]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu___0): "0" (__pu_val___0), "c" ((u16 *)(& (vq->used)->ring[vq->num])): "ebx"); [11345-11346] - GenericResultAtLocation [Line: 11409]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11409-11410] - GenericResultAtLocation [Line: 11413]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11413-11414] - GenericResultAtLocation [Line: 11417]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11417-11418] - GenericResultAtLocation [Line: 11421]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11421-11422] - GenericResultAtLocation [Line: 11425]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11425-11426] - GenericResultAtLocation [Line: 11475]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [11475] - GenericResultAtLocation [Line: 11494]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("mfence": : : "memory"); [11494] - GenericResultAtLocation [Line: 11514]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "b" " %2,%" "b" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "b" " %" "b" "1,%" "b" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=q" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11514-11544] - GenericResultAtLocation [Line: 11547]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "w" " %2,%" "w" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "w" " %" "w" "1,%" "w" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11547-11577] - GenericResultAtLocation [Line: 11580]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "l" " %2,%" "k" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "l" " %" "k" "1,%" "k" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11580-11610] - GenericResultAtLocation [Line: 11613]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tmov" "q" " %2,%" "" "1\n" "2:\n" ".section .fixup,\"ax\"\n" "3:\tmov %3,%0\n" "\txor" "q" " %" "" "1,%" "" "1\n" "\tjmp 2b\n" ".previous\n" " .section __ex_table,\"a\"\n" " " ".balign 8" " " "\n" " " ".quad" " " "1b" "," "3b" "\n" " .previous\n": "=r" (__gu_err), "=r" (__gu_val): "m" (*((struct __large_struct *)(& (vq->avail)->idx))), "i" (-14), "0" (__gu_err)); [11613-11643] - GenericResultAtLocation [Line: 11739]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "1": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11739-11740] - GenericResultAtLocation [Line: 11743]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "2": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11743-11744] - GenericResultAtLocation [Line: 11747]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "4": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11747-11748] - GenericResultAtLocation [Line: 11751]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "8": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11751-11752] - GenericResultAtLocation [Line: 11755]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("call __put_user_" "X": "=a" (__ret_pu): "0" (__pu_val), "c" (& (vq->used)->flags): "ebx"); [11755-11756] - GenericResultAtLocation [Line: 13165]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [13165] - GenericResultAtLocation [Line: 13453]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [13453] - GenericResultAtLocation [Line: 13559]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("": : : "memory"); [13559] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 11805]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 66 procedures, 584 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.5s, OverallIterations: 1, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 0 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 0 mSDsluCounter, 23 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 0 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 0 IncrementalHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 23 mSDtfsCounter, 0 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=40occurred in iteration=0, InterpolantAutomatonStates: 2, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 1 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 18 NumberOfCodeBlocks, 18 NumberOfCodeBlocksAsserted, 1 NumberOfCheckSat, 17 ConstructedInterpolants, 0 QuantifiedInterpolants, 17 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2025-02-08 02:05:37,488 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE