./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5f08f0f0 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5f08f0f [2021-11-05 14:46:42,437 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-05 14:46:42,440 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-05 14:46:42,480 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-05 14:46:42,481 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-05 14:46:42,486 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-05 14:46:42,487 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-05 14:46:42,493 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-05 14:46:42,495 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-05 14:46:42,501 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-05 14:46:42,502 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-05 14:46:42,516 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-05 14:46:42,517 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-05 14:46:42,518 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-05 14:46:42,519 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-05 14:46:42,520 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-05 14:46:42,521 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-05 14:46:42,521 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-05 14:46:42,523 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-05 14:46:42,526 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-05 14:46:42,531 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-05 14:46:42,532 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-05 14:46:42,533 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-05 14:46:42,536 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-05 14:46:42,539 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-05 14:46:42,541 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-05 14:46:42,541 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-05 14:46:42,542 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-05 14:46:42,544 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-05 14:46:42,545 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-05 14:46:42,545 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-05 14:46:42,546 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-05 14:46:42,547 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-05 14:46:42,548 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-05 14:46:42,549 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-05 14:46:42,549 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-05 14:46:42,550 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-05 14:46:42,550 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-05 14:46:42,550 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-05 14:46:42,552 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-05 14:46:42,553 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-05 14:46:42,554 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-05 14:46:42,589 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-05 14:46:42,590 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-05 14:46:42,591 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-05 14:46:42,591 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-05 14:46:42,593 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-05 14:46:42,594 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-05 14:46:42,594 INFO L138 SettingsManager]: * Use SBE=true [2021-11-05 14:46:42,594 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-05 14:46:42,594 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-05 14:46:42,595 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-05 14:46:42,595 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-05 14:46:42,596 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-05 14:46:42,596 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-05 14:46:42,596 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-05 14:46:42,596 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-05 14:46:42,596 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-05 14:46:42,597 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-05 14:46:42,597 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-05 14:46:42,597 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-05 14:46:42,597 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-05 14:46:42,598 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-05 14:46:42,598 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-05 14:46:42,598 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-05 14:46:42,598 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-05 14:46:42,598 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-05 14:46:42,598 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-05 14:46:42,599 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-05 14:46:42,599 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-05 14:46:42,599 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-05 14:46:42,599 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f [2021-11-05 14:46:42,893 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-05 14:46:42,924 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-05 14:46:42,926 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-05 14:46:42,928 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-05 14:46:42,929 INFO L275 PluginConnector]: CDTParser initialized [2021-11-05 14:46:42,930 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-05 14:46:42,993 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0e1be4c24/e45abef1aa514c5f8954cbcfdd5546f2/FLAGf55483800 [2021-11-05 14:46:43,861 INFO L306 CDTParser]: Found 1 translation units. [2021-11-05 14:46:43,862 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-05 14:46:43,906 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0e1be4c24/e45abef1aa514c5f8954cbcfdd5546f2/FLAGf55483800 [2021-11-05 14:46:44,369 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0e1be4c24/e45abef1aa514c5f8954cbcfdd5546f2 [2021-11-05 14:46:44,372 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-05 14:46:44,374 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-05 14:46:44,375 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-05 14:46:44,375 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-05 14:46:44,378 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-05 14:46:44,378 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 05.11 02:46:44" (1/1) ... [2021-11-05 14:46:44,379 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4d5c0088 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:44, skipping insertion in model container [2021-11-05 14:46:44,379 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 05.11 02:46:44" (1/1) ... [2021-11-05 14:46:44,385 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-05 14:46:44,568 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-05 14:46:46,846 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-05 14:46:46,980 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-05 14:46:46,996 INFO L203 MainTranslator]: Completed pre-run [2021-11-05 14:46:47,471 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-05 14:46:47,480 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-05 14:46:47,574 INFO L208 MainTranslator]: Completed translation [2021-11-05 14:46:47,575 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47 WrapperNode [2021-11-05 14:46:47,575 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-05 14:46:47,577 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-05 14:46:47,578 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-05 14:46:47,578 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-05 14:46:47,584 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:47,678 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:48,857 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-05 14:46:48,858 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-05 14:46:48,859 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-05 14:46:48,859 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-05 14:46:48,875 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:48,875 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:49,145 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:49,148 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:49,765 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:49,897 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:49,971 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:50,275 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-05 14:46:50,277 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-05 14:46:50,277 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-05 14:46:50,277 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-05 14:46:50,278 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (1/1) ... [2021-11-05 14:46:50,284 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-05 14:46:50,293 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-05 14:46:50,309 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-05 14:46:50,327 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-05 14:46:50,347 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2021-11-05 14:46:50,348 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2021-11-05 14:46:50,348 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2021-11-05 14:46:50,348 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2021-11-05 14:46:50,348 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-05 14:46:50,348 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-05 14:46:50,348 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2021-11-05 14:46:50,348 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2021-11-05 14:46:50,349 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-05 14:46:50,349 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_start [2021-11-05 14:46:50,349 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_start [2021-11-05 14:46:50,349 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2021-11-05 14:46:50,349 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2021-11-05 14:46:50,349 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-05 14:46:50,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-05 14:46:50,350 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-05 14:46:50,350 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-05 14:46:50,350 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2021-11-05 14:46:50,350 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2021-11-05 14:46:50,350 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2021-11-05 14:46:50,350 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2021-11-05 14:46:50,350 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-05 14:46:50,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-05 14:46:50,351 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-05 14:46:50,351 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-05 14:46:50,351 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2021-11-05 14:46:50,351 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2021-11-05 14:46:50,351 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-05 14:46:50,351 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2021-11-05 14:46:50,352 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2021-11-05 14:46:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put_and_wait [2021-11-05 14:46:50,352 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put_and_wait [2021-11-05 14:46:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-05 14:46:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-05 14:46:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-05 14:46:50,352 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-05 14:46:50,353 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-05 14:46:50,353 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_release [2021-11-05 14:46:50,353 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_release [2021-11-05 14:46:50,353 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2021-11-05 14:46:50,353 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2021-11-05 14:46:50,353 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-05 14:46:50,353 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_start [2021-11-05 14:46:50,354 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_start [2021-11-05 14:46:50,354 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-05 14:46:50,354 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-05 14:47:02,973 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,973 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,974 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume !__copy_from_user_#t~switch141; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1218: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1219: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-2: havoc __copy_to_user_#t~switch146; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-3: havoc __copy_to_user_#t~switch146; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825: havoc __copy_to_user_#t~switch146; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-1: havoc __copy_to_user_#t~switch146; [2021-11-05 14:47:02,975 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,976 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-05 14:47:02,976 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,976 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-05 14:47:02,976 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,976 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-05 14:47:02,976 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,977 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-05 14:47:02,977 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,977 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-05 14:47:02,977 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,977 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-05 14:47:02,977 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,978 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-05 14:47:02,979 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,979 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-05 14:47:02,979 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,979 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-05 14:47:02,979 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,979 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-05 14:47:02,980 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,980 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-05 14:47:02,980 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,980 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-05 14:47:02,980 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,980 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-05 14:47:02,981 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,981 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,981 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,981 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,981 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,981 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,982 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,982 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,982 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,982 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:47:02,982 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,982 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:47:02,983 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,983 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:47:02,983 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,983 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:47:02,983 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,983 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,984 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,984 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,984 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,984 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,984 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,984 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,985 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:02,985 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch146; [2021-11-05 14:47:02,985 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:02,985 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume !__copy_to_user_#t~switch146; [2021-11-05 14:47:02,985 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:02,986 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume !__copy_to_user_#t~switch146; [2021-11-05 14:47:02,986 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:02,986 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume !__copy_to_user_#t~switch146; [2021-11-05 14:47:02,986 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##164: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-05 14:47:02,987 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##163: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,987 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1876: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,987 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1877: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-05 14:47:02,987 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1811: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,987 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1812: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-05 14:47:02,988 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##757: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-05 14:47:02,988 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##756: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,988 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-3: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:02,988 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:02,988 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-7: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:02,988 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-5: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:02,989 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-11: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:02,989 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-9: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:02,989 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-19: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-05 14:47:02,989 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-20: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-05 14:47:02,989 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-85: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:47:02,990 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-84: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:47:02,990 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-79: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:47:02,990 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-78: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:47:02,990 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-121: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-05 14:47:02,990 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-120: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-05 14:47:02,990 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-179: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:47:02,991 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-180: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:47:02,991 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-186: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:47:02,991 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-185: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:47:02,991 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##822: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-05 14:47:02,991 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##821: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:47:02,991 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760-1: havoc __copy_from_user_#t~switch141; [2021-11-05 14:47:02,992 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-05 14:47:02,992 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,992 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-05 14:47:02,992 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,992 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-05 14:47:02,992 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:02,993 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-05 14:47:02,994 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,994 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-05 14:47:02,994 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:02,994 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-05 14:47:10,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:10,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##352: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##351: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-29: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-28: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:47:10,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-05 14:47:10,130 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:47:10,130 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-05 14:47:24,315 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-05 14:47:24,315 INFO L299 CfgBuilder]: Removed 7538 assume(true) statements. [2021-11-05 14:47:24,323 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.11 02:47:24 BoogieIcfgContainer [2021-11-05 14:47:24,324 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-05 14:47:24,325 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-05 14:47:24,325 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-05 14:47:24,328 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-05 14:47:24,328 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 05.11 02:46:44" (1/3) ... [2021-11-05 14:47:24,329 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3dc77ab2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 05.11 02:47:24, skipping insertion in model container [2021-11-05 14:47:24,329 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:46:47" (2/3) ... [2021-11-05 14:47:24,329 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3dc77ab2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 05.11 02:47:24, skipping insertion in model container [2021-11-05 14:47:24,329 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.11 02:47:24" (3/3) ... [2021-11-05 14:47:24,331 INFO L111 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-05 14:47:24,335 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-05 14:47:24,336 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2021-11-05 14:47:24,400 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-05 14:47:24,406 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-05 14:47:24,406 INFO L340 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2021-11-05 14:47:24,530 INFO L276 IsEmpty]: Start isEmpty. Operand has 7743 states, 7619 states have (on average 1.4066150413440084) internal successors, (10717), 7704 states have internal predecessors, (10717), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-05 14:47:24,533 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-05 14:47:24,533 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:24,534 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:24,535 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:24,539 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:24,539 INFO L85 PathProgramCache]: Analyzing trace with hash 54787053, now seen corresponding path program 1 times [2021-11-05 14:47:24,546 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:24,547 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [730017621] [2021-11-05 14:47:24,547 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:24,548 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:24,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:25,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:25,112 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:25,112 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [730017621] [2021-11-05 14:47:25,113 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [730017621] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:25,113 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:25,113 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-05 14:47:25,115 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1263937413] [2021-11-05 14:47:25,115 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:25,119 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:25,119 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:25,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:25,148 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:25,169 INFO L87 Difference]: Start difference. First operand has 7743 states, 7619 states have (on average 1.4066150413440084) internal successors, (10717), 7704 states have internal predecessors, (10717), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:25,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:25,562 INFO L93 Difference]: Finished difference Result 15482 states and 21584 transitions. [2021-11-05 14:47:25,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:25,569 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-05 14:47:25,569 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:25,611 INFO L225 Difference]: With dead ends: 15482 [2021-11-05 14:47:25,611 INFO L226 Difference]: Without dead ends: 7659 [2021-11-05 14:47:25,649 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 6.75ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:25,653 INFO L933 BasicCegarLoop]: 10657 mSDtfsCounter, 10657 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.14ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10657 SdHoareTripleChecker+Valid, 10657 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 38.60ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.52ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:25,654 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10657 Valid, 10657 Invalid, 3 Unknown, 0 Unchecked, 38.60ms Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 12.52ms Time] [2021-11-05 14:47:25,681 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7659 states. [2021-11-05 14:47:25,883 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7659 to 7659. [2021-11-05 14:47:25,901 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7659 states, 7536 states have (on average 1.3845541401273886) internal successors, (10434), 7620 states have internal predecessors, (10434), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-05 14:47:25,935 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7659 states to 7659 states and 10496 transitions. [2021-11-05 14:47:25,937 INFO L78 Accepts]: Start accepts. Automaton has 7659 states and 10496 transitions. Word has length 10 [2021-11-05 14:47:25,937 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:25,937 INFO L470 AbstractCegarLoop]: Abstraction has 7659 states and 10496 transitions. [2021-11-05 14:47:25,937 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:25,938 INFO L276 IsEmpty]: Start isEmpty. Operand 7659 states and 10496 transitions. [2021-11-05 14:47:25,938 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-05 14:47:25,938 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:25,938 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:25,939 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-05 14:47:25,939 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:25,939 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:25,940 INFO L85 PathProgramCache]: Analyzing trace with hash -1577669200, now seen corresponding path program 1 times [2021-11-05 14:47:25,940 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:25,940 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1592311218] [2021-11-05 14:47:25,940 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:25,940 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:26,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:26,087 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:26,087 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:26,088 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1592311218] [2021-11-05 14:47:26,088 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1592311218] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:26,088 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:26,088 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-05 14:47:26,089 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1084076096] [2021-11-05 14:47:26,089 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:26,091 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:26,091 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:26,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:26,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:26,092 INFO L87 Difference]: Start difference. First operand 7659 states and 10496 transitions. Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:28,143 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:47:28,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:28,481 INFO L93 Difference]: Finished difference Result 7659 states and 10496 transitions. [2021-11-05 14:47:28,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:28,482 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-05 14:47:28,482 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:28,516 INFO L225 Difference]: With dead ends: 7659 [2021-11-05 14:47:28,517 INFO L226 Difference]: Without dead ends: 7657 [2021-11-05 14:47:28,524 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.41ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:28,526 INFO L933 BasicCegarLoop]: 10493 mSDtfsCounter, 10486 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2046.09ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10486 SdHoareTripleChecker+Valid, 10493 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 21.63ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2191.43ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:28,527 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10486 Valid, 10493 Invalid, 2 Unknown, 0 Unchecked, 21.63ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2191.43ms Time] [2021-11-05 14:47:28,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7657 states. [2021-11-05 14:47:28,736 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7657 to 7657. [2021-11-05 14:47:28,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7657 states, 7535 states have (on average 1.3844724618447246) internal successors, (10432), 7618 states have internal predecessors, (10432), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-05 14:47:28,803 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7657 states to 7657 states and 10494 transitions. [2021-11-05 14:47:28,803 INFO L78 Accepts]: Start accepts. Automaton has 7657 states and 10494 transitions. Word has length 10 [2021-11-05 14:47:28,803 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:28,804 INFO L470 AbstractCegarLoop]: Abstraction has 7657 states and 10494 transitions. [2021-11-05 14:47:28,804 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:28,805 INFO L276 IsEmpty]: Start isEmpty. Operand 7657 states and 10494 transitions. [2021-11-05 14:47:28,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2021-11-05 14:47:28,805 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:28,805 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:28,805 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-05 14:47:28,806 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr63ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:28,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:28,806 INFO L85 PathProgramCache]: Analyzing trace with hash -1663080904, now seen corresponding path program 1 times [2021-11-05 14:47:28,807 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:28,807 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [981760254] [2021-11-05 14:47:28,807 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:28,807 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:28,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:28,948 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:28,948 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:28,948 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [981760254] [2021-11-05 14:47:28,949 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [981760254] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:28,949 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:28,949 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-05 14:47:28,949 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1383431112] [2021-11-05 14:47:28,949 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:28,950 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:28,950 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:28,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:28,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:28,951 INFO L87 Difference]: Start difference. First operand 7657 states and 10494 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:31,003 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:47:31,298 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:31,298 INFO L93 Difference]: Finished difference Result 7657 states and 10494 transitions. [2021-11-05 14:47:31,298 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:31,299 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2021-11-05 14:47:31,299 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:31,331 INFO L225 Difference]: With dead ends: 7657 [2021-11-05 14:47:31,332 INFO L226 Difference]: Without dead ends: 7655 [2021-11-05 14:47:31,338 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.02ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:31,341 INFO L933 BasicCegarLoop]: 10491 mSDtfsCounter, 10483 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2050.62ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10483 SdHoareTripleChecker+Valid, 10491 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 18.26ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2177.58ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:31,342 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10483 Valid, 10491 Invalid, 2 Unknown, 0 Unchecked, 18.26ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2177.58ms Time] [2021-11-05 14:47:31,356 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7655 states. [2021-11-05 14:47:31,554 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7655 to 7655. [2021-11-05 14:47:31,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7655 states, 7534 states have (on average 1.3843907618794797) internal successors, (10430), 7616 states have internal predecessors, (10430), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-05 14:47:31,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7655 states to 7655 states and 10492 transitions. [2021-11-05 14:47:31,593 INFO L78 Accepts]: Start accepts. Automaton has 7655 states and 10492 transitions. Word has length 11 [2021-11-05 14:47:31,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:31,594 INFO L470 AbstractCegarLoop]: Abstraction has 7655 states and 10492 transitions. [2021-11-05 14:47:31,594 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:31,594 INFO L276 IsEmpty]: Start isEmpty. Operand 7655 states and 10492 transitions. [2021-11-05 14:47:31,594 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-05 14:47:31,594 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:31,595 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:31,595 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-05 14:47:31,595 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr64ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:31,596 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:31,596 INFO L85 PathProgramCache]: Analyzing trace with hash -15876422, now seen corresponding path program 1 times [2021-11-05 14:47:31,597 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:31,597 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [29955870] [2021-11-05 14:47:31,597 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:31,598 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:31,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:31,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:31,754 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:31,754 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [29955870] [2021-11-05 14:47:31,754 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [29955870] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:31,754 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:31,754 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-05 14:47:31,754 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1232930186] [2021-11-05 14:47:31,755 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:31,755 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:31,755 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:31,756 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:31,756 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:31,756 INFO L87 Difference]: Start difference. First operand 7655 states and 10492 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:33,806 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:47:34,138 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:34,139 INFO L93 Difference]: Finished difference Result 7655 states and 10492 transitions. [2021-11-05 14:47:34,139 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:34,139 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-05 14:47:34,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:34,182 INFO L225 Difference]: With dead ends: 7655 [2021-11-05 14:47:34,183 INFO L226 Difference]: Without dead ends: 7653 [2021-11-05 14:47:34,188 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.05ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:34,194 INFO L933 BasicCegarLoop]: 10489 mSDtfsCounter, 10480 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2049.61ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10480 SdHoareTripleChecker+Valid, 10489 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 16.41ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2208.65ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:34,197 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10480 Valid, 10489 Invalid, 2 Unknown, 0 Unchecked, 16.41ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2208.65ms Time] [2021-11-05 14:47:34,214 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7653 states. [2021-11-05 14:47:34,471 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7653 to 7653. [2021-11-05 14:47:34,483 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7653 states, 7533 states have (on average 1.3843090402230187) internal successors, (10428), 7614 states have internal predecessors, (10428), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-05 14:47:34,508 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7653 states to 7653 states and 10490 transitions. [2021-11-05 14:47:34,509 INFO L78 Accepts]: Start accepts. Automaton has 7653 states and 10490 transitions. Word has length 12 [2021-11-05 14:47:34,509 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:34,509 INFO L470 AbstractCegarLoop]: Abstraction has 7653 states and 10490 transitions. [2021-11-05 14:47:34,509 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:34,509 INFO L276 IsEmpty]: Start isEmpty. Operand 7653 states and 10490 transitions. [2021-11-05 14:47:34,510 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-05 14:47:34,510 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:34,510 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:34,510 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-05 14:47:34,511 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr65ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:34,511 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:34,511 INFO L85 PathProgramCache]: Analyzing trace with hash -492145022, now seen corresponding path program 1 times [2021-11-05 14:47:34,511 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:34,512 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [113672896] [2021-11-05 14:47:34,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:34,512 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:34,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:34,780 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:34,780 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:34,780 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [113672896] [2021-11-05 14:47:34,780 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [113672896] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:34,780 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:34,781 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-05 14:47:34,781 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1136530828] [2021-11-05 14:47:34,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:34,781 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:34,782 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:34,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:34,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:34,782 INFO L87 Difference]: Start difference. First operand 7653 states and 10490 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:36,831 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:47:37,689 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:37,689 INFO L93 Difference]: Finished difference Result 16176 states and 22182 transitions. [2021-11-05 14:47:37,690 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:37,690 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-05 14:47:37,690 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:37,719 INFO L225 Difference]: With dead ends: 16176 [2021-11-05 14:47:37,719 INFO L226 Difference]: Without dead ends: 8525 [2021-11-05 14:47:37,743 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.52ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:37,744 INFO L933 BasicCegarLoop]: 11425 mSDtfsCounter, 2710 mSDsluCounter, 8688 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 107 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2376.29ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 2710 SdHoareTripleChecker+Valid, 20113 SdHoareTripleChecker+Invalid, 287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 28.93ms SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2573.46ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:37,744 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2710 Valid, 20113 Invalid, 287 Unknown, 0 Unchecked, 28.93ms Time], IncrementalHoareTripleChecker [107 Valid, 179 Invalid, 1 Unknown, 0 Unchecked, 2573.46ms Time] [2021-11-05 14:47:37,757 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8525 states. [2021-11-05 14:47:37,981 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8525 to 8489. [2021-11-05 14:47:37,995 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8489 states, 8360 states have (on average 1.3726076555023923) internal successors, (11475), 8423 states have internal predecessors, (11475), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-05 14:47:38,025 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8489 states to 8489 states and 11583 transitions. [2021-11-05 14:47:38,026 INFO L78 Accepts]: Start accepts. Automaton has 8489 states and 11583 transitions. Word has length 13 [2021-11-05 14:47:38,026 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:38,027 INFO L470 AbstractCegarLoop]: Abstraction has 8489 states and 11583 transitions. [2021-11-05 14:47:38,027 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:38,027 INFO L276 IsEmpty]: Start isEmpty. Operand 8489 states and 11583 transitions. [2021-11-05 14:47:38,029 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-05 14:47:38,029 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:38,029 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:38,029 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-05 14:47:38,029 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting vhost_net_releaseErr1ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:38,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:38,030 INFO L85 PathProgramCache]: Analyzing trace with hash 829533720, now seen corresponding path program 1 times [2021-11-05 14:47:38,030 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:38,030 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1748420046] [2021-11-05 14:47:38,030 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:38,031 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:38,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:38,201 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:38,201 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:38,201 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1748420046] [2021-11-05 14:47:38,202 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1748420046] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:38,202 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:38,202 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-05 14:47:38,202 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1947293999] [2021-11-05 14:47:38,202 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:38,203 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:38,203 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:38,203 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:38,203 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:38,204 INFO L87 Difference]: Start difference. First operand 8489 states and 11583 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:38,617 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:38,617 INFO L93 Difference]: Finished difference Result 21277 states and 28904 transitions. [2021-11-05 14:47:38,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:38,618 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-11-05 14:47:38,618 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:38,661 INFO L225 Difference]: With dead ends: 21277 [2021-11-05 14:47:38,661 INFO L226 Difference]: Without dead ends: 12796 [2021-11-05 14:47:38,692 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.10ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:38,693 INFO L933 BasicCegarLoop]: 10454 mSDtfsCounter, 4879 mSDsluCounter, 10388 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.05ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 4889 SdHoareTripleChecker+Valid, 20842 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 26.23ms SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.61ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:38,693 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4889 Valid, 20842 Invalid, 12 Unknown, 0 Unchecked, 26.23ms Time], IncrementalHoareTripleChecker [3 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 17.61ms Time] [2021-11-05 14:47:38,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12796 states. [2021-11-05 14:47:39,008 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12796 to 9762. [2021-11-05 14:47:39,023 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9762 states, 9633 states have (on average 1.3652029481988996) internal successors, (13151), 9696 states have internal predecessors, (13151), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-05 14:47:39,053 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9762 states to 9762 states and 13259 transitions. [2021-11-05 14:47:39,054 INFO L78 Accepts]: Start accepts. Automaton has 9762 states and 13259 transitions. Word has length 27 [2021-11-05 14:47:39,055 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:39,055 INFO L470 AbstractCegarLoop]: Abstraction has 9762 states and 13259 transitions. [2021-11-05 14:47:39,055 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:39,055 INFO L276 IsEmpty]: Start isEmpty. Operand 9762 states and 13259 transitions. [2021-11-05 14:47:39,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-05 14:47:39,060 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:39,060 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:39,061 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-05 14:47:39,061 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:39,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:39,061 INFO L85 PathProgramCache]: Analyzing trace with hash -213216420, now seen corresponding path program 1 times [2021-11-05 14:47:39,062 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:39,062 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1000966556] [2021-11-05 14:47:39,062 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:39,062 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:39,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:47:39,272 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:47:39,272 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-05 14:47:39,272 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1000966556] [2021-11-05 14:47:39,273 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1000966556] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-05 14:47:39,273 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:47:39,273 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-05 14:47:39,273 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1919987521] [2021-11-05 14:47:39,273 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-05 14:47:39,274 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:47:39,274 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-05 14:47:39,274 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:47:39,275 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:39,275 INFO L87 Difference]: Start difference. First operand 9762 states and 13259 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:40,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:47:40,243 INFO L93 Difference]: Finished difference Result 19606 states and 26600 transitions. [2021-11-05 14:47:40,244 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:47:40,244 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-11-05 14:47:40,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:47:40,277 INFO L225 Difference]: With dead ends: 19606 [2021-11-05 14:47:40,277 INFO L226 Difference]: Without dead ends: 9852 [2021-11-05 14:47:40,308 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.34ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:47:40,309 INFO L933 BasicCegarLoop]: 10222 mSDtfsCounter, 0 mSDsluCounter, 9918 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 306 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 525.93ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 20140 SdHoareTripleChecker+Invalid, 698 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 18.22ms SdHoareTripleChecker+Time, 306 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 636.28ms IncrementalHoareTripleChecker+Time [2021-11-05 14:47:40,309 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 20140 Invalid, 698 Unknown, 0 Unchecked, 18.22ms Time], IncrementalHoareTripleChecker [306 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 636.28ms Time] [2021-11-05 14:47:40,323 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9852 states. [2021-11-05 14:47:40,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9852 to 9762. [2021-11-05 14:47:40,848 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9762 states, 9633 states have (on average 1.3371742966884668) internal successors, (12881), 9696 states have internal predecessors, (12881), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-05 14:47:40,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9762 states to 9762 states and 12989 transitions. [2021-11-05 14:47:40,882 INFO L78 Accepts]: Start accepts. Automaton has 9762 states and 12989 transitions. Word has length 32 [2021-11-05 14:47:40,882 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:47:40,882 INFO L470 AbstractCegarLoop]: Abstraction has 9762 states and 12989 transitions. [2021-11-05 14:47:40,882 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:47:40,883 INFO L276 IsEmpty]: Start isEmpty. Operand 9762 states and 12989 transitions. [2021-11-05 14:47:40,884 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-05 14:47:40,884 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:47:40,884 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:40,884 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-05 14:47:40,886 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:47:40,887 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:47:40,887 INFO L85 PathProgramCache]: Analyzing trace with hash -142527228, now seen corresponding path program 1 times [2021-11-05 14:47:40,887 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-05 14:47:40,887 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1317665132] [2021-11-05 14:47:40,888 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:47:40,888 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-05 14:47:42,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-05 14:47:42,589 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-05 14:47:43,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-05 14:47:43,973 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-05 14:47:43,974 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-05 14:47:43,975 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION (77 of 78 remaining) [2021-11-05 14:47:43,976 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION (76 of 78 remaining) [2021-11-05 14:47:43,976 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION (75 of 78 remaining) [2021-11-05 14:47:43,977 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (74 of 78 remaining) [2021-11-05 14:47:43,977 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr3ASSERT_VIOLATIONERROR_FUNCTION (73 of 78 remaining) [2021-11-05 14:47:43,977 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr0ASSERT_VIOLATIONERROR_FUNCTION (72 of 78 remaining) [2021-11-05 14:47:43,977 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr1ASSERT_VIOLATIONERROR_FUNCTION (71 of 78 remaining) [2021-11-05 14:47:43,977 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr2ASSERT_VIOLATIONERROR_FUNCTION (70 of 78 remaining) [2021-11-05 14:47:43,977 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr3ASSERT_VIOLATIONERROR_FUNCTION (69 of 78 remaining) [2021-11-05 14:47:43,978 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr0ASSERT_VIOLATIONERROR_FUNCTION (68 of 78 remaining) [2021-11-05 14:47:43,978 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr1ASSERT_VIOLATIONERROR_FUNCTION (67 of 78 remaining) [2021-11-05 14:47:43,978 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr2ASSERT_VIOLATIONERROR_FUNCTION (66 of 78 remaining) [2021-11-05 14:47:43,978 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr3ASSERT_VIOLATIONERROR_FUNCTION (65 of 78 remaining) [2021-11-05 14:47:43,978 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (64 of 78 remaining) [2021-11-05 14:47:43,979 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (63 of 78 remaining) [2021-11-05 14:47:43,979 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (62 of 78 remaining) [2021-11-05 14:47:43,979 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION (61 of 78 remaining) [2021-11-05 14:47:43,979 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION (60 of 78 remaining) [2021-11-05 14:47:43,979 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION (59 of 78 remaining) [2021-11-05 14:47:43,980 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONERROR_FUNCTION (58 of 78 remaining) [2021-11-05 14:47:43,980 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONERROR_FUNCTION (57 of 78 remaining) [2021-11-05 14:47:43,980 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONERROR_FUNCTION (56 of 78 remaining) [2021-11-05 14:47:43,980 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONERROR_FUNCTION (55 of 78 remaining) [2021-11-05 14:47:43,980 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONERROR_FUNCTION (54 of 78 remaining) [2021-11-05 14:47:43,980 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONERROR_FUNCTION (53 of 78 remaining) [2021-11-05 14:47:43,981 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONERROR_FUNCTION (52 of 78 remaining) [2021-11-05 14:47:43,981 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONERROR_FUNCTION (51 of 78 remaining) [2021-11-05 14:47:43,981 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONERROR_FUNCTION (50 of 78 remaining) [2021-11-05 14:47:43,981 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONERROR_FUNCTION (49 of 78 remaining) [2021-11-05 14:47:43,981 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONERROR_FUNCTION (48 of 78 remaining) [2021-11-05 14:47:43,981 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONERROR_FUNCTION (47 of 78 remaining) [2021-11-05 14:47:43,982 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONERROR_FUNCTION (46 of 78 remaining) [2021-11-05 14:47:43,982 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION (45 of 78 remaining) [2021-11-05 14:47:43,982 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONERROR_FUNCTION (44 of 78 remaining) [2021-11-05 14:47:43,982 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr22ASSERT_VIOLATIONERROR_FUNCTION (43 of 78 remaining) [2021-11-05 14:47:43,982 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr23ASSERT_VIOLATIONERROR_FUNCTION (42 of 78 remaining) [2021-11-05 14:47:43,982 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr24ASSERT_VIOLATIONERROR_FUNCTION (41 of 78 remaining) [2021-11-05 14:47:43,983 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr25ASSERT_VIOLATIONERROR_FUNCTION (40 of 78 remaining) [2021-11-05 14:47:43,983 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr26ASSERT_VIOLATIONERROR_FUNCTION (39 of 78 remaining) [2021-11-05 14:47:43,983 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr27ASSERT_VIOLATIONERROR_FUNCTION (38 of 78 remaining) [2021-11-05 14:47:43,983 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr28ASSERT_VIOLATIONERROR_FUNCTION (37 of 78 remaining) [2021-11-05 14:47:43,983 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr29ASSERT_VIOLATIONERROR_FUNCTION (36 of 78 remaining) [2021-11-05 14:47:43,983 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr30ASSERT_VIOLATIONERROR_FUNCTION (35 of 78 remaining) [2021-11-05 14:47:43,984 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr31ASSERT_VIOLATIONERROR_FUNCTION (34 of 78 remaining) [2021-11-05 14:47:43,984 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr32ASSERT_VIOLATIONERROR_FUNCTION (33 of 78 remaining) [2021-11-05 14:47:43,984 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr33ASSERT_VIOLATIONERROR_FUNCTION (32 of 78 remaining) [2021-11-05 14:47:43,984 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr34ASSERT_VIOLATIONERROR_FUNCTION (31 of 78 remaining) [2021-11-05 14:47:43,984 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr35ASSERT_VIOLATIONERROR_FUNCTION (30 of 78 remaining) [2021-11-05 14:47:43,984 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr36ASSERT_VIOLATIONERROR_FUNCTION (29 of 78 remaining) [2021-11-05 14:47:43,985 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr37ASSERT_VIOLATIONERROR_FUNCTION (28 of 78 remaining) [2021-11-05 14:47:43,986 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr38ASSERT_VIOLATIONERROR_FUNCTION (27 of 78 remaining) [2021-11-05 14:47:43,986 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr39ASSERT_VIOLATIONERROR_FUNCTION (26 of 78 remaining) [2021-11-05 14:47:43,986 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr40ASSERT_VIOLATIONERROR_FUNCTION (25 of 78 remaining) [2021-11-05 14:47:43,986 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr41ASSERT_VIOLATIONERROR_FUNCTION (24 of 78 remaining) [2021-11-05 14:47:43,986 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr42ASSERT_VIOLATIONERROR_FUNCTION (23 of 78 remaining) [2021-11-05 14:47:43,986 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr43ASSERT_VIOLATIONERROR_FUNCTION (22 of 78 remaining) [2021-11-05 14:47:43,987 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr44ASSERT_VIOLATIONERROR_FUNCTION (21 of 78 remaining) [2021-11-05 14:47:43,987 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr45ASSERT_VIOLATIONERROR_FUNCTION (20 of 78 remaining) [2021-11-05 14:47:43,987 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr46ASSERT_VIOLATIONERROR_FUNCTION (19 of 78 remaining) [2021-11-05 14:47:43,987 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr47ASSERT_VIOLATIONERROR_FUNCTION (18 of 78 remaining) [2021-11-05 14:47:43,987 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr48ASSERT_VIOLATIONERROR_FUNCTION (17 of 78 remaining) [2021-11-05 14:47:43,987 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr49ASSERT_VIOLATIONERROR_FUNCTION (16 of 78 remaining) [2021-11-05 14:47:43,988 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr50ASSERT_VIOLATIONERROR_FUNCTION (15 of 78 remaining) [2021-11-05 14:47:43,988 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr51ASSERT_VIOLATIONERROR_FUNCTION (14 of 78 remaining) [2021-11-05 14:47:43,988 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr52ASSERT_VIOLATIONERROR_FUNCTION (13 of 78 remaining) [2021-11-05 14:47:43,989 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr53ASSERT_VIOLATIONERROR_FUNCTION (12 of 78 remaining) [2021-11-05 14:47:43,989 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr54ASSERT_VIOLATIONERROR_FUNCTION (11 of 78 remaining) [2021-11-05 14:47:43,989 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr55ASSERT_VIOLATIONERROR_FUNCTION (10 of 78 remaining) [2021-11-05 14:47:43,990 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr56ASSERT_VIOLATIONERROR_FUNCTION (9 of 78 remaining) [2021-11-05 14:47:43,990 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr57ASSERT_VIOLATIONERROR_FUNCTION (8 of 78 remaining) [2021-11-05 14:47:43,990 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr58ASSERT_VIOLATIONERROR_FUNCTION (7 of 78 remaining) [2021-11-05 14:47:43,990 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr59ASSERT_VIOLATIONERROR_FUNCTION (6 of 78 remaining) [2021-11-05 14:47:43,990 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr60ASSERT_VIOLATIONERROR_FUNCTION (5 of 78 remaining) [2021-11-05 14:47:43,990 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr61ASSERT_VIOLATIONERROR_FUNCTION (4 of 78 remaining) [2021-11-05 14:47:43,991 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION (3 of 78 remaining) [2021-11-05 14:47:43,991 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr63ASSERT_VIOLATIONERROR_FUNCTION (2 of 78 remaining) [2021-11-05 14:47:43,991 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr64ASSERT_VIOLATIONERROR_FUNCTION (1 of 78 remaining) [2021-11-05 14:47:43,991 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr65ASSERT_VIOLATIONERROR_FUNCTION (0 of 78 remaining) [2021-11-05 14:47:43,991 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-05 14:47:43,994 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:47:43,998 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-05 14:47:44,323 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 05.11 02:47:44 BoogieIcfgContainer [2021-11-05 14:47:44,323 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-05 14:47:44,324 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-05 14:47:44,324 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-05 14:47:44,324 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-05 14:47:44,324 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.11 02:47:24" (3/4) ... [2021-11-05 14:47:44,327 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-05 14:47:44,327 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-05 14:47:44,328 INFO L158 Benchmark]: Toolchain (without parser) took 59953.90ms. Allocated memory was 58.7MB in the beginning and 3.1GB in the end (delta: 3.0GB). Free memory was 32.6MB in the beginning and 1.6GB in the end (delta: -1.6GB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. [2021-11-05 14:47:44,328 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 46.1MB. Free memory was 28.2MB in the beginning and 28.1MB in the end (delta: 31.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-05 14:47:44,328 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3201.72ms. Allocated memory was 58.7MB in the beginning and 148.9MB in the end (delta: 90.2MB). Free memory was 32.3MB in the beginning and 69.6MB in the end (delta: -37.3MB). Peak memory consumption was 67.8MB. Max. memory is 16.1GB. [2021-11-05 14:47:44,328 INFO L158 Benchmark]: Boogie Procedure Inliner took 1280.46ms. Allocated memory was 148.9MB in the beginning and 515.9MB in the end (delta: 367.0MB). Free memory was 68.9MB in the beginning and 367.6MB in the end (delta: -298.7MB). Peak memory consumption was 111.5MB. Max. memory is 16.1GB. [2021-11-05 14:47:44,329 INFO L158 Benchmark]: Boogie Preprocessor took 1417.50ms. Allocated memory is still 515.9MB. Free memory was 367.6MB in the beginning and 293.9MB in the end (delta: 73.7MB). Peak memory consumption was 190.1MB. Max. memory is 16.1GB. [2021-11-05 14:47:44,329 INFO L158 Benchmark]: RCFGBuilder took 34047.15ms. Allocated memory was 515.9MB in the beginning and 2.2GB in the end (delta: 1.7GB). Free memory was 293.9MB in the beginning and 1.8GB in the end (delta: -1.5GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. [2021-11-05 14:47:44,329 INFO L158 Benchmark]: TraceAbstraction took 19998.12ms. Allocated memory was 2.2GB in the beginning and 3.1GB in the end (delta: 861.9MB). Free memory was 1.8GB in the beginning and 1.6GB in the end (delta: 174.1MB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. [2021-11-05 14:47:44,330 INFO L158 Benchmark]: Witness Printer took 3.38ms. Allocated memory is still 3.1GB. Free memory was 1.6GB in the beginning and 1.6GB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-05 14:47:44,332 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 46.1MB. Free memory was 28.2MB in the beginning and 28.1MB in the end (delta: 31.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3201.72ms. Allocated memory was 58.7MB in the beginning and 148.9MB in the end (delta: 90.2MB). Free memory was 32.3MB in the beginning and 69.6MB in the end (delta: -37.3MB). Peak memory consumption was 67.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 1280.46ms. Allocated memory was 148.9MB in the beginning and 515.9MB in the end (delta: 367.0MB). Free memory was 68.9MB in the beginning and 367.6MB in the end (delta: -298.7MB). Peak memory consumption was 111.5MB. Max. memory is 16.1GB. * Boogie Preprocessor took 1417.50ms. Allocated memory is still 515.9MB. Free memory was 367.6MB in the beginning and 293.9MB in the end (delta: 73.7MB). Peak memory consumption was 190.1MB. Max. memory is 16.1GB. * RCFGBuilder took 34047.15ms. Allocated memory was 515.9MB in the beginning and 2.2GB in the end (delta: 1.7GB). Free memory was 293.9MB in the beginning and 1.8GB in the end (delta: -1.5GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. * TraceAbstraction took 19998.12ms. Allocated memory was 2.2GB in the beginning and 3.1GB in the end (delta: 861.9MB). Free memory was 1.8GB in the beginning and 1.6GB in the end (delta: 174.1MB). Peak memory consumption was 1.0GB. Max. memory is 16.1GB. * Witness Printer took 3.38ms. Allocated memory is still 3.1GB. Free memory was 1.6GB in the beginning and 1.6GB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.00ms ErrorAutomatonConstructionTimeTotal, 0.00ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.00ms ErrorAutomatonConstructionTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10595. Possible FailurePath: [L5971] static unsigned int vhost_zcopy_mask ; [L9348] static int experimental_zcopytx ; [L10590-L10593] static struct file_operations const vhost_net_fops = {& __this_module, & noop_llseek, 0, 0, 0, 0, 0, 0, & vhost_net_ioctl, & vhost_net_compat_ioctl, 0, & vhost_net_open, 0, & vhost_net_release, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L10594-L10595] static struct miscdevice vhost_net_misc = {238, "vhost-net", & vhost_net_fops, {0, 0}, 0, 0, 0, (unsigned short)0}; [L10620] int LDV_IN_INTERRUPT ; [L11002] static int ldv_mutex_cred_guard_mutex ; [L11109] static int ldv_mutex_lock ; [L11216] static int ldv_mutex_mtx ; [L11323] static int ldv_mutex_mutex ; VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=0, ldv_mutex_cred_guard_mutex=0, ldv_mutex_lock=0, ldv_mutex_mtx=0, ldv_mutex_mutex=0, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10623] struct inode *var_group1 ; [L10624] struct file *var_group2 ; [L10625] unsigned int var_vhost_net_ioctl_27_p1 ; [L10626] unsigned long var_vhost_net_ioctl_27_p2 ; [L10627] unsigned int var_vhost_net_compat_ioctl_28_p1 ; [L10628] unsigned long var_vhost_net_compat_ioctl_28_p2 ; [L10629] int res_vhost_net_open_13 ; [L10630] int ldv_s_vhost_net_fops_file_operations ; [L10631] int tmp ; [L10632] int tmp___0 ; [L10633] int tmp___1 ; [L10635] ldv_s_vhost_net_fops_file_operations = 0 [L10636] LDV_IN_INTERRUPT = 1 [L11433] ldv_mutex_cred_guard_mutex = 1 [L11434] ldv_mutex_lock = 1 [L11435] ldv_mutex_mtx = 1 [L11436] ldv_mutex_mutex = 1 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10598] int tmp ; VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10600] COND FALSE !(experimental_zcopytx != 0) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L11595] return __VERIFIER_nondet_int(); [L10604] tmp = misc_register(& vhost_net_misc) [L10605] return (tmp); VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10639] tmp = vhost_net_init() [L10640] COND FALSE !(tmp != 0) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10682] tmp___1 = __VERIFIER_nondet_int() [L10683] COND TRUE tmp___1 != 0 || ldv_s_vhost_net_fops_file_operations != 0 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10646] tmp___0 = __VERIFIER_nondet_int() [L10648] case 0: [L10661] case 1: [L10669] case 2: VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10521] struct vhost_net *n ; [L10522] void *argp ; [L10523] u64 *featurep ; [L10524] struct vhost_vring_file backend ; [L10525] u64 features ; [L10526] int r ; [L10527] unsigned long tmp ; [L10528] long tmp___0 ; [L10529] int tmp___1 ; [L10530] unsigned long tmp___2 ; [L10531] int tmp___3 ; [L10532] long tmp___4 ; [L10533] long tmp___5 ; [L10535] EXPR f->private_data [L10535] n = (struct vhost_net *)f->private_data [L10536] argp = (void *)arg [L10537] featurep = (u64 *)argp [L10539] case 1074310960U: [L10547] case 2148052736U: [L10555] case 1074310912U: [L10567] case 44802U: [L10445] struct socket *tx_sock ; [L10446] struct socket *rx_sock ; [L10447] long err ; [L10449] tx_sock = 0 [L10450] rx_sock = 0 [L11361] COND TRUE ldv_mutex_mutex == 1 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L11365] ldv_mutex_mutex = 2 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6410] struct task_struct *tmp ; [L5283] struct task_struct *pfo_ret__ ; [L5286] case 1UL: [L5289] case 2UL: [L5292] case 4UL: [L5295] case 8UL: VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L5302] return (pfo_ret__); VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6412] tmp = get_current() [L6413] EXPR dev->mm [L6413] EXPR tmp->mm VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6413] EXPR (unsigned long )dev->mm == (unsigned long )tmp->mm ? 0L : -1L VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6413] return ((unsigned long )dev->mm == (unsigned long )tmp->mm ? 0L : -1L); [L10452] err = vhost_dev_check_owner(& n->dev) [L10453] COND FALSE !(err != 0L) [L10155] struct socket *sock ; [L10156] bool __warned ; [L10157] int tmp ; [L10158] int tmp___0 ; [L11361] COND FALSE !(ldv_mutex_mutex == 1) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10992] reach_error() VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 7743 locations, 78 error locations. Started 1 CEGAR loops. OverallTime: 19597.51ms, OverallIterations: 8, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 36.97ms, AutomataDifference: 12299.26ms, DeadEndRemovalTime: 0.00ms, HoareAnnotationTime: 0.00ms, InitialAbstractionConstructionTime: 99.67ms, PartialOrderReductionTime: 0.00ms, HoareTripleCheckerStatistics: 4 mSolverCounterUnknown, 49705 SdHoareTripleChecker+Valid, 9817.53ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 49695 mSDsluCounter, 103225 SdHoareTripleChecker+Invalid, 9074.73ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 28994 mSDsCounter, 416 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 586 IncrementalHoareTripleChecker+Invalid, 1006 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 416 mSolverCounterUnsat, 74231 mSDtfsCounter, 586 mSolverCounterSat, 168.29ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 23.19ms Time, 0.00ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=9762occurred in iteration=6, InterpolantAutomatonStates: 21, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.00ms DumpTime, AutomataMinimizationStatistics: 2316.85ms AutomataMinimizationTime, 7 MinimizatonAttempts, 3160 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 114.68ms SsaConstructionTime, 2308.23ms SatisfiabilityAnalysisTime, 660.36ms InterpolantComputationTime, 150 NumberOfCodeBlocks, 150 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 108 ConstructedInterpolants, 0 QuantifiedInterpolants, 207 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-05 14:47:44,525 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5f08f0f [2021-11-05 14:47:46,400 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-05 14:47:46,402 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-05 14:47:46,427 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-05 14:47:46,428 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-05 14:47:46,429 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-05 14:47:46,430 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-05 14:47:46,432 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-05 14:47:46,433 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-05 14:47:46,434 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-05 14:47:46,435 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-05 14:47:46,436 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-05 14:47:46,436 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-05 14:47:46,437 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-05 14:47:46,438 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-05 14:47:46,439 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-05 14:47:46,440 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-05 14:47:46,441 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-05 14:47:46,442 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-05 14:47:46,444 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-05 14:47:46,445 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-05 14:47:46,446 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-05 14:47:46,447 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-05 14:47:46,448 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-05 14:47:46,450 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-05 14:47:46,450 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-05 14:47:46,451 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-05 14:47:46,452 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-05 14:47:46,452 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-05 14:47:46,453 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-05 14:47:46,453 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-05 14:47:46,454 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-05 14:47:46,455 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-05 14:47:46,455 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-05 14:47:46,456 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-05 14:47:46,457 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-05 14:47:46,457 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-05 14:47:46,458 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-05 14:47:46,458 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-05 14:47:46,459 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-05 14:47:46,459 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-05 14:47:46,460 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-05 14:47:46,486 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-05 14:47:46,486 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-05 14:47:46,486 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-05 14:47:46,486 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-05 14:47:46,488 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-05 14:47:46,488 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-05 14:47:46,488 INFO L138 SettingsManager]: * Use SBE=true [2021-11-05 14:47:46,488 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-05 14:47:46,488 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-05 14:47:46,489 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-05 14:47:46,489 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-05 14:47:46,489 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-05 14:47:46,489 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-05 14:47:46,489 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-05 14:47:46,489 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-05 14:47:46,490 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-05 14:47:46,490 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-05 14:47:46,490 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-05 14:47:46,490 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-05 14:47:46,490 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-05 14:47:46,490 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-05 14:47:46,491 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-05 14:47:46,491 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-05 14:47:46,491 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-05 14:47:46,491 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-05 14:47:46,496 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-05 14:47:46,496 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-05 14:47:46,497 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-05 14:47:46,497 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-05 14:47:46,497 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-05 14:47:46,497 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-05 14:47:46,497 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f [2021-11-05 14:47:46,787 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-05 14:47:46,804 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-05 14:47:46,807 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-05 14:47:46,808 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-05 14:47:46,808 INFO L275 PluginConnector]: CDTParser initialized [2021-11-05 14:47:46,810 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-05 14:47:46,871 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aaf360e5e/28546ada82414c09acb7e794dd659307/FLAG96994ccea [2021-11-05 14:47:47,754 INFO L306 CDTParser]: Found 1 translation units. [2021-11-05 14:47:47,755 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-05 14:47:47,798 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aaf360e5e/28546ada82414c09acb7e794dd659307/FLAG96994ccea [2021-11-05 14:47:48,238 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/aaf360e5e/28546ada82414c09acb7e794dd659307 [2021-11-05 14:47:48,241 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-05 14:47:48,242 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-05 14:47:48,244 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-05 14:47:48,244 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-05 14:47:48,247 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-05 14:47:48,248 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 05.11 02:47:48" (1/1) ... [2021-11-05 14:47:48,249 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@319b55b0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:48, skipping insertion in model container [2021-11-05 14:47:48,249 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 05.11 02:47:48" (1/1) ... [2021-11-05 14:47:48,255 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-05 14:47:48,417 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-05 14:47:50,865 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-05 14:47:50,977 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-05 14:47:50,996 INFO L203 MainTranslator]: Completed pre-run [2021-11-05 14:47:51,399 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-05 14:47:51,408 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-05 14:47:51,498 INFO L208 MainTranslator]: Completed translation [2021-11-05 14:47:51,500 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51 WrapperNode [2021-11-05 14:47:51,501 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-05 14:47:51,502 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-05 14:47:51,502 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-05 14:47:51,503 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-05 14:47:51,509 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:51,635 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:52,688 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-05 14:47:52,689 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-05 14:47:52,689 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-05 14:47:52,689 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-05 14:47:52,697 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:52,697 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:52,876 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:52,877 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:53,505 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:53,639 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:53,703 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:53,965 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-05 14:47:53,966 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-05 14:47:53,966 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-05 14:47:53,966 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-05 14:47:53,967 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (1/1) ... [2021-11-05 14:47:53,973 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-05 14:47:53,981 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-05 14:47:53,997 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-05 14:47:54,063 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-05 14:47:54,116 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2021-11-05 14:47:54,117 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2021-11-05 14:47:54,117 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-05 14:47:54,118 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2021-11-05 14:47:54,118 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2021-11-05 14:47:54,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-05 14:47:54,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-05 14:47:54,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-05 14:47:54,118 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-05 14:47:54,118 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-05 14:47:54,119 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2021-11-05 14:47:54,119 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2021-11-05 14:47:54,119 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-05 14:47:54,119 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2021-11-05 14:47:54,119 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2021-11-05 14:47:54,119 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-05 14:47:54,119 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-05 14:47:54,120 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2021-11-05 14:47:54,121 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2021-11-05 14:47:54,121 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-05 14:47:54,121 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-05 14:47:54,121 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-05 14:47:54,122 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-05 14:47:54,122 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2021-11-05 14:47:54,122 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2021-11-05 14:47:54,122 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-05 14:47:54,122 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-05 14:47:54,122 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-05 14:47:54,123 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-05 14:47:54,123 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2021-11-05 14:47:54,123 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2021-11-05 14:47:54,123 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-05 14:47:54,123 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-05 14:47:54,123 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-05 14:47:54,124 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-05 14:47:54,124 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-05 14:47:54,124 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-05 14:47:54,124 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-05 14:47:54,124 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-05 14:47:54,125 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-05 14:47:54,125 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-05 14:47:54,125 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-05 14:48:24,108 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,109 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,109 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,109 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,109 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,109 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:24,110 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume !__copy_from_user_#t~switch141; [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1218: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1219: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-2: havoc __copy_to_user_#t~switch146; [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-3: havoc __copy_to_user_#t~switch146; [2021-11-05 14:48:24,111 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825: havoc __copy_to_user_#t~switch146; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-1: havoc __copy_to_user_#t~switch146; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,112 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,113 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,114 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,115 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,115 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,115 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,115 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,115 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,115 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,116 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,116 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,116 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,116 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,116 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,116 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,117 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,117 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,117 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,117 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,117 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,117 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,118 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,118 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:48:24,118 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,118 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:48:24,118 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,118 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,119 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,120 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,120 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,120 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,120 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:24,120 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch146; [2021-11-05 14:48:24,120 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:24,121 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume !__copy_to_user_#t~switch146; [2021-11-05 14:48:24,121 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:24,121 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume !__copy_to_user_#t~switch146; [2021-11-05 14:48:24,121 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:24,121 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume !__copy_to_user_#t~switch146; [2021-11-05 14:48:24,122 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##164: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,122 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##163: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,122 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1876: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,122 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1877: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,122 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1811: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,123 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1812: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,123 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##757: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,123 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##756: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,123 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-3: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-05 14:48:24,123 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-05 14:48:24,124 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-7: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-05 14:48:24,124 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-5: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-05 14:48:24,124 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-11: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-05 14:48:24,124 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-9: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-05 14:48:24,124 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-19: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-05 14:48:24,124 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-20: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-85: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-84: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-79: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-78: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-121: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-120: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-05 14:48:24,125 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-179: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:48:24,126 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-180: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:48:24,126 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-186: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-05 14:48:24,126 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-185: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-05 14:48:24,126 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##822: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-05 14:48:24,126 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##821: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-05 14:48:24,126 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760-1: havoc __copy_from_user_#t~switch141; [2021-11-05 14:48:24,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-05 14:48:24,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,127 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:24,128 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-05 14:48:24,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:24,129 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-05 14:48:44,217 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,217 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,218 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:44,218 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-05 14:48:44,219 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,219 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,219 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-05 14:48:44,219 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-05 14:48:44,219 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##362: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-05 14:48:44,219 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##361: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,220 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-05 14:48:44,220 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-29: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-05 14:48:44,220 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-30: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-05 14:48:44,220 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-05 14:48:44,221 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,221 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-05 14:48:44,221 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,221 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-05 14:48:44,221 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-05 14:48:44,221 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-05 14:48:44,222 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-05 14:48:44,222 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-05 14:49:57,732 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-05 14:49:57,733 INFO L299 CfgBuilder]: Removed 8232 assume(true) statements. [2021-11-05 14:49:57,740 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.11 02:49:57 BoogieIcfgContainer [2021-11-05 14:49:57,740 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-05 14:49:57,742 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-05 14:49:57,742 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-05 14:49:57,744 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-05 14:49:57,745 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 05.11 02:47:48" (1/3) ... [2021-11-05 14:49:57,745 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2013b5d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 05.11 02:49:57, skipping insertion in model container [2021-11-05 14:49:57,745 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 05.11 02:47:51" (2/3) ... [2021-11-05 14:49:57,746 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2013b5d1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 05.11 02:49:57, skipping insertion in model container [2021-11-05 14:49:57,746 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 05.11 02:49:57" (3/3) ... [2021-11-05 14:49:57,747 INFO L111 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-05 14:49:57,751 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-05 14:49:57,751 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2021-11-05 14:49:57,835 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-05 14:49:57,843 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-05 14:49:57,843 INFO L340 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2021-11-05 14:49:57,970 INFO L276 IsEmpty]: Start isEmpty. Operand has 8404 states, 8302 states have (on average 1.4053240183088413) internal successors, (11667), 8384 states have internal predecessors, (11667), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-05 14:49:57,973 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-05 14:49:57,973 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:49:57,974 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:49:57,975 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr66ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:49:57,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:49:57,982 INFO L85 PathProgramCache]: Analyzing trace with hash 1935377389, now seen corresponding path program 1 times [2021-11-05 14:49:57,996 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:49:57,997 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1074415912] [2021-11-05 14:49:57,998 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:49:57,998 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:49:57,998 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:49:58,003 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:49:58,052 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-05 14:50:00,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:00,634 INFO L263 TraceCheckSpWp]: Trace formula consists of 969 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:00,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:00,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:00,780 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:00,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:00,871 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:00,871 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1074415912] [2021-11-05 14:50:00,871 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1074415912] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:00,872 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:00,872 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2021-11-05 14:50:00,873 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2104738583] [2021-11-05 14:50:00,873 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:00,876 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:50:00,876 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:00,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:50:00,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:00,914 INFO L87 Difference]: Start difference. First operand has 8404 states, 8302 states have (on average 1.4053240183088413) internal successors, (11667), 8384 states have internal predecessors, (11667), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:01,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:01,340 INFO L93 Difference]: Finished difference Result 16804 states and 23404 transitions. [2021-11-05 14:50:01,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:50:01,345 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-05 14:50:01,346 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:01,407 INFO L225 Difference]: With dead ends: 16804 [2021-11-05 14:50:01,408 INFO L226 Difference]: Without dead ends: 8314 [2021-11-05 14:50:01,438 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 27.23ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:01,441 INFO L933 BasicCegarLoop]: 11576 mSDtfsCounter, 11576 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 30.67ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11576 SdHoareTripleChecker+Valid, 11576 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 35.28ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 32.41ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:01,442 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11576 Valid, 11576 Invalid, 3 Unknown, 0 Unchecked, 35.28ms Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 32.41ms Time] [2021-11-05 14:50:01,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8314 states. [2021-11-05 14:50:01,698 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8314 to 8314. [2021-11-05 14:50:01,717 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8314 states, 8213 states have (on average 1.3847558748325826) internal successors, (11373), 8294 states have internal predecessors, (11373), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-05 14:50:01,754 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8314 states to 8314 states and 11403 transitions. [2021-11-05 14:50:01,756 INFO L78 Accepts]: Start accepts. Automaton has 8314 states and 11403 transitions. Word has length 10 [2021-11-05 14:50:01,757 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:01,757 INFO L470 AbstractCegarLoop]: Abstraction has 8314 states and 11403 transitions. [2021-11-05 14:50:01,757 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:01,757 INFO L276 IsEmpty]: Start isEmpty. Operand 8314 states and 11403 transitions. [2021-11-05 14:50:01,758 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-05 14:50:01,758 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:01,758 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:01,789 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:01,983 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:01,984 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr66ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:01,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:01,984 INFO L85 PathProgramCache]: Analyzing trace with hash 302921136, now seen corresponding path program 1 times [2021-11-05 14:50:01,988 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:01,988 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [427689290] [2021-11-05 14:50:01,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:01,988 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:01,989 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:01,992 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:01,994 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-05 14:50:04,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:04,515 INFO L263 TraceCheckSpWp]: Trace formula consists of 966 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:04,517 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:04,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:04,649 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:04,764 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:04,765 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:04,765 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [427689290] [2021-11-05 14:50:04,765 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [427689290] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:04,765 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:04,765 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-05 14:50:04,766 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1970876915] [2021-11-05 14:50:04,766 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:04,767 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:50:04,767 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:04,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:50:04,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:04,768 INFO L87 Difference]: Start difference. First operand 8314 states and 11403 transitions. Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:07,016 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.24s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:50:07,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:07,323 INFO L93 Difference]: Finished difference Result 8314 states and 11403 transitions. [2021-11-05 14:50:07,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:50:07,324 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-05 14:50:07,324 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:07,361 INFO L225 Difference]: With dead ends: 8314 [2021-11-05 14:50:07,361 INFO L226 Difference]: Without dead ends: 8312 [2021-11-05 14:50:07,367 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 22.87ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:07,368 INFO L933 BasicCegarLoop]: 11400 mSDtfsCounter, 11393 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2246.18ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11393 SdHoareTripleChecker+Valid, 11400 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 29.14ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2320.34ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:07,369 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11393 Valid, 11400 Invalid, 2 Unknown, 0 Unchecked, 29.14ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2320.34ms Time] [2021-11-05 14:50:07,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8312 states. [2021-11-05 14:50:07,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8312 to 8312. [2021-11-05 14:50:07,627 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8312 states, 8212 states have (on average 1.3846809547004384) internal successors, (11371), 8292 states have internal predecessors, (11371), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-05 14:50:07,651 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8312 states to 8312 states and 11401 transitions. [2021-11-05 14:50:07,652 INFO L78 Accepts]: Start accepts. Automaton has 8312 states and 11401 transitions. Word has length 10 [2021-11-05 14:50:07,652 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:07,652 INFO L470 AbstractCegarLoop]: Abstraction has 8312 states and 11401 transitions. [2021-11-05 14:50:07,652 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:07,653 INFO L276 IsEmpty]: Start isEmpty. Operand 8312 states and 11401 transitions. [2021-11-05 14:50:07,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2021-11-05 14:50:07,653 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:07,653 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:07,683 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:07,875 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:07,876 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr67ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:07,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:07,876 INFO L85 PathProgramCache]: Analyzing trace with hash 800646904, now seen corresponding path program 1 times [2021-11-05 14:50:07,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:07,881 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [197224325] [2021-11-05 14:50:07,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:07,881 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:07,881 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:07,882 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:07,884 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-05 14:50:10,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:10,384 INFO L263 TraceCheckSpWp]: Trace formula consists of 967 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:10,388 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:10,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:10,527 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:10,644 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:10,645 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:10,645 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [197224325] [2021-11-05 14:50:10,645 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [197224325] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:10,645 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:10,645 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-05 14:50:10,645 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1220896641] [2021-11-05 14:50:10,646 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:10,646 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:50:10,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:10,647 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:50:10,647 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:10,647 INFO L87 Difference]: Start difference. First operand 8312 states and 11401 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:12,824 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:50:13,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:13,115 INFO L93 Difference]: Finished difference Result 8312 states and 11401 transitions. [2021-11-05 14:50:13,116 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:50:13,116 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2021-11-05 14:50:13,116 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:13,153 INFO L225 Difference]: With dead ends: 8312 [2021-11-05 14:50:13,153 INFO L226 Difference]: Without dead ends: 8310 [2021-11-05 14:50:13,161 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 23.09ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:13,164 INFO L933 BasicCegarLoop]: 11398 mSDtfsCounter, 11390 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2178.39ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11390 SdHoareTripleChecker+Valid, 11398 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 19.12ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2244.16ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:13,169 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11390 Valid, 11398 Invalid, 2 Unknown, 0 Unchecked, 19.12ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2244.16ms Time] [2021-11-05 14:50:13,185 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8310 states. [2021-11-05 14:50:13,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8310 to 8310. [2021-11-05 14:50:13,443 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8310 states, 8211 states have (on average 1.3846060163195713) internal successors, (11369), 8290 states have internal predecessors, (11369), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-05 14:50:13,465 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8310 states to 8310 states and 11399 transitions. [2021-11-05 14:50:13,466 INFO L78 Accepts]: Start accepts. Automaton has 8310 states and 11399 transitions. Word has length 11 [2021-11-05 14:50:13,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:13,467 INFO L470 AbstractCegarLoop]: Abstraction has 8310 states and 11399 transitions. [2021-11-05 14:50:13,467 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:13,468 INFO L276 IsEmpty]: Start isEmpty. Operand 8310 states and 11399 transitions. [2021-11-05 14:50:13,469 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-05 14:50:13,469 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:13,469 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:13,496 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:13,682 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:13,683 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr68ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:13,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:13,683 INFO L85 PathProgramCache]: Analyzing trace with hash -949723462, now seen corresponding path program 1 times [2021-11-05 14:50:13,686 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:13,686 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [444441833] [2021-11-05 14:50:13,686 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:13,686 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:13,686 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:13,689 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:13,690 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-05 14:50:15,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:16,005 INFO L263 TraceCheckSpWp]: Trace formula consists of 968 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:16,007 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:16,171 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:16,171 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:16,292 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:16,293 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:16,293 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [444441833] [2021-11-05 14:50:16,293 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [444441833] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:16,293 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:16,293 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-05 14:50:16,293 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [436072597] [2021-11-05 14:50:16,294 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:16,294 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:50:16,294 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:16,294 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:50:16,295 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:16,295 INFO L87 Difference]: Start difference. First operand 8310 states and 11399 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:18,470 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:50:18,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:18,769 INFO L93 Difference]: Finished difference Result 8310 states and 11399 transitions. [2021-11-05 14:50:18,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:50:18,770 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-05 14:50:18,770 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:18,814 INFO L225 Difference]: With dead ends: 8310 [2021-11-05 14:50:18,814 INFO L226 Difference]: Without dead ends: 8308 [2021-11-05 14:50:18,820 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 26.23ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:18,823 INFO L933 BasicCegarLoop]: 11396 mSDtfsCounter, 11387 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2177.42ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11387 SdHoareTripleChecker+Valid, 11396 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 18.01ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2242.17ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:18,826 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11387 Valid, 11396 Invalid, 2 Unknown, 0 Unchecked, 18.01ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2242.17ms Time] [2021-11-05 14:50:18,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8308 states. [2021-11-05 14:50:19,066 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8308 to 8308. [2021-11-05 14:50:19,085 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8308 states, 8210 states have (on average 1.3845310596833131) internal successors, (11367), 8288 states have internal predecessors, (11367), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-05 14:50:19,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8308 states to 8308 states and 11397 transitions. [2021-11-05 14:50:19,111 INFO L78 Accepts]: Start accepts. Automaton has 8308 states and 11397 transitions. Word has length 12 [2021-11-05 14:50:19,111 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:19,112 INFO L470 AbstractCegarLoop]: Abstraction has 8308 states and 11397 transitions. [2021-11-05 14:50:19,112 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:19,112 INFO L276 IsEmpty]: Start isEmpty. Operand 8308 states and 11397 transitions. [2021-11-05 14:50:19,112 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-05 14:50:19,112 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:19,113 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:19,149 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:19,327 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:19,328 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr69ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:19,328 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:19,328 INFO L85 PathProgramCache]: Analyzing trace with hash 623370050, now seen corresponding path program 1 times [2021-11-05 14:50:19,331 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:19,331 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1508942842] [2021-11-05 14:50:19,331 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:19,331 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:19,331 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:19,332 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:19,333 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-05 14:50:21,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:21,781 INFO L263 TraceCheckSpWp]: Trace formula consists of 969 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:21,785 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:21,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:21,953 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:22,103 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:22,103 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:22,103 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1508942842] [2021-11-05 14:50:22,103 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1508942842] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:22,103 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:22,103 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-05 14:50:22,104 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1997099344] [2021-11-05 14:50:22,104 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:22,104 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:50:22,104 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:22,104 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:50:22,104 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:22,104 INFO L87 Difference]: Start difference. First operand 8308 states and 11397 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:24,281 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-05 14:50:26,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:26,023 INFO L93 Difference]: Finished difference Result 17275 states and 23686 transitions. [2021-11-05 14:50:26,023 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:50:26,023 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-05 14:50:26,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:26,053 INFO L225 Difference]: With dead ends: 17275 [2021-11-05 14:50:26,053 INFO L226 Difference]: Without dead ends: 8969 [2021-11-05 14:50:26,074 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 24.07ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:26,075 INFO L933 BasicCegarLoop]: 12058 mSDtfsCounter, 3241 mSDsluCounter, 8783 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 99 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3352.92ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 3241 SdHoareTripleChecker+Valid, 20841 SdHoareTripleChecker+Invalid, 271 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 35.16ms SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3492.06ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:26,075 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3241 Valid, 20841 Invalid, 271 Unknown, 0 Unchecked, 35.16ms Time], IncrementalHoareTripleChecker [99 Valid, 171 Invalid, 1 Unknown, 0 Unchecked, 3492.06ms Time] [2021-11-05 14:50:26,089 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8969 states. [2021-11-05 14:50:26,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8969 to 8947. [2021-11-05 14:50:26,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8947 states, 8848 states have (on average 1.3740958408679929) internal successors, (12158), 8913 states have internal predecessors, (12158), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-05 14:50:26,419 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8947 states to 8947 states and 12214 transitions. [2021-11-05 14:50:26,419 INFO L78 Accepts]: Start accepts. Automaton has 8947 states and 12214 transitions. Word has length 13 [2021-11-05 14:50:26,420 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:26,420 INFO L470 AbstractCegarLoop]: Abstraction has 8947 states and 12214 transitions. [2021-11-05 14:50:26,420 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:26,420 INFO L276 IsEmpty]: Start isEmpty. Operand 8947 states and 12214 transitions. [2021-11-05 14:50:26,422 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-11-05 14:50:26,422 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:26,422 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:26,454 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:26,639 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:26,640 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:26,640 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:26,640 INFO L85 PathProgramCache]: Analyzing trace with hash 2009130959, now seen corresponding path program 1 times [2021-11-05 14:50:26,642 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:26,642 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [273406923] [2021-11-05 14:50:26,643 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:26,643 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:26,643 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:26,644 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:26,645 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-05 14:50:28,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:28,995 INFO L263 TraceCheckSpWp]: Trace formula consists of 1055 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:28,997 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:29,268 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:29,268 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:29,535 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:29,536 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:29,536 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [273406923] [2021-11-05 14:50:29,536 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [273406923] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:29,536 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:29,536 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-05 14:50:29,536 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [959520500] [2021-11-05 14:50:29,537 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:29,537 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-05 14:50:29,537 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:29,537 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-05 14:50:29,538 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-05 14:50:29,538 INFO L87 Difference]: Start difference. First operand 8947 states and 12214 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:30,586 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:30,587 INFO L93 Difference]: Finished difference Result 27568 states and 37348 transitions. [2021-11-05 14:50:30,588 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-05 14:50:30,588 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2021-11-05 14:50:30,588 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:30,651 INFO L225 Difference]: With dead ends: 27568 [2021-11-05 14:50:30,652 INFO L226 Difference]: Without dead ends: 18629 [2021-11-05 14:50:30,683 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 50.19ms TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-05 14:50:30,685 INFO L933 BasicCegarLoop]: 11381 mSDtfsCounter, 11577 mSDsluCounter, 28303 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 149.60ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11585 SdHoareTripleChecker+Valid, 39684 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 43.72ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 161.20ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:30,685 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11585 Valid, 39684 Invalid, 25 Unknown, 0 Unchecked, 43.72ms Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 161.20ms Time] [2021-11-05 14:50:30,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18629 states. [2021-11-05 14:50:31,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18629 to 11493. [2021-11-05 14:50:31,162 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11493 states, 11394 states have (on average 1.361330524837634) internal successors, (15511), 11459 states have internal predecessors, (15511), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-05 14:50:31,191 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11493 states to 11493 states and 15567 transitions. [2021-11-05 14:50:31,191 INFO L78 Accepts]: Start accepts. Automaton has 11493 states and 15567 transitions. Word has length 26 [2021-11-05 14:50:31,192 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:31,192 INFO L470 AbstractCegarLoop]: Abstraction has 11493 states and 15567 transitions. [2021-11-05 14:50:31,192 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:31,192 INFO L276 IsEmpty]: Start isEmpty. Operand 11493 states and 15567 transitions. [2021-11-05 14:50:31,198 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-05 14:50:31,198 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:31,198 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:31,230 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:31,423 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:31,424 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:31,424 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:31,424 INFO L85 PathProgramCache]: Analyzing trace with hash 434163568, now seen corresponding path program 1 times [2021-11-05 14:50:31,426 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:31,426 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [10944434] [2021-11-05 14:50:31,426 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:31,427 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:31,427 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:31,427 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:31,428 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-05 14:50:33,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-05 14:50:33,786 INFO L263 TraceCheckSpWp]: Trace formula consists of 1086 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-05 14:50:33,788 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-05 14:50:33,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:33,915 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-05 14:50:34,023 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-05 14:50:34,023 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-05 14:50:34,024 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [10944434] [2021-11-05 14:50:34,024 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [10944434] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-05 14:50:34,024 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-05 14:50:34,024 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-05 14:50:34,024 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2079322456] [2021-11-05 14:50:34,024 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-05 14:50:34,025 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-05 14:50:34,025 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-05 14:50:34,025 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-05 14:50:34,025 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:34,026 INFO L87 Difference]: Start difference. First operand 11493 states and 15567 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:38,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-05 14:50:38,020 INFO L93 Difference]: Finished difference Result 23114 states and 31262 transitions. [2021-11-05 14:50:38,020 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-05 14:50:38,021 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-11-05 14:50:38,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-05 14:50:38,051 INFO L225 Difference]: With dead ends: 23114 [2021-11-05 14:50:38,052 INFO L226 Difference]: Without dead ends: 11629 [2021-11-05 14:50:38,079 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 25.84ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-05 14:50:38,080 INFO L933 BasicCegarLoop]: 11042 mSDtfsCounter, 0 mSDsluCounter, 10631 mSDsCounter, 0 mSdLazyCounter, 531 mSolverCounterSat, 418 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3290.69ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 21673 SdHoareTripleChecker+Invalid, 949 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 20.83ms SdHoareTripleChecker+Time, 418 IncrementalHoareTripleChecker+Valid, 531 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3562.28ms IncrementalHoareTripleChecker+Time [2021-11-05 14:50:38,080 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 21673 Invalid, 949 Unknown, 0 Unchecked, 20.83ms Time], IncrementalHoareTripleChecker [418 Valid, 531 Invalid, 0 Unknown, 0 Unchecked, 3562.28ms Time] [2021-11-05 14:50:38,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11629 states. [2021-11-05 14:50:38,404 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11629 to 11493. [2021-11-05 14:50:38,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11493 states, 11394 states have (on average 1.3255222046691242) internal successors, (15103), 11459 states have internal predecessors, (15103), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-05 14:50:38,453 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11493 states to 11493 states and 15159 transitions. [2021-11-05 14:50:38,454 INFO L78 Accepts]: Start accepts. Automaton has 11493 states and 15159 transitions. Word has length 32 [2021-11-05 14:50:38,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-05 14:50:38,454 INFO L470 AbstractCegarLoop]: Abstraction has 11493 states and 15159 transitions. [2021-11-05 14:50:38,455 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-05 14:50:38,455 INFO L276 IsEmpty]: Start isEmpty. Operand 11493 states and 15159 transitions. [2021-11-05 14:50:38,456 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-05 14:50:38,456 INFO L506 BasicCegarLoop]: Found error trace [2021-11-05 14:50:38,456 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-05 14:50:38,492 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-05 14:50:38,675 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-05 14:50:38,675 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-05 14:50:38,676 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-05 14:50:38,676 INFO L85 PathProgramCache]: Analyzing trace with hash 1551705050, now seen corresponding path program 1 times [2021-11-05 14:50:38,679 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-05 14:50:38,679 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [758249291] [2021-11-05 14:50:38,679 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-05 14:50:38,679 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-05 14:50:38,679 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-05 14:50:38,683 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-05 14:50:38,695 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process Killed by 15