./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 173e3943 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f --- Real Ultimate output --- This is Ultimate 0.2.1-dev-173e394 [2021-11-06 12:44:44,042 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-06 12:44:44,044 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-06 12:44:44,087 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-06 12:44:44,102 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-06 12:44:44,104 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-06 12:44:44,104 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-06 12:44:44,106 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-06 12:44:44,107 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-06 12:44:44,108 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-06 12:44:44,108 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-06 12:44:44,109 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-06 12:44:44,109 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-06 12:44:44,110 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-06 12:44:44,111 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-06 12:44:44,112 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-06 12:44:44,128 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-06 12:44:44,128 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-06 12:44:44,130 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-06 12:44:44,131 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-06 12:44:44,132 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-06 12:44:44,133 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-06 12:44:44,134 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-06 12:44:44,134 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-06 12:44:44,136 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-06 12:44:44,136 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-06 12:44:44,136 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-06 12:44:44,137 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-06 12:44:44,137 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-06 12:44:44,137 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-06 12:44:44,138 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-06 12:44:44,138 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-06 12:44:44,138 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-06 12:44:44,139 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-06 12:44:44,140 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-06 12:44:44,140 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-06 12:44:44,141 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-06 12:44:44,141 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-06 12:44:44,141 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-06 12:44:44,142 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-06 12:44:44,147 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-06 12:44:44,148 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-06 12:44:44,168 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-06 12:44:44,168 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-06 12:44:44,169 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-06 12:44:44,169 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-06 12:44:44,170 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Use SBE=true [2021-11-06 12:44:44,170 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-06 12:44:44,170 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-06 12:44:44,171 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 12:44:44,171 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-06 12:44:44,171 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-06 12:44:44,172 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-06 12:44:44,172 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-06 12:44:44,172 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-06 12:44:44,172 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-06 12:44:44,172 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-06 12:44:44,172 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f [2021-11-06 12:44:44,407 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-06 12:44:44,433 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-06 12:44:44,435 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-06 12:44:44,435 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-06 12:44:44,436 INFO L275 PluginConnector]: CDTParser initialized [2021-11-06 12:44:44,437 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-06 12:44:44,494 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a5ebb7942/c927ed7a2d914235b3d64872fea011ec/FLAG976141784 [2021-11-06 12:44:45,149 INFO L306 CDTParser]: Found 1 translation units. [2021-11-06 12:44:45,150 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-06 12:44:45,193 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a5ebb7942/c927ed7a2d914235b3d64872fea011ec/FLAG976141784 [2021-11-06 12:44:45,515 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/a5ebb7942/c927ed7a2d914235b3d64872fea011ec [2021-11-06 12:44:45,518 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-06 12:44:45,519 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-06 12:44:45,521 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-06 12:44:45,521 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-06 12:44:45,523 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-06 12:44:45,525 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 12:44:45" (1/1) ... [2021-11-06 12:44:45,526 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3056dea1 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:45, skipping insertion in model container [2021-11-06 12:44:45,526 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 12:44:45" (1/1) ... [2021-11-06 12:44:45,531 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-06 12:44:45,647 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-06 12:44:47,401 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-06 12:44:47,492 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 12:44:47,506 INFO L203 MainTranslator]: Completed pre-run [2021-11-06 12:44:47,786 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-06 12:44:47,818 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 12:44:47,874 INFO L208 MainTranslator]: Completed translation [2021-11-06 12:44:47,875 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47 WrapperNode [2021-11-06 12:44:47,875 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-06 12:44:47,876 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-06 12:44:47,876 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-06 12:44:47,876 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-06 12:44:47,881 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:47,963 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:48,749 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-06 12:44:48,750 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-06 12:44:48,750 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-06 12:44:48,750 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-06 12:44:48,769 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:48,769 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:48,999 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:48,999 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:49,716 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:49,820 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:49,882 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:50,232 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-06 12:44:50,233 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-06 12:44:50,234 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-06 12:44:50,234 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-06 12:44:50,235 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (1/1) ... [2021-11-06 12:44:50,240 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 12:44:50,262 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-06 12:44:50,289 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-06 12:44:50,376 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2021-11-06 12:44:50,417 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2021-11-06 12:44:50,417 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2021-11-06 12:44:50,417 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-06 12:44:50,417 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_start [2021-11-06 12:44:50,417 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_start [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2021-11-06 12:44:50,418 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2021-11-06 12:44:50,418 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2021-11-06 12:44:50,418 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-06 12:44:50,418 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2021-11-06 12:44:50,419 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2021-11-06 12:44:50,419 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put_and_wait [2021-11-06 12:44:50,419 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put_and_wait [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-06 12:44:50,419 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_release [2021-11-06 12:44:50,419 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_release [2021-11-06 12:44:50,419 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2021-11-06 12:44:50,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2021-11-06 12:44:50,420 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-06 12:44:50,420 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_start [2021-11-06 12:44:50,420 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_start [2021-11-06 12:44:50,420 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-06 12:44:50,420 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-06 12:44:59,297 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,297 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,297 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,298 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume !__copy_from_user_#t~switch141; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1218: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1219: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-2: havoc __copy_to_user_#t~switch146; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-3: havoc __copy_to_user_#t~switch146; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825: havoc __copy_to_user_#t~switch146; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-1: havoc __copy_to_user_#t~switch146; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-06 12:44:59,299 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,300 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-06 12:44:59,301 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,302 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,303 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,304 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,304 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,304 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,304 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,304 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,304 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,305 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,306 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,307 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,307 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:44:59,307 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch146; [2021-11-06 12:44:59,307 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:44:59,307 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume !__copy_to_user_#t~switch146; [2021-11-06 12:44:59,307 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:44:59,308 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume !__copy_to_user_#t~switch146; [2021-11-06 12:44:59,308 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:44:59,308 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume !__copy_to_user_#t~switch146; [2021-11-06 12:44:59,308 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##164: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-06 12:44:59,309 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##163: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,309 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1876: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,309 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1877: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-06 12:44:59,309 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1811: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,309 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1812: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-06 12:44:59,309 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##757: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-06 12:44:59,310 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##756: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,310 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-3: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:44:59,310 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:44:59,310 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-7: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:44:59,310 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-5: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:44:59,310 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-11: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:44:59,311 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-9: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:44:59,311 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-19: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-06 12:44:59,311 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-20: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-06 12:44:59,312 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-85: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:44:59,312 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-84: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:44:59,314 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-79: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:44:59,314 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-78: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:44:59,314 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-121: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-06 12:44:59,314 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-120: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-06 12:44:59,315 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-179: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:44:59,315 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-180: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:44:59,315 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-186: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:44:59,315 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-185: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:44:59,315 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##822: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##821: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760-1: havoc __copy_from_user_#t~switch141; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,316 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-06 12:44:59,317 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,317 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-06 12:44:59,317 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,317 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-06 12:44:59,317 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,317 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-06 12:44:59,318 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:44:59,318 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-06 12:44:59,318 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,318 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-06 12:44:59,319 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:44:59,320 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-06 12:45:03,866 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##352: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##351: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-29: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-28: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,867 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-06 12:45:03,868 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:45:03,868 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-06 12:45:03,868 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:45:03,868 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-06 12:45:17,216 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-06 12:45:17,219 INFO L299 CfgBuilder]: Removed 7538 assume(true) statements. [2021-11-06 12:45:17,226 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 12:45:17 BoogieIcfgContainer [2021-11-06 12:45:17,227 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-06 12:45:17,228 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-06 12:45:17,228 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-06 12:45:17,230 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-06 12:45:17,231 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 12:44:45" (1/3) ... [2021-11-06 12:45:17,231 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c646d1e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 12:45:17, skipping insertion in model container [2021-11-06 12:45:17,231 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:44:47" (2/3) ... [2021-11-06 12:45:17,232 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7c646d1e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 12:45:17, skipping insertion in model container [2021-11-06 12:45:17,232 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 12:45:17" (3/3) ... [2021-11-06 12:45:17,233 INFO L111 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-06 12:45:17,237 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-06 12:45:17,237 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2021-11-06 12:45:17,298 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-06 12:45:17,303 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-06 12:45:17,303 INFO L340 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2021-11-06 12:45:17,403 INFO L276 IsEmpty]: Start isEmpty. Operand has 7743 states, 7619 states have (on average 1.4066150413440084) internal successors, (10717), 7704 states have internal predecessors, (10717), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-06 12:45:17,405 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-06 12:45:17,405 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:17,406 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:17,407 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:17,410 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:17,411 INFO L85 PathProgramCache]: Analyzing trace with hash 54787053, now seen corresponding path program 1 times [2021-11-06 12:45:17,420 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:17,420 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [470089089] [2021-11-06 12:45:17,421 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:17,421 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:17,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:17,910 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:17,911 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:17,911 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [470089089] [2021-11-06 12:45:17,912 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [470089089] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:17,912 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:17,912 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-06 12:45:17,914 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669022212] [2021-11-06 12:45:17,917 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:17,917 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:17,927 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:17,928 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:17,943 INFO L87 Difference]: Start difference. First operand has 7743 states, 7619 states have (on average 1.4066150413440084) internal successors, (10717), 7704 states have internal predecessors, (10717), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:18,235 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:18,235 INFO L93 Difference]: Finished difference Result 15482 states and 21584 transitions. [2021-11-06 12:45:18,236 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:18,237 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-06 12:45:18,237 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:18,279 INFO L225 Difference]: With dead ends: 15482 [2021-11-06 12:45:18,280 INFO L226 Difference]: Without dead ends: 7659 [2021-11-06 12:45:18,323 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:18,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7659 states. [2021-11-06 12:45:18,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7659 to 7659. [2021-11-06 12:45:18,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7659 states, 7536 states have (on average 1.3845541401273886) internal successors, (10434), 7620 states have internal predecessors, (10434), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-06 12:45:18,559 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7659 states to 7659 states and 10496 transitions. [2021-11-06 12:45:18,562 INFO L78 Accepts]: Start accepts. Automaton has 7659 states and 10496 transitions. Word has length 10 [2021-11-06 12:45:18,562 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:18,562 INFO L470 AbstractCegarLoop]: Abstraction has 7659 states and 10496 transitions. [2021-11-06 12:45:18,563 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:18,563 INFO L276 IsEmpty]: Start isEmpty. Operand 7659 states and 10496 transitions. [2021-11-06 12:45:18,567 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-06 12:45:18,567 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:18,567 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:18,567 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-06 12:45:18,567 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:18,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:18,570 INFO L85 PathProgramCache]: Analyzing trace with hash -1577669200, now seen corresponding path program 1 times [2021-11-06 12:45:18,570 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:18,570 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1020164022] [2021-11-06 12:45:18,570 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:18,570 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:18,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:18,734 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:18,735 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:18,735 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1020164022] [2021-11-06 12:45:18,735 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1020164022] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:18,736 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:18,737 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 12:45:18,737 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [949969453] [2021-11-06 12:45:18,738 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:18,738 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:18,739 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:18,740 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:18,740 INFO L87 Difference]: Start difference. First operand 7659 states and 10496 transitions. Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:21,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:21,014 INFO L93 Difference]: Finished difference Result 7659 states and 10496 transitions. [2021-11-06 12:45:21,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:21,015 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-06 12:45:21,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:21,040 INFO L225 Difference]: With dead ends: 7659 [2021-11-06 12:45:21,040 INFO L226 Difference]: Without dead ends: 7657 [2021-11-06 12:45:21,044 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:21,053 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7657 states. [2021-11-06 12:45:21,184 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7657 to 7657. [2021-11-06 12:45:21,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7657 states, 7535 states have (on average 1.3844724618447246) internal successors, (10432), 7618 states have internal predecessors, (10432), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-06 12:45:21,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7657 states to 7657 states and 10494 transitions. [2021-11-06 12:45:21,220 INFO L78 Accepts]: Start accepts. Automaton has 7657 states and 10494 transitions. Word has length 10 [2021-11-06 12:45:21,221 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:21,221 INFO L470 AbstractCegarLoop]: Abstraction has 7657 states and 10494 transitions. [2021-11-06 12:45:21,221 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:21,222 INFO L276 IsEmpty]: Start isEmpty. Operand 7657 states and 10494 transitions. [2021-11-06 12:45:21,223 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2021-11-06 12:45:21,223 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:21,223 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:21,223 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-06 12:45:21,224 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr63ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:21,224 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:21,224 INFO L85 PathProgramCache]: Analyzing trace with hash -1663080904, now seen corresponding path program 1 times [2021-11-06 12:45:21,224 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:21,224 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179693624] [2021-11-06 12:45:21,224 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:21,225 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:21,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:21,353 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:21,353 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:21,353 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179693624] [2021-11-06 12:45:21,354 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179693624] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:21,354 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:21,354 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 12:45:21,354 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1745769103] [2021-11-06 12:45:21,355 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:21,355 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:21,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:21,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:21,356 INFO L87 Difference]: Start difference. First operand 7657 states and 10494 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:23,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:23,641 INFO L93 Difference]: Finished difference Result 7657 states and 10494 transitions. [2021-11-06 12:45:23,642 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:23,642 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2021-11-06 12:45:23,642 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:23,668 INFO L225 Difference]: With dead ends: 7657 [2021-11-06 12:45:23,669 INFO L226 Difference]: Without dead ends: 7655 [2021-11-06 12:45:23,675 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:23,687 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7655 states. [2021-11-06 12:45:23,826 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7655 to 7655. [2021-11-06 12:45:23,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7655 states, 7534 states have (on average 1.3843907618794797) internal successors, (10430), 7616 states have internal predecessors, (10430), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-06 12:45:23,853 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7655 states to 7655 states and 10492 transitions. [2021-11-06 12:45:23,854 INFO L78 Accepts]: Start accepts. Automaton has 7655 states and 10492 transitions. Word has length 11 [2021-11-06 12:45:23,854 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:23,854 INFO L470 AbstractCegarLoop]: Abstraction has 7655 states and 10492 transitions. [2021-11-06 12:45:23,854 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:23,855 INFO L276 IsEmpty]: Start isEmpty. Operand 7655 states and 10492 transitions. [2021-11-06 12:45:23,855 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-06 12:45:23,855 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:23,855 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:23,855 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-06 12:45:23,855 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr64ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:23,856 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:23,856 INFO L85 PathProgramCache]: Analyzing trace with hash -15876422, now seen corresponding path program 1 times [2021-11-06 12:45:23,856 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:23,856 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1774339879] [2021-11-06 12:45:23,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:23,856 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:23,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:23,970 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:23,970 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:23,970 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1774339879] [2021-11-06 12:45:23,970 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1774339879] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:23,971 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:23,971 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 12:45:23,971 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1547240304] [2021-11-06 12:45:23,971 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:23,971 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:23,972 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:23,972 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:23,972 INFO L87 Difference]: Start difference. First operand 7655 states and 10492 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:26,275 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:26,275 INFO L93 Difference]: Finished difference Result 7655 states and 10492 transitions. [2021-11-06 12:45:26,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:26,276 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-06 12:45:26,276 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:26,302 INFO L225 Difference]: With dead ends: 7655 [2021-11-06 12:45:26,303 INFO L226 Difference]: Without dead ends: 7653 [2021-11-06 12:45:26,306 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:26,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7653 states. [2021-11-06 12:45:26,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7653 to 7653. [2021-11-06 12:45:26,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7653 states, 7533 states have (on average 1.3843090402230187) internal successors, (10428), 7614 states have internal predecessors, (10428), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-06 12:45:26,464 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7653 states to 7653 states and 10490 transitions. [2021-11-06 12:45:26,465 INFO L78 Accepts]: Start accepts. Automaton has 7653 states and 10490 transitions. Word has length 12 [2021-11-06 12:45:26,466 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:26,466 INFO L470 AbstractCegarLoop]: Abstraction has 7653 states and 10490 transitions. [2021-11-06 12:45:26,466 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:26,466 INFO L276 IsEmpty]: Start isEmpty. Operand 7653 states and 10490 transitions. [2021-11-06 12:45:26,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-06 12:45:26,467 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:26,467 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:26,467 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-06 12:45:26,468 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr65ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:26,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:26,468 INFO L85 PathProgramCache]: Analyzing trace with hash -492145022, now seen corresponding path program 1 times [2021-11-06 12:45:26,469 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:26,469 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [108131130] [2021-11-06 12:45:26,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:26,469 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:26,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:26,573 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:26,573 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:26,573 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [108131130] [2021-11-06 12:45:26,573 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [108131130] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:26,573 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:26,573 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 12:45:26,574 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2092648045] [2021-11-06 12:45:26,574 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:26,574 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:26,575 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:26,575 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:26,575 INFO L87 Difference]: Start difference. First operand 7653 states and 10490 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:29,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:29,394 INFO L93 Difference]: Finished difference Result 16176 states and 22182 transitions. [2021-11-06 12:45:29,394 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:29,394 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-06 12:45:29,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:29,419 INFO L225 Difference]: With dead ends: 16176 [2021-11-06 12:45:29,419 INFO L226 Difference]: Without dead ends: 8525 [2021-11-06 12:45:29,436 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:29,447 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8525 states. [2021-11-06 12:45:29,596 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8525 to 8489. [2021-11-06 12:45:29,607 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8489 states, 8360 states have (on average 1.3726076555023923) internal successors, (11475), 8423 states have internal predecessors, (11475), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-06 12:45:29,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8489 states to 8489 states and 11583 transitions. [2021-11-06 12:45:29,628 INFO L78 Accepts]: Start accepts. Automaton has 8489 states and 11583 transitions. Word has length 13 [2021-11-06 12:45:29,628 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:29,628 INFO L470 AbstractCegarLoop]: Abstraction has 8489 states and 11583 transitions. [2021-11-06 12:45:29,629 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:29,629 INFO L276 IsEmpty]: Start isEmpty. Operand 8489 states and 11583 transitions. [2021-11-06 12:45:29,630 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-06 12:45:29,630 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:29,630 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:29,630 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-06 12:45:29,630 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting vhost_net_releaseErr1ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:29,631 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:29,631 INFO L85 PathProgramCache]: Analyzing trace with hash 829533720, now seen corresponding path program 1 times [2021-11-06 12:45:29,631 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:29,631 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [159175485] [2021-11-06 12:45:29,631 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:29,631 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:29,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:29,749 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:29,749 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:29,749 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [159175485] [2021-11-06 12:45:29,750 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [159175485] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:29,750 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:29,750 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 12:45:29,750 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [366243781] [2021-11-06 12:45:29,750 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:29,750 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:29,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:29,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:29,751 INFO L87 Difference]: Start difference. First operand 8489 states and 11583 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:30,022 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:30,023 INFO L93 Difference]: Finished difference Result 21277 states and 28904 transitions. [2021-11-06 12:45:30,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:30,024 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-11-06 12:45:30,024 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:30,054 INFO L225 Difference]: With dead ends: 21277 [2021-11-06 12:45:30,055 INFO L226 Difference]: Without dead ends: 12796 [2021-11-06 12:45:30,077 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:30,088 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12796 states. [2021-11-06 12:45:30,271 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12796 to 9762. [2021-11-06 12:45:30,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9762 states, 9633 states have (on average 1.3652029481988996) internal successors, (13151), 9696 states have internal predecessors, (13151), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-06 12:45:30,300 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9762 states to 9762 states and 13259 transitions. [2021-11-06 12:45:30,301 INFO L78 Accepts]: Start accepts. Automaton has 9762 states and 13259 transitions. Word has length 27 [2021-11-06 12:45:30,301 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:30,301 INFO L470 AbstractCegarLoop]: Abstraction has 9762 states and 13259 transitions. [2021-11-06 12:45:30,302 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:30,302 INFO L276 IsEmpty]: Start isEmpty. Operand 9762 states and 13259 transitions. [2021-11-06 12:45:30,306 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-06 12:45:30,306 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:30,306 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:30,306 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-06 12:45:30,307 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:30,307 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:30,307 INFO L85 PathProgramCache]: Analyzing trace with hash -213216420, now seen corresponding path program 1 times [2021-11-06 12:45:30,307 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:30,310 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [928271880] [2021-11-06 12:45:30,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:30,310 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:30,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:45:30,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:45:30,465 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-06 12:45:30,465 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [928271880] [2021-11-06 12:45:30,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [928271880] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-06 12:45:30,466 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:45:30,466 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-06 12:45:30,466 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [836244778] [2021-11-06 12:45:30,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:45:30,467 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-06 12:45:30,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:45:30,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:30,467 INFO L87 Difference]: Start difference. First operand 9762 states and 13259 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:31,300 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:45:31,301 INFO L93 Difference]: Finished difference Result 19606 states and 26600 transitions. [2021-11-06 12:45:31,301 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:45:31,301 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-11-06 12:45:31,302 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:45:31,322 INFO L225 Difference]: With dead ends: 19606 [2021-11-06 12:45:31,322 INFO L226 Difference]: Without dead ends: 9852 [2021-11-06 12:45:31,343 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:45:31,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9852 states. [2021-11-06 12:45:31,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9852 to 9762. [2021-11-06 12:45:31,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9762 states, 9633 states have (on average 1.3371742966884668) internal successors, (12881), 9696 states have internal predecessors, (12881), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-06 12:45:31,552 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9762 states to 9762 states and 12989 transitions. [2021-11-06 12:45:31,553 INFO L78 Accepts]: Start accepts. Automaton has 9762 states and 12989 transitions. Word has length 32 [2021-11-06 12:45:31,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:45:31,553 INFO L470 AbstractCegarLoop]: Abstraction has 9762 states and 12989 transitions. [2021-11-06 12:45:31,553 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:45:31,553 INFO L276 IsEmpty]: Start isEmpty. Operand 9762 states and 12989 transitions. [2021-11-06 12:45:31,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-06 12:45:31,556 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:45:31,556 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:31,556 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-06 12:45:31,556 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:45:31,556 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:45:31,556 INFO L85 PathProgramCache]: Analyzing trace with hash -142527228, now seen corresponding path program 1 times [2021-11-06 12:45:31,557 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-06 12:45:31,557 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2101981318] [2021-11-06 12:45:31,557 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:45:31,557 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-06 12:45:32,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-06 12:45:32,807 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-06 12:45:33,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-06 12:45:33,895 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-06 12:45:33,896 INFO L627 BasicCegarLoop]: Counterexample is feasible [2021-11-06 12:45:33,896 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,898 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,898 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,899 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,899 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,899 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,900 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,901 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,902 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,902 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,902 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,902 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,902 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,902 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,903 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr22ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,906 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr23ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,906 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr24ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,906 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr25ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,906 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr26ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,907 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr27ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,907 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr28ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,907 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr29ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr30ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr31ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr32ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr33ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr34ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr35ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,908 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr36ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr37ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr38ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr39ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr40ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr41ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr42ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr43ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,909 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr44ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,910 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr45ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,910 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr46ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,910 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr47ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,912 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr48ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,912 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr49ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,912 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr50ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,912 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr51ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,912 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr52ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,912 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr53ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr54ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr55ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr56ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr57ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr58ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr59ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr60ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,913 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr61ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,914 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,914 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr63ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,914 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr64ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,914 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr65ASSERT_VIOLATIONERROR_FUNCTION [2021-11-06 12:45:33,914 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-06 12:45:33,917 INFO L731 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:45:33,919 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-06 12:45:34,173 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 06.11 12:45:34 BoogieIcfgContainer [2021-11-06 12:45:34,174 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-06 12:45:34,174 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-06 12:45:34,174 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-06 12:45:34,175 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-06 12:45:34,175 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 12:45:17" (3/4) ... [2021-11-06 12:45:34,177 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-06 12:45:34,177 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-06 12:45:34,178 INFO L168 Benchmark]: Toolchain (without parser) took 48659.17 ms. Allocated memory was 88.1 MB in the beginning and 3.0 GB in the end (delta: 2.9 GB). Free memory was 56.7 MB in the beginning and 1.8 GB in the end (delta: -1.8 GB). Peak memory consumption was 1.1 GB. Max. memory is 16.1 GB. [2021-11-06 12:45:34,179 INFO L168 Benchmark]: CDTParser took 0.19 ms. Allocated memory is still 88.1 MB. Free memory was 45.4 MB in the beginning and 45.3 MB in the end (delta: 34.1 kB). There was no memory consumed. Max. memory is 16.1 GB. [2021-11-06 12:45:34,179 INFO L168 Benchmark]: CACSL2BoogieTranslator took 2354.50 ms. Allocated memory was 88.1 MB in the beginning and 201.3 MB in the end (delta: 113.2 MB). Free memory was 56.4 MB in the beginning and 119.1 MB in the end (delta: -62.6 MB). Peak memory consumption was 89.9 MB. Max. memory is 16.1 GB. [2021-11-06 12:45:34,179 INFO L168 Benchmark]: Boogie Procedure Inliner took 872.95 ms. Allocated memory was 201.3 MB in the beginning and 383.8 MB in the end (delta: 182.5 MB). Free memory was 119.1 MB in the beginning and 193.3 MB in the end (delta: -74.2 MB). Peak memory consumption was 111.4 MB. Max. memory is 16.1 GB. [2021-11-06 12:45:34,180 INFO L168 Benchmark]: Boogie Preprocessor took 1483.17 ms. Allocated memory was 383.8 MB in the beginning and 889.2 MB in the end (delta: 505.4 MB). Free memory was 193.3 MB in the beginning and 663.0 MB in the end (delta: -469.8 MB). Peak memory consumption was 118.5 MB. Max. memory is 16.1 GB. [2021-11-06 12:45:34,180 INFO L168 Benchmark]: RCFGBuilder took 26993.31 ms. Allocated memory was 889.2 MB in the beginning and 3.0 GB in the end (delta: 2.1 GB). Free memory was 663.0 MB in the beginning and 2.6 GB in the end (delta: -2.0 GB). Peak memory consumption was 1.4 GB. Max. memory is 16.1 GB. [2021-11-06 12:45:34,180 INFO L168 Benchmark]: TraceAbstraction took 16945.80 ms. Allocated memory is still 3.0 GB. Free memory was 2.6 GB in the beginning and 1.8 GB in the end (delta: 805.3 MB). Peak memory consumption was 805.3 MB. Max. memory is 16.1 GB. [2021-11-06 12:45:34,180 INFO L168 Benchmark]: Witness Printer took 2.84 ms. Allocated memory is still 3.0 GB. Free memory is still 1.8 GB. There was no memory consumed. Max. memory is 16.1 GB. [2021-11-06 12:45:34,182 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.19 ms. Allocated memory is still 88.1 MB. Free memory was 45.4 MB in the beginning and 45.3 MB in the end (delta: 34.1 kB). There was no memory consumed. Max. memory is 16.1 GB. * CACSL2BoogieTranslator took 2354.50 ms. Allocated memory was 88.1 MB in the beginning and 201.3 MB in the end (delta: 113.2 MB). Free memory was 56.4 MB in the beginning and 119.1 MB in the end (delta: -62.6 MB). Peak memory consumption was 89.9 MB. Max. memory is 16.1 GB. * Boogie Procedure Inliner took 872.95 ms. Allocated memory was 201.3 MB in the beginning and 383.8 MB in the end (delta: 182.5 MB). Free memory was 119.1 MB in the beginning and 193.3 MB in the end (delta: -74.2 MB). Peak memory consumption was 111.4 MB. Max. memory is 16.1 GB. * Boogie Preprocessor took 1483.17 ms. Allocated memory was 383.8 MB in the beginning and 889.2 MB in the end (delta: 505.4 MB). Free memory was 193.3 MB in the beginning and 663.0 MB in the end (delta: -469.8 MB). Peak memory consumption was 118.5 MB. Max. memory is 16.1 GB. * RCFGBuilder took 26993.31 ms. Allocated memory was 889.2 MB in the beginning and 3.0 GB in the end (delta: 2.1 GB). Free memory was 663.0 MB in the beginning and 2.6 GB in the end (delta: -2.0 GB). Peak memory consumption was 1.4 GB. Max. memory is 16.1 GB. * TraceAbstraction took 16945.80 ms. Allocated memory is still 3.0 GB. Free memory was 2.6 GB in the beginning and 1.8 GB in the end (delta: 805.3 MB). Peak memory consumption was 805.3 MB. Max. memory is 16.1 GB. * Witness Printer took 2.84 ms. Allocated memory is still 3.0 GB. Free memory is still 1.8 GB. There was no memory consumed. Max. memory is 16.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10595. Possible FailurePath: [L5971] static unsigned int vhost_zcopy_mask ; [L9348] static int experimental_zcopytx ; [L10590-L10593] static struct file_operations const vhost_net_fops = {& __this_module, & noop_llseek, 0, 0, 0, 0, 0, 0, & vhost_net_ioctl, & vhost_net_compat_ioctl, 0, & vhost_net_open, 0, & vhost_net_release, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L10594-L10595] static struct miscdevice vhost_net_misc = {238, "vhost-net", & vhost_net_fops, {0, 0}, 0, 0, 0, (unsigned short)0}; [L10620] int LDV_IN_INTERRUPT ; [L11002] static int ldv_mutex_cred_guard_mutex ; [L11109] static int ldv_mutex_lock ; [L11216] static int ldv_mutex_mtx ; [L11323] static int ldv_mutex_mutex ; VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=0, ldv_mutex_cred_guard_mutex=0, ldv_mutex_lock=0, ldv_mutex_mtx=0, ldv_mutex_mutex=0, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10623] struct inode *var_group1 ; [L10624] struct file *var_group2 ; [L10625] unsigned int var_vhost_net_ioctl_27_p1 ; [L10626] unsigned long var_vhost_net_ioctl_27_p2 ; [L10627] unsigned int var_vhost_net_compat_ioctl_28_p1 ; [L10628] unsigned long var_vhost_net_compat_ioctl_28_p2 ; [L10629] int res_vhost_net_open_13 ; [L10630] int ldv_s_vhost_net_fops_file_operations ; [L10631] int tmp ; [L10632] int tmp___0 ; [L10633] int tmp___1 ; [L10635] ldv_s_vhost_net_fops_file_operations = 0 [L10636] LDV_IN_INTERRUPT = 1 [L11433] ldv_mutex_cred_guard_mutex = 1 [L11434] ldv_mutex_lock = 1 [L11435] ldv_mutex_mtx = 1 [L11436] ldv_mutex_mutex = 1 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10598] int tmp ; VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10600] COND FALSE !(experimental_zcopytx != 0) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L11595] return __VERIFIER_nondet_int(); [L10604] tmp = misc_register(& vhost_net_misc) [L10605] return (tmp); VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10639] tmp = vhost_net_init() [L10640] COND FALSE !(tmp != 0) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10682] tmp___1 = __VERIFIER_nondet_int() [L10683] COND TRUE tmp___1 != 0 || ldv_s_vhost_net_fops_file_operations != 0 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10646] tmp___0 = __VERIFIER_nondet_int() [L10648] case 0: [L10661] case 1: [L10669] case 2: VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10521] struct vhost_net *n ; [L10522] void *argp ; [L10523] u64 *featurep ; [L10524] struct vhost_vring_file backend ; [L10525] u64 features ; [L10526] int r ; [L10527] unsigned long tmp ; [L10528] long tmp___0 ; [L10529] int tmp___1 ; [L10530] unsigned long tmp___2 ; [L10531] int tmp___3 ; [L10532] long tmp___4 ; [L10533] long tmp___5 ; [L10535] EXPR f->private_data [L10535] n = (struct vhost_net *)f->private_data [L10536] argp = (void *)arg [L10537] featurep = (u64 *)argp [L10539] case 1074310960U: [L10547] case 2148052736U: [L10555] case 1074310912U: [L10567] case 44802U: [L10445] struct socket *tx_sock ; [L10446] struct socket *rx_sock ; [L10447] long err ; [L10449] tx_sock = 0 [L10450] rx_sock = 0 [L11361] COND TRUE ldv_mutex_mutex == 1 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L11365] ldv_mutex_mutex = 2 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6410] struct task_struct *tmp ; [L5283] struct task_struct *pfo_ret__ ; [L5286] case 1UL: [L5289] case 2UL: [L5292] case 4UL: [L5295] case 8UL: VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L5302] return (pfo_ret__); VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6412] tmp = get_current() [L6413] EXPR dev->mm [L6413] EXPR tmp->mm VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6413] EXPR (unsigned long )dev->mm == (unsigned long )tmp->mm ? 0L : -1L VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6413] return ((unsigned long )dev->mm == (unsigned long )tmp->mm ? 0L : -1L); [L10452] err = vhost_dev_check_owner(& n->dev) [L10453] COND FALSE !(err != 0L) [L10155] struct socket *sock ; [L10156] bool __warned ; [L10157] int tmp ; [L10158] int tmp___0 ; [L11361] COND FALSE !(ldv_mutex_mutex == 1) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10992] reach_error() VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 7743 locations, 78 error locations. Started 1 CEGAR loops. OverallTime: 16.6s, OverallIterations: 8, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 11.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 74231 SDtfs, 49695 SDslu, 28994 SDs, 0 SdLazy, 586 SolverSat, 416 SolverUnsat, 4 SolverUnknown, 0 SolverNotchecked, 8.8s Time, PredicateUnifierStatistics: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=9762occurred in iteration=6, InterpolantAutomatonStates: 21, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.3s AutomataMinimizationTime, 7 MinimizatonAttempts, 3160 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 1.6s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 150 NumberOfCodeBlocks, 150 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 108 ConstructedInterpolants, 0 QuantifiedInterpolants, 207 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-06 12:45:34,326 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f --- Real Ultimate output --- This is Ultimate 0.2.1-dev-173e394 [2021-11-06 12:45:36,082 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-06 12:45:36,084 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-06 12:45:36,115 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-06 12:45:36,115 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-06 12:45:36,118 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-06 12:45:36,120 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-06 12:45:36,125 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-06 12:45:36,129 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-06 12:45:36,133 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-06 12:45:36,134 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-06 12:45:36,135 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-06 12:45:36,136 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-06 12:45:36,137 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-06 12:45:36,138 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-06 12:45:36,139 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-06 12:45:36,141 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-06 12:45:36,142 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-06 12:45:36,143 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-06 12:45:36,148 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-06 12:45:36,149 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-06 12:45:36,150 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-06 12:45:36,150 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-06 12:45:36,151 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-06 12:45:36,152 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-06 12:45:36,152 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-06 12:45:36,153 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-06 12:45:36,153 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-06 12:45:36,154 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-06 12:45:36,154 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-06 12:45:36,154 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-06 12:45:36,155 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-06 12:45:36,156 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-06 12:45:36,156 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-06 12:45:36,157 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-06 12:45:36,158 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-06 12:45:36,158 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-06 12:45:36,158 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-06 12:45:36,158 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-06 12:45:36,159 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-06 12:45:36,160 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-06 12:45:36,161 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-06 12:45:36,183 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-06 12:45:36,184 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-06 12:45:36,185 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-06 12:45:36,185 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-06 12:45:36,186 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-06 12:45:36,187 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-06 12:45:36,187 INFO L138 SettingsManager]: * Use SBE=true [2021-11-06 12:45:36,187 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-06 12:45:36,187 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-06 12:45:36,187 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-06 12:45:36,188 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-06 12:45:36,188 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-06 12:45:36,188 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-06 12:45:36,188 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-06 12:45:36,188 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-06 12:45:36,189 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-06 12:45:36,189 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-06 12:45:36,189 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-06 12:45:36,189 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-06 12:45:36,189 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-06 12:45:36,189 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 12:45:36,190 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-06 12:45:36,190 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-06 12:45:36,191 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-06 12:45:36,191 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-06 12:45:36,191 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f [2021-11-06 12:45:36,483 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-06 12:45:36,501 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-06 12:45:36,503 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-06 12:45:36,504 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-06 12:45:36,505 INFO L275 PluginConnector]: CDTParser initialized [2021-11-06 12:45:36,505 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-06 12:45:36,570 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bafb32c8b/a78ed8c4e5604b6f9b7d9731f690ab4a/FLAG27e507a04 [2021-11-06 12:45:37,153 INFO L306 CDTParser]: Found 1 translation units. [2021-11-06 12:45:37,153 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-06 12:45:37,191 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bafb32c8b/a78ed8c4e5604b6f9b7d9731f690ab4a/FLAG27e507a04 [2021-11-06 12:45:37,562 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/bafb32c8b/a78ed8c4e5604b6f9b7d9731f690ab4a [2021-11-06 12:45:37,564 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-06 12:45:37,565 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-06 12:45:37,566 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-06 12:45:37,566 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-06 12:45:37,569 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-06 12:45:37,569 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 12:45:37" (1/1) ... [2021-11-06 12:45:37,570 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1537c88f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:37, skipping insertion in model container [2021-11-06 12:45:37,570 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 06.11 12:45:37" (1/1) ... [2021-11-06 12:45:37,574 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-06 12:45:37,677 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-06 12:45:39,141 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-06 12:45:39,245 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 12:45:39,262 INFO L203 MainTranslator]: Completed pre-run [2021-11-06 12:45:39,663 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-06 12:45:39,684 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-06 12:45:39,773 INFO L208 MainTranslator]: Completed translation [2021-11-06 12:45:39,774 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39 WrapperNode [2021-11-06 12:45:39,774 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-06 12:45:39,775 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-06 12:45:39,775 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-06 12:45:39,775 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-06 12:45:39,779 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:39,888 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:40,783 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-06 12:45:40,798 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-06 12:45:40,798 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-06 12:45:40,798 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-06 12:45:40,804 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:40,804 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,002 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,003 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,471 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,590 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,646 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,786 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-06 12:45:41,788 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-06 12:45:41,788 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-06 12:45:41,788 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-06 12:45:41,788 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (1/1) ... [2021-11-06 12:45:41,794 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-06 12:45:41,801 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-06 12:45:41,836 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-06 12:45:41,855 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-06 12:45:41,863 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2021-11-06 12:45:41,864 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2021-11-06 12:45:41,864 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-06 12:45:41,864 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2021-11-06 12:45:41,864 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2021-11-06 12:45:41,864 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-06 12:45:41,864 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-06 12:45:41,864 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-06 12:45:41,865 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-06 12:45:41,865 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-06 12:45:41,865 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2021-11-06 12:45:41,865 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2021-11-06 12:45:41,865 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-06 12:45:41,865 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2021-11-06 12:45:41,865 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2021-11-06 12:45:41,865 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-06 12:45:41,866 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2021-11-06 12:45:41,867 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2021-11-06 12:45:41,867 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-06 12:45:41,867 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-06 12:45:41,867 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-06 12:45:41,867 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-06 12:45:41,867 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2021-11-06 12:45:41,867 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2021-11-06 12:45:41,868 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-06 12:45:41,868 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-06 12:45:41,869 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-06 12:45:41,869 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-06 12:45:41,869 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-06 12:45:41,869 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-06 12:45:41,869 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-06 12:45:41,869 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-06 12:45:41,869 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-06 12:45:41,870 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-06 12:45:41,870 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-06 12:46:10,447 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,447 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,448 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,449 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,449 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,449 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume !__copy_from_user_#t~switch141; [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1218: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1219: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-2: havoc __copy_to_user_#t~switch146; [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-3: havoc __copy_to_user_#t~switch146; [2021-11-06 12:46:10,450 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825: havoc __copy_to_user_#t~switch146; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-1: havoc __copy_to_user_#t~switch146; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,451 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,452 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,452 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,452 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,452 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,452 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,453 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,453 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,453 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,453 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,453 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,454 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,454 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,454 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,454 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,454 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,455 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,455 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,455 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,455 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,455 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,456 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,456 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,460 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,461 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,461 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,462 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:46:10,463 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,464 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-06 12:46:10,464 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,465 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,467 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,467 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,467 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,467 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,468 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,468 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,469 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:10,469 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch146; [2021-11-06 12:46:10,469 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:10,472 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume !__copy_to_user_#t~switch146; [2021-11-06 12:46:10,472 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:10,472 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume !__copy_to_user_#t~switch146; [2021-11-06 12:46:10,472 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:10,473 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume !__copy_to_user_#t~switch146; [2021-11-06 12:46:10,473 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##164: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,474 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##163: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,474 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1876: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,474 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1877: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,474 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1811: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,474 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1812: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,474 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##757: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##756: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-3: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-7: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-5: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-11: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-9: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-19: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-06 12:46:10,475 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-20: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-85: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-84: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-79: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-78: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-121: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-120: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-179: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-180: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:46:10,476 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-186: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-185: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##822: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##821: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760-1: havoc __copy_from_user_#t~switch141; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,477 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:10,478 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,479 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,479 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-06 12:46:10,479 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:10,479 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-06 12:46:28,906 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##362: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##361: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-06 12:46:28,907 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-29: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-30: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-06 12:46:28,908 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-06 12:47:38,224 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-06 12:47:38,225 INFO L299 CfgBuilder]: Removed 8232 assume(true) statements. [2021-11-06 12:47:38,230 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 12:47:38 BoogieIcfgContainer [2021-11-06 12:47:38,230 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-06 12:47:38,232 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-06 12:47:38,232 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-06 12:47:38,234 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-06 12:47:38,234 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 06.11 12:45:37" (1/3) ... [2021-11-06 12:47:38,235 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@500c636 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 12:47:38, skipping insertion in model container [2021-11-06 12:47:38,235 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 06.11 12:45:39" (2/3) ... [2021-11-06 12:47:38,235 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@500c636 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 06.11 12:47:38, skipping insertion in model container [2021-11-06 12:47:38,235 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 06.11 12:47:38" (3/3) ... [2021-11-06 12:47:38,236 INFO L111 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-06 12:47:38,239 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-06 12:47:38,239 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2021-11-06 12:47:38,281 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-06 12:47:38,285 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-06 12:47:38,285 INFO L340 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2021-11-06 12:47:38,367 INFO L276 IsEmpty]: Start isEmpty. Operand has 8404 states, 8302 states have (on average 1.4053240183088413) internal successors, (11667), 8384 states have internal predecessors, (11667), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-06 12:47:38,370 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-06 12:47:38,370 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:47:38,370 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:47:38,371 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr66ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:47:38,376 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:47:38,376 INFO L85 PathProgramCache]: Analyzing trace with hash 1935377389, now seen corresponding path program 1 times [2021-11-06 12:47:38,388 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:47:38,389 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [856464016] [2021-11-06 12:47:38,389 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:47:38,390 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:47:38,390 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:47:38,404 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:47:38,407 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-06 12:47:40,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:47:40,859 INFO L263 TraceCheckSpWp]: Trace formula consists of 969 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:47:40,863 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:47:41,032 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:41,032 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:47:41,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:41,121 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:47:41,121 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [856464016] [2021-11-06 12:47:41,121 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [856464016] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:47:41,121 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:47:41,121 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2021-11-06 12:47:41,122 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [603680109] [2021-11-06 12:47:41,125 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:47:41,125 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:47:41,132 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:47:41,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:41,148 INFO L87 Difference]: Start difference. First operand has 8404 states, 8302 states have (on average 1.4053240183088413) internal successors, (11667), 8384 states have internal predecessors, (11667), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:41,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:47:41,430 INFO L93 Difference]: Finished difference Result 16804 states and 23404 transitions. [2021-11-06 12:47:41,432 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:47:41,433 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-06 12:47:41,433 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:47:41,478 INFO L225 Difference]: With dead ends: 16804 [2021-11-06 12:47:41,482 INFO L226 Difference]: Without dead ends: 8314 [2021-11-06 12:47:41,509 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:41,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8314 states. [2021-11-06 12:47:41,719 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8314 to 8314. [2021-11-06 12:47:41,732 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8314 states, 8213 states have (on average 1.3847558748325826) internal successors, (11373), 8294 states have internal predecessors, (11373), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-06 12:47:41,756 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8314 states to 8314 states and 11403 transitions. [2021-11-06 12:47:41,757 INFO L78 Accepts]: Start accepts. Automaton has 8314 states and 11403 transitions. Word has length 10 [2021-11-06 12:47:41,758 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:47:41,758 INFO L470 AbstractCegarLoop]: Abstraction has 8314 states and 11403 transitions. [2021-11-06 12:47:41,758 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:41,759 INFO L276 IsEmpty]: Start isEmpty. Operand 8314 states and 11403 transitions. [2021-11-06 12:47:41,759 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-06 12:47:41,759 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:47:41,759 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:47:41,779 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2021-11-06 12:47:41,975 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:47:41,976 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr66ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:47:41,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:47:41,978 INFO L85 PathProgramCache]: Analyzing trace with hash 302921136, now seen corresponding path program 1 times [2021-11-06 12:47:41,981 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:47:41,981 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [327992573] [2021-11-06 12:47:41,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:47:41,981 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:47:41,981 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:47:41,983 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:47:41,984 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-06 12:47:44,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:47:44,332 INFO L263 TraceCheckSpWp]: Trace formula consists of 966 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:47:44,334 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:47:44,458 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:44,458 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:47:44,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:44,554 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:47:44,554 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [327992573] [2021-11-06 12:47:44,554 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [327992573] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:47:44,554 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:47:44,554 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-06 12:47:44,554 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2144265760] [2021-11-06 12:47:44,555 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:47:44,555 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:47:44,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:47:44,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:44,556 INFO L87 Difference]: Start difference. First operand 8314 states and 11403 transitions. Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:47,119 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:47:47,119 INFO L93 Difference]: Finished difference Result 8314 states and 11403 transitions. [2021-11-06 12:47:47,120 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:47:47,120 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-06 12:47:47,120 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:47:47,144 INFO L225 Difference]: With dead ends: 8314 [2021-11-06 12:47:47,145 INFO L226 Difference]: Without dead ends: 8312 [2021-11-06 12:47:47,149 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:47,159 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8312 states. [2021-11-06 12:47:47,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8312 to 8312. [2021-11-06 12:47:47,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8312 states, 8212 states have (on average 1.3846809547004384) internal successors, (11371), 8292 states have internal predecessors, (11371), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-06 12:47:47,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8312 states to 8312 states and 11401 transitions. [2021-11-06 12:47:47,351 INFO L78 Accepts]: Start accepts. Automaton has 8312 states and 11401 transitions. Word has length 10 [2021-11-06 12:47:47,351 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:47:47,351 INFO L470 AbstractCegarLoop]: Abstraction has 8312 states and 11401 transitions. [2021-11-06 12:47:47,352 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:47,352 INFO L276 IsEmpty]: Start isEmpty. Operand 8312 states and 11401 transitions. [2021-11-06 12:47:47,352 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2021-11-06 12:47:47,352 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:47:47,353 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:47:47,374 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-06 12:47:47,567 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:47:47,567 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr67ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:47:47,568 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:47:47,568 INFO L85 PathProgramCache]: Analyzing trace with hash 800646904, now seen corresponding path program 1 times [2021-11-06 12:47:47,571 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:47:47,571 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [80228838] [2021-11-06 12:47:47,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:47:47,571 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:47:47,571 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:47:47,576 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:47:47,578 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-06 12:47:49,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:47:49,987 INFO L263 TraceCheckSpWp]: Trace formula consists of 967 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:47:49,988 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:47:50,131 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:50,131 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:47:50,253 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:50,254 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:47:50,254 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [80228838] [2021-11-06 12:47:50,254 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [80228838] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:47:50,254 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:47:50,254 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-06 12:47:50,254 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1044346810] [2021-11-06 12:47:50,254 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:47:50,254 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:47:50,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:47:50,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:50,255 INFO L87 Difference]: Start difference. First operand 8312 states and 11401 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:52,706 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:47:52,707 INFO L93 Difference]: Finished difference Result 8312 states and 11401 transitions. [2021-11-06 12:47:52,707 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:47:52,707 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2021-11-06 12:47:52,707 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:47:52,731 INFO L225 Difference]: With dead ends: 8312 [2021-11-06 12:47:52,732 INFO L226 Difference]: Without dead ends: 8310 [2021-11-06 12:47:52,737 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:52,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8310 states. [2021-11-06 12:47:52,897 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8310 to 8310. [2021-11-06 12:47:52,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8310 states, 8211 states have (on average 1.3846060163195713) internal successors, (11369), 8290 states have internal predecessors, (11369), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-06 12:47:52,921 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8310 states to 8310 states and 11399 transitions. [2021-11-06 12:47:52,922 INFO L78 Accepts]: Start accepts. Automaton has 8310 states and 11399 transitions. Word has length 11 [2021-11-06 12:47:52,922 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:47:52,922 INFO L470 AbstractCegarLoop]: Abstraction has 8310 states and 11399 transitions. [2021-11-06 12:47:52,922 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:52,922 INFO L276 IsEmpty]: Start isEmpty. Operand 8310 states and 11399 transitions. [2021-11-06 12:47:52,923 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-06 12:47:52,923 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:47:52,923 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:47:52,954 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-06 12:47:53,155 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:47:53,157 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr68ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:47:53,158 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:47:53,159 INFO L85 PathProgramCache]: Analyzing trace with hash -949723462, now seen corresponding path program 1 times [2021-11-06 12:47:53,161 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:47:53,162 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1519922097] [2021-11-06 12:47:53,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:47:53,162 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:47:53,162 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:47:53,163 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:47:53,164 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-06 12:47:55,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:47:55,627 INFO L263 TraceCheckSpWp]: Trace formula consists of 968 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:47:55,628 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:47:55,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:55,791 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:47:55,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:47:55,932 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:47:55,932 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1519922097] [2021-11-06 12:47:55,933 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1519922097] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:47:55,933 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:47:55,933 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-06 12:47:55,933 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1652112550] [2021-11-06 12:47:55,933 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:47:55,933 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:47:55,933 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:47:55,933 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:55,934 INFO L87 Difference]: Start difference. First operand 8310 states and 11399 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:58,325 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:47:58,326 INFO L93 Difference]: Finished difference Result 8310 states and 11399 transitions. [2021-11-06 12:47:58,326 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:47:58,326 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-06 12:47:58,326 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:47:58,357 INFO L225 Difference]: With dead ends: 8310 [2021-11-06 12:47:58,357 INFO L226 Difference]: Without dead ends: 8308 [2021-11-06 12:47:58,362 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:47:58,374 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8308 states. [2021-11-06 12:47:58,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8308 to 8308. [2021-11-06 12:47:58,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8308 states, 8210 states have (on average 1.3845310596833131) internal successors, (11367), 8288 states have internal predecessors, (11367), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-06 12:47:58,712 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8308 states to 8308 states and 11397 transitions. [2021-11-06 12:47:58,712 INFO L78 Accepts]: Start accepts. Automaton has 8308 states and 11397 transitions. Word has length 12 [2021-11-06 12:47:58,713 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:47:58,713 INFO L470 AbstractCegarLoop]: Abstraction has 8308 states and 11397 transitions. [2021-11-06 12:47:58,713 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:47:58,713 INFO L276 IsEmpty]: Start isEmpty. Operand 8308 states and 11397 transitions. [2021-11-06 12:47:58,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-06 12:47:58,714 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:47:58,714 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:47:58,739 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-06 12:47:58,932 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:47:58,933 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr69ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:47:58,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:47:58,933 INFO L85 PathProgramCache]: Analyzing trace with hash 623370050, now seen corresponding path program 1 times [2021-11-06 12:47:58,935 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:47:58,935 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1584852630] [2021-11-06 12:47:58,935 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:47:58,935 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:47:58,935 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:47:58,939 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:47:58,940 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-06 12:48:01,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:48:01,376 INFO L263 TraceCheckSpWp]: Trace formula consists of 969 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:48:01,377 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:48:01,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:48:01,554 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:48:01,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:48:01,716 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:48:01,716 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1584852630] [2021-11-06 12:48:01,716 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1584852630] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:48:01,716 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:48:01,716 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-06 12:48:01,716 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [546156622] [2021-11-06 12:48:01,717 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:48:01,717 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:48:01,717 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:48:01,717 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:48:01,717 INFO L87 Difference]: Start difference. First operand 8308 states and 11397 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:48:05,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:48:05,444 INFO L93 Difference]: Finished difference Result 17275 states and 23686 transitions. [2021-11-06 12:48:05,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:48:05,444 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-06 12:48:05,444 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:48:05,463 INFO L225 Difference]: With dead ends: 17275 [2021-11-06 12:48:05,464 INFO L226 Difference]: Without dead ends: 8969 [2021-11-06 12:48:05,479 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:48:05,488 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8969 states. [2021-11-06 12:48:05,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8969 to 8947. [2021-11-06 12:48:05,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8947 states, 8848 states have (on average 1.3740958408679929) internal successors, (12158), 8913 states have internal predecessors, (12158), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-06 12:48:05,708 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8947 states to 8947 states and 12214 transitions. [2021-11-06 12:48:05,708 INFO L78 Accepts]: Start accepts. Automaton has 8947 states and 12214 transitions. Word has length 13 [2021-11-06 12:48:05,709 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:48:05,709 INFO L470 AbstractCegarLoop]: Abstraction has 8947 states and 12214 transitions. [2021-11-06 12:48:05,709 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:48:05,709 INFO L276 IsEmpty]: Start isEmpty. Operand 8947 states and 12214 transitions. [2021-11-06 12:48:05,712 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-11-06 12:48:05,712 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:48:05,712 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:48:05,735 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-06 12:48:05,928 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:48:05,928 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:48:05,928 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:48:05,928 INFO L85 PathProgramCache]: Analyzing trace with hash 2009130959, now seen corresponding path program 1 times [2021-11-06 12:48:05,930 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:48:05,930 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1040718645] [2021-11-06 12:48:05,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:48:05,931 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:48:05,931 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:48:05,932 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:48:05,934 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-06 12:48:08,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:48:08,571 INFO L263 TraceCheckSpWp]: Trace formula consists of 1055 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:48:08,573 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:48:08,881 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:48:08,882 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:48:09,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:48:09,179 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:48:09,179 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1040718645] [2021-11-06 12:48:09,179 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1040718645] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:48:09,179 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:48:09,181 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-06 12:48:09,181 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [559976939] [2021-11-06 12:48:09,182 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-06 12:48:09,182 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:48:09,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-06 12:48:09,182 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-06 12:48:09,182 INFO L87 Difference]: Start difference. First operand 8947 states and 12214 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:48:09,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:48:09,945 INFO L93 Difference]: Finished difference Result 27568 states and 37348 transitions. [2021-11-06 12:48:09,945 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-06 12:48:09,946 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2021-11-06 12:48:09,946 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:48:09,983 INFO L225 Difference]: With dead ends: 27568 [2021-11-06 12:48:09,983 INFO L226 Difference]: Without dead ends: 18629 [2021-11-06 12:48:10,009 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-06 12:48:10,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18629 states. [2021-11-06 12:48:10,333 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18629 to 11493. [2021-11-06 12:48:10,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11493 states, 11394 states have (on average 1.361330524837634) internal successors, (15511), 11459 states have internal predecessors, (15511), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-06 12:48:10,368 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11493 states to 11493 states and 15567 transitions. [2021-11-06 12:48:10,369 INFO L78 Accepts]: Start accepts. Automaton has 11493 states and 15567 transitions. Word has length 26 [2021-11-06 12:48:10,369 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:48:10,369 INFO L470 AbstractCegarLoop]: Abstraction has 11493 states and 15567 transitions. [2021-11-06 12:48:10,369 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:48:10,370 INFO L276 IsEmpty]: Start isEmpty. Operand 11493 states and 15567 transitions. [2021-11-06 12:48:10,374 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-06 12:48:10,374 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:48:10,374 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:48:10,396 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-06 12:48:10,583 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:48:10,584 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:48:10,584 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:48:10,584 INFO L85 PathProgramCache]: Analyzing trace with hash 434163568, now seen corresponding path program 1 times [2021-11-06 12:48:10,586 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:48:10,586 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1067012675] [2021-11-06 12:48:10,586 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:48:10,587 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:48:10,587 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:48:10,588 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:48:10,589 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-06 12:48:12,939 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-06 12:48:13,022 INFO L263 TraceCheckSpWp]: Trace formula consists of 1086 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-06 12:48:13,024 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-06 12:48:13,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:48:13,151 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-06 12:48:13,249 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-06 12:48:13,249 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-06 12:48:13,249 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1067012675] [2021-11-06 12:48:13,249 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1067012675] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-06 12:48:13,249 INFO L186 FreeRefinementEngine]: Constructing automaton from 2 perfect and 0 imperfect interpolant sequences. [2021-11-06 12:48:13,249 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-06 12:48:13,249 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [43195509] [2021-11-06 12:48:13,250 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-06 12:48:13,250 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-06 12:48:13,250 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-06 12:48:13,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:48:13,250 INFO L87 Difference]: Start difference. First operand 11493 states and 15567 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:48:17,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-06 12:48:17,264 INFO L93 Difference]: Finished difference Result 23114 states and 31262 transitions. [2021-11-06 12:48:17,264 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-06 12:48:17,264 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-11-06 12:48:17,265 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-06 12:48:17,292 INFO L225 Difference]: With dead ends: 23114 [2021-11-06 12:48:17,292 INFO L226 Difference]: Without dead ends: 11629 [2021-11-06 12:48:17,309 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-06 12:48:17,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11629 states. [2021-11-06 12:48:17,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11629 to 11493. [2021-11-06 12:48:17,662 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11493 states, 11394 states have (on average 1.3255222046691242) internal successors, (15103), 11459 states have internal predecessors, (15103), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-06 12:48:17,680 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11493 states to 11493 states and 15159 transitions. [2021-11-06 12:48:17,681 INFO L78 Accepts]: Start accepts. Automaton has 11493 states and 15159 transitions. Word has length 32 [2021-11-06 12:48:17,681 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-06 12:48:17,681 INFO L470 AbstractCegarLoop]: Abstraction has 11493 states and 15159 transitions. [2021-11-06 12:48:17,681 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-06 12:48:17,682 INFO L276 IsEmpty]: Start isEmpty. Operand 11493 states and 15159 transitions. [2021-11-06 12:48:17,682 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-06 12:48:17,682 INFO L505 BasicCegarLoop]: Found error trace [2021-11-06 12:48:17,683 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-06 12:48:17,704 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-06 12:48:17,903 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-06 12:48:17,904 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-06 12:48:17,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-06 12:48:17,904 INFO L85 PathProgramCache]: Analyzing trace with hash 1551705050, now seen corresponding path program 1 times [2021-11-06 12:48:17,906 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-06 12:48:17,906 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [911673845] [2021-11-06 12:48:17,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-06 12:48:17,907 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-06 12:48:17,907 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-06 12:48:17,908 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-06 12:48:17,910 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process Killed by 15