./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 5b36d44f Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5b36d44 [2021-11-07 11:18:41,494 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-07 11:18:41,520 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-07 11:18:41,550 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-07 11:18:41,551 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-07 11:18:41,554 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-07 11:18:41,557 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-07 11:18:41,559 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-07 11:18:41,560 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-07 11:18:41,561 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-07 11:18:41,562 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-07 11:18:41,563 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-07 11:18:41,563 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-07 11:18:41,564 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-07 11:18:41,565 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-07 11:18:41,566 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-07 11:18:41,567 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-07 11:18:41,568 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-07 11:18:41,569 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-07 11:18:41,571 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-07 11:18:41,572 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-07 11:18:41,573 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-07 11:18:41,574 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-07 11:18:41,575 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-07 11:18:41,577 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-07 11:18:41,577 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-07 11:18:41,578 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-07 11:18:41,578 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-07 11:18:41,579 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-07 11:18:41,580 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-07 11:18:41,580 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-07 11:18:41,581 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-07 11:18:41,581 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-07 11:18:41,582 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-07 11:18:41,583 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-07 11:18:41,583 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-07 11:18:41,584 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-07 11:18:41,584 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-07 11:18:41,584 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-07 11:18:41,585 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-07 11:18:41,585 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-07 11:18:41,586 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-07 11:18:41,611 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-07 11:18:41,612 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-07 11:18:41,612 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-07 11:18:41,612 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-07 11:18:41,613 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-07 11:18:41,613 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-07 11:18:41,614 INFO L138 SettingsManager]: * Use SBE=true [2021-11-07 11:18:41,614 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-07 11:18:41,614 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-07 11:18:41,614 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-07 11:18:41,614 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-07 11:18:41,615 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-07 11:18:41,615 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-07 11:18:41,615 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-07 11:18:41,615 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-07 11:18:41,615 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-07 11:18:41,616 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-07 11:18:41,616 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-07 11:18:41,616 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-07 11:18:41,616 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-07 11:18:41,617 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-07 11:18:41,617 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-07 11:18:41,617 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-07 11:18:41,617 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-07 11:18:41,617 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-07 11:18:41,618 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-07 11:18:41,618 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-07 11:18:41,618 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-07 11:18:41,618 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-07 11:18:41,618 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f [2021-11-07 11:18:41,874 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-07 11:18:41,906 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-07 11:18:41,908 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-07 11:18:41,910 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-07 11:18:41,910 INFO L275 PluginConnector]: CDTParser initialized [2021-11-07 11:18:41,912 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-07 11:18:41,973 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e7f0fdae/18d0c34b658e48e386fc24e23a994192/FLAG2d7b114b0 [2021-11-07 11:18:42,828 INFO L306 CDTParser]: Found 1 translation units. [2021-11-07 11:18:42,830 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-07 11:18:42,888 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e7f0fdae/18d0c34b658e48e386fc24e23a994192/FLAG2d7b114b0 [2021-11-07 11:18:42,984 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7e7f0fdae/18d0c34b658e48e386fc24e23a994192 [2021-11-07 11:18:42,987 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-07 11:18:42,988 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-07 11:18:42,990 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-07 11:18:42,990 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-07 11:18:42,993 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-07 11:18:42,994 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.11 11:18:42" (1/1) ... [2021-11-07 11:18:42,995 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@16a6e354 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:42, skipping insertion in model container [2021-11-07 11:18:42,995 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.11 11:18:42" (1/1) ... [2021-11-07 11:18:43,001 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-07 11:18:43,150 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-07 11:18:45,197 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-07 11:18:45,337 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-07 11:18:45,352 INFO L203 MainTranslator]: Completed pre-run [2021-11-07 11:18:45,740 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-07 11:18:45,748 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-07 11:18:45,820 INFO L208 MainTranslator]: Completed translation [2021-11-07 11:18:45,820 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45 WrapperNode [2021-11-07 11:18:45,821 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-07 11:18:45,823 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-07 11:18:45,823 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-07 11:18:45,824 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-07 11:18:45,830 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:45,926 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:46,958 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-07 11:18:46,959 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-07 11:18:46,960 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-07 11:18:46,960 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-07 11:18:46,970 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:46,970 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:47,255 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:47,256 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:47,896 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:48,088 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:48,168 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:48,458 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-07 11:18:48,459 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-07 11:18:48,459 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-07 11:18:48,459 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-07 11:18:48,476 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (1/1) ... [2021-11-07 11:18:48,493 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-07 11:18:48,502 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-07 11:18:48,537 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-07 11:18:48,585 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2021-11-07 11:18:48,585 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2021-11-07 11:18:48,585 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2021-11-07 11:18:48,585 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2021-11-07 11:18:48,586 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-07 11:18:48,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-07 11:18:48,587 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2021-11-07 11:18:48,587 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2021-11-07 11:18:48,587 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-07 11:18:48,587 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_start [2021-11-07 11:18:48,587 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_start [2021-11-07 11:18:48,587 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2021-11-07 11:18:48,588 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2021-11-07 11:18:48,588 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-07 11:18:48,588 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-07 11:18:48,588 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-07 11:18:48,588 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-07 11:18:48,588 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2021-11-07 11:18:48,588 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2021-11-07 11:18:48,589 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2021-11-07 11:18:48,589 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2021-11-07 11:18:48,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-07 11:18:48,589 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-07 11:18:48,589 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-07 11:18:48,589 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-07 11:18:48,590 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2021-11-07 11:18:48,590 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2021-11-07 11:18:48,590 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-07 11:18:48,590 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2021-11-07 11:18:48,590 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2021-11-07 11:18:48,590 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put_and_wait [2021-11-07 11:18:48,591 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put_and_wait [2021-11-07 11:18:48,591 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-07 11:18:48,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-07 11:18:48,591 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-07 11:18:48,591 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-07 11:18:48,591 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-07 11:18:48,592 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_release [2021-11-07 11:18:48,592 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_release [2021-11-07 11:18:48,592 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2021-11-07 11:18:48,592 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2021-11-07 11:18:48,593 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-07 11:18:48,593 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_start [2021-11-07 11:18:48,593 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_start [2021-11-07 11:18:48,593 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-07 11:18:48,593 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-07 11:18:48,571 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-07 11:18:59,494 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,494 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,494 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,495 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,495 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,495 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-07 11:18:59,495 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,495 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-07 11:18:59,495 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,496 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,496 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,498 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,498 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:18:59,498 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-07 11:18:59,498 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume !__copy_from_user_#t~switch141; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1218: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1219: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-2: havoc __copy_to_user_#t~switch146; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-3: havoc __copy_to_user_#t~switch146; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825: havoc __copy_to_user_#t~switch146; [2021-11-07 11:18:59,499 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-1: havoc __copy_to_user_#t~switch146; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,500 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4 == __copy_to_user_~size; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8 == __copy_to_user_~size; [2021-11-07 11:18:59,501 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,502 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-07 11:18:59,502 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,502 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-07 11:18:59,502 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,502 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-07 11:18:59,503 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,503 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10 == __copy_to_user_~size; [2021-11-07 11:18:59,503 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,504 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-07 11:18:59,504 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,504 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-07 11:18:59,504 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,505 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-07 11:18:59,505 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,505 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16 == __copy_to_user_~size; [2021-11-07 11:18:59,505 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,505 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,506 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,506 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,506 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,506 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,506 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume 0 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,506 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume !(0 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,507 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,507 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:18:59,507 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,507 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:18:59,507 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,507 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:18:59,508 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,508 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:18:59,508 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,508 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,508 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,508 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,509 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,509 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,509 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,509 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,509 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:18:59,510 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch146; [2021-11-07 11:18:59,510 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:18:59,510 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume !__copy_to_user_#t~switch146; [2021-11-07 11:18:59,510 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:18:59,510 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume !__copy_to_user_#t~switch146; [2021-11-07 11:18:59,511 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:18:59,511 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume !__copy_to_user_#t~switch146; [2021-11-07 11:18:59,511 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##164: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-07 11:18:59,511 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##163: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,512 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1876: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,512 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1877: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-07 11:18:59,512 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1811: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,512 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1812: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-07 11:18:59,512 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##757: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-07 11:18:59,513 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##756: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,513 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-3: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:18:59,513 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:18:59,513 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-7: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:18:59,513 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-5: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:18:59,514 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-11: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:18:59,514 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-9: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := (if __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~4 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:18:59,514 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-19: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-07 11:18:59,514 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-20: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-07 11:18:59,514 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-85: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:18:59,515 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-84: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:18:59,515 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-79: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:18:59,515 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-78: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:18:59,515 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-121: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-07 11:18:59,515 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-120: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-07 11:18:59,516 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-179: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:18:59,516 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-180: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:18:59,516 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-186: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret148 && __copy_to_user_#t~ret148 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:18:59,516 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-185: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret147 && __copy_to_user_#t~ret147 <= 9223372036854775807;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:18:59,516 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##822: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2 == __copy_to_user_~size; [2021-11-07 11:18:59,516 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##821: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:18:59,517 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760-1: havoc __copy_from_user_#t~switch141; [2021-11-07 11:18:59,517 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-07 11:18:59,517 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,517 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-07 11:18:59,517 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,517 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-07 11:18:59,518 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,518 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-07 11:18:59,518 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,518 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-07 11:18:59,518 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,518 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-07 11:18:59,519 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:18:59,519 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-07 11:18:59,519 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,519 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-07 11:18:59,519 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:18:59,519 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-07 11:19:04,570 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,570 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,571 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:19:04,571 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-07 11:19:04,571 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,571 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,571 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := copy_user_generic_~ret~0 % 4294967296; [2021-11-07 11:19:04,572 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-07 11:19:04,572 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##352: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2 == __copy_from_user_~size; [2021-11-07 11:19:04,572 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##351: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,572 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := (if __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~3 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-07 11:19:04,573 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-29: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret143 && __copy_from_user_#t~ret143 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-07 11:19:04,573 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-28: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret142 && __copy_from_user_#t~ret142 <= 9223372036854775807;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-07 11:19:04,573 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-07 11:19:04,573 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,573 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4 == __copy_from_user_~size; [2021-11-07 11:19:04,574 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,574 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8 == __copy_from_user_~size; [2021-11-07 11:19:04,574 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:19:04,574 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10 == __copy_from_user_~size; [2021-11-07 11:19:04,574 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~1 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:19:04,574 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16 == __copy_from_user_~size; [2021-11-07 11:19:18,998 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-07 11:19:18,999 INFO L299 CfgBuilder]: Removed 7538 assume(true) statements. [2021-11-07 11:19:19,010 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.11 11:19:19 BoogieIcfgContainer [2021-11-07 11:19:19,011 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-07 11:19:19,013 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-07 11:19:19,013 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-07 11:19:19,016 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-07 11:19:19,016 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.11 11:18:42" (1/3) ... [2021-11-07 11:19:19,017 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@689d4e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.11 11:19:19, skipping insertion in model container [2021-11-07 11:19:19,017 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:18:45" (2/3) ... [2021-11-07 11:19:19,017 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@689d4e3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.11 11:19:19, skipping insertion in model container [2021-11-07 11:19:19,017 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.11 11:19:19" (3/3) ... [2021-11-07 11:19:19,018 INFO L111 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-07 11:19:19,023 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-07 11:19:19,023 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2021-11-07 11:19:19,091 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-07 11:19:19,096 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-07 11:19:19,096 INFO L340 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2021-11-07 11:19:19,191 INFO L276 IsEmpty]: Start isEmpty. Operand has 7743 states, 7619 states have (on average 1.4066150413440084) internal successors, (10717), 7704 states have internal predecessors, (10717), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-07 11:19:19,194 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-07 11:19:19,194 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:19,194 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:19,195 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:19,199 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:19,199 INFO L85 PathProgramCache]: Analyzing trace with hash 54787053, now seen corresponding path program 1 times [2021-11-07 11:19:19,206 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:19,207 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1381094190] [2021-11-07 11:19:19,207 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:19,208 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:19,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:19,771 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:19,772 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:19,772 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1381094190] [2021-11-07 11:19:19,773 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1381094190] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:19,773 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:19,773 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-07 11:19:19,775 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [737749896] [2021-11-07 11:19:19,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:19,779 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:19,779 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:19,807 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:19,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:19,828 INFO L87 Difference]: Start difference. First operand has 7743 states, 7619 states have (on average 1.4066150413440084) internal successors, (10717), 7704 states have internal predecessors, (10717), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:20,239 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:20,240 INFO L93 Difference]: Finished difference Result 15482 states and 21584 transitions. [2021-11-07 11:19:20,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:20,243 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-07 11:19:20,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:20,302 INFO L225 Difference]: With dead ends: 15482 [2021-11-07 11:19:20,303 INFO L226 Difference]: Without dead ends: 7659 [2021-11-07 11:19:20,342 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 4.34ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:20,346 INFO L933 BasicCegarLoop]: 10657 mSDtfsCounter, 10657 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.04ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10657 SdHoareTripleChecker+Valid, 10657 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 36.55ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.36ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:20,347 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10657 Valid, 10657 Invalid, 3 Unknown, 0 Unchecked, 36.55ms Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 12.36ms Time] [2021-11-07 11:19:20,379 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7659 states. [2021-11-07 11:19:20,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7659 to 7659. [2021-11-07 11:19:20,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7659 states, 7536 states have (on average 1.3845541401273886) internal successors, (10434), 7620 states have internal predecessors, (10434), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-07 11:19:20,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7659 states to 7659 states and 10496 transitions. [2021-11-07 11:19:20,694 INFO L78 Accepts]: Start accepts. Automaton has 7659 states and 10496 transitions. Word has length 10 [2021-11-07 11:19:20,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:20,719 INFO L470 AbstractCegarLoop]: Abstraction has 7659 states and 10496 transitions. [2021-11-07 11:19:20,720 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:20,720 INFO L276 IsEmpty]: Start isEmpty. Operand 7659 states and 10496 transitions. [2021-11-07 11:19:20,720 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-07 11:19:20,721 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:20,721 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:20,721 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-07 11:19:20,722 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:20,723 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:20,724 INFO L85 PathProgramCache]: Analyzing trace with hash -1577669200, now seen corresponding path program 1 times [2021-11-07 11:19:20,724 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:20,724 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1696728137] [2021-11-07 11:19:20,724 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:20,725 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:20,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:20,953 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:20,954 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:20,954 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1696728137] [2021-11-07 11:19:20,954 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1696728137] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:20,954 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:20,954 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-07 11:19:20,955 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2103917885] [2021-11-07 11:19:20,955 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:20,956 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:20,956 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:20,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:20,956 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:20,957 INFO L87 Difference]: Start difference. First operand 7659 states and 10496 transitions. Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:23,004 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:19:23,336 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:23,337 INFO L93 Difference]: Finished difference Result 7659 states and 10496 transitions. [2021-11-07 11:19:23,337 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:23,337 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-07 11:19:23,338 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:23,368 INFO L225 Difference]: With dead ends: 7659 [2021-11-07 11:19:23,369 INFO L226 Difference]: Without dead ends: 7657 [2021-11-07 11:19:23,373 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.96ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:23,375 INFO L933 BasicCegarLoop]: 10493 mSDtfsCounter, 10486 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2041.41ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10486 SdHoareTripleChecker+Valid, 10493 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 23.93ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2161.41ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:23,375 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10486 Valid, 10493 Invalid, 2 Unknown, 0 Unchecked, 23.93ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2161.41ms Time] [2021-11-07 11:19:23,388 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7657 states. [2021-11-07 11:19:23,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7657 to 7657. [2021-11-07 11:19:23,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7657 states, 7535 states have (on average 1.3844724618447246) internal successors, (10432), 7618 states have internal predecessors, (10432), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-07 11:19:23,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7657 states to 7657 states and 10494 transitions. [2021-11-07 11:19:23,815 INFO L78 Accepts]: Start accepts. Automaton has 7657 states and 10494 transitions. Word has length 10 [2021-11-07 11:19:23,815 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:23,815 INFO L470 AbstractCegarLoop]: Abstraction has 7657 states and 10494 transitions. [2021-11-07 11:19:23,816 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:23,816 INFO L276 IsEmpty]: Start isEmpty. Operand 7657 states and 10494 transitions. [2021-11-07 11:19:23,816 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2021-11-07 11:19:23,816 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:23,817 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:23,817 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-07 11:19:23,817 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr63ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:23,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:23,823 INFO L85 PathProgramCache]: Analyzing trace with hash -1663080904, now seen corresponding path program 1 times [2021-11-07 11:19:23,823 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:23,823 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1658995412] [2021-11-07 11:19:23,823 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:23,824 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:23,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:23,974 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:23,974 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:23,974 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1658995412] [2021-11-07 11:19:23,975 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1658995412] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:23,975 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:23,975 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-07 11:19:23,975 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2114925076] [2021-11-07 11:19:23,975 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:23,976 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:23,976 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:23,976 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:23,976 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:23,977 INFO L87 Difference]: Start difference. First operand 7657 states and 10494 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:26,027 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:19:26,339 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:26,339 INFO L93 Difference]: Finished difference Result 7657 states and 10494 transitions. [2021-11-07 11:19:26,339 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:26,340 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2021-11-07 11:19:26,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:26,371 INFO L225 Difference]: With dead ends: 7657 [2021-11-07 11:19:26,372 INFO L226 Difference]: Without dead ends: 7655 [2021-11-07 11:19:26,381 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.75ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:26,384 INFO L933 BasicCegarLoop]: 10491 mSDtfsCounter, 10483 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2048.37ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10483 SdHoareTripleChecker+Valid, 10491 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 17.93ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2179.36ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:26,386 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10483 Valid, 10491 Invalid, 2 Unknown, 0 Unchecked, 17.93ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2179.36ms Time] [2021-11-07 11:19:26,401 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7655 states. [2021-11-07 11:19:26,597 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7655 to 7655. [2021-11-07 11:19:26,617 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7655 states, 7534 states have (on average 1.3843907618794797) internal successors, (10430), 7616 states have internal predecessors, (10430), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-07 11:19:26,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7655 states to 7655 states and 10492 transitions. [2021-11-07 11:19:26,642 INFO L78 Accepts]: Start accepts. Automaton has 7655 states and 10492 transitions. Word has length 11 [2021-11-07 11:19:26,642 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:26,642 INFO L470 AbstractCegarLoop]: Abstraction has 7655 states and 10492 transitions. [2021-11-07 11:19:26,643 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:26,643 INFO L276 IsEmpty]: Start isEmpty. Operand 7655 states and 10492 transitions. [2021-11-07 11:19:26,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-07 11:19:26,644 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:26,644 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:26,644 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-07 11:19:26,645 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr64ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:26,645 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:26,645 INFO L85 PathProgramCache]: Analyzing trace with hash -15876422, now seen corresponding path program 1 times [2021-11-07 11:19:26,645 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:26,646 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2116299072] [2021-11-07 11:19:26,646 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:26,647 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:26,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:26,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:26,841 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:26,841 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2116299072] [2021-11-07 11:19:26,842 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2116299072] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:26,842 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:26,842 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-07 11:19:26,842 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [94180783] [2021-11-07 11:19:26,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:26,843 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:26,843 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:26,844 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:26,845 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:26,846 INFO L87 Difference]: Start difference. First operand 7655 states and 10492 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:28,942 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.09s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:19:29,242 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:29,243 INFO L93 Difference]: Finished difference Result 7655 states and 10492 transitions. [2021-11-07 11:19:29,243 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:29,244 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-07 11:19:29,244 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:29,286 INFO L225 Difference]: With dead ends: 7655 [2021-11-07 11:19:29,286 INFO L226 Difference]: Without dead ends: 7653 [2021-11-07 11:19:29,291 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 3.72ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:29,298 INFO L933 BasicCegarLoop]: 10489 mSDtfsCounter, 10480 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2092.56ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 10480 SdHoareTripleChecker+Valid, 10489 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 13.07ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2223.46ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:29,303 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [10480 Valid, 10489 Invalid, 2 Unknown, 0 Unchecked, 13.07ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2223.46ms Time] [2021-11-07 11:19:29,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 7653 states. [2021-11-07 11:19:29,518 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 7653 to 7653. [2021-11-07 11:19:29,533 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7653 states, 7533 states have (on average 1.3843090402230187) internal successors, (10428), 7614 states have internal predecessors, (10428), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (31), 29 states have call predecessors, (31), 31 states have call successors, (31) [2021-11-07 11:19:29,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7653 states to 7653 states and 10490 transitions. [2021-11-07 11:19:29,557 INFO L78 Accepts]: Start accepts. Automaton has 7653 states and 10490 transitions. Word has length 12 [2021-11-07 11:19:29,557 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:29,557 INFO L470 AbstractCegarLoop]: Abstraction has 7653 states and 10490 transitions. [2021-11-07 11:19:29,557 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:29,558 INFO L276 IsEmpty]: Start isEmpty. Operand 7653 states and 10490 transitions. [2021-11-07 11:19:29,558 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-07 11:19:29,558 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:29,559 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:29,559 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-07 11:19:29,559 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr65ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:29,560 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:29,560 INFO L85 PathProgramCache]: Analyzing trace with hash -492145022, now seen corresponding path program 1 times [2021-11-07 11:19:29,560 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:29,560 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1994850240] [2021-11-07 11:19:29,560 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:29,560 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:29,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:29,689 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:29,690 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:29,690 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1994850240] [2021-11-07 11:19:29,690 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1994850240] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:29,690 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:29,690 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-07 11:19:29,690 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [232018799] [2021-11-07 11:19:29,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:29,691 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:29,691 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:29,691 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:29,691 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:29,692 INFO L87 Difference]: Start difference. First operand 7653 states and 10490 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:31,742 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:19:32,462 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:32,462 INFO L93 Difference]: Finished difference Result 16176 states and 22182 transitions. [2021-11-07 11:19:32,463 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:32,463 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-07 11:19:32,464 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:32,493 INFO L225 Difference]: With dead ends: 16176 [2021-11-07 11:19:32,494 INFO L226 Difference]: Without dead ends: 8525 [2021-11-07 11:19:32,517 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.66ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:32,518 INFO L933 BasicCegarLoop]: 11425 mSDtfsCounter, 2710 mSDsluCounter, 8688 mSDsCounter, 0 mSdLazyCounter, 179 mSolverCounterSat, 107 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2279.75ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 2710 SdHoareTripleChecker+Valid, 20113 SdHoareTripleChecker+Invalid, 287 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 23.50ms SdHoareTripleChecker+Time, 107 IncrementalHoareTripleChecker+Valid, 179 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2456.90ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:32,518 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2710 Valid, 20113 Invalid, 287 Unknown, 0 Unchecked, 23.50ms Time], IncrementalHoareTripleChecker [107 Valid, 179 Invalid, 1 Unknown, 0 Unchecked, 2456.90ms Time] [2021-11-07 11:19:32,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8525 states. [2021-11-07 11:19:32,748 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8525 to 8489. [2021-11-07 11:19:32,891 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8489 states, 8360 states have (on average 1.3726076555023923) internal successors, (11475), 8423 states have internal predecessors, (11475), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-07 11:19:32,917 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8489 states to 8489 states and 11583 transitions. [2021-11-07 11:19:32,918 INFO L78 Accepts]: Start accepts. Automaton has 8489 states and 11583 transitions. Word has length 13 [2021-11-07 11:19:32,918 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:32,918 INFO L470 AbstractCegarLoop]: Abstraction has 8489 states and 11583 transitions. [2021-11-07 11:19:32,918 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:32,919 INFO L276 IsEmpty]: Start isEmpty. Operand 8489 states and 11583 transitions. [2021-11-07 11:19:32,920 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2021-11-07 11:19:32,920 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:32,920 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:32,921 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-07 11:19:32,921 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting vhost_net_releaseErr1ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:32,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:32,922 INFO L85 PathProgramCache]: Analyzing trace with hash 829533720, now seen corresponding path program 1 times [2021-11-07 11:19:32,922 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:32,922 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1511363132] [2021-11-07 11:19:32,922 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:32,922 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:32,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:33,056 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:33,056 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:33,056 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1511363132] [2021-11-07 11:19:33,056 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1511363132] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:33,057 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:33,057 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-07 11:19:33,057 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1076807603] [2021-11-07 11:19:33,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:33,057 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:33,058 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:33,058 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:33,058 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:33,058 INFO L87 Difference]: Start difference. First operand 8489 states and 11583 transitions. Second operand has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:33,433 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:33,433 INFO L93 Difference]: Finished difference Result 21277 states and 28904 transitions. [2021-11-07 11:19:33,434 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:33,434 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2021-11-07 11:19:33,435 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:33,476 INFO L225 Difference]: With dead ends: 21277 [2021-11-07 11:19:33,476 INFO L226 Difference]: Without dead ends: 12796 [2021-11-07 11:19:33,505 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 1.99ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:33,507 INFO L933 BasicCegarLoop]: 10454 mSDtfsCounter, 4879 mSDsluCounter, 10388 mSDsCounter, 0 mSdLazyCounter, 9 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.95ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 4889 SdHoareTripleChecker+Valid, 20842 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 25.69ms SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 9 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.93ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:33,507 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4889 Valid, 20842 Invalid, 12 Unknown, 0 Unchecked, 25.69ms Time], IncrementalHoareTripleChecker [3 Valid, 9 Invalid, 0 Unknown, 0 Unchecked, 10.93ms Time] [2021-11-07 11:19:33,522 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12796 states. [2021-11-07 11:19:33,818 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12796 to 9762. [2021-11-07 11:19:33,831 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9762 states, 9633 states have (on average 1.3652029481988996) internal successors, (13151), 9696 states have internal predecessors, (13151), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-07 11:19:33,860 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9762 states to 9762 states and 13259 transitions. [2021-11-07 11:19:33,862 INFO L78 Accepts]: Start accepts. Automaton has 9762 states and 13259 transitions. Word has length 27 [2021-11-07 11:19:33,862 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:33,862 INFO L470 AbstractCegarLoop]: Abstraction has 9762 states and 13259 transitions. [2021-11-07 11:19:33,862 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.666666666666666) internal successors, (26), 3 states have internal predecessors, (26), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:33,862 INFO L276 IsEmpty]: Start isEmpty. Operand 9762 states and 13259 transitions. [2021-11-07 11:19:33,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-07 11:19:33,868 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:33,868 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:33,868 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-07 11:19:33,869 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:33,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:33,869 INFO L85 PathProgramCache]: Analyzing trace with hash -213216420, now seen corresponding path program 1 times [2021-11-07 11:19:33,869 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:33,870 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [148439121] [2021-11-07 11:19:33,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:33,870 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:33,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:19:34,067 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:19:34,067 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-07 11:19:34,068 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [148439121] [2021-11-07 11:19:34,068 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [148439121] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-07 11:19:34,068 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:19:34,068 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-07 11:19:34,068 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [56282112] [2021-11-07 11:19:34,068 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-07 11:19:34,069 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:19:34,069 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-07 11:19:34,069 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:19:34,070 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:34,070 INFO L87 Difference]: Start difference. First operand 9762 states and 13259 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:34,923 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:19:34,924 INFO L93 Difference]: Finished difference Result 19606 states and 26600 transitions. [2021-11-07 11:19:34,924 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:19:34,925 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-11-07 11:19:34,925 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:19:34,955 INFO L225 Difference]: With dead ends: 19606 [2021-11-07 11:19:34,955 INFO L226 Difference]: Without dead ends: 9852 [2021-11-07 11:19:34,985 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 2.09ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:19:34,986 INFO L933 BasicCegarLoop]: 10222 mSDtfsCounter, 0 mSDsluCounter, 9918 mSDsCounter, 0 mSdLazyCounter, 392 mSolverCounterSat, 306 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 438.86ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 20140 SdHoareTripleChecker+Invalid, 698 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 21.13ms SdHoareTripleChecker+Time, 306 IncrementalHoareTripleChecker+Valid, 392 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 544.57ms IncrementalHoareTripleChecker+Time [2021-11-07 11:19:34,986 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 20140 Invalid, 698 Unknown, 0 Unchecked, 21.13ms Time], IncrementalHoareTripleChecker [306 Valid, 392 Invalid, 0 Unknown, 0 Unchecked, 544.57ms Time] [2021-11-07 11:19:34,997 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9852 states. [2021-11-07 11:19:35,245 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9852 to 9762. [2021-11-07 11:19:35,260 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9762 states, 9633 states have (on average 1.3371742966884668) internal successors, (12881), 9696 states have internal predecessors, (12881), 43 states have call successors, (43), 25 states have call predecessors, (43), 25 states have return successors, (65), 49 states have call predecessors, (65), 43 states have call successors, (65) [2021-11-07 11:19:35,290 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9762 states to 9762 states and 12989 transitions. [2021-11-07 11:19:35,290 INFO L78 Accepts]: Start accepts. Automaton has 9762 states and 12989 transitions. Word has length 32 [2021-11-07 11:19:35,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:19:35,291 INFO L470 AbstractCegarLoop]: Abstraction has 9762 states and 12989 transitions. [2021-11-07 11:19:35,291 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:19:35,291 INFO L276 IsEmpty]: Start isEmpty. Operand 9762 states and 12989 transitions. [2021-11-07 11:19:35,292 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-07 11:19:35,293 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:19:35,293 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:35,293 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-07 11:19:35,293 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:19:35,294 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:19:35,294 INFO L85 PathProgramCache]: Analyzing trace with hash -142527228, now seen corresponding path program 1 times [2021-11-07 11:19:35,294 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-07 11:19:35,294 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468033597] [2021-11-07 11:19:35,294 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:19:35,294 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-07 11:19:36,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-07 11:19:36,927 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-07 11:19:38,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-07 11:19:38,367 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-07 11:19:38,368 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-07 11:19:38,369 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ULTIMATE.startErr16ASSERT_VIOLATIONERROR_FUNCTION (77 of 78 remaining) [2021-11-07 11:19:38,372 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION (76 of 78 remaining) [2021-11-07 11:19:38,372 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION (75 of 78 remaining) [2021-11-07 11:19:38,372 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (74 of 78 remaining) [2021-11-07 11:19:38,372 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr3ASSERT_VIOLATIONERROR_FUNCTION (73 of 78 remaining) [2021-11-07 11:19:38,373 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr0ASSERT_VIOLATIONERROR_FUNCTION (72 of 78 remaining) [2021-11-07 11:19:38,373 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr1ASSERT_VIOLATIONERROR_FUNCTION (71 of 78 remaining) [2021-11-07 11:19:38,373 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr2ASSERT_VIOLATIONERROR_FUNCTION (70 of 78 remaining) [2021-11-07 11:19:38,373 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location handle_txErr3ASSERT_VIOLATIONERROR_FUNCTION (69 of 78 remaining) [2021-11-07 11:19:38,373 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr0ASSERT_VIOLATIONERROR_FUNCTION (68 of 78 remaining) [2021-11-07 11:19:38,374 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr1ASSERT_VIOLATIONERROR_FUNCTION (67 of 78 remaining) [2021-11-07 11:19:38,374 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr2ASSERT_VIOLATIONERROR_FUNCTION (66 of 78 remaining) [2021-11-07 11:19:38,374 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_releaseErr3ASSERT_VIOLATIONERROR_FUNCTION (65 of 78 remaining) [2021-11-07 11:19:38,374 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION (64 of 78 remaining) [2021-11-07 11:19:38,374 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION (63 of 78 remaining) [2021-11-07 11:19:38,375 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (62 of 78 remaining) [2021-11-07 11:19:38,375 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONERROR_FUNCTION (61 of 78 remaining) [2021-11-07 11:19:38,375 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr4ASSERT_VIOLATIONERROR_FUNCTION (60 of 78 remaining) [2021-11-07 11:19:38,375 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr5ASSERT_VIOLATIONERROR_FUNCTION (59 of 78 remaining) [2021-11-07 11:19:38,375 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr6ASSERT_VIOLATIONERROR_FUNCTION (58 of 78 remaining) [2021-11-07 11:19:38,375 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr7ASSERT_VIOLATIONERROR_FUNCTION (57 of 78 remaining) [2021-11-07 11:19:38,376 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr8ASSERT_VIOLATIONERROR_FUNCTION (56 of 78 remaining) [2021-11-07 11:19:38,376 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr9ASSERT_VIOLATIONERROR_FUNCTION (55 of 78 remaining) [2021-11-07 11:19:38,376 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr10ASSERT_VIOLATIONERROR_FUNCTION (54 of 78 remaining) [2021-11-07 11:19:38,376 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr11ASSERT_VIOLATIONERROR_FUNCTION (53 of 78 remaining) [2021-11-07 11:19:38,376 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr12ASSERT_VIOLATIONERROR_FUNCTION (52 of 78 remaining) [2021-11-07 11:19:38,377 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr13ASSERT_VIOLATIONERROR_FUNCTION (51 of 78 remaining) [2021-11-07 11:19:38,377 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr14ASSERT_VIOLATIONERROR_FUNCTION (50 of 78 remaining) [2021-11-07 11:19:38,377 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr15ASSERT_VIOLATIONERROR_FUNCTION (49 of 78 remaining) [2021-11-07 11:19:38,377 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr17ASSERT_VIOLATIONERROR_FUNCTION (48 of 78 remaining) [2021-11-07 11:19:38,377 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr18ASSERT_VIOLATIONERROR_FUNCTION (47 of 78 remaining) [2021-11-07 11:19:38,377 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr19ASSERT_VIOLATIONERROR_FUNCTION (46 of 78 remaining) [2021-11-07 11:19:38,378 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION (45 of 78 remaining) [2021-11-07 11:19:38,378 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr21ASSERT_VIOLATIONERROR_FUNCTION (44 of 78 remaining) [2021-11-07 11:19:38,378 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr22ASSERT_VIOLATIONERROR_FUNCTION (43 of 78 remaining) [2021-11-07 11:19:38,378 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr23ASSERT_VIOLATIONERROR_FUNCTION (42 of 78 remaining) [2021-11-07 11:19:38,378 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr24ASSERT_VIOLATIONERROR_FUNCTION (41 of 78 remaining) [2021-11-07 11:19:38,378 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr25ASSERT_VIOLATIONERROR_FUNCTION (40 of 78 remaining) [2021-11-07 11:19:38,379 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr26ASSERT_VIOLATIONERROR_FUNCTION (39 of 78 remaining) [2021-11-07 11:19:38,379 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr27ASSERT_VIOLATIONERROR_FUNCTION (38 of 78 remaining) [2021-11-07 11:19:38,379 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr28ASSERT_VIOLATIONERROR_FUNCTION (37 of 78 remaining) [2021-11-07 11:19:38,379 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr29ASSERT_VIOLATIONERROR_FUNCTION (36 of 78 remaining) [2021-11-07 11:19:38,379 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr30ASSERT_VIOLATIONERROR_FUNCTION (35 of 78 remaining) [2021-11-07 11:19:38,379 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr31ASSERT_VIOLATIONERROR_FUNCTION (34 of 78 remaining) [2021-11-07 11:19:38,380 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr32ASSERT_VIOLATIONERROR_FUNCTION (33 of 78 remaining) [2021-11-07 11:19:38,380 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr33ASSERT_VIOLATIONERROR_FUNCTION (32 of 78 remaining) [2021-11-07 11:19:38,380 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr34ASSERT_VIOLATIONERROR_FUNCTION (31 of 78 remaining) [2021-11-07 11:19:38,380 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr35ASSERT_VIOLATIONERROR_FUNCTION (30 of 78 remaining) [2021-11-07 11:19:38,380 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr36ASSERT_VIOLATIONERROR_FUNCTION (29 of 78 remaining) [2021-11-07 11:19:38,380 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr37ASSERT_VIOLATIONERROR_FUNCTION (28 of 78 remaining) [2021-11-07 11:19:38,381 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr38ASSERT_VIOLATIONERROR_FUNCTION (27 of 78 remaining) [2021-11-07 11:19:38,382 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr39ASSERT_VIOLATIONERROR_FUNCTION (26 of 78 remaining) [2021-11-07 11:19:38,382 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr40ASSERT_VIOLATIONERROR_FUNCTION (25 of 78 remaining) [2021-11-07 11:19:38,382 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr41ASSERT_VIOLATIONERROR_FUNCTION (24 of 78 remaining) [2021-11-07 11:19:38,382 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr42ASSERT_VIOLATIONERROR_FUNCTION (23 of 78 remaining) [2021-11-07 11:19:38,382 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr43ASSERT_VIOLATIONERROR_FUNCTION (22 of 78 remaining) [2021-11-07 11:19:38,382 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr44ASSERT_VIOLATIONERROR_FUNCTION (21 of 78 remaining) [2021-11-07 11:19:38,383 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr45ASSERT_VIOLATIONERROR_FUNCTION (20 of 78 remaining) [2021-11-07 11:19:38,383 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr46ASSERT_VIOLATIONERROR_FUNCTION (19 of 78 remaining) [2021-11-07 11:19:38,383 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr47ASSERT_VIOLATIONERROR_FUNCTION (18 of 78 remaining) [2021-11-07 11:19:38,383 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr48ASSERT_VIOLATIONERROR_FUNCTION (17 of 78 remaining) [2021-11-07 11:19:38,383 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr49ASSERT_VIOLATIONERROR_FUNCTION (16 of 78 remaining) [2021-11-07 11:19:38,383 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr50ASSERT_VIOLATIONERROR_FUNCTION (15 of 78 remaining) [2021-11-07 11:19:38,384 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr51ASSERT_VIOLATIONERROR_FUNCTION (14 of 78 remaining) [2021-11-07 11:19:38,384 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr52ASSERT_VIOLATIONERROR_FUNCTION (13 of 78 remaining) [2021-11-07 11:19:38,384 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr53ASSERT_VIOLATIONERROR_FUNCTION (12 of 78 remaining) [2021-11-07 11:19:38,385 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr54ASSERT_VIOLATIONERROR_FUNCTION (11 of 78 remaining) [2021-11-07 11:19:38,385 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr55ASSERT_VIOLATIONERROR_FUNCTION (10 of 78 remaining) [2021-11-07 11:19:38,385 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr56ASSERT_VIOLATIONERROR_FUNCTION (9 of 78 remaining) [2021-11-07 11:19:38,385 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr57ASSERT_VIOLATIONERROR_FUNCTION (8 of 78 remaining) [2021-11-07 11:19:38,385 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr58ASSERT_VIOLATIONERROR_FUNCTION (7 of 78 remaining) [2021-11-07 11:19:38,386 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr59ASSERT_VIOLATIONERROR_FUNCTION (6 of 78 remaining) [2021-11-07 11:19:38,386 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr60ASSERT_VIOLATIONERROR_FUNCTION (5 of 78 remaining) [2021-11-07 11:19:38,386 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr61ASSERT_VIOLATIONERROR_FUNCTION (4 of 78 remaining) [2021-11-07 11:19:38,386 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr62ASSERT_VIOLATIONERROR_FUNCTION (3 of 78 remaining) [2021-11-07 11:19:38,386 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr63ASSERT_VIOLATIONERROR_FUNCTION (2 of 78 remaining) [2021-11-07 11:19:38,386 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr64ASSERT_VIOLATIONERROR_FUNCTION (1 of 78 remaining) [2021-11-07 11:19:38,387 INFO L764 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr65ASSERT_VIOLATIONERROR_FUNCTION (0 of 78 remaining) [2021-11-07 11:19:38,387 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-07 11:19:38,390 INFO L732 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:19:38,394 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-07 11:19:38,742 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 07.11 11:19:38 BoogieIcfgContainer [2021-11-07 11:19:38,742 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-07 11:19:38,743 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-07 11:19:38,743 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-07 11:19:38,744 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-07 11:19:38,744 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.11 11:19:19" (3/4) ... [2021-11-07 11:19:38,747 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-07 11:19:38,747 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-07 11:19:38,748 INFO L158 Benchmark]: Toolchain (without parser) took 55759.29ms. Allocated memory was 107.0MB in the beginning and 2.8GB in the end (delta: 2.7GB). Free memory was 65.9MB in the beginning and 1.5GB in the end (delta: -1.4GB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. [2021-11-07 11:19:38,748 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 83.9MB. Free memory was 41.5MB in the beginning and 41.4MB in the end (delta: 92.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-07 11:19:38,748 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2832.18ms. Allocated memory was 107.0MB in the beginning and 151.0MB in the end (delta: 44.0MB). Free memory was 65.6MB in the beginning and 66.5MB in the end (delta: -949.2kB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. [2021-11-07 11:19:38,749 INFO L158 Benchmark]: Boogie Procedure Inliner took 1135.48ms. Allocated memory was 151.0MB in the beginning and 394.3MB in the end (delta: 243.3MB). Free memory was 66.5MB in the beginning and 226.8MB in the end (delta: -160.3MB). Peak memory consumption was 111.7MB. Max. memory is 16.1GB. [2021-11-07 11:19:38,749 INFO L158 Benchmark]: Boogie Preprocessor took 1498.46ms. Allocated memory was 394.3MB in the beginning and 952.1MB in the end (delta: 557.8MB). Free memory was 226.8MB in the beginning and 723.8MB in the end (delta: -497.0MB). Peak memory consumption was 134.2MB. Max. memory is 16.1GB. [2021-11-07 11:19:38,749 INFO L158 Benchmark]: RCFGBuilder took 30552.27ms. Allocated memory was 952.1MB in the beginning and 2.8GB in the end (delta: 1.8GB). Free memory was 723.8MB in the beginning and 2.0GB in the end (delta: -1.3GB). Peak memory consumption was 793.8MB. Max. memory is 16.1GB. [2021-11-07 11:19:38,750 INFO L158 Benchmark]: TraceAbstraction took 19729.73ms. Allocated memory is still 2.8GB. Free memory was 2.0GB in the beginning and 1.5GB in the end (delta: 552.4MB). Peak memory consumption was 553.5MB. Max. memory is 16.1GB. [2021-11-07 11:19:38,750 INFO L158 Benchmark]: Witness Printer took 4.04ms. Allocated memory is still 2.8GB. Free memory was 1.5GB in the beginning and 1.5GB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-07 11:19:38,752 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 83.9MB. Free memory was 41.5MB in the beginning and 41.4MB in the end (delta: 92.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2832.18ms. Allocated memory was 107.0MB in the beginning and 151.0MB in the end (delta: 44.0MB). Free memory was 65.6MB in the beginning and 66.5MB in the end (delta: -949.2kB). Peak memory consumption was 63.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 1135.48ms. Allocated memory was 151.0MB in the beginning and 394.3MB in the end (delta: 243.3MB). Free memory was 66.5MB in the beginning and 226.8MB in the end (delta: -160.3MB). Peak memory consumption was 111.7MB. Max. memory is 16.1GB. * Boogie Preprocessor took 1498.46ms. Allocated memory was 394.3MB in the beginning and 952.1MB in the end (delta: 557.8MB). Free memory was 226.8MB in the beginning and 723.8MB in the end (delta: -497.0MB). Peak memory consumption was 134.2MB. Max. memory is 16.1GB. * RCFGBuilder took 30552.27ms. Allocated memory was 952.1MB in the beginning and 2.8GB in the end (delta: 1.8GB). Free memory was 723.8MB in the beginning and 2.0GB in the end (delta: -1.3GB). Peak memory consumption was 793.8MB. Max. memory is 16.1GB. * TraceAbstraction took 19729.73ms. Allocated memory is still 2.8GB. Free memory was 2.0GB in the beginning and 1.5GB in the end (delta: 552.4MB). Peak memory consumption was 553.5MB. Max. memory is 16.1GB. * Witness Printer took 4.04ms. Allocated memory is still 2.8GB. Free memory was 1.5GB in the beginning and 1.5GB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.00ms ErrorAutomatonConstructionTimeTotal, 0.00ms FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.00ms ErrorAutomatonConstructionTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeAvg, 0.00ms ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 10595. Possible FailurePath: [L5971] static unsigned int vhost_zcopy_mask ; [L9348] static int experimental_zcopytx ; [L10590-L10593] static struct file_operations const vhost_net_fops = {& __this_module, & noop_llseek, 0, 0, 0, 0, 0, 0, & vhost_net_ioctl, & vhost_net_compat_ioctl, 0, & vhost_net_open, 0, & vhost_net_release, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L10594-L10595] static struct miscdevice vhost_net_misc = {238, "vhost-net", & vhost_net_fops, {0, 0}, 0, 0, 0, (unsigned short)0}; [L10620] int LDV_IN_INTERRUPT ; [L11002] static int ldv_mutex_cred_guard_mutex ; [L11109] static int ldv_mutex_lock ; [L11216] static int ldv_mutex_mtx ; [L11323] static int ldv_mutex_mutex ; VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=0, ldv_mutex_cred_guard_mutex=0, ldv_mutex_lock=0, ldv_mutex_mtx=0, ldv_mutex_mutex=0, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10623] struct inode *var_group1 ; [L10624] struct file *var_group2 ; [L10625] unsigned int var_vhost_net_ioctl_27_p1 ; [L10626] unsigned long var_vhost_net_ioctl_27_p2 ; [L10627] unsigned int var_vhost_net_compat_ioctl_28_p1 ; [L10628] unsigned long var_vhost_net_compat_ioctl_28_p2 ; [L10629] int res_vhost_net_open_13 ; [L10630] int ldv_s_vhost_net_fops_file_operations ; [L10631] int tmp ; [L10632] int tmp___0 ; [L10633] int tmp___1 ; [L10635] ldv_s_vhost_net_fops_file_operations = 0 [L10636] LDV_IN_INTERRUPT = 1 [L11433] ldv_mutex_cred_guard_mutex = 1 [L11434] ldv_mutex_lock = 1 [L11435] ldv_mutex_mtx = 1 [L11436] ldv_mutex_mutex = 1 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10598] int tmp ; VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10600] COND FALSE !(experimental_zcopytx != 0) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L11595] return __VERIFIER_nondet_int(); [L10604] tmp = misc_register(& vhost_net_misc) [L10605] return (tmp); VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10639] tmp = vhost_net_init() [L10640] COND FALSE !(tmp != 0) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10682] tmp___1 = __VERIFIER_nondet_int() [L10683] COND TRUE tmp___1 != 0 || ldv_s_vhost_net_fops_file_operations != 0 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10646] tmp___0 = __VERIFIER_nondet_int() [L10648] case 0: [L10661] case 1: [L10669] case 2: VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10521] struct vhost_net *n ; [L10522] void *argp ; [L10523] u64 *featurep ; [L10524] struct vhost_vring_file backend ; [L10525] u64 features ; [L10526] int r ; [L10527] unsigned long tmp ; [L10528] long tmp___0 ; [L10529] int tmp___1 ; [L10530] unsigned long tmp___2 ; [L10531] int tmp___3 ; [L10532] long tmp___4 ; [L10533] long tmp___5 ; [L10535] EXPR f->private_data [L10535] n = (struct vhost_net *)f->private_data [L10536] argp = (void *)arg [L10537] featurep = (u64 *)argp [L10539] case 1074310960U: [L10547] case 2148052736U: [L10555] case 1074310912U: [L10567] case 44802U: [L10445] struct socket *tx_sock ; [L10446] struct socket *rx_sock ; [L10447] long err ; [L10449] tx_sock = 0 [L10450] rx_sock = 0 [L11361] COND TRUE ldv_mutex_mutex == 1 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L11365] ldv_mutex_mutex = 2 VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6410] struct task_struct *tmp ; [L5283] struct task_struct *pfo_ret__ ; [L5286] case 1UL: [L5289] case 2UL: [L5292] case 4UL: [L5295] case 8UL: VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L5302] return (pfo_ret__); VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6412] tmp = get_current() [L6413] EXPR dev->mm [L6413] EXPR tmp->mm VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6413] EXPR (unsigned long )dev->mm == (unsigned long )tmp->mm ? 0L : -1L VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L6413] return ((unsigned long )dev->mm == (unsigned long )tmp->mm ? 0L : -1L); [L10452] err = vhost_dev_check_owner(& n->dev) [L10453] COND FALSE !(err != 0L) [L10155] struct socket *sock ; [L10156] bool __warned ; [L10157] int tmp ; [L10158] int tmp___0 ; [L11361] COND FALSE !(ldv_mutex_mutex == 1) VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] [L10992] reach_error() VAL [__this_module={18446744073709551617:18446744073709551621}, experimental_zcopytx=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, vhost_net_fops={205:0}, vhost_net_misc={167:0}, vhost_zcopy_mask=0] - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - UnprovableResult [Line: 10992]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 15 procedures, 7743 locations, 78 error locations. Started 1 CEGAR loops. OverallTime: 19301.78ms, OverallIterations: 8, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 34.61ms, AutomataDifference: 12057.32ms, DeadEndRemovalTime: 0.00ms, HoareAnnotationTime: 0.00ms, InitialAbstractionConstructionTime: 74.06ms, PartialOrderReductionTime: 0.00ms, HoareTripleCheckerStatistics: 4 mSolverCounterUnknown, 49705 SdHoareTripleChecker+Valid, 9588.98ms IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 49695 mSDsluCounter, 103225 SdHoareTripleChecker+Invalid, 8919.93ms Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 28994 mSDsCounter, 416 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 586 IncrementalHoareTripleChecker+Invalid, 1006 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 416 mSolverCounterUnsat, 74231 mSDtfsCounter, 586 mSolverCounterSat, 161.80ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 20 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 20.51ms Time, 0.00ms BasicInterpolantAutomatonTime, BiggestAbstraction: size=9762occurred in iteration=6, InterpolantAutomatonStates: 21, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.00ms DumpTime, AutomataMinimizationStatistics: 2332.37ms AutomataMinimizationTime, 7 MinimizatonAttempts, 3160 StatesRemovedByMinimization, 3 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 116.53ms SsaConstructionTime, 2185.62ms SatisfiabilityAnalysisTime, 651.72ms InterpolantComputationTime, 150 NumberOfCodeBlocks, 150 NumberOfCodeBlocksAsserted, 8 NumberOfCheckSat, 108 ConstructedInterpolants, 0 QuantifiedInterpolants, 207 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 7 InterpolantComputations, 7 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-07 11:19:38,983 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f --- Real Ultimate output --- This is Ultimate 0.2.1-wip.dd.seqcomp-5b36d44 [2021-11-07 11:19:40,921 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-07 11:19:40,924 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-07 11:19:40,964 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-07 11:19:40,965 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-07 11:19:40,968 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-07 11:19:40,970 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-07 11:19:40,975 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-07 11:19:40,977 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-07 11:19:40,982 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-07 11:19:40,984 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-07 11:19:40,987 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-07 11:19:41,002 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-07 11:19:41,005 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-07 11:19:41,007 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-07 11:19:41,010 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-07 11:19:41,012 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-07 11:19:41,013 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-07 11:19:41,015 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-07 11:19:41,020 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-07 11:19:41,021 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-07 11:19:41,022 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-07 11:19:41,023 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-07 11:19:41,025 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-07 11:19:41,027 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-07 11:19:41,028 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-07 11:19:41,028 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-07 11:19:41,029 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-07 11:19:41,029 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-07 11:19:41,030 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-07 11:19:41,030 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-07 11:19:41,031 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-07 11:19:41,032 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-07 11:19:41,033 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-07 11:19:41,034 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-07 11:19:41,034 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-07 11:19:41,035 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-07 11:19:41,035 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-07 11:19:41,035 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-07 11:19:41,037 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-07 11:19:41,037 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-07 11:19:41,042 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-07 11:19:41,073 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-07 11:19:41,073 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-07 11:19:41,073 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-07 11:19:41,073 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-07 11:19:41,075 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-07 11:19:41,075 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-07 11:19:41,075 INFO L138 SettingsManager]: * Use SBE=true [2021-11-07 11:19:41,077 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-07 11:19:41,077 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-07 11:19:41,077 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-07 11:19:41,078 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-07 11:19:41,078 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-07 11:19:41,079 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-07 11:19:41,079 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-07 11:19:41,079 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-07 11:19:41,079 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-07 11:19:41,079 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-07 11:19:41,079 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-07 11:19:41,080 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-07 11:19:41,080 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-07 11:19:41,080 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-07 11:19:41,080 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-07 11:19:41,080 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-07 11:19:41,080 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-07 11:19:41,081 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-07 11:19:41,082 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> f4e2d1a15968d1244ea21dd78c93930ffcefcf7ed108cd6721571103f64feb4f [2021-11-07 11:19:41,375 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-07 11:19:41,409 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-07 11:19:41,411 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-07 11:19:41,413 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-07 11:19:41,413 INFO L275 PluginConnector]: CDTParser initialized [2021-11-07 11:19:41,415 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-07 11:19:41,485 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0e2c2215c/0309f44f70ab42178c32b502a25ab1f1/FLAG932a5838b [2021-11-07 11:19:42,418 INFO L306 CDTParser]: Found 1 translation units. [2021-11-07 11:19:42,418 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-07 11:19:42,466 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0e2c2215c/0309f44f70ab42178c32b502a25ab1f1/FLAG932a5838b [2021-11-07 11:19:42,860 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/0e2c2215c/0309f44f70ab42178c32b502a25ab1f1 [2021-11-07 11:19:42,862 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-07 11:19:42,864 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-07 11:19:42,865 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-07 11:19:42,865 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-07 11:19:42,869 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-07 11:19:42,869 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.11 11:19:42" (1/1) ... [2021-11-07 11:19:42,870 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@77a59975 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:42, skipping insertion in model container [2021-11-07 11:19:42,871 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.11 11:19:42" (1/1) ... [2021-11-07 11:19:42,881 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-07 11:19:43,019 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-07 11:19:45,468 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-07 11:19:45,633 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-07 11:19:45,661 INFO L203 MainTranslator]: Completed pre-run [2021-11-07 11:19:46,131 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i[372197,372210] [2021-11-07 11:19:46,155 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-07 11:19:46,281 INFO L208 MainTranslator]: Completed translation [2021-11-07 11:19:46,283 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46 WrapperNode [2021-11-07 11:19:46,283 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-07 11:19:46,284 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-07 11:19:46,285 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-07 11:19:46,285 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-07 11:19:46,291 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:46,444 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:47,430 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-07 11:19:47,431 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-07 11:19:47,431 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-07 11:19:47,431 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-07 11:19:47,439 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:47,439 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:47,612 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:47,613 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:48,386 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:48,604 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:48,723 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:48,918 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-07 11:19:48,919 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-07 11:19:48,920 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-07 11:19:48,920 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-07 11:19:48,920 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (1/1) ... [2021-11-07 11:19:48,926 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-07 11:19:48,936 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-07 11:19:48,952 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-07 11:19:49,098 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-07 11:19:49,110 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_net [2021-11-07 11:19:49,110 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_net [2021-11-07 11:19:49,110 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-07 11:19:49,111 INFO L130 BoogieDeclarations]: Found specification of procedure kref_sub [2021-11-07 11:19:49,111 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_sub [2021-11-07 11:19:49,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-07 11:19:49,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-07 11:19:49,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-07 11:19:49,111 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-07 11:19:49,111 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-07 11:19:49,112 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx [2021-11-07 11:19:49,112 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx [2021-11-07 11:19:49,112 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-07 11:19:49,112 INFO L130 BoogieDeclarations]: Found specification of procedure handle_tx_kick [2021-11-07 11:19:49,112 INFO L138 BoogieDeclarations]: Found implementation of procedure handle_tx_kick [2021-11-07 11:19:49,112 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-07 11:19:49,112 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-07 11:19:49,113 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_zerocopy_callback [2021-11-07 11:19:49,113 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_zerocopy_callback [2021-11-07 11:19:49,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-07 11:19:49,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-07 11:19:49,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-07 11:19:49,114 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-07 11:19:49,114 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_ubuf_put [2021-11-07 11:19:49,114 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_ubuf_put [2021-11-07 11:19:49,114 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-07 11:19:49,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-07 11:19:49,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-07 11:19:49,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-07 11:19:49,115 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2021-11-07 11:19:49,115 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2021-11-07 11:19:49,115 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-07 11:19:49,115 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-07 11:19:49,116 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-07 11:19:49,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-07 11:19:49,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-07 11:19:49,116 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-07 11:19:49,116 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-07 11:19:49,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-07 11:19:49,116 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-07 11:19:49,117 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-07 11:19:49,117 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-07 11:20:18,918 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,919 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,919 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,919 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786-1: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,919 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,919 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-07 11:20:18,919 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,920 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-07 11:20:18,920 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,920 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,920 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,920 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799-1: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,921 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:18,921 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-07 11:20:18,921 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:18,921 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807-1: assume !__copy_from_user_#t~switch141; [2021-11-07 11:20:18,921 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1218: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,921 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1219: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-2: havoc __copy_to_user_#t~switch146; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-3: havoc __copy_to_user_#t~switch146; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825: havoc __copy_to_user_#t~switch146; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5825-1: havoc __copy_to_user_#t~switch146; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,922 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,923 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,923 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,923 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,923 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5830-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 4bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,923 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,923 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5834-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 8bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,924 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,925 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,925 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,925 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,925 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,925 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,925 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,926 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5838-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 10bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,926 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,926 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,926 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,926 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,927 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,927 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,927 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,927 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5842-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 16bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,927 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,928 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,928 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,928 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-3: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,928 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,928 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-1: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,928 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume 0bv64 != __copy_to_user_~tmp___0~6;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,929 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5846-2: assume !(0bv64 != __copy_to_user_~tmp___0~6);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,929 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,929 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:20:18,929 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,929 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-3: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:20:18,929 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,930 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-1: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:20:18,930 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume __copy_to_user_#t~switch146;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_to_user_~ret~2 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,930 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5854-2: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := true; [2021-11-07 11:20:18,930 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,930 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,930 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,931 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-3: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,931 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,931 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-1: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,931 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume 0bv64 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,931 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5858-2: assume !(0bv64 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,931 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:18,932 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866: assume !__copy_to_user_#t~switch146; [2021-11-07 11:20:18,932 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:18,932 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-3: assume !__copy_to_user_#t~switch146; [2021-11-07 11:20:18,932 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:18,932 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-1: assume !__copy_to_user_#t~switch146; [2021-11-07 11:20:18,933 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume __copy_to_user_#t~switch146;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:18,933 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5866-2: assume !__copy_to_user_#t~switch146; [2021-11-07 11:20:18,933 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##164: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,933 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##163: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,934 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1876: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,934 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1877: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,934 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1811: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,934 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1812: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,934 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##757: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,935 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##756: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,935 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-3: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-07 11:20:18,935 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-07 11:20:18,935 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-7: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-07 11:20:18,935 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-5: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-07 11:20:18,935 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-11: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-07 11:20:18,936 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-9: __copy_to_user_#t~ret149 := copy_user_generic_#res;__copy_to_user_~tmp___2~4 := __copy_to_user_#t~ret149;havoc __copy_to_user_#t~ret149;__copy_to_user_#res := __copy_to_user_~tmp___2~4[32:0]; [2021-11-07 11:20:18,936 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-19: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-07 11:20:18,936 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-20: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-07 11:20:18,936 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-85: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:20:18,936 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-84: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:20:18,936 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-79: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:20:18,937 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-78: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:20:18,937 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-121: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-07 11:20:18,937 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-120: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-07 11:20:18,937 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-179: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:20:18,937 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-180: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:20:18,937 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-186: __copy_to_user_#t~ret148 := ldv__builtin_expect_#res;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret148;havoc __copy_to_user_#t~ret148; [2021-11-07 11:20:18,938 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-185: __copy_to_user_#t~ret147 := ldv__builtin_expect_#res;__copy_to_user_~tmp___0~6 := __copy_to_user_#t~ret147;havoc __copy_to_user_#t~ret147; [2021-11-07 11:20:18,938 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##822: assume !__copy_to_user_#t~switch146;__copy_to_user_#t~switch146 := __copy_to_user_#t~switch146 || 2bv32 == __copy_to_user_~size; [2021-11-07 11:20:18,938 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##821: assume __copy_to_user_#t~switch146;__copy_to_user_#res := __copy_to_user_~ret~2; [2021-11-07 11:20:18,938 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760-1: havoc __copy_from_user_#t~switch141; [2021-11-07 11:20:18,938 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-07 11:20:18,938 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,939 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,939 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,939 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,939 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,939 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,939 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,940 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,940 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,940 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,940 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:18,940 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,940 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,941 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-07 11:20:18,941 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:18,941 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781-1: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-07 11:20:38,332 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume 0bv64 != __copy_from_user_~tmp___0~5;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,332 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5786: assume !(0bv64 != __copy_from_user_~tmp___0~5);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,333 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:38,335 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5794: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := true; [2021-11-07 11:20:38,335 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume 0bv64 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,335 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5799: assume !(0bv64 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,335 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume __copy_from_user_#t~switch141;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~0;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~0;copy_user_generic_#res := ~zero_extendFrom32To64(copy_user_generic_~ret~0); [2021-11-07 11:20:38,336 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5807: assume !__copy_from_user_#t~switch141; [2021-11-07 11:20:38,336 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##362: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 2bv32 == __copy_from_user_~size; [2021-11-07 11:20:38,336 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##361: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,336 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5701-1: __copy_from_user_#t~ret144 := copy_user_generic_#res;__copy_from_user_~tmp___2~3 := __copy_from_user_#t~ret144;havoc __copy_from_user_#t~ret144;__copy_from_user_#res := __copy_from_user_~tmp___2~3[32:0]; [2021-11-07 11:20:38,336 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-29: __copy_from_user_#t~ret142 := ldv__builtin_expect_#res;__copy_from_user_~tmp___0~5 := __copy_from_user_#t~ret142;havoc __copy_from_user_#t~ret142; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L10999-30: __copy_from_user_#t~ret143 := ldv__builtin_expect_#res;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret143;havoc __copy_from_user_#t~ret143; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5760: havoc __copy_from_user_#t~switch141; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5766: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 4bv32 == __copy_from_user_~size; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5771: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 8bv32 == __copy_from_user_~size; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume __copy_from_user_#t~switch141;__copy_from_user_#res := __copy_from_user_~ret~1; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5776: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 10bv32 == __copy_from_user_~size; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume __copy_from_user_#t~switch141;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := ~sign_extendFrom32To64((if 0bv32 != __copy_from_user_~ret~1 then 1bv32 else 0bv32)), 0bv64;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-07 11:20:38,337 INFO L757 $ProcedureCfgBuilder]: dead code at ProgramPoint L5781: assume !__copy_from_user_#t~switch141;__copy_from_user_#t~switch141 := __copy_from_user_#t~switch141 || 16bv32 == __copy_from_user_~size; [2021-11-07 11:21:50,382 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-07 11:21:50,382 INFO L299 CfgBuilder]: Removed 8232 assume(true) statements. [2021-11-07 11:21:50,390 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.11 11:21:50 BoogieIcfgContainer [2021-11-07 11:21:50,390 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-07 11:21:50,391 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-07 11:21:50,391 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-07 11:21:50,394 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-07 11:21:50,394 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 07.11 11:19:42" (1/3) ... [2021-11-07 11:21:50,395 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e339ed0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.11 11:21:50, skipping insertion in model container [2021-11-07 11:21:50,395 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.11 11:19:46" (2/3) ... [2021-11-07 11:21:50,395 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3e339ed0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 07.11 11:21:50, skipping insertion in model container [2021-11-07 11:21:50,395 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.11 11:21:50" (3/3) ... [2021-11-07 11:21:50,397 INFO L111 eAbstractionObserver]: Analyzing ICFG main1_drivers-vhost-vhost_net-ko--32_7a--linux-3.7.3.i [2021-11-07 11:21:50,401 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-07 11:21:50,401 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2021-11-07 11:21:50,463 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-07 11:21:50,469 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-07 11:21:50,469 INFO L340 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2021-11-07 11:21:50,746 INFO L276 IsEmpty]: Start isEmpty. Operand has 8404 states, 8302 states have (on average 1.4053240183088413) internal successors, (11667), 8384 states have internal predecessors, (11667), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-07 11:21:50,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-07 11:21:50,749 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:21:50,750 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:21:50,751 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr66ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:21:50,762 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:21:50,762 INFO L85 PathProgramCache]: Analyzing trace with hash 1935377389, now seen corresponding path program 1 times [2021-11-07 11:21:50,777 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:21:50,778 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1210544897] [2021-11-07 11:21:50,778 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:21:50,779 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:21:50,779 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:21:50,783 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:21:50,815 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-07 11:21:53,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:21:53,297 INFO L263 TraceCheckSpWp]: Trace formula consists of 969 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:21:53,302 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:21:53,445 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:21:53,446 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:21:53,545 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:21:53,546 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:21:53,546 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1210544897] [2021-11-07 11:21:53,547 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1210544897] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:21:53,547 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:21:53,547 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 2] imperfect sequences [] total 2 [2021-11-07 11:21:53,548 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439113589] [2021-11-07 11:21:53,549 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:21:53,552 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:21:53,552 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:21:53,572 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:21:53,573 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:21:53,590 INFO L87 Difference]: Start difference. First operand has 8404 states, 8302 states have (on average 1.4053240183088413) internal successors, (11667), 8384 states have internal predecessors, (11667), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:21:53,977 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:21:53,977 INFO L93 Difference]: Finished difference Result 16804 states and 23404 transitions. [2021-11-07 11:21:53,979 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:21:53,981 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-07 11:21:53,981 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:21:54,025 INFO L225 Difference]: With dead ends: 16804 [2021-11-07 11:21:54,025 INFO L226 Difference]: Without dead ends: 8314 [2021-11-07 11:21:54,055 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 27.28ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:21:54,058 INFO L933 BasicCegarLoop]: 11576 mSDtfsCounter, 11576 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 3 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 26.74ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11576 SdHoareTripleChecker+Valid, 11576 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 34.16ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 3 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 28.49ms IncrementalHoareTripleChecker+Time [2021-11-07 11:21:54,059 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11576 Valid, 11576 Invalid, 3 Unknown, 0 Unchecked, 34.16ms Time], IncrementalHoareTripleChecker [0 Valid, 3 Invalid, 0 Unknown, 0 Unchecked, 28.49ms Time] [2021-11-07 11:21:54,087 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8314 states. [2021-11-07 11:21:54,319 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8314 to 8314. [2021-11-07 11:21:54,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8314 states, 8213 states have (on average 1.3847558748325826) internal successors, (11373), 8294 states have internal predecessors, (11373), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-07 11:21:54,380 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8314 states to 8314 states and 11403 transitions. [2021-11-07 11:21:54,382 INFO L78 Accepts]: Start accepts. Automaton has 8314 states and 11403 transitions. Word has length 10 [2021-11-07 11:21:54,382 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:21:54,382 INFO L470 AbstractCegarLoop]: Abstraction has 8314 states and 11403 transitions. [2021-11-07 11:21:54,382 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:21:54,382 INFO L276 IsEmpty]: Start isEmpty. Operand 8314 states and 11403 transitions. [2021-11-07 11:21:54,383 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 11 [2021-11-07 11:21:54,383 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:21:54,383 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:21:54,426 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-07 11:21:54,597 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:21:54,597 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr66ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:21:54,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:21:54,598 INFO L85 PathProgramCache]: Analyzing trace with hash 302921136, now seen corresponding path program 1 times [2021-11-07 11:21:54,601 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:21:54,601 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1034671055] [2021-11-07 11:21:54,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:21:54,601 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:21:54,602 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:21:54,603 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:21:54,605 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-07 11:21:56,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:21:56,911 INFO L263 TraceCheckSpWp]: Trace formula consists of 966 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:21:56,913 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:21:57,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:21:57,055 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:21:57,169 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:21:57,170 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:21:57,170 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1034671055] [2021-11-07 11:21:57,170 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1034671055] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:21:57,170 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:21:57,170 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-07 11:21:57,170 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [409090923] [2021-11-07 11:21:57,170 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:21:57,172 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:21:57,172 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:21:57,172 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:21:57,172 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:21:57,173 INFO L87 Difference]: Start difference. First operand 8314 states and 11403 transitions. Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:21:59,348 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:21:59,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:21:59,621 INFO L93 Difference]: Finished difference Result 8314 states and 11403 transitions. [2021-11-07 11:21:59,621 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:21:59,622 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 10 [2021-11-07 11:21:59,622 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:21:59,655 INFO L225 Difference]: With dead ends: 8314 [2021-11-07 11:21:59,655 INFO L226 Difference]: Without dead ends: 8312 [2021-11-07 11:21:59,660 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 24.98ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:21:59,661 INFO L933 BasicCegarLoop]: 11400 mSDtfsCounter, 11393 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2176.80ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11393 SdHoareTripleChecker+Valid, 11400 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 22.03ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2238.08ms IncrementalHoareTripleChecker+Time [2021-11-07 11:21:59,662 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11393 Valid, 11400 Invalid, 2 Unknown, 0 Unchecked, 22.03ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2238.08ms Time] [2021-11-07 11:21:59,677 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8312 states. [2021-11-07 11:21:59,890 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8312 to 8312. [2021-11-07 11:21:59,903 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8312 states, 8212 states have (on average 1.3846809547004384) internal successors, (11371), 8292 states have internal predecessors, (11371), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-07 11:21:59,924 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8312 states to 8312 states and 11401 transitions. [2021-11-07 11:21:59,924 INFO L78 Accepts]: Start accepts. Automaton has 8312 states and 11401 transitions. Word has length 10 [2021-11-07 11:21:59,925 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:21:59,925 INFO L470 AbstractCegarLoop]: Abstraction has 8312 states and 11401 transitions. [2021-11-07 11:21:59,925 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 3 states have internal predecessors, (10), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:21:59,925 INFO L276 IsEmpty]: Start isEmpty. Operand 8312 states and 11401 transitions. [2021-11-07 11:21:59,925 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2021-11-07 11:21:59,926 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:21:59,926 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:21:59,960 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-07 11:22:00,151 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:22:00,152 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr67ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:22:00,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:22:00,152 INFO L85 PathProgramCache]: Analyzing trace with hash 800646904, now seen corresponding path program 1 times [2021-11-07 11:22:00,155 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:22:00,155 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2119056171] [2021-11-07 11:22:00,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:22:00,155 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:22:00,156 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:22:00,158 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:22:00,160 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-07 11:22:02,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:22:02,516 INFO L263 TraceCheckSpWp]: Trace formula consists of 967 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:22:02,518 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:22:02,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:02,665 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:22:02,788 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:02,788 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:22:02,788 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2119056171] [2021-11-07 11:22:02,788 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2119056171] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:22:02,788 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:22:02,788 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-07 11:22:02,789 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1928658419] [2021-11-07 11:22:02,789 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:22:02,789 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:22:02,789 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:22:02,789 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:22:02,789 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:02,790 INFO L87 Difference]: Start difference. First operand 8312 states and 11401 transitions. Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:04,958 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.17s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:22:05,256 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:22:05,257 INFO L93 Difference]: Finished difference Result 8312 states and 11401 transitions. [2021-11-07 11:22:05,257 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:22:05,257 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2021-11-07 11:22:05,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:22:05,290 INFO L225 Difference]: With dead ends: 8312 [2021-11-07 11:22:05,290 INFO L226 Difference]: Without dead ends: 8310 [2021-11-07 11:22:05,295 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 20 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 25.58ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:05,298 INFO L933 BasicCegarLoop]: 11398 mSDtfsCounter, 11390 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2170.81ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11390 SdHoareTripleChecker+Valid, 11398 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 23.50ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2237.01ms IncrementalHoareTripleChecker+Time [2021-11-07 11:22:05,302 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11390 Valid, 11398 Invalid, 2 Unknown, 0 Unchecked, 23.50ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2237.01ms Time] [2021-11-07 11:22:05,316 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8310 states. [2021-11-07 11:22:05,788 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8310 to 8310. [2021-11-07 11:22:05,812 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8310 states, 8211 states have (on average 1.3846060163195713) internal successors, (11369), 8290 states have internal predecessors, (11369), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-07 11:22:05,832 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8310 states to 8310 states and 11399 transitions. [2021-11-07 11:22:05,832 INFO L78 Accepts]: Start accepts. Automaton has 8310 states and 11399 transitions. Word has length 11 [2021-11-07 11:22:05,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:22:05,832 INFO L470 AbstractCegarLoop]: Abstraction has 8310 states and 11399 transitions. [2021-11-07 11:22:05,833 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:05,834 INFO L276 IsEmpty]: Start isEmpty. Operand 8310 states and 11399 transitions. [2021-11-07 11:22:05,834 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 13 [2021-11-07 11:22:05,834 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:22:05,834 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:22:05,865 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-07 11:22:06,055 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:22:06,056 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr68ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:22:06,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:22:06,056 INFO L85 PathProgramCache]: Analyzing trace with hash -949723462, now seen corresponding path program 1 times [2021-11-07 11:22:06,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:22:06,059 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [233755865] [2021-11-07 11:22:06,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:22:06,059 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:22:06,059 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:22:06,060 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:22:06,061 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-07 11:22:08,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:22:08,340 INFO L263 TraceCheckSpWp]: Trace formula consists of 968 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:22:08,342 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:22:08,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:08,526 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:22:08,679 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:08,680 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:22:08,680 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [233755865] [2021-11-07 11:22:08,680 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [233755865] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:22:08,680 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:22:08,680 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-07 11:22:08,680 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [310410792] [2021-11-07 11:22:08,680 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:22:08,680 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:22:08,680 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:22:08,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:22:08,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:08,681 INFO L87 Difference]: Start difference. First operand 8310 states and 11399 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:10,924 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.24s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:22:11,223 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:22:11,224 INFO L93 Difference]: Finished difference Result 8310 states and 11399 transitions. [2021-11-07 11:22:11,225 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:22:11,225 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 12 [2021-11-07 11:22:11,225 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:22:11,263 INFO L225 Difference]: With dead ends: 8310 [2021-11-07 11:22:11,263 INFO L226 Difference]: Without dead ends: 8308 [2021-11-07 11:22:11,268 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 22 GetRequests, 21 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 28.44ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:11,270 INFO L933 BasicCegarLoop]: 11396 mSDtfsCounter, 11387 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2248.68ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11387 SdHoareTripleChecker+Valid, 11396 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 17.64ms SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2309.09ms IncrementalHoareTripleChecker+Time [2021-11-07 11:22:11,272 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11387 Valid, 11396 Invalid, 2 Unknown, 0 Unchecked, 17.64ms Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 1 Unknown, 0 Unchecked, 2309.09ms Time] [2021-11-07 11:22:11,290 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8308 states. [2021-11-07 11:22:11,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8308 to 8308. [2021-11-07 11:22:11,531 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8308 states, 8210 states have (on average 1.3845310596833131) internal successors, (11367), 8288 states have internal predecessors, (11367), 15 states have call successors, (15), 8 states have call predecessors, (15), 8 states have return successors, (15), 13 states have call predecessors, (15), 15 states have call successors, (15) [2021-11-07 11:22:11,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8308 states to 8308 states and 11397 transitions. [2021-11-07 11:22:11,551 INFO L78 Accepts]: Start accepts. Automaton has 8308 states and 11397 transitions. Word has length 12 [2021-11-07 11:22:11,552 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:22:11,552 INFO L470 AbstractCegarLoop]: Abstraction has 8308 states and 11397 transitions. [2021-11-07 11:22:11,552 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:11,552 INFO L276 IsEmpty]: Start isEmpty. Operand 8308 states and 11397 transitions. [2021-11-07 11:22:11,553 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 14 [2021-11-07 11:22:11,553 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:22:11,553 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:22:11,582 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-07 11:22:11,771 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:22:11,771 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ULTIMATE.startErr69ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:22:11,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:22:11,772 INFO L85 PathProgramCache]: Analyzing trace with hash 623370050, now seen corresponding path program 1 times [2021-11-07 11:22:11,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:22:11,774 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2065820064] [2021-11-07 11:22:11,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:22:11,774 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:22:11,774 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:22:11,775 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:22:11,777 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-07 11:22:13,976 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:22:14,042 INFO L263 TraceCheckSpWp]: Trace formula consists of 969 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:22:14,044 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:22:14,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:14,243 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:22:14,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:14,408 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:22:14,408 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2065820064] [2021-11-07 11:22:14,408 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2065820064] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:22:14,408 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:22:14,408 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-07 11:22:14,408 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1537813071] [2021-11-07 11:22:14,409 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:22:14,409 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:22:14,409 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:22:14,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:22:14,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:14,409 INFO L87 Difference]: Start difference. First operand 8308 states and 11397 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:16,646 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.23s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-07 11:22:18,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:22:18,484 INFO L93 Difference]: Finished difference Result 17275 states and 23686 transitions. [2021-11-07 11:22:18,485 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:22:18,485 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 13 [2021-11-07 11:22:18,485 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:22:18,512 INFO L225 Difference]: With dead ends: 17275 [2021-11-07 11:22:18,512 INFO L226 Difference]: Without dead ends: 8969 [2021-11-07 11:22:18,532 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 24 GetRequests, 23 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 25.31ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:18,533 INFO L933 BasicCegarLoop]: 12058 mSDtfsCounter, 3241 mSDsluCounter, 8783 mSDsCounter, 0 mSdLazyCounter, 171 mSolverCounterSat, 99 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3535.07ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 3241 SdHoareTripleChecker+Valid, 20841 SdHoareTripleChecker+Invalid, 271 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 29.01ms SdHoareTripleChecker+Time, 99 IncrementalHoareTripleChecker+Valid, 171 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3679.09ms IncrementalHoareTripleChecker+Time [2021-11-07 11:22:18,533 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3241 Valid, 20841 Invalid, 271 Unknown, 0 Unchecked, 29.01ms Time], IncrementalHoareTripleChecker [99 Valid, 171 Invalid, 1 Unknown, 0 Unchecked, 3679.09ms Time] [2021-11-07 11:22:18,547 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8969 states. [2021-11-07 11:22:18,964 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8969 to 8947. [2021-11-07 11:22:18,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8947 states, 8848 states have (on average 1.3740958408679929) internal successors, (12158), 8913 states have internal predecessors, (12158), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-07 11:22:19,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8947 states to 8947 states and 12214 transitions. [2021-11-07 11:22:19,005 INFO L78 Accepts]: Start accepts. Automaton has 8947 states and 12214 transitions. Word has length 13 [2021-11-07 11:22:19,006 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:22:19,006 INFO L470 AbstractCegarLoop]: Abstraction has 8947 states and 12214 transitions. [2021-11-07 11:22:19,006 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:19,006 INFO L276 IsEmpty]: Start isEmpty. Operand 8947 states and 12214 transitions. [2021-11-07 11:22:19,010 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 27 [2021-11-07 11:22:19,010 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:22:19,010 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:22:19,039 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-07 11:22:19,236 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:22:19,236 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:22:19,236 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:22:19,236 INFO L85 PathProgramCache]: Analyzing trace with hash 2009130959, now seen corresponding path program 1 times [2021-11-07 11:22:19,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:22:19,239 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1722753662] [2021-11-07 11:22:19,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:22:19,239 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:22:19,240 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:22:19,242 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:22:19,244 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-07 11:22:21,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:22:21,568 INFO L263 TraceCheckSpWp]: Trace formula consists of 1055 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:22:21,570 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:22:21,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:21,850 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:22:22,158 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:22,158 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:22:22,158 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1722753662] [2021-11-07 11:22:22,158 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1722753662] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:22:22,158 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:22:22,158 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-07 11:22:22,159 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1633576215] [2021-11-07 11:22:22,159 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:22:22,159 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-07 11:22:22,159 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:22:22,159 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-07 11:22:22,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-07 11:22:22,160 INFO L87 Difference]: Start difference. First operand 8947 states and 12214 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:23,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:22:23,093 INFO L93 Difference]: Finished difference Result 27568 states and 37348 transitions. [2021-11-07 11:22:23,094 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-07 11:22:23,094 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 26 [2021-11-07 11:22:23,094 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:22:23,143 INFO L225 Difference]: With dead ends: 27568 [2021-11-07 11:22:23,144 INFO L226 Difference]: Without dead ends: 18629 [2021-11-07 11:22:23,175 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 50 GetRequests, 48 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 59.02ms TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-07 11:22:23,177 INFO L933 BasicCegarLoop]: 11381 mSDtfsCounter, 11577 mSDsluCounter, 28303 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 4 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 149.73ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 11585 SdHoareTripleChecker+Valid, 39684 SdHoareTripleChecker+Invalid, 25 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 46.12ms SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 157.32ms IncrementalHoareTripleChecker+Time [2021-11-07 11:22:23,178 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [11585 Valid, 39684 Invalid, 25 Unknown, 0 Unchecked, 46.12ms Time], IncrementalHoareTripleChecker [4 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 157.32ms Time] [2021-11-07 11:22:23,199 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18629 states. [2021-11-07 11:22:23,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18629 to 11493. [2021-11-07 11:22:23,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11493 states, 11394 states have (on average 1.361330524837634) internal successors, (15511), 11459 states have internal predecessors, (15511), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-07 11:22:23,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11493 states to 11493 states and 15567 transitions. [2021-11-07 11:22:23,770 INFO L78 Accepts]: Start accepts. Automaton has 11493 states and 15567 transitions. Word has length 26 [2021-11-07 11:22:23,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:22:23,770 INFO L470 AbstractCegarLoop]: Abstraction has 11493 states and 15567 transitions. [2021-11-07 11:22:23,770 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:23,770 INFO L276 IsEmpty]: Start isEmpty. Operand 11493 states and 15567 transitions. [2021-11-07 11:22:23,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2021-11-07 11:22:23,772 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:22:23,772 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:22:23,802 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-07 11:22:23,987 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:22:23,987 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:22:23,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:22:23,988 INFO L85 PathProgramCache]: Analyzing trace with hash 434163568, now seen corresponding path program 1 times [2021-11-07 11:22:23,990 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:22:23,990 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2110222225] [2021-11-07 11:22:23,990 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:22:23,990 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:22:23,991 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:22:23,992 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:22:23,993 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-07 11:22:26,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-07 11:22:26,311 INFO L263 TraceCheckSpWp]: Trace formula consists of 1086 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-07 11:22:26,313 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-07 11:22:26,438 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:26,438 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-07 11:22:26,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-07 11:22:26,539 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-07 11:22:26,539 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2110222225] [2021-11-07 11:22:26,539 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2110222225] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-07 11:22:26,539 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-07 11:22:26,539 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-07 11:22:26,540 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [169031449] [2021-11-07 11:22:26,540 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-07 11:22:26,540 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-07 11:22:26,541 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-07 11:22:26,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-07 11:22:26,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:26,541 INFO L87 Difference]: Start difference. First operand 11493 states and 15567 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:30,596 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-07 11:22:30,596 INFO L93 Difference]: Finished difference Result 23114 states and 31262 transitions. [2021-11-07 11:22:30,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-07 11:22:30,596 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 32 [2021-11-07 11:22:30,597 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-07 11:22:30,624 INFO L225 Difference]: With dead ends: 23114 [2021-11-07 11:22:30,624 INFO L226 Difference]: Without dead ends: 11629 [2021-11-07 11:22:30,648 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 62 GetRequests, 61 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 23.09ms TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-07 11:22:30,649 INFO L933 BasicCegarLoop]: 11042 mSDtfsCounter, 0 mSDsluCounter, 10631 mSDsCounter, 0 mSdLazyCounter, 531 mSolverCounterSat, 418 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3401.78ms Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 21673 SdHoareTripleChecker+Invalid, 949 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 21.93ms SdHoareTripleChecker+Time, 418 IncrementalHoareTripleChecker+Valid, 531 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 3577.49ms IncrementalHoareTripleChecker+Time [2021-11-07 11:22:30,649 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 21673 Invalid, 949 Unknown, 0 Unchecked, 21.93ms Time], IncrementalHoareTripleChecker [418 Valid, 531 Invalid, 0 Unknown, 0 Unchecked, 3577.49ms Time] [2021-11-07 11:22:30,662 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11629 states. [2021-11-07 11:22:30,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11629 to 11493. [2021-11-07 11:22:31,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11493 states, 11394 states have (on average 1.3255222046691242) internal successors, (15103), 11459 states have internal predecessors, (15103), 23 states have call successors, (23), 15 states have call predecessors, (23), 16 states have return successors, (33), 21 states have call predecessors, (33), 23 states have call successors, (33) [2021-11-07 11:22:31,034 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11493 states to 11493 states and 15159 transitions. [2021-11-07 11:22:31,034 INFO L78 Accepts]: Start accepts. Automaton has 11493 states and 15159 transitions. Word has length 32 [2021-11-07 11:22:31,034 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-07 11:22:31,034 INFO L470 AbstractCegarLoop]: Abstraction has 11493 states and 15159 transitions. [2021-11-07 11:22:31,034 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-07 11:22:31,034 INFO L276 IsEmpty]: Start isEmpty. Operand 11493 states and 15159 transitions. [2021-11-07 11:22:31,036 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-07 11:22:31,036 INFO L506 BasicCegarLoop]: Found error trace [2021-11-07 11:22:31,036 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-07 11:22:31,065 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-07 11:22:31,251 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-07 11:22:31,251 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ULTIMATE.startErr20ASSERT_VIOLATIONERROR_FUNCTION === [##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONERROR_FUNCTION, ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONERROR_FUNCTION (and 75 more)] === [2021-11-07 11:22:31,252 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-07 11:22:31,252 INFO L85 PathProgramCache]: Analyzing trace with hash 1551705050, now seen corresponding path program 1 times [2021-11-07 11:22:31,255 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-07 11:22:31,255 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1924111516] [2021-11-07 11:22:31,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-07 11:22:31,255 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-07 11:22:31,255 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-07 11:22:31,260 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-07 11:22:31,262 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process Killed by 15