/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-15 21:11:02,552 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-15 21:11:02,557 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-15 21:11:02,628 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-15 21:11:02,629 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-15 21:11:02,634 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-15 21:11:02,638 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-15 21:11:02,647 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-15 21:11:02,649 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-15 21:11:02,651 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-15 21:11:02,655 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-15 21:11:02,657 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-15 21:11:02,657 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-15 21:11:02,659 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-15 21:11:02,660 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-15 21:11:02,662 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-15 21:11:02,663 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-15 21:11:02,664 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-15 21:11:02,666 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-15 21:11:02,668 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-15 21:11:02,670 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-15 21:11:02,672 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-15 21:11:02,673 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-15 21:11:02,675 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-15 21:11:02,679 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-15 21:11:02,680 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-15 21:11:02,680 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-15 21:11:02,682 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-15 21:11:02,682 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-15 21:11:02,684 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-15 21:11:02,684 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-15 21:11:02,685 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-15 21:11:02,687 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-15 21:11:02,688 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-15 21:11:02,689 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-15 21:11:02,689 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-15 21:11:02,691 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-15 21:11:02,691 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-15 21:11:02,691 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-15 21:11:02,693 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-15 21:11:02,694 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-15 21:11:02,695 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-15 21:11:02,722 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-15 21:11:02,723 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-15 21:11:02,723 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-15 21:11:02,724 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-15 21:11:02,728 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-15 21:11:02,728 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-15 21:11:02,730 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-15 21:11:02,730 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-15 21:11:02,730 INFO L138 SettingsManager]: * Use SBE=true [2022-10-15 21:11:02,732 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-15 21:11:02,733 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-15 21:11:02,733 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-15 21:11:02,733 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-15 21:11:02,733 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-15 21:11:02,734 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-15 21:11:02,735 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-15 21:11:02,735 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-15 21:11:02,735 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-15 21:11:02,735 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-15 21:11:02,736 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-15 21:11:02,736 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-15 21:11:02,736 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-15 21:11:02,736 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-15 21:11:02,737 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-15 21:11:02,737 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-15 21:11:02,737 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-15 21:11:02,737 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-15 21:11:02,737 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-15 21:11:02,738 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-15 21:11:02,738 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-15 21:11:02,738 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-15 21:11:02,738 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-15 21:11:02,738 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-15 21:11:02,739 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-15 21:11:03,198 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-15 21:11:03,227 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-15 21:11:03,231 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-15 21:11:03,233 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-15 21:11:03,234 INFO L275 PluginConnector]: CDTParser initialized [2022-10-15 21:11:03,235 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i [2022-10-15 21:11:03,323 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1ab573267/cf5ecfd9a0364240817a034da0c477c9/FLAG81197f642 [2022-10-15 21:11:04,693 INFO L306 CDTParser]: Found 1 translation units. [2022-10-15 21:11:04,694 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i [2022-10-15 21:11:04,761 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1ab573267/cf5ecfd9a0364240817a034da0c477c9/FLAG81197f642 [2022-10-15 21:11:04,969 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/1ab573267/cf5ecfd9a0364240817a034da0c477c9 [2022-10-15 21:11:04,976 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-15 21:11:04,984 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-15 21:11:04,986 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-15 21:11:04,986 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-15 21:11:04,992 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-15 21:11:04,993 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 09:11:04" (1/1) ... [2022-10-15 21:11:04,994 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@d9a6c0b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:04, skipping insertion in model container [2022-10-15 21:11:04,995 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 09:11:04" (1/1) ... [2022-10-15 21:11:05,004 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-15 21:11:05,223 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-15 21:11:07,484 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i[345844,345857] [2022-10-15 21:11:08,027 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-15 21:11:08,062 INFO L203 MainTranslator]: Completed pre-run [2022-10-15 21:11:08,468 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.0/usb_urb-drivers-vhost-vhost_net.ko.cil.out.i[345844,345857] [2022-10-15 21:11:08,558 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-15 21:11:08,640 INFO L208 MainTranslator]: Completed translation [2022-10-15 21:11:08,641 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08 WrapperNode [2022-10-15 21:11:08,641 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-15 21:11:08,642 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-15 21:11:08,643 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-15 21:11:08,643 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-15 21:11:08,653 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:08,833 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:08,971 INFO L138 Inliner]: procedures = 229, calls = 1979, calls flagged for inlining = 98, calls inlined = 54, statements flattened = 3338 [2022-10-15 21:11:08,972 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-15 21:11:08,972 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-15 21:11:08,972 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-15 21:11:08,973 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-15 21:11:08,986 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:08,986 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,010 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,010 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,143 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,166 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,187 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,202 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,228 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-15 21:11:09,229 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-15 21:11:09,229 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-15 21:11:09,229 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-15 21:11:09,230 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (1/1) ... [2022-10-15 21:11:09,239 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-15 21:11:09,252 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-15 21:11:09,270 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-15 21:11:09,282 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-15 21:11:09,338 INFO L130 BoogieDeclarations]: Found specification of procedure vq_access_ok [2022-10-15 21:11:09,339 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_access_ok [2022-10-15 21:11:09,339 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-15 21:11:09,339 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_flush [2022-10-15 21:11:09,339 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_flush [2022-10-15 21:11:09,339 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-15 21:11:09,339 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2022-10-15 21:11:09,340 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2022-10-15 21:11:09,340 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_check_owner [2022-10-15 21:11:09,342 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_check_owner [2022-10-15 21:11:09,342 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2022-10-15 21:11:09,342 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2022-10-15 21:11:09,342 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-10-15 21:11:09,342 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-10-15 21:11:09,349 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_reset [2022-10-15 21:11:09,349 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_reset [2022-10-15 21:11:09,349 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-15 21:11:09,349 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-15 21:11:09,349 INFO L130 BoogieDeclarations]: Found specification of procedure vq_log_access_ok [2022-10-15 21:11:09,350 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_log_access_ok [2022-10-15 21:11:09,350 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-10-15 21:11:09,350 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-10-15 21:11:09,350 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_start [2022-10-15 21:11:09,350 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_start [2022-10-15 21:11:09,350 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_queue [2022-10-15 21:11:09,350 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_queue [2022-10-15 21:11:09,350 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_open [2022-10-15 21:11:09,350 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_open [2022-10-15 21:11:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-10-15 21:11:09,353 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-10-15 21:11:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure ERR_PTR [2022-10-15 21:11:09,353 INFO L138 BoogieDeclarations]: Found implementation of procedure ERR_PTR [2022-10-15 21:11:09,353 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_fget [2022-10-15 21:11:09,354 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_fget [2022-10-15 21:11:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_init [2022-10-15 21:11:09,354 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_init [2022-10-15 21:11:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-15 21:11:09,354 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-10-15 21:11:09,354 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-10-15 21:11:09,355 INFO L130 BoogieDeclarations]: Found specification of procedure vq_memory_access_ok [2022-10-15 21:11:09,355 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_memory_access_ok [2022-10-15 21:11:09,355 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-15 21:11:09,355 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-10-15 21:11:09,355 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-10-15 21:11:09,356 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_queue [2022-10-15 21:11:09,356 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_queue [2022-10-15 21:11:09,356 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_stop [2022-10-15 21:11:09,356 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_stop [2022-10-15 21:11:09,357 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_blast_assert [2022-10-15 21:11:09,357 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_blast_assert [2022-10-15 21:11:09,357 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-15 21:11:09,358 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-15 21:11:09,358 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2022-10-15 21:11:09,358 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2022-10-15 21:11:09,360 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2022-10-15 21:11:09,360 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2022-10-15 21:11:09,361 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_flush_vq [2022-10-15 21:11:09,362 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_flush_vq [2022-10-15 21:11:09,362 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_stop_vq [2022-10-15 21:11:09,362 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_stop_vq [2022-10-15 21:11:09,362 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2022-10-15 21:11:09,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~X~int~TO~int [2022-10-15 21:11:09,364 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2022-10-15 21:11:09,364 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2022-10-15 21:11:09,365 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-10-15 21:11:09,365 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-10-15 21:11:09,365 INFO L130 BoogieDeclarations]: Found specification of procedure fput [2022-10-15 21:11:09,366 INFO L138 BoogieDeclarations]: Found implementation of procedure fput [2022-10-15 21:11:09,366 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-10-15 21:11:09,366 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-10-15 21:11:09,367 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2022-10-15 21:11:09,367 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2022-10-15 21:11:09,368 INFO L130 BoogieDeclarations]: Found specification of procedure tx_poll_stop [2022-10-15 21:11:09,368 INFO L138 BoogieDeclarations]: Found implementation of procedure tx_poll_stop [2022-10-15 21:11:09,368 INFO L130 BoogieDeclarations]: Found specification of procedure schedule [2022-10-15 21:11:09,369 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule [2022-10-15 21:11:09,369 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-15 21:11:09,369 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_has_feature [2022-10-15 21:11:09,369 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_has_feature [2022-10-15 21:11:09,369 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2022-10-15 21:11:09,370 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2022-10-15 21:11:09,370 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-15 21:11:09,370 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-15 21:11:09,370 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_init [2022-10-15 21:11:09,370 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_init [2022-10-15 21:11:09,370 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_fileget [2022-10-15 21:11:09,370 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_fileget [2022-10-15 21:11:09,371 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_flush [2022-10-15 21:11:09,372 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_flush [2022-10-15 21:11:09,372 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-15 21:11:09,372 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-15 21:11:09,372 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-15 21:11:09,373 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2022-10-15 21:11:09,374 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2022-10-15 21:11:09,374 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_put [2022-10-15 21:11:09,374 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_put [2022-10-15 21:11:09,374 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_ioctl [2022-10-15 21:11:09,374 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_ioctl [2022-10-15 21:11:09,375 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_disable_vq [2022-10-15 21:11:09,375 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_disable_vq [2022-10-15 21:11:09,375 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_exit [2022-10-15 21:11:09,375 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_exit [2022-10-15 21:11:09,375 INFO L130 BoogieDeclarations]: Found specification of procedure mmput [2022-10-15 21:11:09,375 INFO L138 BoogieDeclarations]: Found implementation of procedure mmput [2022-10-15 21:11:09,375 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2022-10-15 21:11:09,375 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2022-10-15 21:11:09,376 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-15 21:11:09,376 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2022-10-15 21:11:09,376 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2022-10-15 21:11:09,376 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-15 21:11:09,377 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_stop [2022-10-15 21:11:09,377 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_stop [2022-10-15 21:11:09,377 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-15 21:11:09,377 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-10-15 21:11:09,377 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2022-10-15 21:11:09,377 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2022-10-15 21:11:09,377 INFO L130 BoogieDeclarations]: Found specification of procedure memory_access_ok [2022-10-15 21:11:09,378 INFO L138 BoogieDeclarations]: Found implementation of procedure memory_access_ok [2022-10-15 21:11:09,378 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2022-10-15 21:11:09,378 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2022-10-15 21:11:09,378 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-10-15 21:11:09,380 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-10-15 21:11:09,381 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_seq_done [2022-10-15 21:11:09,381 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_seq_done [2022-10-15 21:11:09,385 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_init [2022-10-15 21:11:09,385 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_init [2022-10-15 21:11:09,385 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_net_release [2022-10-15 21:11:09,385 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_net_release [2022-10-15 21:11:09,385 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2022-10-15 21:11:09,385 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2022-10-15 21:11:09,386 INFO L130 BoogieDeclarations]: Found specification of procedure lock_is_held [2022-10-15 21:11:09,386 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_is_held [2022-10-15 21:11:09,386 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_flush [2022-10-15 21:11:09,386 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_flush [2022-10-15 21:11:09,386 INFO L130 BoogieDeclarations]: Found specification of procedure log_access_ok [2022-10-15 21:11:09,386 INFO L138 BoogieDeclarations]: Found implementation of procedure log_access_ok [2022-10-15 21:11:09,386 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_dereference [2022-10-15 21:11:09,386 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_dereference [2022-10-15 21:11:09,386 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-15 21:11:09,387 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_start [2022-10-15 21:11:09,388 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_start [2022-10-15 21:11:09,388 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-15 21:11:09,389 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-15 21:11:09,389 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2022-10-15 21:11:09,389 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2022-10-15 21:11:10,061 INFO L235 CfgBuilder]: Building ICFG [2022-10-15 21:11:10,066 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-15 21:11:10,456 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:10,475 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-10-15 21:11:10,478 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-10-15 21:11:10,556 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:10,562 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false; [2022-10-15 21:11:10,562 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-10-15 21:11:13,229 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:13,248 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:13,252 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:13,254 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:13,255 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:13,259 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:13,260 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:14,346 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##283: assume !false; [2022-10-15 21:11:14,346 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##282: assume false; [2022-10-15 21:11:14,347 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##246: assume !false; [2022-10-15 21:11:14,347 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##245: assume false; [2022-10-15 21:11:14,347 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##302: assume false; [2022-10-15 21:11:14,347 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##303: assume !false; [2022-10-15 21:11:14,347 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##184: assume false; [2022-10-15 21:11:14,347 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##185: assume !false; [2022-10-15 21:11:14,348 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##371: assume false; [2022-10-15 21:11:14,348 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##372: assume !false; [2022-10-15 21:11:14,348 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##9: assume false; [2022-10-15 21:11:14,348 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume !false;call ULTIMATE.dealloc(~#backend~0#1.base, ~#backend~0#1.offset);havoc ~#backend~0#1.base, ~#backend~0#1.offset;call ULTIMATE.dealloc(~#features~0#1.base, ~#features~0#1.offset);havoc ~#features~0#1.base, ~#features~0#1.offset; [2022-10-15 21:11:14,348 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##359: assume false; [2022-10-15 21:11:14,348 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##360: assume !false; [2022-10-15 21:11:14,591 WARN L816 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-10-15 21:11:15,788 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##23: assume !false; [2022-10-15 21:11:15,788 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##22: assume false; [2022-10-15 21:11:15,877 INFO L276 CfgBuilder]: Performing block encoding [2022-10-15 21:11:15,897 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-15 21:11:15,897 INFO L300 CfgBuilder]: Removed 40 assume(true) statements. [2022-10-15 21:11:15,902 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 09:11:15 BoogieIcfgContainer [2022-10-15 21:11:15,902 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-15 21:11:15,905 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-15 21:11:15,905 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-15 21:11:15,909 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-15 21:11:15,910 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 15.10 09:11:04" (1/3) ... [2022-10-15 21:11:15,911 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@67b1a8e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 09:11:15, skipping insertion in model container [2022-10-15 21:11:15,911 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 09:11:08" (2/3) ... [2022-10-15 21:11:15,911 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@67b1a8e2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 15.10 09:11:15, skipping insertion in model container [2022-10-15 21:11:15,911 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 09:11:15" (3/3) ... [2022-10-15 21:11:15,913 INFO L112 eAbstractionObserver]: Analyzing ICFG usb_urb-drivers-vhost-vhost_net.ko.cil.out.i [2022-10-15 21:11:15,941 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-15 21:11:15,941 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 28 error locations. [2022-10-15 21:11:16,064 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-15 21:11:16,078 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@50fc15f0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-15 21:11:16,078 INFO L358 AbstractCegarLoop]: Starting to check reachability of 28 error locations. [2022-10-15 21:11:16,093 INFO L276 IsEmpty]: Start isEmpty. Operand has 1122 states, 787 states have (on average 1.434561626429479) internal successors, (1129), 837 states have internal predecessors, (1129), 242 states have call successors, (242), 64 states have call predecessors, (242), 64 states have return successors, (242), 242 states have call predecessors, (242), 242 states have call successors, (242) [2022-10-15 21:11:16,130 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 38 [2022-10-15 21:11:16,130 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:11:16,131 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:11:16,133 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [memory_access_okErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, memory_access_okErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, vhost_work_flushErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 25 more)] === [2022-10-15 21:11:16,140 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:11:16,141 INFO L85 PathProgramCache]: Analyzing trace with hash 1814893083, now seen corresponding path program 1 times [2022-10-15 21:11:16,154 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:11:16,155 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [934508021] [2022-10-15 21:11:16,155 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:11:16,157 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:11:16,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:11:17,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-15 21:11:17,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:11:17,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-15 21:11:17,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:11:17,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-15 21:11:17,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:11:17,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-15 21:11:17,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-15 21:11:17,384 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-10-15 21:11:17,385 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-15 21:11:17,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [934508021] [2022-10-15 21:11:17,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [934508021] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-15 21:11:17,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-15 21:11:17,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-15 21:11:17,389 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1345474805] [2022-10-15 21:11:17,390 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-15 21:11:17,396 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-15 21:11:17,396 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-15 21:11:17,440 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-15 21:11:17,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-10-15 21:11:17,449 INFO L87 Difference]: Start difference. First operand has 1122 states, 787 states have (on average 1.434561626429479) internal successors, (1129), 837 states have internal predecessors, (1129), 242 states have call successors, (242), 64 states have call predecessors, (242), 64 states have return successors, (242), 242 states have call predecessors, (242), 242 states have call successors, (242) Second operand has 5 states, 4 states have (on average 7.25) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-15 21:11:20,321 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-15 21:11:22,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-15 21:11:22,305 INFO L93 Difference]: Finished difference Result 2443 states and 3627 transitions. [2022-10-15 21:11:22,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-15 21:11:22,308 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 7.25) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) Word has length 37 [2022-10-15 21:11:22,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-15 21:11:22,338 INFO L225 Difference]: With dead ends: 2443 [2022-10-15 21:11:22,338 INFO L226 Difference]: Without dead ends: 1304 [2022-10-15 21:11:22,356 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-10-15 21:11:22,361 INFO L413 NwaCegarLoop]: 1423 mSDtfsCounter, 812 mSDsluCounter, 1740 mSDsCounter, 0 mSdLazyCounter, 1071 mSolverCounterSat, 639 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 881 SdHoareTripleChecker+Valid, 3163 SdHoareTripleChecker+Invalid, 1711 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 639 IncrementalHoareTripleChecker+Valid, 1071 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2022-10-15 21:11:22,362 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [881 Valid, 3163 Invalid, 1711 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [639 Valid, 1071 Invalid, 1 Unknown, 0 Unchecked, 4.4s Time] [2022-10-15 21:11:22,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1304 states. [2022-10-15 21:11:22,606 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1304 to 1108. [2022-10-15 21:11:22,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1108 states, 779 states have (on average 1.3157894736842106) internal successors, (1025), 822 states have internal predecessors, (1025), 241 states have call successors, (241), 62 states have call predecessors, (241), 62 states have return successors, (241), 241 states have call predecessors, (241), 241 states have call successors, (241) [2022-10-15 21:11:22,627 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1108 states to 1108 states and 1507 transitions. [2022-10-15 21:11:22,630 INFO L78 Accepts]: Start accepts. Automaton has 1108 states and 1507 transitions. Word has length 37 [2022-10-15 21:11:22,631 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-15 21:11:22,631 INFO L495 AbstractCegarLoop]: Abstraction has 1108 states and 1507 transitions. [2022-10-15 21:11:22,631 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 7.25) internal successors, (29), 3 states have internal predecessors, (29), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (4), 2 states have call predecessors, (4), 2 states have call successors, (4) [2022-10-15 21:11:22,631 INFO L276 IsEmpty]: Start isEmpty. Operand 1108 states and 1507 transitions. [2022-10-15 21:11:22,635 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-10-15 21:11:22,636 INFO L187 NwaCegarLoop]: Found error trace [2022-10-15 21:11:22,636 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-15 21:11:22,636 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-15 21:11:22,637 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting vhost_work_flushErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [memory_access_okErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, memory_access_okErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, vhost_work_flushErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 25 more)] === [2022-10-15 21:11:22,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-15 21:11:22,637 INFO L85 PathProgramCache]: Analyzing trace with hash -1582339085, now seen corresponding path program 1 times [2022-10-15 21:11:22,638 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-15 21:11:22,638 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2069187559] [2022-10-15 21:11:22,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-15 21:11:22,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-15 21:11:23,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-15 21:11:23,238 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-15 21:11:23,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-15 21:11:23,735 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-15 21:11:23,736 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-15 21:11:23,738 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location vhost_work_flushErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 28 remaining) [2022-10-15 21:11:23,741 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location memory_access_okErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 28 remaining) [2022-10-15 21:11:23,741 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location memory_access_okErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 28 remaining) [2022-10-15 21:11:23,742 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 28 remaining) [2022-10-15 21:11:23,747 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 28 remaining) [2022-10-15 21:11:23,747 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 28 remaining) [2022-10-15 21:11:23,748 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vq_memory_access_okErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 28 remaining) [2022-10-15 21:11:23,748 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vq_memory_access_okErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 28 remaining) [2022-10-15 21:11:23,749 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 28 remaining) [2022-10-15 21:11:23,749 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 28 remaining) [2022-10-15 21:11:23,749 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 28 remaining) [2022-10-15 21:11:23,749 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 28 remaining) [2022-10-15 21:11:23,750 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 28 remaining) [2022-10-15 21:11:23,750 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 28 remaining) [2022-10-15 21:11:23,750 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 28 remaining) [2022-10-15 21:11:23,751 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 28 remaining) [2022-10-15 21:11:23,752 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 28 remaining) [2022-10-15 21:11:23,752 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 28 remaining) [2022-10-15 21:11:23,752 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 28 remaining) [2022-10-15 21:11:23,752 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 28 remaining) [2022-10-15 21:11:23,752 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 28 remaining) [2022-10-15 21:11:23,753 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_ioctlErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 28 remaining) [2022-10-15 21:11:23,753 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 28 remaining) [2022-10-15 21:11:23,754 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_net_openErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 28 remaining) [2022-10-15 21:11:23,754 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 28 remaining) [2022-10-15 21:11:23,754 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 28 remaining) [2022-10-15 21:11:23,755 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_has_featureErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 28 remaining) [2022-10-15 21:11:23,755 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_has_featureErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 28 remaining) [2022-10-15 21:11:23,755 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-15 21:11:23,760 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1] [2022-10-15 21:11:23,765 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-15 21:11:24,082 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 15.10 09:11:24 BoogieIcfgContainer [2022-10-15 21:11:24,083 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-15 21:11:24,086 INFO L158 Benchmark]: Toolchain (without parser) took 19104.54ms. Allocated memory was 156.2MB in the beginning and 399.5MB in the end (delta: 243.3MB). Free memory was 115.8MB in the beginning and 145.1MB in the end (delta: -29.3MB). Peak memory consumption was 215.0MB. Max. memory is 8.0GB. [2022-10-15 21:11:24,089 INFO L158 Benchmark]: CDTParser took 0.25ms. Allocated memory is still 156.2MB. Free memory is still 125.5MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-15 21:11:24,093 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3655.29ms. Allocated memory was 156.2MB in the beginning and 187.7MB in the end (delta: 31.5MB). Free memory was 115.7MB in the beginning and 86.0MB in the end (delta: 29.7MB). Peak memory consumption was 96.3MB. Max. memory is 8.0GB. [2022-10-15 21:11:24,094 INFO L158 Benchmark]: Boogie Procedure Inliner took 329.31ms. Allocated memory is still 187.7MB. Free memory was 86.0MB in the beginning and 112.7MB in the end (delta: -26.7MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. [2022-10-15 21:11:24,095 INFO L158 Benchmark]: Boogie Preprocessor took 255.52ms. Allocated memory is still 187.7MB. Free memory was 112.7MB in the beginning and 91.2MB in the end (delta: 21.5MB). Peak memory consumption was 22.0MB. Max. memory is 8.0GB. [2022-10-15 21:11:24,096 INFO L158 Benchmark]: RCFGBuilder took 6673.66ms. Allocated memory was 187.7MB in the beginning and 305.1MB in the end (delta: 117.4MB). Free memory was 91.2MB in the beginning and 183.5MB in the end (delta: -92.3MB). Peak memory consumption was 102.9MB. Max. memory is 8.0GB. [2022-10-15 21:11:24,100 INFO L158 Benchmark]: TraceAbstraction took 8177.99ms. Allocated memory was 305.1MB in the beginning and 399.5MB in the end (delta: 94.4MB). Free memory was 182.5MB in the beginning and 145.1MB in the end (delta: 37.4MB). Peak memory consumption was 131.2MB. Max. memory is 8.0GB. [2022-10-15 21:11:24,107 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25ms. Allocated memory is still 156.2MB. Free memory is still 125.5MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 3655.29ms. Allocated memory was 156.2MB in the beginning and 187.7MB in the end (delta: 31.5MB). Free memory was 115.7MB in the beginning and 86.0MB in the end (delta: 29.7MB). Peak memory consumption was 96.3MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 329.31ms. Allocated memory is still 187.7MB. Free memory was 86.0MB in the beginning and 112.7MB in the end (delta: -26.7MB). Peak memory consumption was 10.5MB. Max. memory is 8.0GB. * Boogie Preprocessor took 255.52ms. Allocated memory is still 187.7MB. Free memory was 112.7MB in the beginning and 91.2MB in the end (delta: 21.5MB). Peak memory consumption was 22.0MB. Max. memory is 8.0GB. * RCFGBuilder took 6673.66ms. Allocated memory was 187.7MB in the beginning and 305.1MB in the end (delta: 117.4MB). Free memory was 91.2MB in the beginning and 183.5MB in the end (delta: -92.3MB). Peak memory consumption was 102.9MB. Max. memory is 8.0GB. * TraceAbstraction took 8177.99ms. Allocated memory was 305.1MB in the beginning and 399.5MB in the end (delta: 94.4MB). Free memory was 182.5MB in the beginning and 145.1MB in the end (delta: 37.4MB). Peak memory consumption was 131.2MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 6341]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of large string literal at line 8767, overapproximation of bitwiseOr at line 8211. Possible FailurePath: [L6251] static struct lock_class_key __key___7 ; [L6784] static struct lock_class_key __key___8 ; [L6785] static struct lock_class_key __key___9 ; [L6786] static struct lock_class_key __key___10 ; [L7004] static bool __warned___22 ; [L7377] static bool __warned___23 ; [L7419] static bool __warned___24 ; [L7517] static bool __warned___25 ; [L8635] static bool __warned___26 ; [L8766-L8769] static struct _ddebug descriptor __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Invalid length in indirect descriptor: len 0x%llx not multiple of 0x%zx\n", 1035U, 0U, (char)0}; [L8770-L8772] static struct _ddebug descriptor___0 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Translation failure %d in indirect.\n", 1042U, 0U, (char)0}; [L8773-L8775] static struct _ddebug descriptor___1 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Indirect buffer length too big: %d\n", 1055U, 0U, (char)0}; [L8776-L8778] static struct _ddebug descriptor___2 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Loop detected: last one at %u indirect size %u\n", 1064U, 0U, (char)0}; [L8779-L8781] static struct _ddebug descriptor___3 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed indirect descriptor: idx %d, %zx\n", 1070U, 0U, (char)0}; [L8782-L8784] static struct _ddebug descriptor___4 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Nested indirect descriptor: idx %d, %zx\n", 1075U, 0U, (char)0}; [L8785-L8787] static struct _ddebug descriptor___5 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Translation failure %d indirect idx %d\n", 1083U, 0U, (char)0}; [L8788-L8790] static struct _ddebug descriptor___6 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_indirect", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Indirect descriptor has out after in: idx %d\n", 1099U, 0U, (char)0}; [L9193-L9195] static struct _ddebug descriptor___7 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to access avail idx at %p\n", 1130U, 0U, (char)0}; [L9196-L9198] static struct _ddebug descriptor___8 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Guest moved used index from %u to %u", 1136U, 0U, (char)0}; [L9199-L9201] static struct _ddebug descriptor___9 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to read head: idx %d address %p\n", 1153U, 0U, (char)0}; [L9202-L9204] static struct _ddebug descriptor___10 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Guest says index %u > %u is available", 1160U, 0U, (char)0}; [L9205-L9207] static struct _ddebug descriptor___11 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Desc index is %u > %u, head = %u", 1174U, 0U, (char)0}; [L9208-L9210] static struct _ddebug descriptor___12 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Loop detected: last one at %u vq size %u head %u\n", 1180U, 0U, (char)0}; [L9211-L9213] static struct _ddebug descriptor___13 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to get descriptor: idx %d addr %p\n", 1186U, 0U, (char)0}; [L9214-L9216] static struct _ddebug descriptor___14 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failure detected in indirect descriptor at idx %d\n", 1195U, 0U, (char)0}; [L9217-L9219] static struct _ddebug descriptor___15 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Translation failure %d descriptor idx %d\n", 1205U, 0U, (char)0}; [L9220-L9222] static struct _ddebug descriptor___16 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_get_vq_desc", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Descriptor has out after in: idx %d\n", 1222U, 0U, (char)0}; [L10108-L10110] static struct _ddebug descriptor___17 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_add_used", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to write used id", 1254U, 0U, (char)0}; [L10111-L10113] static struct _ddebug descriptor___18 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_add_used", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to write used len", 1258U, 0U, (char)0}; [L10114-L10116] static struct _ddebug descriptor___19 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_add_used", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to increment used idx", 1264U, 0U, (char)0}; [L10681-L10683] static struct _ddebug descriptor___20 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "__vhost_add_used_n", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to write used", 1303U, 0U, (char)0}; [L10764-L10766] static struct _ddebug descriptor___21 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_add_used_n", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to increment used idx", 1347U, 0U, (char)0}; [L10890-L10892] static struct _ddebug descriptor___22 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_notify", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to get flags", 1377U, 0U, (char)0}; [L10893-L10895] static struct _ddebug descriptor___23 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_notify", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to get used event idx", 1391U, 0U, (char)0}; [L11274-L11276] static struct _ddebug descriptor___24 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_enable_notify", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to enable notification at %p: %d\n", 1436U, 0U, (char)0}; [L11277-L11279] static struct _ddebug descriptor___25 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_enable_notify", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to update avail event index at %p: %d\n", 1443U, 0U, (char)0}; [L11280-L11282] static struct _ddebug descriptor___26 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_enable_notify", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to check avail idx at %p: %d\n", 1467U, 0U, (char)0}; [L11700-L11702] static struct _ddebug descriptor___27 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "vhost_disable_notify", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/vhost.c.common.c", "Failed to enable notification at %p: %d\n", 1486U, 0U, (char)0}; [L11824] int ldv_urb_state = 0; [L11825] int ldv_coherent_state = 0; [L12143] static bool __warned___29 ; [L12145-L12147] static struct _ddebug descriptor___28 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "handle_tx", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "Unexpected descriptor format for TX: out %d, int %d\n", 178U, 0U, (char)0}; [L12148-L12150] static struct _ddebug descriptor___29 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "handle_tx", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "Unexpected header len for TX: %zd expected %zd\n", 189U, 0U, (char)0}; [L12151-L12153] static struct _ddebug descriptor___30 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "handle_tx", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "Truncated TX packet: len %d != %zd\n", 201U, 0U, (char)0}; [L12473-L12475] static struct _ddebug descriptor___31 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "get_rx_bufs", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "unexpected descriptor format for RX: out %d, in %d\n", 265U, 0U, (char)0}; [L12612] static bool __warned___30 ; [L12614-L12616] static struct _ddebug descriptor___32 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "handle_rx", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "Discarded rx packet: len %d, expected %zd\n", 364U, 0U, (char)0}; [L12617-L12619] static struct _ddebug descriptor___33 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "handle_rx", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "Unable to write vnet_hdr at addr %p\n", 372U, 0U, (char)0}; [L12620-L12622] static struct _ddebug descriptor___34 __attribute__((__used__, __section__("__verbose"), __aligned__(8))) = {"vhost_net", "handle_rx", "/anthill/stuff/tacas-comp/work/current--X--drivers/vhost/vhost_net.ko--X--bulklinux-3.0.1--X--68_1/linux-3.0.1/csd_deg_dscv/12/dscv_tempdir/dscv/ri/68_1/drivers/vhost/net.c", "Failed num_buffers write", 380U, 0U, (char)0}; [L13073] static bool __warned___31 ; [L13125] static bool __warned___32 ; [L13368] static bool __warned___33 ; [L13695-L13719] static struct file_operations const vhost_net_fops = {& __this_module, & noop_llseek, (ssize_t (*)(struct file * , char * , size_t , loff_t * ))0, (ssize_t (*)(struct file * , char const * , size_t , loff_t * ))0, (ssize_t (*)(struct kiocb * , struct iovec const * , unsigned long , loff_t ))0, (ssize_t (*)(struct kiocb * , struct iovec const * , unsigned long , loff_t ))0, (int (*)(struct file * , void * , int (*)(void * , char const * , int , loff_t , u64 , unsigned int ) ))0, (unsigned int (*)(struct file * , struct poll_table_struct * ))0, & vhost_net_ioctl, & vhost_net_compat_ioctl, (int (*)(struct file * , struct vm_area_struct * ))0, & vhost_net_open, (int (*)(struct file * , fl_owner_t id ))0, & vhost_net_release, (int (*)(struct file * , int datasync ))0, (int (*)(struct kiocb * , int datasync ))0, (int (*)(int , struct file * , int ))0, (int (*)(struct file * , int , struct file_lock * ))0, (ssize_t (*)(struct file * , struct page * , int , size_t , loff_t * , int ))0, (unsigned long (*)(struct file * , unsigned long , unsigned long , unsigned long , unsigned long ))0, (int (*)(int ))0, (int (*)(struct file * , int , struct file_lock * ))0, (ssize_t (*)(struct pipe_inode_info * , struct file * , loff_t * , size_t , unsigned int ))0, (ssize_t (*)(struct file * , loff_t * , struct pipe_inode_info * , size_t , unsigned int ))0, (int (*)(struct file * , long , struct file_lock ** ))0, (long (*)(struct file *file , int mode , loff_t offset , loff_t len ))0}; [L13720-L13722] static struct miscdevice vhost_net_misc = {255, "vhost-net", & vhost_net_fops, {(struct list_head *)0, (struct list_head *)0}, (struct device *)0, (struct device *)0, (char const *)0, 0U}; [L13759-L13764] static char const __mod_version790[14] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'v', (char const )'e', (char const )'r', (char const )'s', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'0', (char const )'.', (char const )'0', (char const )'.', (char const )'1', (char const )'\000'}; [L13765-L13770] static char const __mod_license791[15] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'l', (char const )'i', (char const )'c', (char const )'e', (char const )'n', (char const )'s', (char const )'e', (char const )'=', (char const )'G', (char const )'P', (char const )'L', (char const )' ', (char const )'v', (char const )'2', (char const )'\000'}; [L13771-L13779] static char const __mod_author792[26] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'a', (char const )'u', (char const )'t', (char const )'h', (char const )'o', (char const )'r', (char const )'=', (char const )'M', (char const )'i', (char const )'c', (char const )'h', (char const )'a', (char const )'e', (char const )'l', (char const )' ', (char const )'S', (char const )'.', (char const )' ', (char const )'T', (char const )'s', (char const )'i', (char const )'r', (char const )'k', (char const )'i', (char const )'n', (char const )'\000'}; [L13780-L13794] static char const __mod_description793[51] __attribute__((__used__, __unused__, __section__(".modinfo"), __aligned__(1))) = { (char const )'d', (char const )'e', (char const )'s', (char const )'c', (char const )'r', (char const )'i', (char const )'p', (char const )'t', (char const )'i', (char const )'o', (char const )'n', (char const )'=', (char const )'H', (char const )'o', (char const )'s', (char const )'t', (char const )' ', (char const )'k', (char const )'e', (char const )'r', (char const )'n', (char const )'e', (char const )'l', (char const )' ', (char const )'a', (char const )'c', (char const )'c', (char const )'e', (char const )'l', (char const )'e', (char const )'r', (char const )'a', (char const )'t', (char const )'o', (char const )'r', (char const )' ', (char const )'f', (char const )'o', (char const )'r', (char const )' ', (char const )'v', (char const )'i', (char const )'r', (char const )'t', (char const )'i', (char const )'o', (char const )' ', (char const )'n', (char const )'e', (char const )'t', (char const )'\000'}; [L13798] int LDV_IN_INTERRUPT ; [L13799] static int res_vhost_net_open_12 ; VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=0, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13801] struct inode *var_group1 ; [L13802] struct file *var_group2 ; [L13803] unsigned int var_vhost_net_ioctl_26_p1 ; [L13804] unsigned long var_vhost_net_ioctl_26_p2 ; [L13805] unsigned int var_vhost_net_compat_ioctl_27_p1 ; [L13806] unsigned long var_vhost_net_compat_ioctl_27_p2 ; [L13807] int tmp___7 ; [L13808] int ldv_s_vhost_net_fops_file_operations ; [L13809] int tmp___8 ; [L13810] int tmp___9 ; [L13813] LDV_IN_INTERRUPT = 1 [L13814] FCALL ldv_initialize() [L13815] CALL, EXPR vhost_net_init() VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13724] int tmp___7 ; [L13727] CALL, EXPR misc_register(& vhost_net_misc) [L14051] return __VERIFIER_nondet_int(); [L13727] RET, EXPR misc_register(& vhost_net_misc) [L13727] tmp___7 = misc_register(& vhost_net_misc) [L13729] return (tmp___7); VAL [\result=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13815] RET, EXPR vhost_net_init() VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_init()=0, vhost_net_misc={240:0}] [L13815] tmp___7 = vhost_net_init() [L13817] COND FALSE !(\read(tmp___7)) [L13821] ldv_s_vhost_net_fops_file_operations = 0 VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_vhost_net_fops_file_operations=0, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13823] COND TRUE 1 VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_vhost_net_fops_file_operations=0, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13826] tmp___9 = __VERIFIER_nondet_int() [L13828] COND TRUE \read(tmp___9) VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_vhost_net_fops_file_operations=0, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, tmp___9=-2, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13835] tmp___8 = __VERIFIER_nondet_int() [L13837] COND FALSE !(tmp___8 == 0) VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_vhost_net_fops_file_operations=0, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, tmp___8=2, tmp___9=-2, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13840] COND FALSE !(tmp___8 == 1) VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_vhost_net_fops_file_operations=0, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, tmp___8=2, tmp___9=-2, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13843] COND TRUE tmp___8 == 2 VAL [__key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_s_vhost_net_fops_file_operations=0, ldv_urb_state=0, res_vhost_net_open_12=0, tmp___7=0, tmp___8=2, tmp___9=-2, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13876] CALL vhost_net_ioctl(var_group2, var_vhost_net_ioctl_26_p1, var_vhost_net_ioctl_26_p2) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13587] struct vhost_net *n ; [L13588] void *argp ; [L13589] u64 *featurep ; [L13590] struct vhost_vring_file backend ; [L13591] u64 features ; [L13592] int r ; [L13593] unsigned long tmp___7 ; [L13594] long tmp___8 ; [L13595] int tmp___9 ; [L13596] unsigned long tmp___10 ; [L13597] int tmp___11 ; [L13598] long tmp___12 ; [L13599] long tmp___13 ; [L13600] unsigned long tmp ; [L13601] int tmp___14 ; [L13602] unsigned long tmp___15 ; [L13604] EXPR f->private_data [L13604] n = (struct vhost_net *)f->private_data [L13605] argp = (void *)arg [L13606] featurep = (u64 *)argp VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13607] COND FALSE !((unsigned long )((int )ioctl) == ((unsigned long )(((1U << 30) | (unsigned int )(175 << 8)) | 48U) | (sizeof(struct vhost_vring_file ) << 16))) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13610] COND FALSE !((unsigned long )((int )ioctl) == ((unsigned long )((2U << 30) | (unsigned int )(175 << 8)) | (sizeof(__u64 ) << 16))) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13613] COND FALSE !((unsigned long )((int )ioctl) == ((unsigned long )((1U << 30) | (unsigned int )(175 << 8)) | (sizeof(__u64 ) << 16))) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13616] COND FALSE !((unsigned int )((int )ioctl) == ((unsigned int )(175 << 8) | 2U)) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13672] FCALL mutex_lock_nested(& n->dev.mutex, 0U) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13673] CALL, EXPR vhost_dev_ioctl(& n->dev, ioctl, arg) [L8187] void *argp ; [L8188] struct file *eventfp ; [L8189] struct file *filep ; [L8190] struct eventfd_ctx *ctx ; [L8191] u64 p ; [L8192] long r ; [L8193] int i ; [L8194] int fd ; [L8195] unsigned long tmp___7 ; [L8196] struct vhost_virtqueue *vq ; [L8197] void *base ; [L8198] int tmp___8 ; [L8199] int __ret_gu ; [L8200] unsigned long __val_gu ; [L8201] struct file *tmp___9 ; [L8202] long tmp___10 ; [L8203] struct eventfd_ctx *tmp___11 ; [L8204] unsigned long tmp ; [L8205] long tmp___12 ; [L8206] long tmp___13 ; [L8208] argp = (void *)arg [L8209] filep = (struct file *)((void *)0) [L8210] ctx = (struct eventfd_ctx *)((void *)0) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, ctx={0:0}, d={6442450944:-17480}, d={6442450944:-17480}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, filep={0:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, p={244:0}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L8211] COND TRUE ioctl == ((unsigned int )(175 << 8) | 1U) [L8213] CALL, EXPR vhost_dev_set_owner(d) [L6916] struct task_struct *worker ; [L6917] int err ; [L6918] struct task_struct *tmp___7 ; [L6919] struct task_struct *tmp___8 ; [L6920] long tmp___9 ; [L6921] long tmp___10 ; [L6922] long tmp___11 ; [L6923] long tmp ; [L6924] long tmp___12 ; [L6926] dev->mm VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450944:-17480}, dev={6442450944:-17480}, dev->mm={6442450945:6442450948}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L6926] COND TRUE dev->mm [L6927] err = -16 VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450944:-17480}, dev={6442450944:-17480}, err=-16, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L6980] return ((long )err); VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \result=-16, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450944:-17480}, dev={6442450944:-17480}, err=-16, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L8213] RET, EXPR vhost_dev_set_owner(d) [L8213] r = vhost_dev_set_owner(d) [L8413] return (r); [L8413] return (r); VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, \result=-16, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, ctx={0:0}, d={6442450944:-17480}, d={6442450944:-17480}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, filep={0:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, r=-16, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13673] RET, EXPR vhost_dev_ioctl(& n->dev, ioctl, arg) [L13673] tmp___13 = vhost_dev_ioctl(& n->dev, ioctl, arg) [L13674] r = (int )tmp___13 VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(arg)=2147483646, \old(ioctl)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, arg=2147483646, argp={0:2147483646}, backend={243:0}, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, f={6442450950:-191}, f={6442450950:-191}, featurep={0:2147483646}, features={242:0}, ioctl=0, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, r=-16, res_vhost_net_open_12=0, tmp___13=-16, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13675] CALL vhost_net_flush(n) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13196] CALL vhost_net_flush_vq(n, 1) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, \old(index)=1, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, n={6442450944:-17480}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L13186] CALL vhost_poll_flush(n->poll + index) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, poll={6442450944:-32}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L6444] EXPR poll->dev VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, poll={6442450944:-32}, poll={6442450944:-32}, poll->dev={6442450946:-120}, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L6444] CALL vhost_work_flush(poll->dev, & poll->work) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450946:-120}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}, work={6442450944:0}] [L6330] unsigned int seq ; [L6331] int flushing ; [L6332] bool tmp___7 ; [L6333] wait_queue_t __wait ; [L6334] struct task_struct *tmp___8 ; [L6335] bool tmp___9 ; [L6336] long tmp___10 ; VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __wait={241:0}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450946:-120}, dev={6442450946:-120}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}, work={6442450944:0}, work={6442450944:0}] [L6339] CALL spin_lock_irq(& dev->work_lock) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}] [L5214] FCALL _raw_spin_lock_irq(& lock->__annonCompField18.rlock) [L6339] RET spin_lock_irq(& dev->work_lock) VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __wait={241:0}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450946:-120}, dev={6442450946:-120}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, vhost_net_fops={239:0}, vhost_net_misc={240:0}, work={6442450944:0}, work={6442450944:0}] [L6340] EXPR work->queue_seq [L6340] seq = work->queue_seq [L6341] EXPR work->flushing VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __wait={241:0}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450946:-120}, dev={6442450946:-120}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, seq=2147483647, vhost_net_fops={239:0}, vhost_net_misc={240:0}, work={6442450944:0}, work={6442450944:0}, work->flushing=2147483647] [L6341] work->flushing + 1 VAL [\old(__warned___22)=0, \old(__warned___23)=0, \old(__warned___24)=0, \old(__warned___25)=0, \old(__warned___31)=0, \old(__warned___32)=0, \old(__warned___33)=0, __key___10={202:0}, __key___7={199:0}, __key___8={200:0}, __key___9={201:0}, __this_module={6442450947:6442450949}, __wait={241:0}, __warned___22=0, __warned___23=0, __warned___24=0, __warned___25=0, __warned___26=0, __warned___29=0, __warned___30=0, __warned___31=0, __warned___32=0, __warned___33=0, descriptor={203:0}, descriptor___0={204:0}, descriptor___1={205:0}, descriptor___10={214:0}, descriptor___11={215:0}, descriptor___12={216:0}, descriptor___13={217:0}, descriptor___14={218:0}, descriptor___15={219:0}, descriptor___16={220:0}, descriptor___17={221:0}, descriptor___18={222:0}, descriptor___19={223:0}, descriptor___2={206:0}, descriptor___20={224:0}, descriptor___21={225:0}, descriptor___22={226:0}, descriptor___23={227:0}, descriptor___24={228:0}, descriptor___25={229:0}, descriptor___26={230:0}, descriptor___27={231:0}, descriptor___28={232:0}, descriptor___29={233:0}, descriptor___3={207:0}, descriptor___30={234:0}, descriptor___31={235:0}, descriptor___32={236:0}, descriptor___33={237:0}, descriptor___34={238:0}, descriptor___4={208:0}, descriptor___5={209:0}, descriptor___6={210:0}, descriptor___7={211:0}, descriptor___8={212:0}, descriptor___9={213:0}, dev={6442450946:-120}, dev={6442450946:-120}, ldv_coherent_state=0, LDV_IN_INTERRUPT=1, ldv_urb_state=0, res_vhost_net_open_12=0, seq=2147483647, vhost_net_fops={239:0}, vhost_net_misc={240:0}, work={6442450944:0}, work={6442450944:0}, work->flushing=2147483647] - UnprovableResult [Line: 7281]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7281]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6341]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6398]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6398]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7244]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7244]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7064]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7064]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6775]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 13573]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 13573]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6730]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6730]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6748]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6748]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8283]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8283]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8384]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8384]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6866]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6866]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 13861]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 13861]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6219]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 6219]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 65 procedures, 1122 locations, 28 error locations. Started 1 CEGAR loops. OverallTime: 7.8s, OverallIterations: 2, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 5.0s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 1 mSolverCounterUnknown, 881 SdHoareTripleChecker+Valid, 4.4s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 812 mSDsluCounter, 3163 SdHoareTripleChecker+Invalid, 4.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 1740 mSDsCounter, 639 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1071 IncrementalHoareTripleChecker+Invalid, 1711 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 639 mSolverCounterUnsat, 1423 mSDtfsCounter, 1071 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 10 GetRequests, 7 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1122occurred in iteration=0, InterpolantAutomatonStates: 5, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 1 MinimizatonAttempts, 196 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 0.7s InterpolantComputationTime, 86 NumberOfCodeBlocks, 86 NumberOfCodeBlocksAsserted, 2 NumberOfCheckSat, 36 ConstructedInterpolants, 0 QuantifiedInterpolants, 85 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-15 21:11:24,185 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request...