/usr/bin/java -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerCInline.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf -i ../sv-benchmarks/c/ldv-linux-3.7.3/main0_drivers-vhost-tcm_vhost-ko--32_7a--linux-3.7.3.i -------------------------------------------------------------------------------- This is Ultimate 0.2.2-dev-05d3305-m [2022-10-16 13:28:15,547 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-10-16 13:28:15,549 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-10-16 13:28:15,584 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-10-16 13:28:15,584 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-10-16 13:28:15,586 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-10-16 13:28:15,587 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-10-16 13:28:15,615 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-10-16 13:28:15,618 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-10-16 13:28:15,624 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-10-16 13:28:15,625 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-10-16 13:28:15,628 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-10-16 13:28:15,628 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-10-16 13:28:15,631 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-10-16 13:28:15,633 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-10-16 13:28:15,638 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-10-16 13:28:15,640 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-10-16 13:28:15,642 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-10-16 13:28:15,645 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-10-16 13:28:15,652 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-10-16 13:28:15,656 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-10-16 13:28:15,657 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-10-16 13:28:15,659 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-10-16 13:28:15,662 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-10-16 13:28:15,671 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-10-16 13:28:15,672 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-10-16 13:28:15,672 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-10-16 13:28:15,674 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-10-16 13:28:15,675 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-10-16 13:28:15,676 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-10-16 13:28:15,677 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-10-16 13:28:15,677 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-10-16 13:28:15,679 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-10-16 13:28:15,680 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-10-16 13:28:15,682 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-10-16 13:28:15,682 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-10-16 13:28:15,683 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-10-16 13:28:15,683 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-10-16 13:28:15,683 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-10-16 13:28:15,684 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-10-16 13:28:15,685 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-10-16 13:28:15,686 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Overflow-32bit-Automizer_Default.epf [2022-10-16 13:28:15,745 INFO L113 SettingsManager]: Loading preferences was successful [2022-10-16 13:28:15,746 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-10-16 13:28:15,746 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-10-16 13:28:15,747 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-10-16 13:28:15,748 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-10-16 13:28:15,748 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-10-16 13:28:15,751 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-10-16 13:28:15,751 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-10-16 13:28:15,752 INFO L138 SettingsManager]: * Use SBE=true [2022-10-16 13:28:15,752 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-10-16 13:28:15,753 INFO L138 SettingsManager]: * sizeof long=4 [2022-10-16 13:28:15,753 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-10-16 13:28:15,753 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-10-16 13:28:15,754 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-10-16 13:28:15,754 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-10-16 13:28:15,754 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-10-16 13:28:15,754 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-10-16 13:28:15,755 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-10-16 13:28:15,755 INFO L138 SettingsManager]: * Check absence of signed integer overflows=true [2022-10-16 13:28:15,755 INFO L138 SettingsManager]: * sizeof long double=12 [2022-10-16 13:28:15,755 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-10-16 13:28:15,755 INFO L138 SettingsManager]: * Use constant arrays=true [2022-10-16 13:28:15,756 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-10-16 13:28:15,756 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-10-16 13:28:15,756 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-10-16 13:28:15,756 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-10-16 13:28:15,756 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:28:15,757 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-10-16 13:28:15,757 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-10-16 13:28:15,757 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-10-16 13:28:15,757 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-10-16 13:28:15,757 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-10-16 13:28:15,758 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-10-16 13:28:15,758 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release [2022-10-16 13:28:16,174 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-10-16 13:28:16,204 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-10-16 13:28:16,208 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-10-16 13:28:16,209 INFO L271 PluginConnector]: Initializing CDTParser... [2022-10-16 13:28:16,211 INFO L275 PluginConnector]: CDTParser initialized [2022-10-16 13:28:16,213 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-linux-3.7.3/main0_drivers-vhost-tcm_vhost-ko--32_7a--linux-3.7.3.i [2022-10-16 13:28:16,305 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5346fb7cd/e9f0f802d2514d5b81ad9838f1f6ba68/FLAGd514d8aa0 [2022-10-16 13:28:17,712 INFO L306 CDTParser]: Found 1 translation units. [2022-10-16 13:28:17,713 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main0_drivers-vhost-tcm_vhost-ko--32_7a--linux-3.7.3.i [2022-10-16 13:28:17,791 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5346fb7cd/e9f0f802d2514d5b81ad9838f1f6ba68/FLAGd514d8aa0 [2022-10-16 13:28:17,889 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/5346fb7cd/e9f0f802d2514d5b81ad9838f1f6ba68 [2022-10-16 13:28:17,895 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-10-16 13:28:17,901 INFO L131 ToolchainWalker]: Walking toolchain with 5 elements. [2022-10-16 13:28:17,906 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-10-16 13:28:17,907 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-10-16 13:28:17,916 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-10-16 13:28:17,917 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:28:17" (1/1) ... [2022-10-16 13:28:17,919 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@b19bf7a and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:17, skipping insertion in model container [2022-10-16 13:28:17,919 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.10 01:28:17" (1/1) ... [2022-10-16 13:28:17,929 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-10-16 13:28:18,336 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-10-16 13:28:22,076 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main0_drivers-vhost-tcm_vhost-ko--32_7a--linux-3.7.3.i[462796,462809] [2022-10-16 13:28:22,315 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:28:22,350 INFO L203 MainTranslator]: Completed pre-run [2022-10-16 13:28:23,012 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-linux-3.7.3/main0_drivers-vhost-tcm_vhost-ko--32_7a--linux-3.7.3.i[462796,462809] [2022-10-16 13:28:23,035 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-10-16 13:28:23,297 INFO L208 MainTranslator]: Completed translation [2022-10-16 13:28:23,299 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23 WrapperNode [2022-10-16 13:28:23,299 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-10-16 13:28:23,301 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-10-16 13:28:23,301 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-10-16 13:28:23,301 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-10-16 13:28:23,310 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:23,442 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:23,744 INFO L138 Inliner]: procedures = 445, calls = 3482, calls flagged for inlining = 226, calls inlined = 196, statements flattened = 7876 [2022-10-16 13:28:23,745 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-10-16 13:28:23,746 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-10-16 13:28:23,746 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-10-16 13:28:23,746 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-10-16 13:28:23,759 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:23,759 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:23,801 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:23,802 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:24,141 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:24,225 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:24,280 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:24,320 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:24,389 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-10-16 13:28:24,391 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-10-16 13:28:24,391 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-10-16 13:28:24,391 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-10-16 13:28:24,392 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (1/1) ... [2022-10-16 13:28:24,405 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-10-16 13:28:24,418 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:28:24,435 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-10-16 13:28:24,453 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-10-16 13:28:24,575 INFO L130 BoogieDeclarations]: Found specification of procedure vq_access_ok [2022-10-16 13:28:24,576 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_access_ok [2022-10-16 13:28:24,576 INFO L130 BoogieDeclarations]: Found specification of procedure wake_up_process [2022-10-16 13:28:24,576 INFO L138 BoogieDeclarations]: Found implementation of procedure wake_up_process [2022-10-16 13:28:24,576 INFO L130 BoogieDeclarations]: Found specification of procedure debug_lockdep_rcu_enabled [2022-10-16 13:28:24,576 INFO L138 BoogieDeclarations]: Found implementation of procedure debug_lockdep_rcu_enabled [2022-10-16 13:28:24,576 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-10-16 13:28:24,576 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-10-16 13:28:24,577 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2022-10-16 13:28:24,577 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_release_fabric_acl [2022-10-16 13:28:24,577 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_release_fabric_acl [2022-10-16 13:28:24,577 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-10-16 13:28:24,577 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-10-16 13:28:24,577 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_access_ok [2022-10-16 13:28:24,577 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_access_ok [2022-10-16 13:28:24,577 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_close_session [2022-10-16 13:28:24,578 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_close_session [2022-10-16 13:28:24,578 INFO L130 BoogieDeclarations]: Found specification of procedure strstr [2022-10-16 13:28:24,578 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_queue [2022-10-16 13:28:24,578 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_queue [2022-10-16 13:28:24,579 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-10-16 13:28:24,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_tcm_vhost_mutex [2022-10-16 13:28:24,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_tcm_vhost_mutex [2022-10-16 13:28:24,579 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-10-16 13:28:24,579 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-10-16 13:28:24,579 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2022-10-16 13:28:24,579 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2022-10-16 13:28:24,580 INFO L130 BoogieDeclarations]: Found specification of procedure fput [2022-10-16 13:28:24,580 INFO L138 BoogieDeclarations]: Found implementation of procedure fput [2022-10-16 13:28:24,580 INFO L130 BoogieDeclarations]: Found specification of procedure next_desc [2022-10-16 13:28:24,580 INFO L138 BoogieDeclarations]: Found implementation of procedure next_desc [2022-10-16 13:28:24,580 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_drop_tpg [2022-10-16 13:28:24,580 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_drop_tpg [2022-10-16 13:28:24,580 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_bh [2022-10-16 13:28:24,580 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_bh [2022-10-16 13:28:24,581 INFO L130 BoogieDeclarations]: Found specification of procedure schedule [2022-10-16 13:28:24,581 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule [2022-10-16 13:28:24,581 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_open [2022-10-16 13:28:24,581 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_open [2022-10-16 13:28:24,581 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2022-10-16 13:28:24,581 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2022-10-16 13:28:24,581 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2022-10-16 13:28:24,581 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_has_feature [2022-10-16 13:28:24,582 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_has_feature [2022-10-16 13:28:24,582 INFO L130 BoogieDeclarations]: Found specification of procedure sg_page [2022-10-16 13:28:24,582 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_page [2022-10-16 13:28:24,582 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-10-16 13:28:24,582 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-10-16 13:28:24,582 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2022-10-16 13:28:24,583 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-10-16 13:28:24,583 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2022-10-16 13:28:24,584 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2022-10-16 13:28:24,584 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_init [2022-10-16 13:28:24,584 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_init [2022-10-16 13:28:24,584 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2022-10-16 13:28:24,585 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-10-16 13:28:24,585 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-10-16 13:28:24,585 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_complete_cmd [2022-10-16 13:28:24,586 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_complete_cmd [2022-10-16 13:28:24,586 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2022-10-16 13:28:24,586 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2022-10-16 13:28:24,586 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_mutex [2022-10-16 13:28:24,586 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_mutex [2022-10-16 13:28:24,587 INFO L130 BoogieDeclarations]: Found specification of procedure translate_desc [2022-10-16 13:28:24,587 INFO L138 BoogieDeclarations]: Found implementation of procedure translate_desc [2022-10-16 13:28:24,587 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_put [2022-10-16 13:28:24,587 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_put [2022-10-16 13:28:24,588 INFO L130 BoogieDeclarations]: Found specification of procedure kref_put [2022-10-16 13:28:24,588 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_put [2022-10-16 13:28:24,589 INFO L130 BoogieDeclarations]: Found specification of procedure sas_get_pr_transport_id [2022-10-16 13:28:24,589 INFO L138 BoogieDeclarations]: Found implementation of procedure sas_get_pr_transport_id [2022-10-16 13:28:24,589 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_tv_tpg_mutex [2022-10-16 13:28:24,590 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_tv_tpg_mutex [2022-10-16 13:28:24,590 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-10-16 13:28:24,590 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-10-16 13:28:24,591 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-10-16 13:28:24,591 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-10-16 13:28:24,591 INFO L130 BoogieDeclarations]: Found specification of procedure kthread_stop [2022-10-16 13:28:24,591 INFO L138 BoogieDeclarations]: Found implementation of procedure kthread_stop [2022-10-16 13:28:24,591 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:28:24,591 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2022-10-16 13:28:24,592 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2022-10-16 13:28:24,592 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2022-10-16 13:28:24,592 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_seq_done [2022-10-16 13:28:24,592 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_seq_done [2022-10-16 13:28:24,592 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_disable_notify [2022-10-16 13:28:24,592 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_disable_notify [2022-10-16 13:28:24,593 INFO L130 BoogieDeclarations]: Found specification of procedure warn_slowpath_null [2022-10-16 13:28:24,593 INFO L138 BoogieDeclarations]: Found implementation of procedure warn_slowpath_null [2022-10-16 13:28:24,594 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_update_used_flags [2022-10-16 13:28:24,594 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_update_used_flags [2022-10-16 13:28:24,594 INFO L130 BoogieDeclarations]: Found specification of procedure __copy_from_user [2022-10-16 13:28:24,594 INFO L138 BoogieDeclarations]: Found implementation of procedure __copy_from_user [2022-10-16 13:28:24,595 INFO L130 BoogieDeclarations]: Found specification of procedure lock_is_held [2022-10-16 13:28:24,595 INFO L138 BoogieDeclarations]: Found implementation of procedure lock_is_held [2022-10-16 13:28:24,596 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_mutex [2022-10-16 13:28:24,596 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_mutex [2022-10-16 13:28:24,596 INFO L130 BoogieDeclarations]: Found specification of procedure log_access_ok [2022-10-16 13:28:24,597 INFO L138 BoogieDeclarations]: Found implementation of procedure log_access_ok [2022-10-16 13:28:24,597 INFO L130 BoogieDeclarations]: Found specification of procedure __init_waitqueue_head [2022-10-16 13:28:24,597 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_waitqueue_head [2022-10-16 13:28:24,597 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_alloc_fabric_acl [2022-10-16 13:28:24,597 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_alloc_fabric_acl [2022-10-16 13:28:24,597 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_tcm_vhost_mutex [2022-10-16 13:28:24,597 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_tcm_vhost_mutex [2022-10-16 13:28:24,597 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_ioctl [2022-10-16 13:28:24,598 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_ioctl [2022-10-16 13:28:24,598 INFO L130 BoogieDeclarations]: Found specification of procedure finish_wait [2022-10-16 13:28:24,598 INFO L138 BoogieDeclarations]: Found implementation of procedure finish_wait [2022-10-16 13:28:24,598 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-10-16 13:28:24,598 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-10-16 13:28:24,599 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_drop_tport [2022-10-16 13:28:24,599 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_drop_tport [2022-10-16 13:28:24,599 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_bh [2022-10-16 13:28:24,599 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_bh [2022-10-16 13:28:24,599 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2022-10-16 13:28:24,599 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2022-10-16 13:28:24,599 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_free_iovecs [2022-10-16 13:28:24,599 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_free_iovecs [2022-10-16 13:28:24,600 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2022-10-16 13:28:24,600 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_work_flush [2022-10-16 13:28:24,600 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_work_flush [2022-10-16 13:28:24,602 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2022-10-16 13:28:24,603 INFO L130 BoogieDeclarations]: Found specification of procedure log_write [2022-10-16 13:28:24,606 INFO L138 BoogieDeclarations]: Found implementation of procedure log_write [2022-10-16 13:28:24,611 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-10-16 13:28:24,611 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-10-16 13:28:24,611 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_vq_reset [2022-10-16 13:28:24,611 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_vq_reset [2022-10-16 13:28:24,611 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2022-10-16 13:28:24,611 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2022-10-16 13:28:24,612 INFO L130 BoogieDeclarations]: Found specification of procedure vq_log_access_ok [2022-10-16 13:28:24,612 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_log_access_ok [2022-10-16 13:28:24,612 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2022-10-16 13:28:24,613 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2022-10-16 13:28:24,613 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-10-16 13:28:24,613 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-10-16 13:28:24,613 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2022-10-16 13:28:24,613 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2022-10-16 13:28:24,613 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_queue [2022-10-16 13:28:24,613 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_queue [2022-10-16 13:28:24,613 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock [2022-10-16 13:28:24,614 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock [2022-10-16 13:28:24,614 INFO L130 BoogieDeclarations]: Found specification of procedure ERR_PTR [2022-10-16 13:28:24,614 INFO L138 BoogieDeclarations]: Found implementation of procedure ERR_PTR [2022-10-16 13:28:24,614 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_fget [2022-10-16 13:28:24,614 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_fget [2022-10-16 13:28:24,614 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-10-16 13:28:24,614 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-10-16 13:28:24,614 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-10-16 13:28:24,615 INFO L130 BoogieDeclarations]: Found specification of procedure vq_memory_access_ok [2022-10-16 13:28:24,615 INFO L138 BoogieDeclarations]: Found implementation of procedure vq_memory_access_ok [2022-10-16 13:28:24,615 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-10-16 13:28:24,615 INFO L130 BoogieDeclarations]: Found specification of procedure put_page [2022-10-16 13:28:24,615 INFO L138 BoogieDeclarations]: Found implementation of procedure put_page [2022-10-16 13:28:24,615 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_release_cmd [2022-10-16 13:28:24,615 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_release_cmd [2022-10-16 13:28:24,615 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_set_default_node_attrs [2022-10-16 13:28:24,615 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_set_default_node_attrs [2022-10-16 13:28:24,616 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_drop_nexus [2022-10-16 13:28:24,616 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_drop_nexus [2022-10-16 13:28:24,616 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-10-16 13:28:24,616 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_dev_cleanup [2022-10-16 13:28:24,616 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_dev_cleanup [2022-10-16 13:28:24,616 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2022-10-16 13:28:24,616 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2022-10-16 13:28:24,616 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_tv_tpg_mutex [2022-10-16 13:28:24,617 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_tv_tpg_mutex [2022-10-16 13:28:24,617 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2022-10-16 13:28:24,617 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2022-10-16 13:28:24,617 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-10-16 13:28:24,617 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-10-16 13:28:24,617 INFO L130 BoogieDeclarations]: Found specification of procedure sas_get_fabric_proto_ident [2022-10-16 13:28:24,617 INFO L138 BoogieDeclarations]: Found implementation of procedure sas_get_fabric_proto_ident [2022-10-16 13:28:24,618 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2022-10-16 13:28:24,618 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2022-10-16 13:28:24,618 INFO L130 BoogieDeclarations]: Found specification of procedure get_user_pages_fast [2022-10-16 13:28:24,618 INFO L138 BoogieDeclarations]: Found implementation of procedure get_user_pages_fast [2022-10-16 13:28:24,618 INFO L130 BoogieDeclarations]: Found specification of procedure transport_generic_free_cmd [2022-10-16 13:28:24,618 INFO L138 BoogieDeclarations]: Found implementation of procedure transport_generic_free_cmd [2022-10-16 13:28:24,618 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_deregister [2022-10-16 13:28:24,618 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_deregister [2022-10-16 13:28:24,619 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2022-10-16 13:28:24,619 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2022-10-16 13:28:24,619 INFO L130 BoogieDeclarations]: Found specification of procedure __rcu_read_lock [2022-10-16 13:28:24,619 INFO L138 BoogieDeclarations]: Found implementation of procedure __rcu_read_lock [2022-10-16 13:28:24,619 INFO L130 BoogieDeclarations]: Found specification of procedure scsi_command_size [2022-10-16 13:28:24,619 INFO L138 BoogieDeclarations]: Found implementation of procedure scsi_command_size [2022-10-16 13:28:24,619 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_dump_proto_id [2022-10-16 13:28:24,621 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_dump_proto_id [2022-10-16 13:28:24,621 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_ctx_fileget [2022-10-16 13:28:24,622 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_ctx_fileget [2022-10-16 13:28:24,622 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-10-16 13:28:24,622 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-10-16 13:28:24,622 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-10-16 13:28:24,622 INFO L130 BoogieDeclarations]: Found specification of procedure __rcu_read_unlock [2022-10-16 13:28:24,622 INFO L138 BoogieDeclarations]: Found implementation of procedure __rcu_read_unlock [2022-10-16 13:28:24,622 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_clear_endpoint [2022-10-16 13:28:24,622 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_clear_endpoint [2022-10-16 13:28:24,622 INFO L130 BoogieDeclarations]: Found specification of procedure mmput [2022-10-16 13:28:24,623 INFO L138 BoogieDeclarations]: Found implementation of procedure mmput [2022-10-16 13:28:24,623 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2022-10-16 13:28:24,623 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2022-10-16 13:28:24,623 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-10-16 13:28:24,623 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-10-16 13:28:24,623 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_flush_vq [2022-10-16 13:28:24,623 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_flush_vq [2022-10-16 13:28:24,623 INFO L130 BoogieDeclarations]: Found specification of procedure copy_user_generic [2022-10-16 13:28:24,623 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_user_generic [2022-10-16 13:28:24,624 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_is_cpu_idle [2022-10-16 13:28:24,624 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_is_cpu_idle [2022-10-16 13:28:24,624 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2022-10-16 13:28:24,624 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2022-10-16 13:28:24,624 INFO L130 BoogieDeclarations]: Found specification of procedure sas_parse_pr_out_transport_id [2022-10-16 13:28:24,624 INFO L138 BoogieDeclarations]: Found implementation of procedure sas_parse_pr_out_transport_id [2022-10-16 13:28:24,624 INFO L130 BoogieDeclarations]: Found specification of procedure eventfd_signal [2022-10-16 13:28:24,624 INFO L138 BoogieDeclarations]: Found implementation of procedure eventfd_signal [2022-10-16 13:28:24,624 INFO L130 BoogieDeclarations]: Found specification of procedure utsname [2022-10-16 13:28:24,625 INFO L138 BoogieDeclarations]: Found implementation of procedure utsname [2022-10-16 13:28:24,625 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_stop [2022-10-16 13:28:24,625 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_stop [2022-10-16 13:28:24,625 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_rcu_suspicious [2022-10-16 13:28:24,625 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_rcu_suspicious [2022-10-16 13:28:24,625 INFO L130 BoogieDeclarations]: Found specification of procedure memory_access_ok [2022-10-16 13:28:24,625 INFO L138 BoogieDeclarations]: Found implementation of procedure memory_access_ok [2022-10-16 13:28:24,625 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-10-16 13:28:24,625 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-10-16 13:28:24,626 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_add_used [2022-10-16 13:28:24,626 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_add_used [2022-10-16 13:28:24,626 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-10-16 13:28:24,626 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-10-16 13:28:24,626 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2022-10-16 13:28:24,626 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2022-10-16 13:28:24,626 INFO L130 BoogieDeclarations]: Found specification of procedure prepare_to_wait [2022-10-16 13:28:24,626 INFO L138 BoogieDeclarations]: Found implementation of procedure prepare_to_wait [2022-10-16 13:28:24,626 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_drop_nodeacl [2022-10-16 13:28:24,627 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_drop_nodeacl [2022-10-16 13:28:24,627 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_poll_flush [2022-10-16 13:28:24,627 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_poll_flush [2022-10-16 13:28:24,627 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_scsi_release [2022-10-16 13:28:24,627 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_scsi_release [2022-10-16 13:28:24,627 INFO L130 BoogieDeclarations]: Found specification of procedure vhost_signal [2022-10-16 13:28:24,627 INFO L138 BoogieDeclarations]: Found implementation of procedure vhost_signal [2022-10-16 13:28:24,627 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-10-16 13:28:24,627 INFO L130 BoogieDeclarations]: Found specification of procedure sas_get_pr_transport_id_len [2022-10-16 13:28:24,628 INFO L138 BoogieDeclarations]: Found implementation of procedure sas_get_pr_transport_id_len [2022-10-16 13:28:24,628 INFO L130 BoogieDeclarations]: Found specification of procedure tcm_vhost_port_link [2022-10-16 13:28:24,628 INFO L138 BoogieDeclarations]: Found implementation of procedure tcm_vhost_port_link [2022-10-16 13:28:25,633 INFO L235 CfgBuilder]: Building ICFG [2022-10-16 13:28:25,638 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-10-16 13:28:32,019 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7455: assume #t~switch210;#res := ~ret~1; [2022-10-16 13:28:32,020 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7455: assume !#t~switch210;#t~switch210 := #t~switch210 || 4 == ~size; [2022-10-16 13:28:32,020 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7488: assume 0 != ~tmp___1~4;#res := ~ret~1; [2022-10-16 13:28:32,020 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7488: assume !(0 != ~tmp___1~4);#res := ~ret~1; [2022-10-16 13:28:32,020 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7449: havoc #t~switch210; [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7474: SUMMARY for call #t~ret211 := ldv__builtin_expect((if 0 != ~ret~1 then 1 else 0), 0); srcloc: null [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7470: assume #t~switch210; [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7470: assume !#t~switch210;#t~switch210 := #t~switch210 || 16 == ~size; [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7474-1: assume -2147483648 <= #t~ret211 && #t~ret211 <= 2147483647;~tmp___0~9 := #t~ret211;havoc #t~ret211; [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##1: assume #t~switch210;#res := ~ret~1; [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7497-1: ~tmp___2~3 := #t~ret213;havoc #t~ret213;#res := (if ~tmp___2~3 % 4294967296 % 4294967296 <= 2147483647 then ~tmp___2~3 % 4294967296 % 4294967296 else ~tmp___2~3 % 4294967296 % 4294967296 - 4294967296); [2022-10-16 13:28:32,021 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7497: SUMMARY for call #t~ret213 := copy_user_generic(~dst.base, ~dst.offset, ~src.base, ~src.offset, ~size); srcloc: null [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##2: assume !#t~switch210;#t~switch210 := #t~switch210 || 2 == ~size; [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7460: assume #t~switch210;#res := ~ret~1; [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7460: assume !#t~switch210;#t~switch210 := #t~switch210 || 8 == ~size; [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7487-1: assume -2147483648 <= #t~ret212 && #t~ret212 <= 2147483647;~tmp___1~4 := #t~ret212;havoc #t~ret212; [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7487: SUMMARY for call #t~ret212 := ldv__builtin_expect((if 0 != ~ret~1 then 1 else 0), 0); srcloc: null [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7483: assume #t~switch210; [2022-10-16 13:28:32,022 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7483: assume !#t~switch210;#t~switch210 := true; [2022-10-16 13:28:32,023 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7475: assume 0 != ~tmp___0~9;#res := ~ret~1; [2022-10-16 13:28:32,023 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7475: assume !(0 != ~tmp___0~9);#res := ~ret~1; [2022-10-16 13:28:32,023 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7496: assume #t~switch210; [2022-10-16 13:28:32,023 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7496: assume !#t~switch210; [2022-10-16 13:28:32,023 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7465: assume #t~switch210;#res := ~ret~1; [2022-10-16 13:28:32,023 INFO L769 $ProcedureCfgBuilder]: dead code at ProgramPoint L7465: assume !#t~switch210;#t~switch210 := #t~switch210 || 10 == ~size; [2022-10-16 13:28:37,529 INFO L276 CfgBuilder]: Performing block encoding [2022-10-16 13:28:37,554 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-10-16 13:28:37,555 INFO L300 CfgBuilder]: Removed 0 assume(true) statements. [2022-10-16 13:28:37,559 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:28:37 BoogieIcfgContainer [2022-10-16 13:28:37,560 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-10-16 13:28:37,562 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-10-16 13:28:37,562 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-10-16 13:28:37,566 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-10-16 13:28:37,566 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 16.10 01:28:17" (1/3) ... [2022-10-16 13:28:37,567 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@587a9dee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:28:37, skipping insertion in model container [2022-10-16 13:28:37,567 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.10 01:28:23" (2/3) ... [2022-10-16 13:28:37,568 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@587a9dee and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 16.10 01:28:37, skipping insertion in model container [2022-10-16 13:28:37,568 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.10 01:28:37" (3/3) ... [2022-10-16 13:28:37,569 INFO L112 eAbstractionObserver]: Analyzing ICFG main0_drivers-vhost-tcm_vhost-ko--32_7a--linux-3.7.3.i [2022-10-16 13:28:37,590 INFO L203 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-10-16 13:28:37,590 INFO L162 ceAbstractionStarter]: Applying trace abstraction to program that has 78 error locations. [2022-10-16 13:28:37,703 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-10-16 13:28:37,712 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@76dcfd65, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2022-10-16 13:28:37,712 INFO L358 AbstractCegarLoop]: Starting to check reachability of 78 error locations. [2022-10-16 13:28:37,728 INFO L276 IsEmpty]: Start isEmpty. Operand has 2609 states, 1774 states have (on average 1.379368658399098) internal successors, (2447), 1901 states have internal predecessors, (2447), 642 states have call successors, (642), 114 states have call predecessors, (642), 114 states have return successors, (642), 630 states have call predecessors, (642), 642 states have call successors, (642) [2022-10-16 13:28:37,753 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 46 [2022-10-16 13:28:37,753 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:28:37,754 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:28:37,755 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:28:37,761 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:28:37,761 INFO L85 PathProgramCache]: Analyzing trace with hash -851404959, now seen corresponding path program 1 times [2022-10-16 13:28:37,772 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:28:37,772 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1140266235] [2022-10-16 13:28:37,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:28:37,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:28:38,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:28:38,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2022-10-16 13:28:38,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-10-16 13:28:38,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:28:38,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:28:38,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:28:38,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:38,844 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-10-16 13:28:38,845 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:28:38,845 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1140266235] [2022-10-16 13:28:38,846 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1140266235] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:28:38,846 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:28:38,847 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:28:38,849 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1749240618] [2022-10-16 13:28:38,850 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:28:38,856 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-10-16 13:28:38,857 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:28:38,905 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-10-16 13:28:38,906 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:28:38,930 INFO L87 Difference]: Start difference. First operand has 2609 states, 1774 states have (on average 1.379368658399098) internal successors, (2447), 1901 states have internal predecessors, (2447), 642 states have call successors, (642), 114 states have call predecessors, (642), 114 states have return successors, (642), 630 states have call predecessors, (642), 642 states have call successors, (642) Second operand has 5 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:28:43,218 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:28:47,828 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:28:47,829 INFO L93 Difference]: Finished difference Result 5638 states and 8294 transitions. [2022-10-16 13:28:47,831 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-10-16 13:28:47,832 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) Word has length 45 [2022-10-16 13:28:47,833 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:28:47,876 INFO L225 Difference]: With dead ends: 5638 [2022-10-16 13:28:47,877 INFO L226 Difference]: Without dead ends: 3001 [2022-10-16 13:28:47,903 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 14 GetRequests, 11 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=8, Invalid=12, Unknown=0, NotChecked=0, Total=20 [2022-10-16 13:28:47,908 INFO L413 NwaCegarLoop]: 3591 mSDtfsCounter, 1570 mSDsluCounter, 4236 mSDsCounter, 0 mSdLazyCounter, 2365 mSolverCounterSat, 1635 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1795 SdHoareTripleChecker+Valid, 7827 SdHoareTripleChecker+Invalid, 4001 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1635 IncrementalHoareTripleChecker+Valid, 2365 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.2s IncrementalHoareTripleChecker+Time [2022-10-16 13:28:47,909 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1795 Valid, 7827 Invalid, 4001 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1635 Valid, 2365 Invalid, 1 Unknown, 0 Unchecked, 8.2s Time] [2022-10-16 13:28:47,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3001 states. [2022-10-16 13:28:48,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3001 to 2817. [2022-10-16 13:28:48,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2817 states, 1928 states have (on average 1.3594398340248963) internal successors, (2621), 2033 states have internal predecessors, (2621), 714 states have call successors, (714), 113 states have call predecessors, (714), 113 states have return successors, (714), 696 states have call predecessors, (714), 714 states have call successors, (714) [2022-10-16 13:28:48,241 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2817 states to 2817 states and 4049 transitions. [2022-10-16 13:28:48,245 INFO L78 Accepts]: Start accepts. Automaton has 2817 states and 4049 transitions. Word has length 45 [2022-10-16 13:28:48,246 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:28:48,246 INFO L495 AbstractCegarLoop]: Abstraction has 2817 states and 4049 transitions. [2022-10-16 13:28:48,246 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 4 states have (on average 8.0) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (6), 3 states have call predecessors, (6), 1 states have return successors, (6), 2 states have call predecessors, (6), 2 states have call successors, (6) [2022-10-16 13:28:48,246 INFO L276 IsEmpty]: Start isEmpty. Operand 2817 states and 4049 transitions. [2022-10-16 13:28:48,254 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-10-16 13:28:48,254 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:28:48,255 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:28:48,255 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-10-16 13:28:48,255 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:28:48,256 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:28:48,256 INFO L85 PathProgramCache]: Analyzing trace with hash 1970523663, now seen corresponding path program 1 times [2022-10-16 13:28:48,256 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:28:48,257 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412702763] [2022-10-16 13:28:48,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:28:48,257 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:28:48,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:28:48,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-16 13:28:48,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:28:48,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:28:48,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,696 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-10-16 13:28:48,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:28:48,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:28:48,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:28:48,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:48,745 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-10-16 13:28:48,746 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:28:48,746 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412702763] [2022-10-16 13:28:48,746 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1412702763] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:28:48,747 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:28:48,747 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-10-16 13:28:48,747 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934469388] [2022-10-16 13:28:48,747 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:28:48,749 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-10-16 13:28:48,749 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:28:48,750 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-10-16 13:28:48,750 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:28:48,750 INFO L87 Difference]: Start difference. First operand 2817 states and 4049 transitions. Second operand has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 1 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:28:51,910 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:28:55,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:28:55,182 INFO L93 Difference]: Finished difference Result 5730 states and 8252 transitions. [2022-10-16 13:28:55,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-10-16 13:28:55,183 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 1 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) Word has length 65 [2022-10-16 13:28:55,184 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:28:55,210 INFO L225 Difference]: With dead ends: 5730 [2022-10-16 13:28:55,210 INFO L226 Difference]: Without dead ends: 2959 [2022-10-16 13:28:55,227 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 19 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-10-16 13:28:55,229 INFO L413 NwaCegarLoop]: 3413 mSDtfsCounter, 1058 mSDsluCounter, 3519 mSDsCounter, 0 mSdLazyCounter, 2233 mSolverCounterSat, 662 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1293 SdHoareTripleChecker+Valid, 6932 SdHoareTripleChecker+Invalid, 2896 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 662 IncrementalHoareTripleChecker+Valid, 2233 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:28:55,230 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1293 Valid, 6932 Invalid, 2896 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [662 Valid, 2233 Invalid, 1 Unknown, 0 Unchecked, 6.0s Time] [2022-10-16 13:28:55,236 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2959 states. [2022-10-16 13:28:55,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2959 to 2818. [2022-10-16 13:28:55,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2818 states, 1929 states have (on average 1.359253499222395) internal successors, (2622), 2034 states have internal predecessors, (2622), 714 states have call successors, (714), 113 states have call predecessors, (714), 113 states have return successors, (714), 696 states have call predecessors, (714), 714 states have call successors, (714) [2022-10-16 13:28:55,403 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2818 states to 2818 states and 4050 transitions. [2022-10-16 13:28:55,404 INFO L78 Accepts]: Start accepts. Automaton has 2818 states and 4050 transitions. Word has length 65 [2022-10-16 13:28:55,405 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:28:55,405 INFO L495 AbstractCegarLoop]: Abstraction has 2818 states and 4050 transitions. [2022-10-16 13:28:55,406 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.5) internal successors, (46), 3 states have internal predecessors, (46), 1 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 1 states have call predecessors, (8), 1 states have call successors, (8) [2022-10-16 13:28:55,406 INFO L276 IsEmpty]: Start isEmpty. Operand 2818 states and 4050 transitions. [2022-10-16 13:28:55,414 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 66 [2022-10-16 13:28:55,415 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:28:55,415 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:28:55,415 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-10-16 13:28:55,416 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:28:55,416 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:28:55,416 INFO L85 PathProgramCache]: Analyzing trace with hash 1970525585, now seen corresponding path program 1 times [2022-10-16 13:28:55,416 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:28:55,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1768896826] [2022-10-16 13:28:55,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:28:55,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:28:55,682 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:28:56,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 17 [2022-10-16 13:28:56,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,065 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:28:56,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:28:56,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-10-16 13:28:56,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:28:56,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 48 [2022-10-16 13:28:56,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 54 [2022-10-16 13:28:56,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:28:56,172 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-10-16 13:28:56,173 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:28:56,173 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1768896826] [2022-10-16 13:28:56,174 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1768896826] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:28:56,179 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:28:56,179 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:28:56,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [673218828] [2022-10-16 13:28:56,184 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:28:56,186 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:28:56,186 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:28:56,187 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:28:56,187 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:28:56,187 INFO L87 Difference]: Start difference. First operand 2818 states and 4050 transitions. Second operand has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (10), 3 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:29:00,185 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:02,215 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:04,252 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:09,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:29:09,669 INFO L93 Difference]: Finished difference Result 5734 states and 8247 transitions. [2022-10-16 13:29:09,669 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:29:09,670 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (10), 3 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 65 [2022-10-16 13:29:09,670 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:29:09,696 INFO L225 Difference]: With dead ends: 5734 [2022-10-16 13:29:09,696 INFO L226 Difference]: Without dead ends: 2959 [2022-10-16 13:29:09,715 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:29:09,716 INFO L413 NwaCegarLoop]: 3412 mSDtfsCounter, 1063 mSDsluCounter, 7656 mSDsCounter, 0 mSdLazyCounter, 5400 mSolverCounterSat, 663 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1298 SdHoareTripleChecker+Valid, 11068 SdHoareTripleChecker+Invalid, 6066 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 663 IncrementalHoareTripleChecker+Valid, 5400 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.1s IncrementalHoareTripleChecker+Time [2022-10-16 13:29:09,717 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1298 Valid, 11068 Invalid, 6066 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [663 Valid, 5400 Invalid, 3 Unknown, 0 Unchecked, 13.1s Time] [2022-10-16 13:29:09,724 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2959 states. [2022-10-16 13:29:09,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2959 to 2818. [2022-10-16 13:29:09,860 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2818 states, 1929 states have (on average 1.3587350959046138) internal successors, (2621), 2033 states have internal predecessors, (2621), 714 states have call successors, (714), 113 states have call predecessors, (714), 113 states have return successors, (714), 696 states have call predecessors, (714), 714 states have call successors, (714) [2022-10-16 13:29:09,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2818 states to 2818 states and 4049 transitions. [2022-10-16 13:29:09,877 INFO L78 Accepts]: Start accepts. Automaton has 2818 states and 4049 transitions. Word has length 65 [2022-10-16 13:29:09,879 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:29:09,879 INFO L495 AbstractCegarLoop]: Abstraction has 2818 states and 4049 transitions. [2022-10-16 13:29:09,880 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.666666666666667) internal successors, (46), 5 states have internal predecessors, (46), 2 states have call successors, (10), 3 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-10-16 13:29:09,880 INFO L276 IsEmpty]: Start isEmpty. Operand 2818 states and 4049 transitions. [2022-10-16 13:29:09,884 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 73 [2022-10-16 13:29:09,884 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:29:09,885 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:29:09,885 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-10-16 13:29:09,886 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:29:09,886 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:29:09,886 INFO L85 PathProgramCache]: Analyzing trace with hash 1435667146, now seen corresponding path program 1 times [2022-10-16 13:29:09,889 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:29:09,889 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [122517641] [2022-10-16 13:29:09,889 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:29:09,892 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:29:10,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,414 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:29:10,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-16 13:29:10,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 24 [2022-10-16 13:29:10,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,445 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-10-16 13:29:10,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:10,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,472 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-10-16 13:29:10,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,483 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:29:10,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-10-16 13:29:10,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 61 [2022-10-16 13:29:10,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:10,521 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-10-16 13:29:10,521 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:29:10,521 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [122517641] [2022-10-16 13:29:10,521 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [122517641] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:29:10,522 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:29:10,522 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:29:10,523 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1372792655] [2022-10-16 13:29:10,523 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:29:10,523 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:29:10,524 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:29:10,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:29:10,524 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:29:10,524 INFO L87 Difference]: Start difference. First operand 2818 states and 4049 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (11), 3 states have call predecessors, (11), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-16 13:29:14,270 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:16,307 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:18,346 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:23,476 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:29:23,477 INFO L93 Difference]: Finished difference Result 5733 states and 8245 transitions. [2022-10-16 13:29:23,477 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-10-16 13:29:23,478 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (11), 3 states have call predecessors, (11), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) Word has length 72 [2022-10-16 13:29:23,478 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:29:23,501 INFO L225 Difference]: With dead ends: 5733 [2022-10-16 13:29:23,501 INFO L226 Difference]: Without dead ends: 2948 [2022-10-16 13:29:23,517 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 19 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:29:23,519 INFO L413 NwaCegarLoop]: 3411 mSDtfsCounter, 1064 mSDsluCounter, 7652 mSDsCounter, 0 mSdLazyCounter, 5394 mSolverCounterSat, 665 mSolverCounterUnsat, 3 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1300 SdHoareTripleChecker+Valid, 11063 SdHoareTripleChecker+Invalid, 6062 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 665 IncrementalHoareTripleChecker+Valid, 5394 IncrementalHoareTripleChecker+Invalid, 3 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.6s IncrementalHoareTripleChecker+Time [2022-10-16 13:29:23,519 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1300 Valid, 11063 Invalid, 6062 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [665 Valid, 5394 Invalid, 3 Unknown, 0 Unchecked, 12.6s Time] [2022-10-16 13:29:23,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2948 states. [2022-10-16 13:29:23,643 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2948 to 2807. [2022-10-16 13:29:23,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2807 states, 1922 states have (on average 1.3590010405827264) internal successors, (2612), 2026 states have internal predecessors, (2612), 712 states have call successors, (712), 111 states have call predecessors, (712), 111 states have return successors, (712), 694 states have call predecessors, (712), 712 states have call successors, (712) [2022-10-16 13:29:23,663 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2807 states to 2807 states and 4036 transitions. [2022-10-16 13:29:23,665 INFO L78 Accepts]: Start accepts. Automaton has 2807 states and 4036 transitions. Word has length 72 [2022-10-16 13:29:23,665 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:29:23,665 INFO L495 AbstractCegarLoop]: Abstraction has 2807 states and 4036 transitions. [2022-10-16 13:29:23,665 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 5 states have internal predecessors, (51), 3 states have call successors, (11), 3 states have call predecessors, (11), 1 states have return successors, (9), 3 states have call predecessors, (9), 3 states have call successors, (9) [2022-10-16 13:29:23,666 INFO L276 IsEmpty]: Start isEmpty. Operand 2807 states and 4036 transitions. [2022-10-16 13:29:23,669 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-10-16 13:29:23,670 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:29:23,670 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:29:23,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-10-16 13:29:23,670 INFO L420 AbstractCegarLoop]: === Iteration 5 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:29:23,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:29:23,671 INFO L85 PathProgramCache]: Analyzing trace with hash 1563863772, now seen corresponding path program 1 times [2022-10-16 13:29:23,671 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:29:23,671 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273907038] [2022-10-16 13:29:23,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:29:23,672 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:29:23,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,258 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:29:24,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-16 13:29:24,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 13:29:24,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:29:24,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,303 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:24,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 49 [2022-10-16 13:29:24,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 13:29:24,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:24,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-10-16 13:29:24,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:29:24,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-10-16 13:29:24,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:29:24,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:24,403 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 11 trivial. 0 not checked. [2022-10-16 13:29:24,403 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:29:24,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273907038] [2022-10-16 13:29:24,403 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273907038] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:29:24,404 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-10-16 13:29:24,404 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-10-16 13:29:24,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1159720219] [2022-10-16 13:29:24,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:29:24,406 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-10-16 13:29:24,406 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:29:24,407 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-10-16 13:29:24,407 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-10-16 13:29:24,408 INFO L87 Difference]: Start difference. First operand 2807 states and 4036 transitions. Second operand has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 13:29:28,277 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:30,323 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.05s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:36,878 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:29:36,878 INFO L93 Difference]: Finished difference Result 5836 states and 8425 transitions. [2022-10-16 13:29:36,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-10-16 13:29:36,879 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 99 [2022-10-16 13:29:36,879 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:29:36,900 INFO L225 Difference]: With dead ends: 5836 [2022-10-16 13:29:36,900 INFO L226 Difference]: Without dead ends: 3060 [2022-10-16 13:29:36,911 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 31 GetRequests, 25 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=39, Unknown=0, NotChecked=0, Total=56 [2022-10-16 13:29:36,912 INFO L413 NwaCegarLoop]: 3375 mSDtfsCounter, 1792 mSDsluCounter, 6700 mSDsCounter, 0 mSdLazyCounter, 5158 mSolverCounterSat, 1602 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1945 SdHoareTripleChecker+Valid, 10075 SdHoareTripleChecker+Invalid, 6762 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1602 IncrementalHoareTripleChecker+Valid, 5158 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.0s IncrementalHoareTripleChecker+Time [2022-10-16 13:29:36,912 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1945 Valid, 10075 Invalid, 6762 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1602 Valid, 5158 Invalid, 2 Unknown, 0 Unchecked, 12.0s Time] [2022-10-16 13:29:36,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3060 states. [2022-10-16 13:29:37,034 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3060 to 2807. [2022-10-16 13:29:37,041 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2807 states, 1922 states have (on average 1.358480749219563) internal successors, (2611), 2026 states have internal predecessors, (2611), 712 states have call successors, (712), 111 states have call predecessors, (712), 111 states have return successors, (712), 694 states have call predecessors, (712), 712 states have call successors, (712) [2022-10-16 13:29:37,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2807 states to 2807 states and 4035 transitions. [2022-10-16 13:29:37,056 INFO L78 Accepts]: Start accepts. Automaton has 2807 states and 4035 transitions. Word has length 99 [2022-10-16 13:29:37,056 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:29:37,057 INFO L495 AbstractCegarLoop]: Abstraction has 2807 states and 4035 transitions. [2022-10-16 13:29:37,057 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 11.333333333333334) internal successors, (68), 4 states have internal predecessors, (68), 2 states have call successors, (14), 4 states have call predecessors, (14), 1 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2022-10-16 13:29:37,057 INFO L276 IsEmpty]: Start isEmpty. Operand 2807 states and 4035 transitions. [2022-10-16 13:29:37,061 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 100 [2022-10-16 13:29:37,061 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:29:37,061 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:29:37,062 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-10-16 13:29:37,062 INFO L420 AbstractCegarLoop]: === Iteration 6 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:29:37,062 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:29:37,062 INFO L85 PathProgramCache]: Analyzing trace with hash 246041733, now seen corresponding path program 1 times [2022-10-16 13:29:37,063 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:29:37,063 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [269700363] [2022-10-16 13:29:37,063 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:29:37,063 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:29:37,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:29:37,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-16 13:29:37,584 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 13:29:37,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:29:37,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:37,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 36 [2022-10-16 13:29:37,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-10-16 13:29:37,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 58 [2022-10-16 13:29:37,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:37,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-10-16 13:29:37,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:29:37,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 82 [2022-10-16 13:29:37,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 88 [2022-10-16 13:29:37,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:37,932 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 2 proven. 2 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-10-16 13:29:37,932 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:29:37,932 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [269700363] [2022-10-16 13:29:37,932 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [269700363] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:29:37,933 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2050100936] [2022-10-16 13:29:37,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:29:37,933 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:29:37,933 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:29:37,939 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:29:37,963 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-10-16 13:29:38,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:38,852 INFO L263 TraceCheckSpWp]: Trace formula consists of 2768 conjuncts, 17 conjunts are in the unsatisfiable core [2022-10-16 13:29:38,865 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:29:38,965 INFO L134 CoverageAnalysis]: Checked inductivity of 11 backedges. 10 proven. 0 refuted. 0 times theorem prover too weak. 1 trivial. 0 not checked. [2022-10-16 13:29:38,966 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-10-16 13:29:38,966 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2050100936] provided 1 perfect and 0 imperfect interpolant sequences [2022-10-16 13:29:38,966 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-10-16 13:29:38,966 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [9] total 9 [2022-10-16 13:29:38,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1186572562] [2022-10-16 13:29:38,969 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-10-16 13:29:38,969 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-10-16 13:29:38,970 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:29:38,970 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-10-16 13:29:38,970 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:29:38,971 INFO L87 Difference]: Start difference. First operand 2807 states and 4035 transitions. Second operand has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 5 states have internal predecessors, (71), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:29:41,035 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.02s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:42,121 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:29:42,121 INFO L93 Difference]: Finished difference Result 5583 states and 8028 transitions. [2022-10-16 13:29:42,122 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-10-16 13:29:42,122 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 5 states have internal predecessors, (71), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) Word has length 99 [2022-10-16 13:29:42,123 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:29:42,145 INFO L225 Difference]: With dead ends: 5583 [2022-10-16 13:29:42,145 INFO L226 Difference]: Without dead ends: 2805 [2022-10-16 13:29:42,158 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 130 GetRequests, 121 SyntacticMatches, 2 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-10-16 13:29:42,159 INFO L413 NwaCegarLoop]: 3487 mSDtfsCounter, 0 mSDsluCounter, 17310 mSDsCounter, 0 mSdLazyCounter, 796 mSolverCounterSat, 0 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 20797 SdHoareTripleChecker+Invalid, 797 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 796 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.9s IncrementalHoareTripleChecker+Time [2022-10-16 13:29:42,160 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 20797 Invalid, 797 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 796 Invalid, 1 Unknown, 0 Unchecked, 2.9s Time] [2022-10-16 13:29:42,165 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2805 states. [2022-10-16 13:29:42,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2805 to 2805. [2022-10-16 13:29:42,287 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2805 states, 1921 states have (on average 1.3581467985424258) internal successors, (2609), 2025 states have internal predecessors, (2609), 711 states have call successors, (711), 111 states have call predecessors, (711), 111 states have return successors, (711), 693 states have call predecessors, (711), 711 states have call successors, (711) [2022-10-16 13:29:42,301 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2805 states to 2805 states and 4031 transitions. [2022-10-16 13:29:42,302 INFO L78 Accepts]: Start accepts. Automaton has 2805 states and 4031 transitions. Word has length 99 [2022-10-16 13:29:42,303 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:29:42,303 INFO L495 AbstractCegarLoop]: Abstraction has 2805 states and 4031 transitions. [2022-10-16 13:29:42,303 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 10.142857142857142) internal successors, (71), 5 states have internal predecessors, (71), 2 states have call successors, (15), 2 states have call predecessors, (15), 4 states have return successors, (13), 4 states have call predecessors, (13), 2 states have call successors, (13) [2022-10-16 13:29:42,303 INFO L276 IsEmpty]: Start isEmpty. Operand 2805 states and 4031 transitions. [2022-10-16 13:29:42,307 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 107 [2022-10-16 13:29:42,307 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:29:42,308 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:29:42,414 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-10-16 13:29:42,523 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable5 [2022-10-16 13:29:42,523 INFO L420 AbstractCegarLoop]: === Iteration 7 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:29:42,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:29:42,525 INFO L85 PathProgramCache]: Analyzing trace with hash -293782054, now seen corresponding path program 1 times [2022-10-16 13:29:42,525 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:29:42,525 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1006966078] [2022-10-16 13:29:42,525 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:29:42,526 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:29:43,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 3 [2022-10-16 13:29:45,110 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2022-10-16 13:29:45,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-10-16 13:29:45,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-10-16 13:29:45,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:45,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,167 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-10-16 13:29:45,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 56 [2022-10-16 13:29:45,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 65 [2022-10-16 13:29:45,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2022-10-16 13:29:45,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,298 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 4 [2022-10-16 13:29:45,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 10 [2022-10-16 13:29:45,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 89 [2022-10-16 13:29:45,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2022-10-16 13:29:45,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:45,339 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-10-16 13:29:45,340 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-10-16 13:29:45,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1006966078] [2022-10-16 13:29:45,340 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1006966078] provided 0 perfect and 1 imperfect interpolant sequences [2022-10-16 13:29:45,340 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1941474319] [2022-10-16 13:29:45,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:29:45,341 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-10-16 13:29:45,341 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-10-16 13:29:45,342 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-10-16 13:29:45,367 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-10-16 13:29:46,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-10-16 13:29:46,352 INFO L263 TraceCheckSpWp]: Trace formula consists of 3287 conjuncts, 35 conjunts are in the unsatisfiable core [2022-10-16 13:29:46,361 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-10-16 13:29:46,447 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 13 proven. 2 refuted. 0 times theorem prover too weak. 5 trivial. 0 not checked. [2022-10-16 13:29:46,448 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-10-16 13:29:46,641 INFO L134 CoverageAnalysis]: Checked inductivity of 20 backedges. 4 proven. 2 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-10-16 13:29:46,641 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1941474319] provided 0 perfect and 2 imperfect interpolant sequences [2022-10-16 13:29:46,642 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-10-16 13:29:46,642 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 9, 6] total 13 [2022-10-16 13:29:46,642 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [618547143] [2022-10-16 13:29:46,642 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-10-16 13:29:46,643 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-10-16 13:29:46,643 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-10-16 13:29:46,644 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-10-16 13:29:46,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=131, Unknown=0, NotChecked=0, Total=156 [2022-10-16 13:29:46,644 INFO L87 Difference]: Start difference. First operand 2805 states and 4031 transitions. Second operand has 13 states, 10 states have (on average 9.9) internal successors, (99), 9 states have internal predecessors, (99), 5 states have call successors, (26), 4 states have call predecessors, (26), 4 states have return successors, (22), 4 states have call predecessors, (22), 5 states have call successors, (22) [2022-10-16 13:29:52,569 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:54,602 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:56,642 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:29:58,676 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:30:00,714 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:30:02,757 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:30:04,789 WARN L539 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.03s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2022-10-16 13:30:17,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-10-16 13:30:17,091 INFO L93 Difference]: Finished difference Result 5847 states and 8437 transitions. [2022-10-16 13:30:17,091 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-10-16 13:30:17,092 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 10 states have (on average 9.9) internal successors, (99), 9 states have internal predecessors, (99), 5 states have call successors, (26), 4 states have call predecessors, (26), 4 states have return successors, (22), 4 states have call predecessors, (22), 5 states have call successors, (22) Word has length 106 [2022-10-16 13:30:17,092 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-10-16 13:30:17,114 INFO L225 Difference]: With dead ends: 5847 [2022-10-16 13:30:17,115 INFO L226 Difference]: Without dead ends: 3054 [2022-10-16 13:30:17,127 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 14 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=56, Invalid=286, Unknown=0, NotChecked=0, Total=342 [2022-10-16 13:30:17,128 INFO L413 NwaCegarLoop]: 3280 mSDtfsCounter, 2331 mSDsluCounter, 15805 mSDsCounter, 0 mSdLazyCounter, 13563 mSolverCounterSat, 1808 mSolverCounterUnsat, 7 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 27.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2488 SdHoareTripleChecker+Valid, 19085 SdHoareTripleChecker+Invalid, 15378 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 1808 IncrementalHoareTripleChecker+Valid, 13563 IncrementalHoareTripleChecker+Invalid, 7 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 29.8s IncrementalHoareTripleChecker+Time [2022-10-16 13:30:17,129 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2488 Valid, 19085 Invalid, 15378 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [1808 Valid, 13563 Invalid, 7 Unknown, 0 Unchecked, 29.8s Time] [2022-10-16 13:30:17,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3054 states. [2022-10-16 13:30:17,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3054 to 2801. [2022-10-16 13:30:17,270 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2801 states, 1919 states have (on average 1.3574778530484628) internal successors, (2605), 2023 states have internal predecessors, (2605), 709 states have call successors, (709), 111 states have call predecessors, (709), 111 states have return successors, (709), 691 states have call predecessors, (709), 709 states have call successors, (709) [2022-10-16 13:30:17,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2801 states to 2801 states and 4023 transitions. [2022-10-16 13:30:17,284 INFO L78 Accepts]: Start accepts. Automaton has 2801 states and 4023 transitions. Word has length 106 [2022-10-16 13:30:17,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-10-16 13:30:17,284 INFO L495 AbstractCegarLoop]: Abstraction has 2801 states and 4023 transitions. [2022-10-16 13:30:17,286 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 10 states have (on average 9.9) internal successors, (99), 9 states have internal predecessors, (99), 5 states have call successors, (26), 4 states have call predecessors, (26), 4 states have return successors, (22), 4 states have call predecessors, (22), 5 states have call successors, (22) [2022-10-16 13:30:17,286 INFO L276 IsEmpty]: Start isEmpty. Operand 2801 states and 4023 transitions. [2022-10-16 13:30:17,289 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 104 [2022-10-16 13:30:17,289 INFO L187 NwaCegarLoop]: Found error trace [2022-10-16 13:30:17,290 INFO L195 NwaCegarLoop]: trace histogram [4, 4, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:30:17,322 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-10-16 13:30:17,503 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable6 [2022-10-16 13:30:17,505 INFO L420 AbstractCegarLoop]: === Iteration 8 === Targeting vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW === [__rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW, __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW, scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (and 75 more)] === [2022-10-16 13:30:17,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-10-16 13:30:17,506 INFO L85 PathProgramCache]: Analyzing trace with hash -335249527, now seen corresponding path program 1 times [2022-10-16 13:30:17,506 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-10-16 13:30:17,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105664624] [2022-10-16 13:30:17,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-10-16 13:30:17,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-10-16 13:30:19,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:30:19,697 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-10-16 13:30:21,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-10-16 13:30:21,651 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-10-16 13:30:21,651 INFO L359 BasicCegarLoop]: Counterexample is feasible [2022-10-16 13:30:21,652 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location vhost_scsi_clear_endpointErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (77 of 78 remaining) [2022-10-16 13:30:21,655 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __rcu_read_lockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (76 of 78 remaining) [2022-10-16 13:30:21,655 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __rcu_read_lockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (75 of 78 remaining) [2022-10-16 13:30:21,655 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location scsi_command_sizeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (74 of 78 remaining) [2022-10-16 13:30:21,655 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location scsi_command_sizeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (73 of 78 remaining) [2022-10-16 13:30:21,655 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (72 of 78 remaining) [2022-10-16 13:30:21,656 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (71 of 78 remaining) [2022-10-16 13:30:21,656 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (70 of 78 remaining) [2022-10-16 13:30:21,656 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_work_flushErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (69 of 78 remaining) [2022-10-16 13:30:21,656 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location log_writeErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (68 of 78 remaining) [2022-10-16 13:30:21,656 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location log_writeErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (67 of 78 remaining) [2022-10-16 13:30:21,657 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location log_writeErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (66 of 78 remaining) [2022-10-16 13:30:21,657 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location log_writeErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (65 of 78 remaining) [2022-10-16 13:30:21,657 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __rcu_read_unlockErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (64 of 78 remaining) [2022-10-16 13:30:21,657 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location __rcu_read_unlockErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (63 of 78 remaining) [2022-10-16 13:30:21,657 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location translate_descErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (62 of 78 remaining) [2022-10-16 13:30:21,658 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location translate_descErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (61 of 78 remaining) [2022-10-16 13:30:21,658 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location translate_descErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (60 of 78 remaining) [2022-10-16 13:30:21,658 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location translate_descErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (59 of 78 remaining) [2022-10-16 13:30:21,658 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_clear_endpointErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (58 of 78 remaining) [2022-10-16 13:30:21,659 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_clear_endpointErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (57 of 78 remaining) [2022-10-16 13:30:21,659 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_clear_endpointErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (56 of 78 remaining) [2022-10-16 13:30:21,659 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (55 of 78 remaining) [2022-10-16 13:30:21,659 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (54 of 78 remaining) [2022-10-16 13:30:21,659 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (53 of 78 remaining) [2022-10-16 13:30:21,659 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (52 of 78 remaining) [2022-10-16 13:30:21,660 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (51 of 78 remaining) [2022-10-16 13:30:21,660 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (50 of 78 remaining) [2022-10-16 13:30:21,660 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (49 of 78 remaining) [2022-10-16 13:30:21,660 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ##fun~$Pointer$~TO~VOIDErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (48 of 78 remaining) [2022-10-16 13:30:21,660 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location memory_access_okErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (47 of 78 remaining) [2022-10-16 13:30:21,661 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location memory_access_okErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (46 of 78 remaining) [2022-10-16 13:30:21,661 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vq_memory_access_okErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (45 of 78 remaining) [2022-10-16 13:30:21,661 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vq_memory_access_okErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (44 of 78 remaining) [2022-10-16 13:30:21,661 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_add_usedErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (43 of 78 remaining) [2022-10-16 13:30:21,661 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_add_usedErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (42 of 78 remaining) [2022-10-16 13:30:21,662 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_add_usedErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (41 of 78 remaining) [2022-10-16 13:30:21,662 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_add_usedErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (40 of 78 remaining) [2022-10-16 13:30:21,662 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (39 of 78 remaining) [2022-10-16 13:30:21,662 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (38 of 78 remaining) [2022-10-16 13:30:21,662 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (37 of 78 remaining) [2022-10-16 13:30:21,662 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (36 of 78 remaining) [2022-10-16 13:30:21,663 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (35 of 78 remaining) [2022-10-16 13:30:21,663 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (34 of 78 remaining) [2022-10-16 13:30:21,663 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (33 of 78 remaining) [2022-10-16 13:30:21,663 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_dev_cleanupErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (32 of 78 remaining) [2022-10-16 13:30:21,663 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_update_used_flagsErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (31 of 78 remaining) [2022-10-16 13:30:21,664 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_update_used_flagsErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (30 of 78 remaining) [2022-10-16 13:30:21,664 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_signalErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (29 of 78 remaining) [2022-10-16 13:30:21,664 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_signalErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (28 of 78 remaining) [2022-10-16 13:30:21,664 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_signalErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (27 of 78 remaining) [2022-10-16 13:30:21,665 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_signalErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (26 of 78 remaining) [2022-10-16 13:30:21,665 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_openErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (25 of 78 remaining) [2022-10-16 13:30:21,665 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_openErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (24 of 78 remaining) [2022-10-16 13:30:21,665 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (23 of 78 remaining) [2022-10-16 13:30:21,665 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (22 of 78 remaining) [2022-10-16 13:30:21,665 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (21 of 78 remaining) [2022-10-16 13:30:21,666 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (20 of 78 remaining) [2022-10-16 13:30:21,666 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr4ASSERT_VIOLATIONINTEGER_OVERFLOW (19 of 78 remaining) [2022-10-16 13:30:21,666 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr5ASSERT_VIOLATIONINTEGER_OVERFLOW (18 of 78 remaining) [2022-10-16 13:30:21,666 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr6ASSERT_VIOLATIONINTEGER_OVERFLOW (17 of 78 remaining) [2022-10-16 13:30:21,666 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr7ASSERT_VIOLATIONINTEGER_OVERFLOW (16 of 78 remaining) [2022-10-16 13:30:21,667 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr8ASSERT_VIOLATIONINTEGER_OVERFLOW (15 of 78 remaining) [2022-10-16 13:30:21,667 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr9ASSERT_VIOLATIONINTEGER_OVERFLOW (14 of 78 remaining) [2022-10-16 13:30:21,667 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr10ASSERT_VIOLATIONINTEGER_OVERFLOW (13 of 78 remaining) [2022-10-16 13:30:21,667 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr11ASSERT_VIOLATIONINTEGER_OVERFLOW (12 of 78 remaining) [2022-10-16 13:30:21,667 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr12ASSERT_VIOLATIONINTEGER_OVERFLOW (11 of 78 remaining) [2022-10-16 13:30:21,667 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr13ASSERT_VIOLATIONINTEGER_OVERFLOW (10 of 78 remaining) [2022-10-16 13:30:21,668 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr14ASSERT_VIOLATIONINTEGER_OVERFLOW (9 of 78 remaining) [2022-10-16 13:30:21,668 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_scsi_ioctlErr15ASSERT_VIOLATIONINTEGER_OVERFLOW (8 of 78 remaining) [2022-10-16 13:30:21,668 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (7 of 78 remaining) [2022-10-16 13:30:21,668 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (6 of 78 remaining) [2022-10-16 13:30:21,669 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr2ASSERT_VIOLATIONINTEGER_OVERFLOW (5 of 78 remaining) [2022-10-16 13:30:21,669 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location ULTIMATE.startErr3ASSERT_VIOLATIONINTEGER_OVERFLOW (4 of 78 remaining) [2022-10-16 13:30:21,669 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_has_featureErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (3 of 78 remaining) [2022-10-16 13:30:21,669 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location vhost_has_featureErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (2 of 78 remaining) [2022-10-16 13:30:21,669 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location tcm_vhost_port_linkErr0ASSERT_VIOLATIONINTEGER_OVERFLOW (1 of 78 remaining) [2022-10-16 13:30:21,670 INFO L805 garLoopResultBuilder]: Registering result UNKNOWN for location tcm_vhost_port_linkErr1ASSERT_VIOLATIONINTEGER_OVERFLOW (0 of 78 remaining) [2022-10-16 13:30:21,670 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-10-16 13:30:21,674 INFO L444 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1, 1, 1, 1, 1] [2022-10-16 13:30:21,679 INFO L178 ceAbstractionStarter]: Computing trace abstraction results [2022-10-16 13:30:21,870 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 16.10 01:30:21 BoogieIcfgContainer [2022-10-16 13:30:21,870 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-10-16 13:30:21,871 INFO L158 Benchmark]: Toolchain (without parser) took 123974.09ms. Allocated memory was 155.2MB in the beginning and 932.2MB in the end (delta: 777.0MB). Free memory was 112.0MB in the beginning and 458.4MB in the end (delta: -346.4MB). Peak memory consumption was 659.0MB. Max. memory is 8.0GB. [2022-10-16 13:30:21,872 INFO L158 Benchmark]: CDTParser took 0.24ms. Allocated memory is still 155.2MB. Free memory is still 125.2MB. There was no memory consumed. Max. memory is 8.0GB. [2022-10-16 13:30:21,872 INFO L158 Benchmark]: CACSL2BoogieTranslator took 5393.35ms. Allocated memory was 155.2MB in the beginning and 293.6MB in the end (delta: 138.4MB). Free memory was 111.8MB in the beginning and 214.4MB in the end (delta: -102.6MB). Peak memory consumption was 96.6MB. Max. memory is 8.0GB. [2022-10-16 13:30:21,872 INFO L158 Benchmark]: Boogie Procedure Inliner took 444.44ms. Allocated memory is still 293.6MB. Free memory was 214.4MB in the beginning and 170.4MB in the end (delta: 44.0MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. [2022-10-16 13:30:21,873 INFO L158 Benchmark]: Boogie Preprocessor took 643.72ms. Allocated memory is still 293.6MB. Free memory was 170.4MB in the beginning and 177.7MB in the end (delta: -7.3MB). Peak memory consumption was 65.0MB. Max. memory is 8.0GB. [2022-10-16 13:30:21,873 INFO L158 Benchmark]: RCFGBuilder took 13169.10ms. Allocated memory was 293.6MB in the beginning and 686.8MB in the end (delta: 393.2MB). Free memory was 177.7MB in the beginning and 386.4MB in the end (delta: -208.7MB). Peak memory consumption was 289.4MB. Max. memory is 8.0GB. [2022-10-16 13:30:21,874 INFO L158 Benchmark]: TraceAbstraction took 104308.27ms. Allocated memory was 686.8MB in the beginning and 932.2MB in the end (delta: 245.4MB). Free memory was 385.4MB in the beginning and 458.4MB in the end (delta: -73.0MB). Peak memory consumption was 399.9MB. Max. memory is 8.0GB. [2022-10-16 13:30:21,876 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.24ms. Allocated memory is still 155.2MB. Free memory is still 125.2MB. There was no memory consumed. Max. memory is 8.0GB. * CACSL2BoogieTranslator took 5393.35ms. Allocated memory was 155.2MB in the beginning and 293.6MB in the end (delta: 138.4MB). Free memory was 111.8MB in the beginning and 214.4MB in the end (delta: -102.6MB). Peak memory consumption was 96.6MB. Max. memory is 8.0GB. * Boogie Procedure Inliner took 444.44ms. Allocated memory is still 293.6MB. Free memory was 214.4MB in the beginning and 170.4MB in the end (delta: 44.0MB). Peak memory consumption was 44.0MB. Max. memory is 8.0GB. * Boogie Preprocessor took 643.72ms. Allocated memory is still 293.6MB. Free memory was 170.4MB in the beginning and 177.7MB in the end (delta: -7.3MB). Peak memory consumption was 65.0MB. Max. memory is 8.0GB. * RCFGBuilder took 13169.10ms. Allocated memory was 293.6MB in the beginning and 686.8MB in the end (delta: 393.2MB). Free memory was 177.7MB in the beginning and 386.4MB in the end (delta: -208.7MB). Peak memory consumption was 289.4MB. Max. memory is 8.0GB. * TraceAbstraction took 104308.27ms. Allocated memory was 686.8MB in the beginning and 932.2MB in the end (delta: 245.4MB). Free memory was 385.4MB in the beginning and 458.4MB in the end (delta: -73.0MB). Peak memory consumption was 399.9MB. Max. memory is 8.0GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 11984]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: overapproximation of __builtin_object_size at line 7404, overapproximation of strcmp at line 11975, overapproximation of large string literal at line 12845. Possible FailurePath: [L7687] static unsigned int vhost_zcopy_mask ; [L10792] static struct target_fabric_configfs *tcm_vhost_fabric_configfs ; [L10793] static struct workqueue_struct *tcm_vhost_workqueue ; [L10794-L10797] static struct mutex tcm_vhost_mutex = {{1}, {{{{{0U}}, 3735899821U, 4294967295U, 0xffffffffffffffffUL, {0, {0, 0}, "tcm_vhost_mutex.wait_lock", 0, 0UL}}}}, {& tcm_vhost_mutex.wait_list, & tcm_vhost_mutex.wait_list}, 0, 0, (void *)(& tcm_vhost_mutex), {0, {0, 0}, "tcm_vhost_mutex", 0, 0UL}}; [L10798] static struct list_head tcm_vhost_list = {& tcm_vhost_list, & tcm_vhost_list}; [L12183-L12186] static struct file_operations const vhost_scsi_fops = {& __this_module, & noop_llseek, 0, 0, 0, 0, 0, 0, & vhost_scsi_ioctl, & vhost_scsi_compat_ioctl, 0, & vhost_scsi_open, 0, & vhost_scsi_release, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L12187-L12188] static struct miscdevice vhost_scsi_misc = {255, "vhost-scsi", & vhost_scsi_fops, {0, 0}, 0, 0, 0, (unsigned short)0}; [L12540] static struct target_fabric_tpg_attribute tcm_vhost_tpg_nexus = {{"nexus", & __this_module, 420U}, & tcm_vhost_tpg_show_nexus, & tcm_vhost_tpg_store_nexus}; [L12541] static struct configfs_attribute *tcm_vhost_tpg_attrs[2U] = { & tcm_vhost_tpg_nexus.attr, 0}; [L12732] static struct target_fabric_wwn_attribute tcm_vhost_wwn_version = {{"version", & __this_module, 292U}, & tcm_vhost_wwn_show_attr_version, 0}; [L12733] static struct configfs_attribute *tcm_vhost_wwn_attrs[2U] = { & tcm_vhost_wwn_version.attr, 0}; [L12734-L12745] static struct target_core_fabric_ops tcm_vhost_ops = {0, & tcm_vhost_get_fabric_name, & tcm_vhost_get_fabric_proto_ident, & tcm_vhost_get_fabric_wwn, & tcm_vhost_get_tag, & tcm_vhost_get_default_depth, & tcm_vhost_get_pr_transport_id, & tcm_vhost_get_pr_transport_id_len, & tcm_vhost_parse_pr_out_transport_id, & tcm_vhost_check_true, & tcm_vhost_check_true, & tcm_vhost_check_false, & tcm_vhost_check_false, 0, & tcm_vhost_alloc_fabric_acl, & tcm_vhost_release_fabric_acl, & tcm_vhost_tpg_get_inst_index, 0, & tcm_vhost_release_cmd, 0, & tcm_vhost_shutdown_session, & tcm_vhost_close_session, & tcm_vhost_sess_get_index, 0, & tcm_vhost_write_pending, & tcm_vhost_write_pending_status, & tcm_vhost_set_default_node_attrs, & tcm_vhost_get_task_tag, & tcm_vhost_get_cmd_state, & tcm_vhost_queue_data_in, & tcm_vhost_queue_status, & tcm_vhost_queue_tm_rsp, & tcm_vhost_make_tport, & tcm_vhost_drop_tport, & tcm_vhost_make_tpg, & tcm_vhost_drop_tpg, & tcm_vhost_port_link, & tcm_vhost_port_unlink, 0, 0, & tcm_vhost_make_nodeacl, & tcm_vhost_drop_nodeacl}; [L12885] int LDV_IN_INTERRUPT ; [L13678] static int ldv_mutex_cred_guard_mutex ; [L13785] static int ldv_mutex_lock ; [L13892] static int ldv_mutex_mtx ; [L13999] static int ldv_mutex_mutex ; [L14106] static int ldv_mutex_tcm_vhost_mutex ; [L14213] static int ldv_mutex_tv_tpg_mutex ; VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=0, ldv_mutex_cred_guard_mutex=0, ldv_mutex_lock=0, ldv_mutex_mtx=0, ldv_mutex_mutex=0, ldv_mutex_tcm_vhost_mutex=0, ldv_mutex_tv_tpg_mutex=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={0:0}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12888] struct inode *var_group1 ; [L12889] struct file *var_group2 ; [L12890] unsigned int var_vhost_scsi_ioctl_44_p1 ; [L12891] unsigned long var_vhost_scsi_ioctl_44_p2 ; [L12892] unsigned int var_vhost_scsi_compat_ioctl_45_p1 ; [L12893] unsigned long var_vhost_scsi_compat_ioctl_45_p2 ; [L12894] int res_vhost_scsi_open_39 ; [L12895] struct se_portal_group *var_group3 ; [L12896] struct se_node_acl *var_group4 ; [L12897] struct t10_pr_registration *var_tcm_vhost_get_pr_transport_id_7_p2 ; [L12898] int *var_tcm_vhost_get_pr_transport_id_7_p3 ; [L12899] unsigned char *var_tcm_vhost_get_pr_transport_id_7_p4 ; [L12900] struct t10_pr_registration *var_tcm_vhost_get_pr_transport_id_len_8_p2 ; [L12901] int *var_tcm_vhost_get_pr_transport_id_len_8_p3 ; [L12902] char const *var_tcm_vhost_parse_pr_out_transport_id_9_p1 ; [L12903] u32 *var_tcm_vhost_parse_pr_out_transport_id_9_p2 ; [L12904] char **var_tcm_vhost_parse_pr_out_transport_id_9_p3 ; [L12905] struct se_cmd *var_group5 ; [L12906] struct se_session *var_group6 ; [L12907] struct target_fabric_configfs *var_group7 ; [L12908] struct config_group *var_group8 ; [L12909] char const *var_tcm_vhost_make_tport_59_p2 ; [L12910] struct se_wwn *var_group9 ; [L12911] char const *var_tcm_vhost_make_tpg_57_p2 ; [L12912] struct se_lun *var_group10 ; [L12913] char const *var_tcm_vhost_make_nodeacl_51_p2 ; [L12914] int ldv_s_vhost_scsi_fops_file_operations ; [L12915] int tmp ; [L12916] int tmp___0 ; [L12917] int tmp___1 ; [L12919] ldv_s_vhost_scsi_fops_file_operations = 0 [L12920] LDV_IN_INTERRUPT = 1 [L12921] CALL ldv_initialize() [L14323] ldv_mutex_cred_guard_mutex = 1 [L14324] ldv_mutex_lock = 1 [L14325] ldv_mutex_mtx = 1 [L14326] ldv_mutex_mutex = 1 [L14327] ldv_mutex_tcm_vhost_mutex = 1 [L14328] ldv_mutex_tv_tpg_mutex = 1 VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={0:0}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12921] RET ldv_initialize() [L12922] FCALL ldv_handler_precall() VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ldv_s_vhost_scsi_fops_file_operations=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={0:0}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12923] CALL, EXPR tcm_vhost_init() [L12839] int ret ; [L12840] struct lock_class_key __key ; [L12841] char const *__lock_name ; [L12842] struct workqueue_struct *tmp ; [L12844] ret = -12 [L12845] __lock_name = "tcm_vhost" [L12846] tmp = __alloc_workqueue_key("tcm_vhost", 0U, 0, & __key, __lock_name) [L12847] tcm_vhost_workqueue = tmp VAL [__alloc_workqueue_key("tcm_vhost", 0U, 0, & __key, __lock_name)={366:-365}, __key={370:0}, __lock_name={354:0}, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ret=-12, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp={366:-365}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12848] COND FALSE !((unsigned long )tcm_vhost_workqueue == (unsigned long )((struct workqueue_struct *)0)) [L12852] CALL, EXPR vhost_scsi_register() [L12191] int tmp ; [L12193] CALL, EXPR misc_register(& vhost_scsi_misc) [L14561] return __VERIFIER_nondet_int(); [L12193] RET, EXPR misc_register(& vhost_scsi_misc) [L12193] tmp = misc_register(& vhost_scsi_misc) [L12194] return (tmp); VAL [\result=0, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12852] RET, EXPR vhost_scsi_register() [L12852] ret = vhost_scsi_register() [L12853] COND FALSE !(ret < 0) [L12857] CALL, EXPR tcm_vhost_register_configfs() [L12748] struct target_fabric_configfs *fabric ; [L12749] int ret ; [L12750] struct _ddebug descriptor ; [L12751] struct new_utsname *tmp ; [L12752] struct new_utsname *tmp___0 ; [L12753] long tmp___1 ; [L12754] long tmp___2 ; [L12755] long tmp___3 ; [L12756] struct _ddebug descriptor___0 ; [L12757] long tmp___4 ; [L12759] descriptor.modname = "tcm_vhost" [L12760] descriptor.function = "tcm_vhost_register_configfs" [L12761] descriptor.filename = "/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/tcm_vhost.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/12/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/tcm_vhost.c.prepared" [L12762] descriptor.format = "TCM_VHOST fabric module %s on %s/%s on 3.7.3\n" [L12763] descriptor.lineno = 1561U [L12764] descriptor.flags = 0U [L12765] EXPR descriptor.flags VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor.flags=0, descriptor___0={371:0}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12765] CALL, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13675] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={8589934638:8589934608}, c=0, exp=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12765] RET, EXPR ldv__builtin_expect((long )descriptor.flags & 1L, 0L) VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor.flags=0, descriptor___0={371:0}, ldv__builtin_expect((long )descriptor.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12765] tmp___1 = ldv__builtin_expect((long )descriptor.flags & 1L, 0L) [L12766] COND FALSE !(tmp___1 != 0L) VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor___0={371:0}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12773] CALL, EXPR target_fabric_configfs_init(& __this_module, "vhost") [L14636] CALL, EXPR ldv_malloc(sizeof(struct target_fabric_configfs)) VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7220] COND FALSE !(__VERIFIER_nondet_int()) [L7225] return ((void *)0); VAL [\old(size)=692, \result={0:0}, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, size=692, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L14636] RET, EXPR ldv_malloc(sizeof(struct target_fabric_configfs)) VAL [__this_module={8589934638:8589934608}, arg0={8589934638:8589934608}, arg0={8589934638:8589934608}, arg1={341:0}, arg1={341:0}, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct target_fabric_configfs))={0:0}, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L14636] return ldv_malloc(sizeof(struct target_fabric_configfs)); [L12773] RET, EXPR target_fabric_configfs_init(& __this_module, "vhost") [L12773] fabric = target_fabric_configfs_init(& __this_module, "vhost") [L12774] CALL, EXPR IS_ERR((void const *)fabric) VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ptr={0:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L6795] long tmp ; VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ptr={0:0}, ptr={0:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L6797] CALL, EXPR ldv__builtin_expect((unsigned long )ptr > 0xfffffffffffff000UL, 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13675] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={8589934638:8589934608}, c=0, exp=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L6797] RET, EXPR ldv__builtin_expect((unsigned long )ptr > 0xfffffffffffff000UL, 0L) VAL [__this_module={8589934638:8589934608}, ldv__builtin_expect((unsigned long )ptr > 0xfffffffffffff000UL, 0L)=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ptr={0:0}, ptr={0:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L6797] tmp = ldv__builtin_expect((unsigned long )ptr > 0xfffffffffffff000UL, 0L) [L6798] return (tmp); VAL [\result=0, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ptr={0:0}, ptr={0:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12774] RET, EXPR IS_ERR((void const *)fabric) VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor___0={371:0}, fabric={0:0}, IS_ERR((void const *)fabric)=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12774] tmp___3 = IS_ERR((void const *)fabric) [L12775] COND FALSE !(tmp___3 != 0L) [L12781] fabric->tf_ops = tcm_vhost_ops [L12782] fabric->tf_cit_tmpl.tfc_wwn_cit.ct_attrs = (struct configfs_attribute **)(& tcm_vhost_wwn_attrs) [L12783] fabric->tf_cit_tmpl.tfc_tpg_base_cit.ct_attrs = (struct configfs_attribute **)(& tcm_vhost_tpg_attrs) [L12784] fabric->tf_cit_tmpl.tfc_tpg_attrib_cit.ct_attrs = 0 [L12785] fabric->tf_cit_tmpl.tfc_tpg_param_cit.ct_attrs = 0 [L12786] fabric->tf_cit_tmpl.tfc_tpg_np_base_cit.ct_attrs = 0 [L12787] fabric->tf_cit_tmpl.tfc_tpg_nacl_base_cit.ct_attrs = 0 [L12788] fabric->tf_cit_tmpl.tfc_tpg_nacl_attrib_cit.ct_attrs = 0 [L12789] fabric->tf_cit_tmpl.tfc_tpg_nacl_auth_cit.ct_attrs = 0 [L12790] fabric->tf_cit_tmpl.tfc_tpg_nacl_param_cit.ct_attrs = 0 [L12791] CALL, EXPR target_fabric_configfs_register(fabric) [L14640] return __VERIFIER_nondet_int(); [L12791] RET, EXPR target_fabric_configfs_register(fabric) [L12791] ret = target_fabric_configfs_register(fabric) [L12792] COND FALSE !(ret < 0) [L12797] tcm_vhost_fabric_configfs = fabric [L12798] descriptor___0.modname = "tcm_vhost" [L12799] descriptor___0.function = "tcm_vhost_register_configfs" [L12800] descriptor___0.filename = "/work/vladimir/UFO/Work/test/work/current--X--drivers/vhost/tcm_vhost.ko--X--defaultlinux-3.7.3--X--32_7a--X--ufo/linux-3.7.3/csd_deg_dscv/12/dscv_tempdir/dscv/ri/32_7a/drivers/vhost/tcm_vhost.c.prepared" [L12801] descriptor___0.format = "TCM_VHOST[0] - Set fabric -> tcm_vhost_fabric_configfs\n" [L12802] descriptor___0.lineno = 1599U [L12803] descriptor___0.flags = 0U [L12804] EXPR descriptor___0.flags VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor___0={371:0}, descriptor___0.flags=0, fabric={0:0}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ret=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, tmp___3=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12804] CALL, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13675] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={8589934638:8589934608}, c=0, exp=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12804] RET, EXPR ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor___0={371:0}, descriptor___0.flags=0, fabric={0:0}, ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L)=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ret=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, tmp___3=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12804] tmp___4 = ldv__builtin_expect((long )descriptor___0.flags & 1L, 0L) [L12805] COND FALSE !(tmp___4 != 0L) VAL [__this_module={8589934638:8589934608}, descriptor={369:0}, descriptor___0={371:0}, fabric={0:0}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ret=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, tmp___3=0, tmp___4=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12809] return (0); [L12809] return (0); [L12809] return (0); VAL [\result=0, __this_module={8589934638:8589934608}, fabric={0:0}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ret=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, tmp___3=0, tmp___4=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12857] RET, EXPR tcm_vhost_register_configfs() [L12857] ret = tcm_vhost_register_configfs() [L12858] COND FALSE !(ret < 0) [L12862] return (0); [L12862] return (0); VAL [\result=0, __alloc_workqueue_key("tcm_vhost", 0U, 0, & __key, __lock_name)={366:-365}, __lock_name={354:0}, __this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ret=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp={366:-365}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12923] RET, EXPR tcm_vhost_init() [L12923] tmp = tcm_vhost_init() [L12924] COND FALSE !(tmp != 0) VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ldv_s_vhost_scsi_fops_file_operations=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13102] tmp___1 = __VERIFIER_nondet_int() [L13103] COND TRUE tmp___1 != 0 || ldv_s_vhost_scsi_fops_file_operations != 0 VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ldv_s_vhost_scsi_fops_file_operations=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=0, tmp___1=1, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12930] tmp___0 = __VERIFIER_nondet_int() [L12932] case 0: [L12945] case 1: [L12953] case 2: VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ldv_s_vhost_scsi_fops_file_operations=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=0, tmp___0=2, tmp___1=1, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12954] FCALL ldv_handler_precall() VAL [__this_module={8589934638:8589934608}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, ldv_s_vhost_scsi_fops_file_operations=0, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=0, tmp___0=2, tmp___1=1, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12955] CALL vhost_scsi_ioctl(var_group2, var_vhost_scsi_ioctl_44_p1, var_vhost_scsi_ioctl_44_p2) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12095] struct vhost_scsi *vs ; [L12096] struct vhost_scsi_target backend ; [L12097] void *argp ; [L12098] u64 *featurep ; [L12099] u64 features ; [L12100] int r ; [L12101] int abi_version ; [L12102] unsigned long tmp ; [L12103] int tmp___0 ; [L12104] unsigned long tmp___1 ; [L12105] int tmp___2 ; [L12106] int tmp___3 ; [L12107] int tmp___4 ; [L12108] unsigned long tmp___5 ; [L12109] int tmp___6 ; [L12110] long tmp___7 ; [L12112] EXPR f->private_data [L12112] vs = (struct vhost_scsi *)f->private_data [L12113] argp = (void *)arg [L12114] featurep = (u64 *)argp [L12115] abi_version = 0 [L12117] case 1088991040U: [L12129] case 1088991041U: VAL [\old(arg)=4294967292, \old(bit = (int )write_page & 7)=8589934606, \old(ioctl)=1088991041, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, abi_version={372:0}, arg=4294967292, argp={0:-4}, backend={374:0}, bit = (int )write_page & 7=8589934606, f={8589934602:-203}, f={8589934602:-203}, featurep={0:-4}, features={373:0}, ioctl=1088991041, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}] [L12130] CALL, EXPR copy_from_user((void *)(& backend), (void const *)argp, 232UL) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, from={0:-4}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7397] int sz ; [L7398] unsigned long tmp ; [L7399] int __ret_warn_on ; [L7400] long tmp___0 ; [L7401] long tmp___1 ; [L7402] long tmp___2 ; [L7404] tmp = __builtin_object_size((void const *)to, 0) [L7405] sz = (int )tmp VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, from={0:-4}, from={0:-4}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, n=232, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, sz=-1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=4294967295, to={374:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7406] FCALL might_fault() VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, from={0:-4}, from={0:-4}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, n=232, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, sz=-1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=4294967295, to={374:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7407] CALL, EXPR ldv__builtin_expect(sz == -1, 1L) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(c)=1, \old(exp)=1, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13675] return (exp); VAL [\old(bit = (int )write_page & 7)=8589934606, \old(c)=1, \old(exp)=1, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, \result=1, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, c=1, exp=1, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7407] RET, EXPR ldv__builtin_expect(sz == -1, 1L) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, from={0:-4}, from={0:-4}, ldv__builtin_expect(sz == -1, 1L)=1, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, n=232, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, sz=-1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=4294967295, to={374:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7407] tmp___1 = ldv__builtin_expect(sz == -1, 1L) [L7408] COND TRUE tmp___1 != 0L VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, from={0:-4}, from={0:-4}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, n=232, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, sz=-1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=4294967295, tmp___1=1, to={374:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7409] CALL, EXPR _copy_from_user(to, from, (unsigned int )n) VAL [\old(arg2)=232, \old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, arg0={374:0}, arg1={0:-4}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L14395] return __VERIFIER_nondet_ulong(); [L7409] RET, EXPR _copy_from_user(to, from, (unsigned int )n) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, _copy_from_user(to, from, (unsigned int )n)=8589934592, bit = (int )write_page & 7=8589934606, from={0:-4}, from={0:-4}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, n=232, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, sz=-1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=4294967295, tmp___1=1, to={374:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L7409] n = _copy_from_user(to, from, (unsigned int )n) [L7425] return (n); VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(n)=232, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, \result=8589934592, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, from={0:-4}, from={0:-4}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, n=8589934592, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, sz=-1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp=4294967295, tmp___1=1, to={374:0}, to={374:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L12130] RET, EXPR copy_from_user((void *)(& backend), (void const *)argp, 232UL) VAL [\old(arg)=4294967292, \old(bit = (int )write_page & 7)=8589934606, \old(ioctl)=1088991041, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, abi_version={372:0}, arg=4294967292, argp={0:-4}, backend={374:0}, bit = (int )write_page & 7=8589934606, copy_from_user((void *)(& backend), (void const *)argp, 232UL)=8589934592, f={8589934602:-203}, f={8589934602:-203}, featurep={0:-4}, features={373:0}, ioctl=1088991041, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}] [L12130] tmp___1 = copy_from_user((void *)(& backend), (void const *)argp, 232UL) [L12131] COND FALSE !(tmp___1 != 0UL) [L12135] EXPR backend.reserved VAL [\old(arg)=4294967292, \old(bit = (int )write_page & 7)=8589934606, \old(ioctl)=1088991041, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, abi_version={372:0}, arg=4294967292, argp={0:-4}, backend={374:0}, backend.reserved=65536, bit = (int )write_page & 7=8589934606, f={8589934602:-203}, f={8589934602:-203}, featurep={0:-4}, features={373:0}, ioctl=1088991041, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___1=0, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}] [L12135] COND FALSE !((unsigned int )backend.reserved != 0U) [L12139] CALL vhost_scsi_clear_endpoint(vs, & backend) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L11945] struct tcm_vhost_tport *tv_tport ; [L11946] struct tcm_vhost_tpg *tv_tpg ; [L11947] int index ; [L11948] int ret ; [L11949] int tmp ; [L11950] int tmp___0 ; [L11952] CALL ldv_mutex_lock_38(& vs->dev.mutex) [L13419] CALL ldv_mutex_lock_mutex(ldv_func_arg1) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, lock={8589934626:377}, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L14037] COND TRUE ldv_mutex_mutex == 1 VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=1, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, lock={8589934626:377}, lock={8589934626:377}, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L14041] ldv_mutex_mutex = 2 VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, lock={8589934626:377}, lock={8589934626:377}, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13419] RET ldv_mutex_lock_mutex(ldv_func_arg1) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, ldv_func_arg1={8589934626:377}, ldv_func_arg1={8589934626:377}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L13420] FCALL mutex_lock(ldv_func_arg1) VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, ldv_func_arg1={8589934626:377}, ldv_func_arg1={8589934626:377}, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0] [L11952] RET ldv_mutex_lock_38(& vs->dev.mutex) [L11953] index = 0 VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, index=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, t={374:0}, t={374:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}, vs={8589934626:365}] [L11964] EXPR vs->dev.nvqs VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, index=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, t={374:0}, t={374:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}, vs={8589934626:365}, vs->dev.nvqs=-5] [L11964] COND FALSE !(vs->dev.nvqs > index) [L11968] EXPR vs->vs_tpg VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, index=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, t={374:0}, t={374:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}, vs={8589934626:365}, vs->vs_tpg={4294966922:375}] [L11968] COND FALSE !((unsigned long )vs->vs_tpg == (unsigned long )((struct tcm_vhost_tpg *)0)) [L11973] EXPR vs->vs_tpg [L11973] tv_tpg = vs->vs_tpg [L11974] EXPR tv_tpg->tport [L11974] tv_tport = tv_tpg->tport [L11975] tmp___0 = strcmp((char const *)(& tv_tport->tport_name), (char const *)(& t->vhost_wwpn)) [L11976] tmp___0 != 0 || (int )tv_tpg->tport_tpgt != (int )t->vhost_tpgt [L11976] EXPR tv_tpg->tport_tpgt [L11976] EXPR t->vhost_tpgt [L11976] tmp___0 != 0 || (int )tv_tpg->tport_tpgt != (int )t->vhost_tpgt VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, index=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, t={374:0}, t={374:0}, t->vhost_tpgt=1, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___0=0, tmp___0 != 0 || (int )tv_tpg->tport_tpgt != (int )t->vhost_tpgt=0, tv_tpg={4294966922:375}, tv_tpg->tport_tpgt=65537, tv_tport={8589934612:8589934653}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}, vs={8589934626:365}] [L11976] COND FALSE !(tmp___0 != 0 || (int )tv_tpg->tport_tpgt != (int )t->vhost_tpgt) [L11984] EXPR tv_tpg->tv_tpg_vhost_count VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, index=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, t={374:0}, t={374:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___0=0, tv_tpg={4294966922:375}, tv_tpg->tv_tpg_vhost_count=2147483649, tv_tport={8589934612:8589934653}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}, vs={8589934626:365}] [L11984] tv_tpg->tv_tpg_vhost_count - 1 VAL [\old(bit = (int )write_page & 7)=8589934606, \old(ldv_mutex_mutex)=1, \old(ldv_mutex_tcm_vhost_mutex)=1, \old(ldv_mutex_tv_tpg_mutex)=1, \old(offset = (unsigned int )((long )ptr) & 4095U)=8589934646, \old(page_link = sg->page_link & 3UL)=8589934648, __this_module={8589934638:8589934608}, bit = (int )write_page & 7=8589934606, index=0, LDV_IN_INTERRUPT=1, ldv_mutex_cred_guard_mutex=1, ldv_mutex_lock=1, ldv_mutex_mtx=1, ldv_mutex_mutex=2, ldv_mutex_tcm_vhost_mutex=1, ldv_mutex_tv_tpg_mutex=1, offset = (unsigned int )((long )ptr) & 4095U=8589934646, page_link = sg->page_link & 3UL=8589934648, t={374:0}, t={374:0}, tcm_vhost_fabric_configfs={0:0}, tcm_vhost_list={357:0}, tcm_vhost_mutex={356:0}, tcm_vhost_ops={364:0}, tcm_vhost_tpg_attrs={361:0}, tcm_vhost_tpg_nexus={360:0}, tcm_vhost_workqueue={366:-365}, tcm_vhost_wwn_attrs={363:0}, tcm_vhost_wwn_version={362:0}, tmp___0=0, tv_tpg={4294966922:375}, tv_tpg->tv_tpg_vhost_count=2147483649, tv_tport={8589934612:8589934653}, vhost_scsi_fops={358:0}, vhost_scsi_misc={359:0}, vhost_zcopy_mask=0, vs={8589934626:365}, vs={8589934626:365}] - UnprovableResult [Line: 7024]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7024]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7358]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7358]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7786]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7786]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7812]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7812]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7271]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7035]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7035]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9103]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9103]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9420]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9420]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11962]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11962]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11984]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9781]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9781]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10045]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10045]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9312]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9312]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11759]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8435]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8435]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8407]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8407]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10219]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10219]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10228]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 10228]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8238]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8238]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8242]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8242]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8300]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8300]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8072]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8072]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9261]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9261]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7350]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7350]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7350]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7350]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8115]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8115]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11886]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11886]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11912]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11912]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11919]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 11919]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8034]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8034]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8044]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8044]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8055]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 8055]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9002]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9002]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9065]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 9065]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 12941]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 12941]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 12243]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 12243]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7683]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 7683]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 12230]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - UnprovableResult [Line: 12230]: Unable to prove that integer overflow can never occur Unable to prove that integer overflow can never occur Reason: Not analyzed. - StatisticsResult: Ultimate Automizer benchmark data CFG has 115 procedures, 2609 locations, 78 error locations. Started 1 CEGAR loops. OverallTime: 104.0s, OverallIterations: 8, TraceHistogramMax: 4, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 88.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 18 mSolverCounterUnknown, 10119 SdHoareTripleChecker+Valid, 84.8s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 8878 mSDsluCounter, 86847 SdHoareTripleChecker+Invalid, 78.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 62878 mSDsCounter, 7035 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 34909 IncrementalHoareTripleChecker+Invalid, 41962 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 7035 mSolverCounterUnsat, 23969 mSDtfsCounter, 34909 mSolverCounterSat, 0.5s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 490 GetRequests, 441 SyntacticMatches, 2 SemanticMatches, 47 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=2818occurred in iteration=2, InterpolantAutomatonStates: 48, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 1.2s AutomataMinimizationTime, 7 MinimizatonAttempts, 1113 StatesRemovedByMinimization, 6 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.3s SsaConstructionTime, 4.7s SatisfiabilityAnalysisTime, 5.3s InterpolantComputationTime, 859 NumberOfCodeBlocks, 859 NumberOfCodeBlocksAsserted, 10 NumberOfCheckSat, 852 ConstructedInterpolants, 0 QuantifiedInterpolants, 1095 SizeOfPredicates, 13 NumberOfNonLiveVariables, 6055 ConjunctsInSsa, 52 ConjunctsInUnsatCore, 10 InterpolantComputations, 6 PerfectInterpolantSequences, 93/101 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-10-16 13:30:21,992 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request...