./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 48c9605d Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3d54ec533bcab354bf7ab20b9139a2cc0ce3cf7423a4c806e696ce4b9d5812e9 --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:44:02,794 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:44:02,854 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-02-08 02:44:02,865 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:44:02,865 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:44:02,895 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:44:02,896 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:44:02,896 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:44:02,896 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:44:02,897 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:44:02,897 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:44:02,897 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:44:02,897 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:44:02,897 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:44:02,897 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:44:02,898 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:44:02,898 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:44:02,899 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:44:02,899 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:44:02,899 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:44:02,899 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:44:02,899 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:44:02,899 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:44:02,899 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:44:02,899 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:44:02,900 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3d54ec533bcab354bf7ab20b9139a2cc0ce3cf7423a4c806e696ce4b9d5812e9 [2025-02-08 02:44:03,193 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:44:03,203 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:44:03,207 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:44:03,208 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:44:03,208 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:44:03,211 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i [2025-02-08 02:44:04,521 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/c09b78b0a/c07985b29ff545c8921b83a1248a8d3c/FLAGc6c5b51bb [2025-02-08 02:44:05,008 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:44:05,008 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i [2025-02-08 02:44:05,042 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/c09b78b0a/c07985b29ff545c8921b83a1248a8d3c/FLAGc6c5b51bb [2025-02-08 02:44:05,060 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/c09b78b0a/c07985b29ff545c8921b83a1248a8d3c [2025-02-08 02:44:05,062 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:44:05,063 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:44:05,064 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:44:05,064 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:44:05,068 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:44:05,069 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:44:05" (1/1) ... [2025-02-08 02:44:05,071 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4f926ac3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:05, skipping insertion in model container [2025-02-08 02:44:05,072 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:44:05" (1/1) ... [2025-02-08 02:44:05,141 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:44:06,043 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i[129019,129032] [2025-02-08 02:44:06,117 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:44:06,146 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:44:06,219 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [3103] [2025-02-08 02:44:06,328 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i[129019,129032] [2025-02-08 02:44:06,350 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:44:06,436 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:44:06,436 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06 WrapperNode [2025-02-08 02:44:06,436 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:44:06,437 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:44:06,438 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:44:06,438 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:44:06,442 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,479 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,560 INFO L138 Inliner]: procedures = 175, calls = 882, calls flagged for inlining = 78, calls inlined = 65, statements flattened = 1619 [2025-02-08 02:44:06,560 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:44:06,561 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:44:06,561 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:44:06,561 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:44:06,569 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,570 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,594 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,735 INFO L175 MemorySlicer]: Split 410 memory accesses to 22 slices as follows [2, 49, 56, 1, 2, 12, 8, 28, 2, 2, 42, 1, 3, 2, 18, 108, 8, 4, 8, 8, 38, 8]. 26 percent of accesses are in the largest equivalence class. The 130 initializations are split as follows [2, 0, 56, 0, 0, 8, 8, 0, 0, 0, 0, 0, 0, 1, 0, 0, 8, 0, 8, 8, 23, 8]. The 190 writes are split as follows [0, 42, 0, 0, 0, 3, 0, 28, 0, 0, 42, 0, 1, 0, 18, 41, 0, 0, 0, 0, 15, 0]. [2025-02-08 02:44:06,735 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,735 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,814 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,822 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,837 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,851 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,881 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:44:06,883 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:44:06,883 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:44:06,883 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:44:06,884 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (1/1) ... [2025-02-08 02:44:06,889 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:44:06,900 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:44:06,915 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:44:06,964 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:44:06,986 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_set [2025-02-08 02:44:06,986 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_set [2025-02-08 02:44:06,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-02-08 02:44:06,987 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-02-08 02:44:06,988 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#14 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#15 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#16 [2025-02-08 02:44:06,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#17 [2025-02-08 02:44:06,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#18 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#19 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#20 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#21 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-02-08 02:44:06,991 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#14 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#15 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#16 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#17 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#18 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#19 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#20 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#21 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-02-08 02:44:06,992 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#14 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#15 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#16 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#17 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#18 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#19 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#20 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#21 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure pci_release_regions [2025-02-08 02:44:06,993 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_release_regions [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-02-08 02:44:06,993 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#14 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#15 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#16 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#17 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#18 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#19 [2025-02-08 02:44:06,994 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#20 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#21 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#7 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#8 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#9 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#10 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#11 [2025-02-08 02:44:06,996 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#12 [2025-02-08 02:44:06,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#13 [2025-02-08 02:44:06,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#14 [2025-02-08 02:44:06,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#15 [2025-02-08 02:44:06,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#16 [2025-02-08 02:44:06,997 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#17 [2025-02-08 02:44:06,998 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#18 [2025-02-08 02:44:06,998 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#19 [2025-02-08 02:44:06,998 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#20 [2025-02-08 02:44:06,998 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#21 [2025-02-08 02:44:06,998 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#7 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#8 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#9 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#10 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#11 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#12 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#13 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#14 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#15 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#16 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#17 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#18 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#19 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#20 [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#21 [2025-02-08 02:44:06,999 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:44:06,999 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:44:06,999 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:44:07,000 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:44:07,000 INFO L130 BoogieDeclarations]: Found specification of procedure free_irq [2025-02-08 02:44:07,001 INFO L138 BoogieDeclarations]: Found implementation of procedure free_irq [2025-02-08 02:44:07,001 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iomap [2025-02-08 02:44:07,001 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iomap [2025-02-08 02:44:07,001 INFO L130 BoogieDeclarations]: Found specification of procedure class_destroy [2025-02-08 02:44:07,001 INFO L138 BoogieDeclarations]: Found implementation of procedure class_destroy [2025-02-08 02:44:07,001 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-02-08 02:44:07,001 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#14 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#15 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#16 [2025-02-08 02:44:07,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#17 [2025-02-08 02:44:07,003 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#18 [2025-02-08 02:44:07,003 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#19 [2025-02-08 02:44:07,003 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#20 [2025-02-08 02:44:07,003 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#21 [2025-02-08 02:44:07,003 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2025-02-08 02:44:07,005 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure class_remove_file [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure class_remove_file [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure pci_disable_device [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_disable_device [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_pr_debug [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_pr_debug [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_open_lock_of_phantom_device [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_open_lock_of_phantom_device [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_read [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_read [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure ioread32 [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ioread32 [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2025-02-08 02:44:07,006 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2025-02-08 02:44:07,006 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure phantom_status [2025-02-08 02:44:07,007 INFO L138 BoogieDeclarations]: Found implementation of procedure phantom_status [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#14 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#15 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#16 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#17 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#18 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#19 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#20 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#21 [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure phantom_remove [2025-02-08 02:44:07,007 INFO L138 BoogieDeclarations]: Found implementation of procedure phantom_remove [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure phantom_poll [2025-02-08 02:44:07,007 INFO L138 BoogieDeclarations]: Found implementation of procedure phantom_poll [2025-02-08 02:44:07,007 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#14 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#15 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#16 [2025-02-08 02:44:07,008 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#17 [2025-02-08 02:44:07,009 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#18 [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#19 [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#20 [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#21 [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure pci_get_drvdata [2025-02-08 02:44:07,010 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_get_drvdata [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure iowrite32 [2025-02-08 02:44:07,010 INFO L138 BoogieDeclarations]: Found implementation of procedure iowrite32 [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2025-02-08 02:44:07,010 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:44:07,010 INFO L130 BoogieDeclarations]: Found specification of procedure pci_iounmap [2025-02-08 02:44:07,010 INFO L138 BoogieDeclarations]: Found implementation of procedure pci_iounmap [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2025-02-08 02:44:07,011 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-02-08 02:44:07,011 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2025-02-08 02:44:07,011 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure unregister_chrdev_region [2025-02-08 02:44:07,011 INFO L138 BoogieDeclarations]: Found implementation of procedure unregister_chrdev_region [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2025-02-08 02:44:07,011 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-02-08 02:44:07,011 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-02-08 02:44:07,012 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#20 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#21 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-02-08 02:44:07,013 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-02-08 02:44:07,014 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-02-08 02:44:07,014 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-02-08 02:44:07,014 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#14 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#15 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#16 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#17 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#18 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#19 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#20 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#21 [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2025-02-08 02:44:07,015 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:44:07,015 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure phantom_ioctl [2025-02-08 02:44:07,015 INFO L138 BoogieDeclarations]: Found implementation of procedure phantom_ioctl [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_phantom_mutex [2025-02-08 02:44:07,015 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_phantom_mutex [2025-02-08 02:44:07,015 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2025-02-08 02:44:07,015 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2025-02-08 02:44:07,642 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:44:07,644 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:44:08,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3217: assume 0 == assume_abort_if_not_~cond#1;assume false; [2025-02-08 02:44:08,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3217: assume !(0 == assume_abort_if_not_~cond#1); [2025-02-08 02:44:08,304 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3228: havoc assume_abort_if_not_~cond#1;havoc assume_abort_if_not_#in~cond#1;assume { :end_inline_assume_abort_if_not } true;havoc #t~ret90#1;#res#1.base, #res#1.offset := ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:44:08,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3226: havoc ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:44:08,305 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3228-1: #t~ret90#1 := ldv_is_err_#res#1;havoc ldv_is_err_~ptr#1.base, ldv_is_err_~ptr#1.offset;havoc ldv_is_err_#in~ptr#1.base, ldv_is_err_#in~ptr#1.offset;assume { :end_inline_ldv_is_err } true;assume -9223372036854775808 <= #t~ret90#1 && #t~ret90#1 <= 9223372036854775807;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == #t~ret90#1 then 1 else 0);havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; [2025-02-08 02:44:08,320 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3090: havoc #t~mem13; [2025-02-08 02:44:08,322 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5086: havoc #t~nondet409; [2025-02-08 02:44:08,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3674: call ULTIMATE.dealloc(~#descriptor~2#1.base, ~#descriptor~2#1.offset);havoc ~#descriptor~2#1.base, ~#descriptor~2#1.offset;call ULTIMATE.dealloc(~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset);havoc ~#descriptor___0~1#1.base, ~#descriptor___0~1#1.offset; [2025-02-08 02:44:08,751 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5069: havoc dev_get_drvdata_#t~ret406#1.base, dev_get_drvdata_#t~ret406#1.offset; [2025-02-08 02:44:08,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5141: havoc #t~nondet417; [2025-02-08 02:44:08,760 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5066: havoc #t~nondet405; [2025-02-08 02:44:08,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5032: havoc #t~nondet401; [2025-02-08 02:44:08,765 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5021: havoc #t~nondet399; [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3380: call ULTIMATE.dealloc(~#rs~0.base, ~#rs~0.offset);havoc ~#rs~0.base, ~#rs~0.offset;call ULTIMATE.dealloc(~#r~0.base, ~#r~0.offset);havoc ~#r~0.base, ~#r~0.offset;call ULTIMATE.dealloc(~#descriptor~1.base, ~#descriptor~1.offset);havoc ~#descriptor~1.base, ~#descriptor~1.offset;call ULTIMATE.dealloc(~#descriptor___0~0.base, ~#descriptor___0~0.offset);havoc ~#descriptor___0~0.base, ~#descriptor___0~0.offset;call ULTIMATE.dealloc(~#descriptor___1~0.base, ~#descriptor___1~0.offset);havoc ~#descriptor___1~0.base, ~#descriptor___1~0.offset; [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537-1: assume ~i~0 % 4294967296 < ~m___0~0 % 4294967296; [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537-1: assume !(~i~0 % 4294967296 < ~m___0~0 % 4294967296); [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537: assume 0 != ~tmp___13~0;#res := -14;call ULTIMATE.dealloc(~#rs~0.base, ~#rs~0.offset);havoc ~#rs~0.base, ~#rs~0.offset;call ULTIMATE.dealloc(~#r~0.base, ~#r~0.offset);havoc ~#r~0.base, ~#r~0.offset;call ULTIMATE.dealloc(~#descriptor~1.base, ~#descriptor~1.offset);havoc ~#descriptor~1.base, ~#descriptor~1.offset;call ULTIMATE.dealloc(~#descriptor___0~0.base, ~#descriptor___0~0.offset);havoc ~#descriptor___0~0.base, ~#descriptor___0~0.offset;call ULTIMATE.dealloc(~#descriptor___1~0.base, ~#descriptor___1~0.offset);havoc ~#descriptor___1~0.base, ~#descriptor___1~0.offset; [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537: assume !(0 != ~tmp___13~0); [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537-3: assume 0 == #t~mem218 % 4294967296 % 18446744073709551616 || 0 == (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296);#t~bitwise219 := #t~mem218 % 4294967296; [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537-3: assume !(0 == #t~mem218 % 4294967296 % 18446744073709551616 || 0 == (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296)); [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537-2: assume 0 != (if #t~bitwise219 % 18446744073709551616 % 4294967296 <= 2147483647 then #t~bitwise219 % 18446744073709551616 % 4294967296 else #t~bitwise219 % 18446744073709551616 % 4294967296 - 4294967296) % 2;havoc #t~mem218;havoc #t~bitwise219;call #t~mem220.base, #t~mem220.offset := read~$Pointer$#15(~dev~0.base, 12 + ~dev~0.offset, 8); [2025-02-08 02:44:09,076 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3537-2: assume !(0 != (if #t~bitwise219 % 18446744073709551616 % 4294967296 <= 2147483647 then #t~bitwise219 % 18446744073709551616 % 4294967296 else #t~bitwise219 % 18446744073709551616 % 4294967296 - 4294967296) % 2);havoc #t~mem218;havoc #t~bitwise219; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3579: SUMMARY for call atomic_set(~dev~0.base, 36 + ~dev~0.offset, 0); srcloc: null [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3571: ~i~0 := 1 + ~i~0; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464-2: assume 0 != (if #t~bitwise198 % 18446744073709551616 % 4294967296 <= 2147483647 then #t~bitwise198 % 18446744073709551616 % 4294967296 else #t~bitwise198 % 18446744073709551616 % 4294967296 - 4294967296) % 2;havoc #t~mem197;havoc #t~bitwise198;call #t~mem199 := read~int#15(~#rs~0.base, 8 + ~#rs~0.offset + 4 * (if ~i~0 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then ~i~0 % 4294967296 % 18446744073709551616 else ~i~0 % 4294967296 % 18446744073709551616 - 18446744073709551616), 4);call #t~mem200.base, #t~mem200.offset := read~$Pointer$#15(~dev~0.base, 20 + ~dev~0.offset, 8); [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464-2: assume !(0 != (if #t~bitwise198 % 18446744073709551616 % 4294967296 <= 2147483647 then #t~bitwise198 % 18446744073709551616 % 4294967296 else #t~bitwise198 % 18446744073709551616 % 4294967296 - 4294967296) % 2);havoc #t~mem197;havoc #t~bitwise198; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464-1: assume ~i~0 % 4294967296 < ~m~0 % 4294967296; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464-1: assume !(~i~0 % 4294967296 < ~m~0 % 4294967296); [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464-3: assume 0 == #t~mem197 % 4294967296 % 18446744073709551616 || 0 == (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296);#t~bitwise198 := #t~mem197 % 4294967296; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464-3: assume !(0 == #t~mem197 % 4294967296 % 18446744073709551616 || 0 == (if ~i~0 % 4294967296 % 4294967296 <= 2147483647 then ~i~0 % 4294967296 % 4294967296 else ~i~0 % 4294967296 % 4294967296 - 4294967296)); [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3580: SUMMARY for call spin_unlock_irqrestore(~dev~0.base, 385 + ~dev~0.offset, ~flags~0); srcloc: null [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3514: SUMMARY for call #t~ret202 := ioread32(#t~mem201.base, #t~mem201.offset); srcloc: null [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3514-1: call #t~mem201.base, #t~mem201.offset := read~$Pointer$#15(~dev~0.base, 12 + ~dev~0.offset, 8); [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3506: ~i~0 := 1 + ~i~0; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3581-1: SUMMARY for call #t~ret222 := copy_to_user(~argp~0.base, ~argp~0.offset, ~#rs~0.base, ~#rs~0.offset, 40); srcloc: null [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3581: assume -2147483648 <= #t~ret222 && #t~ret222 <= 2147483647;~tmp___13~0 := #t~ret222; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3567-1: havoc #t~bitwise219; [2025-02-08 02:44:09,077 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3567: [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3567-2: call #t~mem218 := read~int#15(~#rs~0.base, 4 + ~#rs~0.offset, 4); [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3568: call write~int#15(#t~ret221, ~#rs~0.base, 8 + ~#rs~0.offset + 4 * (if ~i~0 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then ~i~0 % 4294967296 % 18446744073709551616 else ~i~0 % 4294967296 % 18446744073709551616 - 18446744073709551616), 4);havoc #t~mem220.base, #t~mem220.offset;havoc #t~ret221; [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3502: [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3568-1: SUMMARY for call #t~ret221 := ioread32(#t~mem220.base, #t~mem220.offset + (if ~i~0 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~0 % 4294967296 % 18446744073709551616 % 18446744073709551616 else ~i~0 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3502-2: call #t~mem197 := read~int#15(~#rs~0.base, 4 + ~#rs~0.offset, 4); [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3502-1: havoc #t~bitwise198; [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3503-1: SUMMARY for call iowrite32(#t~mem199, #t~mem200.base, #t~mem200.offset + (if ~i~0 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~0 % 4294967296 % 18446744073709551616 % 18446744073709551616 else ~i~0 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:44:09,078 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3503: havoc #t~mem199;havoc #t~mem200.base, #t~mem200.offset; [2025-02-08 02:44:09,089 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5124: havoc #t~ret415.base, #t~ret415.offset; [2025-02-08 02:44:09,101 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5025: havoc _copy_to_user_#t~nondet400#1; [2025-02-08 02:44:09,104 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5001: havoc #t~nondet397; [2025-02-08 02:44:09,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3292: havoc warn_slowpath_fmt_~arg0#1.base, warn_slowpath_fmt_~arg0#1.offset, warn_slowpath_fmt_~arg1#1, warn_slowpath_fmt_~arg2#1.base, warn_slowpath_fmt_~arg2#1.offset;havoc warn_slowpath_fmt_#in~arg0#1.base, warn_slowpath_fmt_#in~arg0#1.offset, warn_slowpath_fmt_#in~arg1#1, warn_slowpath_fmt_#in~arg2#1.base, warn_slowpath_fmt_#in~arg2#1.offset;assume { :end_inline_warn_slowpath_fmt } true; [2025-02-08 02:44:09,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3349: call ULTIMATE.dealloc(~#descriptor~0.base, ~#descriptor~0.offset);havoc ~#descriptor~0.base, ~#descriptor~0.offset; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4032: call ULTIMATE.dealloc(phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset);havoc phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset;havoc phantom_exit_#t~mem341#1, phantom_exit_#t~ret342#1, phantom_exit_#t~ret343#1, phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset, phantom_exit_~tmp~17#1;assume { :end_inline_phantom_exit } true;~ldv_state_variable_0~0 := 2; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5056: havoc class_create_file_#t~nondet404#1;phantom_init_#t~ret332#1 := class_create_file_#res#1;havoc class_create_file_#t~nondet404#1, class_create_file_~arg0#1.base, class_create_file_~arg0#1.offset, class_create_file_~arg1#1.base, class_create_file_~arg1#1.offset;havoc class_create_file_#in~arg0#1.base, class_create_file_#in~arg0#1.offset, class_create_file_#in~arg1#1.base, class_create_file_#in~arg1#1.offset;assume { :end_inline_class_create_file } true;assume -2147483648 <= phantom_init_#t~ret332#1 && phantom_init_#t~ret332#1 <= 2147483647;phantom_init_~retval~1#1 := phantom_init_#t~ret332#1;havoc phantom_init_#t~ret332#1; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4032-1: call ULTIMATE.dealloc(phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset);havoc phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3867: havoc ldv_cdev_init_17_~cdev#1.base, ldv_cdev_init_17_~cdev#1.offset, ldv_cdev_init_17_~fops#1.base, ldv_cdev_init_17_~fops#1.offset;havoc ldv_cdev_init_17_#in~cdev#1.base, ldv_cdev_init_17_#in~cdev#1.offset, ldv_cdev_init_17_#in~fops#1.base, ldv_cdev_init_17_#in~fops#1.offset;assume { :end_inline_ldv_cdev_init_17 } true;call write~$Pointer$#15(~#__this_module~0.base, ~#__this_module~0.offset, phantom_probe_~pht~0#1.base, 189 + phantom_probe_~pht~0#1.offset, 8);call phantom_probe_#t~mem294#1.base, phantom_probe_#t~mem294#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 4 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4759: assume 1 == ~ldv_mutex_open_lock_of_phantom_device~0; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4759: assume !(1 == ~ldv_mutex_open_lock_of_phantom_device~0); [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4991: SUMMARY for call ldv_error(); srcloc: null [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3901: SUMMARY for call kfree(phantom_probe_~pht~0#1.base, phantom_probe_~pht~0#1.offset); srcloc: null [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3835: phantom_probe_#t~ret282#1.base, phantom_probe_#t~ret282#1.offset := kzalloc_#res#1.base, kzalloc_#res#1.offset;havoc kzalloc_#t~bitwise93#1, kzalloc_#t~ret94#1.base, kzalloc_#t~ret94#1.offset, kzalloc_~size#1, kzalloc_~flags#1, kzalloc_~tmp~1#1.base, kzalloc_~tmp~1#1.offset;havoc kzalloc_#in~size#1, kzalloc_#in~flags#1;assume { :end_inline_kzalloc } true;phantom_probe_~tmp~12#1.base, phantom_probe_~tmp~12#1.offset := phantom_probe_#t~ret282#1.base, phantom_probe_#t~ret282#1.offset;havoc phantom_probe_#t~ret282#1.base, phantom_probe_#t~ret282#1.offset;phantom_probe_~pht~0#1.base, phantom_probe_~pht~0#1.offset := phantom_probe_~tmp~12#1.base, phantom_probe_~tmp~12#1.offset; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3637: assume 0 != phantom_open_#t~mem236#1 % 4294967296;havoc phantom_open_#t~mem236#1;assume { :begin_inline_ldv_mutex_unlock_11 } true;ldv_mutex_unlock_11_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_11_#in~ldv_func_arg1#1.offset := phantom_open_~dev~1#1.base, 229 + phantom_open_~dev~1#1.offset;havoc ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset;ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset := ldv_mutex_unlock_11_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_11_#in~ldv_func_arg1#1.offset; [2025-02-08 02:44:15,900 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3637: assume !(0 != phantom_open_#t~mem236#1 % 4294967296);havoc phantom_open_#t~mem236#1;call phantom_open_#t~mem237#1 := read~int#15(phantom_open_~dev~1#1.base, 28 + phantom_open_~dev~1#1.offset, 8); [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4001: assume 0 != phantom_init_~retval~1#1; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4001: assume !(0 != phantom_init_~retval~1#1);assume { :begin_inline_alloc_chrdev_region } true;alloc_chrdev_region_#in~arg0#1.base, alloc_chrdev_region_#in~arg0#1.offset, alloc_chrdev_region_#in~arg1#1, alloc_chrdev_region_#in~arg2#1, alloc_chrdev_region_#in~arg3#1.base, alloc_chrdev_region_#in~arg3#1.offset := phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset, 0, 8, 61, 0;havoc alloc_chrdev_region_#res#1;havoc alloc_chrdev_region_#t~nondet402#1, alloc_chrdev_region_~arg0#1.base, alloc_chrdev_region_~arg0#1.offset, alloc_chrdev_region_~arg1#1, alloc_chrdev_region_~arg2#1, alloc_chrdev_region_~arg3#1.base, alloc_chrdev_region_~arg3#1.offset;alloc_chrdev_region_~arg0#1.base, alloc_chrdev_region_~arg0#1.offset := alloc_chrdev_region_#in~arg0#1.base, alloc_chrdev_region_#in~arg0#1.offset;alloc_chrdev_region_~arg1#1 := alloc_chrdev_region_#in~arg1#1;alloc_chrdev_region_~arg2#1 := alloc_chrdev_region_#in~arg2#1;alloc_chrdev_region_~arg3#1.base, alloc_chrdev_region_~arg3#1.offset := alloc_chrdev_region_#in~arg3#1.base, alloc_chrdev_region_#in~arg3#1.offset;havoc alloc_chrdev_region_#t~nondet402#1;assume -2147483648 <= alloc_chrdev_region_#t~nondet402#1 && alloc_chrdev_region_#t~nondet402#1 <= 2147483647;alloc_chrdev_region_#res#1 := alloc_chrdev_region_#t~nondet402#1;havoc alloc_chrdev_region_#t~nondet402#1; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3869-1: SUMMARY for call iowrite32(0, phantom_probe_#t~mem294#1.base, 76 + phantom_probe_#t~mem294#1.offset); srcloc: null [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3869: havoc phantom_probe_#t~mem294#1.base, phantom_probe_#t~mem294#1.offset;call phantom_probe_#t~mem295#1.base, phantom_probe_#t~mem295#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 4 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3638: havoc ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_11_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_11_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_11 } true;assume { :begin_inline_ldv_mutex_unlock_12 } true;ldv_mutex_unlock_12_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_12_#in~ldv_func_arg1#1.offset := ~#phantom_mutex~0.base, ~#phantom_mutex~0.offset;havoc ldv_mutex_unlock_12_~ldv_func_arg1#1.base, ldv_mutex_unlock_12_~ldv_func_arg1#1.offset;ldv_mutex_unlock_12_~ldv_func_arg1#1.base, ldv_mutex_unlock_12_~ldv_func_arg1#1.offset := ldv_mutex_unlock_12_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_12_#in~ldv_func_arg1#1.offset; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4761: SUMMARY for call ldv_error(); srcloc: null [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4398: havoc ldv_mutex_lock_open_lock_of_phantom_device_~lock#1.base, ldv_mutex_lock_open_lock_of_phantom_device_~lock#1.offset;havoc ldv_mutex_lock_open_lock_of_phantom_device_#in~lock#1.base, ldv_mutex_lock_open_lock_of_phantom_device_#in~lock#1.offset;assume { :end_inline_ldv_mutex_lock_open_lock_of_phantom_device } true; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4002: assume -2147483648 <= phantom_init_#t~ret333#1 && phantom_init_#t~ret333#1 <= 2147483647;havoc phantom_init_#t~ret333#1; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4035: havoc pci_unregister_driver_~arg0#1.base, pci_unregister_driver_~arg0#1.offset;havoc pci_unregister_driver_#in~arg0#1.base, pci_unregister_driver_#in~arg0#1.offset;assume { :end_inline_pci_unregister_driver } true; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4002-1: SUMMARY for call phantom_init_#t~ret333#1 := printk(60, 0); srcloc: null [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3903-1: SUMMARY for call pci_release_regions(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset); srcloc: null [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3870: havoc phantom_probe_#t~mem295#1.base, phantom_probe_#t~mem295#1.offset;havoc phantom_probe_#t~ret296#1;call phantom_probe_#t~mem297#1 := read~int#17(phantom_probe_~pdev#1.base, 1238 + phantom_probe_~pdev#1.offset, 4);assume { :begin_inline_request_irq } true;request_irq_#in~irq#1, request_irq_#in~handler#1.base, request_irq_#in~handler#1.offset, request_irq_#in~flags#1, request_irq_#in~name#1.base, request_irq_#in~name#1.offset, request_irq_#in~dev#1.base, request_irq_#in~dev#1.offset := phantom_probe_#t~mem297#1, #funAddr~phantom_isr.base, #funAddr~phantom_isr.offset, 160, 50, 0, phantom_probe_~pht~0#1.base, phantom_probe_~pht~0#1.offset;havoc request_irq_#res#1;havoc request_irq_#t~ret125#1, request_irq_~irq#1, request_irq_~handler#1.base, request_irq_~handler#1.offset, request_irq_~flags#1, request_irq_~name#1.base, request_irq_~name#1.offset, request_irq_~dev#1.base, request_irq_~dev#1.offset, request_irq_~tmp~5#1;request_irq_~irq#1 := request_irq_#in~irq#1;request_irq_~handler#1.base, request_irq_~handler#1.offset := request_irq_#in~handler#1.base, request_irq_#in~handler#1.offset;request_irq_~flags#1 := request_irq_#in~flags#1;request_irq_~name#1.base, request_irq_~name#1.offset := request_irq_#in~name#1.base, request_irq_#in~name#1.offset;request_irq_~dev#1.base, request_irq_~dev#1.offset := request_irq_#in~dev#1.base, request_irq_#in~dev#1.offset;havoc request_irq_~tmp~5#1;assume { :begin_inline_request_threaded_irq } true;request_threaded_irq_#in~arg0#1, request_threaded_irq_#in~arg1#1.base, request_threaded_irq_#in~arg1#1.offset, request_threaded_irq_#in~arg2#1.base, request_threaded_irq_#in~arg2#1.offset, request_threaded_irq_#in~arg3#1, request_threaded_irq_#in~arg4#1.base, request_threaded_irq_#in~arg4#1.offset, request_threaded_irq_#in~arg5#1.base, request_threaded_irq_#in~arg5#1.offset := request_irq_~irq#1, request_irq_~handler#1.base, request_irq_~handler#1.offset, 0, 0, request_irq_~flags#1, request_irq_~name#1.base, request_irq_~name#1.offset, request_irq_~dev#1.base, request_irq_~dev#1.offset;havoc request_threaded_irq_#res#1;havoc request_threaded_irq_#t~nondet418#1, request_threaded_irq_~arg0#1, request_threaded_irq_~arg1#1.base, request_threaded_irq_~arg1#1.offset, request_threaded_irq_~arg2#1.base, request_threaded_irq_~arg2#1.offset, request_threaded_irq_~arg3#1, request_threaded_irq_~arg4#1.base, request_threaded_irq_~arg4#1.offset, request_threaded_irq_~arg5#1.base, request_threaded_irq_~arg5#1.offset;request_threaded_irq_~arg0#1 := request_threaded_irq_#in~arg0#1;request_threaded_irq_~arg1#1.base, request_threaded_irq_~arg1#1.offset := request_threaded_irq_#in~arg1#1.base, request_threaded_irq_#in~arg1#1.offset;request_threaded_irq_~arg2#1.base, request_threaded_irq_~arg2#1.offset := request_threaded_irq_#in~arg2#1.base, request_threaded_irq_#in~arg2#1.offset;request_threaded_irq_~arg3#1 := request_threaded_irq_#in~arg3#1;request_threaded_irq_~arg4#1.base, request_threaded_irq_~arg4#1.offset := request_threaded_irq_#in~arg4#1.base, request_threaded_irq_#in~arg4#1.offset;request_threaded_irq_~arg5#1.base, request_threaded_irq_~arg5#1.offset := request_threaded_irq_#in~arg5#1.base, request_threaded_irq_#in~arg5#1.offset;havoc request_threaded_irq_#t~nondet418#1;assume -2147483648 <= request_threaded_irq_#t~nondet418#1 && request_threaded_irq_#t~nondet418#1 <= 2147483647;request_threaded_irq_#res#1 := request_threaded_irq_#t~nondet418#1;havoc request_threaded_irq_#t~nondet418#1; [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3903: call write~int#5(0, ~#phantom_devices~0.base, ~#phantom_devices~0.offset + (if phantom_probe_~minor~0#1 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then phantom_probe_~minor~0#1 % 4294967296 % 18446744073709551616 else phantom_probe_~minor~0#1 % 4294967296 % 18446744073709551616 - 18446744073709551616), 1); [2025-02-08 02:44:15,901 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3870-1: SUMMARY for call phantom_probe_#t~ret296#1 := ioread32(phantom_probe_#t~mem295#1.base, 76 + phantom_probe_#t~mem295#1.offset); srcloc: null [2025-02-08 02:44:15,902 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3837: assume 0 == (phantom_probe_~pht~0#1.base + phantom_probe_~pht~0#1.offset) % 18446744073709551616; [2025-02-08 02:44:15,902 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3837: assume !(0 == (phantom_probe_~pht~0#1.base + phantom_probe_~pht~0#1.offset) % 18446744073709551616); [2025-02-08 02:44:15,902 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3639: havoc ldv_mutex_unlock_12_~ldv_func_arg1#1.base, ldv_mutex_unlock_12_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_12_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_12_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_12 } true;phantom_open_#res#1 := -22; [2025-02-08 02:44:15,902 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4399: SUMMARY for call mutex_lock(ldv_mutex_lock_15_~ldv_func_arg1#1.base, ldv_mutex_lock_15_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,902 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4366: SUMMARY for call ldv_mutex_unlock_open_lock_of_phantom_device(ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4036: SUMMARY for call unregister_chrdev_region(1048576 * ~phantom_major~0, 8); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3838: assume -2147483648 <= phantom_probe_#t~ret283#1 && phantom_probe_#t~ret283#1 <= 2147483647;havoc phantom_probe_#t~ret283#1; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3871: phantom_probe_#t~ret298#1 := request_irq_#res#1;havoc request_irq_#t~ret125#1, request_irq_~irq#1, request_irq_~handler#1.base, request_irq_~handler#1.offset, request_irq_~flags#1, request_irq_~name#1.base, request_irq_~name#1.offset, request_irq_~dev#1.base, request_irq_~dev#1.offset, request_irq_~tmp~5#1;havoc request_irq_#in~irq#1, request_irq_#in~handler#1.base, request_irq_#in~handler#1.offset, request_irq_#in~flags#1, request_irq_#in~name#1.base, request_irq_#in~name#1.offset, request_irq_#in~dev#1.base, request_irq_#in~dev#1.offset;assume { :end_inline_request_irq } true;assume -2147483648 <= phantom_probe_#t~ret298#1 && phantom_probe_#t~ret298#1 <= 2147483647;phantom_probe_~retval~0#1 := phantom_probe_#t~ret298#1;havoc phantom_probe_#t~mem297#1;havoc phantom_probe_#t~ret298#1; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4763: havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1;assume -2147483648 <= ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1 && ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1 <= 2147483647;ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~nondetermined~9#1 := ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1;havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3838-1: SUMMARY for call phantom_probe_#t~ret283#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 43, 0); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4367: SUMMARY for call mutex_unlock(ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4037: SUMMARY for call class_remove_file(~phantom_class~0.base, ~phantom_class~0.offset, ~#class_attr_version~0.base, ~#class_attr_version~0.offset); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3872: assume 0 != phantom_probe_~retval~0#1; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3872: assume !(0 != phantom_probe_~retval~0#1); [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4764: assume 0 != ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~nondetermined~9#1;~ldv_mutex_open_lock_of_phantom_device~0 := 2;ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#res#1 := 0; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4764: assume !(0 != ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~nondetermined~9#1);ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#res#1 := -4; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4038: call write~$Pointer$#1(66, 0, phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset, 8);call write~$Pointer$#1(67, 0, phantom_exit_~#descriptor~3#1.base, 8 + phantom_exit_~#descriptor~3#1.offset, 8);call write~$Pointer$#1(68, 0, phantom_exit_~#descriptor~3#1.base, 16 + phantom_exit_~#descriptor~3#1.offset, 8);call write~$Pointer$#1(69, 0, phantom_exit_~#descriptor~3#1.base, 24 + phantom_exit_~#descriptor~3#1.offset, 8);call write~int#1(617, phantom_exit_~#descriptor~3#1.base, 32 + phantom_exit_~#descriptor~3#1.offset, 4);call write~int#1(0, phantom_exit_~#descriptor~3#1.base, 36 + phantom_exit_~#descriptor~3#1.offset, 1);call phantom_exit_#t~mem341#1 := read~int#1(phantom_exit_~#descriptor~3#1.base, 36 + phantom_exit_~#descriptor~3#1.offset, 1); [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4038-1: SUMMARY for call class_destroy(~phantom_class~0.base, ~phantom_class~0.offset); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3873-1: SUMMARY for call phantom_probe_#t~ret299#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 51, 0); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3873: assume -2147483648 <= phantom_probe_#t~ret299#1 && phantom_probe_#t~ret299#1 <= 2147483647;havoc phantom_probe_#t~ret299#1; [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3907-1: SUMMARY for call pci_disable_device(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset); srcloc: null [2025-02-08 02:44:15,903 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4997: havoc __class_create_#t~ret396#1.base, __class_create_#t~ret396#1.offset;phantom_init_#t~ret328#1.base, phantom_init_#t~ret328#1.offset := __class_create_#res#1.base, __class_create_#res#1.offset;havoc __class_create_#t~ret396#1.base, __class_create_#t~ret396#1.offset, __class_create_~arg0#1.base, __class_create_~arg0#1.offset, __class_create_~arg1#1.base, __class_create_~arg1#1.offset, __class_create_~arg2#1.base, __class_create_~arg2#1.offset;havoc __class_create_#in~arg0#1.base, __class_create_#in~arg0#1.offset, __class_create_#in~arg1#1.base, __class_create_#in~arg1#1.offset, __class_create_#in~arg2#1.base, __class_create_#in~arg2#1.offset;assume { :end_inline___class_create } true;phantom_init_~tmp~16#1.base, phantom_init_~tmp~16#1.offset := phantom_init_#t~ret328#1.base, phantom_init_#t~ret328#1.offset;havoc phantom_init_#t~ret328#1.base, phantom_init_#t~ret328#1.offset;~phantom_class~0.base, ~phantom_class~0.offset := phantom_init_~tmp~16#1.base, phantom_init_~tmp~16#1.offset; [2025-02-08 02:44:15,904 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3907: phantom_probe_#res#1 := phantom_probe_~retval~0#1;call ULTIMATE.dealloc(phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset);havoc phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset;call ULTIMATE.dealloc(phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset);havoc phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset;call ULTIMATE.dealloc(phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset);havoc phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset; [2025-02-08 02:44:15,904 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808: call ULTIMATE.dealloc(phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset);havoc phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset;call ULTIMATE.dealloc(phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset);havoc phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset;call ULTIMATE.dealloc(phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset);havoc phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset;main_#t~ret363#1 := phantom_probe_#res#1;havoc phantom_probe_#t~ret276#1, phantom_probe_#t~ret277#1, phantom_probe_#t~ret278#1, phantom_probe_#t~ret279#1, phantom_probe_#t~ret280#1, phantom_probe_#t~ret281#1, phantom_probe_#t~ret282#1.base, phantom_probe_#t~ret282#1.offset, phantom_probe_#t~ret283#1, phantom_probe_#t~ret284#1.base, phantom_probe_#t~ret284#1.offset, phantom_probe_#t~mem285#1.base, phantom_probe_#t~mem285#1.offset, phantom_probe_#t~ret286#1, phantom_probe_#t~ret287#1.base, phantom_probe_#t~ret287#1.offset, phantom_probe_#t~mem288#1.base, phantom_probe_#t~mem288#1.offset, phantom_probe_#t~ret289#1, phantom_probe_#t~ret290#1.base, phantom_probe_#t~ret290#1.offset, phantom_probe_#t~mem291#1.base, phantom_probe_#t~mem291#1.offset, phantom_probe_#t~ret292#1, phantom_probe_#t~ret293#1.base, phantom_probe_#t~ret293#1.offset, phantom_probe_#t~mem294#1.base, phantom_probe_#t~mem294#1.offset, phantom_probe_#t~mem295#1.base, phantom_probe_#t~mem295#1.offset, phantom_probe_#t~ret296#1, phantom_probe_#t~mem297#1, phantom_probe_#t~ret298#1, phantom_probe_#t~ret299#1, phantom_probe_#t~bitwise300#1, phantom_probe_#t~ret301#1, phantom_probe_#t~ret302#1, phantom_probe_#t~bitwise303#1, phantom_probe_#t~ret304#1.base, phantom_probe_#t~ret304#1.offset, phantom_probe_#t~ret305#1, phantom_probe_#t~ret306#1, phantom_probe_#t~mem307#1, phantom_probe_#t~mem308#1.base, phantom_probe_#t~mem308#1.offset, phantom_probe_#t~mem309#1.base, phantom_probe_#t~mem309#1.offset, phantom_probe_#t~mem310#1.base, phantom_probe_#t~mem310#1.offset, phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, phantom_probe_~pci_id#1.base, phantom_probe_~pci_id#1.offset, phantom_probe_~pht~0#1.base, phantom_probe_~pht~0#1.offset, phantom_probe_~minor~0#1, phantom_probe_~retval~0#1, phantom_probe_~tmp~12#1.base, phantom_probe_~tmp~12#1.offset, phantom_probe_~tmp___0~5#1.base, phantom_probe_~tmp___0~5#1.offset, phantom_probe_~tmp___1~3#1.base, phantom_probe_~tmp___1~3#1.offset, phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset, phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset, phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset, phantom_probe_~tmp___2~4#1.base, phantom_probe_~tmp___2~4#1.offset, phantom_probe_~tmp___3~2#1;havoc phantom_probe_#in~pdev#1.base, phantom_probe_#in~pdev#1.offset, phantom_probe_#in~pci_id#1.base, phantom_probe_#in~pci_id#1.offset;assume { :end_inline_phantom_probe } true;assume -2147483648 <= main_#t~ret363#1 && main_#t~ret363#1 <= 2147483647;~ldv_retval_4~0 := main_#t~ret363#1;havoc main_#t~ret363#1; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643-1: [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643: phantom_open_~__ret_warn_on~1#1 := (if 0 != phantom_open_#t~bitwise238#1 % 18446744073709551616 then 1 else 0);havoc phantom_open_#t~mem237#1;havoc phantom_open_#t~bitwise238#1; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643-3: assume 2 == phantom_open_#t~mem237#1 % 18446744073709551616;phantom_open_#t~bitwise238#1 := phantom_open_#t~mem237#1; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643-3: assume !(2 == phantom_open_#t~mem237#1 % 18446744073709551616); [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643-2: havoc phantom_open_#t~bitwise238#1;assume phantom_open_#t~bitwise238#1 % 18446744073709551616 <= phantom_open_#t~mem237#1 % 18446744073709551616 && phantom_open_#t~bitwise238#1 % 18446744073709551616 <= 2; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643-4: assume 0 == phantom_open_#t~mem237#1 % 18446744073709551616;phantom_open_#t~bitwise238#1 := 0; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3643-4: assume !(0 == phantom_open_#t~mem237#1 % 18446744073709551616); [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4271: assume { :end_inline_ldv_check_final_state } true;main_#res#1 := 0;#t~ret421#1 := main_#res#1;havoc main_#t~nondet344#1, main_#t~switch345#1, main_#t~nondet346#1, main_#t~switch347#1, main_#t~ret348#1, main_#t~nondet349#1, main_#t~switch350#1, main_#t~ret351#1, main_#t~nondet352#1, main_#t~switch353#1, main_#t~ret354#1, main_#t~ret355#1, main_#t~ret356#1, main_#t~ret357#1, main_#t~ret358#1, main_#t~ret359#1, main_#t~ret360#1, main_#t~nondet361#1, main_#t~switch362#1, main_#t~ret363#1, main_#t~mem364#1, main_#t~ret365#1, main_#t~ret366#1, main_~tmp~18#1, main_~tmp___0~7#1, main_~tmp___1~5#1, main_~tmp___2~5#1, main_~tmp___3~3#1;assume { :end_inline_main } true; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4271-1: assume { :begin_inline_ldv_check_final_state } true; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4007: assume 0 != phantom_init_~retval~1#1; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4007: assume !(0 != phantom_init_~retval~1#1);call phantom_init_#t~mem336#1 := read~int#9(phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset, 4);~phantom_major~0 := (if phantom_init_#t~mem336#1 % 4294967296 / 1048576 % 4294967296 % 4294967296 <= 2147483647 then phantom_init_#t~mem336#1 % 4294967296 / 1048576 % 4294967296 % 4294967296 else phantom_init_#t~mem336#1 % 4294967296 / 1048576 % 4294967296 % 4294967296 - 4294967296);havoc phantom_init_#t~mem336#1;assume { :begin_inline___pci_register_driver } true;__pci_register_driver_#in~arg0#1.base, __pci_register_driver_#in~arg0#1.offset, __pci_register_driver_#in~arg1#1.base, __pci_register_driver_#in~arg1#1.offset, __pci_register_driver_#in~arg2#1.base, __pci_register_driver_#in~arg2#1.offset := ~#phantom_pci_driver~0.base, ~#phantom_pci_driver~0.offset, ~#__this_module~0.base, ~#__this_module~0.offset, 63, 0;havoc __pci_register_driver_#res#1;havoc __pci_register_driver_#t~nondet398#1, __pci_register_driver_~arg0#1.base, __pci_register_driver_~arg0#1.offset, __pci_register_driver_~arg1#1.base, __pci_register_driver_~arg1#1.offset, __pci_register_driver_~arg2#1.base, __pci_register_driver_~arg2#1.offset;__pci_register_driver_~arg0#1.base, __pci_register_driver_~arg0#1.offset := __pci_register_driver_#in~arg0#1.base, __pci_register_driver_#in~arg0#1.offset;__pci_register_driver_~arg1#1.base, __pci_register_driver_~arg1#1.offset := __pci_register_driver_#in~arg1#1.base, __pci_register_driver_#in~arg1#1.offset;__pci_register_driver_~arg2#1.base, __pci_register_driver_~arg2#1.offset := __pci_register_driver_#in~arg2#1.base, __pci_register_driver_#in~arg2#1.offset;havoc __pci_register_driver_#t~nondet398#1;assume -2147483648 <= __pci_register_driver_#t~nondet398#1 && __pci_register_driver_#t~nondet398#1 <= 2147483647;__pci_register_driver_#res#1 := __pci_register_driver_#t~nondet398#1;havoc __pci_register_driver_#t~nondet398#1; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842: call write~$Pointer$#15(phantom_probe_#t~ret284#1.base, phantom_probe_#t~ret284#1.offset, phantom_probe_~pht~0#1.base, 4 + phantom_probe_~pht~0#1.offset, 8);havoc phantom_probe_#t~ret284#1.base, phantom_probe_#t~ret284#1.offset;call phantom_probe_#t~mem285#1.base, phantom_probe_#t~mem285#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 4 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-1: SUMMARY for call phantom_probe_#t~ret284#1.base, phantom_probe_#t~ret284#1.offset := pci_iomap(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, 0, 0); srcloc: null [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3644: assume -9223372036854775808 <= phantom_open_#t~ret239#1 && phantom_open_#t~ret239#1 <= 9223372036854775807;phantom_open_~tmp___0~3#1 := phantom_open_#t~ret239#1;havoc phantom_open_#t~ret239#1; [2025-02-08 02:44:15,905 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3644-1: SUMMARY for call phantom_open_#t~ret239#1 := ldv__builtin_expect((if 0 != phantom_open_~__ret_warn_on~1#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4338: havoc ldv_mutex_lock_phantom_mutex_~lock#1.base, ldv_mutex_lock_phantom_mutex_~lock#1.offset;havoc ldv_mutex_lock_phantom_mutex_#in~lock#1.base, ldv_mutex_lock_phantom_mutex_#in~lock#1.offset;assume { :end_inline_ldv_mutex_lock_phantom_mutex } true; [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4008: assume -2147483648 <= phantom_init_#t~ret335#1 && phantom_init_#t~ret335#1 <= 2147483647;havoc phantom_init_#t~ret335#1; [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4008-1: SUMMARY for call phantom_init_#t~ret335#1 := printk(62, 0); srcloc: null [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3843: assume 0 == (phantom_probe_#t~mem285#1.base + phantom_probe_#t~mem285#1.offset) % 18446744073709551616;havoc phantom_probe_#t~mem285#1.base, phantom_probe_#t~mem285#1.offset; [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3843: assume !(0 == (phantom_probe_#t~mem285#1.base + phantom_probe_#t~mem285#1.offset) % 18446744073709551616);havoc phantom_probe_#t~mem285#1.base, phantom_probe_#t~mem285#1.offset; [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3645: assume 0 != phantom_open_~tmp___0~3#1;assume { :begin_inline_warn_slowpath_null } true;warn_slowpath_null_#in~arg0#1.base, warn_slowpath_null_#in~arg0#1.offset, warn_slowpath_null_#in~arg1#1 := 28, 0, 288;havoc warn_slowpath_null_~arg0#1.base, warn_slowpath_null_~arg0#1.offset, warn_slowpath_null_~arg1#1;warn_slowpath_null_~arg0#1.base, warn_slowpath_null_~arg0#1.offset := warn_slowpath_null_#in~arg0#1.base, warn_slowpath_null_#in~arg0#1.offset;warn_slowpath_null_~arg1#1 := warn_slowpath_null_#in~arg1#1; [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3645: assume !(0 != phantom_open_~tmp___0~3#1); [2025-02-08 02:44:15,906 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4339: SUMMARY for call mutex_lock(ldv_mutex_lock_8_~ldv_func_arg1#1.base, ldv_mutex_lock_8_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5099: havoc mutex_lock_interruptible_#t~nondet410#1;ldv_mutex_lock_interruptible_9_#t~ret369#1 := mutex_lock_interruptible_#res#1;havoc mutex_lock_interruptible_#t~nondet410#1, mutex_lock_interruptible_~arg0#1.base, mutex_lock_interruptible_~arg0#1.offset;havoc mutex_lock_interruptible_#in~arg0#1.base, mutex_lock_interruptible_#in~arg0#1.offset;assume { :end_inline_mutex_lock_interruptible } true;assume -2147483648 <= ldv_mutex_lock_interruptible_9_#t~ret369#1 && ldv_mutex_lock_interruptible_9_#t~ret369#1 <= 2147483647;ldv_mutex_lock_interruptible_9_~tmp~20#1 := ldv_mutex_lock_interruptible_9_#t~ret369#1;havoc ldv_mutex_lock_interruptible_9_#t~ret369#1;ldv_mutex_lock_interruptible_9_~ldv_func_res~1#1 := ldv_mutex_lock_interruptible_9_~tmp~20#1;assume { :begin_inline_ldv_mutex_lock_interruptible_open_lock_of_phantom_device } true;ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#in~lock#1.base, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#in~lock#1.offset := ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#res#1;havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~lock#1.base, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~lock#1.offset, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~nondetermined~9#1;ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~lock#1.base, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~lock#1.offset := ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#in~lock#1.base, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#in~lock#1.offset;havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~nondetermined~9#1; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3943: havoc synchronize_irq_~arg0#1;havoc synchronize_irq_#in~arg0#1;assume { :end_inline_synchronize_irq } true;havoc phantom_suspend_#t~mem325#1;phantom_suspend_#res#1 := 0; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877-1: [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844: assume -2147483648 <= phantom_probe_#t~ret286#1 && phantom_probe_#t~ret286#1 <= 2147483647;havoc phantom_probe_#t~ret286#1; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877: assume { :begin_inline_cdev_add } true;cdev_add_#in~arg0#1.base, cdev_add_#in~arg0#1.offset, cdev_add_#in~arg1#1, cdev_add_#in~arg2#1 := phantom_probe_~pht~0#1.base, 124 + phantom_probe_~pht~0#1.offset, phantom_probe_#t~bitwise300#1, 1;havoc cdev_add_#res#1;havoc cdev_add_#t~nondet403#1, cdev_add_~arg0#1.base, cdev_add_~arg0#1.offset, cdev_add_~arg1#1, cdev_add_~arg2#1;cdev_add_~arg0#1.base, cdev_add_~arg0#1.offset := cdev_add_#in~arg0#1.base, cdev_add_#in~arg0#1.offset;cdev_add_~arg1#1 := cdev_add_#in~arg1#1;cdev_add_~arg2#1 := cdev_add_#in~arg2#1;havoc cdev_add_#t~nondet403#1;assume -2147483648 <= cdev_add_#t~nondet403#1 && cdev_add_#t~nondet403#1 <= 2147483647;cdev_add_#res#1 := cdev_add_#t~nondet403#1;havoc cdev_add_#t~nondet403#1; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877-3: assume 0 == phantom_probe_~minor~0#1 % 4294967296;phantom_probe_#t~bitwise300#1 := 1048576 * ~phantom_major~0; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877-3: assume !(0 == phantom_probe_~minor~0#1 % 4294967296); [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877-2: havoc phantom_probe_#t~bitwise300#1;assume (phantom_probe_#t~bitwise300#1 % 4294967296 >= 1048576 * ~phantom_major~0 % 4294967296 && phantom_probe_#t~bitwise300#1 % 4294967296 >= phantom_probe_~minor~0#1 % 4294967296) && phantom_probe_#t~bitwise300#1 % 4294967296 <= 1048576 * ~phantom_major~0 % 4294967296 + phantom_probe_~minor~0#1 % 4294967296; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-1: SUMMARY for call phantom_probe_#t~ret286#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 44, 0); srcloc: null [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877-4: assume 0 == 1048576 * ~phantom_major~0 % 4294967296 || 1048576 * ~phantom_major~0 % 4294967296 == phantom_probe_~minor~0#1 % 4294967296;phantom_probe_#t~bitwise300#1 := phantom_probe_~minor~0#1; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877-4: assume !(0 == 1048576 * ~phantom_major~0 % 4294967296 || 1048576 * ~phantom_major~0 % 4294967296 == phantom_probe_~minor~0#1 % 4294967296); [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3646: havoc warn_slowpath_null_~arg0#1.base, warn_slowpath_null_~arg0#1.offset, warn_slowpath_null_~arg1#1;havoc warn_slowpath_null_#in~arg0#1.base, warn_slowpath_null_#in~arg0#1.offset, warn_slowpath_null_#in~arg1#1;assume { :end_inline_warn_slowpath_null } true; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4406: SUMMARY for call ldv_mutex_unlock_open_lock_of_phantom_device(ldv_mutex_unlock_16_~ldv_func_arg1#1.base, ldv_mutex_unlock_16_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250: kzalloc_#t~ret94#1.base, kzalloc_#t~ret94#1.offset := kmalloc_#res#1.base, kmalloc_#res#1.offset;havoc kmalloc_#t~ret92#1.base, kmalloc_#t~ret92#1.offset, kmalloc_~size#1, kmalloc_~flags#1, kmalloc_~tmp___2~0#1.base, kmalloc_~tmp___2~0#1.offset;havoc kmalloc_#in~size#1, kmalloc_#in~flags#1;assume { :end_inline_kmalloc } true;kzalloc_~tmp~1#1.base, kzalloc_~tmp~1#1.offset := kzalloc_#t~ret94#1.base, kzalloc_#t~ret94#1.offset;havoc kzalloc_#t~bitwise93#1;havoc kzalloc_#t~ret94#1.base, kzalloc_#t~ret94#1.offset;kzalloc_#res#1.base, kzalloc_#res#1.offset := kzalloc_~tmp~1#1.base, kzalloc_~tmp~1#1.offset; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-2: [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-1: assume { :begin_inline_kmalloc } true;kmalloc_#in~size#1, kmalloc_#in~flags#1 := kzalloc_~size#1, kzalloc_#t~bitwise93#1;havoc kmalloc_#res#1.base, kmalloc_#res#1.offset;havoc kmalloc_#t~ret92#1.base, kmalloc_#t~ret92#1.offset, kmalloc_~size#1, kmalloc_~flags#1, kmalloc_~tmp___2~0#1.base, kmalloc_~tmp___2~0#1.offset;kmalloc_~size#1 := kmalloc_#in~size#1;kmalloc_~flags#1 := kmalloc_#in~flags#1;havoc kmalloc_~tmp___2~0#1.base, kmalloc_~tmp___2~0#1.offset;assume { :begin_inline___kmalloc } true;__kmalloc_#in~size#1, __kmalloc_#in~t#1 := kmalloc_~size#1, kmalloc_~flags#1;havoc __kmalloc_#res#1.base, __kmalloc_#res#1.offset;havoc __kmalloc_#t~ret91#1.base, __kmalloc_#t~ret91#1.offset, __kmalloc_~size#1, __kmalloc_~t#1;__kmalloc_~size#1 := __kmalloc_#in~size#1;__kmalloc_~t#1 := __kmalloc_#in~t#1; [2025-02-08 02:44:15,907 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-4: assume false;kzalloc_#t~bitwise93#1 := kzalloc_~flags#1; [2025-02-08 02:44:15,908 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-4: assume !false; [2025-02-08 02:44:15,908 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-3: havoc kzalloc_#t~bitwise93#1;assume (kzalloc_#t~bitwise93#1 % 4294967296 >= kzalloc_~flags#1 % 4294967296 && kzalloc_#t~bitwise93#1 % 4294967296 >= 32768) && kzalloc_#t~bitwise93#1 % 4294967296 <= 32768 + kzalloc_~flags#1 % 4294967296; [2025-02-08 02:44:15,909 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-5: assume 0 == kzalloc_~flags#1 % 4294967296 || 32768 == kzalloc_~flags#1 % 4294967296;kzalloc_#t~bitwise93#1 := 32768; [2025-02-08 02:44:15,909 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3250-5: assume !(0 == kzalloc_~flags#1 % 4294967296 || 32768 == kzalloc_~flags#1 % 4294967296); [2025-02-08 02:44:15,909 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3878: assume 0 != phantom_probe_~retval~0#1; [2025-02-08 02:44:15,909 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3878: assume !(0 != phantom_probe_~retval~0#1); [2025-02-08 02:44:15,909 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4407: SUMMARY for call mutex_unlock(ldv_mutex_unlock_16_~ldv_func_arg1#1.base, ldv_mutex_unlock_16_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4374: SUMMARY for call ldv_mutex_unlock_phantom_mutex(ldv_mutex_unlock_12_~ldv_func_arg1#1.base, ldv_mutex_unlock_12_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5134: havoc pci_request_regions_#t~nondet416#1;phantom_probe_#t~ret280#1 := pci_request_regions_#res#1;havoc pci_request_regions_#t~nondet416#1, pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset, pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset;havoc pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset, pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset;assume { :end_inline_pci_request_regions } true;assume -2147483648 <= phantom_probe_#t~ret280#1 && phantom_probe_#t~ret280#1 <= 2147483647;phantom_probe_~retval~0#1 := phantom_probe_#t~ret280#1;havoc phantom_probe_#t~ret280#1; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-1: assume 0 == ~ldv_retval_2~0;~ldv_state_variable_2~0 := 2; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-1: assume !(0 == ~ldv_retval_2~0); [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4110-2: assume 0 == ~ldv_retval_0~0;~ldv_state_variable_0~0 := 3;~ldv_state_variable_2~0 := 1;~ldv_state_variable_1~0 := 1; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4110-2: assume !(0 == ~ldv_retval_0~0); [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-7: assume 0 == ~ldv_retval_3~0;~ldv_state_variable_2~0 := 3; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-7: assume !(0 == ~ldv_retval_3~0); [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4110-1: assume 0 != ~ldv_retval_0~0;~ldv_state_variable_0~0 := 2; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4110-1: assume !(0 != ~ldv_retval_0~0); [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-10: assume 0 == ~ldv_retval_4~0;~ldv_state_variable_2~0 := 2;~ref_cnt~0 := 1 + ~ref_cnt~0; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-10: assume !(0 == ~ldv_retval_4~0); [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3879-1: SUMMARY for call phantom_probe_#t~ret302#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 52, 0); srcloc: null [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3879: assume -2147483648 <= phantom_probe_#t~ret302#1 && phantom_probe_#t~ret302#1 <= 2147483647;havoc phantom_probe_#t~ret302#1; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3615: phantom_compat_ioctl_#t~ret231#1.base, phantom_compat_ioctl_#t~ret231#1.offset := compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;havoc compat_ptr_#in~uptr#1;assume { :end_inline_compat_ptr } true;phantom_compat_ioctl_~tmp~8#1.base, phantom_compat_ioctl_~tmp~8#1.offset := phantom_compat_ioctl_#t~ret231#1.base, phantom_compat_ioctl_#t~ret231#1.offset;havoc phantom_compat_ioctl_#t~ret231#1.base, phantom_compat_ioctl_#t~ret231#1.offset; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4375: SUMMARY for call mutex_unlock(ldv_mutex_unlock_12_~ldv_func_arg1#1.base, ldv_mutex_unlock_12_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4045-1: SUMMARY for call phantom_exit_#t~ret342#1 := ldv__builtin_expect((if phantom_exit_#t~mem341#1 % 256 % 18446744073709551616 <= 9223372036854775807 then phantom_exit_#t~mem341#1 % 256 % 18446744073709551616 else phantom_exit_#t~mem341#1 % 256 % 18446744073709551616 - 18446744073709551616) % 2, 0); srcloc: null [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4045: assume -9223372036854775808 <= phantom_exit_#t~ret342#1 && phantom_exit_#t~ret342#1 <= 9223372036854775807;phantom_exit_~tmp~17#1 := phantom_exit_#t~ret342#1;havoc phantom_exit_#t~mem341#1;havoc phantom_exit_#t~ret342#1; [2025-02-08 02:44:15,910 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3616: assume -9223372036854775808 <= phantom_compat_ioctl_#t~ret232#1 && phantom_compat_ioctl_#t~ret232#1 <= 9223372036854775807;phantom_compat_ioctl_~tmp___0~2#1 := phantom_compat_ioctl_#t~ret232#1;havoc phantom_compat_ioctl_#t~ret232#1;phantom_compat_ioctl_#res#1 := phantom_compat_ioctl_~tmp___0~2#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3616-1: SUMMARY for call phantom_compat_ioctl_#t~ret232#1 := phantom_ioctl(phantom_compat_ioctl_~filp#1.base, phantom_compat_ioctl_~filp#1.offset, phantom_compat_ioctl_~cmd#1, phantom_compat_ioctl_~tmp~8#1.base + phantom_compat_ioctl_~tmp~8#1.offset); srcloc: null [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4046: assume 0 != phantom_exit_~tmp~17#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4046: assume !(0 != phantom_exit_~tmp~17#1); [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3848: phantom_probe_~tmp___0~5#1.base, phantom_probe_~tmp___0~5#1.offset := phantom_probe_#t~ret287#1.base, phantom_probe_#t~ret287#1.offset;havoc phantom_probe_#t~ret287#1.base, phantom_probe_#t~ret287#1.offset;call write~$Pointer$#15(phantom_probe_~tmp___0~5#1.base, phantom_probe_~tmp___0~5#1.offset, phantom_probe_~pht~0#1.base, 12 + phantom_probe_~pht~0#1.offset, 8);call phantom_probe_#t~mem288#1.base, phantom_probe_#t~mem288#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 12 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3848-1: SUMMARY for call phantom_probe_#t~ret287#1.base, phantom_probe_#t~ret287#1.offset := pci_iomap(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, 2, 0); srcloc: null [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3815: assume 0 != phantom_probe_~retval~0#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3815: assume !(0 != phantom_probe_~retval~0#1);assume { :begin_inline_phantom_get_free } true;havoc phantom_get_free_#res#1;havoc phantom_get_free_#t~mem275#1, phantom_get_free_~i~2#1;havoc phantom_get_free_~i~2#1;phantom_get_free_~i~2#1 := 0; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3650: assume -9223372036854775808 <= phantom_open_#t~ret240#1 && phantom_open_#t~ret240#1 <= 9223372036854775807;havoc phantom_open_#t~ret240#1;call write~$Pointer$#12(phantom_open_~dev~1#1.base, phantom_open_~dev~1#1.offset, phantom_open_~file#1.base, 284 + phantom_open_~file#1.offset, 8); [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3650-1: SUMMARY for call phantom_open_#t~ret240#1 := ldv__builtin_expect((if 0 != phantom_open_~__ret_warn_on~1#1 then 1 else 0), 0); srcloc: null [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4014: assume 0 != phantom_init_~retval~1#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4014: assume !(0 != phantom_init_~retval~1#1); [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4047-1: SUMMARY for call phantom_exit_#t~ret343#1 := __dynamic_pr_debug(phantom_exit_~#descriptor~3#1.base, phantom_exit_~#descriptor~3#1.offset, 70, 0); srcloc: null [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4146-3: assume 0 == ~ldv_retval_1~0;~ldv_state_variable_3~0 := 2;~ref_cnt~0 := 1 + ~ref_cnt~0; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4146-3: assume !(0 == ~ldv_retval_1~0); [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4047: assume -2147483648 <= phantom_exit_#t~ret343#1 && phantom_exit_#t~ret343#1 <= 2147483647;havoc phantom_exit_#t~ret343#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816: assume -2147483648 <= phantom_probe_#t~ret277#1 && phantom_probe_#t~ret277#1 <= 2147483647;havoc phantom_probe_#t~ret277#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-1: SUMMARY for call phantom_probe_#t~ret277#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 39, 0); srcloc: null [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4015-1: SUMMARY for call phantom_init_#t~ret338#1 := printk(64, 0); srcloc: null [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4015: assume -2147483648 <= phantom_init_#t~ret338#1 && phantom_init_#t~ret338#1 <= 2147483647;havoc phantom_init_#t~ret338#1; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4973: assume 1 == ~ldv_mutex_cred_guard_mutex_of_signal_struct~0; [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4973: assume !(1 == ~ldv_mutex_cred_guard_mutex_of_signal_struct~0); [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883-1: [2025-02-08 02:44:15,911 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3850: assume 0 == (phantom_probe_#t~mem288#1.base + phantom_probe_#t~mem288#1.offset) % 18446744073709551616;havoc phantom_probe_#t~mem288#1.base, phantom_probe_#t~mem288#1.offset; [2025-02-08 02:44:15,912 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3850: assume !(0 == (phantom_probe_#t~mem288#1.base + phantom_probe_#t~mem288#1.offset) % 18446744073709551616);havoc phantom_probe_#t~mem288#1.base, phantom_probe_#t~mem288#1.offset; [2025-02-08 02:44:15,912 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883: assume { :begin_inline_device_create } true;device_create_#in~arg0#1.base, device_create_#in~arg0#1.offset, device_create_#in~arg1#1.base, device_create_#in~arg1#1.offset, device_create_#in~arg2#1, device_create_#in~arg3#1.base, device_create_#in~arg3#1.offset, device_create_#in~arg4#1.base, device_create_#in~arg4#1.offset := ~phantom_class~0.base, ~phantom_class~0.offset, phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, phantom_probe_#t~bitwise303#1, 0, 0, 53, 0;havoc device_create_#res#1.base, device_create_#res#1.offset;havoc device_create_#t~ret408#1.base, device_create_#t~ret408#1.offset, device_create_~arg0#1.base, device_create_~arg0#1.offset, device_create_~arg1#1.base, device_create_~arg1#1.offset, device_create_~arg2#1, device_create_~arg3#1.base, device_create_~arg3#1.offset, device_create_~arg4#1.base, device_create_~arg4#1.offset;device_create_~arg0#1.base, device_create_~arg0#1.offset := device_create_#in~arg0#1.base, device_create_#in~arg0#1.offset;device_create_~arg1#1.base, device_create_~arg1#1.offset := device_create_#in~arg1#1.base, device_create_#in~arg1#1.offset;device_create_~arg2#1 := device_create_#in~arg2#1;device_create_~arg3#1.base, device_create_~arg3#1.offset := device_create_#in~arg3#1.base, device_create_#in~arg3#1.offset;device_create_~arg4#1.base, device_create_~arg4#1.offset := device_create_#in~arg4#1.base, device_create_#in~arg4#1.offset; [2025-02-08 02:44:15,912 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883-3: assume 0 == phantom_probe_~minor~0#1 % 4294967296;phantom_probe_#t~bitwise303#1 := 1048576 * ~phantom_major~0; [2025-02-08 02:44:15,912 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883-3: assume !(0 == phantom_probe_~minor~0#1 % 4294967296); [2025-02-08 02:44:15,912 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883-2: havoc phantom_probe_#t~bitwise303#1;assume (phantom_probe_#t~bitwise303#1 % 4294967296 >= 1048576 * ~phantom_major~0 % 4294967296 && phantom_probe_#t~bitwise303#1 % 4294967296 >= phantom_probe_~minor~0#1 % 4294967296) && phantom_probe_#t~bitwise303#1 % 4294967296 <= 1048576 * ~phantom_major~0 % 4294967296 + phantom_probe_~minor~0#1 % 4294967296; [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883-4: assume 0 == 1048576 * ~phantom_major~0 % 4294967296 || 1048576 * ~phantom_major~0 % 4294967296 == phantom_probe_~minor~0#1 % 4294967296;phantom_probe_#t~bitwise303#1 := phantom_probe_~minor~0#1; [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3883-4: assume !(0 == 1048576 * ~phantom_major~0 % 4294967296 || 1048576 * ~phantom_major~0 % 4294967296 == phantom_probe_~minor~0#1 % 4294967296); [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3652: call phantom_open_#t~mem241#1 := read~int#15(phantom_open_~dev~1#1.base, phantom_open_~dev~1#1.offset, 4);call write~int#15(1 + phantom_open_#t~mem241#1, phantom_open_~dev~1#1.base, phantom_open_~dev~1#1.offset, 4);havoc phantom_open_#t~mem241#1;assume { :begin_inline_ldv_mutex_unlock_13 } true;ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset := phantom_open_~dev~1#1.base, 229 + phantom_open_~dev~1#1.offset;havoc ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset;ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset := ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset; [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3652-1: SUMMARY for call atomic_set(phantom_open_~dev~1#1.base, 36 + phantom_open_~dev~1#1.offset, 0); srcloc: null [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5073: havoc dev_set_drvdata_#t~nondet407#1;pci_set_drvdata_#t~ret96#1 := dev_set_drvdata_#res#1;havoc dev_set_drvdata_#t~nondet407#1, dev_set_drvdata_~arg0#1.base, dev_set_drvdata_~arg0#1.offset, dev_set_drvdata_~arg1#1.base, dev_set_drvdata_~arg1#1.offset;havoc dev_set_drvdata_#in~arg0#1.base, dev_set_drvdata_#in~arg0#1.offset, dev_set_drvdata_#in~arg1#1.base, dev_set_drvdata_#in~arg1#1.offset;assume { :end_inline_dev_set_drvdata } true;assume -2147483648 <= pci_set_drvdata_#t~ret96#1 && pci_set_drvdata_#t~ret96#1 <= 2147483647;havoc pci_set_drvdata_#t~ret96#1; [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3851-1: SUMMARY for call phantom_probe_#t~ret289#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 45, 0); srcloc: null [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3851: assume -2147483648 <= phantom_probe_#t~ret289#1 && phantom_probe_#t~ret289#1 <= 2147483647;havoc phantom_probe_#t~ret289#1; [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4975: SUMMARY for call ldv_error(); srcloc: null [2025-02-08 02:44:15,913 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3984: call ULTIMATE.dealloc(phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset);havoc phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset;call ULTIMATE.dealloc(phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset);havoc phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset;main_#t~ret351#1 := phantom_init_#res#1;havoc phantom_init_#t~ret328#1.base, phantom_init_#t~ret328#1.offset, phantom_init_#t~ret329#1, phantom_init_#t~ret330#1, phantom_init_#t~ret331#1, phantom_init_#t~ret332#1, phantom_init_#t~ret333#1, phantom_init_#t~ret334#1, phantom_init_#t~ret335#1, phantom_init_#t~mem336#1, phantom_init_#t~ret337#1, phantom_init_#t~ret338#1, phantom_init_#t~ret339#1, phantom_init_#t~mem340#1, phantom_init_~retval~1#1, phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset, phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset, phantom_init_~tmp~16#1.base, phantom_init_~tmp~16#1.offset, phantom_init_~tmp___0~6#1, phantom_init_~tmp___1~4#1;assume { :end_inline_phantom_init } true;assume -2147483648 <= main_#t~ret351#1 && main_#t~ret351#1 <= 2147483647;~ldv_retval_0~0 := main_#t~ret351#1;havoc main_#t~ret351#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3885-1: SUMMARY for call phantom_probe_#t~ret305#1 := IS_ERR(phantom_probe_~tmp___2~4#1.base, phantom_probe_~tmp___2~4#1.offset); srcloc: null [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3885: assume -9223372036854775808 <= phantom_probe_#t~ret305#1 && phantom_probe_#t~ret305#1 <= 9223372036854775807;phantom_probe_~tmp___3~2#1 := phantom_probe_#t~ret305#1;havoc phantom_probe_#t~ret305#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3786: assume 0 == phantom_get_free_#t~mem275#1 % 256 % 4294967296;havoc phantom_get_free_#t~mem275#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3786: assume !(0 == phantom_get_free_#t~mem275#1 % 256 % 4294967296);havoc phantom_get_free_#t~mem275#1;phantom_get_free_~i~2#1 := 1 + phantom_get_free_~i~2#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3786-1: call phantom_get_free_#t~mem275#1 := read~int#5(~#phantom_devices~0.base, ~#phantom_devices~0.offset + (if phantom_get_free_~i~2#1 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then phantom_get_free_~i~2#1 % 4294967296 % 18446744073709551616 else phantom_get_free_~i~2#1 % 4294967296 % 18446744073709551616 - 18446744073709551616), 1); [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3654: havoc ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_13 } true;assume { :begin_inline_ldv_mutex_unlock_14 } true;ldv_mutex_unlock_14_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_14_#in~ldv_func_arg1#1.offset := ~#phantom_mutex~0.base, ~#phantom_mutex~0.offset;havoc ldv_mutex_unlock_14_~ldv_func_arg1#1.base, ldv_mutex_unlock_14_~ldv_func_arg1#1.offset;ldv_mutex_unlock_14_~ldv_func_arg1#1.base, ldv_mutex_unlock_14_~ldv_func_arg1#1.offset := ldv_mutex_unlock_14_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_14_#in~ldv_func_arg1#1.offset; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4414: havoc cdev_init_~arg0#1.base, cdev_init_~arg0#1.offset, cdev_init_~arg1#1.base, cdev_init_~arg1#1.offset;havoc cdev_init_#in~arg0#1.base, cdev_init_#in~arg0#1.offset, cdev_init_#in~arg1#1.base, cdev_init_#in~arg1#1.offset;assume { :end_inline_cdev_init } true;~ldv_state_variable_3~0 := 1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5042: havoc alloc_chrdev_region_#t~nondet402#1;phantom_init_#t~ret334#1 := alloc_chrdev_region_#res#1;havoc alloc_chrdev_region_#t~nondet402#1, alloc_chrdev_region_~arg0#1.base, alloc_chrdev_region_~arg0#1.offset, alloc_chrdev_region_~arg1#1, alloc_chrdev_region_~arg2#1, alloc_chrdev_region_~arg3#1.base, alloc_chrdev_region_~arg3#1.offset;havoc alloc_chrdev_region_#in~arg0#1.base, alloc_chrdev_region_#in~arg0#1.offset, alloc_chrdev_region_#in~arg1#1, alloc_chrdev_region_#in~arg2#1, alloc_chrdev_region_#in~arg3#1.base, alloc_chrdev_region_#in~arg3#1.offset;assume { :end_inline_alloc_chrdev_region } true;assume -2147483648 <= phantom_init_#t~ret334#1 && phantom_init_#t~ret334#1 <= 2147483647;phantom_init_~retval~1#1 := phantom_init_#t~ret334#1;havoc phantom_init_#t~ret334#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3886: assume 0 != phantom_probe_~tmp___3~2#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3886: assume !(0 != phantom_probe_~tmp___3~2#1); [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820: phantom_probe_#t~ret278#1 := phantom_get_free_#res#1;havoc phantom_get_free_#t~mem275#1, phantom_get_free_~i~2#1;assume { :end_inline_phantom_get_free } true;phantom_probe_~minor~0#1 := phantom_probe_#t~ret278#1;havoc phantom_probe_#t~ret278#1; [2025-02-08 02:44:15,914 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3655: havoc ldv_mutex_unlock_14_~ldv_func_arg1#1.base, ldv_mutex_unlock_14_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_14_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_14_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_14 } true;phantom_open_#res#1 := 0; [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4382: SUMMARY for call ldv_mutex_unlock_open_lock_of_phantom_device(ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4250: main_#t~ret366#1 := phantom_resume_#res#1;havoc phantom_resume_#t~ret326#1.base, phantom_resume_#t~ret326#1.offset, phantom_resume_#t~mem327#1.base, phantom_resume_#t~mem327#1.offset, phantom_resume_~pdev#1.base, phantom_resume_~pdev#1.offset, phantom_resume_~dev~6#1.base, phantom_resume_~dev~6#1.offset, phantom_resume_~tmp~15#1.base, phantom_resume_~tmp~15#1.offset;havoc phantom_resume_#in~pdev#1.base, phantom_resume_#in~pdev#1.offset;assume { :end_inline_phantom_resume } true;assume -2147483648 <= main_#t~ret366#1 && main_#t~ret366#1 <= 2147483647;~ldv_retval_2~0 := main_#t~ret366#1;havoc main_#t~ret366#1; [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5076-2: device_create_#res#1.base, device_create_#res#1.offset := device_create_#t~ret408#1.base, device_create_#t~ret408#1.offset;havoc device_create_#t~ret408#1.base, device_create_#t~ret408#1.offset; [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4019-1: SUMMARY for call phantom_init_#t~ret339#1 := printk(65, 0); srcloc: null [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5076: havoc device_create_#t~ret408#1.base, device_create_#t~ret408#1.offset;phantom_probe_#t~ret304#1.base, phantom_probe_#t~ret304#1.offset := device_create_#res#1.base, device_create_#res#1.offset;havoc device_create_#t~ret408#1.base, device_create_#t~ret408#1.offset, device_create_~arg0#1.base, device_create_~arg0#1.offset, device_create_~arg1#1.base, device_create_~arg1#1.offset, device_create_~arg2#1, device_create_~arg3#1.base, device_create_~arg3#1.offset, device_create_~arg4#1.base, device_create_~arg4#1.offset;havoc device_create_#in~arg0#1.base, device_create_#in~arg0#1.offset, device_create_#in~arg1#1.base, device_create_#in~arg1#1.offset, device_create_#in~arg2#1, device_create_#in~arg3#1.base, device_create_#in~arg3#1.offset, device_create_#in~arg4#1.base, device_create_#in~arg4#1.offset;assume { :end_inline_device_create } true;phantom_probe_~tmp___2~4#1.base, phantom_probe_~tmp___2~4#1.offset := phantom_probe_#t~ret304#1.base, phantom_probe_#t~ret304#1.offset;havoc phantom_probe_#t~bitwise303#1;havoc phantom_probe_#t~ret304#1.base, phantom_probe_#t~ret304#1.offset; [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4019: assume -2147483648 <= phantom_init_#t~ret339#1 && phantom_init_#t~ret339#1 <= 2147483647;havoc phantom_init_#t~ret339#1;phantom_init_#res#1 := 0;call ULTIMATE.dealloc(phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset);havoc phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset;call ULTIMATE.dealloc(phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset);havoc phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset; [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4977: assume 1 == ~ldv_mutex_lock~0; [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4977: assume !(1 == ~ldv_mutex_lock~0); [2025-02-08 02:44:15,915 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3887-1: SUMMARY for call phantom_probe_#t~ret306#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 54, 0); srcloc: null [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5076-3: SUMMARY for call device_create_#t~ret408#1.base, device_create_#t~ret408#1.offset := ldv_malloc(1087); srcloc: null [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3887: assume -2147483648 <= phantom_probe_#t~ret306#1 && phantom_probe_#t~ret306#1 <= 2147483647;havoc phantom_probe_#t~ret306#1; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3821: assume 8 == phantom_probe_~minor~0#1 % 4294967296; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3821: assume !(8 == phantom_probe_~minor~0#1 % 4294967296);call write~int#5(1, ~#phantom_devices~0.base, ~#phantom_devices~0.offset + (if phantom_probe_~minor~0#1 % 4294967296 % 18446744073709551616 <= 9223372036854775807 then phantom_probe_~minor~0#1 % 4294967296 % 18446744073709551616 else phantom_probe_~minor~0#1 % 4294967296 % 18446744073709551616 - 18446744073709551616), 1);assume { :begin_inline_pci_request_regions } true;pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset, pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset := phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, 41, 0;havoc pci_request_regions_#res#1;havoc pci_request_regions_#t~nondet416#1, pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset, pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset;pci_request_regions_~arg0#1.base, pci_request_regions_~arg0#1.offset := pci_request_regions_#in~arg0#1.base, pci_request_regions_#in~arg0#1.offset;pci_request_regions_~arg1#1.base, pci_request_regions_~arg1#1.offset := pci_request_regions_#in~arg1#1.base, pci_request_regions_#in~arg1#1.offset;havoc pci_request_regions_#t~nondet416#1;assume -2147483648 <= pci_request_regions_#t~nondet416#1 && pci_request_regions_#t~nondet416#1 <= 2147483647;pci_request_regions_#res#1 := pci_request_regions_#t~nondet416#1;havoc pci_request_regions_#t~nondet416#1; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4383: SUMMARY for call mutex_unlock(ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4350: ldv_mutex_lock_interruptible_9_#t~ret370#1 := ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#res#1;havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#t~nondet386#1, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~lock#1.base, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~lock#1.offset, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_~nondetermined~9#1;havoc ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#in~lock#1.base, ldv_mutex_lock_interruptible_open_lock_of_phantom_device_#in~lock#1.offset;assume { :end_inline_ldv_mutex_lock_interruptible_open_lock_of_phantom_device } true;assume -2147483648 <= ldv_mutex_lock_interruptible_9_#t~ret370#1 && ldv_mutex_lock_interruptible_9_#t~ret370#1 <= 2147483647;ldv_mutex_lock_interruptible_9_~tmp___0~9#1 := ldv_mutex_lock_interruptible_9_#t~ret370#1;havoc ldv_mutex_lock_interruptible_9_#t~ret370#1;ldv_mutex_lock_interruptible_9_#res#1 := ldv_mutex_lock_interruptible_9_~tmp___0~9#1; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4152: main_#t~ret354#1 := phantom_release_#res#1;havoc phantom_release_#t~mem242#1.base, phantom_release_#t~mem242#1.offset, phantom_release_#t~mem243#1, phantom_release_#t~ret244#1, phantom_release_#t~mem245#1, phantom_release_#t~bitwise246#1, phantom_release_~inode#1.base, phantom_release_~inode#1.offset, phantom_release_~file#1.base, phantom_release_~file#1.offset, phantom_release_~dev~2#1.base, phantom_release_~dev~2#1.offset;havoc phantom_release_#in~inode#1.base, phantom_release_#in~inode#1.offset, phantom_release_#in~file#1.base, phantom_release_#in~file#1.offset;assume { :end_inline_phantom_release } true;assume -2147483648 <= main_#t~ret354#1 && main_#t~ret354#1 <= 2147483647;havoc main_#t~ret354#1;~ldv_state_variable_3~0 := 1;~ref_cnt~0 := ~ref_cnt~0 - 1; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5110: havoc no_llseek_#t~nondet412#1;main_#t~ret358#1 := no_llseek_#res#1;havoc no_llseek_#t~nondet412#1, no_llseek_~arg0#1.base, no_llseek_~arg0#1.offset, no_llseek_~arg1#1, no_llseek_~arg2#1;havoc no_llseek_#in~arg0#1.base, no_llseek_#in~arg0#1.offset, no_llseek_#in~arg1#1, no_llseek_#in~arg2#1;assume { :end_inline_no_llseek } true;assume -9223372036854775808 <= main_#t~ret358#1 && main_#t~ret358#1 <= 9223372036854775807;havoc main_#t~ret358#1;~ldv_state_variable_3~0 := 2; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5011: havoc __pci_register_driver_#t~nondet398#1;phantom_init_#t~ret337#1 := __pci_register_driver_#res#1;havoc __pci_register_driver_#t~nondet398#1, __pci_register_driver_~arg0#1.base, __pci_register_driver_~arg0#1.offset, __pci_register_driver_~arg1#1.base, __pci_register_driver_~arg1#1.offset, __pci_register_driver_~arg2#1.base, __pci_register_driver_~arg2#1.offset;havoc __pci_register_driver_#in~arg0#1.base, __pci_register_driver_#in~arg0#1.offset, __pci_register_driver_#in~arg1#1.base, __pci_register_driver_#in~arg1#1.offset, __pci_register_driver_#in~arg2#1.base, __pci_register_driver_#in~arg2#1.offset;assume { :end_inline___pci_register_driver } true;assume -2147483648 <= phantom_init_#t~ret337#1 && phantom_init_#t~ret337#1 <= 2147483647;phantom_init_~retval~1#1 := phantom_init_#t~ret337#1;havoc phantom_init_#t~ret337#1; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3855-1: SUMMARY for call phantom_probe_#t~ret290#1.base, phantom_probe_#t~ret290#1.offset := pci_iomap(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, 3, 0); srcloc: null [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822: assume -2147483648 <= phantom_probe_#t~ret279#1 && phantom_probe_#t~ret279#1 <= 2147483647;havoc phantom_probe_#t~ret279#1;phantom_probe_~retval~0#1 := -5; [2025-02-08 02:44:15,916 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3855: phantom_probe_~tmp___1~3#1.base, phantom_probe_~tmp___1~3#1.offset := phantom_probe_#t~ret290#1.base, phantom_probe_#t~ret290#1.offset;havoc phantom_probe_#t~ret290#1.base, phantom_probe_#t~ret290#1.offset;call write~$Pointer$#15(phantom_probe_~tmp___1~3#1.base, phantom_probe_~tmp___1~3#1.offset, phantom_probe_~pht~0#1.base, 20 + phantom_probe_~pht~0#1.offset, 8);call phantom_probe_#t~mem291#1.base, phantom_probe_#t~mem291#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 20 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-1: SUMMARY for call phantom_probe_#t~ret279#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 40, 0); srcloc: null [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4186: main_#t~ret359#1 := phantom_open_#res#1;havoc phantom_open_#t~mem233#1.base, phantom_open_#t~mem233#1.offset, phantom_open_#t~ret234#1, phantom_open_#t~ret235#1, phantom_open_#t~mem236#1, phantom_open_#t~mem237#1, phantom_open_#t~bitwise238#1, phantom_open_#t~ret239#1, phantom_open_#t~ret240#1, phantom_open_#t~mem241#1, phantom_open_~inode#1.base, phantom_open_~inode#1.offset, phantom_open_~file#1.base, phantom_open_~file#1.offset, phantom_open_~dev~1#1.base, phantom_open_~dev~1#1.offset, phantom_open_~__mptr~0#1.base, phantom_open_~__mptr~0#1.offset, phantom_open_~tmp~9#1, phantom_open_~__ret_warn_on~1#1, phantom_open_~tmp___0~3#1;havoc phantom_open_#in~inode#1.base, phantom_open_#in~inode#1.offset, phantom_open_#in~file#1.base, phantom_open_#in~file#1.offset;assume { :end_inline_phantom_open } true;assume -2147483648 <= main_#t~ret359#1 && main_#t~ret359#1 <= 2147483647;~ldv_retval_1~0 := main_#t~ret359#1;havoc main_#t~ret359#1; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4979: SUMMARY for call ldv_error(); srcloc: null [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4352-1: ldv_mutex_lock_interruptible_9_#res#1 := ldv_mutex_lock_interruptible_9_~ldv_func_res~1#1; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5046: havoc cdev_add_#t~nondet403#1;phantom_probe_#t~ret301#1 := cdev_add_#res#1;havoc cdev_add_#t~nondet403#1, cdev_add_~arg0#1.base, cdev_add_~arg0#1.offset, cdev_add_~arg1#1, cdev_add_~arg2#1;havoc cdev_add_#in~arg0#1.base, cdev_add_#in~arg0#1.offset, cdev_add_#in~arg1#1, cdev_add_#in~arg2#1;assume { :end_inline_cdev_add } true;assume -2147483648 <= phantom_probe_#t~ret301#1 && phantom_probe_#t~ret301#1 <= 2147483647;phantom_probe_~retval~0#1 := phantom_probe_#t~ret301#1;havoc phantom_probe_#t~bitwise300#1;havoc phantom_probe_#t~ret301#1; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5145: havoc request_threaded_irq_#t~nondet418#1;request_irq_#t~ret125#1 := request_threaded_irq_#res#1;havoc request_threaded_irq_#t~nondet418#1, request_threaded_irq_~arg0#1, request_threaded_irq_~arg1#1.base, request_threaded_irq_~arg1#1.offset, request_threaded_irq_~arg2#1.base, request_threaded_irq_~arg2#1.offset, request_threaded_irq_~arg3#1, request_threaded_irq_~arg4#1.base, request_threaded_irq_~arg4#1.offset, request_threaded_irq_~arg5#1.base, request_threaded_irq_~arg5#1.offset;havoc request_threaded_irq_#in~arg0#1, request_threaded_irq_#in~arg1#1.base, request_threaded_irq_#in~arg1#1.offset, request_threaded_irq_#in~arg2#1.base, request_threaded_irq_#in~arg2#1.offset, request_threaded_irq_#in~arg3#1, request_threaded_irq_#in~arg4#1.base, request_threaded_irq_#in~arg4#1.offset, request_threaded_irq_#in~arg5#1.base, request_threaded_irq_#in~arg5#1.offset;assume { :end_inline_request_threaded_irq } true;assume -2147483648 <= request_irq_#t~ret125#1 && request_irq_#t~ret125#1 <= 2147483647;request_irq_~tmp~5#1 := request_irq_#t~ret125#1;havoc request_irq_#t~ret125#1;request_irq_#res#1 := request_irq_~tmp~5#1; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4022: SUMMARY for call unregister_chrdev_region(phantom_init_#t~mem340#1, 8); srcloc: null [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4022-1: call phantom_init_#t~mem340#1 := read~int#9(phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset, 4); [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3890: havoc pci_set_drvdata_#t~ret96#1, pci_set_drvdata_~pdev#1.base, pci_set_drvdata_~pdev#1.offset, pci_set_drvdata_~data#1.base, pci_set_drvdata_~data#1.offset;havoc pci_set_drvdata_#in~pdev#1.base, pci_set_drvdata_#in~pdev#1.offset, pci_set_drvdata_#in~data#1.base, pci_set_drvdata_#in~data#1.offset;assume { :end_inline_pci_set_drvdata } true;phantom_probe_#res#1 := 0;call ULTIMATE.dealloc(phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset);havoc phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset;call ULTIMATE.dealloc(phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset);havoc phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset;call ULTIMATE.dealloc(phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset);havoc phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3890-1: assume { :begin_inline_pci_set_drvdata } true;pci_set_drvdata_#in~pdev#1.base, pci_set_drvdata_#in~pdev#1.offset, pci_set_drvdata_#in~data#1.base, pci_set_drvdata_#in~data#1.offset := phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, phantom_probe_~pht~0#1.base, phantom_probe_~pht~0#1.offset;havoc pci_set_drvdata_#t~ret96#1, pci_set_drvdata_~pdev#1.base, pci_set_drvdata_~pdev#1.offset, pci_set_drvdata_~data#1.base, pci_set_drvdata_~data#1.offset;pci_set_drvdata_~pdev#1.base, pci_set_drvdata_~pdev#1.offset := pci_set_drvdata_#in~pdev#1.base, pci_set_drvdata_#in~pdev#1.offset;pci_set_drvdata_~data#1.base, pci_set_drvdata_~data#1.offset := pci_set_drvdata_#in~data#1.base, pci_set_drvdata_#in~data#1.offset;assume { :begin_inline_dev_set_drvdata } true;dev_set_drvdata_#in~arg0#1.base, dev_set_drvdata_#in~arg0#1.offset, dev_set_drvdata_#in~arg1#1.base, dev_set_drvdata_#in~arg1#1.offset := pci_set_drvdata_~pdev#1.base, 147 + pci_set_drvdata_~pdev#1.offset, pci_set_drvdata_~data#1.base, pci_set_drvdata_~data#1.offset;havoc dev_set_drvdata_#res#1;havoc dev_set_drvdata_#t~nondet407#1, dev_set_drvdata_~arg0#1.base, dev_set_drvdata_~arg0#1.offset, dev_set_drvdata_~arg1#1.base, dev_set_drvdata_~arg1#1.offset;dev_set_drvdata_~arg0#1.base, dev_set_drvdata_~arg0#1.offset := dev_set_drvdata_#in~arg0#1.base, dev_set_drvdata_#in~arg0#1.offset;dev_set_drvdata_~arg1#1.base, dev_set_drvdata_~arg1#1.offset := dev_set_drvdata_#in~arg1#1.base, dev_set_drvdata_#in~arg1#1.offset;havoc dev_set_drvdata_#t~nondet407#1;assume -2147483648 <= dev_set_drvdata_#t~nondet407#1 && dev_set_drvdata_#t~nondet407#1 <= 2147483647;dev_set_drvdata_#res#1 := dev_set_drvdata_#t~nondet407#1;havoc dev_set_drvdata_#t~nondet407#1; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3857: assume 0 == (phantom_probe_#t~mem291#1.base + phantom_probe_#t~mem291#1.offset) % 18446744073709551616;havoc phantom_probe_#t~mem291#1.base, phantom_probe_#t~mem291#1.offset; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3857: assume !(0 == (phantom_probe_#t~mem291#1.base + phantom_probe_#t~mem291#1.offset) % 18446744073709551616);havoc phantom_probe_#t~mem291#1.base, phantom_probe_#t~mem291#1.offset;assume { :begin_inline___mutex_init } true;__mutex_init_#in~arg0#1.base, __mutex_init_#in~arg0#1.offset, __mutex_init_#in~arg1#1.base, __mutex_init_#in~arg1#1.offset, __mutex_init_#in~arg2#1.base, __mutex_init_#in~arg2#1.offset := phantom_probe_~pht~0#1.base, 229 + phantom_probe_~pht~0#1.offset, 47, 0, phantom_probe_~#__key~0#1.base, phantom_probe_~#__key~0#1.offset;havoc __mutex_init_~arg0#1.base, __mutex_init_~arg0#1.offset, __mutex_init_~arg1#1.base, __mutex_init_~arg1#1.offset, __mutex_init_~arg2#1.base, __mutex_init_~arg2#1.offset;__mutex_init_~arg0#1.base, __mutex_init_~arg0#1.offset := __mutex_init_#in~arg0#1.base, __mutex_init_#in~arg0#1.offset;__mutex_init_~arg1#1.base, __mutex_init_~arg1#1.offset := __mutex_init_#in~arg1#1.base, __mutex_init_#in~arg1#1.offset;__mutex_init_~arg2#1.base, __mutex_init_~arg2#1.offset := __mutex_init_#in~arg2#1.base, __mutex_init_#in~arg2#1.offset; [2025-02-08 02:44:15,917 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4981: assume 1 == ~ldv_mutex_mutex_of_device~0; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4981: assume !(1 == ~ldv_mutex_mutex_of_device~0); [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3858: assume -2147483648 <= phantom_probe_#t~ret292#1 && phantom_probe_#t~ret292#1 <= 2147483647;havoc phantom_probe_#t~ret292#1; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3792: assume phantom_get_free_~i~2#1 % 4294967296 <= 7; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3792: assume !(phantom_get_free_~i~2#1 % 4294967296 <= 7); [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3858-1: SUMMARY for call phantom_probe_#t~ret292#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 46, 0); srcloc: null [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5114: havoc nonseekable_open_#t~nondet413#1;phantom_open_#t~ret234#1 := nonseekable_open_#res#1;havoc nonseekable_open_#t~nondet413#1, nonseekable_open_~arg0#1.base, nonseekable_open_~arg0#1.offset, nonseekable_open_~arg1#1.base, nonseekable_open_~arg1#1.offset;havoc nonseekable_open_#in~arg0#1.base, nonseekable_open_#in~arg0#1.offset, nonseekable_open_#in~arg1#1.base, nonseekable_open_#in~arg1#1.offset;assume { :end_inline_nonseekable_open } true;assume -2147483648 <= phantom_open_#t~ret234#1 && phantom_open_#t~ret234#1 <= 2147483647;havoc phantom_open_#t~ret234#1;assume { :begin_inline_ldv_mutex_lock_interruptible_9 } true;ldv_mutex_lock_interruptible_9_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_#in~ldv_func_arg1#1.offset := phantom_open_~dev~1#1.base, 229 + phantom_open_~dev~1#1.offset;havoc ldv_mutex_lock_interruptible_9_#res#1;havoc ldv_mutex_lock_interruptible_9_#t~ret369#1, ldv_mutex_lock_interruptible_9_#t~ret370#1, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_9_~ldv_func_res~1#1, ldv_mutex_lock_interruptible_9_~tmp~20#1, ldv_mutex_lock_interruptible_9_~tmp___0~9#1;ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.offset := ldv_mutex_lock_interruptible_9_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_#in~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_interruptible_9_~ldv_func_res~1#1;havoc ldv_mutex_lock_interruptible_9_~tmp~20#1;havoc ldv_mutex_lock_interruptible_9_~tmp___0~9#1;assume { :begin_inline_mutex_lock_interruptible } true;mutex_lock_interruptible_#in~arg0#1.base, mutex_lock_interruptible_#in~arg0#1.offset := ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.offset;havoc mutex_lock_interruptible_#res#1;havoc mutex_lock_interruptible_#t~nondet410#1, mutex_lock_interruptible_~arg0#1.base, mutex_lock_interruptible_~arg0#1.offset;mutex_lock_interruptible_~arg0#1.base, mutex_lock_interruptible_~arg0#1.offset := mutex_lock_interruptible_#in~arg0#1.base, mutex_lock_interruptible_#in~arg0#1.offset;havoc mutex_lock_interruptible_#t~nondet410#1;assume -2147483648 <= mutex_lock_interruptible_#t~nondet410#1 && mutex_lock_interruptible_#t~nondet410#1 <= 2147483647;mutex_lock_interruptible_#res#1 := mutex_lock_interruptible_#t~nondet410#1;havoc mutex_lock_interruptible_#t~nondet410#1; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4024: SUMMARY for call class_remove_file(~phantom_class~0.base, ~phantom_class~0.offset, ~#class_attr_version~0.base, ~#class_attr_version~0.offset); srcloc: null [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint ULTIMATE.startFINAL: assume true; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4983: SUMMARY for call ldv_error(); srcloc: null [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3992: assume -9223372036854775808 <= phantom_init_#t~ret329#1 && phantom_init_#t~ret329#1 <= 9223372036854775807;phantom_init_~tmp___1~4#1 := phantom_init_#t~ret329#1;havoc phantom_init_#t~ret329#1; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3992-1: SUMMARY for call phantom_init_#t~ret329#1 := IS_ERR(~phantom_class~0.base, ~phantom_class~0.offset); srcloc: null [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3893-1: SUMMARY for call free_irq(phantom_probe_#t~mem307#1, phantom_probe_~pht~0#1.base, phantom_probe_~pht~0#1.offset); srcloc: null [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3893: call phantom_probe_#t~mem308#1.base, phantom_probe_#t~mem308#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 20 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3893-2: call phantom_probe_#t~mem307#1 := read~int#17(phantom_probe_~pdev#1.base, 1238 + phantom_probe_~pdev#1.offset, 4); [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3629: havoc ldv_mutex_lock_8_~ldv_func_arg1#1.base, ldv_mutex_lock_8_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_8_#in~ldv_func_arg1#1.base, ldv_mutex_lock_8_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_8 } true;assume { :begin_inline_nonseekable_open } true;nonseekable_open_#in~arg0#1.base, nonseekable_open_#in~arg0#1.offset, nonseekable_open_#in~arg1#1.base, nonseekable_open_#in~arg1#1.offset := phantom_open_~inode#1.base, phantom_open_~inode#1.offset, phantom_open_~file#1.base, phantom_open_~file#1.offset;havoc nonseekable_open_#res#1;havoc nonseekable_open_#t~nondet413#1, nonseekable_open_~arg0#1.base, nonseekable_open_~arg0#1.offset, nonseekable_open_~arg1#1.base, nonseekable_open_~arg1#1.offset;nonseekable_open_~arg0#1.base, nonseekable_open_~arg0#1.offset := nonseekable_open_#in~arg0#1.base, nonseekable_open_#in~arg0#1.offset;nonseekable_open_~arg1#1.base, nonseekable_open_~arg1#1.offset := nonseekable_open_#in~arg1#1.base, nonseekable_open_#in~arg1#1.offset;havoc nonseekable_open_#t~nondet413#1;assume -2147483648 <= nonseekable_open_#t~nondet413#1 && nonseekable_open_#t~nondet413#1 <= 2147483647;nonseekable_open_#res#1 := nonseekable_open_#t~nondet413#1;havoc nonseekable_open_#t~nondet413#1; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4026: phantom_init_#res#1 := phantom_init_~retval~1#1;call ULTIMATE.dealloc(phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset);havoc phantom_init_~#dev~7#1.base, phantom_init_~#dev~7#1.offset;call ULTIMATE.dealloc(phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset);havoc phantom_init_~#__key~1#1.base, phantom_init_~#__key~1#1.offset; [2025-02-08 02:44:15,918 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5149: havoc show_class_attr_string_#t~nondet419#1;main_#t~ret348#1 := show_class_attr_string_#res#1;havoc show_class_attr_string_#t~nondet419#1, show_class_attr_string_~arg0#1.base, show_class_attr_string_~arg0#1.offset, show_class_attr_string_~arg1#1.base, show_class_attr_string_~arg1#1.offset, show_class_attr_string_~arg2#1.base, show_class_attr_string_~arg2#1.offset;havoc show_class_attr_string_#in~arg0#1.base, show_class_attr_string_#in~arg0#1.offset, show_class_attr_string_#in~arg1#1.base, show_class_attr_string_#in~arg1#1.offset, show_class_attr_string_#in~arg2#1.base, show_class_attr_string_#in~arg2#1.offset;assume { :end_inline_show_class_attr_string } true;assume -9223372036854775808 <= main_#t~ret348#1 && main_#t~ret348#1 <= 9223372036854775807;havoc main_#t~ret348#1;~ldv_state_variable_1~0 := 1; [2025-02-08 02:44:15,919 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4026-1: SUMMARY for call class_destroy(~phantom_class~0.base, ~phantom_class~0.offset); srcloc: null [2025-02-08 02:44:15,919 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3993: assume 0 != phantom_init_~tmp___1~4#1;assume { :begin_inline_PTR_ERR } true;PTR_ERR_#in~ptr#1.base, PTR_ERR_#in~ptr#1.offset := ~phantom_class~0.base, ~phantom_class~0.offset;havoc PTR_ERR_#res#1;havoc PTR_ERR_~ptr#1.base, PTR_ERR_~ptr#1.offset;PTR_ERR_~ptr#1.base, PTR_ERR_~ptr#1.offset := PTR_ERR_#in~ptr#1.base, PTR_ERR_#in~ptr#1.offset;PTR_ERR_#res#1 := PTR_ERR_~ptr#1.base + PTR_ERR_~ptr#1.offset; [2025-02-08 02:44:15,919 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3993: assume !(0 != phantom_init_~tmp___1~4#1);assume { :begin_inline_class_create_file } true;class_create_file_#in~arg0#1.base, class_create_file_#in~arg0#1.offset, class_create_file_#in~arg1#1.base, class_create_file_#in~arg1#1.offset := ~phantom_class~0.base, ~phantom_class~0.offset, ~#class_attr_version~0.base, ~#class_attr_version~0.offset;havoc class_create_file_#res#1;havoc class_create_file_#t~nondet404#1, class_create_file_~arg0#1.base, class_create_file_~arg0#1.offset, class_create_file_~arg1#1.base, class_create_file_~arg1#1.offset;class_create_file_~arg0#1.base, class_create_file_~arg0#1.offset := class_create_file_#in~arg0#1.base, class_create_file_#in~arg0#1.offset;class_create_file_~arg1#1.base, class_create_file_~arg1#1.offset := class_create_file_#in~arg1#1.base, class_create_file_#in~arg1#1.offset;havoc class_create_file_#t~nondet404#1;assume -2147483648 <= class_create_file_#t~nondet404#1 && class_create_file_#t~nondet404#1 <= 2147483647;class_create_file_#res#1 := class_create_file_#t~nondet404#1;havoc class_create_file_#t~nondet404#1; [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3663: havoc ldv_mutex_lock_15_~ldv_func_arg1#1.base, ldv_mutex_lock_15_~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_15_#in~ldv_func_arg1#1.base, ldv_mutex_lock_15_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_15 } true;call write~int#15(0, phantom_release_~dev~2#1.base, phantom_release_~dev~2#1.offset, 4);call phantom_release_#t~mem243#1 := read~int#15(phantom_release_~dev~2#1.base, 28 + phantom_release_~dev~2#1.offset, 8); [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4390: SUMMARY for call ldv_mutex_unlock_phantom_mutex(ldv_mutex_unlock_14_~ldv_func_arg1#1.base, ldv_mutex_unlock_14_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3994: phantom_init_#t~ret330#1 := PTR_ERR_#res#1;havoc PTR_ERR_~ptr#1.base, PTR_ERR_~ptr#1.offset;havoc PTR_ERR_#in~ptr#1.base, PTR_ERR_#in~ptr#1.offset;assume { :end_inline_PTR_ERR } true;assume -9223372036854775808 <= phantom_init_#t~ret330#1 && phantom_init_#t~ret330#1 <= 9223372036854775807;phantom_init_~tmp___0~6#1 := phantom_init_#t~ret330#1;havoc phantom_init_#t~ret330#1;phantom_init_~retval~1#1 := (if phantom_init_~tmp___0~6#1 % 4294967296 <= 2147483647 then phantom_init_~tmp___0~6#1 % 4294967296 else phantom_init_~tmp___0~6#1 % 4294967296 - 4294967296); [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4985: assume 1 == ~ldv_mutex_open_lock_of_phantom_device~0; [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4985: assume !(1 == ~ldv_mutex_open_lock_of_phantom_device~0); [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3895-1: SUMMARY for call pci_iounmap(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, phantom_probe_#t~mem308#1.base, phantom_probe_#t~mem308#1.offset); srcloc: null [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3862: havoc __mutex_init_~arg0#1.base, __mutex_init_~arg0#1.offset, __mutex_init_~arg1#1.base, __mutex_init_~arg1#1.offset, __mutex_init_~arg2#1.base, __mutex_init_~arg2#1.offset;havoc __mutex_init_#in~arg0#1.base, __mutex_init_#in~arg0#1.offset, __mutex_init_#in~arg1#1.base, __mutex_init_#in~arg1#1.offset, __mutex_init_#in~arg2#1.base, __mutex_init_#in~arg2#1.offset;assume { :end_inline___mutex_init } true; [2025-02-08 02:44:15,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3895: call phantom_probe_#t~mem309#1.base, phantom_probe_#t~mem309#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 12 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,923 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3829: assume 0 != phantom_probe_~retval~0#1; [2025-02-08 02:44:15,923 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3829: assume !(0 != phantom_probe_~retval~0#1);phantom_probe_~retval~0#1 := -12;assume { :begin_inline_kzalloc } true;kzalloc_#in~size#1, kzalloc_#in~flags#1 := 528, 208;havoc kzalloc_#res#1.base, kzalloc_#res#1.offset;havoc kzalloc_#t~bitwise93#1, kzalloc_#t~ret94#1.base, kzalloc_#t~ret94#1.offset, kzalloc_~size#1, kzalloc_~flags#1, kzalloc_~tmp~1#1.base, kzalloc_~tmp~1#1.offset;kzalloc_~size#1 := kzalloc_#in~size#1;kzalloc_~flags#1 := kzalloc_#in~flags#1;havoc kzalloc_~tmp~1#1.base, kzalloc_~tmp~1#1.offset; [2025-02-08 02:44:15,923 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3631: phantom_open_#t~ret235#1 := ldv_mutex_lock_interruptible_9_#res#1;havoc ldv_mutex_lock_interruptible_9_#t~ret369#1, ldv_mutex_lock_interruptible_9_#t~ret370#1, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_9_~ldv_func_res~1#1, ldv_mutex_lock_interruptible_9_~tmp~20#1, ldv_mutex_lock_interruptible_9_~tmp___0~9#1;havoc ldv_mutex_lock_interruptible_9_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_9_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_interruptible_9 } true;assume -2147483648 <= phantom_open_#t~ret235#1 && phantom_open_#t~ret235#1 <= 2147483647;phantom_open_~tmp~9#1 := phantom_open_#t~ret235#1;havoc phantom_open_#t~ret235#1; [2025-02-08 02:44:15,923 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4391: SUMMARY for call mutex_unlock(ldv_mutex_unlock_14_~ldv_func_arg1#1.base, ldv_mutex_unlock_14_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4358: SUMMARY for call ldv_mutex_unlock_phantom_mutex(ldv_mutex_unlock_10_~ldv_func_arg1#1.base, ldv_mutex_unlock_10_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4226: main_#t~ret365#1 := phantom_suspend_#res#1;havoc phantom_suspend_#t~ret321#1.base, phantom_suspend_#t~ret321#1.offset, phantom_suspend_#t~mem322#1.base, phantom_suspend_#t~mem322#1.offset, phantom_suspend_#t~mem323#1.base, phantom_suspend_#t~mem323#1.offset, phantom_suspend_#t~ret324#1, phantom_suspend_#t~mem325#1, phantom_suspend_~pdev#1.base, phantom_suspend_~pdev#1.offset, phantom_suspend_~state#1.event, phantom_suspend_~dev~5#1.base, phantom_suspend_~dev~5#1.offset, phantom_suspend_~tmp~14#1.base, phantom_suspend_~tmp~14#1.offset;havoc phantom_suspend_#in~pdev#1.base, phantom_suspend_#in~pdev#1.offset, phantom_suspend_#in~state#1.event;assume { :end_inline_phantom_suspend } true;assume -2147483648 <= main_#t~ret365#1 && main_#t~ret365#1 <= 2147483647;~ldv_retval_3~0 := main_#t~ret365#1;havoc main_#t~mem364#1;havoc main_#t~ret365#1; [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4160: main_#t~ret355#1 := phantom_compat_ioctl_#res#1;havoc phantom_compat_ioctl_#t~bitwise229#1, phantom_compat_ioctl_#t~bitwise230#1, phantom_compat_ioctl_#t~ret231#1.base, phantom_compat_ioctl_#t~ret231#1.offset, phantom_compat_ioctl_#t~ret232#1, phantom_compat_ioctl_~filp#1.base, phantom_compat_ioctl_~filp#1.offset, phantom_compat_ioctl_~cmd#1, phantom_compat_ioctl_~arg#1, phantom_compat_ioctl_~tmp~8#1.base, phantom_compat_ioctl_~tmp~8#1.offset, phantom_compat_ioctl_~tmp___0~2#1;havoc phantom_compat_ioctl_#in~filp#1.base, phantom_compat_ioctl_#in~filp#1.offset, phantom_compat_ioctl_#in~cmd#1, phantom_compat_ioctl_#in~arg#1;assume { :end_inline_phantom_compat_ioctl } true;assume -9223372036854775808 <= main_#t~ret355#1 && main_#t~ret355#1 <= 9223372036854775807;havoc main_#t~ret355#1;~ldv_state_variable_3~0 := 2; [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3863-1: SUMMARY for call phantom_probe_#t~ret293#1.base, phantom_probe_#t~ret293#1.offset := spinlock_check(phantom_probe_~pht~0#1.base, 385 + phantom_probe_~pht~0#1.offset); srcloc: null [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830: assume -2147483648 <= phantom_probe_#t~ret281#1 && phantom_probe_#t~ret281#1 <= 2147483647;havoc phantom_probe_#t~ret281#1; [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3863: havoc phantom_probe_#t~ret293#1.base, phantom_probe_#t~ret293#1.offset;assume { :begin_inline___raw_spin_lock_init } true;__raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset, __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset, __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset := phantom_probe_~pht~0#1.base, 385 + phantom_probe_~pht~0#1.offset, 48, 0, phantom_probe_~#__key___0~0#1.base, phantom_probe_~#__key___0~0#1.offset;havoc __raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset, __raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset, __raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset;__raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset := __raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset;__raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset := __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset;__raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset := __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset; [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-1: SUMMARY for call phantom_probe_#t~ret281#1 := dev_err(phantom_probe_~pdev#1.base, 147 + phantom_probe_~pdev#1.offset, 42, 0); srcloc: null [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3632: assume 0 != phantom_open_~tmp~9#1;assume { :begin_inline_ldv_mutex_unlock_10 } true;ldv_mutex_unlock_10_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_10_#in~ldv_func_arg1#1.offset := ~#phantom_mutex~0.base, ~#phantom_mutex~0.offset;havoc ldv_mutex_unlock_10_~ldv_func_arg1#1.base, ldv_mutex_unlock_10_~ldv_func_arg1#1.offset;ldv_mutex_unlock_10_~ldv_func_arg1#1.base, ldv_mutex_unlock_10_~ldv_func_arg1#1.offset := ldv_mutex_unlock_10_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_10_#in~ldv_func_arg1#1.offset; [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3632: assume !(0 != phantom_open_~tmp~9#1);call phantom_open_#t~mem236#1 := read~int#15(phantom_open_~dev~1#1.base, phantom_open_~dev~1#1.offset, 4); [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3665-1: SUMMARY for call phantom_release_#t~ret244#1 := phantom_status(phantom_release_~dev~2#1.base, phantom_release_~dev~2#1.offset, phantom_release_#t~mem243#1 - phantom_release_#t~mem243#1 % 2); srcloc: null [2025-02-08 02:44:15,925 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3665: assume -2147483648 <= phantom_release_#t~ret244#1 && phantom_release_#t~ret244#1 <= 2147483647;havoc phantom_release_#t~mem243#1;havoc phantom_release_#t~ret244#1;call phantom_release_#t~mem245#1 := read~int#15(phantom_release_~dev~2#1.base, 28 + phantom_release_~dev~2#1.offset, 8); [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4359: SUMMARY for call mutex_unlock(ldv_mutex_unlock_10_~ldv_func_arg1#1.base, ldv_mutex_unlock_10_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3236: havoc __kmalloc_#t~ret91#1.base, __kmalloc_#t~ret91#1.offset;kmalloc_#t~ret92#1.base, kmalloc_#t~ret92#1.offset := __kmalloc_#res#1.base, __kmalloc_#res#1.offset;havoc __kmalloc_#t~ret91#1.base, __kmalloc_#t~ret91#1.offset, __kmalloc_~size#1, __kmalloc_~t#1;havoc __kmalloc_#in~size#1, __kmalloc_#in~t#1;assume { :end_inline___kmalloc } true;kmalloc_~tmp___2~0#1.base, kmalloc_~tmp___2~0#1.offset := kmalloc_#t~ret92#1.base, kmalloc_#t~ret92#1.offset;havoc kmalloc_#t~ret92#1.base, kmalloc_#t~ret92#1.offset;kmalloc_#res#1.base, kmalloc_#res#1.offset := kmalloc_~tmp___2~0#1.base, kmalloc_~tmp___2~0#1.offset; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3236-2: __kmalloc_#res#1.base, __kmalloc_#res#1.offset := __kmalloc_#t~ret91#1.base, __kmalloc_#t~ret91#1.offset;havoc __kmalloc_#t~ret91#1.base, __kmalloc_#t~ret91#1.offset; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3236-3: SUMMARY for call __kmalloc_#t~ret91#1.base, __kmalloc_#t~ret91#1.offset := ldv_malloc(__kmalloc_~size#1); srcloc: null [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4987: SUMMARY for call ldv_error(); srcloc: null [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3996: assume -2147483648 <= phantom_init_#t~ret331#1 && phantom_init_#t~ret331#1 <= 2147483647;havoc phantom_init_#t~ret331#1; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3996-1: SUMMARY for call phantom_init_#t~ret331#1 := printk(59, 0); srcloc: null [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3897-1: SUMMARY for call pci_iounmap(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, phantom_probe_#t~mem309#1.base, phantom_probe_#t~mem309#1.offset); srcloc: null [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3864: havoc __raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset, __raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset, __raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset;havoc __raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset, __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset, __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset;assume { :end_inline___raw_spin_lock_init } true;assume { :begin_inline___init_waitqueue_head } true;__init_waitqueue_head_#in~arg0#1.base, __init_waitqueue_head_#in~arg0#1.offset, __init_waitqueue_head_#in~arg1#1.base, __init_waitqueue_head_#in~arg1#1.offset, __init_waitqueue_head_#in~arg2#1.base, __init_waitqueue_head_#in~arg2#1.offset := phantom_probe_~pht~0#1.base, 40 + phantom_probe_~pht~0#1.offset, 49, 0, phantom_probe_~#__key___1~0#1.base, phantom_probe_~#__key___1~0#1.offset;havoc __init_waitqueue_head_~arg0#1.base, __init_waitqueue_head_~arg0#1.offset, __init_waitqueue_head_~arg1#1.base, __init_waitqueue_head_~arg1#1.offset, __init_waitqueue_head_~arg2#1.base, __init_waitqueue_head_~arg2#1.offset;__init_waitqueue_head_~arg0#1.base, __init_waitqueue_head_~arg0#1.offset := __init_waitqueue_head_#in~arg0#1.base, __init_waitqueue_head_#in~arg0#1.offset;__init_waitqueue_head_~arg1#1.base, __init_waitqueue_head_~arg1#1.offset := __init_waitqueue_head_#in~arg1#1.base, __init_waitqueue_head_#in~arg1#1.offset;__init_waitqueue_head_~arg2#1.base, __init_waitqueue_head_~arg2#1.offset := __init_waitqueue_head_#in~arg2#1.base, __init_waitqueue_head_#in~arg2#1.offset; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3897: call phantom_probe_#t~mem310#1.base, phantom_probe_#t~mem310#1.offset := read~$Pointer$#15(phantom_probe_~pht~0#1.base, 4 + phantom_probe_~pht~0#1.offset, 8); [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3798-1: phantom_get_free_#res#1 := phantom_get_free_~i~2#1; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666: call write~int#15(phantom_release_#t~bitwise246#1, phantom_release_~dev~2#1.base, 28 + phantom_release_~dev~2#1.offset, 8);havoc phantom_release_#t~mem245#1;havoc phantom_release_#t~bitwise246#1;assume { :begin_inline_ldv_mutex_unlock_16 } true;ldv_mutex_unlock_16_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_16_#in~ldv_func_arg1#1.offset := phantom_release_~dev~2#1.base, 229 + phantom_release_~dev~2#1.offset;havoc ldv_mutex_unlock_16_~ldv_func_arg1#1.base, ldv_mutex_unlock_16_~ldv_func_arg1#1.offset;ldv_mutex_unlock_16_~ldv_func_arg1#1.base, ldv_mutex_unlock_16_~ldv_func_arg1#1.offset := ldv_mutex_unlock_16_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_16_#in~ldv_func_arg1#1.offset; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666-2: havoc phantom_release_#t~bitwise246#1;assume phantom_release_#t~bitwise246#1 % 18446744073709551616 <= phantom_release_#t~mem245#1 % 18446744073709551616 && phantom_release_#t~bitwise246#1 % 18446744073709551616 <= 18446744073709551613; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3633: havoc ldv_mutex_unlock_10_~ldv_func_arg1#1.base, ldv_mutex_unlock_10_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_10_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_10_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_10 } true;phantom_open_#res#1 := -512; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666-1: [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666-4: assume 0 == phantom_release_#t~mem245#1 % 18446744073709551616;phantom_release_#t~bitwise246#1 := 0; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666-4: assume !(0 == phantom_release_#t~mem245#1 % 18446744073709551616); [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666-3: assume 18446744073709551613 == phantom_release_#t~mem245#1 % 18446744073709551616;phantom_release_#t~bitwise246#1 := phantom_release_#t~mem245#1; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3666-3: assume !(18446744073709551613 == phantom_release_#t~mem245#1 % 18446744073709551616); [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3667: havoc ldv_mutex_unlock_16_~ldv_func_arg1#1.base, ldv_mutex_unlock_16_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_16_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_16_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_16 } true;phantom_release_#res#1 := 0; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5121: havoc pci_enable_device_#t~nondet414#1;phantom_probe_#t~ret276#1 := pci_enable_device_#res#1;havoc pci_enable_device_#t~nondet414#1, pci_enable_device_~arg0#1.base, pci_enable_device_~arg0#1.offset;havoc pci_enable_device_#in~arg0#1.base, pci_enable_device_#in~arg0#1.offset;assume { :end_inline_pci_enable_device } true;assume -2147483648 <= phantom_probe_#t~ret276#1 && phantom_probe_#t~ret276#1 <= 2147483647;phantom_probe_~retval~0#1 := phantom_probe_#t~ret276#1;havoc phantom_probe_#t~ret276#1; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4989: assume 1 == ~ldv_mutex_phantom_mutex~0; [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4989: assume !(1 == ~ldv_mutex_phantom_mutex~0); [2025-02-08 02:44:15,926 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3866: havoc __init_waitqueue_head_~arg0#1.base, __init_waitqueue_head_~arg0#1.offset, __init_waitqueue_head_~arg1#1.base, __init_waitqueue_head_~arg1#1.offset, __init_waitqueue_head_~arg2#1.base, __init_waitqueue_head_~arg2#1.offset;havoc __init_waitqueue_head_#in~arg0#1.base, __init_waitqueue_head_#in~arg0#1.offset, __init_waitqueue_head_#in~arg1#1.base, __init_waitqueue_head_#in~arg1#1.offset, __init_waitqueue_head_#in~arg2#1.base, __init_waitqueue_head_#in~arg2#1.offset;assume { :end_inline___init_waitqueue_head } true;assume { :begin_inline_ldv_cdev_init_17 } true;ldv_cdev_init_17_#in~cdev#1.base, ldv_cdev_init_17_#in~cdev#1.offset, ldv_cdev_init_17_#in~fops#1.base, ldv_cdev_init_17_#in~fops#1.offset := phantom_probe_~pht~0#1.base, 124 + phantom_probe_~pht~0#1.offset, ~#phantom_file_ops~0.base, ~#phantom_file_ops~0.offset;havoc ldv_cdev_init_17_~cdev#1.base, ldv_cdev_init_17_~cdev#1.offset, ldv_cdev_init_17_~fops#1.base, ldv_cdev_init_17_~fops#1.offset;ldv_cdev_init_17_~cdev#1.base, ldv_cdev_init_17_~cdev#1.offset := ldv_cdev_init_17_#in~cdev#1.base, ldv_cdev_init_17_#in~cdev#1.offset;ldv_cdev_init_17_~fops#1.base, ldv_cdev_init_17_~fops#1.offset := ldv_cdev_init_17_#in~fops#1.base, ldv_cdev_init_17_#in~fops#1.offset;assume { :begin_inline_cdev_init } true;cdev_init_#in~arg0#1.base, cdev_init_#in~arg0#1.offset, cdev_init_#in~arg1#1.base, cdev_init_#in~arg1#1.offset := ldv_cdev_init_17_~cdev#1.base, ldv_cdev_init_17_~cdev#1.offset, ldv_cdev_init_17_~fops#1.base, ldv_cdev_init_17_~fops#1.offset;havoc cdev_init_~arg0#1.base, cdev_init_~arg0#1.offset, cdev_init_~arg1#1.base, cdev_init_~arg1#1.offset;cdev_init_~arg0#1.base, cdev_init_~arg0#1.offset := cdev_init_#in~arg0#1.base, cdev_init_#in~arg0#1.offset;cdev_init_~arg1#1.base, cdev_init_~arg1#1.offset := cdev_init_#in~arg1#1.base, cdev_init_#in~arg1#1.offset; [2025-02-08 02:44:15,927 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3899: SUMMARY for call pci_iounmap(phantom_probe_~pdev#1.base, phantom_probe_~pdev#1.offset, phantom_probe_#t~mem310#1.base, phantom_probe_#t~mem310#1.offset); srcloc: null [2025-02-08 02:44:16,111 INFO L? ?]: Removed 739 outVars from TransFormulas that were not future-live. [2025-02-08 02:44:16,111 INFO L308 CfgBuilder]: Performing block encoding [2025-02-08 02:44:16,148 INFO L332 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-02-08 02:44:16,149 INFO L337 CfgBuilder]: Removed 2 assume(true) statements. [2025-02-08 02:44:16,149 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:44:16 BoogieIcfgContainer [2025-02-08 02:44:16,149 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-02-08 02:44:16,152 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-02-08 02:44:16,153 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-02-08 02:44:16,157 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-02-08 02:44:16,157 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.02 02:44:05" (1/3) ... [2025-02-08 02:44:16,158 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1fd2661e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:44:16, skipping insertion in model container [2025-02-08 02:44:16,158 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:44:06" (2/3) ... [2025-02-08 02:44:16,159 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1fd2661e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:44:16, skipping insertion in model container [2025-02-08 02:44:16,159 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:44:16" (3/3) ... [2025-02-08 02:44:16,160 INFO L128 eAbstractionObserver]: Analyzing ICFG 32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i [2025-02-08 02:44:16,177 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-02-08 02:44:16,184 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG 32_7a_cilled_linux-3.8-rc1-drivers--misc--phantom.ko-main.cil.out.i that has 59 procedures, 546 locations, 1 initial locations, 44 loop locations, and 1 error locations. [2025-02-08 02:44:16,255 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-02-08 02:44:16,267 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@3d2c9f18, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-02-08 02:44:16,269 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-02-08 02:44:16,275 INFO L276 IsEmpty]: Start isEmpty. Operand has 412 states, 281 states have (on average 1.3914590747330962) internal successors, (391), 306 states have internal predecessors, (391), 79 states have call successors, (79), 27 states have call predecessors, (79), 27 states have return successors, (79), 77 states have call predecessors, (79), 79 states have call successors, (79) [2025-02-08 02:44:16,281 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2025-02-08 02:44:16,281 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:44:16,282 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:44:16,282 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:44:16,286 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:44:16,287 INFO L85 PathProgramCache]: Analyzing trace with hash 1702162094, now seen corresponding path program 1 times [2025-02-08 02:44:16,294 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:44:16,294 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1834165262] [2025-02-08 02:44:16,295 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:44:16,295 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:44:17,565 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 11 statements into 1 equivalence classes. [2025-02-08 02:44:17,775 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 11 of 11 statements. [2025-02-08 02:44:17,776 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:44:17,776 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:44:18,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-02-08 02:44:18,154 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:44:18,154 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1834165262] [2025-02-08 02:44:18,155 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1834165262] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:44:18,155 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:44:18,155 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-02-08 02:44:18,156 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1917336096] [2025-02-08 02:44:18,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:44:18,159 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:44:18,160 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:44:18,174 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:44:18,175 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:44:18,178 INFO L87 Difference]: Start difference. First operand has 412 states, 281 states have (on average 1.3914590747330962) internal successors, (391), 306 states have internal predecessors, (391), 79 states have call successors, (79), 27 states have call predecessors, (79), 27 states have return successors, (79), 77 states have call predecessors, (79), 79 states have call successors, (79) Second operand has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:44:18,241 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:44:18,242 INFO L93 Difference]: Finished difference Result 407 states and 545 transitions. [2025-02-08 02:44:18,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:44:18,247 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2025-02-08 02:44:18,247 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:44:18,250 INFO L225 Difference]: With dead ends: 407 [2025-02-08 02:44:18,250 INFO L226 Difference]: Without dead ends: 0 [2025-02-08 02:44:18,257 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:44:18,259 INFO L435 NwaCegarLoop]: 137 mSDtfsCounter, 133 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 2 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 137 SdHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 2 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:44:18,261 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [133 Valid, 137 Invalid, 3 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 2 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:44:18,274 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2025-02-08 02:44:18,278 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2025-02-08 02:44:18,278 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:44:18,282 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2025-02-08 02:44:18,284 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 11 [2025-02-08 02:44:18,284 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:44:18,284 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2025-02-08 02:44:18,284 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.3333333333333335) internal successors, (10), 2 states have internal predecessors, (10), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:44:18,284 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2025-02-08 02:44:18,284 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2025-02-08 02:44:18,286 INFO L782 garLoopResultBuilder]: Registering result SAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2025-02-08 02:44:18,287 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-02-08 02:44:18,290 INFO L422 BasicCegarLoop]: Path program histogram: [1] [2025-02-08 02:44:18,291 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2025-02-08 02:44:19,481 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-02-08 02:44:19,491 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.02 02:44:19 BoogieIcfgContainer [2025-02-08 02:44:19,492 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-02-08 02:44:19,493 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-02-08 02:44:19,493 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-02-08 02:44:19,493 INFO L274 PluginConnector]: Witness Printer initialized [2025-02-08 02:44:19,494 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:44:16" (3/4) ... [2025-02-08 02:44:19,495 INFO L146 WitnessPrinter]: Generating witness for correct program [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#12 [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_from_user [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#11 [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure atomic_set [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#10 [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#7 [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#6 [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#19 [2025-02-08 02:44:19,501 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#9 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#18 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#8 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#17 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#16 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure phantom_status [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#15 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#14 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#13 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure phantom_remove [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure pci_release_regions [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure phantom_poll [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#21 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure pci_get_drvdata [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#20 [2025-02-08 02:44:19,502 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure iowrite32 [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock_irqrestore [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_malloc [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kfree [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure free_irq [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure pci_iomap [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure pci_iounmap [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure might_fault [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure printk [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure dev_err [2025-02-08 02:44:19,503 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure class_destroy [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_unlock [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure class_remove_file [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure pci_disable_device [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_to_user [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_error [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure unregister_chrdev_region [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __dynamic_pr_debug [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _raw_spin_lock_irqsave [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_unlock_open_lock_of_phantom_device [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv__builtin_expect [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure atomic_read [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ioread32 [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#1 [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#0 [2025-02-08 02:44:19,504 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#3 [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#2 [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#5 [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#4 [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_lock [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _copy_from_user [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spinlock_check [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure phantom_ioctl [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_unlock_phantom_mutex [2025-02-08 02:44:19,505 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure IS_ERR [2025-02-08 02:44:19,534 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 254 nodes and edges [2025-02-08 02:44:19,536 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 117 nodes and edges [2025-02-08 02:44:19,538 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 41 nodes and edges [2025-02-08 02:44:19,539 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 24 nodes and edges [2025-02-08 02:44:19,541 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 6 nodes and edges [2025-02-08 02:44:19,542 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2025-02-08 02:44:19,544 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2025-02-08 02:44:19,546 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2025-02-08 02:44:19,735 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-02-08 02:44:19,736 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-02-08 02:44:19,736 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-02-08 02:44:19,737 INFO L158 Benchmark]: Toolchain (without parser) took 14673.45ms. Allocated memory was 167.8MB in the beginning and 411.0MB in the end (delta: 243.3MB). Free memory was 118.6MB in the beginning and 135.0MB in the end (delta: -16.4MB). Peak memory consumption was 224.4MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,737 INFO L158 Benchmark]: CDTParser took 0.42ms. Allocated memory is still 201.3MB. Free memory is still 117.7MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:44:19,737 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1372.34ms. Allocated memory is still 167.8MB. Free memory was 118.6MB in the beginning and 101.6MB in the end (delta: 17.0MB). Peak memory consumption was 103.2MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,737 INFO L158 Benchmark]: Boogie Procedure Inliner took 123.06ms. Allocated memory is still 167.8MB. Free memory was 101.6MB in the beginning and 91.0MB in the end (delta: 10.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,737 INFO L158 Benchmark]: Boogie Preprocessor took 320.53ms. Allocated memory is still 167.8MB. Free memory was 91.0MB in the beginning and 54.4MB in the end (delta: 36.6MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,738 INFO L158 Benchmark]: IcfgBuilder took 9266.35ms. Allocated memory was 167.8MB in the beginning and 411.0MB in the end (delta: 243.3MB). Free memory was 53.6MB in the beginning and 208.1MB in the end (delta: -154.4MB). Peak memory consumption was 102.6MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,738 INFO L158 Benchmark]: TraceAbstraction took 3340.44ms. Allocated memory is still 411.0MB. Free memory was 207.1MB in the beginning and 156.0MB in the end (delta: 51.1MB). Peak memory consumption was 48.5MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,738 INFO L158 Benchmark]: Witness Printer took 242.94ms. Allocated memory is still 411.0MB. Free memory was 156.0MB in the beginning and 135.0MB in the end (delta: 21.0MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2025-02-08 02:44:19,739 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.42ms. Allocated memory is still 201.3MB. Free memory is still 117.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1372.34ms. Allocated memory is still 167.8MB. Free memory was 118.6MB in the beginning and 101.6MB in the end (delta: 17.0MB). Peak memory consumption was 103.2MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 123.06ms. Allocated memory is still 167.8MB. Free memory was 101.6MB in the beginning and 91.0MB in the end (delta: 10.6MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 320.53ms. Allocated memory is still 167.8MB. Free memory was 91.0MB in the beginning and 54.4MB in the end (delta: 36.6MB). Peak memory consumption was 33.6MB. Max. memory is 16.1GB. * IcfgBuilder took 9266.35ms. Allocated memory was 167.8MB in the beginning and 411.0MB in the end (delta: 243.3MB). Free memory was 53.6MB in the beginning and 208.1MB in the end (delta: -154.4MB). Peak memory consumption was 102.6MB. Max. memory is 16.1GB. * TraceAbstraction took 3340.44ms. Allocated memory is still 411.0MB. Free memory was 207.1MB in the beginning and 156.0MB in the end (delta: 51.1MB). Peak memory consumption was 48.5MB. Max. memory is 16.1GB. * Witness Printer took 242.94ms. Allocated memory is still 411.0MB. Free memory was 156.0MB in the beginning and 135.0MB in the end (delta: 21.0MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 3103]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; incl %0": "+m" (v->counter)); [3103] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 4431]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 59 procedures, 546 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.1s, OverallIterations: 1, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 133 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 133 mSDsluCounter, 137 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 0 mSDsCounter, 1 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2 IncrementalHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 1 mSolverCounterUnsat, 137 mSDtfsCounter, 2 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=412occurred in iteration=0, InterpolantAutomatonStates: 3, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 1 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 11 NumberOfCodeBlocks, 11 NumberOfCodeBlocksAsserted, 1 NumberOfCheckSat, 10 ConstructedInterpolants, 0 QuantifiedInterpolants, 20 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 1 InterpolantComputations, 1 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2025-02-08 02:44:19,815 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE