./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 48c9605d Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 3aefe7c24f7dbfd113682bd81b91ef3b049ad438c933de49acd0f78d1e093848 --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:46:01,922 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:46:02,000 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-02-08 02:46:02,006 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:46:02,007 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:46:02,035 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:46:02,037 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:46:02,037 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:46:02,038 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:46:02,038 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:46:02,039 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:46:02,039 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:46:02,039 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:46:02,040 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:46:02,040 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:46:02,040 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:46:02,040 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:46:02,041 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:46:02,042 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:46:02,042 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:46:02,042 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:46:02,043 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:46:02,043 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3aefe7c24f7dbfd113682bd81b91ef3b049ad438c933de49acd0f78d1e093848 [2025-02-08 02:46:02,367 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:46:02,376 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:46:02,379 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:46:02,380 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:46:02,380 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:46:02,381 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i [2025-02-08 02:46:03,830 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/7c61b20fc/0b013ff0549f4863a3c5d0c301b27e25/FLAG6512d1627 [2025-02-08 02:46:04,302 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:46:04,302 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i [2025-02-08 02:46:04,334 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/7c61b20fc/0b013ff0549f4863a3c5d0c301b27e25/FLAG6512d1627 [2025-02-08 02:46:04,353 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/7c61b20fc/0b013ff0549f4863a3c5d0c301b27e25 [2025-02-08 02:46:04,358 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:46:04,360 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:46:04,361 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:46:04,361 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:46:04,365 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:46:04,366 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:46:04" (1/1) ... [2025-02-08 02:46:04,367 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@63604a79 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:04, skipping insertion in model container [2025-02-08 02:46:04,367 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:46:04" (1/1) ... [2025-02-08 02:46:04,460 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:46:05,500 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i[133672,133685] [2025-02-08 02:46:05,569 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:46:05,583 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:46:05,666 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [3073] [2025-02-08 02:46:05,669 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("bt %2,%1\n\tsbb %0,%0": "=r" (oldbit): "m" (*((unsigned long *)addr)), "Ir" (nr)); [3087-3088] [2025-02-08 02:46:05,670 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [3102] [2025-02-08 02:46:05,670 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3105] [2025-02-08 02:46:05,670 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3108] [2025-02-08 02:46:05,671 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3111] [2025-02-08 02:46:05,673 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& kernel_stack)); [3173] [2025-02-08 02:46:05,674 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [3176] [2025-02-08 02:46:05,674 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [3179] [2025-02-08 02:46:05,674 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [3182] [2025-02-08 02:46:05,844 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i[133672,133685] [2025-02-08 02:46:05,867 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:46:05,910 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:46:05,910 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05 WrapperNode [2025-02-08 02:46:05,911 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:46:05,912 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:46:05,913 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:46:05,913 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:46:05,918 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:05,967 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,065 INFO L138 Inliner]: procedures = 191, calls = 833, calls flagged for inlining = 89, calls inlined = 75, statements flattened = 2334 [2025-02-08 02:46:06,066 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:46:06,066 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:46:06,066 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:46:06,066 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:46:06,074 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,075 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,102 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,335 INFO L175 MemorySlicer]: Split 435 memory accesses to 14 slices as follows [2, 2, 8, 7, 3, 7, 7, 35, 9, 1, 113, 5, 234, 2]. 54 percent of accesses are in the largest equivalence class. The 39 initializations are split as follows [2, 0, 0, 7, 0, 7, 7, 7, 9, 0, 0, 0, 0, 0]. The 171 writes are split as follows [0, 0, 1, 0, 0, 0, 0, 28, 0, 0, 103, 5, 34, 0]. [2025-02-08 02:46:06,336 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,336 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,431 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,440 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,460 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,476 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,502 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:46:06,504 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:46:06,504 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:46:06,505 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:46:06,505 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (1/1) ... [2025-02-08 02:46:06,511 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:46:06,525 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:46:06,539 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:46:06,542 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:46:06,567 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-02-08 02:46:06,568 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-02-08 02:46:06,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-02-08 02:46:06,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-02-08 02:46:06,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-02-08 02:46:06,569 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-02-08 02:46:06,569 INFO L130 BoogieDeclarations]: Found specification of procedure input_event_size [2025-02-08 02:46:06,570 INFO L138 BoogieDeclarations]: Found implementation of procedure input_event_size [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:46:06,570 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-02-08 02:46:06,571 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_interruptible_mutex_of_uinput_device [2025-02-08 02:46:06,572 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_interruptible_mutex_of_uinput_device [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#7 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#8 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#9 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#10 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#11 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#12 [2025-02-08 02:46:06,572 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#13 [2025-02-08 02:46:06,572 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:46:06,572 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:46:06,572 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:46:06,572 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#7 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#8 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#9 [2025-02-08 02:46:06,573 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#10 [2025-02-08 02:46:06,575 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#11 [2025-02-08 02:46:06,575 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#12 [2025-02-08 02:46:06,576 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#13 [2025-02-08 02:46:06,576 INFO L130 BoogieDeclarations]: Found specification of procedure variable_test_bit [2025-02-08 02:46:06,576 INFO L138 BoogieDeclarations]: Found implementation of procedure variable_test_bit [2025-02-08 02:46:06,576 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2025-02-08 02:46:06,576 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2025-02-08 02:46:06,577 INFO L130 BoogieDeclarations]: Found specification of procedure uinput_request_done [2025-02-08 02:46:06,578 INFO L138 BoogieDeclarations]: Found implementation of procedure uinput_request_done [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:46:06,578 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure constant_test_bit [2025-02-08 02:46:06,578 INFO L138 BoogieDeclarations]: Found implementation of procedure constant_test_bit [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:46:06,578 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure input_abs_get_flat [2025-02-08 02:46:06,578 INFO L138 BoogieDeclarations]: Found implementation of procedure input_abs_get_flat [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-02-08 02:46:06,578 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2025-02-08 02:46:06,578 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure copy_to_user [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_to_user [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure input_alloc_absinfo [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure input_alloc_absinfo [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_return_value [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_return_value [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure uinput_request_find [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure uinput_request_find [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_mutex_of_uinput_device [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_mutex_of_uinput_device [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure uinput_allocate_device [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure uinput_allocate_device [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure copy_from_user [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure copy_from_user [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure uinput_ioctl_handler [2025-02-08 02:46:06,579 INFO L138 BoogieDeclarations]: Found implementation of procedure uinput_ioctl_handler [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:46:06,579 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2025-02-08 02:46:06,580 INFO L138 BoogieDeclarations]: Found implementation of procedure __bad_percpu_size [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure uinput_ff_upload_from_user [2025-02-08 02:46:06,580 INFO L138 BoogieDeclarations]: Found implementation of procedure uinput_ff_upload_from_user [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure uinput_destroy_device [2025-02-08 02:46:06,580 INFO L138 BoogieDeclarations]: Found implementation of procedure uinput_destroy_device [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:46:06,580 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:46:06,584 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:46:06,584 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure input_abs_get_max [2025-02-08 02:46:06,585 INFO L138 BoogieDeclarations]: Found implementation of procedure input_abs_get_max [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2025-02-08 02:46:06,585 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure PTR_ERR [2025-02-08 02:46:06,585 INFO L138 BoogieDeclarations]: Found implementation of procedure PTR_ERR [2025-02-08 02:46:06,585 INFO L130 BoogieDeclarations]: Found specification of procedure signal_pending [2025-02-08 02:46:06,585 INFO L138 BoogieDeclarations]: Found implementation of procedure signal_pending [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure input_abs_get_min [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure input_abs_get_min [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#7 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#8 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#9 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#10 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#11 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#12 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#13 [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure is_compat_task [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure is_compat_task [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure might_fault [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure might_fault [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure prepare_to_wait [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure prepare_to_wait [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2025-02-08 02:46:06,586 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2025-02-08 02:46:06,586 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2025-02-08 02:46:06,587 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure __init_waitqueue_head [2025-02-08 02:46:06,587 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_waitqueue_head [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2025-02-08 02:46:06,587 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2025-02-08 02:46:06,587 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2025-02-08 02:46:06,587 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure schedule [2025-02-08 02:46:06,587 INFO L138 BoogieDeclarations]: Found implementation of procedure schedule [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-02-08 02:46:06,587 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-02-08 02:46:06,591 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure _copy_from_user [2025-02-08 02:46:06,592 INFO L138 BoogieDeclarations]: Found implementation of procedure _copy_from_user [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure finish_wait [2025-02-08 02:46:06,592 INFO L138 BoogieDeclarations]: Found implementation of procedure finish_wait [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:46:06,592 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:46:06,592 INFO L130 BoogieDeclarations]: Found specification of procedure IS_ERR [2025-02-08 02:46:06,592 INFO L138 BoogieDeclarations]: Found implementation of procedure IS_ERR [2025-02-08 02:46:07,158 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:46:07,161 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:46:07,598 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3361-1: #t~ret93#1 := ldv_is_err_#res#1;havoc ldv_is_err_~ptr#1.base, ldv_is_err_~ptr#1.offset;havoc ldv_is_err_#in~ptr#1.base, ldv_is_err_#in~ptr#1.offset;assume { :end_inline_ldv_is_err } true;assume -9223372036854775808 <= #t~ret93#1 && #t~ret93#1 <= 9223372036854775807;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == #t~ret93#1 then 1 else 0);havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; [2025-02-08 02:46:07,599 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3361: havoc assume_abort_if_not_~cond#1;havoc assume_abort_if_not_#in~cond#1;assume { :end_inline_assume_abort_if_not } true;havoc #t~ret93#1;#res#1.base, #res#1.offset := ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:46:07,599 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3359: havoc ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:46:07,599 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3350: assume 0 == assume_abort_if_not_~cond#1;assume false; [2025-02-08 02:46:07,599 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3350: assume !(0 == assume_abort_if_not_~cond#1); [2025-02-08 02:46:16,655 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4528-1: SUMMARY for call #t~ret352#1 := IS_ERR(~phys~1#1.base, ~phys~1#1.offset); srcloc: null [2025-02-08 02:46:16,657 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4528: assume -9223372036854775808 <= #t~ret352#1 && #t~ret352#1 <= 9223372036854775807;~tmp___0~14#1 := #t~ret352#1; [2025-02-08 02:46:16,659 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4396: #t~ret329#1 := uinput_create_device_#res#1;havoc uinput_create_device_#t~mem194#1.base, uinput_create_device_#t~mem194#1.offset, uinput_create_device_#t~mem195#1, uinput_create_device_#t~ret196#1, uinput_create_device_#t~mem197#1, uinput_create_device_#t~mem198#1, uinput_create_device_#t~ret199#1, uinput_create_device_#t~mem200#1.base, uinput_create_device_#t~mem200#1.offset, uinput_create_device_#t~mem201#1.base, uinput_create_device_#t~mem201#1.offset, uinput_create_device_#t~mem202#1.base, uinput_create_device_#t~mem202#1.offset, uinput_create_device_#t~mem203#1.base, uinput_create_device_#t~mem203#1.offset, uinput_create_device_#t~mem204#1.base, uinput_create_device_#t~mem204#1.offset, uinput_create_device_#t~mem205#1.base, uinput_create_device_#t~mem205#1.offset, uinput_create_device_#t~ret206#1, uinput_create_device_~udev#1.base, uinput_create_device_~udev#1.offset, uinput_create_device_~dev~1#1.base, uinput_create_device_~dev~1#1.offset, uinput_create_device_~error~1#1;havoc uinput_create_device_#in~udev#1.base, uinput_create_device_#in~udev#1.offset;assume { :end_inline_uinput_create_device } true;assume -2147483648 <= #t~ret329#1 && #t~ret329#1 <= 2147483647;~retval~5#1 := #t~ret329#1; [2025-02-08 02:46:16,659 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3835: assume 0 != uinput_create_device_~error~1#1; [2025-02-08 02:46:16,660 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3835: assume !(0 != uinput_create_device_~error~1#1);call uinput_create_device_#t~mem200#1.base, uinput_create_device_#t~mem200#1.offset := read~$Pointer$#12(uinput_create_device_~dev~1#1.base, 244 + uinput_create_device_~dev~1#1.offset, 8);call write~$Pointer$#12(#funAddr~uinput_dev_upload_effect.base, #funAddr~uinput_dev_upload_effect.offset, uinput_create_device_#t~mem200#1.base, uinput_create_device_#t~mem200#1.offset, 8);havoc uinput_create_device_#t~mem200#1.base, uinput_create_device_#t~mem200#1.offset;call uinput_create_device_#t~mem201#1.base, uinput_create_device_#t~mem201#1.offset := read~$Pointer$#12(uinput_create_device_~dev~1#1.base, 244 + uinput_create_device_~dev~1#1.offset, 8);call write~$Pointer$#12(#funAddr~uinput_dev_erase_effect.base, #funAddr~uinput_dev_erase_effect.offset, uinput_create_device_#t~mem201#1.base, 8 + uinput_create_device_#t~mem201#1.offset, 8);havoc uinput_create_device_#t~mem201#1.base, uinput_create_device_#t~mem201#1.offset;call uinput_create_device_#t~mem202#1.base, uinput_create_device_#t~mem202#1.offset := read~$Pointer$#12(uinput_create_device_~dev~1#1.base, 244 + uinput_create_device_~dev~1#1.offset, 8);call write~$Pointer$#12(#funAddr~uinput_dev_playback.base, #funAddr~uinput_dev_playback.offset, uinput_create_device_#t~mem202#1.base, 16 + uinput_create_device_#t~mem202#1.offset, 8);havoc uinput_create_device_#t~mem202#1.base, uinput_create_device_#t~mem202#1.offset;call uinput_create_device_#t~mem203#1.base, uinput_create_device_#t~mem203#1.offset := read~$Pointer$#12(uinput_create_device_~dev~1#1.base, 244 + uinput_create_device_~dev~1#1.offset, 8);call write~$Pointer$#12(#funAddr~uinput_dev_set_gain.base, #funAddr~uinput_dev_set_gain.offset, uinput_create_device_#t~mem203#1.base, 24 + uinput_create_device_#t~mem203#1.offset, 8);havoc uinput_create_device_#t~mem203#1.base, uinput_create_device_#t~mem203#1.offset;call uinput_create_device_#t~mem204#1.base, uinput_create_device_#t~mem204#1.offset := read~$Pointer$#12(uinput_create_device_~dev~1#1.base, 244 + uinput_create_device_~dev~1#1.offset, 8);call write~$Pointer$#12(#funAddr~uinput_dev_set_autocenter.base, #funAddr~uinput_dev_set_autocenter.offset, uinput_create_device_#t~mem204#1.base, 32 + uinput_create_device_#t~mem204#1.offset, 8);havoc uinput_create_device_#t~mem204#1.base, uinput_create_device_#t~mem204#1.offset; [2025-02-08 02:46:16,660 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4265: call ULTIMATE.dealloc(uinput_ff_upload_to_user_~#ff_up_compat~0#1.base, uinput_ff_upload_to_user_~#ff_up_compat~0#1.offset);havoc uinput_ff_upload_to_user_~#ff_up_compat~0#1.base, uinput_ff_upload_to_user_~#ff_up_compat~0#1.offset;#t~ret456#1 := uinput_ff_upload_to_user_#res#1;havoc uinput_ff_upload_to_user_#t~ret306#1, uinput_ff_upload_to_user_#t~mem307#1, uinput_ff_upload_to_user_#t~mem308#1, uinput_ff_upload_to_user_#t~memcpy~res309#1.base, uinput_ff_upload_to_user_#t~memcpy~res309#1.offset, uinput_ff_upload_to_user_#t~memcpy~res310#1.base, uinput_ff_upload_to_user_#t~memcpy~res310#1.offset, uinput_ff_upload_to_user_#t~memcpy~res311#1.base, uinput_ff_upload_to_user_#t~memcpy~res311#1.offset, uinput_ff_upload_to_user_#t~memcpy~res312#1.base, uinput_ff_upload_to_user_#t~memcpy~res312#1.offset, uinput_ff_upload_to_user_#t~ret313#1, uinput_ff_upload_to_user_#t~ret314#1, uinput_ff_upload_to_user_~buffer#1.base, uinput_ff_upload_to_user_~buffer#1.offset, uinput_ff_upload_to_user_~ff_up#1.base, uinput_ff_upload_to_user_~ff_up#1.offset, uinput_ff_upload_to_user_~#ff_up_compat~0#1.base, uinput_ff_upload_to_user_~#ff_up_compat~0#1.offset, uinput_ff_upload_to_user_~__len~0#1, uinput_ff_upload_to_user_~__ret~2#1.base, uinput_ff_upload_to_user_~__ret~2#1.offset, uinput_ff_upload_to_user_~__len___0~0#1, uinput_ff_upload_to_user_~__ret___0~0#1.base, uinput_ff_upload_to_user_~__ret___0~0#1.offset, uinput_ff_upload_to_user_~tmp~23#1, uinput_ff_upload_to_user_~tmp___0~12#1, uinput_ff_upload_to_user_~tmp___1~10#1;havoc uinput_ff_upload_to_user_#in~buffer#1.base, uinput_ff_upload_to_user_#in~buffer#1.offset, uinput_ff_upload_to_user_#in~ff_up#1.base, uinput_ff_upload_to_user_#in~ff_up#1.offset;assume { :end_inline_uinput_ff_upload_to_user } true;assume -2147483648 <= #t~ret456#1 && #t~ret456#1 <= 2147483647;~retval~5#1 := #t~ret456#1; [2025-02-08 02:46:16,660 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4530: assume -9223372036854775808 <= #t~ret353#1 && #t~ret353#1 <= 9223372036854775807;~tmp~25#1 := #t~ret353#1;havoc #t~ret353#1;~retval~5#1 := (if ~tmp~25#1 % 4294967296 <= 2147483647 then ~tmp~25#1 % 4294967296 else ~tmp~25#1 % 4294967296 - 4294967296); [2025-02-08 02:46:16,660 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4530-1: SUMMARY for call #t~ret353#1 := PTR_ERR(~phys~1#1.base, ~phys~1#1.offset); srcloc: null [2025-02-08 02:46:16,660 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3854: havoc input_ff_destroy_~arg0#1.base, input_ff_destroy_~arg0#1.offset;havoc input_ff_destroy_#in~arg0#1.base, input_ff_destroy_#in~arg0#1.offset;assume { :end_inline_input_ff_destroy } true; [2025-02-08 02:46:16,660 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3854-1: assume { :begin_inline_input_ff_destroy } true;input_ff_destroy_#in~arg0#1.base, input_ff_destroy_#in~arg0#1.offset := uinput_create_device_~dev~1#1.base, uinput_create_device_~dev~1#1.offset;havoc input_ff_destroy_~arg0#1.base, input_ff_destroy_~arg0#1.offset;input_ff_destroy_~arg0#1.base, input_ff_destroy_~arg0#1.offset := input_ff_destroy_#in~arg0#1.base, input_ff_destroy_#in~arg0#1.offset; [2025-02-08 02:46:16,664 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5407: havoc strndup_user_#t~ret537#1.base, strndup_user_#t~ret537#1.offset;#t~ret351#1.base, #t~ret351#1.offset := strndup_user_#res#1.base, strndup_user_#res#1.offset;havoc strndup_user_#t~ret537#1.base, strndup_user_#t~ret537#1.offset, strndup_user_~arg0#1.base, strndup_user_~arg0#1.offset, strndup_user_~arg1#1;havoc strndup_user_#in~arg0#1.base, strndup_user_#in~arg0#1.offset, strndup_user_#in~arg1#1;assume { :end_inline_strndup_user } true;~phys~1#1.base, ~phys~1#1.offset := #t~ret351#1.base, #t~ret351#1.offset; [2025-02-08 02:46:16,664 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3856: uinput_create_device_#res#1 := uinput_create_device_~error~1#1; [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3856-1: SUMMARY for call uinput_destroy_device(uinput_create_device_~udev#1.base, uinput_create_device_~udev#1.offset); srcloc: null [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4535: call #t~mem356#1.base, #t~mem356#1.offset := read~$Pointer$#12(~udev~7#1.base, ~udev~7#1.offset, 8);call write~$Pointer$#12(~phys~1#1.base, ~phys~1#1.offset, #t~mem356#1.base, 8 + #t~mem356#1.offset, 8); [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4535-1: SUMMARY for call kfree(#t~mem355#1.base, #t~mem355#1.offset); srcloc: null [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4899-1: ldv_mutex_lock_interruptible_12_#res#1 := ldv_mutex_lock_interruptible_12_~ldv_func_res~4#1; [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4521: assume 0 != ~tmp___0~14#1; [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4521: assume !(0 != ~tmp___0~14#1);call #t~mem354#1.base, #t~mem354#1.offset := read~$Pointer$#12(~udev~7#1.base, ~udev~7#1.offset, 8);call #t~mem355#1.base, #t~mem355#1.offset := read~$Pointer$#12(#t~mem354#1.base, 8 + #t~mem354#1.offset, 8); [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5350: havoc input_register_device_#t~nondet528#1;uinput_create_device_#t~ret206#1 := input_register_device_#res#1;havoc input_register_device_#t~nondet528#1, input_register_device_~arg0#1.base, input_register_device_~arg0#1.offset;havoc input_register_device_#in~arg0#1.base, input_register_device_#in~arg0#1.offset;assume { :end_inline_input_register_device } true;assume -2147483648 <= uinput_create_device_#t~ret206#1 && uinput_create_device_#t~ret206#1 <= 2147483647;uinput_create_device_~error~1#1 := uinput_create_device_#t~ret206#1;havoc uinput_create_device_#t~mem205#1.base, uinput_create_device_#t~mem205#1.offset;havoc uinput_create_device_#t~ret206#1; [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3847: assume 0 != uinput_create_device_~error~1#1; [2025-02-08 02:46:16,665 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3847: assume !(0 != uinput_create_device_~error~1#1);call write~int#12(2, uinput_create_device_~udev#1.base, 164 + uinput_create_device_~udev#1.offset, 4);uinput_create_device_#res#1 := 0; [2025-02-08 02:46:16,666 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4360: call ULTIMATE.dealloc(~#ff_up~0#1.base, ~#ff_up~0#1.offset);havoc ~#ff_up~0#1.base, ~#ff_up~0#1.offset;call ULTIMATE.dealloc(~#ff_erase~0#1.base, ~#ff_erase~0#1.offset);havoc ~#ff_erase~0#1.base, ~#ff_erase~0#1.offset; [2025-02-08 02:46:16,666 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5336: havoc input_ff_create_#t~nondet526#1;uinput_create_device_#t~ret199#1 := input_ff_create_#res#1;havoc input_ff_create_#t~nondet526#1, input_ff_create_~arg0#1.base, input_ff_create_~arg0#1.offset, input_ff_create_~arg1#1;havoc input_ff_create_#in~arg0#1.base, input_ff_create_#in~arg0#1.offset, input_ff_create_#in~arg1#1;assume { :end_inline_input_ff_create } true;assume -2147483648 <= uinput_create_device_#t~ret199#1 && uinput_create_device_#t~ret199#1 <= 2147483647;uinput_create_device_~error~1#1 := uinput_create_device_#t~ret199#1;havoc uinput_create_device_#t~mem198#1;havoc uinput_create_device_#t~ret199#1; [2025-02-08 02:46:16,922 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5383: havoc #t~nondet533; [2025-02-08 02:46:16,943 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3426: havoc #t~mem114.base, #t~mem114.offset;havoc #t~ite117;havoc #t~mem115.base, #t~mem115.offset;havoc #t~mem116; [2025-02-08 02:46:17,017 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3520: #t~ret145#1 := is_x32_task_#res#1;havoc is_x32_task_#t~ret140#1.base, is_x32_task_#t~ret140#1.offset, is_x32_task_#t~mem141#1, is_x32_task_#t~mem142#1, is_x32_task_#t~bitwise143#1, is_x32_task_~tmp~9#1.base, is_x32_task_~tmp~9#1.offset;assume { :end_inline_is_x32_task } true;~tmp___0~2#1 := (if 0 == #t~ret145#1 % 256 then 0 else 1);havoc #t~ret145#1; [2025-02-08 02:46:17,018 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3521: assume 0 != (if ~tmp___0~2#1 % 256 % 4294967296 <= 2147483647 then ~tmp___0~2#1 % 256 % 4294967296 else ~tmp___0~2#1 % 256 % 4294967296 - 4294967296);~tmp___1~1#1 := 1; [2025-02-08 02:46:17,018 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3521: assume !(0 != (if ~tmp___0~2#1 % 256 % 4294967296 <= 2147483647 then ~tmp___0~2#1 % 256 % 4294967296 else ~tmp___0~2#1 % 256 % 4294967296 - 4294967296));~tmp___1~1#1 := 0; [2025-02-08 02:46:17,025 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5401: havoc #t~nondet536; [2025-02-08 02:46:17,050 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3369: havoc __kmalloc_#t~ret94#1.base, __kmalloc_#t~ret94#1.offset; [2025-02-08 02:46:17,064 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5286: havoc #t~nondet520; [2025-02-08 02:46:17,112 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3080: havoc #t~mem1;havoc #t~bitwise2; [2025-02-08 02:46:17,129 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3474: havoc #t~mem128.base, #t~mem128.offset;havoc #t~ite131;havoc #t~mem129.base, #t~mem129.offset;havoc #t~mem130; [2025-02-08 02:46:17,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5290: havoc _copy_to_user_#t~nondet521#1; [2025-02-08 02:46:17,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3604: havoc #t~mem162.base, #t~mem162.offset; [2025-02-08 02:46:17,196 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5312: havoc dev_set_drvdata_#t~nondet523#1; [2025-02-08 02:46:17,197 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3394: havoc input_allocate_device_#t~ret103#1.base, input_allocate_device_#t~ret103#1.offset; [2025-02-08 02:46:17,236 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3295: havoc warn_slowpath_fmt_~arg0#1.base, warn_slowpath_fmt_~arg0#1.offset, warn_slowpath_fmt_~arg1#1, warn_slowpath_fmt_~arg2#1.base, warn_slowpath_fmt_~arg2#1.offset;havoc warn_slowpath_fmt_#in~arg0#1.base, warn_slowpath_fmt_#in~arg0#1.offset, warn_slowpath_fmt_#in~arg1#1, warn_slowpath_fmt_#in~arg2#1.base, warn_slowpath_fmt_#in~arg2#1.offset;assume { :end_inline_warn_slowpath_fmt } true; [2025-02-08 02:46:17,290 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4311: call ULTIMATE.dealloc(~#ff_up_compat~1.base, ~#ff_up_compat~1.offset);havoc ~#ff_up_compat~1.base, ~#ff_up_compat~1.offset; [2025-02-08 02:46:17,339 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3809: havoc uinput_flush_requests_#t~mem178#1.base, uinput_flush_requests_#t~mem178#1.offset, uinput_flush_requests_~udev#1.base, uinput_flush_requests_~udev#1.offset, uinput_flush_requests_~request~0#1.base, uinput_flush_requests_~request~0#1.offset, uinput_flush_requests_~i~0#1;havoc uinput_flush_requests_#in~udev#1.base, uinput_flush_requests_#in~udev#1.offset;assume { :end_inline_uinput_flush_requests } true;assume { :begin_inline_input_unregister_device } true;input_unregister_device_#in~arg0#1.base, input_unregister_device_#in~arg0#1.offset := ~dev~0#1.base, ~dev~0#1.offset;havoc input_unregister_device_~arg0#1.base, input_unregister_device_~arg0#1.offset;input_unregister_device_~arg0#1.base, input_unregister_device_~arg0#1.offset := input_unregister_device_#in~arg0#1.base, input_unregister_device_#in~arg0#1.offset; [2025-02-08 02:46:17,339 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3727: SUMMARY for call spin_unlock(uinput_flush_requests_~udev#1.base, 855 + uinput_flush_requests_~udev#1.offset); srcloc: null [2025-02-08 02:46:17,339 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3723: assume uinput_flush_requests_~i~0#1 <= 15; [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3723: assume !(uinput_flush_requests_~i~0#1 <= 15); [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3721: uinput_flush_requests_~i~0#1 := 1 + uinput_flush_requests_~i~0#1; [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814: SUMMARY for call kfree(~name~0#1.base, ~name~0#1.offset); srcloc: null [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812: havoc input_free_device_~arg0#1.base, input_free_device_~arg0#1.offset;havoc input_free_device_#in~arg0#1.base, input_free_device_#in~arg0#1.offset;assume { :end_inline_input_free_device } true; [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810: havoc input_unregister_device_~arg0#1.base, input_unregister_device_~arg0#1.offset;havoc input_unregister_device_#in~arg0#1.base, input_unregister_device_#in~arg0#1.offset;assume { :end_inline_input_unregister_device } true; [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3715: call uinput_flush_requests_#t~mem178#1.base, uinput_flush_requests_#t~mem178#1.offset := read~$Pointer$#12(uinput_flush_requests_~udev#1.base, 643 + uinput_flush_requests_~udev#1.offset + 8 * uinput_flush_requests_~i~0#1, 8);uinput_flush_requests_~request~0#1.base, uinput_flush_requests_~request~0#1.offset := uinput_flush_requests_#t~mem178#1.base, uinput_flush_requests_#t~mem178#1.offset; [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3815-1: SUMMARY for call kfree(~phys~0#1.base, ~phys~0#1.offset); srcloc: null [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3718: SUMMARY for call uinput_request_done(uinput_flush_requests_~udev#1.base, uinput_flush_requests_~udev#1.offset, uinput_flush_requests_~request~0#1.base, uinput_flush_requests_~request~0#1.offset); srcloc: null [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3815: call write~$Pointer$#12(0, 0, ~udev#1.base, ~udev#1.offset, 8); [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3716: assume 0 != (uinput_flush_requests_~request~0#1.base + uinput_flush_requests_~request~0#1.offset) % 18446744073709551616;call write~int#12(-19, uinput_flush_requests_~request~0#1.base, 8 + uinput_flush_requests_~request~0#1.offset, 4); [2025-02-08 02:46:17,340 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3716: assume !(0 != (uinput_flush_requests_~request~0#1.base + uinput_flush_requests_~request~0#1.offset) % 18446744073709551616); [2025-02-08 02:46:17,356 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3444: havoc #t~mem120.base, #t~mem120.offset;havoc #t~ite123;havoc #t~mem121.base, #t~mem121.offset;havoc #t~mem122; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4065-1: SUMMARY for call uinput_inject_event_#t~ret252#1 := input_event_size(); srcloc: null [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4032: assume uinput_setup_device_~retval~2#1 < 0; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4032: assume !(uinput_setup_device_~retval~2#1 < 0); [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4065: uinput_inject_event_~tmp~19#1 := uinput_inject_event_#t~ret252#1;havoc uinput_inject_event_#t~ret252#1; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3999: assume 0 == uinput_setup_device_#t~mem234#1;havoc uinput_setup_device_#t~mem234#1;uinput_setup_device_~retval~2#1 := -22; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3999: assume !(0 == uinput_setup_device_#t~mem234#1);havoc uinput_setup_device_#t~mem234#1;call uinput_setup_device_#t~mem235#1.base, uinput_setup_device_#t~mem235#1.offset := read~$Pointer$#12(uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, 8); [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4759: assume main_#t~switch486#1; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4759: assume !main_#t~switch486#1;main_#t~switch486#1 := true; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4165: call ULTIMATE.dealloc(uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset);havoc uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset;main_#t~ret488#1 := uinput_read_#res#1;havoc uinput_read_#t~mem279#1.base, uinput_read_#t~mem279#1.offset, uinput_read_#t~ret280#1, uinput_read_#t~ret281#1, uinput_read_#t~mem282#1, uinput_read_#t~mem283#1, uinput_read_#t~mem284#1, uinput_read_#t~mem285#1, uinput_read_#t~bitwise286#1, uinput_read_#t~short287#1, uinput_read_#t~ret288#1, uinput_read_#t~mem289#1, uinput_read_#t~bitwise290#1, uinput_read_#t~mem291#1, uinput_read_#t~mem292#1, uinput_read_#t~mem293#1, uinput_read_#t~short294#1, uinput_read_#t~ret295#1.base, uinput_read_#t~ret295#1.offset, uinput_read_#t~mem296#1, uinput_read_#t~mem297#1, uinput_read_#t~mem298#1, uinput_read_#t~short299#1, uinput_read_#t~ret300#1.base, uinput_read_#t~ret300#1.offset, uinput_read_#t~ret301#1, uinput_read_~file#1.base, uinput_read_~file#1.offset, uinput_read_~buffer#1.base, uinput_read_~buffer#1.offset, uinput_read_~count#1, uinput_read_~ppos#1.base, uinput_read_~ppos#1.offset, uinput_read_~udev~4#1.base, uinput_read_~udev~4#1.offset, uinput_read_~retval~4#1, uinput_read_~tmp~22#1, uinput_read_~tmp___0~11#1, uinput_read_~__ret~1#1, uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset, uinput_read_~tmp___1~9#1.base, uinput_read_~tmp___1~9#1.offset, uinput_read_~tmp___2~7#1.base, uinput_read_~tmp___2~7#1.offset, uinput_read_~tmp___3~4#1;havoc uinput_read_#in~file#1.base, uinput_read_#in~file#1.offset, uinput_read_#in~buffer#1.base, uinput_read_#in~buffer#1.offset, uinput_read_#in~count#1, uinput_read_#in~ppos#1.base, uinput_read_#in~ppos#1.offset;assume { :end_inline_uinput_read } true;assume -9223372036854775808 <= main_#t~ret488#1 && main_#t~ret488#1 <= 9223372036854775807;main_~res_uinput_read_23~0#1 := main_#t~ret488#1;havoc main_#t~ret488#1; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4066: assume uinput_inject_event_~tmp~19#1 % 18446744073709551616 > uinput_inject_event_~count#1 % 18446744073709551616;uinput_inject_event_#res#1 := -22;call ULTIMATE.dealloc(uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset);havoc uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4066: assume !(uinput_inject_event_~tmp~19#1 % 18446744073709551616 > uinput_inject_event_~count#1 % 18446744073709551616);assume { :begin_inline_input_event_from_user } true;input_event_from_user_#in~arg0#1.base, input_event_from_user_#in~arg0#1.offset, input_event_from_user_#in~arg1#1.base, input_event_from_user_#in~arg1#1.offset := uinput_inject_event_~buffer#1.base, uinput_inject_event_~buffer#1.offset, uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset;havoc input_event_from_user_#res#1;havoc input_event_from_user_#t~nondet524#1, input_event_from_user_~arg0#1.base, input_event_from_user_~arg0#1.offset, input_event_from_user_~arg1#1.base, input_event_from_user_~arg1#1.offset;input_event_from_user_~arg0#1.base, input_event_from_user_~arg0#1.offset := input_event_from_user_#in~arg0#1.base, input_event_from_user_#in~arg0#1.offset;input_event_from_user_~arg1#1.base, input_event_from_user_~arg1#1.offset := input_event_from_user_#in~arg1#1.base, input_event_from_user_#in~arg1#1.offset;havoc input_event_from_user_#t~nondet524#1;assume -2147483648 <= input_event_from_user_#t~nondet524#1 && input_event_from_user_#t~nondet524#1 <= 2147483647;input_event_from_user_#res#1 := input_event_from_user_#t~nondet524#1;havoc input_event_from_user_#t~nondet524#1; [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4760-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4760: assume { :begin_inline_uinput_compat_ioctl } true;uinput_compat_ioctl_#in~file#1.base, uinput_compat_ioctl_#in~file#1.offset, uinput_compat_ioctl_#in~cmd#1, uinput_compat_ioctl_#in~arg#1 := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_uinput_compat_ioctl_32_p1~0#1, main_~var_uinput_compat_ioctl_32_p2~0#1;havoc uinput_compat_ioctl_#res#1;havoc uinput_compat_ioctl_#t~ret479#1.base, uinput_compat_ioctl_#t~ret479#1.offset, uinput_compat_ioctl_#t~ret480#1, uinput_compat_ioctl_~file#1.base, uinput_compat_ioctl_~file#1.offset, uinput_compat_ioctl_~cmd#1, uinput_compat_ioctl_~arg#1, uinput_compat_ioctl_~tmp~27#1.base, uinput_compat_ioctl_~tmp~27#1.offset, uinput_compat_ioctl_~tmp___0~15#1;uinput_compat_ioctl_~file#1.base, uinput_compat_ioctl_~file#1.offset := uinput_compat_ioctl_#in~file#1.base, uinput_compat_ioctl_#in~file#1.offset;uinput_compat_ioctl_~cmd#1 := uinput_compat_ioctl_#in~cmd#1;uinput_compat_ioctl_~arg#1 := uinput_compat_ioctl_#in~arg#1;havoc uinput_compat_ioctl_~tmp~27#1.base, uinput_compat_ioctl_~tmp~27#1.offset;havoc uinput_compat_ioctl_~tmp___0~15#1;assume { :begin_inline_compat_ptr } true;compat_ptr_#in~uptr#1 := uinput_compat_ioctl_~arg#1;havoc compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;compat_ptr_~uptr#1 := compat_ptr_#in~uptr#1;compat_ptr_#res#1.base, compat_ptr_#res#1.offset := 0, (if compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else compat_ptr_~uptr#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616); [2025-02-08 02:46:18,743 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199: assume 0 == uinput_read_#t~bitwise290#1 % 4294967296;havoc uinput_read_#t~mem289#1;havoc uinput_read_#t~bitwise290#1;uinput_read_~__ret~1#1 := 0;call uinput_read_#t~mem291#1 := read~int#12(uinput_read_~udev~4#1.base, 253 + uinput_read_~udev~4#1.offset, 1);call uinput_read_#t~mem292#1 := read~int#12(uinput_read_~udev~4#1.base, 254 + uinput_read_~udev~4#1.offset, 1);uinput_read_#t~short294#1 := (if uinput_read_#t~mem291#1 % 256 % 4294967296 <= 2147483647 then uinput_read_#t~mem291#1 % 256 % 4294967296 else uinput_read_#t~mem291#1 % 256 % 4294967296 - 4294967296) == (if uinput_read_#t~mem292#1 % 256 % 4294967296 <= 2147483647 then uinput_read_#t~mem292#1 % 256 % 4294967296 else uinput_read_#t~mem292#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:46:18,744 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199: assume !(0 == uinput_read_#t~bitwise290#1 % 4294967296);havoc uinput_read_#t~mem289#1;havoc uinput_read_#t~bitwise290#1; [2025-02-08 02:46:18,744 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199-1: [2025-02-08 02:46:18,744 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4232: assume 0 == uinput_read_~retval~4#1; [2025-02-08 02:46:18,744 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4232: assume !(0 == uinput_read_~retval~4#1);uinput_read_#res#1 := uinput_read_~retval~4#1;call ULTIMATE.dealloc(uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset);havoc uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset; [2025-02-08 02:46:18,744 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199-4: assume 0 == uinput_read_#t~mem289#1 % 4294967296;uinput_read_#t~bitwise290#1 := 0; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199-4: assume !(0 == uinput_read_#t~mem289#1 % 4294967296); [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199-2: havoc uinput_read_#t~bitwise290#1;assume uinput_read_#t~bitwise290#1 % 4294967296 <= uinput_read_#t~mem289#1 % 4294967296 && uinput_read_#t~bitwise290#1 % 4294967296 <= 2048; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199-3: assume 2048 == uinput_read_#t~mem289#1 % 4294967296;uinput_read_#t~bitwise290#1 := uinput_read_#t~mem289#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4199-3: assume !(2048 == uinput_read_#t~mem289#1 % 4294967296); [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3869-1: SUMMARY for call uinput_open_#t~ret207#1.base, uinput_open_#t~ret207#1.offset := kzalloc(960, 208); srcloc: null [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3869: uinput_open_~tmp~16#1.base, uinput_open_~tmp~16#1.offset := uinput_open_#t~ret207#1.base, uinput_open_#t~ret207#1.offset;havoc uinput_open_#t~ret207#1.base, uinput_open_#t~ret207#1.offset;uinput_open_~newdev~0#1.base, uinput_open_~newdev~0#1.offset := uinput_open_~tmp~16#1.base, uinput_open_~tmp~16#1.offset; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4761: main_#t~ret493#1 := uinput_compat_ioctl_#res#1;havoc uinput_compat_ioctl_#t~ret479#1.base, uinput_compat_ioctl_#t~ret479#1.offset, uinput_compat_ioctl_#t~ret480#1, uinput_compat_ioctl_~file#1.base, uinput_compat_ioctl_~file#1.offset, uinput_compat_ioctl_~cmd#1, uinput_compat_ioctl_~arg#1, uinput_compat_ioctl_~tmp~27#1.base, uinput_compat_ioctl_~tmp~27#1.offset, uinput_compat_ioctl_~tmp___0~15#1;havoc uinput_compat_ioctl_#in~file#1.base, uinput_compat_ioctl_#in~file#1.offset, uinput_compat_ioctl_#in~cmd#1, uinput_compat_ioctl_#in~arg#1;assume { :end_inline_uinput_compat_ioctl } true;assume -9223372036854775808 <= main_#t~ret493#1 && main_#t~ret493#1 <= 9223372036854775807; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5356-2: kstrndup_#res#1.base, kstrndup_#res#1.offset := kstrndup_#t~ret529#1.base, kstrndup_#t~ret529#1.offset;havoc kstrndup_#t~ret529#1.base, kstrndup_#t~ret529#1.offset; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5356: havoc kstrndup_#t~ret529#1.base, kstrndup_#t~ret529#1.offset;uinput_setup_device_#t~ret236#1.base, uinput_setup_device_#t~ret236#1.offset := kstrndup_#res#1.base, kstrndup_#res#1.offset;havoc kstrndup_#t~ret529#1.base, kstrndup_#t~ret529#1.offset, kstrndup_~arg0#1.base, kstrndup_~arg0#1.offset, kstrndup_~arg1#1, kstrndup_~arg2#1;havoc kstrndup_#in~arg0#1.base, kstrndup_#in~arg0#1.offset, kstrndup_#in~arg1#1, kstrndup_#in~arg2#1;assume { :end_inline_kstrndup } true;uinput_setup_device_~tmp___2~5#1.base, uinput_setup_device_~tmp___2~5#1.offset := uinput_setup_device_#t~ret236#1.base, uinput_setup_device_#t~ret236#1.offset;havoc uinput_setup_device_#t~ret236#1.base, uinput_setup_device_#t~ret236#1.offset;call write~$Pointer$#12(uinput_setup_device_~tmp___2~5#1.base, uinput_setup_device_~tmp___2~5#1.offset, uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, 8);call uinput_setup_device_#t~mem237#1.base, uinput_setup_device_#t~mem237#1.offset := read~$Pointer$#12(uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, 8); [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5356-3: SUMMARY for call kstrndup_#t~ret529#1.base, kstrndup_#t~ret529#1.offset := ldv_malloc(1); srcloc: null [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4729-2: assume main_#t~switch486#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4729-2: assume !main_#t~switch486#1;main_#t~switch486#1 := main_#t~switch486#1 || 3 == main_~tmp___0~16#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4729: assume main_~res_uinput_write_20~0#1 < 0; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4729: assume !(main_~res_uinput_write_20~0#1 < 0);main_~ldv_s_uinput_fops_file_operations~0#1 := 1 + main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4729-1: assume 2 == main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4729-1: assume !(2 == main_~ldv_s_uinput_fops_file_operations~0#1); [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4102: uinput_write_#t~ret263#1 := uinput_setup_device_#res#1;havoc uinput_setup_device_#t~mem227#1.base, uinput_setup_device_#t~mem227#1.offset, uinput_setup_device_#t~ret228#1, uinput_setup_device_#t~mem229#1.base, uinput_setup_device_#t~mem229#1.offset, uinput_setup_device_#t~ret230#1.base, uinput_setup_device_#t~ret230#1.offset, uinput_setup_device_#t~ret231#1, uinput_setup_device_#t~ret232#1, uinput_setup_device_#t~mem233#1, uinput_setup_device_#t~mem234#1, uinput_setup_device_#t~mem235#1.base, uinput_setup_device_#t~mem235#1.offset, uinput_setup_device_#t~ret236#1.base, uinput_setup_device_#t~ret236#1.offset, uinput_setup_device_#t~mem237#1.base, uinput_setup_device_#t~mem237#1.offset, uinput_setup_device_#t~mem238#1, uinput_setup_device_#t~mem239#1, uinput_setup_device_#t~mem240#1, uinput_setup_device_#t~mem241#1, uinput_setup_device_#t~mem242#1, uinput_setup_device_#t~mem243#1, uinput_setup_device_#t~mem244#1, uinput_setup_device_#t~mem245#1, uinput_setup_device_#t~ret246#1, uinput_setup_device_#t~ret247#1, uinput_setup_device_#t~ret248#1, uinput_setup_device_#t~ret249#1, uinput_setup_device_#t~ret250#1, uinput_setup_device_#t~ret251#1, uinput_setup_device_~udev#1.base, uinput_setup_device_~udev#1.offset, uinput_setup_device_~buffer#1.base, uinput_setup_device_~buffer#1.offset, uinput_setup_device_~count#1, uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset, uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~i~1#1, uinput_setup_device_~retval~2#1, uinput_setup_device_~tmp~18#1.base, uinput_setup_device_~tmp~18#1.offset, uinput_setup_device_~tmp___0~7#1, uinput_setup_device_~tmp___1~6#1, uinput_setup_device_~tmp___2~5#1.base, uinput_setup_device_~tmp___2~5#1.offset, uinput_setup_device_~nslot~0#1, uinput_setup_device_~tmp___3~3#1, uinput_setup_device_~tmp___4~2#1, uinput_setup_device_~tmp___5~1#1, uinput_setup_device_~tmp___6~1#1;havoc uinput_setup_device_#in~udev#1.base, uinput_setup_device_#in~udev#1.offset, uinput_setup_device_#in~buffer#1.base, uinput_setup_device_#in~buffer#1.offset, uinput_setup_device_#in~count#1;assume { :end_inline_uinput_setup_device } true;assume -2147483648 <= uinput_write_#t~ret263#1 && uinput_write_#t~ret263#1 <= 2147483647;uinput_write_~tmp___0~9#1 := uinput_write_#t~ret263#1;havoc uinput_write_#t~ret263#1;uinput_write_~retval~3#1 := uinput_write_~tmp___0~9#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4201: assume uinput_read_#t~short294#1;havoc uinput_read_#t~mem291#1;havoc uinput_read_#t~mem292#1;havoc uinput_read_#t~mem293#1;havoc uinput_read_#t~short294#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4201: assume !uinput_read_#t~short294#1;havoc uinput_read_#t~mem291#1;havoc uinput_read_#t~mem292#1;havoc uinput_read_#t~mem293#1;havoc uinput_read_#t~short294#1; [2025-02-08 02:46:18,745 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4201-1: assume uinput_read_#t~short294#1;call uinput_read_#t~mem293#1 := read~int#12(uinput_read_~udev~4#1.base, 164 + uinput_read_~udev~4#1.offset, 4);uinput_read_#t~short294#1 := 2 == uinput_read_#t~mem293#1 % 4294967296; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4201-1: assume !uinput_read_#t~short294#1; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4036: assume -2147483648 <= uinput_setup_device_#t~ret248#1 && uinput_setup_device_#t~ret248#1 <= 2147483647;uinput_setup_device_~tmp___5~1#1 := uinput_setup_device_#t~ret248#1;havoc uinput_setup_device_#t~ret248#1; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4036-1: SUMMARY for call uinput_setup_device_#t~ret248#1 := constant_test_bit(47, uinput_setup_device_~dev~2#1.base, 152 + uinput_setup_device_~dev~2#1.offset); srcloc: null [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3871: assume 0 == (uinput_open_~newdev~0#1.base + uinput_open_~newdev~0#1.offset) % 18446744073709551616;uinput_open_#res#1 := -12;call ULTIMATE.dealloc(uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset);havoc uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset);havoc uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset);havoc uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset);havoc uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3871: assume !(0 == (uinput_open_~newdev~0#1.base + uinput_open_~newdev~0#1.offset) % 18446744073709551616);assume { :begin_inline___mutex_init } true;__mutex_init_#in~arg0#1.base, __mutex_init_#in~arg0#1.offset, __mutex_init_#in~arg1#1.base, __mutex_init_#in~arg1#1.offset, __mutex_init_#in~arg2#1.base, __mutex_init_#in~arg2#1.offset := uinput_open_~newdev~0#1.base, 8 + uinput_open_~newdev~0#1.offset, 8, 0, uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset;havoc __mutex_init_~arg0#1.base, __mutex_init_~arg0#1.offset, __mutex_init_~arg1#1.base, __mutex_init_~arg1#1.offset, __mutex_init_~arg2#1.base, __mutex_init_~arg2#1.offset;__mutex_init_~arg0#1.base, __mutex_init_~arg0#1.offset := __mutex_init_#in~arg0#1.base, __mutex_init_#in~arg0#1.offset;__mutex_init_~arg1#1.base, __mutex_init_~arg1#1.offset := __mutex_init_#in~arg1#1.base, __mutex_init_#in~arg1#1.offset;__mutex_init_~arg2#1.base, __mutex_init_~arg2#1.offset := __mutex_init_#in~arg2#1.base, __mutex_init_#in~arg2#1.offset; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4763: assume main_#t~switch486#1; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4763: assume !main_#t~switch486#1;havoc main_#t~switch486#1;havoc main_#t~ret491#1;havoc main_#t~ret492#1;havoc main_#t~ret493#1;havoc main_#t~switch486#1;havoc main_#t~ret491#1;havoc main_#t~ret492#1;havoc main_#t~ret493#1; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4202: uinput_read_~tmp___1~9#1.base, uinput_read_~tmp___1~9#1.offset := uinput_read_#t~ret295#1.base, uinput_read_#t~ret295#1.offset;havoc uinput_read_#t~ret295#1.base, uinput_read_#t~ret295#1.offset;call write~int#12(0, uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset, 4);call write~$Pointer$#12(uinput_read_~tmp___1~9#1.base, uinput_read_~tmp___1~9#1.offset, uinput_read_~#__wait~1#1.base, 4 + uinput_read_~#__wait~1#1.offset, 8);call write~$Pointer$#12(#funAddr~autoremove_wake_function.base, #funAddr~autoremove_wake_function.offset, uinput_read_~#__wait~1#1.base, 12 + uinput_read_~#__wait~1#1.offset, 8);call write~$Pointer$#12(uinput_read_~#__wait~1#1.base, 20 + uinput_read_~#__wait~1#1.offset, uinput_read_~#__wait~1#1.base, 20 + uinput_read_~#__wait~1#1.offset, 8);call write~$Pointer$#12(uinput_read_~#__wait~1#1.base, 20 + uinput_read_~#__wait~1#1.offset, uinput_read_~#__wait~1#1.base, 28 + uinput_read_~#__wait~1#1.offset, 8); [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4136: assume { :begin_inline_input_event_to_user } true;input_event_to_user_#in~arg0#1.base, input_event_to_user_#in~arg0#1.offset, input_event_to_user_#in~arg1#1.base, input_event_to_user_#in~arg1#1.offset := uinput_events_to_user_~buffer#1.base, uinput_events_to_user_~buffer#1.offset + (if uinput_events_to_user_~read~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then uinput_events_to_user_~read~0#1 % 18446744073709551616 % 18446744073709551616 else uinput_events_to_user_~read~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset;havoc input_event_to_user_#res#1;havoc input_event_to_user_#t~nondet525#1, input_event_to_user_~arg0#1.base, input_event_to_user_~arg0#1.offset, input_event_to_user_~arg1#1.base, input_event_to_user_~arg1#1.offset;input_event_to_user_~arg0#1.base, input_event_to_user_~arg0#1.offset := input_event_to_user_#in~arg0#1.base, input_event_to_user_#in~arg0#1.offset;input_event_to_user_~arg1#1.base, input_event_to_user_~arg1#1.offset := input_event_to_user_#in~arg1#1.base, input_event_to_user_#in~arg1#1.offset;havoc input_event_to_user_#t~nondet525#1;assume -2147483648 <= input_event_to_user_#t~nondet525#1 && input_event_to_user_#t~nondet525#1 <= 2147483647;input_event_to_user_#res#1 := input_event_to_user_#t~nondet525#1;havoc input_event_to_user_#t~nondet525#1; [2025-02-08 02:46:18,746 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4202-1: SUMMARY for call uinput_read_#t~ret295#1.base, uinput_read_#t~ret295#1.offset := get_current(); srcloc: null [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4004: havoc uinput_setup_device_#t~mem235#1.base, uinput_setup_device_#t~mem235#1.offset;assume { :begin_inline_kstrndup } true;kstrndup_#in~arg0#1.base, kstrndup_#in~arg0#1.offset, kstrndup_#in~arg1#1, kstrndup_#in~arg2#1 := uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset, 80, 208;havoc kstrndup_#res#1.base, kstrndup_#res#1.offset;havoc kstrndup_#t~ret529#1.base, kstrndup_#t~ret529#1.offset, kstrndup_~arg0#1.base, kstrndup_~arg0#1.offset, kstrndup_~arg1#1, kstrndup_~arg2#1;kstrndup_~arg0#1.base, kstrndup_~arg0#1.offset := kstrndup_#in~arg0#1.base, kstrndup_#in~arg0#1.offset;kstrndup_~arg1#1 := kstrndup_#in~arg1#1;kstrndup_~arg2#1 := kstrndup_#in~arg2#1; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4037: assume 0 != uinput_setup_device_~tmp___5~1#1; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4037: assume !(0 != uinput_setup_device_~tmp___5~1#1); [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4004-1: SUMMARY for call kfree(uinput_setup_device_#t~mem235#1.base, uinput_setup_device_#t~mem235#1.offset); srcloc: null [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4863: SUMMARY for call ldv_mutex_unlock_mutex_of_uinput_device(ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4731: assume { :begin_inline_uinput_write } true;uinput_write_#in~file#1.base, uinput_write_#in~file#1.offset, uinput_write_#in~buffer#1.base, uinput_write_#in~buffer#1.offset, uinput_write_#in~count#1, uinput_write_#in~ppos#1.base, uinput_write_#in~ppos#1.offset := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_uinput_write_20_p1~0#1.base, main_~var_uinput_write_20_p1~0#1.offset, main_~var_uinput_write_20_p2~0#1, main_~var_uinput_write_20_p3~0#1.base, main_~var_uinput_write_20_p3~0#1.offset;havoc uinput_write_#res#1;havoc uinput_write_#t~mem259#1.base, uinput_write_#t~mem259#1.offset, uinput_write_#t~ret260#1, uinput_write_#t~mem261#1, uinput_write_#t~ret262#1, uinput_write_#t~ret263#1, uinput_write_~file#1.base, uinput_write_~file#1.offset, uinput_write_~buffer#1.base, uinput_write_~buffer#1.offset, uinput_write_~count#1, uinput_write_~ppos#1.base, uinput_write_~ppos#1.offset, uinput_write_~udev~3#1.base, uinput_write_~udev~3#1.offset, uinput_write_~retval~3#1, uinput_write_~tmp~20#1, uinput_write_~tmp___0~9#1;uinput_write_~file#1.base, uinput_write_~file#1.offset := uinput_write_#in~file#1.base, uinput_write_#in~file#1.offset;uinput_write_~buffer#1.base, uinput_write_~buffer#1.offset := uinput_write_#in~buffer#1.base, uinput_write_#in~buffer#1.offset;uinput_write_~count#1 := uinput_write_#in~count#1;uinput_write_~ppos#1.base, uinput_write_~ppos#1.offset := uinput_write_#in~ppos#1.base, uinput_write_#in~ppos#1.offset;havoc uinput_write_~udev~3#1.base, uinput_write_~udev~3#1.offset;havoc uinput_write_~retval~3#1;havoc uinput_write_~tmp~20#1;havoc uinput_write_~tmp___0~9#1;call uinput_write_#t~mem259#1.base, uinput_write_#t~mem259#1.offset := read~$Pointer$#2(uinput_write_~file#1.base, 292 + uinput_write_~file#1.offset, 8);uinput_write_~udev~3#1.base, uinput_write_~udev~3#1.offset := uinput_write_#t~mem259#1.base, uinput_write_#t~mem259#1.offset;havoc uinput_write_#t~mem259#1.base, uinput_write_#t~mem259#1.offset; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4731-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4137: assume 0 != uinput_events_to_user_~tmp~21#1;uinput_events_to_user_#res#1 := -14;call ULTIMATE.dealloc(uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset);havoc uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4137: assume !(0 != uinput_events_to_user_~tmp~21#1); [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4038: assume -2147483648 <= uinput_setup_device_#t~ret249#1 && uinput_setup_device_#t~ret249#1 <= 2147483647;uinput_setup_device_~tmp___3~3#1 := uinput_setup_device_#t~ret249#1;havoc uinput_setup_device_#t~ret249#1;uinput_setup_device_~nslot~0#1 := 1 + uinput_setup_device_~tmp___3~3#1;assume { :begin_inline_input_mt_init_slots } true;input_mt_init_slots_#in~arg0#1.base, input_mt_init_slots_#in~arg0#1.offset, input_mt_init_slots_#in~arg1#1, input_mt_init_slots_#in~arg2#1 := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~nslot~0#1, 0;havoc input_mt_init_slots_#res#1;havoc input_mt_init_slots_#t~nondet527#1, input_mt_init_slots_~arg0#1.base, input_mt_init_slots_~arg0#1.offset, input_mt_init_slots_~arg1#1, input_mt_init_slots_~arg2#1;input_mt_init_slots_~arg0#1.base, input_mt_init_slots_~arg0#1.offset := input_mt_init_slots_#in~arg0#1.base, input_mt_init_slots_#in~arg0#1.offset;input_mt_init_slots_~arg1#1 := input_mt_init_slots_#in~arg1#1;input_mt_init_slots_~arg2#1 := input_mt_init_slots_#in~arg2#1;havoc input_mt_init_slots_#t~nondet527#1;assume -2147483648 <= input_mt_init_slots_#t~nondet527#1 && input_mt_init_slots_#t~nondet527#1 <= 2147483647;input_mt_init_slots_#res#1 := input_mt_init_slots_#t~nondet527#1;havoc input_mt_init_slots_#t~nondet527#1; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4071: assume 0 != uinput_inject_event_~tmp___0~8#1;uinput_inject_event_#res#1 := -14;call ULTIMATE.dealloc(uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset);havoc uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4071: assume !(0 != uinput_inject_event_~tmp___0~8#1);call uinput_inject_event_#t~mem254#1.base, uinput_inject_event_#t~mem254#1.offset := read~$Pointer$#12(uinput_inject_event_~udev#1.base, uinput_inject_event_~udev#1.offset, 8);call uinput_inject_event_#t~mem255#1 := read~int#4(uinput_inject_event_~#ev~0#1.base, 16 + uinput_inject_event_~#ev~0#1.offset, 2);call uinput_inject_event_#t~mem256#1 := read~int#4(uinput_inject_event_~#ev~0#1.base, 18 + uinput_inject_event_~#ev~0#1.offset, 2);call uinput_inject_event_#t~mem257#1 := read~int#4(uinput_inject_event_~#ev~0#1.base, 20 + uinput_inject_event_~#ev~0#1.offset, 4);assume { :begin_inline_input_event } true;input_event_#in~arg0#1.base, input_event_#in~arg0#1.offset, input_event_#in~arg1#1, input_event_#in~arg2#1, input_event_#in~arg3#1 := uinput_inject_event_#t~mem254#1.base, uinput_inject_event_#t~mem254#1.offset, uinput_inject_event_#t~mem255#1 % 65536, uinput_inject_event_#t~mem256#1 % 65536, uinput_inject_event_#t~mem257#1;havoc input_event_~arg0#1.base, input_event_~arg0#1.offset, input_event_~arg1#1, input_event_~arg2#1, input_event_~arg3#1;input_event_~arg0#1.base, input_event_~arg0#1.offset := input_event_#in~arg0#1.base, input_event_#in~arg0#1.offset;input_event_~arg1#1 := input_event_#in~arg1#1;input_event_~arg2#1 := input_event_#in~arg2#1;input_event_~arg3#1 := input_event_#in~arg3#1; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4038-1: SUMMARY for call uinput_setup_device_#t~ret249#1 := input_abs_get_max(uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, 47); srcloc: null [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3939: assume uinput_validate_absbits_~cnt~0#1 % 4294967296 <= 63; [2025-02-08 02:46:18,747 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3939: assume !(uinput_validate_absbits_~cnt~0#1 % 4294967296 <= 63);uinput_validate_absbits_#res#1 := uinput_validate_absbits_~retval~1#1; [2025-02-08 02:46:18,748 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4864: SUMMARY for call mutex_unlock(ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,748 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4732: main_#t~ret489#1 := uinput_write_#res#1;havoc uinput_write_#t~mem259#1.base, uinput_write_#t~mem259#1.offset, uinput_write_#t~ret260#1, uinput_write_#t~mem261#1, uinput_write_#t~ret262#1, uinput_write_#t~ret263#1, uinput_write_~file#1.base, uinput_write_~file#1.offset, uinput_write_~buffer#1.base, uinput_write_~buffer#1.offset, uinput_write_~count#1, uinput_write_~ppos#1.base, uinput_write_~ppos#1.offset, uinput_write_~udev~3#1.base, uinput_write_~udev~3#1.offset, uinput_write_~retval~3#1, uinput_write_~tmp~20#1, uinput_write_~tmp___0~9#1;havoc uinput_write_#in~file#1.base, uinput_write_#in~file#1.offset, uinput_write_#in~buffer#1.base, uinput_write_#in~buffer#1.offset, uinput_write_#in~count#1, uinput_write_#in~ppos#1.base, uinput_write_#in~ppos#1.offset;assume { :end_inline_uinput_write } true;assume -9223372036854775808 <= main_#t~ret489#1 && main_#t~ret489#1 <= 9223372036854775807;main_~res_uinput_write_20~0#1 := main_#t~ret489#1;havoc main_#t~ret489#1; [2025-02-08 02:46:18,751 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4171: assume 0 != uinput_read_~count#1 % 18446744073709551616; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4171: assume !(0 != uinput_read_~count#1 % 18446744073709551616); [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4105-1: assume { :begin_inline_ldv_mutex_unlock_9 } true;ldv_mutex_unlock_9_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_9_#in~ldv_func_arg1#1.offset := uinput_write_~udev~3#1.base, 8 + uinput_write_~udev~3#1.offset;havoc ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset;ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset := ldv_mutex_unlock_9_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_9_#in~ldv_func_arg1#1.offset; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4105: havoc ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_9_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_9_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_9 } true;uinput_write_#res#1 := uinput_write_~retval~3#1; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3907-1: SUMMARY for call uinput_validate_absbits_#t~ret210#1 := variable_test_bit((if uinput_validate_absbits_~cnt~0#1 % 4294967296 % 4294967296 <= 2147483647 then uinput_validate_absbits_~cnt~0#1 % 4294967296 % 4294967296 else uinput_validate_absbits_~cnt~0#1 % 4294967296 % 4294967296 - 4294967296), uinput_validate_absbits_~dev#1.base, 152 + uinput_validate_absbits_~dev#1.offset); srcloc: null [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3907: assume -2147483648 <= uinput_validate_absbits_#t~ret210#1 && uinput_validate_absbits_#t~ret210#1 <= 2147483647;uinput_validate_absbits_~tmp~17#1 := uinput_validate_absbits_#t~ret210#1; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4634: uinput_compat_ioctl_#t~ret479#1.base, uinput_compat_ioctl_#t~ret479#1.offset := compat_ptr_#res#1.base, compat_ptr_#res#1.offset;havoc compat_ptr_~uptr#1;havoc compat_ptr_#in~uptr#1;assume { :end_inline_compat_ptr } true;uinput_compat_ioctl_~tmp~27#1.base, uinput_compat_ioctl_~tmp~27#1.offset := uinput_compat_ioctl_#t~ret479#1.base, uinput_compat_ioctl_#t~ret479#1.offset;havoc uinput_compat_ioctl_#t~ret479#1.base, uinput_compat_ioctl_#t~ret479#1.offset; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4700: havoc main_#t~nondet485#1;assume -2147483648 <= main_#t~nondet485#1 && main_#t~nondet485#1 <= 2147483647;main_~tmp___0~16#1 := main_#t~nondet485#1;main_#t~switch486#1 := 0 == main_~tmp___0~16#1; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5394: havoc nonseekable_open_#t~nondet535#1;uinput_open_#t~ret209#1 := nonseekable_open_#res#1;havoc nonseekable_open_#t~nondet535#1, nonseekable_open_~arg0#1.base, nonseekable_open_~arg0#1.offset, nonseekable_open_~arg1#1.base, nonseekable_open_~arg1#1.offset;havoc nonseekable_open_#in~arg0#1.base, nonseekable_open_#in~arg0#1.offset, nonseekable_open_#in~arg1#1.base, nonseekable_open_#in~arg1#1.offset;assume { :end_inline_nonseekable_open } true;assume -2147483648 <= uinput_open_#t~ret209#1 && uinput_open_#t~ret209#1 <= 2147483647;havoc uinput_open_#t~ret209#1;uinput_open_#res#1 := 0;call ULTIMATE.dealloc(uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset);havoc uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset);havoc uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset);havoc uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset);havoc uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5328: havoc input_event_from_user_#t~nondet524#1;uinput_inject_event_#t~ret253#1 := input_event_from_user_#res#1;havoc input_event_from_user_#t~nondet524#1, input_event_from_user_~arg0#1.base, input_event_from_user_~arg0#1.offset, input_event_from_user_~arg1#1.base, input_event_from_user_~arg1#1.offset;havoc input_event_from_user_#in~arg0#1.base, input_event_from_user_#in~arg0#1.offset, input_event_from_user_#in~arg1#1.base, input_event_from_user_#in~arg1#1.offset;assume { :end_inline_input_event_from_user } true;assume -2147483648 <= uinput_inject_event_#t~ret253#1 && uinput_inject_event_#t~ret253#1 <= 2147483647;uinput_inject_event_~tmp___0~8#1 := uinput_inject_event_#t~ret253#1;havoc uinput_inject_event_#t~ret253#1; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3247: havoc _raw_spin_unlock_irq_~arg0#1.base, _raw_spin_unlock_irq_~arg0#1.offset;havoc _raw_spin_unlock_irq_#in~arg0#1.base, _raw_spin_unlock_irq_#in~arg0#1.offset;assume { :end_inline__raw_spin_unlock_irq } true; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4172: uinput_read_~tmp~22#1 := uinput_read_#t~ret280#1;havoc uinput_read_#t~ret280#1; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4172-1: SUMMARY for call uinput_read_#t~ret280#1 := input_event_size(); srcloc: null [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4007: assume 0 == (uinput_setup_device_#t~mem237#1.base + uinput_setup_device_#t~mem237#1.offset) % 18446744073709551616;havoc uinput_setup_device_#t~mem237#1.base, uinput_setup_device_#t~mem237#1.offset;uinput_setup_device_~retval~2#1 := -12; [2025-02-08 02:46:18,752 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4007: assume !(0 == (uinput_setup_device_#t~mem237#1.base + uinput_setup_device_#t~mem237#1.offset) % 18446744073709551616);havoc uinput_setup_device_#t~mem237#1.base, uinput_setup_device_#t~mem237#1.offset;call uinput_setup_device_#t~mem238#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 80 + uinput_setup_device_~user_dev~0#1.offset, 2);call write~int#12(uinput_setup_device_#t~mem238#1, uinput_setup_device_~dev~2#1.base, 24 + uinput_setup_device_~dev~2#1.offset, 2);havoc uinput_setup_device_#t~mem238#1;call uinput_setup_device_#t~mem239#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 82 + uinput_setup_device_~user_dev~0#1.offset, 2);call write~int#12(uinput_setup_device_#t~mem239#1, uinput_setup_device_~dev~2#1.base, 26 + uinput_setup_device_~dev~2#1.offset, 2);havoc uinput_setup_device_#t~mem239#1;call uinput_setup_device_#t~mem240#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 84 + uinput_setup_device_~user_dev~0#1.offset, 2);call write~int#12(uinput_setup_device_#t~mem240#1, uinput_setup_device_~dev~2#1.base, 28 + uinput_setup_device_~dev~2#1.offset, 2);havoc uinput_setup_device_#t~mem240#1;call uinput_setup_device_#t~mem241#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 86 + uinput_setup_device_~user_dev~0#1.offset, 2);call write~int#12(uinput_setup_device_#t~mem241#1, uinput_setup_device_~dev~2#1.base, 30 + uinput_setup_device_~dev~2#1.offset, 2);havoc uinput_setup_device_#t~mem241#1;uinput_setup_device_~i~1#1 := 0; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3908: assume 0 == uinput_validate_absbits_~tmp~17#1; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3908: assume !(0 == uinput_validate_absbits_~tmp~17#1); [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3875: havoc __mutex_init_~arg0#1.base, __mutex_init_~arg0#1.offset, __mutex_init_~arg1#1.base, __mutex_init_~arg1#1.offset, __mutex_init_~arg2#1.base, __mutex_init_~arg2#1.offset;havoc __mutex_init_#in~arg0#1.base, __mutex_init_#in~arg0#1.offset, __mutex_init_#in~arg1#1.base, __mutex_init_#in~arg1#1.offset, __mutex_init_#in~arg2#1.base, __mutex_init_#in~arg2#1.offset;assume { :end_inline___mutex_init } true;assume { :begin_inline_spinlock_check } true;spinlock_check_#in~lock#1.base, spinlock_check_#in~lock#1.offset := uinput_open_~newdev~0#1.base, 855 + uinput_open_~newdev~0#1.offset;havoc spinlock_check_#res#1.base, spinlock_check_#res#1.offset;havoc spinlock_check_~lock#1.base, spinlock_check_~lock#1.offset;spinlock_check_~lock#1.base, spinlock_check_~lock#1.offset := spinlock_check_#in~lock#1.base, spinlock_check_#in~lock#1.offset;spinlock_check_#res#1.base, spinlock_check_#res#1.offset := spinlock_check_~lock#1.base, spinlock_check_~lock#1.offset; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4734: SUMMARY for call ldv_check_return_value((if main_~res_uinput_write_20~0#1 % 4294967296 <= 2147483647 then main_~res_uinput_write_20~0#1 % 4294967296 else main_~res_uinput_write_20~0#1 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4635: assume -9223372036854775808 <= uinput_compat_ioctl_#t~ret480#1 && uinput_compat_ioctl_#t~ret480#1 <= 9223372036854775807;uinput_compat_ioctl_~tmp___0~15#1 := uinput_compat_ioctl_#t~ret480#1;havoc uinput_compat_ioctl_#t~ret480#1;uinput_compat_ioctl_#res#1 := uinput_compat_ioctl_~tmp___0~15#1; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4635-1: SUMMARY for call uinput_compat_ioctl_#t~ret480#1 := uinput_ioctl_handler(uinput_compat_ioctl_~file#1.base, uinput_compat_ioctl_~file#1.offset, uinput_compat_ioctl_~cmd#1, uinput_compat_ioctl_~arg#1, uinput_compat_ioctl_~tmp~27#1.base, uinput_compat_ioctl_~tmp~27#1.offset); srcloc: null [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4173: assume uinput_read_~tmp~22#1 % 18446744073709551616 > uinput_read_~count#1 % 18446744073709551616;uinput_read_#res#1 := -22;call ULTIMATE.dealloc(uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset);havoc uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4173: assume !(uinput_read_~tmp~22#1 % 18446744073709551616 > uinput_read_~count#1 % 18446744073709551616); [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3876: uinput_open_#t~ret208#1.base, uinput_open_#t~ret208#1.offset := spinlock_check_#res#1.base, spinlock_check_#res#1.offset;havoc spinlock_check_~lock#1.base, spinlock_check_~lock#1.offset;havoc spinlock_check_#in~lock#1.base, spinlock_check_#in~lock#1.offset;assume { :end_inline_spinlock_check } true;havoc uinput_open_#t~ret208#1.base, uinput_open_#t~ret208#1.offset;assume { :begin_inline___raw_spin_lock_init } true;__raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset, __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset, __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset := uinput_open_~newdev~0#1.base, 855 + uinput_open_~newdev~0#1.offset, 9, 0, uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset;havoc __raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset, __raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset, __raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset;__raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset := __raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset;__raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset := __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset;__raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset := __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4702: assume 0 != main_~res_uinput_open_15~0#1; [2025-02-08 02:46:18,753 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4702: assume !(0 != main_~res_uinput_open_15~0#1);main_~ldv_s_uinput_fops_file_operations~0#1 := 1 + main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4702-1: assume 0 == main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4702-1: assume !(0 == main_~ldv_s_uinput_fops_file_operations~0#1); [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4702-2: assume main_#t~switch486#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4702-2: assume !main_#t~switch486#1;main_#t~switch486#1 := main_#t~switch486#1 || 1 == main_~tmp___0~16#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4141-1: SUMMARY for call uinput_events_to_user_#t~ret276#1 := input_event_size(); srcloc: null [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4141: uinput_events_to_user_~tmp___0~10#1 := uinput_events_to_user_#t~ret276#1;havoc uinput_events_to_user_#t~ret276#1;uinput_events_to_user_~read~0#1 := uinput_events_to_user_~tmp___0~10#1 + uinput_events_to_user_~read~0#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4042: assume -2147483648 <= uinput_setup_device_#t~ret251#1 && uinput_setup_device_#t~ret251#1 <= 2147483647;uinput_setup_device_~tmp___4~2#1 := uinput_setup_device_#t~ret251#1;havoc uinput_setup_device_#t~ret251#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4075: havoc input_event_~arg0#1.base, input_event_~arg0#1.offset, input_event_~arg1#1, input_event_~arg2#1, input_event_~arg3#1;havoc input_event_#in~arg0#1.base, input_event_#in~arg0#1.offset, input_event_#in~arg1#1, input_event_#in~arg2#1, input_event_#in~arg3#1;assume { :end_inline_input_event } true;havoc uinput_inject_event_#t~mem254#1.base, uinput_inject_event_#t~mem254#1.offset;havoc uinput_inject_event_#t~mem255#1;havoc uinput_inject_event_#t~mem256#1;havoc uinput_inject_event_#t~mem257#1; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4042-1: SUMMARY for call uinput_setup_device_#t~ret251#1 := constant_test_bit(53, uinput_setup_device_~dev~2#1.base, 152 + uinput_setup_device_~dev~2#1.offset); srcloc: null [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3877: havoc __raw_spin_lock_init_~arg0#1.base, __raw_spin_lock_init_~arg0#1.offset, __raw_spin_lock_init_~arg1#1.base, __raw_spin_lock_init_~arg1#1.offset, __raw_spin_lock_init_~arg2#1.base, __raw_spin_lock_init_~arg2#1.offset;havoc __raw_spin_lock_init_#in~arg0#1.base, __raw_spin_lock_init_#in~arg0#1.offset, __raw_spin_lock_init_#in~arg1#1.base, __raw_spin_lock_init_#in~arg1#1.offset, __raw_spin_lock_init_#in~arg2#1.base, __raw_spin_lock_init_#in~arg2#1.offset;assume { :end_inline___raw_spin_lock_init } true; [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3481-1: SUMMARY for call input_alloc_absinfo(input_abs_set_flat_~dev#1.base, input_abs_set_flat_~dev#1.offset); srcloc: null [2025-02-08 02:46:18,754 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3481: call input_abs_set_flat_#t~mem132#1.base, input_abs_set_flat_#t~mem132#1.offset := read~$Pointer$#12(input_abs_set_flat_~dev#1.base, 396 + input_abs_set_flat_~dev#1.offset, 8); [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4076: uinput_inject_event_~tmp___1~7#1 := uinput_inject_event_#t~ret258#1;havoc uinput_inject_event_#t~ret258#1;uinput_inject_event_#res#1 := (if uinput_inject_event_~tmp___1~7#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then uinput_inject_event_~tmp___1~7#1 % 18446744073709551616 % 18446744073709551616 else uinput_inject_event_~tmp___1~7#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call ULTIMATE.dealloc(uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset);havoc uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset; [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4076-1: SUMMARY for call uinput_inject_event_#t~ret258#1 := input_event_size(); srcloc: null [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4043: assume 0 != uinput_setup_device_~tmp___4~2#1;assume { :begin_inline_input_set_events_per_packet } true;input_set_events_per_packet_#in~dev#1.base, input_set_events_per_packet_#in~dev#1.offset, input_set_events_per_packet_#in~n_events#1 := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, 60;havoc input_set_events_per_packet_~dev#1.base, input_set_events_per_packet_~dev#1.offset, input_set_events_per_packet_~n_events#1;input_set_events_per_packet_~dev#1.base, input_set_events_per_packet_~dev#1.offset := input_set_events_per_packet_#in~dev#1.base, input_set_events_per_packet_#in~dev#1.offset;input_set_events_per_packet_~n_events#1 := input_set_events_per_packet_#in~n_events#1;call write~int#12(input_set_events_per_packet_~n_events#1, input_set_events_per_packet_~dev#1.base, 208 + input_set_events_per_packet_~dev#1.offset, 4); [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4043: assume !(0 != uinput_setup_device_~tmp___4~2#1); [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3977: assume 1116 != uinput_setup_device_~count#1 % 18446744073709551616;uinput_setup_device_#res#1 := -22; [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3977: assume !(1116 != uinput_setup_device_~count#1 % 18446744073709551616);call uinput_setup_device_#t~mem227#1.base, uinput_setup_device_#t~mem227#1.offset := read~$Pointer$#12(uinput_setup_device_~udev#1.base, uinput_setup_device_~udev#1.offset, 8); [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4704-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4704: assume { :begin_inline_uinput_open } true;uinput_open_#in~inode#1.base, uinput_open_#in~inode#1.offset, uinput_open_#in~file#1.base, uinput_open_#in~file#1.offset := main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_group2~0#1.base, main_~var_group2~0#1.offset;havoc uinput_open_#res#1;havoc uinput_open_#t~ret207#1.base, uinput_open_#t~ret207#1.offset, uinput_open_#t~ret208#1.base, uinput_open_#t~ret208#1.offset, uinput_open_#t~ret209#1, uinput_open_~inode#1.base, uinput_open_~inode#1.offset, uinput_open_~file#1.base, uinput_open_~file#1.offset, uinput_open_~newdev~0#1.base, uinput_open_~newdev~0#1.offset, uinput_open_~tmp~16#1.base, uinput_open_~tmp~16#1.offset, uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset, uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset, uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset, uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset;uinput_open_~inode#1.base, uinput_open_~inode#1.offset := uinput_open_#in~inode#1.base, uinput_open_#in~inode#1.offset;uinput_open_~file#1.base, uinput_open_~file#1.offset := uinput_open_#in~file#1.base, uinput_open_#in~file#1.offset;havoc uinput_open_~newdev~0#1.base, uinput_open_~newdev~0#1.offset;havoc uinput_open_~tmp~16#1.base, uinput_open_~tmp~16#1.offset;call uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset := #Ultimate.allocOnStack(8);call uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset := #Ultimate.allocOnStack(8);call uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset := #Ultimate.allocOnStack(8);call uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset := #Ultimate.allocOnStack(8); [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3482: assume 0 != (input_abs_set_flat_#t~mem132#1.base + input_abs_set_flat_#t~mem132#1.offset) % 18446744073709551616;havoc input_abs_set_flat_#t~mem132#1.base, input_abs_set_flat_#t~mem132#1.offset;call input_abs_set_flat_#t~mem133#1.base, input_abs_set_flat_#t~mem133#1.offset := read~$Pointer$#12(input_abs_set_flat_~dev#1.base, 396 + input_abs_set_flat_~dev#1.offset, 8);call write~int#12(input_abs_set_flat_~val#1, input_abs_set_flat_#t~mem133#1.base, 16 + (input_abs_set_flat_#t~mem133#1.offset + 24 * (if input_abs_set_flat_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then input_abs_set_flat_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else input_abs_set_flat_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);havoc input_abs_set_flat_#t~mem133#1.base, input_abs_set_flat_#t~mem133#1.offset; [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3482: assume !(0 != (input_abs_set_flat_#t~mem132#1.base + input_abs_set_flat_#t~mem132#1.offset) % 18446744073709551616);havoc input_abs_set_flat_#t~mem132#1.base, input_abs_set_flat_#t~mem132#1.offset; [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5365-2: memdup_user_#res#1.base, memdup_user_#res#1.offset := memdup_user_#t~ret530#1.base, memdup_user_#t~ret530#1.offset;havoc memdup_user_#t~ret530#1.base, memdup_user_#t~ret530#1.offset; [2025-02-08 02:46:18,755 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5365-3: SUMMARY for call memdup_user_#t~ret530#1.base, memdup_user_#t~ret530#1.offset := ldv_malloc(0); srcloc: null [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5365: havoc memdup_user_#t~ret530#1.base, memdup_user_#t~ret530#1.offset;uinput_setup_device_#t~ret230#1.base, uinput_setup_device_#t~ret230#1.offset := memdup_user_#res#1.base, memdup_user_#res#1.offset;havoc memdup_user_#t~ret530#1.base, memdup_user_#t~ret530#1.offset, memdup_user_~arg0#1.base, memdup_user_~arg0#1.offset, memdup_user_~arg1#1;havoc memdup_user_#in~arg0#1.base, memdup_user_#in~arg0#1.offset, memdup_user_#in~arg1#1;assume { :end_inline_memdup_user } true;uinput_setup_device_~tmp~18#1.base, uinput_setup_device_~tmp~18#1.offset := uinput_setup_device_#t~ret230#1.base, uinput_setup_device_#t~ret230#1.offset;havoc uinput_setup_device_#t~ret230#1.base, uinput_setup_device_#t~ret230#1.offset;uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset := uinput_setup_device_~tmp~18#1.base, uinput_setup_device_~tmp~18#1.offset; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5332: havoc input_event_to_user_#t~nondet525#1;uinput_events_to_user_#t~ret275#1 := input_event_to_user_#res#1;havoc input_event_to_user_#t~nondet525#1, input_event_to_user_~arg0#1.base, input_event_to_user_~arg0#1.offset, input_event_to_user_~arg1#1.base, input_event_to_user_~arg1#1.offset;havoc input_event_to_user_#in~arg0#1.base, input_event_to_user_#in~arg0#1.offset, input_event_to_user_#in~arg1#1.base, input_event_to_user_#in~arg1#1.offset;assume { :end_inline_input_event_to_user } true;assume -2147483648 <= uinput_events_to_user_#t~ret275#1 && uinput_events_to_user_#t~ret275#1 <= 2147483647;uinput_events_to_user_~tmp~21#1 := uinput_events_to_user_#t~ret275#1; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209: call uinput_read_#t~mem296#1 := read~int#12(uinput_read_~udev~4#1.base, 253 + uinput_read_~udev~4#1.offset, 1);call uinput_read_#t~mem297#1 := read~int#12(uinput_read_~udev~4#1.base, 254 + uinput_read_~udev~4#1.offset, 1);uinput_read_#t~short299#1 := (if uinput_read_#t~mem296#1 % 256 % 4294967296 <= 2147483647 then uinput_read_#t~mem296#1 % 256 % 4294967296 else uinput_read_#t~mem296#1 % 256 % 4294967296 - 4294967296) != (if uinput_read_#t~mem297#1 % 256 % 4294967296 <= 2147483647 then uinput_read_#t~mem297#1 % 256 % 4294967296 else uinput_read_#t~mem297#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4209-1: SUMMARY for call prepare_to_wait(uinput_read_~udev~4#1.base, 168 + uinput_read_~udev~4#1.offset, uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset, 1); srcloc: null [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4044: havoc input_set_events_per_packet_~dev#1.base, input_set_events_per_packet_~dev#1.offset, input_set_events_per_packet_~n_events#1;havoc input_set_events_per_packet_#in~dev#1.base, input_set_events_per_packet_#in~dev#1.offset, input_set_events_per_packet_#in~n_events#1;assume { :end_inline_input_set_events_per_packet } true; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3912: assume -2147483648 <= uinput_validate_absbits_#t~ret211#1 && uinput_validate_absbits_#t~ret211#1 <= 2147483647;uinput_validate_absbits_~min~0#1 := uinput_validate_absbits_#t~ret211#1;havoc uinput_validate_absbits_#t~ret211#1; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3912-1: SUMMARY for call uinput_validate_absbits_#t~ret211#1 := input_abs_get_min(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3879: SUMMARY for call __init_waitqueue_head(uinput_open_~newdev~0#1.base, 771 + uinput_open_~newdev~0#1.offset, 10, 0, uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset); srcloc: null [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3318: assume poll_wait_#t~short80#1 && 0 != (poll_wait_~wait_address#1.base + poll_wait_~wait_address#1.offset) % 18446744073709551616;havoc poll_wait_#t~mem79#1.base, poll_wait_#t~mem79#1.offset;havoc poll_wait_#t~short80#1;call poll_wait_#t~mem85#1.base, poll_wait_#t~mem85#1.offset := read~$Pointer$#1(poll_wait_~p#1.base, poll_wait_~p#1.offset, 8);assume { :begin_inline_##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID } true;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~82#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~82#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~83#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~83#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~84#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~84#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~#fp#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~#fp#1.offset := poll_wait_~filp#1.base, poll_wait_~filp#1.offset, poll_wait_~wait_address#1.base, poll_wait_~wait_address#1.offset, poll_wait_~p#1.base, poll_wait_~p#1.offset, poll_wait_#t~mem85#1.base, poll_wait_#t~mem85#1.offset;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~82#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~82#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~83#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~83#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~84#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~84#1.offset;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~82#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~82#1.offset := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~82#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~82#1.offset;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~83#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~83#1.offset := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~83#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~83#1.offset;##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~84#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~84#1.offset := ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~84#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~84#1.offset;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~82#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~82#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~83#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~83#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~84#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#~84#1.offset;havoc ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~82#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~82#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~83#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~83#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~84#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~84#1.offset, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~#fp#1.base, ##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID_#in~#fp#1.offset;assume { :end_inline_##fun~$Pointer$~X~$Pointer$~X~$Pointer$~TO~VOID } true;havoc poll_wait_#t~mem85#1.base, poll_wait_#t~mem85#1.offset; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3318: assume !(poll_wait_#t~short80#1 && 0 != (poll_wait_~wait_address#1.base + poll_wait_~wait_address#1.offset) % 18446744073709551616);havoc poll_wait_#t~mem79#1.base, poll_wait_#t~mem79#1.offset;havoc poll_wait_#t~short80#1; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3318-1: assume poll_wait_#t~short80#1;call poll_wait_#t~mem79#1.base, poll_wait_#t~mem79#1.offset := read~$Pointer$#1(poll_wait_~p#1.base, poll_wait_~p#1.offset, 8);poll_wait_#t~short80#1 := 0 != (poll_wait_#t~mem79#1.base + poll_wait_#t~mem79#1.offset) % 18446744073709551616; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3318-1: assume !poll_wait_#t~short80#1; [2025-02-08 02:46:18,756 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4210: assume uinput_read_#t~short299#1;havoc uinput_read_#t~mem296#1;havoc uinput_read_#t~mem297#1;havoc uinput_read_#t~mem298#1;havoc uinput_read_#t~short299#1; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4210: assume !uinput_read_#t~short299#1;havoc uinput_read_#t~mem296#1;havoc uinput_read_#t~mem297#1;havoc uinput_read_#t~mem298#1;havoc uinput_read_#t~short299#1; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4144: uinput_events_to_user_~tmp___1~8#1 := uinput_events_to_user_#t~ret277#1; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4210-1: assume uinput_read_#t~short299#1; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4210-1: assume !uinput_read_#t~short299#1;call uinput_read_#t~mem298#1 := read~int#12(uinput_read_~udev~4#1.base, 164 + uinput_read_~udev~4#1.offset, 4);uinput_read_#t~short299#1 := 2 != uinput_read_#t~mem298#1 % 4294967296; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4144-1: SUMMARY for call uinput_events_to_user_#t~ret277#1 := input_event_size(); srcloc: null [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3913-1: SUMMARY for call uinput_validate_absbits_#t~ret212#1 := input_abs_get_max(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3880: call write~int#12(0, uinput_open_~newdev~0#1.base, 164 + uinput_open_~newdev~0#1.offset, 4);call write~$Pointer$#2(uinput_open_~newdev~0#1.base, uinput_open_~newdev~0#1.offset, uinput_open_~file#1.base, 292 + uinput_open_~file#1.offset, 8);assume { :begin_inline_nonseekable_open } true;nonseekable_open_#in~arg0#1.base, nonseekable_open_#in~arg0#1.offset, nonseekable_open_#in~arg1#1.base, nonseekable_open_#in~arg1#1.offset := uinput_open_~inode#1.base, uinput_open_~inode#1.offset, uinput_open_~file#1.base, uinput_open_~file#1.offset;havoc nonseekable_open_#res#1;havoc nonseekable_open_#t~nondet535#1, nonseekable_open_~arg0#1.base, nonseekable_open_~arg0#1.offset, nonseekable_open_~arg1#1.base, nonseekable_open_~arg1#1.offset;nonseekable_open_~arg0#1.base, nonseekable_open_~arg0#1.offset := nonseekable_open_#in~arg0#1.base, nonseekable_open_#in~arg0#1.offset;nonseekable_open_~arg1#1.base, nonseekable_open_~arg1#1.offset := nonseekable_open_#in~arg1#1.base, nonseekable_open_#in~arg1#1.offset;havoc nonseekable_open_#t~nondet535#1;assume -2147483648 <= nonseekable_open_#t~nondet535#1 && nonseekable_open_#t~nondet535#1 <= 2147483647;nonseekable_open_#res#1 := nonseekable_open_#t~nondet535#1;havoc nonseekable_open_#t~nondet535#1; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3913: assume -2147483648 <= uinput_validate_absbits_#t~ret212#1 && uinput_validate_absbits_#t~ret212#1 <= 2147483647;uinput_validate_absbits_~max~0#1 := uinput_validate_absbits_#t~ret212#1;havoc uinput_validate_absbits_#t~ret212#1; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3880-1: SUMMARY for call __init_waitqueue_head(uinput_open_~newdev~0#1.base, 168 + uinput_open_~newdev~0#1.offset, 11, 0, uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset); srcloc: null [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4706: SUMMARY for call ldv_check_return_value(main_~res_uinput_open_15~0#1); srcloc: null [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3451-1: SUMMARY for call input_alloc_absinfo(input_abs_set_max_~dev#1.base, input_abs_set_max_~dev#1.offset); srcloc: null [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3451: call input_abs_set_max_#t~mem124#1.base, input_abs_set_max_#t~mem124#1.offset := read~$Pointer$#12(input_abs_set_max_~dev#1.base, 396 + input_abs_set_max_~dev#1.offset, 8); [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4145: assume (uinput_events_to_user_~tmp___1~8#1 + uinput_events_to_user_~read~0#1) % 18446744073709551616 <= uinput_events_to_user_~count#1 % 18446744073709551616;assume { :begin_inline_uinput_fetch_next_event } true;uinput_fetch_next_event_#in~udev#1.base, uinput_fetch_next_event_#in~udev#1.offset, uinput_fetch_next_event_#in~event#1.base, uinput_fetch_next_event_#in~event#1.offset := uinput_events_to_user_~udev#1.base, uinput_events_to_user_~udev#1.offset, uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset;havoc uinput_fetch_next_event_#res#1;havoc uinput_fetch_next_event_#t~mem264#1.base, uinput_fetch_next_event_#t~mem264#1.offset, uinput_fetch_next_event_#t~mem265#1, uinput_fetch_next_event_#t~mem266#1, uinput_fetch_next_event_#t~mem267#1, uinput_fetch_next_event_#t~mem268#1, uinput_fetch_next_event_#t~mem269#1, uinput_fetch_next_event_#t~mem270#1, uinput_fetch_next_event_#t~mem271#1, uinput_fetch_next_event_#t~mem272#1, uinput_fetch_next_event_#t~mem273#1, uinput_fetch_next_event_#t~mem274#1.base, uinput_fetch_next_event_#t~mem274#1.offset, uinput_fetch_next_event_~udev#1.base, uinput_fetch_next_event_~udev#1.offset, uinput_fetch_next_event_~event#1.base, uinput_fetch_next_event_~event#1.offset, uinput_fetch_next_event_~have_event~0#1;uinput_fetch_next_event_~udev#1.base, uinput_fetch_next_event_~udev#1.offset := uinput_fetch_next_event_#in~udev#1.base, uinput_fetch_next_event_#in~udev#1.offset;uinput_fetch_next_event_~event#1.base, uinput_fetch_next_event_~event#1.offset := uinput_fetch_next_event_#in~event#1.base, uinput_fetch_next_event_#in~event#1.offset;havoc uinput_fetch_next_event_~have_event~0#1;call uinput_fetch_next_event_#t~mem264#1.base, uinput_fetch_next_event_#t~mem264#1.offset := read~$Pointer$#12(uinput_fetch_next_event_~udev#1.base, uinput_fetch_next_event_~udev#1.offset, 8);assume { :begin_inline_spin_lock_irq } true;spin_lock_irq_#in~lock#1.base, spin_lock_irq_#in~lock#1.offset := uinput_fetch_next_event_#t~mem264#1.base, 564 + uinput_fetch_next_event_#t~mem264#1.offset;havoc spin_lock_irq_~lock#1.base, spin_lock_irq_~lock#1.offset;spin_lock_irq_~lock#1.base, spin_lock_irq_~lock#1.offset := spin_lock_irq_#in~lock#1.base, spin_lock_irq_#in~lock#1.offset;assume { :begin_inline__raw_spin_lock_irq } true;_raw_spin_lock_irq_#in~arg0#1.base, _raw_spin_lock_irq_#in~arg0#1.offset := spin_lock_irq_~lock#1.base, spin_lock_irq_~lock#1.offset;havoc _raw_spin_lock_irq_~arg0#1.base, _raw_spin_lock_irq_~arg0#1.offset;_raw_spin_lock_irq_~arg0#1.base, _raw_spin_lock_irq_~arg0#1.offset := _raw_spin_lock_irq_#in~arg0#1.base, _raw_spin_lock_irq_#in~arg0#1.offset; [2025-02-08 02:46:18,757 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4145: assume !((uinput_events_to_user_~tmp___1~8#1 + uinput_events_to_user_~read~0#1) % 18446744073709551616 <= uinput_events_to_user_~count#1 % 18446744073709551616);uinput_events_to_user_#res#1 := (if uinput_events_to_user_~read~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then uinput_events_to_user_~read~0#1 % 18446744073709551616 % 18446744073709551616 else uinput_events_to_user_~read~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call ULTIMATE.dealloc(uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset);havoc uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3914: assume (0 != uinput_validate_absbits_~min~0#1 || 0 != uinput_validate_absbits_~max~0#1) && uinput_validate_absbits_~max~0#1 <= uinput_validate_absbits_~min~0#1; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3914: assume !((0 != uinput_validate_absbits_~min~0#1 || 0 != uinput_validate_absbits_~max~0#1) && uinput_validate_absbits_~max~0#1 <= uinput_validate_absbits_~min~0#1); [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3452: assume 0 != (input_abs_set_max_#t~mem124#1.base + input_abs_set_max_#t~mem124#1.offset) % 18446744073709551616;havoc input_abs_set_max_#t~mem124#1.base, input_abs_set_max_#t~mem124#1.offset;call input_abs_set_max_#t~mem125#1.base, input_abs_set_max_#t~mem125#1.offset := read~$Pointer$#12(input_abs_set_max_~dev#1.base, 396 + input_abs_set_max_~dev#1.offset, 8);call write~int#12(input_abs_set_max_~val#1, input_abs_set_max_#t~mem125#1.base, 8 + (input_abs_set_max_#t~mem125#1.offset + 24 * (if input_abs_set_max_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then input_abs_set_max_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else input_abs_set_max_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);havoc input_abs_set_max_#t~mem125#1.base, input_abs_set_max_#t~mem125#1.offset; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3452: assume !(0 != (input_abs_set_max_#t~mem124#1.base + input_abs_set_max_#t~mem124#1.offset) % 18446744073709551616);havoc input_abs_set_max_#t~mem124#1.base, input_abs_set_max_#t~mem124#1.offset; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4245: havoc poll_wait_#t~mem79#1.base, poll_wait_#t~mem79#1.offset, poll_wait_#t~short80#1, poll_wait_#t~mem85#1.base, poll_wait_#t~mem85#1.offset, poll_wait_~filp#1.base, poll_wait_~filp#1.offset, poll_wait_~wait_address#1.base, poll_wait_~wait_address#1.offset, poll_wait_~p#1.base, poll_wait_~p#1.offset;havoc poll_wait_#in~filp#1.base, poll_wait_#in~filp#1.offset, poll_wait_#in~wait_address#1.base, poll_wait_#in~wait_address#1.offset, poll_wait_#in~p#1.base, poll_wait_#in~p#1.offset;assume { :end_inline_poll_wait } true;call uinput_poll_#t~mem303#1 := read~int#12(uinput_poll_~udev~5#1.base, 253 + uinput_poll_~udev~5#1.offset, 1);call uinput_poll_#t~mem304#1 := read~int#12(uinput_poll_~udev~5#1.base, 254 + uinput_poll_~udev~5#1.offset, 1); [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4146: uinput_events_to_user_#t~ret278#1 := uinput_fetch_next_event_#res#1;havoc uinput_fetch_next_event_#t~mem264#1.base, uinput_fetch_next_event_#t~mem264#1.offset, uinput_fetch_next_event_#t~mem265#1, uinput_fetch_next_event_#t~mem266#1, uinput_fetch_next_event_#t~mem267#1, uinput_fetch_next_event_#t~mem268#1, uinput_fetch_next_event_#t~mem269#1, uinput_fetch_next_event_#t~mem270#1, uinput_fetch_next_event_#t~mem271#1, uinput_fetch_next_event_#t~mem272#1, uinput_fetch_next_event_#t~mem273#1, uinput_fetch_next_event_#t~mem274#1.base, uinput_fetch_next_event_#t~mem274#1.offset, uinput_fetch_next_event_~udev#1.base, uinput_fetch_next_event_~udev#1.offset, uinput_fetch_next_event_~event#1.base, uinput_fetch_next_event_~event#1.offset, uinput_fetch_next_event_~have_event~0#1;havoc uinput_fetch_next_event_#in~udev#1.base, uinput_fetch_next_event_#in~udev#1.offset, uinput_fetch_next_event_#in~event#1.base, uinput_fetch_next_event_#in~event#1.offset;assume { :end_inline_uinput_fetch_next_event } true;uinput_events_to_user_~tmp___2~6#1 := (if 0 == uinput_events_to_user_#t~ret278#1 % 256 then 0 else 1);havoc uinput_events_to_user_#t~ret278#1; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4113: havoc spin_lock_irq_~lock#1.base, spin_lock_irq_~lock#1.offset;havoc spin_lock_irq_#in~lock#1.base, spin_lock_irq_#in~lock#1.offset;assume { :end_inline_spin_lock_irq } true;havoc uinput_fetch_next_event_#t~mem264#1.base, uinput_fetch_next_event_#t~mem264#1.offset;call uinput_fetch_next_event_#t~mem265#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 253 + uinput_fetch_next_event_~udev#1.offset, 1);call uinput_fetch_next_event_#t~mem266#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 254 + uinput_fetch_next_event_~udev#1.offset, 1);uinput_fetch_next_event_~have_event~0#1 := (if 0 == (if (if uinput_fetch_next_event_#t~mem265#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem265#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem265#1 % 256 % 4294967296 - 4294967296) != (if uinput_fetch_next_event_#t~mem266#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem266#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem266#1 % 256 % 4294967296 - 4294967296) then 1 else 0) then 0 else 1);havoc uinput_fetch_next_event_#t~mem265#1;havoc uinput_fetch_next_event_#t~mem266#1; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3981: assume 0 == (uinput_setup_device_#t~mem227#1.base + uinput_setup_device_#t~mem227#1.offset) % 18446744073709551616;havoc uinput_setup_device_#t~mem227#1.base, uinput_setup_device_#t~mem227#1.offset; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3981: assume !(0 == (uinput_setup_device_#t~mem227#1.base + uinput_setup_device_#t~mem227#1.offset) % 18446744073709551616);havoc uinput_setup_device_#t~mem227#1.base, uinput_setup_device_#t~mem227#1.offset; [2025-02-08 02:46:18,761 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3915-1: SUMMARY for call uinput_validate_absbits_#t~ret213#1 := input_abs_get_max(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3915: assume -2147483648 <= uinput_validate_absbits_#t~ret213#1 && uinput_validate_absbits_#t~ret213#1 <= 2147483647;uinput_validate_absbits_~tmp___0~6#1 := uinput_validate_absbits_#t~ret213#1;havoc uinput_validate_absbits_#t~ret213#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4246: assume (if uinput_poll_#t~mem303#1 % 256 % 4294967296 <= 2147483647 then uinput_poll_#t~mem303#1 % 256 % 4294967296 else uinput_poll_#t~mem303#1 % 256 % 4294967296 - 4294967296) != (if uinput_poll_#t~mem304#1 % 256 % 4294967296 <= 2147483647 then uinput_poll_#t~mem304#1 % 256 % 4294967296 else uinput_poll_#t~mem304#1 % 256 % 4294967296 - 4294967296);havoc uinput_poll_#t~mem303#1;havoc uinput_poll_#t~mem304#1;uinput_poll_#res#1 := 65; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4246: assume !((if uinput_poll_#t~mem303#1 % 256 % 4294967296 <= 2147483647 then uinput_poll_#t~mem303#1 % 256 % 4294967296 else uinput_poll_#t~mem303#1 % 256 % 4294967296 - 4294967296) != (if uinput_poll_#t~mem304#1 % 256 % 4294967296 <= 2147483647 then uinput_poll_#t~mem304#1 % 256 % 4294967296 else uinput_poll_#t~mem304#1 % 256 % 4294967296 - 4294967296));havoc uinput_poll_#t~mem303#1;havoc uinput_poll_#t~mem304#1;uinput_poll_#res#1 := 0; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4180: uinput_read_#t~ret281#1 := ldv_mutex_lock_interruptible_10_#res#1;havoc ldv_mutex_lock_interruptible_10_#t~ret501#1, ldv_mutex_lock_interruptible_10_#t~ret502#1, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_10_~ldv_func_res~3#1, ldv_mutex_lock_interruptible_10_~tmp~33#1, ldv_mutex_lock_interruptible_10_~tmp___0~20#1;havoc ldv_mutex_lock_interruptible_10_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_interruptible_10 } true;assume -2147483648 <= uinput_read_#t~ret281#1 && uinput_read_#t~ret281#1 <= 2147483647;uinput_read_~tmp___0~11#1 := uinput_read_#t~ret281#1;uinput_read_~retval~4#1 := uinput_read_~tmp___0~11#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4147: assume 0 != (if uinput_events_to_user_~tmp___2~6#1 % 256 % 4294967296 <= 2147483647 then uinput_events_to_user_~tmp___2~6#1 % 256 % 4294967296 else uinput_events_to_user_~tmp___2~6#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4147: assume !(0 != (if uinput_events_to_user_~tmp___2~6#1 % 256 % 4294967296 <= 2147483647 then uinput_events_to_user_~tmp___2~6#1 % 256 % 4294967296 else uinput_events_to_user_~tmp___2~6#1 % 256 % 4294967296 - 4294967296)); [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4180-1: assume { :begin_inline_ldv_mutex_lock_interruptible_10 } true;ldv_mutex_lock_interruptible_10_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_#in~ldv_func_arg1#1.offset := uinput_read_~udev~4#1.base, 8 + uinput_read_~udev~4#1.offset;havoc ldv_mutex_lock_interruptible_10_#res#1;havoc ldv_mutex_lock_interruptible_10_#t~ret501#1, ldv_mutex_lock_interruptible_10_#t~ret502#1, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_10_~ldv_func_res~3#1, ldv_mutex_lock_interruptible_10_~tmp~33#1, ldv_mutex_lock_interruptible_10_~tmp___0~20#1;ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.offset := ldv_mutex_lock_interruptible_10_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_#in~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_interruptible_10_~ldv_func_res~3#1;havoc ldv_mutex_lock_interruptible_10_~tmp~33#1;havoc ldv_mutex_lock_interruptible_10_~tmp___0~20#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3982: assume -2147483648 <= uinput_setup_device_#t~ret228#1 && uinput_setup_device_#t~ret228#1 <= 2147483647;uinput_setup_device_~retval~2#1 := uinput_setup_device_#t~ret228#1;havoc uinput_setup_device_#t~ret228#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3916: assume -2147483648 <= uinput_validate_absbits_#t~ret214#1 && uinput_validate_absbits_#t~ret214#1 <= 2147483647;uinput_validate_absbits_~tmp___1~5#1 := uinput_validate_absbits_#t~ret214#1;havoc uinput_validate_absbits_#t~ret214#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3982-1: SUMMARY for call uinput_setup_device_#t~ret228#1 := uinput_allocate_device(uinput_setup_device_~udev#1.base, uinput_setup_device_~udev#1.offset); srcloc: null [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4874: assume -2147483648 <= ldv_mutex_lock_interruptible_10_#t~ret501#1 && ldv_mutex_lock_interruptible_10_#t~ret501#1 <= 2147483647;ldv_mutex_lock_interruptible_10_~tmp~33#1 := ldv_mutex_lock_interruptible_10_#t~ret501#1;havoc ldv_mutex_lock_interruptible_10_#t~ret501#1;ldv_mutex_lock_interruptible_10_~ldv_func_res~3#1 := ldv_mutex_lock_interruptible_10_~tmp~33#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3916-1: SUMMARY for call uinput_validate_absbits_#t~ret214#1 := input_abs_get_min(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4874-1: SUMMARY for call ldv_mutex_lock_interruptible_10_#t~ret501#1 := mutex_lock_interruptible(ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4214: uinput_read_~tmp___2~7#1.base, uinput_read_~tmp___2~7#1.offset := uinput_read_#t~ret300#1.base, uinput_read_#t~ret300#1.offset;havoc uinput_read_#t~ret300#1.base, uinput_read_#t~ret300#1.offset; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4214-1: SUMMARY for call uinput_read_#t~ret300#1.base, uinput_read_#t~ret300#1.offset := get_current(); srcloc: null [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4115: assume 0 != (if uinput_fetch_next_event_~have_event~0#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_~have_event~0#1 % 256 % 4294967296 else uinput_fetch_next_event_~have_event~0#1 % 256 % 4294967296 - 4294967296);call uinput_fetch_next_event_#t~mem267#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 254 + uinput_fetch_next_event_~udev#1.offset, 1);call uinput_fetch_next_event_#t~mem268#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 255 + uinput_fetch_next_event_~udev#1.offset + 24 * (if uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 - 4294967296), 8);call uinput_fetch_next_event_#t~mem269#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 8 + (255 + uinput_fetch_next_event_~udev#1.offset + 24 * (if uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 - 4294967296)), 8);call uinput_fetch_next_event_#t~mem270#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 16 + (255 + uinput_fetch_next_event_~udev#1.offset + 24 * (if uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 - 4294967296)), 2);call uinput_fetch_next_event_#t~mem271#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 18 + (255 + uinput_fetch_next_event_~udev#1.offset + 24 * (if uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 - 4294967296)), 2);call uinput_fetch_next_event_#t~mem272#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 20 + (255 + uinput_fetch_next_event_~udev#1.offset + 24 * (if uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem267#1 % 256 % 4294967296 - 4294967296)), 4);call write~int#11(uinput_fetch_next_event_#t~mem268#1, uinput_fetch_next_event_~event#1.base, uinput_fetch_next_event_~event#1.offset, 8);call write~int#11(uinput_fetch_next_event_#t~mem269#1, uinput_fetch_next_event_~event#1.base, 8 + uinput_fetch_next_event_~event#1.offset, 8);call write~int#11(uinput_fetch_next_event_#t~mem270#1, uinput_fetch_next_event_~event#1.base, 16 + uinput_fetch_next_event_~event#1.offset, 2);call write~int#11(uinput_fetch_next_event_#t~mem271#1, uinput_fetch_next_event_~event#1.base, 18 + uinput_fetch_next_event_~event#1.offset, 2);call write~int#11(uinput_fetch_next_event_#t~mem272#1, uinput_fetch_next_event_~event#1.base, 20 + uinput_fetch_next_event_~event#1.offset, 4);havoc uinput_fetch_next_event_#t~mem267#1;havoc uinput_fetch_next_event_#t~mem268#1;havoc uinput_fetch_next_event_#t~mem269#1;havoc uinput_fetch_next_event_#t~mem270#1;havoc uinput_fetch_next_event_#t~mem271#1;havoc uinput_fetch_next_event_#t~mem272#1;call uinput_fetch_next_event_#t~mem273#1 := read~int#12(uinput_fetch_next_event_~udev#1.base, 254 + uinput_fetch_next_event_~udev#1.offset, 1);call write~int#12((if 1 + (if uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 - 4294967296) < 0 && 0 != (1 + (if uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 - 4294967296)) % 16 then (1 + (if uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 - 4294967296)) % 16 - 16 else (1 + (if uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 else uinput_fetch_next_event_#t~mem273#1 % 256 % 4294967296 - 4294967296)) % 16), uinput_fetch_next_event_~udev#1.base, 254 + uinput_fetch_next_event_~udev#1.offset, 1);havoc uinput_fetch_next_event_#t~mem273#1; [2025-02-08 02:46:18,762 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4115: assume !(0 != (if uinput_fetch_next_event_~have_event~0#1 % 256 % 4294967296 <= 2147483647 then uinput_fetch_next_event_~have_event~0#1 % 256 % 4294967296 else uinput_fetch_next_event_~have_event~0#1 % 256 % 4294967296 - 4294967296)); [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3983: assume 0 != uinput_setup_device_~retval~2#1;uinput_setup_device_#res#1 := uinput_setup_device_~retval~2#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3983: assume !(0 != uinput_setup_device_~retval~2#1); [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3917-1: SUMMARY for call uinput_validate_absbits_#t~ret215#1 := printk(12, 0); srcloc: null [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3917: assume -2147483648 <= uinput_validate_absbits_#t~ret215#1 && uinput_validate_absbits_#t~ret215#1 <= 2147483647;havoc uinput_validate_absbits_#t~ret215#1;uinput_validate_absbits_~retval~1#1 := -22; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4743: assume 3 == main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4743: assume !(3 == main_~ldv_s_uinput_fops_file_operations~0#1); [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4743-1: assume main_#t~switch486#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4743-1: assume !main_#t~switch486#1;main_#t~switch486#1 := main_#t~switch486#1 || 4 == main_~tmp___0~16#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4215: assume -2147483648 <= uinput_read_#t~ret301#1 && uinput_read_#t~ret301#1 <= 2147483647;uinput_read_~tmp___3~4#1 := uinput_read_#t~ret301#1;havoc uinput_read_#t~ret301#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4215-1: SUMMARY for call uinput_read_#t~ret301#1 := signal_pending(uinput_read_~tmp___2~7#1.base, uinput_read_~tmp___2~7#1.offset); srcloc: null [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4182: assume 0 != uinput_read_~retval~4#1;uinput_read_#res#1 := uinput_read_~retval~4#1;call ULTIMATE.dealloc(uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset);havoc uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4182: assume !(0 != uinput_read_~retval~4#1);call uinput_read_#t~mem282#1 := read~int#12(uinput_read_~udev~4#1.base, 164 + uinput_read_~udev~4#1.offset, 4); [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4050: call write~int#12(1, uinput_setup_device_~udev#1.base, 164 + uinput_setup_device_~udev#1.offset, 4);uinput_setup_device_~retval~2#1 := (if uinput_setup_device_~count#1 % 18446744073709551616 % 4294967296 <= 2147483647 then uinput_setup_device_~count#1 % 18446744073709551616 % 4294967296 else uinput_setup_device_~count#1 % 18446744073709551616 % 4294967296 - 4294967296); [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4876-1: SUMMARY for call ldv_mutex_lock_interruptible_10_#t~ret502#1 := ldv_mutex_lock_interruptible_mutex_of_uinput_device(ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_10_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4876: assume -2147483648 <= ldv_mutex_lock_interruptible_10_#t~ret502#1 && ldv_mutex_lock_interruptible_10_#t~ret502#1 <= 2147483647;ldv_mutex_lock_interruptible_10_~tmp___0~20#1 := ldv_mutex_lock_interruptible_10_#t~ret502#1;havoc ldv_mutex_lock_interruptible_10_#t~ret502#1;ldv_mutex_lock_interruptible_10_#res#1 := ldv_mutex_lock_interruptible_10_~tmp___0~20#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5372: havoc misc_deregister_#t~nondet531#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4216: assume 0 == uinput_read_~tmp___3~4#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4216: assume !(0 == uinput_read_~tmp___3~4#1);uinput_read_~__ret~1#1 := -512; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4745: assume { :begin_inline_uinput_release } true;uinput_release_#in~inode#1.base, uinput_release_#in~inode#1.offset, uinput_release_#in~file#1.base, uinput_release_#in~file#1.offset := main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_group2~0#1.base, main_~var_group2~0#1.offset;havoc uinput_release_#res#1;havoc uinput_release_#t~mem305#1.base, uinput_release_#t~mem305#1.offset, uinput_release_~inode#1.base, uinput_release_~inode#1.offset, uinput_release_~file#1.base, uinput_release_~file#1.offset, uinput_release_~udev~6#1.base, uinput_release_~udev~6#1.offset;uinput_release_~inode#1.base, uinput_release_~inode#1.offset := uinput_release_#in~inode#1.base, uinput_release_#in~inode#1.offset;uinput_release_~file#1.base, uinput_release_~file#1.offset := uinput_release_#in~file#1.base, uinput_release_#in~file#1.offset;havoc uinput_release_~udev~6#1.base, uinput_release_~udev~6#1.offset;call uinput_release_#t~mem305#1.base, uinput_release_#t~mem305#1.offset := read~$Pointer$#2(uinput_release_~file#1.base, 292 + uinput_release_~file#1.offset, 8);uinput_release_~udev~6#1.base, uinput_release_~udev~6#1.offset := uinput_release_#t~mem305#1.base, uinput_release_#t~mem305#1.offset;havoc uinput_release_#t~mem305#1.base, uinput_release_#t~mem305#1.offset; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4745-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4217: SUMMARY for call schedule(); srcloc: null [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4019-1: call uinput_setup_device_#t~mem242#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 92 + uinput_setup_device_~user_dev~0#1.offset + 4 * uinput_setup_device_~i~1#1, 4);assume { :begin_inline_input_abs_set_max } true;input_abs_set_max_#in~dev#1.base, input_abs_set_max_#in~dev#1.offset, input_abs_set_max_#in~axis#1, input_abs_set_max_#in~val#1 := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~i~1#1, uinput_setup_device_#t~mem242#1;havoc input_abs_set_max_#t~mem124#1.base, input_abs_set_max_#t~mem124#1.offset, input_abs_set_max_#t~mem125#1.base, input_abs_set_max_#t~mem125#1.offset, input_abs_set_max_~dev#1.base, input_abs_set_max_~dev#1.offset, input_abs_set_max_~axis#1, input_abs_set_max_~val#1;input_abs_set_max_~dev#1.base, input_abs_set_max_~dev#1.offset := input_abs_set_max_#in~dev#1.base, input_abs_set_max_#in~dev#1.offset;input_abs_set_max_~axis#1 := input_abs_set_max_#in~axis#1;input_abs_set_max_~val#1 := input_abs_set_max_#in~val#1; [2025-02-08 02:46:18,763 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4019: havoc input_abs_set_max_#t~mem124#1.base, input_abs_set_max_#t~mem124#1.offset, input_abs_set_max_#t~mem125#1.base, input_abs_set_max_#t~mem125#1.offset, input_abs_set_max_~dev#1.base, input_abs_set_max_~dev#1.offset, input_abs_set_max_~axis#1, input_abs_set_max_~val#1;havoc input_abs_set_max_#in~dev#1.base, input_abs_set_max_#in~dev#1.offset, input_abs_set_max_#in~axis#1, input_abs_set_max_#in~val#1;assume { :end_inline_input_abs_set_max } true;call uinput_setup_device_#t~mem243#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 348 + uinput_setup_device_~user_dev~0#1.offset + 4 * uinput_setup_device_~i~1#1, 4);assume { :begin_inline_input_abs_set_min } true;input_abs_set_min_#in~dev#1.base, input_abs_set_min_#in~dev#1.offset, input_abs_set_min_#in~axis#1, input_abs_set_min_#in~val#1 := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~i~1#1, uinput_setup_device_#t~mem243#1;havoc input_abs_set_min_#t~mem118#1.base, input_abs_set_min_#t~mem118#1.offset, input_abs_set_min_#t~mem119#1.base, input_abs_set_min_#t~mem119#1.offset, input_abs_set_min_~dev#1.base, input_abs_set_min_~dev#1.offset, input_abs_set_min_~axis#1, input_abs_set_min_~val#1;input_abs_set_min_~dev#1.base, input_abs_set_min_~dev#1.offset := input_abs_set_min_#in~dev#1.base, input_abs_set_min_#in~dev#1.offset;input_abs_set_min_~axis#1 := input_abs_set_min_#in~axis#1;input_abs_set_min_~val#1 := input_abs_set_min_#in~val#1; [2025-02-08 02:46:18,764 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4746: main_#t~ret490#1 := uinput_release_#res#1;havoc uinput_release_#t~mem305#1.base, uinput_release_#t~mem305#1.offset, uinput_release_~inode#1.base, uinput_release_~inode#1.offset, uinput_release_~file#1.base, uinput_release_~file#1.offset, uinput_release_~udev~6#1.base, uinput_release_~udev~6#1.offset;havoc uinput_release_#in~inode#1.base, uinput_release_#in~inode#1.offset, uinput_release_#in~file#1.base, uinput_release_#in~file#1.offset;assume { :end_inline_uinput_release } true;assume -2147483648 <= main_#t~ret490#1 && main_#t~ret490#1 <= 2147483647;havoc main_#t~ret490#1;main_~ldv_s_uinput_fops_file_operations~0#1 := 0; [2025-02-08 02:46:18,764 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4878-1: ldv_mutex_lock_interruptible_10_#res#1 := ldv_mutex_lock_interruptible_10_~ldv_func_res~3#1; [2025-02-08 02:46:18,764 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4053-1: SUMMARY for call kfree(uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset); srcloc: null [2025-02-08 02:46:18,764 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4020: havoc input_abs_set_min_#t~mem118#1.base, input_abs_set_min_#t~mem118#1.offset, input_abs_set_min_#t~mem119#1.base, input_abs_set_min_#t~mem119#1.offset, input_abs_set_min_~dev#1.base, input_abs_set_min_~dev#1.offset, input_abs_set_min_~axis#1, input_abs_set_min_~val#1;havoc input_abs_set_min_#in~dev#1.base, input_abs_set_min_#in~dev#1.offset, input_abs_set_min_#in~axis#1, input_abs_set_min_#in~val#1;assume { :end_inline_input_abs_set_min } true;havoc uinput_setup_device_#t~mem243#1;call uinput_setup_device_#t~mem244#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 604 + uinput_setup_device_~user_dev~0#1.offset + 4 * uinput_setup_device_~i~1#1, 4);assume { :begin_inline_input_abs_set_fuzz } true;input_abs_set_fuzz_#in~dev#1.base, input_abs_set_fuzz_#in~dev#1.offset, input_abs_set_fuzz_#in~axis#1, input_abs_set_fuzz_#in~val#1 := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~i~1#1, uinput_setup_device_#t~mem244#1;havoc input_abs_set_fuzz_#t~mem126#1.base, input_abs_set_fuzz_#t~mem126#1.offset, input_abs_set_fuzz_#t~mem127#1.base, input_abs_set_fuzz_#t~mem127#1.offset, input_abs_set_fuzz_~dev#1.base, input_abs_set_fuzz_~dev#1.offset, input_abs_set_fuzz_~axis#1, input_abs_set_fuzz_~val#1;input_abs_set_fuzz_~dev#1.base, input_abs_set_fuzz_~dev#1.offset := input_abs_set_fuzz_#in~dev#1.base, input_abs_set_fuzz_#in~dev#1.offset;input_abs_set_fuzz_~axis#1 := input_abs_set_fuzz_#in~axis#1;input_abs_set_fuzz_~val#1 := input_abs_set_fuzz_#in~val#1; [2025-02-08 02:46:18,764 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4053: uinput_setup_device_#res#1 := uinput_setup_device_~retval~2#1; [2025-02-08 02:46:18,764 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4186: assume 2 != uinput_read_#t~mem282#1 % 4294967296;havoc uinput_read_#t~mem282#1;uinput_read_~retval~4#1 := -19; [2025-02-08 02:46:18,765 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4186: assume !(2 != uinput_read_#t~mem282#1 % 4294967296);havoc uinput_read_#t~mem282#1;call uinput_read_#t~mem283#1 := read~int#12(uinput_read_~udev~4#1.base, 253 + uinput_read_~udev~4#1.offset, 1);call uinput_read_#t~mem284#1 := read~int#12(uinput_read_~udev~4#1.base, 254 + uinput_read_~udev~4#1.offset, 1);uinput_read_#t~short287#1 := (if uinput_read_#t~mem283#1 % 256 % 4294967296 <= 2147483647 then uinput_read_#t~mem283#1 % 256 % 4294967296 else uinput_read_#t~mem283#1 % 256 % 4294967296 - 4294967296) == (if uinput_read_#t~mem284#1 % 256 % 4294967296 <= 2147483647 then uinput_read_#t~mem284#1 % 256 % 4294967296 else uinput_read_#t~mem284#1 % 256 % 4294967296 - 4294967296); [2025-02-08 02:46:18,765 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4120: havoc spin_unlock_irq_~lock#1.base, spin_unlock_irq_~lock#1.offset;havoc spin_unlock_irq_#in~lock#1.base, spin_unlock_irq_#in~lock#1.offset;assume { :end_inline_spin_unlock_irq } true;havoc uinput_fetch_next_event_#t~mem274#1.base, uinput_fetch_next_event_#t~mem274#1.offset;uinput_fetch_next_event_#res#1 := (if 0 == uinput_fetch_next_event_~have_event~0#1 % 256 then 0 else 1); [2025-02-08 02:46:18,768 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4120-1: call uinput_fetch_next_event_#t~mem274#1.base, uinput_fetch_next_event_#t~mem274#1.offset := read~$Pointer$#12(uinput_fetch_next_event_~udev#1.base, uinput_fetch_next_event_~udev#1.offset, 8);assume { :begin_inline_spin_unlock_irq } true;spin_unlock_irq_#in~lock#1.base, spin_unlock_irq_#in~lock#1.offset := uinput_fetch_next_event_#t~mem274#1.base, 564 + uinput_fetch_next_event_#t~mem274#1.offset;havoc spin_unlock_irq_~lock#1.base, spin_unlock_irq_~lock#1.offset;spin_unlock_irq_~lock#1.base, spin_unlock_irq_~lock#1.offset := spin_unlock_irq_#in~lock#1.base, spin_unlock_irq_#in~lock#1.offset;assume { :begin_inline__raw_spin_unlock_irq } true;_raw_spin_unlock_irq_#in~arg0#1.base, _raw_spin_unlock_irq_#in~arg0#1.offset := spin_unlock_irq_~lock#1.base, spin_unlock_irq_~lock#1.offset;havoc _raw_spin_unlock_irq_~arg0#1.base, _raw_spin_unlock_irq_~arg0#1.offset;_raw_spin_unlock_irq_~arg0#1.base, _raw_spin_unlock_irq_~arg0#1.offset := _raw_spin_unlock_irq_#in~arg0#1.base, _raw_spin_unlock_irq_#in~arg0#1.offset; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4021: havoc input_abs_set_fuzz_#t~mem126#1.base, input_abs_set_fuzz_#t~mem126#1.offset, input_abs_set_fuzz_#t~mem127#1.base, input_abs_set_fuzz_#t~mem127#1.offset, input_abs_set_fuzz_~dev#1.base, input_abs_set_fuzz_~dev#1.offset, input_abs_set_fuzz_~axis#1, input_abs_set_fuzz_~val#1;havoc input_abs_set_fuzz_#in~dev#1.base, input_abs_set_fuzz_#in~dev#1.offset, input_abs_set_fuzz_#in~axis#1, input_abs_set_fuzz_#in~val#1;assume { :end_inline_input_abs_set_fuzz } true;havoc uinput_setup_device_#t~mem244#1;call uinput_setup_device_#t~mem245#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 860 + uinput_setup_device_~user_dev~0#1.offset + 4 * uinput_setup_device_~i~1#1, 4);assume { :begin_inline_input_abs_set_flat } true;input_abs_set_flat_#in~dev#1.base, input_abs_set_flat_#in~dev#1.offset, input_abs_set_flat_#in~axis#1, input_abs_set_flat_#in~val#1 := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~i~1#1, uinput_setup_device_#t~mem245#1;havoc input_abs_set_flat_#t~mem132#1.base, input_abs_set_flat_#t~mem132#1.offset, input_abs_set_flat_#t~mem133#1.base, input_abs_set_flat_#t~mem133#1.offset, input_abs_set_flat_~dev#1.base, input_abs_set_flat_~dev#1.offset, input_abs_set_flat_~axis#1, input_abs_set_flat_~val#1;input_abs_set_flat_~dev#1.base, input_abs_set_flat_~dev#1.offset := input_abs_set_flat_#in~dev#1.base, input_abs_set_flat_#in~dev#1.offset;input_abs_set_flat_~axis#1 := input_abs_set_flat_#in~axis#1;input_abs_set_flat_~val#1 := input_abs_set_flat_#in~val#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4715: assume main_~res_uinput_read_23~0#1 < 0; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4715: assume !(main_~res_uinput_read_23~0#1 < 0);main_~ldv_s_uinput_fops_file_operations~0#1 := 1 + main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4715-1: assume 1 == main_~ldv_s_uinput_fops_file_operations~0#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4715-1: assume !(1 == main_~ldv_s_uinput_fops_file_operations~0#1); [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4715-2: assume main_#t~switch486#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4715-2: assume !main_#t~switch486#1;main_#t~switch486#1 := main_#t~switch486#1 || 2 == main_~tmp___0~16#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5376: havoc misc_register_#t~nondet532#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4022: havoc input_abs_set_flat_#t~mem132#1.base, input_abs_set_flat_#t~mem132#1.offset, input_abs_set_flat_#t~mem133#1.base, input_abs_set_flat_#t~mem133#1.offset, input_abs_set_flat_~dev#1.base, input_abs_set_flat_~dev#1.offset, input_abs_set_flat_~axis#1, input_abs_set_flat_~val#1;havoc input_abs_set_flat_#in~dev#1.base, input_abs_set_flat_#in~dev#1.offset, input_abs_set_flat_#in~axis#1, input_abs_set_flat_#in~val#1;assume { :end_inline_input_abs_set_flat } true;havoc uinput_setup_device_#t~mem245#1;uinput_setup_device_~i~1#1 := 1 + uinput_setup_device_~i~1#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3989: call uinput_setup_device_#t~mem229#1.base, uinput_setup_device_#t~mem229#1.offset := read~$Pointer$#12(uinput_setup_device_~udev#1.base, uinput_setup_device_~udev#1.offset, 8);uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset := uinput_setup_device_#t~mem229#1.base, uinput_setup_device_#t~mem229#1.offset;havoc uinput_setup_device_#t~mem229#1.base, uinput_setup_device_#t~mem229#1.offset;assume { :begin_inline_memdup_user } true;memdup_user_#in~arg0#1.base, memdup_user_#in~arg0#1.offset, memdup_user_#in~arg1#1 := uinput_setup_device_~buffer#1.base, uinput_setup_device_~buffer#1.offset, 1116;havoc memdup_user_#res#1.base, memdup_user_#res#1.offset;havoc memdup_user_#t~ret530#1.base, memdup_user_#t~ret530#1.offset, memdup_user_~arg0#1.base, memdup_user_~arg0#1.offset, memdup_user_~arg1#1;memdup_user_~arg0#1.base, memdup_user_~arg0#1.offset := memdup_user_#in~arg0#1.base, memdup_user_#in~arg0#1.offset;memdup_user_~arg1#1 := memdup_user_#in~arg1#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3923-1: SUMMARY for call uinput_validate_absbits_#t~ret216#1 := input_abs_get_flat(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3923: assume -2147483648 <= uinput_validate_absbits_#t~ret216#1 && uinput_validate_absbits_#t~ret216#1 <= 2147483647;uinput_validate_absbits_~tmp___5~0#1 := uinput_validate_absbits_#t~ret216#1;havoc uinput_validate_absbits_#t~ret216#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4089: assume 0 == uinput_write_~count#1 % 18446744073709551616;uinput_write_#res#1 := 0; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4089: assume !(0 == uinput_write_~count#1 % 18446744073709551616);assume { :begin_inline_ldv_mutex_lock_interruptible_8 } true;ldv_mutex_lock_interruptible_8_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_#in~ldv_func_arg1#1.offset := uinput_write_~udev~3#1.base, 8 + uinput_write_~udev~3#1.offset;havoc ldv_mutex_lock_interruptible_8_#res#1;havoc ldv_mutex_lock_interruptible_8_#t~ret499#1, ldv_mutex_lock_interruptible_8_#t~ret500#1, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_8_~ldv_func_res~2#1, ldv_mutex_lock_interruptible_8_~tmp~32#1, ldv_mutex_lock_interruptible_8_~tmp___0~19#1;ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.offset := ldv_mutex_lock_interruptible_8_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_#in~ldv_func_arg1#1.offset;havoc ldv_mutex_lock_interruptible_8_~ldv_func_res~2#1;havoc ldv_mutex_lock_interruptible_8_~tmp~32#1;havoc ldv_mutex_lock_interruptible_8_~tmp___0~19#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3924: assume -2147483648 <= uinput_validate_absbits_#t~ret217#1 && uinput_validate_absbits_#t~ret217#1 <= 2147483647;uinput_validate_absbits_~tmp___6~0#1 := uinput_validate_absbits_#t~ret217#1;havoc uinput_validate_absbits_#t~ret217#1; [2025-02-08 02:46:18,769 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3924-1: SUMMARY for call uinput_validate_absbits_#t~ret217#1 := input_abs_get_max(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4717: assume { :begin_inline_uinput_read } true;uinput_read_#in~file#1.base, uinput_read_#in~file#1.offset, uinput_read_#in~buffer#1.base, uinput_read_#in~buffer#1.offset, uinput_read_#in~count#1, uinput_read_#in~ppos#1.base, uinput_read_#in~ppos#1.offset := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_uinput_read_23_p1~0#1.base, main_~var_uinput_read_23_p1~0#1.offset, main_~var_uinput_read_23_p2~0#1, main_~var_uinput_read_23_p3~0#1.base, main_~var_uinput_read_23_p3~0#1.offset;havoc uinput_read_#res#1;havoc uinput_read_#t~mem279#1.base, uinput_read_#t~mem279#1.offset, uinput_read_#t~ret280#1, uinput_read_#t~ret281#1, uinput_read_#t~mem282#1, uinput_read_#t~mem283#1, uinput_read_#t~mem284#1, uinput_read_#t~mem285#1, uinput_read_#t~bitwise286#1, uinput_read_#t~short287#1, uinput_read_#t~ret288#1, uinput_read_#t~mem289#1, uinput_read_#t~bitwise290#1, uinput_read_#t~mem291#1, uinput_read_#t~mem292#1, uinput_read_#t~mem293#1, uinput_read_#t~short294#1, uinput_read_#t~ret295#1.base, uinput_read_#t~ret295#1.offset, uinput_read_#t~mem296#1, uinput_read_#t~mem297#1, uinput_read_#t~mem298#1, uinput_read_#t~short299#1, uinput_read_#t~ret300#1.base, uinput_read_#t~ret300#1.offset, uinput_read_#t~ret301#1, uinput_read_~file#1.base, uinput_read_~file#1.offset, uinput_read_~buffer#1.base, uinput_read_~buffer#1.offset, uinput_read_~count#1, uinput_read_~ppos#1.base, uinput_read_~ppos#1.offset, uinput_read_~udev~4#1.base, uinput_read_~udev~4#1.offset, uinput_read_~retval~4#1, uinput_read_~tmp~22#1, uinput_read_~tmp___0~11#1, uinput_read_~__ret~1#1, uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset, uinput_read_~tmp___1~9#1.base, uinput_read_~tmp___1~9#1.offset, uinput_read_~tmp___2~7#1.base, uinput_read_~tmp___2~7#1.offset, uinput_read_~tmp___3~4#1;uinput_read_~file#1.base, uinput_read_~file#1.offset := uinput_read_#in~file#1.base, uinput_read_#in~file#1.offset;uinput_read_~buffer#1.base, uinput_read_~buffer#1.offset := uinput_read_#in~buffer#1.base, uinput_read_#in~buffer#1.offset;uinput_read_~count#1 := uinput_read_#in~count#1;uinput_read_~ppos#1.base, uinput_read_~ppos#1.offset := uinput_read_#in~ppos#1.base, uinput_read_#in~ppos#1.offset;havoc uinput_read_~udev~4#1.base, uinput_read_~udev~4#1.offset;havoc uinput_read_~retval~4#1;havoc uinput_read_~tmp~22#1;havoc uinput_read_~tmp___0~11#1;havoc uinput_read_~__ret~1#1;call uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset := #Ultimate.allocOnStack(36);havoc uinput_read_~tmp___1~9#1.base, uinput_read_~tmp___1~9#1.offset;havoc uinput_read_~tmp___2~7#1.base, uinput_read_~tmp___2~7#1.offset;havoc uinput_read_~tmp___3~4#1;call uinput_read_#t~mem279#1.base, uinput_read_#t~mem279#1.offset := read~$Pointer$#2(uinput_read_~file#1.base, 292 + uinput_read_~file#1.offset, 8);uinput_read_~udev~4#1.base, uinput_read_~udev~4#1.offset := uinput_read_#t~mem279#1.base, uinput_read_#t~mem279#1.offset;havoc uinput_read_#t~mem279#1.base, uinput_read_#t~mem279#1.offset; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4717-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-1: uinput_read_#t~short287#1 := 0 != uinput_read_#t~bitwise286#1 % 4294967296; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189: assume uinput_read_#t~short287#1;havoc uinput_read_#t~mem283#1;havoc uinput_read_#t~mem284#1;havoc uinput_read_#t~mem285#1;havoc uinput_read_#t~bitwise286#1;havoc uinput_read_#t~short287#1;uinput_read_~retval~4#1 := -11; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189: assume !uinput_read_#t~short287#1;havoc uinput_read_#t~mem283#1;havoc uinput_read_#t~mem284#1;havoc uinput_read_#t~mem285#1;havoc uinput_read_#t~bitwise286#1;havoc uinput_read_#t~short287#1;assume { :begin_inline_uinput_events_to_user } true;uinput_events_to_user_#in~udev#1.base, uinput_events_to_user_#in~udev#1.offset, uinput_events_to_user_#in~buffer#1.base, uinput_events_to_user_#in~buffer#1.offset, uinput_events_to_user_#in~count#1 := uinput_read_~udev~4#1.base, uinput_read_~udev~4#1.offset, uinput_read_~buffer#1.base, uinput_read_~buffer#1.offset, uinput_read_~count#1;havoc uinput_events_to_user_#res#1;havoc uinput_events_to_user_#t~ret275#1, uinput_events_to_user_#t~ret276#1, uinput_events_to_user_#t~ret277#1, uinput_events_to_user_#t~ret278#1, uinput_events_to_user_~udev#1.base, uinput_events_to_user_~udev#1.offset, uinput_events_to_user_~buffer#1.base, uinput_events_to_user_~buffer#1.offset, uinput_events_to_user_~count#1, uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset, uinput_events_to_user_~read~0#1, uinput_events_to_user_~tmp~21#1, uinput_events_to_user_~tmp___0~10#1, uinput_events_to_user_~tmp___1~8#1, uinput_events_to_user_~tmp___2~6#1;uinput_events_to_user_~udev#1.base, uinput_events_to_user_~udev#1.offset := uinput_events_to_user_#in~udev#1.base, uinput_events_to_user_#in~udev#1.offset;uinput_events_to_user_~buffer#1.base, uinput_events_to_user_~buffer#1.offset := uinput_events_to_user_#in~buffer#1.base, uinput_events_to_user_#in~buffer#1.offset;uinput_events_to_user_~count#1 := uinput_events_to_user_#in~count#1;call uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset := #Ultimate.allocOnStack(24);havoc uinput_events_to_user_~read~0#1;havoc uinput_events_to_user_~tmp~21#1;havoc uinput_events_to_user_~tmp___0~10#1;havoc uinput_events_to_user_~tmp___1~8#1;havoc uinput_events_to_user_~tmp___2~6#1;uinput_events_to_user_~read~0#1 := 0; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-3: havoc uinput_read_#t~bitwise286#1;assume uinput_read_#t~bitwise286#1 % 4294967296 <= uinput_read_#t~mem285#1 % 4294967296 && uinput_read_#t~bitwise286#1 % 4294967296 <= 2048; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-2: [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-5: assume 0 == uinput_read_#t~mem285#1 % 4294967296;uinput_read_#t~bitwise286#1 := 0; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-5: assume !(0 == uinput_read_#t~mem285#1 % 4294967296); [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-4: assume 2048 == uinput_read_#t~mem285#1 % 4294967296;uinput_read_#t~bitwise286#1 := uinput_read_#t~mem285#1; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-4: assume !(2048 == uinput_read_#t~mem285#1 % 4294967296); [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-6: assume uinput_read_#t~short287#1;call uinput_read_#t~mem285#1 := read~int#2(uinput_read_~file#1.base, 128 + uinput_read_~file#1.offset, 4); [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4189-6: assume !uinput_read_#t~short287#1; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3925-1: SUMMARY for call uinput_validate_absbits_#t~ret218#1 := input_abs_get_min(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3925: assume -2147483648 <= uinput_validate_absbits_#t~ret218#1 && uinput_validate_absbits_#t~ret218#1 <= 2147483647;uinput_validate_absbits_~tmp___7~0#1 := uinput_validate_absbits_#t~ret218#1;havoc uinput_validate_absbits_#t~ret218#1; [2025-02-08 02:46:18,770 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4751: assume main_#t~switch486#1; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4751: assume !main_#t~switch486#1;main_#t~switch486#1 := main_#t~switch486#1 || 5 == main_~tmp___0~16#1; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3463-1: SUMMARY for call input_alloc_absinfo(input_abs_set_fuzz_~dev#1.base, input_abs_set_fuzz_~dev#1.offset); srcloc: null [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3463: call input_abs_set_fuzz_#t~mem126#1.base, input_abs_set_fuzz_#t~mem126#1.offset := read~$Pointer$#12(input_abs_set_fuzz_~dev#1.base, 396 + input_abs_set_fuzz_~dev#1.offset, 8); [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L5346: havoc input_mt_init_slots_#t~nondet527#1;uinput_setup_device_#t~ret250#1 := input_mt_init_slots_#res#1;havoc input_mt_init_slots_#t~nondet527#1, input_mt_init_slots_~arg0#1.base, input_mt_init_slots_~arg0#1.offset, input_mt_init_slots_~arg1#1, input_mt_init_slots_~arg2#1;havoc input_mt_init_slots_#in~arg0#1.base, input_mt_init_slots_#in~arg0#1.offset, input_mt_init_slots_#in~arg1#1, input_mt_init_slots_#in~arg2#1;assume { :end_inline_input_mt_init_slots } true;assume -2147483648 <= uinput_setup_device_#t~ret250#1 && uinput_setup_device_#t~ret250#1 <= 2147483647;havoc uinput_setup_device_#t~ret250#1; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3992: assume -9223372036854775808 <= uinput_setup_device_#t~ret231#1 && uinput_setup_device_#t~ret231#1 <= 9223372036854775807;uinput_setup_device_~tmp___1~6#1 := uinput_setup_device_#t~ret231#1;havoc uinput_setup_device_#t~ret231#1; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4025: assume uinput_setup_device_~i~1#1 <= 63; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4025: assume !(uinput_setup_device_~i~1#1 <= 63); [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3926: assume uinput_validate_absbits_~tmp___5~0#1 > uinput_validate_absbits_~tmp___6~0#1 - uinput_validate_absbits_~tmp___7~0#1; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3926: assume !(uinput_validate_absbits_~tmp___5~0#1 > uinput_validate_absbits_~tmp___6~0#1 - uinput_validate_absbits_~tmp___7~0#1);uinput_validate_absbits_~cnt~0#1 := 1 + uinput_validate_absbits_~cnt~0#1; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3992-1: SUMMARY for call uinput_setup_device_#t~ret231#1 := IS_ERR(uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset); srcloc: null [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4884: SUMMARY for call ldv_mutex_unlock_mutex_of_uinput_device(ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4752-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4752: assume { :begin_inline_uinput_poll } true;uinput_poll_#in~file#1.base, uinput_poll_#in~file#1.offset, uinput_poll_#in~wait#1.base, uinput_poll_#in~wait#1.offset := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_uinput_poll_24_p1~0#1.base, main_~var_uinput_poll_24_p1~0#1.offset;havoc uinput_poll_#res#1;havoc uinput_poll_#t~mem302#1.base, uinput_poll_#t~mem302#1.offset, uinput_poll_#t~mem303#1, uinput_poll_#t~mem304#1, uinput_poll_~file#1.base, uinput_poll_~file#1.offset, uinput_poll_~wait#1.base, uinput_poll_~wait#1.offset, uinput_poll_~udev~5#1.base, uinput_poll_~udev~5#1.offset;uinput_poll_~file#1.base, uinput_poll_~file#1.offset := uinput_poll_#in~file#1.base, uinput_poll_#in~file#1.offset;uinput_poll_~wait#1.base, uinput_poll_~wait#1.offset := uinput_poll_#in~wait#1.base, uinput_poll_#in~wait#1.offset;havoc uinput_poll_~udev~5#1.base, uinput_poll_~udev~5#1.offset;call uinput_poll_#t~mem302#1.base, uinput_poll_#t~mem302#1.offset := read~$Pointer$#2(uinput_poll_~file#1.base, 292 + uinput_poll_~file#1.offset, 8);uinput_poll_~udev~5#1.base, uinput_poll_~udev~5#1.offset := uinput_poll_#t~mem302#1.base, uinput_poll_#t~mem302#1.offset;havoc uinput_poll_#t~mem302#1.base, uinput_poll_#t~mem302#1.offset;assume { :begin_inline_poll_wait } true;poll_wait_#in~filp#1.base, poll_wait_#in~filp#1.offset, poll_wait_#in~wait_address#1.base, poll_wait_#in~wait_address#1.offset, poll_wait_#in~p#1.base, poll_wait_#in~p#1.offset := uinput_poll_~file#1.base, uinput_poll_~file#1.offset, uinput_poll_~udev~5#1.base, 168 + uinput_poll_~udev~5#1.offset, uinput_poll_~wait#1.base, uinput_poll_~wait#1.offset;havoc poll_wait_#t~mem79#1.base, poll_wait_#t~mem79#1.offset, poll_wait_#t~short80#1, poll_wait_#t~mem85#1.base, poll_wait_#t~mem85#1.offset, poll_wait_~filp#1.base, poll_wait_~filp#1.offset, poll_wait_~wait_address#1.base, poll_wait_~wait_address#1.offset, poll_wait_~p#1.base, poll_wait_~p#1.offset;poll_wait_~filp#1.base, poll_wait_~filp#1.offset := poll_wait_#in~filp#1.base, poll_wait_#in~filp#1.offset;poll_wait_~wait_address#1.base, poll_wait_~wait_address#1.offset := poll_wait_#in~wait_address#1.base, poll_wait_#in~wait_address#1.offset;poll_wait_~p#1.base, poll_wait_~p#1.offset := poll_wait_#in~p#1.base, poll_wait_#in~p#1.offset;poll_wait_#t~short80#1 := 0 != (poll_wait_~p#1.base + poll_wait_~p#1.offset) % 18446744073709551616; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464: assume 0 != (input_abs_set_fuzz_#t~mem126#1.base + input_abs_set_fuzz_#t~mem126#1.offset) % 18446744073709551616;havoc input_abs_set_fuzz_#t~mem126#1.base, input_abs_set_fuzz_#t~mem126#1.offset;call input_abs_set_fuzz_#t~mem127#1.base, input_abs_set_fuzz_#t~mem127#1.offset := read~$Pointer$#12(input_abs_set_fuzz_~dev#1.base, 396 + input_abs_set_fuzz_~dev#1.offset, 8);call write~int#12(input_abs_set_fuzz_~val#1, input_abs_set_fuzz_#t~mem127#1.base, 12 + (input_abs_set_fuzz_#t~mem127#1.offset + 24 * (if input_abs_set_fuzz_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then input_abs_set_fuzz_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else input_abs_set_fuzz_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);havoc input_abs_set_fuzz_#t~mem127#1.base, input_abs_set_fuzz_#t~mem127#1.offset; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3464: assume !(0 != (input_abs_set_fuzz_#t~mem126#1.base + input_abs_set_fuzz_#t~mem126#1.offset) % 18446744073709551616);havoc input_abs_set_fuzz_#t~mem126#1.base, input_abs_set_fuzz_#t~mem126#1.offset; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3233: havoc _raw_spin_lock_irq_~arg0#1.base, _raw_spin_lock_irq_~arg0#1.offset;havoc _raw_spin_lock_irq_#in~arg0#1.base, _raw_spin_lock_irq_#in~arg0#1.offset;assume { :end_inline__raw_spin_lock_irq } true; [2025-02-08 02:46:18,771 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3993: assume 0 != uinput_setup_device_~tmp___1~6#1; [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3993: assume !(0 != uinput_setup_device_~tmp___1~6#1);call uinput_setup_device_#t~mem233#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, 88 + uinput_setup_device_~user_dev~0#1.offset, 4);call write~int#12(uinput_setup_device_#t~mem233#1, uinput_setup_device_~udev#1.base, 639 + uinput_setup_device_~udev#1.offset, 4);havoc uinput_setup_device_#t~mem233#1;call uinput_setup_device_#t~mem234#1 := read~int#12(uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset, 1); [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3927-1: SUMMARY for call uinput_validate_absbits_#t~ret219#1 := input_abs_get_max(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3927: assume -2147483648 <= uinput_validate_absbits_#t~ret219#1 && uinput_validate_absbits_#t~ret219#1 <= 2147483647;uinput_validate_absbits_~tmp___2~4#1 := uinput_validate_absbits_#t~ret219#1;havoc uinput_validate_absbits_#t~ret219#1; [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4885: SUMMARY for call mutex_unlock(ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4753: main_#t~ret491#1 := uinput_poll_#res#1;havoc uinput_poll_#t~mem302#1.base, uinput_poll_#t~mem302#1.offset, uinput_poll_#t~mem303#1, uinput_poll_#t~mem304#1, uinput_poll_~file#1.base, uinput_poll_~file#1.offset, uinput_poll_~wait#1.base, uinput_poll_~wait#1.offset, uinput_poll_~udev~5#1.base, uinput_poll_~udev~5#1.offset;havoc uinput_poll_#in~file#1.base, uinput_poll_#in~file#1.offset, uinput_poll_#in~wait#1.base, uinput_poll_#in~wait#1.offset;assume { :end_inline_uinput_poll } true; [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4720: SUMMARY for call ldv_check_return_value((if main_~res_uinput_read_23~0#1 % 4294967296 <= 2147483647 then main_~res_uinput_read_23~0#1 % 4294967296 else main_~res_uinput_read_23~0#1 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4258: SUMMARY for call uinput_destroy_device(uinput_release_~udev~6#1.base, uinput_release_~udev~6#1.offset); srcloc: null [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4126: call ULTIMATE.dealloc(uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset);havoc uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset;uinput_read_#t~ret288#1 := uinput_events_to_user_#res#1;havoc uinput_events_to_user_#t~ret275#1, uinput_events_to_user_#t~ret276#1, uinput_events_to_user_#t~ret277#1, uinput_events_to_user_#t~ret278#1, uinput_events_to_user_~udev#1.base, uinput_events_to_user_~udev#1.offset, uinput_events_to_user_~buffer#1.base, uinput_events_to_user_~buffer#1.offset, uinput_events_to_user_~count#1, uinput_events_to_user_~#event~0#1.base, uinput_events_to_user_~#event~0#1.offset, uinput_events_to_user_~read~0#1, uinput_events_to_user_~tmp~21#1, uinput_events_to_user_~tmp___0~10#1, uinput_events_to_user_~tmp___1~8#1, uinput_events_to_user_~tmp___2~6#1;havoc uinput_events_to_user_#in~udev#1.base, uinput_events_to_user_#in~udev#1.offset, uinput_events_to_user_#in~buffer#1.base, uinput_events_to_user_#in~buffer#1.offset, uinput_events_to_user_#in~count#1;assume { :end_inline_uinput_events_to_user } true;assume -9223372036854775808 <= uinput_read_#t~ret288#1 && uinput_read_#t~ret288#1 <= 9223372036854775807;uinput_read_~retval~4#1 := uinput_read_#t~ret288#1;havoc uinput_read_#t~ret288#1; [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4060: call ULTIMATE.dealloc(uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset);havoc uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset;uinput_write_#t~ret262#1 := uinput_inject_event_#res#1;havoc uinput_inject_event_#t~ret252#1, uinput_inject_event_#t~ret253#1, uinput_inject_event_#t~mem254#1.base, uinput_inject_event_#t~mem254#1.offset, uinput_inject_event_#t~mem255#1, uinput_inject_event_#t~mem256#1, uinput_inject_event_#t~mem257#1, uinput_inject_event_#t~ret258#1, uinput_inject_event_~udev#1.base, uinput_inject_event_~udev#1.offset, uinput_inject_event_~buffer#1.base, uinput_inject_event_~buffer#1.offset, uinput_inject_event_~count#1, uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset, uinput_inject_event_~tmp~19#1, uinput_inject_event_~tmp___0~8#1, uinput_inject_event_~tmp___1~7#1;havoc uinput_inject_event_#in~udev#1.base, uinput_inject_event_#in~udev#1.offset, uinput_inject_event_#in~buffer#1.base, uinput_inject_event_#in~buffer#1.offset, uinput_inject_event_#in~count#1;assume { :end_inline_uinput_inject_event } true;assume -9223372036854775808 <= uinput_write_#t~ret262#1 && uinput_write_#t~ret262#1 <= 9223372036854775807;uinput_write_~tmp~20#1 := uinput_write_#t~ret262#1;havoc uinput_write_#t~ret262#1;uinput_write_~retval~3#1 := (if uinput_write_~tmp~20#1 % 4294967296 <= 2147483647 then uinput_write_~tmp~20#1 % 4294967296 else uinput_write_~tmp~20#1 % 4294967296 - 4294967296); [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4093: uinput_write_#t~ret260#1 := ldv_mutex_lock_interruptible_8_#res#1;havoc ldv_mutex_lock_interruptible_8_#t~ret499#1, ldv_mutex_lock_interruptible_8_#t~ret500#1, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_8_~ldv_func_res~2#1, ldv_mutex_lock_interruptible_8_~tmp~32#1, ldv_mutex_lock_interruptible_8_~tmp___0~19#1;havoc ldv_mutex_lock_interruptible_8_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_interruptible_8 } true;assume -2147483648 <= uinput_write_#t~ret260#1 && uinput_write_#t~ret260#1 <= 2147483647;uinput_write_~retval~3#1 := uinput_write_#t~ret260#1;havoc uinput_write_#t~ret260#1; [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3994: assume -9223372036854775808 <= uinput_setup_device_#t~ret232#1 && uinput_setup_device_#t~ret232#1 <= 9223372036854775807;uinput_setup_device_~tmp___0~7#1 := uinput_setup_device_#t~ret232#1;havoc uinput_setup_device_#t~ret232#1;uinput_setup_device_#res#1 := (if uinput_setup_device_~tmp___0~7#1 % 4294967296 <= 2147483647 then uinput_setup_device_~tmp___0~7#1 % 4294967296 else uinput_setup_device_~tmp___0~7#1 % 4294967296 - 4294967296); [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3928: assume -2147483648 <= uinput_validate_absbits_#t~ret220#1 && uinput_validate_absbits_#t~ret220#1 <= 2147483647;uinput_validate_absbits_~tmp___3~2#1 := uinput_validate_absbits_#t~ret220#1;havoc uinput_validate_absbits_#t~ret220#1; [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3994-1: SUMMARY for call uinput_setup_device_#t~ret232#1 := PTR_ERR(uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset); srcloc: null [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3928-1: SUMMARY for call uinput_validate_absbits_#t~ret220#1 := input_abs_get_min(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,772 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4853: assume -2147483648 <= ldv_mutex_lock_interruptible_8_#t~ret499#1 && ldv_mutex_lock_interruptible_8_#t~ret499#1 <= 2147483647;ldv_mutex_lock_interruptible_8_~tmp~32#1 := ldv_mutex_lock_interruptible_8_#t~ret499#1;havoc ldv_mutex_lock_interruptible_8_#t~ret499#1;ldv_mutex_lock_interruptible_8_~ldv_func_res~2#1 := ldv_mutex_lock_interruptible_8_~tmp~32#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4853-1: SUMMARY for call ldv_mutex_lock_interruptible_8_#t~ret499#1 := mutex_lock_interruptible(ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3433-1: SUMMARY for call input_alloc_absinfo(input_abs_set_min_~dev#1.base, input_abs_set_min_~dev#1.offset); srcloc: null [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3433: call input_abs_set_min_#t~mem118#1.base, input_abs_set_min_#t~mem118#1.offset := read~$Pointer$#12(input_abs_set_min_~dev#1.base, 396 + input_abs_set_min_~dev#1.offset, 8); [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4259: uinput_release_#res#1 := 0; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4259-1: SUMMARY for call kfree(uinput_release_~udev~6#1.base, uinput_release_~udev~6#1.offset); srcloc: null [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4226: SUMMARY for call finish_wait(uinput_read_~udev~4#1.base, 168 + uinput_read_~udev~4#1.offset, uinput_read_~#__wait~1#1.base, uinput_read_~#__wait~1#1.offset); srcloc: null [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4094: assume 0 != uinput_write_~retval~3#1;uinput_write_#res#1 := uinput_write_~retval~3#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4094: assume !(0 != uinput_write_~retval~3#1);call uinput_write_#t~mem261#1 := read~int#12(uinput_write_~udev~3#1.base, 164 + uinput_write_~udev~3#1.offset, 4); [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3929-1: SUMMARY for call uinput_validate_absbits_#t~ret221#1 := input_abs_get_flat(uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1); srcloc: null [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3929: assume -2147483648 <= uinput_validate_absbits_#t~ret221#1 && uinput_validate_absbits_#t~ret221#1 <= 2147483647;uinput_validate_absbits_~tmp___4~1#1 := uinput_validate_absbits_#t~ret221#1;havoc uinput_validate_absbits_#t~ret221#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4755: assume main_#t~switch486#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4755: assume !main_#t~switch486#1;main_#t~switch486#1 := main_#t~switch486#1 || 6 == main_~tmp___0~16#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3434: assume 0 != (input_abs_set_min_#t~mem118#1.base + input_abs_set_min_#t~mem118#1.offset) % 18446744073709551616;havoc input_abs_set_min_#t~mem118#1.base, input_abs_set_min_#t~mem118#1.offset;call input_abs_set_min_#t~mem119#1.base, input_abs_set_min_#t~mem119#1.offset := read~$Pointer$#12(input_abs_set_min_~dev#1.base, 396 + input_abs_set_min_~dev#1.offset, 8);call write~int#12(input_abs_set_min_~val#1, input_abs_set_min_#t~mem119#1.base, 4 + (input_abs_set_min_#t~mem119#1.offset + 24 * (if input_abs_set_min_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then input_abs_set_min_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else input_abs_set_min_~axis#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)), 4);havoc input_abs_set_min_#t~mem119#1.base, input_abs_set_min_#t~mem119#1.offset; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3434: assume !(0 != (input_abs_set_min_#t~mem118#1.base + input_abs_set_min_#t~mem118#1.offset) % 18446744073709551616);havoc input_abs_set_min_#t~mem118#1.base, input_abs_set_min_#t~mem118#1.offset; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4194: havoc ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_11_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_11_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_11 } true; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4194-1: assume { :begin_inline_ldv_mutex_unlock_11 } true;ldv_mutex_unlock_11_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_11_#in~ldv_func_arg1#1.offset := uinput_read_~udev~4#1.base, 8 + uinput_read_~udev~4#1.offset;havoc ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset;ldv_mutex_unlock_11_~ldv_func_arg1#1.base, ldv_mutex_unlock_11_~ldv_func_arg1#1.offset := ldv_mutex_unlock_11_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_11_#in~ldv_func_arg1#1.offset; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4029-1: SUMMARY for call uinput_setup_device_#t~ret246#1 := constant_test_bit(3, uinput_setup_device_~dev~2#1.base, 40 + uinput_setup_device_~dev~2#1.offset); srcloc: null [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4029: assume -2147483648 <= uinput_setup_device_#t~ret246#1 && uinput_setup_device_#t~ret246#1 <= 2147483647;uinput_setup_device_~tmp___6~1#1 := uinput_setup_device_#t~ret246#1;havoc uinput_setup_device_#t~ret246#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3930: assume -2147483648 <= uinput_validate_absbits_#t~ret222#1 && uinput_validate_absbits_#t~ret222#1 <= 2147483647;havoc uinput_validate_absbits_#t~ret222#1;uinput_validate_absbits_~retval~1#1 := -22; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4855: assume -2147483648 <= ldv_mutex_lock_interruptible_8_#t~ret500#1 && ldv_mutex_lock_interruptible_8_#t~ret500#1 <= 2147483647;ldv_mutex_lock_interruptible_8_~tmp___0~19#1 := ldv_mutex_lock_interruptible_8_#t~ret500#1;havoc ldv_mutex_lock_interruptible_8_#t~ret500#1;ldv_mutex_lock_interruptible_8_#res#1 := ldv_mutex_lock_interruptible_8_~tmp___0~19#1; [2025-02-08 02:46:18,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3864: call ULTIMATE.dealloc(uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset);havoc uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset);havoc uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset);havoc uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset;call ULTIMATE.dealloc(uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset);havoc uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset;main_#t~ret487#1 := uinput_open_#res#1;havoc uinput_open_#t~ret207#1.base, uinput_open_#t~ret207#1.offset, uinput_open_#t~ret208#1.base, uinput_open_#t~ret208#1.offset, uinput_open_#t~ret209#1, uinput_open_~inode#1.base, uinput_open_~inode#1.offset, uinput_open_~file#1.base, uinput_open_~file#1.offset, uinput_open_~newdev~0#1.base, uinput_open_~newdev~0#1.offset, uinput_open_~tmp~16#1.base, uinput_open_~tmp~16#1.offset, uinput_open_~#__key~1#1.base, uinput_open_~#__key~1#1.offset, uinput_open_~#__key___0~0#1.base, uinput_open_~#__key___0~0#1.offset, uinput_open_~#__key___1~0#1.base, uinput_open_~#__key___1~0#1.offset, uinput_open_~#__key___2~0#1.base, uinput_open_~#__key___2~0#1.offset;havoc uinput_open_#in~inode#1.base, uinput_open_#in~inode#1.offset, uinput_open_#in~file#1.base, uinput_open_#in~file#1.offset;assume { :end_inline_uinput_open } true;assume -2147483648 <= main_#t~ret487#1 && main_#t~ret487#1 <= 2147483647;main_~res_uinput_open_15~0#1 := main_#t~ret487#1;havoc main_#t~ret487#1; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L3930-1: SUMMARY for call uinput_validate_absbits_#t~ret222#1 := printk(14, 0); srcloc: null [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4855-1: SUMMARY for call ldv_mutex_lock_interruptible_8_#t~ret500#1 := ldv_mutex_lock_interruptible_mutex_of_uinput_device(ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_8_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4756-1: SUMMARY for call ldv_handler_precall(); srcloc: null [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4756: assume { :begin_inline_uinput_ioctl } true;uinput_ioctl_#in~file#1.base, uinput_ioctl_#in~file#1.offset, uinput_ioctl_#in~cmd#1, uinput_ioctl_#in~arg#1 := main_~var_group2~0#1.base, main_~var_group2~0#1.offset, main_~var_uinput_ioctl_31_p1~0#1, main_~var_uinput_ioctl_31_p2~0#1;havoc uinput_ioctl_#res#1;havoc uinput_ioctl_#t~ret478#1, uinput_ioctl_~file#1.base, uinput_ioctl_~file#1.offset, uinput_ioctl_~cmd#1, uinput_ioctl_~arg#1, uinput_ioctl_~tmp~26#1;uinput_ioctl_~file#1.base, uinput_ioctl_~file#1.offset := uinput_ioctl_#in~file#1.base, uinput_ioctl_#in~file#1.offset;uinput_ioctl_~cmd#1 := uinput_ioctl_#in~cmd#1;uinput_ioctl_~arg#1 := uinput_ioctl_#in~arg#1;havoc uinput_ioctl_~tmp~26#1; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4195: assume 0 != uinput_read_~retval~4#1 || 0 == uinput_read_~count#1 % 18446744073709551616; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4195: assume !(0 != uinput_read_~retval~4#1 || 0 == uinput_read_~count#1 % 18446744073709551616);call uinput_read_#t~mem289#1 := read~int#2(uinput_read_~file#1.base, 128 + uinput_read_~file#1.offset, 4); [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4030: assume 0 != uinput_setup_device_~tmp___6~1#1;assume { :begin_inline_uinput_validate_absbits } true;uinput_validate_absbits_#in~dev#1.base, uinput_validate_absbits_#in~dev#1.offset := uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset;havoc uinput_validate_absbits_#res#1;havoc uinput_validate_absbits_#t~ret210#1, uinput_validate_absbits_#t~ret211#1, uinput_validate_absbits_#t~ret212#1, uinput_validate_absbits_#t~ret213#1, uinput_validate_absbits_#t~ret214#1, uinput_validate_absbits_#t~ret215#1, uinput_validate_absbits_#t~ret216#1, uinput_validate_absbits_#t~ret217#1, uinput_validate_absbits_#t~ret218#1, uinput_validate_absbits_#t~ret219#1, uinput_validate_absbits_#t~ret220#1, uinput_validate_absbits_#t~ret221#1, uinput_validate_absbits_#t~ret222#1, uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1, uinput_validate_absbits_~retval~1#1, uinput_validate_absbits_~min~0#1, uinput_validate_absbits_~max~0#1, uinput_validate_absbits_~tmp~17#1, uinput_validate_absbits_~tmp___0~6#1, uinput_validate_absbits_~tmp___1~5#1, uinput_validate_absbits_~tmp___2~4#1, uinput_validate_absbits_~tmp___3~2#1, uinput_validate_absbits_~tmp___4~1#1, uinput_validate_absbits_~tmp___5~0#1, uinput_validate_absbits_~tmp___6~0#1, uinput_validate_absbits_~tmp___7~0#1;uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset := uinput_validate_absbits_#in~dev#1.base, uinput_validate_absbits_#in~dev#1.offset;havoc uinput_validate_absbits_~cnt~0#1;havoc uinput_validate_absbits_~retval~1#1;havoc uinput_validate_absbits_~min~0#1;havoc uinput_validate_absbits_~max~0#1;havoc uinput_validate_absbits_~tmp~17#1;havoc uinput_validate_absbits_~tmp___0~6#1;havoc uinput_validate_absbits_~tmp___1~5#1;havoc uinput_validate_absbits_~tmp___2~4#1;havoc uinput_validate_absbits_~tmp___3~2#1;havoc uinput_validate_absbits_~tmp___4~1#1;havoc uinput_validate_absbits_~tmp___5~0#1;havoc uinput_validate_absbits_~tmp___6~0#1;havoc uinput_validate_absbits_~tmp___7~0#1;uinput_validate_absbits_~retval~1#1 := 0;uinput_validate_absbits_~cnt~0#1 := 0; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4030: assume !(0 != uinput_setup_device_~tmp___6~1#1); [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4757: main_#t~ret492#1 := uinput_ioctl_#res#1;havoc uinput_ioctl_#t~ret478#1, uinput_ioctl_~file#1.base, uinput_ioctl_~file#1.offset, uinput_ioctl_~cmd#1, uinput_ioctl_~arg#1, uinput_ioctl_~tmp~26#1;havoc uinput_ioctl_#in~file#1.base, uinput_ioctl_#in~file#1.offset, uinput_ioctl_#in~cmd#1, uinput_ioctl_#in~arg#1;assume { :end_inline_uinput_ioctl } true;assume -9223372036854775808 <= main_#t~ret492#1 && main_#t~ret492#1 <= 9223372036854775807; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4625: assume -9223372036854775808 <= uinput_ioctl_#t~ret478#1 && uinput_ioctl_#t~ret478#1 <= 9223372036854775807;uinput_ioctl_~tmp~26#1 := uinput_ioctl_#t~ret478#1;havoc uinput_ioctl_#t~ret478#1;uinput_ioctl_#res#1 := uinput_ioctl_~tmp~26#1; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4625-1: SUMMARY for call uinput_ioctl_#t~ret478#1 := uinput_ioctl_handler(uinput_ioctl_~file#1.base, uinput_ioctl_~file#1.offset, uinput_ioctl_~cmd#1, uinput_ioctl_~arg#1, 0, (if uinput_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then uinput_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 else uinput_ioctl_~arg#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616)); srcloc: null [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4229: uinput_read_~retval~4#1 := uinput_read_~__ret~1#1; [2025-02-08 02:46:18,774 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4031: uinput_setup_device_#t~ret247#1 := uinput_validate_absbits_#res#1;havoc uinput_validate_absbits_#t~ret210#1, uinput_validate_absbits_#t~ret211#1, uinput_validate_absbits_#t~ret212#1, uinput_validate_absbits_#t~ret213#1, uinput_validate_absbits_#t~ret214#1, uinput_validate_absbits_#t~ret215#1, uinput_validate_absbits_#t~ret216#1, uinput_validate_absbits_#t~ret217#1, uinput_validate_absbits_#t~ret218#1, uinput_validate_absbits_#t~ret219#1, uinput_validate_absbits_#t~ret220#1, uinput_validate_absbits_#t~ret221#1, uinput_validate_absbits_#t~ret222#1, uinput_validate_absbits_~dev#1.base, uinput_validate_absbits_~dev#1.offset, uinput_validate_absbits_~cnt~0#1, uinput_validate_absbits_~retval~1#1, uinput_validate_absbits_~min~0#1, uinput_validate_absbits_~max~0#1, uinput_validate_absbits_~tmp~17#1, uinput_validate_absbits_~tmp___0~6#1, uinput_validate_absbits_~tmp___1~5#1, uinput_validate_absbits_~tmp___2~4#1, uinput_validate_absbits_~tmp___3~2#1, uinput_validate_absbits_~tmp___4~1#1, uinput_validate_absbits_~tmp___5~0#1, uinput_validate_absbits_~tmp___6~0#1, uinput_validate_absbits_~tmp___7~0#1;havoc uinput_validate_absbits_#in~dev#1.base, uinput_validate_absbits_#in~dev#1.offset;assume { :end_inline_uinput_validate_absbits } true;assume -2147483648 <= uinput_setup_device_#t~ret247#1 && uinput_setup_device_#t~ret247#1 <= 2147483647;uinput_setup_device_~retval~2#1 := uinput_setup_device_#t~ret247#1;havoc uinput_setup_device_#t~ret247#1; [2025-02-08 02:46:18,778 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4857-1: ldv_mutex_lock_interruptible_8_#res#1 := ldv_mutex_lock_interruptible_8_~ldv_func_res~2#1; [2025-02-08 02:46:18,779 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4098: assume 2 == uinput_write_#t~mem261#1 % 4294967296;havoc uinput_write_#t~mem261#1;assume { :begin_inline_uinput_inject_event } true;uinput_inject_event_#in~udev#1.base, uinput_inject_event_#in~udev#1.offset, uinput_inject_event_#in~buffer#1.base, uinput_inject_event_#in~buffer#1.offset, uinput_inject_event_#in~count#1 := uinput_write_~udev~3#1.base, uinput_write_~udev~3#1.offset, uinput_write_~buffer#1.base, uinput_write_~buffer#1.offset, uinput_write_~count#1;havoc uinput_inject_event_#res#1;havoc uinput_inject_event_#t~ret252#1, uinput_inject_event_#t~ret253#1, uinput_inject_event_#t~mem254#1.base, uinput_inject_event_#t~mem254#1.offset, uinput_inject_event_#t~mem255#1, uinput_inject_event_#t~mem256#1, uinput_inject_event_#t~mem257#1, uinput_inject_event_#t~ret258#1, uinput_inject_event_~udev#1.base, uinput_inject_event_~udev#1.offset, uinput_inject_event_~buffer#1.base, uinput_inject_event_~buffer#1.offset, uinput_inject_event_~count#1, uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset, uinput_inject_event_~tmp~19#1, uinput_inject_event_~tmp___0~8#1, uinput_inject_event_~tmp___1~7#1;uinput_inject_event_~udev#1.base, uinput_inject_event_~udev#1.offset := uinput_inject_event_#in~udev#1.base, uinput_inject_event_#in~udev#1.offset;uinput_inject_event_~buffer#1.base, uinput_inject_event_~buffer#1.offset := uinput_inject_event_#in~buffer#1.base, uinput_inject_event_#in~buffer#1.offset;uinput_inject_event_~count#1 := uinput_inject_event_#in~count#1;call uinput_inject_event_~#ev~0#1.base, uinput_inject_event_~#ev~0#1.offset := #Ultimate.allocOnStack(24);havoc uinput_inject_event_~tmp~19#1;havoc uinput_inject_event_~tmp___0~8#1;havoc uinput_inject_event_~tmp___1~7#1; [2025-02-08 02:46:18,779 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L4098: assume !(2 == uinput_write_#t~mem261#1 % 4294967296);havoc uinput_write_#t~mem261#1;assume { :begin_inline_uinput_setup_device } true;uinput_setup_device_#in~udev#1.base, uinput_setup_device_#in~udev#1.offset, uinput_setup_device_#in~buffer#1.base, uinput_setup_device_#in~buffer#1.offset, uinput_setup_device_#in~count#1 := uinput_write_~udev~3#1.base, uinput_write_~udev~3#1.offset, uinput_write_~buffer#1.base, uinput_write_~buffer#1.offset, uinput_write_~count#1;havoc uinput_setup_device_#res#1;havoc uinput_setup_device_#t~mem227#1.base, uinput_setup_device_#t~mem227#1.offset, uinput_setup_device_#t~ret228#1, uinput_setup_device_#t~mem229#1.base, uinput_setup_device_#t~mem229#1.offset, uinput_setup_device_#t~ret230#1.base, uinput_setup_device_#t~ret230#1.offset, uinput_setup_device_#t~ret231#1, uinput_setup_device_#t~ret232#1, uinput_setup_device_#t~mem233#1, uinput_setup_device_#t~mem234#1, uinput_setup_device_#t~mem235#1.base, uinput_setup_device_#t~mem235#1.offset, uinput_setup_device_#t~ret236#1.base, uinput_setup_device_#t~ret236#1.offset, uinput_setup_device_#t~mem237#1.base, uinput_setup_device_#t~mem237#1.offset, uinput_setup_device_#t~mem238#1, uinput_setup_device_#t~mem239#1, uinput_setup_device_#t~mem240#1, uinput_setup_device_#t~mem241#1, uinput_setup_device_#t~mem242#1, uinput_setup_device_#t~mem243#1, uinput_setup_device_#t~mem244#1, uinput_setup_device_#t~mem245#1, uinput_setup_device_#t~ret246#1, uinput_setup_device_#t~ret247#1, uinput_setup_device_#t~ret248#1, uinput_setup_device_#t~ret249#1, uinput_setup_device_#t~ret250#1, uinput_setup_device_#t~ret251#1, uinput_setup_device_~udev#1.base, uinput_setup_device_~udev#1.offset, uinput_setup_device_~buffer#1.base, uinput_setup_device_~buffer#1.offset, uinput_setup_device_~count#1, uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset, uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset, uinput_setup_device_~i~1#1, uinput_setup_device_~retval~2#1, uinput_setup_device_~tmp~18#1.base, uinput_setup_device_~tmp~18#1.offset, uinput_setup_device_~tmp___0~7#1, uinput_setup_device_~tmp___1~6#1, uinput_setup_device_~tmp___2~5#1.base, uinput_setup_device_~tmp___2~5#1.offset, uinput_setup_device_~nslot~0#1, uinput_setup_device_~tmp___3~3#1, uinput_setup_device_~tmp___4~2#1, uinput_setup_device_~tmp___5~1#1, uinput_setup_device_~tmp___6~1#1;uinput_setup_device_~udev#1.base, uinput_setup_device_~udev#1.offset := uinput_setup_device_#in~udev#1.base, uinput_setup_device_#in~udev#1.offset;uinput_setup_device_~buffer#1.base, uinput_setup_device_~buffer#1.offset := uinput_setup_device_#in~buffer#1.base, uinput_setup_device_#in~buffer#1.offset;uinput_setup_device_~count#1 := uinput_setup_device_#in~count#1;havoc uinput_setup_device_~user_dev~0#1.base, uinput_setup_device_~user_dev~0#1.offset;havoc uinput_setup_device_~dev~2#1.base, uinput_setup_device_~dev~2#1.offset;havoc uinput_setup_device_~i~1#1;havoc uinput_setup_device_~retval~2#1;havoc uinput_setup_device_~tmp~18#1.base, uinput_setup_device_~tmp~18#1.offset;havoc uinput_setup_device_~tmp___0~7#1;havoc uinput_setup_device_~tmp___1~6#1;havoc uinput_setup_device_~tmp___2~5#1.base, uinput_setup_device_~tmp___2~5#1.offset;havoc uinput_setup_device_~nslot~0#1;havoc uinput_setup_device_~tmp___3~3#1;havoc uinput_setup_device_~tmp___4~2#1;havoc uinput_setup_device_~tmp___5~1#1;havoc uinput_setup_device_~tmp___6~1#1; [2025-02-08 02:46:18,928 INFO L? ?]: Removed 758 outVars from TransFormulas that were not future-live. [2025-02-08 02:46:18,929 INFO L308 CfgBuilder]: Performing block encoding [2025-02-08 02:46:18,957 INFO L332 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-02-08 02:46:18,958 INFO L337 CfgBuilder]: Removed 1 assume(true) statements. [2025-02-08 02:46:18,958 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:46:18 BoogieIcfgContainer [2025-02-08 02:46:18,958 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-02-08 02:46:18,960 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-02-08 02:46:18,961 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-02-08 02:46:18,966 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-02-08 02:46:18,967 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.02 02:46:04" (1/3) ... [2025-02-08 02:46:18,967 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e82fea5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:46:18, skipping insertion in model container [2025-02-08 02:46:18,967 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:05" (2/3) ... [2025-02-08 02:46:18,968 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@1e82fea5 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:46:18, skipping insertion in model container [2025-02-08 02:46:18,969 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:46:18" (3/3) ... [2025-02-08 02:46:18,970 INFO L128 eAbstractionObserver]: Analyzing ICFG linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i [2025-02-08 02:46:18,987 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-02-08 02:46:18,988 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG linux-3.8-rc1-32_7a-drivers--input--misc--uinput.ko-ldv_main0.cil.out.i that has 58 procedures, 504 locations, 1 initial locations, 29 loop locations, and 1 error locations. [2025-02-08 02:46:19,061 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-02-08 02:46:19,075 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@15eb98aa, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-02-08 02:46:19,076 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-02-08 02:46:19,081 INFO L276 IsEmpty]: Start isEmpty. Operand has 371 states, 260 states have (on average 1.4307692307692308) internal successors, (372), 287 states have internal predecessors, (372), 63 states have call successors, (63), 24 states have call predecessors, (63), 24 states have return successors, (63), 61 states have call predecessors, (63), 63 states have call successors, (63) [2025-02-08 02:46:19,087 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 18 [2025-02-08 02:46:19,088 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:19,088 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:46:19,089 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:19,094 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:19,094 INFO L85 PathProgramCache]: Analyzing trace with hash -79723061, now seen corresponding path program 1 times [2025-02-08 02:46:19,101 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:19,102 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2124588108] [2025-02-08 02:46:19,102 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:19,102 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:19,357 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 17 statements into 1 equivalence classes. [2025-02-08 02:46:19,441 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 17 of 17 statements. [2025-02-08 02:46:19,441 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:19,441 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:19,674 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:46:19,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:19,675 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2124588108] [2025-02-08 02:46:19,675 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2124588108] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:19,675 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:19,676 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:46:19,677 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1805284936] [2025-02-08 02:46:19,677 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:19,681 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:19,682 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:19,697 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:19,698 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:19,703 INFO L87 Difference]: Start difference. First operand has 371 states, 260 states have (on average 1.4307692307692308) internal successors, (372), 287 states have internal predecessors, (372), 63 states have call successors, (63), 24 states have call predecessors, (63), 24 states have return successors, (63), 61 states have call predecessors, (63), 63 states have call successors, (63) Second operand has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:46:19,724 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:19,725 INFO L93 Difference]: Finished difference Result 36 states and 44 transitions. [2025-02-08 02:46:19,726 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:19,727 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 17 [2025-02-08 02:46:19,728 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:19,733 INFO L225 Difference]: With dead ends: 36 [2025-02-08 02:46:19,733 INFO L226 Difference]: Without dead ends: 19 [2025-02-08 02:46:19,736 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:19,740 INFO L435 NwaCegarLoop]: 24 mSDtfsCounter, 15 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 24 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:19,743 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [15 Valid, 24 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:19,758 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19 states. [2025-02-08 02:46:19,773 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19 to 19. [2025-02-08 02:46:19,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19 states, 13 states have (on average 1.0769230769230769) internal successors, (14), 14 states have internal predecessors, (14), 4 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:46:19,778 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19 states to 19 states and 20 transitions. [2025-02-08 02:46:19,780 INFO L78 Accepts]: Start accepts. Automaton has 19 states and 20 transitions. Word has length 17 [2025-02-08 02:46:19,781 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:19,781 INFO L471 AbstractCegarLoop]: Abstraction has 19 states and 20 transitions. [2025-02-08 02:46:19,781 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 3.6666666666666665) internal successors, (11), 3 states have internal predecessors, (11), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:46:19,781 INFO L276 IsEmpty]: Start isEmpty. Operand 19 states and 20 transitions. [2025-02-08 02:46:19,785 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2025-02-08 02:46:19,785 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:19,785 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:46:19,785 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-02-08 02:46:19,785 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:19,786 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:19,786 INFO L85 PathProgramCache]: Analyzing trace with hash 1822987729, now seen corresponding path program 1 times [2025-02-08 02:46:19,786 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:19,787 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1319179069] [2025-02-08 02:46:19,787 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:19,787 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:19,943 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 18 statements into 1 equivalence classes. [2025-02-08 02:46:19,998 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 18 of 18 statements. [2025-02-08 02:46:20,001 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:20,001 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:20,130 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:46:20,130 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:20,130 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1319179069] [2025-02-08 02:46:20,130 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1319179069] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:20,130 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:20,131 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:46:20,131 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1878597655] [2025-02-08 02:46:20,131 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:20,132 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:20,132 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:20,132 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:20,132 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:20,132 INFO L87 Difference]: Start difference. First operand 19 states and 20 transitions. Second operand has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:46:20,137 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:20,137 INFO L93 Difference]: Finished difference Result 21 states and 21 transitions. [2025-02-08 02:46:20,137 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:20,138 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 18 [2025-02-08 02:46:20,138 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:20,138 INFO L225 Difference]: With dead ends: 21 [2025-02-08 02:46:20,138 INFO L226 Difference]: Without dead ends: 18 [2025-02-08 02:46:20,138 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:20,139 INFO L435 NwaCegarLoop]: 17 mSDtfsCounter, 7 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 17 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:20,139 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 17 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:20,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18 states. [2025-02-08 02:46:20,141 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18 to 18. [2025-02-08 02:46:20,141 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18 states, 13 states have (on average 1.0) internal successors, (13), 13 states have internal predecessors, (13), 3 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2025-02-08 02:46:20,142 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18 states to 18 states and 18 transitions. [2025-02-08 02:46:20,142 INFO L78 Accepts]: Start accepts. Automaton has 18 states and 18 transitions. Word has length 18 [2025-02-08 02:46:20,142 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:20,142 INFO L471 AbstractCegarLoop]: Abstraction has 18 states and 18 transitions. [2025-02-08 02:46:20,142 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.0) internal successors, (12), 3 states have internal predecessors, (12), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:46:20,142 INFO L276 IsEmpty]: Start isEmpty. Operand 18 states and 18 transitions. [2025-02-08 02:46:20,143 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2025-02-08 02:46:20,143 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:20,143 INFO L218 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:46:20,143 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2025-02-08 02:46:20,143 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:20,143 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:20,143 INFO L85 PathProgramCache]: Analyzing trace with hash 677479052, now seen corresponding path program 1 times [2025-02-08 02:46:20,143 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:20,144 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1270947932] [2025-02-08 02:46:20,144 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:20,144 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:20,267 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 19 statements into 1 equivalence classes. [2025-02-08 02:46:20,292 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 19 of 19 statements. [2025-02-08 02:46:20,296 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:20,296 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:20,371 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2025-02-08 02:46:20,371 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:20,371 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1270947932] [2025-02-08 02:46:20,371 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1270947932] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:20,371 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:20,372 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-02-08 02:46:20,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89846029] [2025-02-08 02:46:20,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:20,372 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:20,372 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:20,373 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:20,373 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:20,373 INFO L87 Difference]: Start difference. First operand 18 states and 18 transitions. Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:46:20,375 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:20,375 INFO L93 Difference]: Finished difference Result 18 states and 18 transitions. [2025-02-08 02:46:20,375 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:20,375 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 19 [2025-02-08 02:46:20,376 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:20,376 INFO L225 Difference]: With dead ends: 18 [2025-02-08 02:46:20,376 INFO L226 Difference]: Without dead ends: 0 [2025-02-08 02:46:20,376 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:20,377 INFO L435 NwaCegarLoop]: 15 mSDtfsCounter, 3 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3 SdHoareTripleChecker+Valid, 15 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:20,377 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [3 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:20,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2025-02-08 02:46:20,378 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2025-02-08 02:46:20,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:20,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2025-02-08 02:46:20,378 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 19 [2025-02-08 02:46:20,378 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:20,378 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2025-02-08 02:46:20,378 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2025-02-08 02:46:20,378 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2025-02-08 02:46:20,379 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2025-02-08 02:46:20,381 INFO L782 garLoopResultBuilder]: Registering result SAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2025-02-08 02:46:20,382 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2025-02-08 02:46:20,383 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1] [2025-02-08 02:46:20,386 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2025-02-08 02:46:20,473 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-02-08 02:46:20,481 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.02 02:46:20 BoogieIcfgContainer [2025-02-08 02:46:20,483 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-02-08 02:46:20,484 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-02-08 02:46:20,484 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-02-08 02:46:20,485 INFO L274 PluginConnector]: Witness Printer initialized [2025-02-08 02:46:20,485 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:46:18" (3/4) ... [2025-02-08 02:46:20,487 INFO L146 WitnessPrinter]: Generating witness for correct program [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#12 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_from_user [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#11 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#10 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure uinput_ioctl_handler [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#7 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#6 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#9 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#8 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#13 [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __bad_percpu_size [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_event_size [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_lock_interruptible_mutex_of_uinput_device [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure uinput_ff_upload_from_user [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure uinput_destroy_device [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_abs_get_max [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __wake_up [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure variable_test_bit [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure get_current [2025-02-08 02:46:20,490 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure uinput_request_done [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure PTR_ERR [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure signal_pending [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_malloc [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_lock_interruptible [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure constant_test_bit [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_abs_get_min [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure is_compat_task [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kfree [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure might_fault [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure prepare_to_wait [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure printk [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_abs_get_flat [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_unlock [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure copy_to_user [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_error [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_alloc_absinfo [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kzalloc [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_lock [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_check_return_value [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv__builtin_expect [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure uinput_request_find [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __init_waitqueue_head [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure set_bit [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_handler_precall [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_unlock_mutex_of_uinput_device [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure schedule [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#1 [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#0 [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#3 [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#2 [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#5 [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#4 [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _copy_from_user [2025-02-08 02:46:20,491 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure finish_wait [2025-02-08 02:46:20,493 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure uinput_allocate_device [2025-02-08 02:46:20,493 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure IS_ERR [2025-02-08 02:46:20,518 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 117 nodes and edges [2025-02-08 02:46:20,520 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 46 nodes and edges [2025-02-08 02:46:20,523 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 11 nodes and edges [2025-02-08 02:46:20,524 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 5 nodes and edges [2025-02-08 02:46:20,526 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 3 nodes and edges [2025-02-08 02:46:20,528 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2025-02-08 02:46:20,684 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-02-08 02:46:20,685 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-02-08 02:46:20,685 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-02-08 02:46:20,687 INFO L158 Benchmark]: Toolchain (without parser) took 16325.93ms. Allocated memory was 142.6MB in the beginning and 201.3MB in the end (delta: 58.7MB). Free memory was 106.7MB in the beginning and 64.1MB in the end (delta: 42.6MB). Peak memory consumption was 95.6MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,687 INFO L158 Benchmark]: CDTParser took 0.54ms. Allocated memory is still 201.3MB. Free memory is still 122.9MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:46:20,688 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1550.59ms. Allocated memory is still 142.6MB. Free memory was 106.7MB in the beginning and 65.7MB in the end (delta: 41.0MB). Peak memory consumption was 83.6MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,688 INFO L158 Benchmark]: Boogie Procedure Inliner took 153.24ms. Allocated memory is still 142.6MB. Free memory was 65.7MB in the beginning and 48.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,688 INFO L158 Benchmark]: Boogie Preprocessor took 436.59ms. Allocated memory is still 142.6MB. Free memory was 48.9MB in the beginning and 56.9MB in the end (delta: -8.0MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,689 INFO L158 Benchmark]: IcfgBuilder took 12454.62ms. Allocated memory was 142.6MB in the beginning and 201.3MB in the end (delta: 58.7MB). Free memory was 56.9MB in the beginning and 99.8MB in the end (delta: -42.8MB). Peak memory consumption was 65.1MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,689 INFO L158 Benchmark]: TraceAbstraction took 1522.97ms. Allocated memory is still 201.3MB. Free memory was 99.1MB in the beginning and 83.2MB in the end (delta: 16.0MB). Peak memory consumption was 20.3MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,689 INFO L158 Benchmark]: Witness Printer took 200.88ms. Allocated memory is still 201.3MB. Free memory was 83.2MB in the beginning and 64.1MB in the end (delta: 19.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-02-08 02:46:20,691 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.54ms. Allocated memory is still 201.3MB. Free memory is still 122.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1550.59ms. Allocated memory is still 142.6MB. Free memory was 106.7MB in the beginning and 65.7MB in the end (delta: 41.0MB). Peak memory consumption was 83.6MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 153.24ms. Allocated memory is still 142.6MB. Free memory was 65.7MB in the beginning and 48.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 436.59ms. Allocated memory is still 142.6MB. Free memory was 48.9MB in the beginning and 56.9MB in the end (delta: -8.0MB). Peak memory consumption was 21.5MB. Max. memory is 16.1GB. * IcfgBuilder took 12454.62ms. Allocated memory was 142.6MB in the beginning and 201.3MB in the end (delta: 58.7MB). Free memory was 56.9MB in the beginning and 99.8MB in the end (delta: -42.8MB). Peak memory consumption was 65.1MB. Max. memory is 16.1GB. * TraceAbstraction took 1522.97ms. Allocated memory is still 201.3MB. Free memory was 99.1MB in the beginning and 83.2MB in the end (delta: 16.0MB). Peak memory consumption was 20.3MB. Max. memory is 16.1GB. * Witness Printer took 200.88ms. Allocated memory is still 201.3MB. Free memory was 83.2MB in the beginning and 64.1MB in the end (delta: 19.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 3073]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [3073] - GenericResultAtLocation [Line: 3087]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("bt %2,%1\n\tsbb %0,%0": "=r" (oldbit): "m" (*((unsigned long *)addr)), "Ir" (nr)); [3087-3088] - GenericResultAtLocation [Line: 3102]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& current_task)); [3102] - GenericResultAtLocation [Line: 3105]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3105] - GenericResultAtLocation [Line: 3108]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3108] - GenericResultAtLocation [Line: 3111]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& current_task)); [3111] - GenericResultAtLocation [Line: 3173]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movb %%gs:%P1,%0": "=q" (pfo_ret__): "p" (& kernel_stack)); [3173] - GenericResultAtLocation [Line: 3176]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movw %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [3176] - GenericResultAtLocation [Line: 3179]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movl %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [3179] - GenericResultAtLocation [Line: 3182]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("movq %%gs:%P1,%0": "=r" (pfo_ret__): "p" (& kernel_stack)); [3182] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 4914]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 58 procedures, 504 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 1.4s, OverallIterations: 3, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 25 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 25 mSDsluCounter, 56 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 0 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 2 IncrementalHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 56 mSDtfsCounter, 2 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 9 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=371occurred in iteration=0, InterpolantAutomatonStates: 9, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 3 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.2s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 54 NumberOfCodeBlocks, 54 NumberOfCodeBlocksAsserted, 3 NumberOfCheckSat, 51 ConstructedInterpolants, 0 QuantifiedInterpolants, 117 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 6/6 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2025-02-08 02:46:20,727 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE