./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 48c9605d Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i -s /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 106df4f5c2a241158f9b42d6bacea5fef4152f7015c080096ac6f687357e10b4 --- Real Ultimate output --- This is Ultimate 0.3.0-?-48c9605-m [2025-02-08 02:46:24,757 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-02-08 02:46:24,837 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2025-02-08 02:46:24,843 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-02-08 02:46:24,845 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-02-08 02:46:24,873 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-02-08 02:46:24,874 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-02-08 02:46:24,874 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-02-08 02:46:24,874 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-02-08 02:46:24,875 INFO L153 SettingsManager]: * Use memory slicer=true [2025-02-08 02:46:24,875 INFO L151 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2025-02-08 02:46:24,876 INFO L153 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2025-02-08 02:46:24,876 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-02-08 02:46:24,876 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-02-08 02:46:24,877 INFO L153 SettingsManager]: * Use SBE=true [2025-02-08 02:46:24,877 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-02-08 02:46:24,877 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2025-02-08 02:46:24,877 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-02-08 02:46:24,877 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Use constant arrays=true [2025-02-08 02:46:24,878 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-02-08 02:46:24,878 INFO L153 SettingsManager]: * Only consider context switches at boundaries of atomic blocks=true [2025-02-08 02:46:24,879 INFO L153 SettingsManager]: * SMT solver=External_DefaultMode [2025-02-08 02:46:24,879 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:46:24,879 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Compute procedure contracts=false [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopHeads [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Order on configurations for Petri net unfoldings=DBO [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2025-02-08 02:46:24,880 INFO L153 SettingsManager]: * Looper check in Petri net analysis=SEMANTIC Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 106df4f5c2a241158f9b42d6bacea5fef4152f7015c080096ac6f687357e10b4 [2025-02-08 02:46:25,173 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-02-08 02:46:25,183 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-02-08 02:46:25,185 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-02-08 02:46:25,186 INFO L270 PluginConnector]: Initializing CDTParser... [2025-02-08 02:46:25,187 INFO L274 PluginConnector]: CDTParser initialized [2025-02-08 02:46:25,189 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i [2025-02-08 02:46:26,510 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/48d89de26/02bd9fdca3a249c591d8ad40cc91e6fb/FLAG0897f95c1 [2025-02-08 02:46:27,181 INFO L384 CDTParser]: Found 1 translation units. [2025-02-08 02:46:27,182 INFO L180 CDTParser]: Scanning /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i [2025-02-08 02:46:27,238 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/48d89de26/02bd9fdca3a249c591d8ad40cc91e6fb/FLAG0897f95c1 [2025-02-08 02:46:27,583 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/data/48d89de26/02bd9fdca3a249c591d8ad40cc91e6fb [2025-02-08 02:46:27,585 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-02-08 02:46:27,586 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-02-08 02:46:27,588 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-02-08 02:46:27,588 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-02-08 02:46:27,592 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-02-08 02:46:27,593 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:46:27" (1/1) ... [2025-02-08 02:46:27,593 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5f121fe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:27, skipping insertion in model container [2025-02-08 02:46:27,593 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.02 02:46:27" (1/1) ... [2025-02-08 02:46:27,700 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-02-08 02:46:29,645 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i[247200,247213] [2025-02-08 02:46:29,756 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:46:29,771 INFO L200 MainTranslator]: Completed pre-run [2025-02-08 02:46:29,868 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [6103] [2025-02-08 02:46:29,870 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2,%1\n\tsbb %0,%0": "=r" (oldbit), "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [6111-6112] [2025-02-08 02:46:29,871 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [6119] [2025-02-08 02:46:29,878 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/ldvuser/exper_fp/inst/current/envs/linux-3.10-rc1.tar/linux-3.10-rc1/arch/x86/include/asm/paravirt.h"), "i" (824), "i" (12UL)); [6179-6180] [2025-02-08 02:46:29,878 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring inline assembler instruction C: __asm__ volatile ("771:\n\tcall *%c2;\n772:\n.pushsection .parainstructions,\"a\"\n .balign 8 \n .quad 771b\n .byte %c1\n .byte 772b-771b\n .short %c3\n.popsection\n": "=a" (__eax): [paravirt_typenum] "i" (44UL), [paravirt_opptr] "i" (& pv_irq_ops.save_fl.func), [paravirt_clobber] "i" (1): "memory", "cc"); [6185-6187] [2025-02-08 02:46:30,059 WARN L250 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate-jdk21/releaseScripts/default/sv-benchmarks/c/ldv-consumption/linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i[247200,247213] [2025-02-08 02:46:30,077 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-02-08 02:46:30,134 INFO L204 MainTranslator]: Completed translation [2025-02-08 02:46:30,135 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30 WrapperNode [2025-02-08 02:46:30,136 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-02-08 02:46:30,137 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-02-08 02:46:30,137 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-02-08 02:46:30,137 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-02-08 02:46:30,143 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:30,215 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:30,347 INFO L138 Inliner]: procedures = 216, calls = 1507, calls flagged for inlining = 108, calls inlined = 97, statements flattened = 3386 [2025-02-08 02:46:30,348 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-02-08 02:46:30,348 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-02-08 02:46:30,348 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-02-08 02:46:30,348 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-02-08 02:46:30,358 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:30,358 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:30,381 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:30,966 INFO L175 MemorySlicer]: Split 587 memory accesses to 18 slices as follows [415, 2, 8, 2, 1, 3, 2, 3, 1, 8, 5, 1, 8, 1, 110, 5, 8, 4]. 71 percent of accesses are in the largest equivalence class. The 129 initializations are split as follows [0, 2, 0, 0, 0, 0, 0, 0, 0, 8, 0, 1, 0, 0, 110, 0, 8, 0]. The 239 writes are split as follows [231, 0, 2, 0, 0, 2, 0, 1, 0, 0, 0, 0, 1, 0, 0, 0, 0, 2]. [2025-02-08 02:46:30,970 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:30,970 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:31,149 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:31,165 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:31,205 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:31,226 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:31,268 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-02-08 02:46:31,270 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-02-08 02:46:31,271 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-02-08 02:46:31,271 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-02-08 02:46:31,272 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (1/1) ... [2025-02-08 02:46:31,278 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 [2025-02-08 02:46:31,291 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 [2025-02-08 02:46:31,307 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (exit command is (exit), workingDir is null) [2025-02-08 02:46:31,312 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Waiting until timeout for monitored process [2025-02-08 02:46:31,335 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab32 [2025-02-08 02:46:31,336 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab32 [2025-02-08 02:46:31,336 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_free_iso_urbs [2025-02-08 02:46:31,336 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_free_iso_urbs [2025-02-08 02:46:31,336 INFO L130 BoogieDeclarations]: Found specification of procedure usb_submit_urb [2025-02-08 02:46:31,336 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_submit_urb [2025-02-08 02:46:31,336 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#0 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#1 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#2 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#3 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#4 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#5 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#6 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#7 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#8 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#9 [2025-02-08 02:46:31,337 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#10 [2025-02-08 02:46:31,338 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#11 [2025-02-08 02:46:31,338 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#12 [2025-02-08 02:46:31,338 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#13 [2025-02-08 02:46:31,338 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#14 [2025-02-08 02:46:31,339 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#15 [2025-02-08 02:46:31,339 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#16 [2025-02-08 02:46:31,339 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$#17 [2025-02-08 02:46:31,339 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#0 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#1 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#2 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#3 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#4 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#5 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#6 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#7 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#8 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#9 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#10 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#11 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#12 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#13 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#14 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#15 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#16 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$#17 [2025-02-08 02:46:31,340 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2025-02-08 02:46:31,340 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_unregister_adapter [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_unregister_adapter [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_iso_mutex_of_ttusb_dec [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_iso_mutex_of_ttusb_dec [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_start_iso_xfer [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_start_iso_xfer [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_unlock_usb_mutex_of_ttusb_dec [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_unlock_usb_mutex_of_ttusb_dec [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_dmx_release [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_dmx_release [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2025-02-08 02:46:31,341 INFO L130 BoogieDeclarations]: Found specification of procedure input_event [2025-02-08 02:46:31,341 INFO L138 BoogieDeclarations]: Found implementation of procedure input_event [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2025-02-08 02:46:31,342 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#0 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#1 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#2 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#3 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#4 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#5 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#6 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#7 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#8 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#9 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#10 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#11 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#12 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#13 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#14 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#15 [2025-02-08 02:46:31,342 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#16 [2025-02-08 02:46:31,345 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$#17 [2025-02-08 02:46:31,345 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2025-02-08 02:46:31,345 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2025-02-08 02:46:31,345 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_interruptible [2025-02-08 02:46:31,345 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_interruptible [2025-02-08 02:46:31,345 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#0 [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#1 [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#2 [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#3 [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#4 [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#5 [2025-02-08 02:46:31,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#6 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#7 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#8 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#9 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#10 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#11 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#12 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#13 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#14 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#15 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#16 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$#17 [2025-02-08 02:46:31,347 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2025-02-08 02:46:31,347 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure __fswab16 [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure __fswab16 [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_intfdata [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_intfdata [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_set_model [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_set_model [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure input_report_key [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure input_report_key [2025-02-08 02:46:31,348 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_stop_iso_xfer [2025-02-08 02:46:31,348 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_stop_iso_xfer [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2025-02-08 02:46:31,349 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_filter_pes2ts_init [2025-02-08 02:46:31,349 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_filter_pes2ts_init [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#0 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#1 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#2 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#3 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#4 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#5 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#6 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#7 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#8 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#9 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#10 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#11 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#12 [2025-02-08 02:46:31,349 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#13 [2025-02-08 02:46:31,352 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#14 [2025-02-08 02:46:31,352 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#15 [2025-02-08 02:46:31,353 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#16 [2025-02-08 02:46:31,353 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int#17 [2025-02-08 02:46:31,355 INFO L130 BoogieDeclarations]: Found specification of procedure get_dma_ops [2025-02-08 02:46:31,355 INFO L138 BoogieDeclarations]: Found implementation of procedure get_dma_ops [2025-02-08 02:46:31,355 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2025-02-08 02:46:31,355 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2025-02-08 02:46:31,355 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#0 [2025-02-08 02:46:31,355 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#1 [2025-02-08 02:46:31,355 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#2 [2025-02-08 02:46:31,355 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#3 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#4 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#5 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#6 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#7 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#8 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#9 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#10 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#11 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#12 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#13 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#14 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#15 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#16 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int#17 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~X~$Pointer$~X~int~TO~int [2025-02-08 02:46:31,356 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~X~$Pointer$~X~int~TO~int [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure usb_bulk_msg [2025-02-08 02:46:31,356 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_bulk_msg [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#0 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#1 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#2 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#3 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#4 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#5 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#6 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#7 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#8 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#9 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#10 [2025-02-08 02:46:31,356 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#11 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#12 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#13 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#14 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#15 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#16 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure read~int#17 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#7 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#8 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#9 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#10 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#11 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#12 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#13 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#14 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#15 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#16 [2025-02-08 02:46:31,357 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy#17 [2025-02-08 02:46:31,357 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#0 [2025-02-08 02:46:31,357 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#1 [2025-02-08 02:46:31,357 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#2 [2025-02-08 02:46:31,357 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#3 [2025-02-08 02:46:31,358 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#4 [2025-02-08 02:46:31,358 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#5 [2025-02-08 02:46:31,358 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#6 [2025-02-08 02:46:31,358 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#7 [2025-02-08 02:46:31,358 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#8 [2025-02-08 02:46:31,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#9 [2025-02-08 02:46:31,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#10 [2025-02-08 02:46:31,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#11 [2025-02-08 02:46:31,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#12 [2025-02-08 02:46:31,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#13 [2025-02-08 02:46:31,361 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#14 [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#15 [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#16 [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy#17 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_send_command [2025-02-08 02:46:31,362 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_send_command [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#0 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#1 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#2 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#3 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#4 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#5 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#6 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#7 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#8 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#9 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#10 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#11 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#12 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#13 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#14 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#15 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#16 [2025-02-08 02:46:31,362 INFO L130 BoogieDeclarations]: Found specification of procedure write~int#17 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_setup_urbs [2025-02-08 02:46:31,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_setup_urbs [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure input_sync [2025-02-08 02:46:31,363 INFO L138 BoogieDeclarations]: Found implementation of procedure input_sync [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2025-02-08 02:46:31,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_set_pids [2025-02-08 02:46:31,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_set_pids [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure ttusb_dec_exit_usb [2025-02-08 02:46:31,363 INFO L138 BoogieDeclarations]: Found implementation of procedure ttusb_dec_exit_usb [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#0 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#1 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#2 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#3 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#4 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#5 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#6 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#7 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#8 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#9 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#10 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#11 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#12 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#13 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#14 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#15 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#16 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$#17 [2025-02-08 02:46:31,363 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_mutex_lock_interruptible_iso_mutex_of_ttusb_dec [2025-02-08 02:46:31,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_mutex_lock_interruptible_iso_mutex_of_ttusb_dec [2025-02-08 02:46:31,364 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2025-02-08 02:46:31,364 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2025-02-08 02:46:31,364 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2025-02-08 02:46:31,364 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2025-02-08 02:46:31,364 INFO L130 BoogieDeclarations]: Found specification of procedure dvb_dmxdev_release [2025-02-08 02:46:31,364 INFO L138 BoogieDeclarations]: Found implementation of procedure dvb_dmxdev_release [2025-02-08 02:46:31,368 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-02-08 02:46:31,369 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-02-08 02:46:31,369 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-02-08 02:46:31,370 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-02-08 02:46:32,126 INFO L257 CfgBuilder]: Building ICFG [2025-02-08 02:46:32,129 INFO L287 CfgBuilder]: Building CFG for each procedure with an implementation [2025-02-08 02:46:32,478 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7823-1: SUMMARY for call usb_free_urb(#t~mem605#1.base, #t~mem605#1.offset); srcloc: null [2025-02-08 02:46:32,478 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7823: ~i~6#1 := 1 + ~i~6#1; [2025-02-08 02:46:32,478 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7823-2: call #t~mem605#1.base, #t~mem605#1.offset := read~$Pointer$#0(~dec#1.base, 2241 + ~dec#1.offset + 8 * ~i~6#1, 8); [2025-02-08 02:46:32,478 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6391: havoc warn_slowpath_null_~arg0#1.base, warn_slowpath_null_~arg0#1.offset, warn_slowpath_null_~arg1#1;havoc warn_slowpath_null_#in~arg0#1.base, warn_slowpath_null_#in~arg0#1.offset, warn_slowpath_null_#in~arg1#1;assume { :end_inline_warn_slowpath_null } true; [2025-02-08 02:46:32,478 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6195: havoc arch_irqs_disabled_flags_#t~bitwise25#1; [2025-02-08 02:46:32,613 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9401: havoc #t~nondet880; [2025-02-08 02:46:32,773 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9397: havoc #t~nondet879; [2025-02-08 02:46:32,780 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9304: havoc #t~nondet866; [2025-02-08 02:46:32,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6257: havoc ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:46:32,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6248: assume 0 == assume_abort_if_not_~cond#1;assume false; [2025-02-08 02:46:32,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6248: assume !(0 == assume_abort_if_not_~cond#1); [2025-02-08 02:46:32,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6259: havoc assume_abort_if_not_~cond#1;havoc assume_abort_if_not_#in~cond#1;assume { :end_inline_assume_abort_if_not } true;havoc #t~ret45#1;#res#1.base, #res#1.offset := ~res~0#1.base, ~res~0#1.offset; [2025-02-08 02:46:32,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6259-1: #t~ret45#1 := ldv_is_err_#res#1;havoc ldv_is_err_~ptr#1.base, ldv_is_err_~ptr#1.offset;havoc ldv_is_err_#in~ptr#1.base, ldv_is_err_#in~ptr#1.offset;assume { :end_inline_ldv_is_err } true;assume -9223372036854775808 <= #t~ret45#1 && #t~ret45#1 <= 9223372036854775807;assume { :begin_inline_assume_abort_if_not } true;assume_abort_if_not_#in~cond#1 := (if 0 == #t~ret45#1 then 1 else 0);havoc assume_abort_if_not_~cond#1;assume_abort_if_not_~cond#1 := assume_abort_if_not_#in~cond#1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7486: ~i~5#1 := ~i~5#1 - 1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7482: assume -2147483648 <= #t~ret519#1 && #t~ret519#1 <= 2147483647;havoc #t~ret519#1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8737-1: ldv_mutex_lock_interruptible_12_#res#1 := ldv_mutex_lock_interruptible_12_~ldv_func_res~3#1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7486-2: call #t~mem520#1.base, #t~mem520#1.offset := read~$Pointer$#0(~dec#1.base, 2241 + ~dec#1.offset + 8 * (-1 + ~i~5#1), 8); [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7486-1: SUMMARY for call usb_kill_urb(#t~mem520#1.base, #t~mem520#1.offset); srcloc: null [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7480-2: call #t~mem517#1.base, #t~mem517#1.offset := read~$Pointer$#0(~dec#1.base, 2241 + ~dec#1.offset + 8 * ~i~5#1, 8); [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7480-1: SUMMARY for call #t~ret518#1 := usb_submit_urb(#t~mem517#1.base, #t~mem517#1.offset, 32); srcloc: null [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7480: assume -2147483648 <= #t~ret518#1 && #t~ret518#1 <= 2147483647;~result~3#1 := #t~ret518#1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7482-1: SUMMARY for call #t~ret519#1 := printk(56, 0); srcloc: null [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7499: assume ~i~5#1 <= 3; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7499: assume !(~i~5#1 <= 3); [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8744: SUMMARY for call mutex_unlock(ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7493: havoc ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_13 } true;#res#1 := ~result~3#1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7489: assume 0 != ~i~5#1; [2025-02-08 02:46:32,872 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7489: assume !(0 != ~i~5#1);assume { :begin_inline_ldv_mutex_unlock_13 } true;ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset := ~dec#1.base, 2277 + ~dec#1.offset;havoc ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset;ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset := ldv_mutex_unlock_13_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_13_#in~ldv_func_arg1#1.offset; [2025-02-08 02:46:32,873 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7481: assume 0 != ~result~3#1; [2025-02-08 02:46:32,873 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7481: assume !(0 != ~result~3#1);~i~5#1 := 1 + ~i~5#1; [2025-02-08 02:46:32,873 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8743: SUMMARY for call ldv_mutex_unlock_iso_mutex_of_ttusb_dec(ldv_mutex_unlock_13_~ldv_func_arg1#1.base, ldv_mutex_unlock_13_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,406 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9340: havoc #t~nondet869; [2025-02-08 02:46:33,410 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9351: havoc #t~nondet871; [2025-02-08 02:46:33,437 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6267: havoc __kmalloc_#t~ret46#1.base, __kmalloc_#t~ret46#1.offset; [2025-02-08 02:46:33,472 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6126: havoc #t~bitwise1; [2025-02-08 02:46:33,475 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9244: havoc #t~nondet856; [2025-02-08 02:46:33,482 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9264: havoc dev_set_drvdata_#t~nondet859#1; [2025-02-08 02:46:33,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7412: assume ~i~4#1 <= 3; [2025-02-08 02:46:33,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7412: assume !(~i~4#1 <= 3); [2025-02-08 02:46:33,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7409-2: call #t~mem504#1.base, #t~mem504#1.offset := read~$Pointer$#0(~dec#1.base, 2241 + ~dec#1.offset + 8 * ~i~4#1, 8); [2025-02-08 02:46:33,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7409-1: SUMMARY for call usb_kill_urb(#t~mem504#1.base, #t~mem504#1.offset); srcloc: null [2025-02-08 02:46:33,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8716-1: ldv_mutex_lock_interruptible_10_#res#1 := ldv_mutex_lock_interruptible_10_~ldv_func_res~2#1; [2025-02-08 02:46:33,531 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7409: ~i~4#1 := 1 + ~i~4#1; [2025-02-08 02:46:33,535 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9380: havoc #t~ret877.base, #t~ret877.offset; [2025-02-08 02:46:33,552 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6306: havoc #t~mem65.base, #t~mem65.offset; [2025-02-08 02:46:33,625 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9384: havoc #t~nondet878; [2025-02-08 02:46:33,643 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6503: havoc #t~mem137;havoc #t~bitwise138; [2025-02-08 02:46:33,795 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6720: assume ~i~0#1 < #t~mem232#1;havoc #t~mem232#1; [2025-02-08 02:46:33,795 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6720: assume !(~i~0#1 < #t~mem232#1);havoc #t~mem232#1; [2025-02-08 02:46:33,795 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6683-1: SUMMARY for call #t~ret219#1 := printk(18, 0); srcloc: null [2025-02-08 02:46:33,795 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6683: assume -2147483648 <= #t~ret219#1 && #t~ret219#1 <= 2147483647;~i~0#1 := 1 + ~i~0#1; [2025-02-08 02:46:33,795 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8702: SUMMARY for call mutex_unlock(ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6679-1: SUMMARY for call #t~ret217#1 := printk(16, 0); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6679: assume -2147483648 <= #t~ret217#1 && #t~ret217#1 <= 2147483647;havoc #t~ret217#1;~i~0#1 := 0; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6712: assume 0 != ~debug~0; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6712: assume !(0 != ~debug~0); [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6683-2: call #t~mem218#1 := read~int#0(~b~0#1.base, ~b~0#1.offset + (if ~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~0#1 % 18446744073709551616 % 18446744073709551616 else ~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1); [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6642: call ULTIMATE.dealloc(~#actual_len~0#1.base, ~#actual_len~0#1.offset);havoc ~#actual_len~0#1.base, ~#actual_len~0#1.offset; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6675-1: SUMMARY for call #t~memcpy~res216#1.base, #t~memcpy~res216#1.offset := #Ultimate.C_memcpy#0(~b~0#1.base, 4 + ~b~0#1.offset, ~params#1.base, ~params#1.offset, ~__len~0#1); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6675: ~__ret~1#1.base, ~__ret~1#1.offset := #t~memcpy~res216#1.base, #t~memcpy~res216#1.offset;havoc #t~memcpy~res216#1.base, #t~memcpy~res216#1.offset; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6708: havoc ldv_mutex_unlock_8_~ldv_func_arg1#1.base, ldv_mutex_unlock_8_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_8_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_8_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_8 } true; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8694: SUMMARY for call mutex_unlock(ldv_mutex_unlock_8_~ldv_func_arg1#1.base, ldv_mutex_unlock_8_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6737-1: SUMMARY for call kfree(~b~0#1.base, ~b~0#1.offset); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6737: #res#1 := 0;call ULTIMATE.dealloc(~#actual_len~0#1.base, ~#actual_len~0#1.offset);havoc ~#actual_len~0#1.base, ~#actual_len~0#1.offset; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6733-1: SUMMARY for call #t~memcpy~res238#1.base, #t~memcpy~res238#1.offset := #Ultimate.C_memcpy#0(~cmd_result#1.base, ~cmd_result#1.offset, ~b~0#1.base, 4 + ~b~0#1.offset, ~__len___0~0#1); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6733: ~__ret___0~0#1.base, ~__ret___0~0#1.offset := #t~memcpy~res238#1.base, #t~memcpy~res238#1.offset;havoc #t~memcpy~res238#1.base, #t~memcpy~res238#1.offset; [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8686: SUMMARY for call mutex_unlock(ldv_mutex_unlock_7_~ldv_func_arg1#1.base, ldv_mutex_unlock_7_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,796 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6696-1: SUMMARY for call #t~ret224#1 := printk(20, 0); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6663: SUMMARY for call kfree(~b~0#1.base, ~b~0#1.offset); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6696: assume -2147483648 <= #t~ret224#1 && #t~ret224#1 <= 2147483647;havoc #t~ret224#1;assume { :begin_inline_ldv_mutex_unlock_7 } true;ldv_mutex_unlock_7_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_7_#in~ldv_func_arg1#1.offset := ~dec#1.base, 2045 + ~dec#1.offset;havoc ldv_mutex_unlock_7_~ldv_func_arg1#1.base, ldv_mutex_unlock_7_~ldv_func_arg1#1.offset;ldv_mutex_unlock_7_~ldv_func_arg1#1.base, ldv_mutex_unlock_7_~ldv_func_arg1#1.offset := ldv_mutex_unlock_7_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_7_#in~ldv_func_arg1#1.offset; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8678: #t~ret212#1 := ldv_mutex_lock_interruptible_6_#res#1;havoc ldv_mutex_lock_interruptible_6_#t~ret830#1, ldv_mutex_lock_interruptible_6_#t~ret831#1, ldv_mutex_lock_interruptible_6_~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_6_~ldv_func_arg1#1.offset, ldv_mutex_lock_interruptible_6_~ldv_func_res~1#1, ldv_mutex_lock_interruptible_6_~tmp~34#1, ldv_mutex_lock_interruptible_6_~tmp___0~15#1;havoc ldv_mutex_lock_interruptible_6_#in~ldv_func_arg1#1.base, ldv_mutex_lock_interruptible_6_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_lock_interruptible_6 } true;assume -2147483648 <= #t~ret212#1 && #t~ret212#1 <= 2147483647;~result~0#1 := #t~ret212#1;havoc #t~ret212#1; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6717-2: call #t~mem230#1 := read~int#0(~b~0#1.base, ~b~0#1.offset + (if ~i~0#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~i~0#1 % 18446744073709551616 % 18446744073709551616 else ~i~0#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1); [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6717-1: SUMMARY for call #t~ret231#1 := printk(26, 0); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6717: assume -2147483648 <= #t~ret231#1 && #t~ret231#1 <= 2147483647;~i~0#1 := 1 + ~i~0#1;call #t~mem232#1 := read~int#8(~#actual_len~0#1.base, ~#actual_len~0#1.offset, 4); [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6713-1: SUMMARY for call #t~ret229#1 := printk(24, 0); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6713: assume -2147483648 <= #t~ret229#1 && #t~ret229#1 <= 2147483647;havoc #t~ret229#1;~i~0#1 := 0; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6709-1: SUMMARY for call kfree(~b~0#1.base, ~b~0#1.offset); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6709: #res#1 := ~result~0#1;call ULTIMATE.dealloc(~#actual_len~0#1.base, ~#actual_len~0#1.offset);havoc ~#actual_len~0#1.base, ~#actual_len~0#1.offset; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6705: assume 0 != ~result~0#1; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6705: assume !(0 != ~result~0#1); [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6664-1: SUMMARY for call #t~ret213#1 := printk(14, 0); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6664: assume -2147483648 <= #t~ret213#1 && #t~ret213#1 <= 2147483647;havoc #t~ret213#1;#res#1 := ~result~0#1;call ULTIMATE.dealloc(~#actual_len~0#1.base, ~#actual_len~0#1.offset);havoc ~#actual_len~0#1.base, ~#actual_len~0#1.offset; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6693-2: call #t~mem221#1.base, #t~mem221#1.offset := read~$Pointer$#0(~dec#1.base, 2012 + ~dec#1.offset, 8);call #t~mem222#1 := read~int#0(~dec#1.base, 2021 + ~dec#1.offset, 4); [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6693-1: SUMMARY for call #t~ret223#1 := usb_bulk_msg(#t~mem221#1.base, #t~mem221#1.offset, #t~mem222#1, ~b~0#1.base, ~b~0#1.offset, 64, ~#actual_len~0#1.base, ~#actual_len~0#1.offset, 1000); srcloc: null [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6693: assume -2147483648 <= #t~ret223#1 && #t~ret223#1 <= 2147483647;~result~0#1 := #t~ret223#1;havoc #t~mem221#1.base, #t~mem221#1.offset;havoc #t~mem222#1;havoc #t~ret223#1; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8679-1: ldv_mutex_lock_interruptible_6_#res#1 := ldv_mutex_lock_interruptible_6_~ldv_func_res~1#1; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6706: assume -2147483648 <= #t~ret228#1 && #t~ret228#1 <= 2147483647;havoc #t~ret228#1;assume { :begin_inline_ldv_mutex_unlock_8 } true;ldv_mutex_unlock_8_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_8_#in~ldv_func_arg1#1.offset := ~dec#1.base, 2045 + ~dec#1.offset;havoc ldv_mutex_unlock_8_~ldv_func_arg1#1.base, ldv_mutex_unlock_8_~ldv_func_arg1#1.offset;ldv_mutex_unlock_8_~ldv_func_arg1#1.base, ldv_mutex_unlock_8_~ldv_func_arg1#1.offset := ldv_mutex_unlock_8_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_8_#in~ldv_func_arg1#1.offset; [2025-02-08 02:46:33,797 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6706-1: SUMMARY for call #t~ret228#1 := printk(22, 0); srcloc: null [2025-02-08 02:46:33,798 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6673: assume 0 != (~params#1.base + ~params#1.offset) % 18446744073709551616;~__len~0#1 := ~param_length#1; [2025-02-08 02:46:33,801 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6673: assume !(0 != (~params#1.base + ~params#1.offset) % 18446744073709551616); [2025-02-08 02:46:33,801 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6731-1: assume #t~short236#1;call #t~mem235#1 := read~int#0(~b~0#1.base, 3 + ~b~0#1.offset, 1);#t~short236#1 := 0 != #t~mem235#1 % 256 % 4294967296; [2025-02-08 02:46:33,801 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6731-1: assume !#t~short236#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6698: havoc ldv_mutex_unlock_7_~ldv_func_arg1#1.base, ldv_mutex_unlock_7_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_7_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_7_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_7 } true; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6731: assume #t~short236#1;havoc #t~mem235#1;havoc #t~short236#1;call #t~mem237#1 := read~int#0(~b~0#1.base, 3 + ~b~0#1.offset, 1);~__len___0~0#1 := #t~mem237#1 % 256;havoc #t~mem237#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6731: assume !#t~short236#1;havoc #t~mem235#1;havoc #t~short236#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6727: assume 0 != (~result_length#1.base + ~result_length#1.offset) % 18446744073709551616;call #t~mem234#1 := read~int#0(~b~0#1.base, 3 + ~b~0#1.offset, 1);call write~int#7((if #t~mem234#1 % 256 % 4294967296 <= 2147483647 then #t~mem234#1 % 256 % 4294967296 else #t~mem234#1 % 256 % 4294967296 - 4294967296), ~result_length#1.base, ~result_length#1.offset, 4);havoc #t~mem234#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6727: assume !(0 != (~result_length#1.base + ~result_length#1.offset) % 18446744073709551616); [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6731-2: #t~short236#1 := 0 != (~cmd_result#1.base + ~cmd_result#1.offset) % 18446744073709551616; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6690: assume -2147483648 <= #t~ret220#1 && #t~ret220#1 <= 2147483647;havoc #t~ret220#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8701: SUMMARY for call ldv_mutex_unlock_usb_mutex_of_ttusb_dec(ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6686: assume 4 + ~param_length#1 > ~i~0#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6686: assume !(4 + ~param_length#1 > ~i~0#1); [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6690-1: SUMMARY for call #t~ret220#1 := printk(19, 0); srcloc: null [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8693: SUMMARY for call ldv_mutex_unlock_usb_mutex_of_ttusb_dec(ldv_mutex_unlock_8_~ldv_func_arg1#1.base, ldv_mutex_unlock_8_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6678: assume 0 != ~debug~0; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6678: assume !(0 != ~debug~0); [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6703-1: SUMMARY for call #t~ret227#1 := usb_bulk_msg(#t~mem225#1.base, #t~mem225#1.offset, #t~mem226#1, ~b~0#1.base, ~b~0#1.offset, 64, ~#actual_len~0#1.base, ~#actual_len~0#1.offset, 1000); srcloc: null [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8685: SUMMARY for call ldv_mutex_unlock_usb_mutex_of_ttusb_dec(ldv_mutex_unlock_7_~ldv_func_arg1#1.base, ldv_mutex_unlock_7_~ldv_func_arg1#1.offset); srcloc: null [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6736-1: assume { :begin_inline_ldv_mutex_unlock_9 } true;ldv_mutex_unlock_9_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_9_#in~ldv_func_arg1#1.offset := ~dec#1.base, 2045 + ~dec#1.offset;havoc ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset;ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset := ldv_mutex_unlock_9_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_9_#in~ldv_func_arg1#1.offset; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6703: assume -2147483648 <= #t~ret227#1 && #t~ret227#1 <= 2147483647;~result~0#1 := #t~ret227#1;havoc #t~mem225#1.base, #t~mem225#1.offset;havoc #t~mem226#1;havoc #t~ret227#1; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6736: havoc ldv_mutex_unlock_9_~ldv_func_arg1#1.base, ldv_mutex_unlock_9_~ldv_func_arg1#1.offset;havoc ldv_mutex_unlock_9_#in~ldv_func_arg1#1.base, ldv_mutex_unlock_9_#in~ldv_func_arg1#1.offset;assume { :end_inline_ldv_mutex_unlock_9 } true; [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6699-1: SUMMARY for call kfree(~b~0#1.base, ~b~0#1.offset); srcloc: null [2025-02-08 02:46:33,802 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6699: #res#1 := ~result~0#1;call ULTIMATE.dealloc(~#actual_len~0#1.base, ~#actual_len~0#1.offset);havoc ~#actual_len~0#1.base, ~#actual_len~0#1.offset; [2025-02-08 02:46:33,803 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6662: assume 0 != ~result~0#1; [2025-02-08 02:46:33,803 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6662: assume !(0 != ~result~0#1);call write~int#0(170, ~b~0#1.base, ~b~0#1.offset, 1);call #t~mem214#1 := read~int#0(~dec#1.base, 2020 + ~dec#1.offset, 1);call write~int#0(1 + (if #t~mem214#1 % 256 % 4294967296 <= 2147483647 then #t~mem214#1 % 256 % 4294967296 else #t~mem214#1 % 256 % 4294967296 - 4294967296), ~dec#1.base, 2020 + ~dec#1.offset, 1);havoc #t~mem214#1;call #t~mem215#1 := read~int#0(~dec#1.base, 2020 + ~dec#1.offset, 1);call write~int#0(#t~mem215#1, ~b~0#1.base, 1 + ~b~0#1.offset, 1);havoc #t~mem215#1;call write~int#0(~command#1, ~b~0#1.base, 2 + ~b~0#1.offset, 1);call write~int#0(~param_length#1, ~b~0#1.base, 3 + ~b~0#1.offset, 1); [2025-02-08 02:46:33,803 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8677: ldv_mutex_lock_interruptible_6_#t~ret831#1 := ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_#res#1;havoc ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_#t~nondet851#1, ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_~lock#1.base, ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_~lock#1.offset, ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_~nondetermined~9#1;havoc ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_#in~lock#1.base, ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec_#in~lock#1.offset;assume { :end_inline_ldv_mutex_lock_interruptible_usb_mutex_of_ttusb_dec } true;assume -2147483648 <= ldv_mutex_lock_interruptible_6_#t~ret831#1 && ldv_mutex_lock_interruptible_6_#t~ret831#1 <= 2147483647;ldv_mutex_lock_interruptible_6_~tmp___0~15#1 := ldv_mutex_lock_interruptible_6_#t~ret831#1;havoc ldv_mutex_lock_interruptible_6_#t~ret831#1;ldv_mutex_lock_interruptible_6_#res#1 := ldv_mutex_lock_interruptible_6_~tmp___0~15#1; [2025-02-08 02:46:33,803 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6695: assume 0 != ~result~0#1; [2025-02-08 02:46:33,803 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6695: assume !(0 != ~result~0#1);call #t~mem225#1.base, #t~mem225#1.offset := read~$Pointer$#0(~dec#1.base, 2012 + ~dec#1.offset, 8);call #t~mem226#1 := read~int#0(~dec#1.base, 2025 + ~dec#1.offset, 4); [2025-02-08 02:46:33,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6724-1: SUMMARY for call #t~ret233#1 := printk(27, 0); srcloc: null [2025-02-08 02:46:33,804 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6724: assume -2147483648 <= #t~ret233#1 && #t~ret233#1 <= 2147483647;havoc #t~ret233#1; [2025-02-08 02:46:33,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7357: ~frame_offset~0 := 0;call #t~mem496.base, #t~mem496.offset := read~$Pointer$#0(~dec.base, 2241 + ~dec.offset + 8 * ~i~3, 8);~urb~0.base, ~urb~0.offset := #t~mem496.base, #t~mem496.offset;havoc #t~mem496.base, #t~mem496.offset;call #t~mem497.base, #t~mem497.offset := read~$Pointer$#0(~dec.base, 2012 + ~dec.offset, 8);call write~$Pointer$#0(#t~mem497.base, #t~mem497.offset, ~urb~0.base, 64 + ~urb~0.offset, 8);havoc #t~mem497.base, #t~mem497.offset;call write~$Pointer$#0(~dec.base, ~dec.offset, ~urb~0.base, 168 + ~urb~0.offset, 8);call write~$Pointer$#0(#funAddr~ttusb_dec_process_urb.base, #funAddr~ttusb_dec_process_urb.offset, ~urb~0.base, 176 + ~urb~0.offset, 8);call #t~mem498 := read~int#0(~dec.base, 2029 + ~dec.offset, 4);call write~int#0(#t~mem498, ~urb~0.base, 80 + ~urb~0.offset, 4);havoc #t~mem498;call write~int#0(2, ~urb~0.base, 92 + ~urb~0.offset, 4);call write~int#0(1, ~urb~0.base, 160 + ~urb~0.offset, 4);call write~int#0(4, ~urb~0.base, 156 + ~urb~0.offset, 4);call write~int#0(3584, ~urb~0.base, 128 + ~urb~0.offset, 4);call #t~mem499.base, #t~mem499.offset := read~$Pointer$#0(~dec.base, 2225 + ~dec.offset, 8);call write~$Pointer$#0(#t~mem499.base, #t~mem499.offset + (if ~buffer_offset~0 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ~buffer_offset~0 % 18446744073709551616 % 18446744073709551616 else ~buffer_offset~0 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), ~urb~0.base, 96 + ~urb~0.offset, 8);havoc #t~mem499.base, #t~mem499.offset;~buffer_offset~0 := 3584 + ~buffer_offset~0;~j~0 := 0; [2025-02-08 02:46:33,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7370: assume ~j~0 <= 3; [2025-02-08 02:46:33,929 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7370: assume !(~j~0 <= 3);~i~3 := 1 + ~i~3; [2025-02-08 02:46:33,930 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7372: call write~int#0(~frame_offset~0, ~urb~0.base, 184 + ~urb~0.offset + 16 * ~j~0, 4);call write~int#0(896, ~urb~0.base, 4 + (184 + ~urb~0.offset + 16 * ~j~0), 4);~frame_offset~0 := 896 + ~frame_offset~0;~j~0 := 1 + ~j~0; [2025-02-08 02:46:34,300 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6832: call ULTIMATE.dealloc(~#b~1.base, ~#b~1.offset);havoc ~#b~1.base, ~#b~1.offset;call ULTIMATE.dealloc(~#pcr~0.base, ~#pcr~0.offset);havoc ~#pcr~0.base, ~#pcr~0.offset;call ULTIMATE.dealloc(~#audio~0.base, ~#audio~0.offset);havoc ~#audio~0.base, ~#audio~0.offset;call ULTIMATE.dealloc(~#video~0.base, ~#video~0.offset);havoc ~#video~0.base, ~#video~0.offset; [2025-02-08 02:46:34,317 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8352-2: call #t~mem779.base, #t~mem779.offset := read~$Pointer$#0(~dec.base, 2241 + ~dec.offset + 8 * ~i~10, 8); [2025-02-08 02:46:34,318 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8352-1: SUMMARY for call usb_kill_urb(#t~mem779.base, #t~mem779.offset); srcloc: null [2025-02-08 02:46:34,318 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8352: ~i~10 := 1 + ~i~10; [2025-02-08 02:46:34,420 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6431: havoc __tasklet_schedule_~arg0#1.base, __tasklet_schedule_~arg0#1.offset;havoc __tasklet_schedule_#in~arg0#1.base, __tasklet_schedule_#in~arg0#1.offset;assume { :end_inline___tasklet_schedule } true; [2025-02-08 02:46:34,420 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7315: SUMMARY for call list_add_tail(ttusb_dec_process_urb_~frame~1#1.base, 900 + ttusb_dec_process_urb_~frame~1#1.offset, ttusb_dec_process_urb_~dec~4#1.base, 15185 + ttusb_dec_process_urb_~dec~4#1.offset); srcloc: null [2025-02-08 02:46:34,420 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7311-1: SUMMARY for call ttusb_dec_process_urb_#t~memcpy~res487#1.base, ttusb_dec_process_urb_#t~memcpy~res487#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_process_urb_~frame~1#1.base, ttusb_dec_process_urb_~frame~1#1.offset, ttusb_dec_process_urb_~b~2#1.base, ttusb_dec_process_urb_~b~2#1.offset, ttusb_dec_process_urb_~__len~5#1); srcloc: null [2025-02-08 02:46:34,420 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7311: ttusb_dec_process_urb_~__ret~6#1.base, ttusb_dec_process_urb_~__ret~6#1.offset := ttusb_dec_process_urb_#t~memcpy~res487#1.base, ttusb_dec_process_urb_#t~memcpy~res487#1.offset;havoc ttusb_dec_process_urb_#t~memcpy~res487#1.base, ttusb_dec_process_urb_#t~memcpy~res487#1.offset;call write~int#0(ttusb_dec_process_urb_~length~0#1, ttusb_dec_process_urb_~frame~1#1.base, 896 + ttusb_dec_process_urb_~frame~1#1.offset, 4); [2025-02-08 02:46:34,420 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7307-1: SUMMARY for call ttusb_dec_process_urb_#t~ret486#1.base, ttusb_dec_process_urb_#t~ret486#1.offset := kmalloc(920, 32); srcloc: null [2025-02-08 02:46:34,420 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7307: ttusb_dec_process_urb_~tmp___0~6#1.base, ttusb_dec_process_urb_~tmp___0~6#1.offset := ttusb_dec_process_urb_#t~ret486#1.base, ttusb_dec_process_urb_#t~ret486#1.offset;havoc ttusb_dec_process_urb_#t~ret486#1.base, ttusb_dec_process_urb_#t~ret486#1.offset;ttusb_dec_process_urb_~frame~1#1.base, ttusb_dec_process_urb_~frame~1#1.offset := ttusb_dec_process_urb_~tmp___0~6#1.base, ttusb_dec_process_urb_~tmp___0~6#1.offset; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: havoc ttusb_dec_handle_irq_#t~mem182#1.base, ttusb_dec_handle_irq_#t~mem182#1.offset, ttusb_dec_handle_irq_#t~mem183#1.base, ttusb_dec_handle_irq_#t~mem183#1.offset, ttusb_dec_handle_irq_#t~mem184#1, ttusb_dec_handle_irq_#t~switch185#1, ttusb_dec_handle_irq_#t~mem186#1, ttusb_dec_handle_irq_#t~ret187#1, ttusb_dec_handle_irq_#t~mem188#1, ttusb_dec_handle_irq_#t~ret189#1, ttusb_dec_handle_irq_#t~mem190#1, ttusb_dec_handle_irq_#t~mem191#1, ttusb_dec_handle_irq_#t~short192#1, ttusb_dec_handle_irq_#t~mem193#1, ttusb_dec_handle_irq_#t~ret194#1, ttusb_dec_handle_irq_#t~mem195#1.base, ttusb_dec_handle_irq_#t~mem195#1.offset, ttusb_dec_handle_irq_#t~mem196#1, ttusb_dec_handle_irq_#t~mem197#1, ttusb_dec_handle_irq_#t~mem198#1.base, ttusb_dec_handle_irq_#t~mem198#1.offset, ttusb_dec_handle_irq_#t~mem199#1.base, ttusb_dec_handle_irq_#t~mem199#1.offset, ttusb_dec_handle_irq_#t~mem200#1, ttusb_dec_handle_irq_#t~mem201#1, ttusb_dec_handle_irq_#t~mem202#1.base, ttusb_dec_handle_irq_#t~mem202#1.offset, ttusb_dec_handle_irq_#t~ret203#1, ttusb_dec_handle_irq_#t~ret204#1, ttusb_dec_handle_irq_~urb#1.base, ttusb_dec_handle_irq_~urb#1.offset, ttusb_dec_handle_irq_~dec~0#1.base, ttusb_dec_handle_irq_~dec~0#1.offset, ttusb_dec_handle_irq_~buffer~0#1.base, ttusb_dec_handle_irq_~buffer~0#1.offset, ttusb_dec_handle_irq_~retval~0#1;havoc ttusb_dec_handle_irq_#in~urb#1.base, ttusb_dec_handle_irq_#in~urb#1.offset;assume { :end_inline_ttusb_dec_handle_irq } true; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: havoc ttusb_dec_process_urb_#t~mem481#1.base, ttusb_dec_process_urb_#t~mem481#1.offset, ttusb_dec_process_urb_#t~mem482#1, ttusb_dec_process_urb_#t~mem483#1.base, ttusb_dec_process_urb_#t~mem483#1.offset, ttusb_dec_process_urb_#t~mem484#1, ttusb_dec_process_urb_#t~mem485#1, ttusb_dec_process_urb_#t~ret486#1.base, ttusb_dec_process_urb_#t~ret486#1.offset, ttusb_dec_process_urb_#t~memcpy~res487#1.base, ttusb_dec_process_urb_#t~memcpy~res487#1.offset, ttusb_dec_process_urb_#t~ret488#1.base, ttusb_dec_process_urb_#t~ret488#1.offset, ttusb_dec_process_urb_#t~ret489#1, ttusb_dec_process_urb_#t~mem490#1, ttusb_dec_process_urb_#t~mem491#1, ttusb_dec_process_urb_#t~ret492#1, ttusb_dec_process_urb_#t~mem493#1, ttusb_dec_process_urb_#t~ret494#1, ttusb_dec_process_urb_~urb#1.base, ttusb_dec_process_urb_~urb#1.offset, ttusb_dec_process_urb_~dec~4#1.base, ttusb_dec_process_urb_~dec~4#1.offset, ttusb_dec_process_urb_~i~2#1, ttusb_dec_process_urb_~d~0#1.base, ttusb_dec_process_urb_~d~0#1.offset, ttusb_dec_process_urb_~b~2#1.base, ttusb_dec_process_urb_~b~2#1.offset, ttusb_dec_process_urb_~length~0#1, ttusb_dec_process_urb_~frame~1#1.base, ttusb_dec_process_urb_~frame~1#1.offset, ttusb_dec_process_urb_~flags~2#1, ttusb_dec_process_urb_~__len~5#1, ttusb_dec_process_urb_~__ret~6#1.base, ttusb_dec_process_urb_~__ret~6#1.offset, ttusb_dec_process_urb_~tmp~18#1.base, ttusb_dec_process_urb_~tmp~18#1.offset, ttusb_dec_process_urb_~tmp___0~6#1.base, ttusb_dec_process_urb_~tmp___0~6#1.offset;havoc ttusb_dec_process_urb_#in~urb#1.base, ttusb_dec_process_urb_#in~urb#1.offset;assume { :end_inline_ttusb_dec_process_urb } true; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7320: ttusb_dec_process_urb_~i~2#1 := 1 + ttusb_dec_process_urb_~i~2#1; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7316-1: SUMMARY for call spin_unlock_irqrestore(ttusb_dec_process_urb_~dec~4#1.base, 15237 + ttusb_dec_process_urb_~dec~4#1.offset, ttusb_dec_process_urb_~flags~2#1); srcloc: null [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7316: assume { :begin_inline_tasklet_schedule } true;tasklet_schedule_#in~t#1.base, tasklet_schedule_#in~t#1.offset := ttusb_dec_process_urb_~dec~4#1.base, 15201 + ttusb_dec_process_urb_~dec~4#1.offset;havoc tasklet_schedule_#t~ret97#1, tasklet_schedule_~t#1.base, tasklet_schedule_~t#1.offset, tasklet_schedule_~tmp~8#1;tasklet_schedule_~t#1.base, tasklet_schedule_~t#1.offset := tasklet_schedule_#in~t#1.base, tasklet_schedule_#in~t#1.offset;havoc tasklet_schedule_~tmp~8#1;assume { :begin_inline_test_and_set_bit } true;test_and_set_bit_#in~nr#1, test_and_set_bit_#in~addr#1.base, test_and_set_bit_#in~addr#1.offset := 0, tasklet_schedule_~t#1.base, 8 + tasklet_schedule_~t#1.offset;havoc test_and_set_bit_#res#1;havoc test_and_set_bit_~nr#1, test_and_set_bit_~addr#1.base, test_and_set_bit_~addr#1.offset, test_and_set_bit_~oldbit~0#1;test_and_set_bit_~nr#1 := test_and_set_bit_#in~nr#1;test_and_set_bit_~addr#1.base, test_and_set_bit_~addr#1.offset := test_and_set_bit_#in~addr#1.base, test_and_set_bit_#in~addr#1.offset;havoc test_and_set_bit_~oldbit~0#1;test_and_set_bit_#res#1 := test_and_set_bit_~oldbit~0#1; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7304: ttusb_dec_process_urb_~d~0#1.base, ttusb_dec_process_urb_~d~0#1.offset := ttusb_dec_process_urb_~urb#1.base, 184 + ttusb_dec_process_urb_~urb#1.offset + 16 * (if ttusb_dec_process_urb_~i~2#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ttusb_dec_process_urb_~i~2#1 % 18446744073709551616 % 18446744073709551616 else ttusb_dec_process_urb_~i~2#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);call ttusb_dec_process_urb_#t~mem483#1.base, ttusb_dec_process_urb_#t~mem483#1.offset := read~$Pointer$#0(ttusb_dec_process_urb_~urb#1.base, 96 + ttusb_dec_process_urb_~urb#1.offset, 8);call ttusb_dec_process_urb_#t~mem484#1 := read~int#0(ttusb_dec_process_urb_~d~0#1.base, ttusb_dec_process_urb_~d~0#1.offset, 4);ttusb_dec_process_urb_~b~2#1.base, ttusb_dec_process_urb_~b~2#1.offset := ttusb_dec_process_urb_#t~mem483#1.base, ttusb_dec_process_urb_#t~mem483#1.offset + (if ttusb_dec_process_urb_#t~mem484#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ttusb_dec_process_urb_#t~mem484#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 else ttusb_dec_process_urb_#t~mem484#1 % 4294967296 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);havoc ttusb_dec_process_urb_#t~mem483#1.base, ttusb_dec_process_urb_#t~mem483#1.offset;havoc ttusb_dec_process_urb_#t~mem484#1;call ttusb_dec_process_urb_#t~mem485#1 := read~int#0(ttusb_dec_process_urb_~d~0#1.base, 8 + ttusb_dec_process_urb_~d~0#1.offset, 4);ttusb_dec_process_urb_~length~0#1 := (if ttusb_dec_process_urb_#t~mem485#1 % 4294967296 % 4294967296 <= 2147483647 then ttusb_dec_process_urb_#t~mem485#1 % 4294967296 % 4294967296 else ttusb_dec_process_urb_#t~mem485#1 % 4294967296 % 4294967296 - 4294967296);havoc ttusb_dec_process_urb_#t~mem485#1; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint ##fun~$Pointer$~TO~VOIDFINAL: assume true; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6429: tasklet_schedule_#t~ret97#1 := test_and_set_bit_#res#1;havoc test_and_set_bit_~nr#1, test_and_set_bit_~addr#1.base, test_and_set_bit_~addr#1.offset, test_and_set_bit_~oldbit~0#1;havoc test_and_set_bit_#in~nr#1, test_and_set_bit_#in~addr#1.base, test_and_set_bit_#in~addr#1.offset;assume { :end_inline_test_and_set_bit } true;assume -2147483648 <= tasklet_schedule_#t~ret97#1 && tasklet_schedule_#t~ret97#1 <= 2147483647;tasklet_schedule_~tmp~8#1 := tasklet_schedule_#t~ret97#1;havoc tasklet_schedule_#t~ret97#1; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7317: havoc tasklet_schedule_#t~ret97#1, tasklet_schedule_~t#1.base, tasklet_schedule_~t#1.offset, tasklet_schedule_~tmp~8#1;havoc tasklet_schedule_#in~t#1.base, tasklet_schedule_#in~t#1.offset;assume { :end_inline_tasklet_schedule } true; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7313-1: SUMMARY for call ttusb_dec_process_urb_#t~ret488#1.base, ttusb_dec_process_urb_#t~ret488#1.offset := spinlock_check(ttusb_dec_process_urb_~dec~4#1.base, 15237 + ttusb_dec_process_urb_~dec~4#1.offset); srcloc: null [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7313: ttusb_dec_process_urb_~tmp~18#1.base, ttusb_dec_process_urb_~tmp~18#1.offset := ttusb_dec_process_urb_#t~ret488#1.base, ttusb_dec_process_urb_#t~ret488#1.offset;havoc ttusb_dec_process_urb_#t~ret488#1.base, ttusb_dec_process_urb_#t~ret488#1.offset; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7309: assume 0 != (ttusb_dec_process_urb_~frame~1#1.base + ttusb_dec_process_urb_~frame~1#1.offset) % 18446744073709551616;ttusb_dec_process_urb_~__len~5#1 := ttusb_dec_process_urb_~length~0#1; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7309: assume !(0 != (ttusb_dec_process_urb_~frame~1#1.base + ttusb_dec_process_urb_~frame~1#1.offset) % 18446744073709551616); [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6430: assume 0 == tasklet_schedule_~tmp~8#1;assume { :begin_inline___tasklet_schedule } true;__tasklet_schedule_#in~arg0#1.base, __tasklet_schedule_#in~arg0#1.offset := tasklet_schedule_~t#1.base, tasklet_schedule_~t#1.offset;havoc __tasklet_schedule_~arg0#1.base, __tasklet_schedule_~arg0#1.offset;__tasklet_schedule_~arg0#1.base, __tasklet_schedule_~arg0#1.offset := __tasklet_schedule_#in~arg0#1.base, __tasklet_schedule_#in~arg0#1.offset; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6430: assume !(0 == tasklet_schedule_~tmp~8#1); [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7322: assume ttusb_dec_process_urb_~i~2#1 <= 3; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7322: assume !(ttusb_dec_process_urb_~i~2#1 <= 3); [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7314: ttusb_dec_process_urb_~flags~2#1 := ttusb_dec_process_urb_#t~ret489#1;havoc ttusb_dec_process_urb_#t~ret489#1; [2025-02-08 02:46:34,421 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7314-1: SUMMARY for call ttusb_dec_process_urb_#t~ret489#1 := _raw_spin_lock_irqsave(ttusb_dec_process_urb_~tmp~18#1.base, ttusb_dec_process_urb_~tmp~18#1.offset); srcloc: null [2025-02-08 02:46:34,447 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1: #res#1 := #t~funptrres883#1;havoc #t~funptrres883#1;havoc #t~ret884#1;havoc #t~ret885#1; [2025-02-08 02:46:34,447 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: #t~ret885#1 := ttusb_dec_video_pes2ts_cb_#res#1;havoc ttusb_dec_video_pes2ts_cb_#t~mem278#1.base, ttusb_dec_video_pes2ts_cb_#t~mem278#1.offset, ttusb_dec_video_pes2ts_cb_#t~mem279#1.base, ttusb_dec_video_pes2ts_cb_#t~mem279#1.offset, ttusb_dec_video_pes2ts_cb_#t~mem280#1.base, ttusb_dec_video_pes2ts_cb_#t~mem280#1.offset, ttusb_dec_video_pes2ts_cb_#t~mem281#1.base, ttusb_dec_video_pes2ts_cb_#t~mem281#1.offset, ttusb_dec_video_pes2ts_cb_#t~mem282#1.base, ttusb_dec_video_pes2ts_cb_#t~mem282#1.offset, ttusb_dec_video_pes2ts_cb_#t~ret283#1, ttusb_dec_video_pes2ts_cb_~priv#1.base, ttusb_dec_video_pes2ts_cb_~priv#1.offset, ttusb_dec_video_pes2ts_cb_~data#1.base, ttusb_dec_video_pes2ts_cb_~data#1.offset, ttusb_dec_video_pes2ts_cb_~dec~2#1.base, ttusb_dec_video_pes2ts_cb_~dec~2#1.offset;havoc ttusb_dec_video_pes2ts_cb_#in~priv#1.base, ttusb_dec_video_pes2ts_cb_#in~priv#1.offset, ttusb_dec_video_pes2ts_cb_#in~data#1.base, ttusb_dec_video_pes2ts_cb_#in~data#1.offset;assume { :end_inline_ttusb_dec_video_pes2ts_cb } true;assume -2147483648 <= #t~ret885#1 && #t~ret885#1 <= 2147483647;#t~funptrres883#1 := #t~ret885#1; [2025-02-08 02:46:34,447 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-2: #t~ret884#1 := ttusb_dec_audio_pes2ts_cb_#res#1;havoc ttusb_dec_audio_pes2ts_cb_#t~mem263#1.base, ttusb_dec_audio_pes2ts_cb_#t~mem263#1.offset, ttusb_dec_audio_pes2ts_cb_#t~mem264#1.base, ttusb_dec_audio_pes2ts_cb_#t~mem264#1.offset, ttusb_dec_audio_pes2ts_cb_#t~mem265#1.base, ttusb_dec_audio_pes2ts_cb_#t~mem265#1.offset, ttusb_dec_audio_pes2ts_cb_#t~mem266#1.base, ttusb_dec_audio_pes2ts_cb_#t~mem266#1.offset, ttusb_dec_audio_pes2ts_cb_#t~mem267#1.base, ttusb_dec_audio_pes2ts_cb_#t~mem267#1.offset, ttusb_dec_audio_pes2ts_cb_#t~ret268#1, ttusb_dec_audio_pes2ts_cb_~priv#1.base, ttusb_dec_audio_pes2ts_cb_~priv#1.offset, ttusb_dec_audio_pes2ts_cb_~data#1.base, ttusb_dec_audio_pes2ts_cb_~data#1.offset, ttusb_dec_audio_pes2ts_cb_~dec~1#1.base, ttusb_dec_audio_pes2ts_cb_~dec~1#1.offset;havoc ttusb_dec_audio_pes2ts_cb_#in~priv#1.base, ttusb_dec_audio_pes2ts_cb_#in~priv#1.offset, ttusb_dec_audio_pes2ts_cb_#in~data#1.base, ttusb_dec_audio_pes2ts_cb_#in~data#1.offset;assume { :end_inline_ttusb_dec_audio_pes2ts_cb } true;assume -2147483648 <= #t~ret884#1 && #t~ret884#1 <= 2147483647;#t~funptrres883#1 := #t~ret884#1; [2025-02-08 02:46:34,447 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint ##fun~$Pointer$~X~$Pointer$~TO~intFINAL: assume true; [2025-02-08 02:46:44,117 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8095-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret680#1 := __fswab32(ttusb_dec_boot_dsp_~firmware_size~0#1); srcloc: null [2025-02-08 02:46:44,118 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8095: ttusb_dec_boot_dsp_~tmp___3~2#1 := ttusb_dec_boot_dsp_#t~ret680#1;havoc ttusb_dec_boot_dsp_#t~ret680#1;call write~int#0(ttusb_dec_boot_dsp_~tmp___3~2#1, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset, 4);ttusb_dec_boot_dsp_~__len___1~4#1 := 4; [2025-02-08 02:46:44,119 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8161: assume ttusb_dec_boot_dsp_~i~9#1 % 18446744073709551616 < ttusb_dec_boot_dsp_~firmware_size~0#1 % 18446744073709551616; [2025-02-08 02:46:44,119 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8161: assume !(ttusb_dec_boot_dsp_~i~9#1 % 18446744073709551616 < ttusb_dec_boot_dsp_~firmware_size~0#1 % 18446744073709551616); [2025-02-08 02:46:44,119 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7963-1: SUMMARY for call __mutex_init(ttusb_dec_init_usb_~dec#1.base, 2277 + ttusb_dec_init_usb_~dec#1.offset, 95, 0, ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset); srcloc: null [2025-02-08 02:46:44,119 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7963: call ttusb_dec_init_usb_#t~mem628#1.base, ttusb_dec_init_usb_#t~mem628#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6774: ttusb_dec_get_stb_state_~__ret~2#1.base, ttusb_dec_get_stb_state_~__ret~2#1.offset := ttusb_dec_get_stb_state_#t~memcpy~res243#1.base, ttusb_dec_get_stb_state_#t~memcpy~res243#1.offset;havoc ttusb_dec_get_stb_state_#t~memcpy~res243#1.base, ttusb_dec_get_stb_state_#t~memcpy~res243#1.offset; [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6774-1: SUMMARY for call ttusb_dec_get_stb_state_#t~memcpy~res243#1.base, ttusb_dec_get_stb_state_#t~memcpy~res243#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~__len~1#1); srcloc: null [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6510: havoc input_allocate_device_#t~ret146#1.base, input_allocate_device_#t~ret146#1.offset;ttusb_init_rc_#t~ret619#1.base, ttusb_init_rc_#t~ret619#1.offset := input_allocate_device_#res#1.base, input_allocate_device_#res#1.offset;havoc input_allocate_device_#t~ret146#1.base, input_allocate_device_#t~ret146#1.offset;assume { :end_inline_input_allocate_device } true;ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset := ttusb_init_rc_#t~ret619#1.base, ttusb_init_rc_#t~ret619#1.offset;havoc ttusb_init_rc_#t~ret619#1.base, ttusb_init_rc_#t~ret619#1.offset; [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7435-1: SUMMARY for call ttusb_dec_set_interface_#t~ret509#1 := ttusb_dec_send_command(ttusb_dec_set_interface_~dec#1.base, ttusb_dec_set_interface_~dec#1.offset, 128, 1, ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6510-3: SUMMARY for call input_allocate_device_#t~ret146#1.base, input_allocate_device_#t~ret146#1.offset := kzalloc(1930, 208); srcloc: null [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7435: assume -2147483648 <= ttusb_dec_set_interface_#t~ret509#1 && ttusb_dec_set_interface_#t~ret509#1 <= 2147483647;ttusb_dec_set_interface_~result~2#1 := ttusb_dec_set_interface_#t~ret509#1; [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6510-2: input_allocate_device_#res#1.base, input_allocate_device_#res#1.offset := input_allocate_device_#t~ret146#1.base, input_allocate_device_#t~ret146#1.offset;havoc input_allocate_device_#t~ret146#1.base, input_allocate_device_#t~ret146#1.offset; [2025-02-08 02:46:44,120 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7898: assume 0 == (ttusb_init_rc_~input_dev~0#1.base + ttusb_init_rc_~input_dev~0#1.offset) % 18446744073709551616;ttusb_init_rc_#res#1 := -12;call ULTIMATE.dealloc(ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset);havoc ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset; [2025-02-08 02:46:44,124 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7898: assume !(0 == (ttusb_init_rc_~input_dev~0#1.base + ttusb_init_rc_~input_dev~0#1.offset) % 18446744073709551616);call write~$Pointer$#0(87, 0, ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset, 8);call write~$Pointer$#0(ttusb_init_rc_~dec#1.base, 15413 + ttusb_init_rc_~dec#1.offset, ttusb_init_rc_~input_dev~0#1.base, 8 + ttusb_init_rc_~input_dev~0#1.offset, 8);call write~int#0(2, ttusb_init_rc_~input_dev~0#1.base, 40 + ttusb_init_rc_~input_dev~0#1.offset, 8);call write~int#0(2, ttusb_init_rc_~input_dev~0#1.base, 216 + ttusb_init_rc_~input_dev~0#1.offset, 4);call write~int#0(26, ttusb_init_rc_~input_dev~0#1.base, 212 + ttusb_init_rc_~input_dev~0#1.offset, 4);call write~$Pointer$#0(~#rc_keys~0.base, ~#rc_keys~0.offset, ttusb_init_rc_~input_dev~0#1.base, 220 + ttusb_init_rc_~input_dev~0#1.offset, 8);ttusb_init_rc_~i~8#1 := 0; [2025-02-08 02:46:44,124 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7964-1: SUMMARY for call ttusb_dec_init_usb_#t~ret629#1 := __create_pipe(ttusb_dec_init_usb_#t~mem628#1.base, ttusb_dec_init_usb_#t~mem628#1.offset, 3); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7964: ttusb_dec_init_usb_~tmp~27#1 := ttusb_dec_init_usb_#t~ret629#1;havoc ttusb_dec_init_usb_#t~mem628#1.base, ttusb_dec_init_usb_#t~mem628#1.offset;havoc ttusb_dec_init_usb_#t~ret629#1;call write~int#0(3221225472 + ttusb_dec_init_usb_~tmp~27#1 - (ttusb_dec_init_usb_~tmp~27#1 - ttusb_dec_init_usb_~tmp~27#1 % 1073741824), ttusb_dec_init_usb_~dec#1.base, 2021 + ttusb_dec_init_usb_~dec#1.offset, 4);call ttusb_dec_init_usb_#t~mem630#1.base, ttusb_dec_init_usb_#t~mem630#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8493: assume 0 != ttusb_dec_probe_~tmp___2~6#1; [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8493: assume !(0 != ttusb_dec_probe_~tmp___2~6#1); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7568-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret541#1 := printk(66, 0); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7568: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret541#1 && ttusb_dec_start_ts_feed_#t~ret541#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret541#1; [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6776-2: call ttusb_dec_get_stb_state_#t~mem244#1 := read~int#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, 4); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6776-1: SUMMARY for call ttusb_dec_get_stb_state_#t~ret245#1 := __fswab32(ttusb_dec_get_stb_state_#t~mem244#1); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6776: ttusb_dec_get_stb_state_~tmp___0~3#1 := ttusb_dec_get_stb_state_#t~ret245#1;havoc ttusb_dec_get_stb_state_#t~mem244#1;havoc ttusb_dec_get_stb_state_#t~ret245#1;call write~int#5(ttusb_dec_get_stb_state_~tmp___0~3#1, ttusb_dec_get_stb_state_~mode#1.base, ttusb_dec_get_stb_state_~mode#1.offset, 4); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8494-1: SUMMARY for call ttusb_dec_probe_#t~ret807#1 := printk(135, 0); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8494: assume -2147483648 <= ttusb_dec_probe_#t~ret807#1 && ttusb_dec_probe_#t~ret807#1 <= 2147483647;havoc ttusb_dec_probe_#t~ret807#1;call ttusb_dec_probe_#t~mem808#1.base, ttusb_dec_probe_#t~mem808#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8);call ttusb_dec_probe_#t~mem809#1.base, ttusb_dec_probe_#t~mem809#1.offset := read~$Pointer$#0(ttusb_dec_probe_#t~mem808#1.base, 176 + ttusb_dec_probe_#t~mem808#1.offset, 8); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8098: assume ttusb_dec_boot_dsp_~__len___1~4#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8098: assume !(ttusb_dec_boot_dsp_~__len___1~4#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7966: ttusb_dec_init_usb_~tmp___0~10#1 := ttusb_dec_init_usb_#t~ret631#1;havoc ttusb_dec_init_usb_#t~mem630#1.base, ttusb_dec_init_usb_#t~mem630#1.offset;havoc ttusb_dec_init_usb_#t~ret631#1; [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7966-1: SUMMARY for call ttusb_dec_init_usb_#t~ret631#1 := __create_pipe(ttusb_dec_init_usb_#t~mem630#1.base, ttusb_dec_init_usb_#t~mem630#1.offset, 4); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8495: assume 0 != (ttusb_dec_probe_#t~mem809#1.base + ttusb_dec_probe_#t~mem809#1.offset) % 18446744073709551616;havoc ttusb_dec_probe_#t~mem808#1.base, ttusb_dec_probe_#t~mem808#1.offset;havoc ttusb_dec_probe_#t~mem809#1.base, ttusb_dec_probe_#t~mem809#1.offset;call ttusb_dec_probe_#t~mem813#1.base, ttusb_dec_probe_#t~mem813#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8);call ttusb_dec_probe_#t~mem814#1.base, ttusb_dec_probe_#t~mem814#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8);call ttusb_dec_probe_#t~mem815#1.base, ttusb_dec_probe_#t~mem815#1.offset := read~$Pointer$#0(ttusb_dec_probe_#t~mem814#1.base, 176 + ttusb_dec_probe_#t~mem814#1.offset, 8); [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8495: assume !(0 != (ttusb_dec_probe_#t~mem809#1.base + ttusb_dec_probe_#t~mem809#1.offset) % 18446744073709551616);havoc ttusb_dec_probe_#t~mem808#1.base, ttusb_dec_probe_#t~mem808#1.offset;havoc ttusb_dec_probe_#t~mem809#1.base, ttusb_dec_probe_#t~mem809#1.offset; [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8099-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res681#1.base, ttusb_dec_boot_dsp_#t~memcpy~res681#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset, ttusb_dec_boot_dsp_~__len___1~4#1); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8099: ttusb_dec_boot_dsp_~__ret___1~4#1.base, ttusb_dec_boot_dsp_~__ret___1~4#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res681#1.base, ttusb_dec_boot_dsp_#t~memcpy~res681#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res681#1.base, ttusb_dec_boot_dsp_#t~memcpy~res681#1.offset; [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8165-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret698#1 := ttusb_dec_send_command(ttusb_dec_boot_dsp_~dec#1.base, ttusb_dec_boot_dsp_~dec#1.offset, 67, 1, ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,125 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8165: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret698#1 && ttusb_dec_boot_dsp_#t~ret698#1 <= 2147483647;ttusb_dec_boot_dsp_~result~6#1 := ttusb_dec_boot_dsp_#t~ret698#1;havoc ttusb_dec_boot_dsp_#t~ret698#1;call ttusb_dec_boot_dsp_#t~mem699#1.base, ttusb_dec_boot_dsp_#t~mem699#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967-1: [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967: call write~int#0(ttusb_dec_init_usb_#t~bitwise632#1, ttusb_dec_init_usb_~dec#1.base, 2025 + ttusb_dec_init_usb_~dec#1.offset, 4);havoc ttusb_dec_init_usb_#t~bitwise632#1;call ttusb_dec_init_usb_#t~mem633#1.base, ttusb_dec_init_usb_#t~mem633#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967-4: assume 0 == ttusb_dec_init_usb_~tmp___0~10#1 % 4294967296 || 3221225600 == ttusb_dec_init_usb_~tmp___0~10#1 % 4294967296;ttusb_dec_init_usb_#t~bitwise632#1 := 3221225600; [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967-4: assume !(0 == ttusb_dec_init_usb_~tmp___0~10#1 % 4294967296 || 3221225600 == ttusb_dec_init_usb_~tmp___0~10#1 % 4294967296); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967-3: assume false;ttusb_dec_init_usb_#t~bitwise632#1 := ttusb_dec_init_usb_~tmp___0~10#1; [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967-3: assume !false; [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7967-2: havoc ttusb_dec_init_usb_#t~bitwise632#1;assume (ttusb_dec_init_usb_#t~bitwise632#1 % 4294967296 >= ttusb_dec_init_usb_~tmp___0~10#1 % 4294967296 && ttusb_dec_init_usb_#t~bitwise632#1 % 4294967296 >= 3221225600) && ttusb_dec_init_usb_#t~bitwise632#1 % 4294967296 <= 3221225600 + ttusb_dec_init_usb_~tmp___0~10#1 % 4294967296; [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7571: call ttusb_dec_start_ts_feed_#t~mem542#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 2);call write~int#0(ttusb_dec_start_ts_feed_#t~mem542#1, ttusb_dec_start_ts_feed_~dec~5#1.base, 1972 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 2);call ttusb_dec_start_ts_feed_#t~mem543#1.base, ttusb_dec_start_ts_feed_#t~mem543#1.offset := read~$Pointer$#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4428 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 8);call write~$Pointer$#0(ttusb_dec_start_ts_feed_#t~mem543#1.base, ttusb_dec_start_ts_feed_#t~mem543#1.offset, ttusb_dec_start_ts_feed_~dec~5#1.base, 15305 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 8); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8298: assume 0 != ~debug~0; [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8298: assume !(0 != ~debug~0); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8496: havoc ttusb_dec_probe_#t~mem813#1.base, ttusb_dec_probe_#t~mem813#1.offset;havoc ttusb_dec_probe_#t~mem814#1.base, ttusb_dec_probe_#t~mem814#1.offset;havoc ttusb_dec_probe_#t~mem815#1.base, ttusb_dec_probe_#t~mem815#1.offset; [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8496-1: SUMMARY for call ##fun~$Pointer$~TO~VOID(ttusb_dec_probe_#t~mem813#1.base, ttusb_dec_probe_#t~mem813#1.offset, ttusb_dec_probe_#t~mem815#1.base, ttusb_dec_probe_#t~mem815#1.offset); srcloc: null [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6316: assume 0 == dma_alloc_coherent_mask_~dma_mask~0#1 % 18446744073709551616;dma_alloc_coherent_mask_~dma_mask~0#1 := (if 0 != (if dma_alloc_coherent_mask_~gfp#1 % 4294967296 % 4294967296 <= 2147483647 then dma_alloc_coherent_mask_~gfp#1 % 4294967296 % 4294967296 else dma_alloc_coherent_mask_~gfp#1 % 4294967296 % 4294967296 - 4294967296) % 2 then 16777215 else 4294967295); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6316: assume !(0 == dma_alloc_coherent_mask_~dma_mask~0#1 % 18446744073709551616); [2025-02-08 02:46:44,126 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8166: havoc ttusb_dec_boot_dsp_#t~mem699#1.base, ttusb_dec_boot_dsp_#t~mem699#1.offset; [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9289: havoc dvb_net_init_#t~nondet863#1;ttusb_dec_init_dvb_#t~ret746#1 := dvb_net_init_#res#1;havoc dvb_net_init_#t~nondet863#1, dvb_net_init_~arg0#1.base, dvb_net_init_~arg0#1.offset, dvb_net_init_~arg1#1.base, dvb_net_init_~arg1#1.offset, dvb_net_init_~arg2#1.base, dvb_net_init_~arg2#1.offset;havoc dvb_net_init_#in~arg0#1.base, dvb_net_init_#in~arg0#1.offset, dvb_net_init_#in~arg1#1.base, dvb_net_init_#in~arg1#1.offset, dvb_net_init_#in~arg2#1.base, dvb_net_init_#in~arg2#1.offset;assume { :end_inline_dvb_net_init } true;assume -2147483648 <= ttusb_dec_init_dvb_#t~ret746#1 && ttusb_dec_init_dvb_#t~ret746#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret746#1;ttusb_dec_init_dvb_#res#1 := 0; [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8166-1: SUMMARY for call release_firmware(ttusb_dec_boot_dsp_#t~mem699#1.base, ttusb_dec_boot_dsp_#t~mem699#1.offset); srcloc: null [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7968-1: SUMMARY for call ttusb_dec_init_usb_#t~ret634#1 := __create_pipe(ttusb_dec_init_usb_#t~mem633#1.base, ttusb_dec_init_usb_#t~mem633#1.offset, 8); srcloc: null [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7968: ttusb_dec_init_usb_~tmp___1~7#1 := ttusb_dec_init_usb_#t~ret634#1;havoc ttusb_dec_init_usb_#t~mem633#1.base, ttusb_dec_init_usb_#t~mem633#1.offset;havoc ttusb_dec_init_usb_#t~ret634#1; [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7704-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret572#1.base, ttusb_dec_start_sec_feed_#t~ret572#1.offset := spinlock_check(ttusb_dec_start_sec_feed_~dec~6#1.base, 15337 + ttusb_dec_start_sec_feed_~dec~6#1.offset); srcloc: null [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7704: ttusb_dec_start_sec_feed_~tmp___1~6#1.base, ttusb_dec_start_sec_feed_~tmp___1~6#1.offset := ttusb_dec_start_sec_feed_#t~ret572#1.base, ttusb_dec_start_sec_feed_#t~ret572#1.offset;havoc ttusb_dec_start_sec_feed_#t~ret572#1.base, ttusb_dec_start_sec_feed_#t~ret572#1.offset; [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7440-1: SUMMARY for call ttusb_dec_set_interface_#t~ret511#1 := usb_set_interface(ttusb_dec_set_interface_#t~mem510#1.base, ttusb_dec_set_interface_#t~mem510#1.offset, 0, 8); srcloc: null [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7440: assume -2147483648 <= ttusb_dec_set_interface_#t~ret511#1 && ttusb_dec_set_interface_#t~ret511#1 <= 2147483647;ttusb_dec_set_interface_~result~2#1 := ttusb_dec_set_interface_#t~ret511#1; [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8299-1: SUMMARY for call ttusb_dec_exit_dvb_#t~ret747#1 := printk(123, 0); srcloc: null [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8299: assume -2147483648 <= ttusb_dec_exit_dvb_#t~ret747#1 && ttusb_dec_exit_dvb_#t~ret747#1 <= 2147483647;havoc ttusb_dec_exit_dvb_#t~ret747#1; [2025-02-08 02:46:44,127 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8167-1: SUMMARY for call kfree(ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset); srcloc: null [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8167: ttusb_dec_boot_dsp_#res#1 := ttusb_dec_boot_dsp_~result~6#1;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8101-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res682#1.base, ttusb_dec_boot_dsp_#t~memcpy~res682#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset, ttusb_dec_boot_dsp_~__len___1~4#1); srcloc: null [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8101: ttusb_dec_boot_dsp_~__ret___1~4#1.base, ttusb_dec_boot_dsp_~__ret___1~4#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res682#1.base, ttusb_dec_boot_dsp_#t~memcpy~res682#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res682#1.base, ttusb_dec_boot_dsp_#t~memcpy~res682#1.offset; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969-3: assume false;ttusb_dec_init_usb_#t~bitwise635#1 := ttusb_dec_init_usb_~tmp___1~7#1; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969-3: assume !false; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969-2: havoc ttusb_dec_init_usb_#t~bitwise635#1;assume (ttusb_dec_init_usb_#t~bitwise635#1 % 4294967296 >= ttusb_dec_init_usb_~tmp___1~7#1 % 4294967296 && ttusb_dec_init_usb_#t~bitwise635#1 % 4294967296 >= 128) && ttusb_dec_init_usb_#t~bitwise635#1 % 4294967296 <= 128 + ttusb_dec_init_usb_~tmp___1~7#1 % 4294967296; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969-1: [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969: call write~int#0(ttusb_dec_init_usb_#t~bitwise635#1, ttusb_dec_init_usb_~dec#1.base, 2029 + ttusb_dec_init_usb_~dec#1.offset, 4);havoc ttusb_dec_init_usb_#t~bitwise635#1;call ttusb_dec_init_usb_#t~mem636#1.base, ttusb_dec_init_usb_#t~mem636#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7771: call ULTIMATE.dealloc(ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset);havoc ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset;ttusb_dec_stop_feed_#t~ret603#1 := ttusb_dec_stop_sec_feed_#res#1;havoc ttusb_dec_stop_sec_feed_#t~mem591#1.base, ttusb_dec_stop_sec_feed_#t~mem591#1.offset, ttusb_dec_stop_sec_feed_#t~mem592#1.base, ttusb_dec_stop_sec_feed_#t~mem592#1.offset, ttusb_dec_stop_sec_feed_#t~mem593#1.base, ttusb_dec_stop_sec_feed_#t~mem593#1.offset, ttusb_dec_stop_sec_feed_#t~mem594#1, ttusb_dec_stop_sec_feed_#t~ret595#1.base, ttusb_dec_stop_sec_feed_#t~ret595#1.offset, ttusb_dec_stop_sec_feed_#t~ret596#1, ttusb_dec_stop_sec_feed_#t~ret597#1, ttusb_dec_stop_sec_feed_#t~mem598#1, ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.offset, ttusb_dec_stop_sec_feed_~dec~8#1.base, ttusb_dec_stop_sec_feed_~dec~8#1.offset, ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset, ttusb_dec_stop_sec_feed_~finfo~2#1.base, ttusb_dec_stop_sec_feed_~finfo~2#1.offset, ttusb_dec_stop_sec_feed_~flags~4#1, ttusb_dec_stop_sec_feed_~tmp~24#1.base, ttusb_dec_stop_sec_feed_~tmp~24#1.offset;havoc ttusb_dec_stop_sec_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_sec_feed_#in~dvbdmxfeed#1.offset;assume { :end_inline_ttusb_dec_stop_sec_feed } true;assume -2147483648 <= ttusb_dec_stop_feed_#t~ret603#1 && ttusb_dec_stop_feed_#t~ret603#1 <= 2147483647;ttusb_dec_stop_feed_~tmp___0~9#1 := ttusb_dec_stop_feed_#t~ret603#1;ttusb_dec_stop_feed_#res#1 := ttusb_dec_stop_feed_~tmp___0~9#1; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6780: assume 0 != (ttusb_dec_get_stb_state_~model#1.base + ttusb_dec_get_stb_state_~model#1.offset) % 18446744073709551616;ttusb_dec_get_stb_state_~__len___0~1#1 := 4; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6780: assume !(0 != (ttusb_dec_get_stb_state_~model#1.base + ttusb_dec_get_stb_state_~model#1.offset) % 18446744073709551616); [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969-4: assume 0 == ttusb_dec_init_usb_~tmp___1~7#1 % 4294967296 || 128 == ttusb_dec_init_usb_~tmp___1~7#1 % 4294967296;ttusb_dec_init_usb_#t~bitwise635#1 := 128; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7969-4: assume !(0 == ttusb_dec_init_usb_~tmp___1~7#1 % 4294967296 || 128 == ttusb_dec_init_usb_~tmp___1~7#1 % 4294967296); [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7705-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret573#1 := _raw_spin_lock_irqsave(ttusb_dec_start_sec_feed_~tmp___1~6#1.base, ttusb_dec_start_sec_feed_~tmp___1~6#1.offset); srcloc: null [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7705: ttusb_dec_start_sec_feed_~flags~3#1 := ttusb_dec_start_sec_feed_#t~ret573#1;havoc ttusb_dec_start_sec_feed_#t~ret573#1; [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7573: SUMMARY for call ttusb_dec_set_pids(ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset); srcloc: null [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7970: call write~int#0(ttusb_dec_init_usb_#t~ret637#1, ttusb_dec_init_usb_~dec#1.base, 2033 + ttusb_dec_init_usb_~dec#1.offset, 4);havoc ttusb_dec_init_usb_#t~mem636#1.base, ttusb_dec_init_usb_#t~mem636#1.offset;havoc ttusb_dec_init_usb_#t~ret637#1;call ttusb_dec_init_usb_#t~mem638#1.base, ttusb_dec_init_usb_#t~mem638#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,128 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7970-1: SUMMARY for call ttusb_dec_init_usb_#t~ret637#1 := __create_pipe(ttusb_dec_init_usb_#t~mem636#1.base, ttusb_dec_init_usb_#t~mem636#1.offset, 7); srcloc: null [2025-02-08 02:46:44,130 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7706: SUMMARY for call list_add_tail(ttusb_dec_start_sec_feed_~finfo~1#1.base, 9 + ttusb_dec_start_sec_feed_~finfo~1#1.offset, ttusb_dec_start_sec_feed_~dec~6#1.base, 15321 + ttusb_dec_start_sec_feed_~dec~6#1.offset); srcloc: null [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8499: call write~$Pointer$#0(0, 0, ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7442: assume ttusb_dec_set_interface_#t~switch506#1;call ttusb_dec_set_interface_#t~mem512#1.base, ttusb_dec_set_interface_#t~mem512#1.offset := read~$Pointer$#0(ttusb_dec_set_interface_~dec#1.base, 2012 + ttusb_dec_set_interface_~dec#1.offset, 8); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7442: assume !ttusb_dec_set_interface_#t~switch506#1;havoc ttusb_dec_set_interface_#t~switch506#1;havoc ttusb_dec_set_interface_#t~mem507#1.base, ttusb_dec_set_interface_#t~mem507#1.offset;havoc ttusb_dec_set_interface_#t~ret508#1;havoc ttusb_dec_set_interface_#t~ret509#1;havoc ttusb_dec_set_interface_#t~mem510#1.base, ttusb_dec_set_interface_#t~mem510#1.offset;havoc ttusb_dec_set_interface_#t~ret511#1;havoc ttusb_dec_set_interface_#t~mem512#1.base, ttusb_dec_set_interface_#t~mem512#1.offset;havoc ttusb_dec_set_interface_#t~ret513#1;havoc ttusb_dec_set_interface_#t~switch506#1;havoc ttusb_dec_set_interface_#t~mem507#1.base, ttusb_dec_set_interface_#t~mem507#1.offset;havoc ttusb_dec_set_interface_#t~ret508#1;havoc ttusb_dec_set_interface_#t~ret509#1;havoc ttusb_dec_set_interface_#t~mem510#1.base, ttusb_dec_set_interface_#t~mem510#1.offset;havoc ttusb_dec_set_interface_#t~ret511#1;havoc ttusb_dec_set_interface_#t~mem512#1.base, ttusb_dec_set_interface_#t~mem512#1.offset;havoc ttusb_dec_set_interface_#t~ret513#1; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8235: assume 0 != ~debug~0; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8235: assume !(0 != ~debug~0); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9358: havoc request_firmware_#t~nondet872#1;ttusb_dec_boot_dsp_#t~ret661#1 := request_firmware_#res#1;havoc request_firmware_#t~nondet872#1, request_firmware_~arg0#1.base, request_firmware_~arg0#1.offset, request_firmware_~arg1#1.base, request_firmware_~arg1#1.offset, request_firmware_~arg2#1.base, request_firmware_~arg2#1.offset;havoc request_firmware_#in~arg0#1.base, request_firmware_#in~arg0#1.offset, request_firmware_#in~arg1#1.base, request_firmware_#in~arg1#1.offset, request_firmware_#in~arg2#1.base, request_firmware_#in~arg2#1.offset;assume { :end_inline_request_firmware } true;assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret661#1 && ttusb_dec_boot_dsp_#t~ret661#1 <= 2147483647;ttusb_dec_boot_dsp_~tmp___0~11#1 := ttusb_dec_boot_dsp_#t~ret661#1;havoc ttusb_dec_boot_dsp_#t~mem659#1.base, ttusb_dec_boot_dsp_#t~mem659#1.offset;havoc ttusb_dec_boot_dsp_#t~mem660#1.base, ttusb_dec_boot_dsp_#t~mem660#1.offset;havoc ttusb_dec_boot_dsp_#t~ret661#1; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7971-1: SUMMARY for call ttusb_dec_init_usb_#t~ret639#1 := __create_pipe(ttusb_dec_init_usb_#t~mem638#1.base, ttusb_dec_init_usb_#t~mem638#1.offset, 10); srcloc: null [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7971: ttusb_dec_init_usb_~tmp___2~4#1 := ttusb_dec_init_usb_#t~ret639#1;havoc ttusb_dec_init_usb_#t~mem638#1.base, ttusb_dec_init_usb_#t~mem638#1.offset;havoc ttusb_dec_init_usb_#t~ret639#1; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6782: assume ttusb_dec_get_stb_state_~__len___0~1#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6782: assume !(ttusb_dec_get_stb_state_~__len___0~1#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7839: assume 0 != ~debug~0; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7839: assume !(0 != ~debug~0); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7707-1: SUMMARY for call spin_unlock_irqrestore(ttusb_dec_start_sec_feed_~dec~6#1.base, 15337 + ttusb_dec_start_sec_feed_~dec~6#1.offset, ttusb_dec_start_sec_feed_~flags~3#1); srcloc: null [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7707: call write~$Pointer$#0(ttusb_dec_start_sec_feed_~finfo~1#1.base, ttusb_dec_start_sec_feed_~finfo~1#1.offset, ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, 4382 + ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, 8);call ttusb_dec_start_sec_feed_#t~mem574#1 := read~int#0(ttusb_dec_start_sec_feed_~dec~6#1.base, 8603 + ttusb_dec_start_sec_feed_~dec~6#1.offset, 4);call write~int#0(1 + ttusb_dec_start_sec_feed_#t~mem574#1, ttusb_dec_start_sec_feed_~dec~6#1.base, 8603 + ttusb_dec_start_sec_feed_~dec~6#1.offset, 4);havoc ttusb_dec_start_sec_feed_#t~mem574#1; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7575-1: assume ttusb_dec_start_ts_feed_#t~switch536#1;call ttusb_dec_start_ts_feed_#t~mem544#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 2);call write~int#0(ttusb_dec_start_ts_feed_#t~mem544#1, ttusb_dec_start_ts_feed_~dec~5#1.base, 1976 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 2); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7575-1: assume !ttusb_dec_start_ts_feed_#t~switch536#1;ttusb_dec_start_ts_feed_#t~switch536#1 := ttusb_dec_start_ts_feed_#t~switch536#1 || 4 == ttusb_dec_start_ts_feed_#t~mem535#1; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7575: assume 0 != ~debug~0; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7575: assume !(0 != ~debug~0); [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7443-1: SUMMARY for call ttusb_dec_set_interface_#t~ret513#1 := usb_set_interface(ttusb_dec_set_interface_#t~mem512#1.base, ttusb_dec_set_interface_#t~mem512#1.offset, 0, 1); srcloc: null [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7443: assume -2147483648 <= ttusb_dec_set_interface_#t~ret513#1 && ttusb_dec_set_interface_#t~ret513#1 <= 2147483647;ttusb_dec_set_interface_~result~2#1 := ttusb_dec_set_interface_#t~ret513#1; [2025-02-08 02:46:44,131 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8302: havoc dvb_net_release_~arg0#1.base, dvb_net_release_~arg0#1.offset;havoc dvb_net_release_#in~arg0#1.base, dvb_net_release_#in~arg0#1.offset;assume { :end_inline_dvb_net_release } true;call ttusb_dec_exit_dvb_#t~mem750#1.base, ttusb_dec_exit_dvb_#t~mem750#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 755 + ttusb_dec_exit_dvb_~dec#1.offset, 8);assume { :begin_inline_##fun~$Pointer$~TO~int } true;##fun~$Pointer$~TO~int_#in~749#1.base, ##fun~$Pointer$~TO~int_#in~749#1.offset, ##fun~$Pointer$~TO~int_#in~#fp#1.base, ##fun~$Pointer$~TO~int_#in~#fp#1.offset := ttusb_dec_exit_dvb_~dec#1.base, 727 + ttusb_dec_exit_dvb_~dec#1.offset, ttusb_dec_exit_dvb_#t~mem750#1.base, ttusb_dec_exit_dvb_#t~mem750#1.offset;havoc ##fun~$Pointer$~TO~int_#res#1;havoc ##fun~$Pointer$~TO~int_#~749#1.base, ##fun~$Pointer$~TO~int_#~749#1.offset, ##fun~$Pointer$~TO~int_#t~funptrres886#1, ##fun~$Pointer$~TO~int_#t~ret887#1, ##fun~$Pointer$~TO~int_#t~ret888#1;##fun~$Pointer$~TO~int_#~749#1.base, ##fun~$Pointer$~TO~int_#~749#1.offset := ##fun~$Pointer$~TO~int_#in~749#1.base, ##fun~$Pointer$~TO~int_#in~749#1.offset; [2025-02-08 02:46:44,132 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6320-1: dma_alloc_coherent_mask_#res#1 := dma_alloc_coherent_mask_~dma_mask~0#1; [2025-02-08 02:46:44,132 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8236-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret716#1 := printk(111, 0); srcloc: null [2025-02-08 02:46:44,132 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8236: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret716#1 && ttusb_dec_init_dvb_#t~ret716#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret716#1; [2025-02-08 02:46:44,132 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8302-1: assume { :begin_inline_dvb_net_release } true;dvb_net_release_#in~arg0#1.base, dvb_net_release_#in~arg0#1.offset := ttusb_dec_exit_dvb_~dec#1.base, 1671 + ttusb_dec_exit_dvb_~dec#1.offset;havoc dvb_net_release_~arg0#1.base, dvb_net_release_~arg0#1.offset;dvb_net_release_~arg0#1.base, dvb_net_release_~arg0#1.offset := dvb_net_release_#in~arg0#1.base, dvb_net_release_#in~arg0#1.offset; [2025-02-08 02:46:44,132 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8104-1: assume { :begin_inline_crc16 } true;crc16_#in~crc#1, crc16_#in~buf#1.base, crc16_#in~buf#1.offset, crc16_#in~len#1 := 65535, ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~firmware_size~0#1;havoc crc16_#res#1;havoc crc16_#t~mem205#1, crc16_#t~bitwise206#1, crc16_#t~bitwise207#1, crc16_#t~bitwise208#1, crc16_#t~bitwise209#1, crc16_~crc#1, crc16_~buf#1.base, crc16_~buf#1.offset, crc16_~len#1, crc16_~tmp~10#1, crc16_~tmp___0~2#1.base, crc16_~tmp___0~2#1.offset, crc16_~tmp___1~2#1;crc16_~crc#1 := crc16_#in~crc#1;crc16_~buf#1.base, crc16_~buf#1.offset := crc16_#in~buf#1.base, crc16_#in~buf#1.offset;crc16_~len#1 := crc16_#in~len#1;havoc crc16_~tmp~10#1;havoc crc16_~tmp___0~2#1.base, crc16_~tmp___0~2#1.offset;havoc crc16_~tmp___1~2#1; [2025-02-08 02:46:44,132 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8104: ttusb_dec_boot_dsp_#t~ret683#1 := crc16_#res#1;havoc crc16_#t~mem205#1, crc16_#t~bitwise206#1, crc16_#t~bitwise207#1, crc16_#t~bitwise208#1, crc16_#t~bitwise209#1, crc16_~crc#1, crc16_~buf#1.base, crc16_~buf#1.offset, crc16_~len#1, crc16_~tmp~10#1, crc16_~tmp___0~2#1.base, crc16_~tmp___0~2#1.offset, crc16_~tmp___1~2#1;havoc crc16_#in~crc#1, crc16_#in~buf#1.base, crc16_#in~buf#1.offset, crc16_#in~len#1;assume { :end_inline_crc16 } true;ttusb_dec_boot_dsp_~tmp___4~1#1 := ttusb_dec_boot_dsp_#t~ret683#1;havoc ttusb_dec_boot_dsp_#t~ret683#1;ttusb_dec_boot_dsp_~firmware_csum~0#1 := -1 - (if ttusb_dec_boot_dsp_~tmp___4~1#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_boot_dsp_~tmp___4~1#1 % 65536 % 4294967296 else ttusb_dec_boot_dsp_~tmp___4~1#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972-2: havoc ttusb_dec_init_usb_#t~bitwise640#1;assume (ttusb_dec_init_usb_#t~bitwise640#1 % 4294967296 >= ttusb_dec_init_usb_~tmp___2~4#1 % 4294967296 && ttusb_dec_init_usb_#t~bitwise640#1 % 4294967296 >= 1073741952) && ttusb_dec_init_usb_#t~bitwise640#1 % 4294967296 <= 1073741952 + ttusb_dec_init_usb_~tmp___2~4#1 % 4294967296; [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972-1: [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972: call write~int#0(ttusb_dec_init_usb_#t~bitwise640#1, ttusb_dec_init_usb_~dec#1.base, 2037 + ttusb_dec_init_usb_~dec#1.offset, 4);havoc ttusb_dec_init_usb_#t~bitwise640#1; [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6783-1: SUMMARY for call ttusb_dec_get_stb_state_#t~memcpy~res246#1.base, ttusb_dec_get_stb_state_#t~memcpy~res246#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, 4 + ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~__len___0~1#1); srcloc: null [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6783: ttusb_dec_get_stb_state_~__ret___0~1#1.base, ttusb_dec_get_stb_state_~__ret___0~1#1.offset := ttusb_dec_get_stb_state_#t~memcpy~res246#1.base, ttusb_dec_get_stb_state_#t~memcpy~res246#1.offset;havoc ttusb_dec_get_stb_state_#t~memcpy~res246#1.base, ttusb_dec_get_stb_state_#t~memcpy~res246#1.offset; [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7840-1: SUMMARY for call ttusb_dec_alloc_iso_urbs_#t~ret608#1 := printk(81, 0); srcloc: null [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7840: assume -2147483648 <= ttusb_dec_alloc_iso_urbs_#t~ret608#1 && ttusb_dec_alloc_iso_urbs_#t~ret608#1 <= 2147483647;havoc ttusb_dec_alloc_iso_urbs_#t~ret608#1; [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972-4: assume 0 == ttusb_dec_init_usb_~tmp___2~4#1 % 4294967296 || 1073741952 == ttusb_dec_init_usb_~tmp___2~4#1 % 4294967296;ttusb_dec_init_usb_#t~bitwise640#1 := 1073741952; [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972-4: assume !(0 == ttusb_dec_init_usb_~tmp___2~4#1 % 4294967296 || 1073741952 == ttusb_dec_init_usb_~tmp___2~4#1 % 4294967296); [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972-3: assume false;ttusb_dec_init_usb_#t~bitwise640#1 := ttusb_dec_init_usb_~tmp___2~4#1; [2025-02-08 02:46:44,135 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7972-3: assume !false; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8303: ttusb_dec_exit_dvb_#t~ret751#1 := ##fun~$Pointer$~TO~int_#res#1;havoc ##fun~$Pointer$~TO~int_#~749#1.base, ##fun~$Pointer$~TO~int_#~749#1.offset, ##fun~$Pointer$~TO~int_#t~funptrres886#1, ##fun~$Pointer$~TO~int_#t~ret887#1, ##fun~$Pointer$~TO~int_#t~ret888#1;havoc ##fun~$Pointer$~TO~int_#in~749#1.base, ##fun~$Pointer$~TO~int_#in~749#1.offset, ##fun~$Pointer$~TO~int_#in~#fp#1.base, ##fun~$Pointer$~TO~int_#in~#fp#1.offset;assume { :end_inline_##fun~$Pointer$~TO~int } true;assume -2147483648 <= ttusb_dec_exit_dvb_#t~ret751#1 && ttusb_dec_exit_dvb_#t~ret751#1 <= 2147483647;havoc ttusb_dec_exit_dvb_#t~mem750#1.base, ttusb_dec_exit_dvb_#t~mem750#1.offset;havoc ttusb_dec_exit_dvb_#t~ret751#1;call ttusb_dec_exit_dvb_#t~mem755#1.base, ttusb_dec_exit_dvb_#t~mem755#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 811 + ttusb_dec_exit_dvb_~dec#1.offset, 8); [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8369: havoc tasklet_kill_~arg0#1.base, tasklet_kill_~arg0#1.offset;havoc tasklet_kill_#in~arg0#1.base, tasklet_kill_#in~arg0#1.offset;assume { :end_inline_tasklet_kill } true; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7973: assume 0 != ~enable_rc~0; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7973: assume !(0 != ~enable_rc~0); [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8304-1: SUMMARY for call ttusb_dec_exit_dvb_#t~ret756#1 := ##fun~$Pointer$~X~$Pointer$~TO~int(ttusb_dec_exit_dvb_~dec#1.base, 727 + ttusb_dec_exit_dvb_~dec#1.offset, ttusb_dec_exit_dvb_~dec#1.base, 1651 + ttusb_dec_exit_dvb_~dec#1.offset, ttusb_dec_exit_dvb_#t~mem755#1.base, ttusb_dec_exit_dvb_#t~mem755#1.offset); srcloc: null [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8304: assume -2147483648 <= ttusb_dec_exit_dvb_#t~ret756#1 && ttusb_dec_exit_dvb_#t~ret756#1 <= 2147483647;havoc ttusb_dec_exit_dvb_#t~mem755#1.base, ttusb_dec_exit_dvb_#t~mem755#1.offset;havoc ttusb_dec_exit_dvb_#t~ret756#1; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8106: ttusb_dec_boot_dsp_~tmp___5~1#1 := ttusb_dec_boot_dsp_#t~ret684#1;havoc ttusb_dec_boot_dsp_#t~ret684#1;call write~int#0(ttusb_dec_boot_dsp_~tmp___5~1#1, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset, 2);ttusb_dec_boot_dsp_~__len___2~1#1 := 2; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7974: call write~$Pointer$#0(ttusb_dec_init_usb_#t~ret641#1.base, ttusb_dec_init_usb_#t~ret641#1.offset, ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8);havoc ttusb_dec_init_usb_#t~ret641#1.base, ttusb_dec_init_usb_#t~ret641#1.offset;call ttusb_dec_init_usb_#t~mem642#1.base, ttusb_dec_init_usb_#t~mem642#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8106-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret684#1 := __fswab16((if ttusb_dec_boot_dsp_~firmware_csum~0#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_boot_dsp_~firmware_csum~0#1 % 65536 % 4294967296 else ttusb_dec_boot_dsp_~firmware_csum~0#1 % 65536 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7974-1: SUMMARY for call ttusb_dec_init_usb_#t~ret641#1.base, ttusb_dec_init_usb_#t~ret641#1.offset := usb_alloc_urb(0, 208); srcloc: null [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7710: assume -2147483648 <= ttusb_dec_start_sec_feed_#t~ret575#1 && ttusb_dec_start_sec_feed_#t~ret575#1 <= 2147483647;ttusb_dec_start_sec_feed_~tmp___2~3#1 := ttusb_dec_start_sec_feed_#t~ret575#1;havoc ttusb_dec_start_sec_feed_#t~ret575#1;ttusb_dec_start_sec_feed_#res#1 := ttusb_dec_start_sec_feed_~tmp___2~3#1;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset);havoc ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset);havoc ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset);havoc ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset);havoc ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset);havoc ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6785-1: SUMMARY for call ttusb_dec_get_stb_state_#t~memcpy~res247#1.base, ttusb_dec_get_stb_state_#t~memcpy~res247#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, 4 + ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~__len___0~1#1); srcloc: null [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6785: ttusb_dec_get_stb_state_~__ret___0~1#1.base, ttusb_dec_get_stb_state_~__ret___0~1#1.offset := ttusb_dec_get_stb_state_#t~memcpy~res247#1.base, ttusb_dec_get_stb_state_#t~memcpy~res247#1.offset;havoc ttusb_dec_get_stb_state_#t~memcpy~res247#1.base, ttusb_dec_get_stb_state_#t~memcpy~res247#1.offset; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7578: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret545#1 && ttusb_dec_start_ts_feed_#t~ret545#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret545#1; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7710-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret575#1 := ttusb_dec_start_iso_xfer(ttusb_dec_start_sec_feed_~dec~6#1.base, ttusb_dec_start_sec_feed_~dec~6#1.offset); srcloc: null [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7578-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret545#1 := printk(67, 0); srcloc: null [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9362: havoc strlcat_#t~nondet873#1;ttusb_init_rc_#t~ret618#1 := strlcat_#res#1;havoc strlcat_#t~nondet873#1, strlcat_~arg0#1.base, strlcat_~arg0#1.offset, strlcat_~arg1#1.base, strlcat_~arg1#1.offset, strlcat_~arg2#1;havoc strlcat_#in~arg0#1.base, strlcat_#in~arg0#1.offset, strlcat_#in~arg1#1.base, strlcat_#in~arg1#1.offset, strlcat_#in~arg2#1;assume { :end_inline_strlcat } true;havoc ttusb_init_rc_#t~ret618#1;assume { :begin_inline_input_allocate_device } true;havoc input_allocate_device_#res#1.base, input_allocate_device_#res#1.offset;havoc input_allocate_device_#t~ret146#1.base, input_allocate_device_#t~ret146#1.offset; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8503: havoc ttusb_dec_init_v_pes_#t~ret626#1, ttusb_dec_init_v_pes_~dec#1.base, ttusb_dec_init_v_pes_~dec#1.offset;havoc ttusb_dec_init_v_pes_#in~dec#1.base, ttusb_dec_init_v_pes_#in~dec#1.offset;assume { :end_inline_ttusb_dec_init_v_pes } true;assume { :begin_inline_ttusb_dec_init_filters } true;ttusb_dec_init_filters_#in~dec#1.base, ttusb_dec_init_filters_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_init_filters_#t~ret781#1.base, ttusb_dec_init_filters_#t~ret781#1.offset, ttusb_dec_init_filters_~dec#1.base, ttusb_dec_init_filters_~dec#1.offset, ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset;ttusb_dec_init_filters_~dec#1.base, ttusb_dec_init_filters_~dec#1.offset := ttusb_dec_init_filters_#in~dec#1.base, ttusb_dec_init_filters_#in~dec#1.offset;call ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset := #Ultimate.allocOnStack(8); [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8503-1: assume { :begin_inline_ttusb_dec_init_v_pes } true;ttusb_dec_init_v_pes_#in~dec#1.base, ttusb_dec_init_v_pes_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_init_v_pes_#t~ret626#1, ttusb_dec_init_v_pes_~dec#1.base, ttusb_dec_init_v_pes_~dec#1.offset;ttusb_dec_init_v_pes_~dec#1.base, ttusb_dec_init_v_pes_~dec#1.offset := ttusb_dec_init_v_pes_#in~dec#1.base, ttusb_dec_init_v_pes_#in~dec#1.offset; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8239: call ttusb_dec_init_dvb_#t~mem717#1.base, ttusb_dec_init_dvb_#t~mem717#1.offset := read~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, 4 + ttusb_dec_init_dvb_~dec#1.offset, 8);call ttusb_dec_init_dvb_#t~mem718#1.base, ttusb_dec_init_dvb_#t~mem718#1.offset := read~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, 2012 + ttusb_dec_init_dvb_~dec#1.offset, 8);assume { :begin_inline_dvb_register_adapter } true;dvb_register_adapter_#in~arg0#1.base, dvb_register_adapter_#in~arg0#1.offset, dvb_register_adapter_#in~arg1#1.base, dvb_register_adapter_#in~arg1#1.offset, dvb_register_adapter_#in~arg2#1.base, dvb_register_adapter_#in~arg2#1.offset, dvb_register_adapter_#in~arg3#1.base, dvb_register_adapter_#in~arg3#1.offset, dvb_register_adapter_#in~arg4#1.base, dvb_register_adapter_#in~arg4#1.offset := ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_#t~mem717#1.base, ttusb_dec_init_dvb_#t~mem717#1.offset, ~#__this_module~0.base, ~#__this_module~0.offset, ttusb_dec_init_dvb_#t~mem718#1.base, 131 + ttusb_dec_init_dvb_#t~mem718#1.offset, ~#adapter_nr~0.base, ~#adapter_nr~0.offset;havoc dvb_register_adapter_#res#1;havoc dvb_register_adapter_#t~nondet864#1, dvb_register_adapter_~arg0#1.base, dvb_register_adapter_~arg0#1.offset, dvb_register_adapter_~arg1#1.base, dvb_register_adapter_~arg1#1.offset, dvb_register_adapter_~arg2#1.base, dvb_register_adapter_~arg2#1.offset, dvb_register_adapter_~arg3#1.base, dvb_register_adapter_~arg3#1.offset, dvb_register_adapter_~arg4#1.base, dvb_register_adapter_~arg4#1.offset;dvb_register_adapter_~arg0#1.base, dvb_register_adapter_~arg0#1.offset := dvb_register_adapter_#in~arg0#1.base, dvb_register_adapter_#in~arg0#1.offset;dvb_register_adapter_~arg1#1.base, dvb_register_adapter_~arg1#1.offset := dvb_register_adapter_#in~arg1#1.base, dvb_register_adapter_#in~arg1#1.offset;dvb_register_adapter_~arg2#1.base, dvb_register_adapter_~arg2#1.offset := dvb_register_adapter_#in~arg2#1.base, dvb_register_adapter_#in~arg2#1.offset;dvb_register_adapter_~arg3#1.base, dvb_register_adapter_~arg3#1.offset := dvb_register_adapter_#in~arg3#1.base, dvb_register_adapter_#in~arg3#1.offset;dvb_register_adapter_~arg4#1.base, dvb_register_adapter_~arg4#1.offset := dvb_register_adapter_#in~arg4#1.base, dvb_register_adapter_#in~arg4#1.offset;havoc dvb_register_adapter_#t~nondet864#1;assume -2147483648 <= dvb_register_adapter_#t~nondet864#1 && dvb_register_adapter_#t~nondet864#1 <= 2147483647;dvb_register_adapter_#res#1 := dvb_register_adapter_#t~nondet864#1;havoc dvb_register_adapter_#t~nondet864#1; [2025-02-08 02:46:44,136 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8305: SUMMARY for call dvb_dmxdev_release(ttusb_dec_exit_dvb_~dec#1.base, 266 + ttusb_dec_exit_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9296: havoc dvb_register_adapter_#t~nondet864#1;ttusb_dec_init_dvb_#t~ret719#1 := dvb_register_adapter_#res#1;havoc dvb_register_adapter_#t~nondet864#1, dvb_register_adapter_~arg0#1.base, dvb_register_adapter_~arg0#1.offset, dvb_register_adapter_~arg1#1.base, dvb_register_adapter_~arg1#1.offset, dvb_register_adapter_~arg2#1.base, dvb_register_adapter_~arg2#1.offset, dvb_register_adapter_~arg3#1.base, dvb_register_adapter_~arg3#1.offset, dvb_register_adapter_~arg4#1.base, dvb_register_adapter_~arg4#1.offset;havoc dvb_register_adapter_#in~arg0#1.base, dvb_register_adapter_#in~arg0#1.offset, dvb_register_adapter_#in~arg1#1.base, dvb_register_adapter_#in~arg1#1.offset, dvb_register_adapter_#in~arg2#1.base, dvb_register_adapter_#in~arg2#1.offset, dvb_register_adapter_#in~arg3#1.base, dvb_register_adapter_#in~arg3#1.offset, dvb_register_adapter_#in~arg4#1.base, dvb_register_adapter_#in~arg4#1.offset;assume { :end_inline_dvb_register_adapter } true;assume -2147483648 <= ttusb_dec_init_dvb_#t~ret719#1 && ttusb_dec_init_dvb_#t~ret719#1 <= 2147483647;ttusb_dec_init_dvb_~result~8#1 := ttusb_dec_init_dvb_#t~ret719#1;havoc ttusb_dec_init_dvb_#t~mem717#1.base, ttusb_dec_init_dvb_#t~mem717#1.offset;havoc ttusb_dec_init_dvb_#t~mem718#1.base, ttusb_dec_init_dvb_#t~mem718#1.offset;havoc ttusb_dec_init_dvb_#t~ret719#1; [2025-02-08 02:46:44,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7975: assume 0 == (ttusb_dec_init_usb_#t~mem642#1.base + ttusb_dec_init_usb_#t~mem642#1.offset) % 18446744073709551616;havoc ttusb_dec_init_usb_#t~mem642#1.base, ttusb_dec_init_usb_#t~mem642#1.offset;ttusb_dec_init_usb_#res#1 := -12;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset);havoc ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset);havoc ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset; [2025-02-08 02:46:44,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7975: assume !(0 == (ttusb_dec_init_usb_#t~mem642#1.base + ttusb_dec_init_usb_#t~mem642#1.offset) % 18446744073709551616);havoc ttusb_dec_init_usb_#t~mem642#1.base, ttusb_dec_init_usb_#t~mem642#1.offset;call ttusb_dec_init_usb_#t~mem643#1.base, ttusb_dec_init_usb_#t~mem643#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8);assume { :begin_inline_usb_alloc_coherent } true;usb_alloc_coherent_#in~arg0#1.base, usb_alloc_coherent_#in~arg0#1.offset, usb_alloc_coherent_#in~arg1#1, usb_alloc_coherent_#in~arg2#1, usb_alloc_coherent_#in~arg3#1.base, usb_alloc_coherent_#in~arg3#1.offset := ttusb_dec_init_usb_#t~mem643#1.base, ttusb_dec_init_usb_#t~mem643#1.offset, 8, 32, ttusb_dec_init_usb_~dec#1.base, 2217 + ttusb_dec_init_usb_~dec#1.offset;havoc usb_alloc_coherent_#res#1.base, usb_alloc_coherent_#res#1.offset;havoc usb_alloc_coherent_#t~ret876#1.base, usb_alloc_coherent_#t~ret876#1.offset, usb_alloc_coherent_~arg0#1.base, usb_alloc_coherent_~arg0#1.offset, usb_alloc_coherent_~arg1#1, usb_alloc_coherent_~arg2#1, usb_alloc_coherent_~arg3#1.base, usb_alloc_coherent_~arg3#1.offset;usb_alloc_coherent_~arg0#1.base, usb_alloc_coherent_~arg0#1.offset := usb_alloc_coherent_#in~arg0#1.base, usb_alloc_coherent_#in~arg0#1.offset;usb_alloc_coherent_~arg1#1 := usb_alloc_coherent_#in~arg1#1;usb_alloc_coherent_~arg2#1 := usb_alloc_coherent_#in~arg2#1;usb_alloc_coherent_~arg3#1.base, usb_alloc_coherent_~arg3#1.offset := usb_alloc_coherent_#in~arg3#1.base, usb_alloc_coherent_#in~arg3#1.offset; [2025-02-08 02:46:44,137 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7843-1: assume { :begin_inline_pci_alloc_consistent } true;pci_alloc_consistent_#in~hwdev#1.base, pci_alloc_consistent_#in~hwdev#1.offset, pci_alloc_consistent_#in~size#1, pci_alloc_consistent_#in~dma_handle#1.base, pci_alloc_consistent_#in~dma_handle#1.offset := 0, 0, 14336, ttusb_dec_alloc_iso_urbs_~dec#1.base, 2233 + ttusb_dec_alloc_iso_urbs_~dec#1.offset;havoc pci_alloc_consistent_#res#1.base, pci_alloc_consistent_#res#1.offset;havoc pci_alloc_consistent_#t~ret95#1.base, pci_alloc_consistent_#t~ret95#1.offset, pci_alloc_consistent_~hwdev#1.base, pci_alloc_consistent_~hwdev#1.offset, pci_alloc_consistent_~size#1, pci_alloc_consistent_~dma_handle#1.base, pci_alloc_consistent_~dma_handle#1.offset, pci_alloc_consistent_~tmp~7#1.base, pci_alloc_consistent_~tmp~7#1.offset;pci_alloc_consistent_~hwdev#1.base, pci_alloc_consistent_~hwdev#1.offset := pci_alloc_consistent_#in~hwdev#1.base, pci_alloc_consistent_#in~hwdev#1.offset;pci_alloc_consistent_~size#1 := pci_alloc_consistent_#in~size#1;pci_alloc_consistent_~dma_handle#1.base, pci_alloc_consistent_~dma_handle#1.offset := pci_alloc_consistent_#in~dma_handle#1.base, pci_alloc_consistent_#in~dma_handle#1.offset;havoc pci_alloc_consistent_~tmp~7#1.base, pci_alloc_consistent_~tmp~7#1.offset;assume { :begin_inline_dma_alloc_attrs } true;dma_alloc_attrs_#in~dev#1.base, dma_alloc_attrs_#in~dev#1.offset, dma_alloc_attrs_#in~size#1, dma_alloc_attrs_#in~dma_handle#1.base, dma_alloc_attrs_#in~dma_handle#1.offset, dma_alloc_attrs_#in~gfp#1, dma_alloc_attrs_#in~attrs#1.base, dma_alloc_attrs_#in~attrs#1.offset := (if 0 != (pci_alloc_consistent_~hwdev#1.base + pci_alloc_consistent_~hwdev#1.offset) % 18446744073709551616 then pci_alloc_consistent_~hwdev#1.base else 0), (if 0 != (pci_alloc_consistent_~hwdev#1.base + pci_alloc_consistent_~hwdev#1.offset) % 18446744073709551616 then 146 + pci_alloc_consistent_~hwdev#1.offset else 0), pci_alloc_consistent_~size#1, pci_alloc_consistent_~dma_handle#1.base, pci_alloc_consistent_~dma_handle#1.offset, 32, 0, 0;havoc dma_alloc_attrs_#res#1.base, dma_alloc_attrs_#res#1.offset;havoc dma_alloc_attrs_#t~ret69#1.base, dma_alloc_attrs_#t~ret69#1.offset, dma_alloc_attrs_#t~ret70#1, dma_alloc_attrs_#t~mem71#1.base, dma_alloc_attrs_#t~mem71#1.offset, dma_alloc_attrs_#t~ret72#1, dma_alloc_attrs_#t~mem79#1.base, dma_alloc_attrs_#t~mem79#1.offset, dma_alloc_attrs_#t~ret80#1.base, dma_alloc_attrs_#t~ret80#1.offset, dma_alloc_attrs_#t~mem81#1, dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset, dma_alloc_attrs_~size#1, dma_alloc_attrs_~dma_handle#1.base, dma_alloc_attrs_~dma_handle#1.offset, dma_alloc_attrs_~gfp#1, dma_alloc_attrs_~attrs#1.base, dma_alloc_attrs_~attrs#1.offset, dma_alloc_attrs_~ops~0#1.base, dma_alloc_attrs_~ops~0#1.offset, dma_alloc_attrs_~tmp~5#1.base, dma_alloc_attrs_~tmp~5#1.offset, dma_alloc_attrs_~memory~0#1.base, dma_alloc_attrs_~memory~0#1.offset, dma_alloc_attrs_~tmp___0~0#1, dma_alloc_attrs_~tmp___1~0#1;dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset := dma_alloc_attrs_#in~dev#1.base, dma_alloc_attrs_#in~dev#1.offset;dma_alloc_attrs_~size#1 := dma_alloc_attrs_#in~size#1;dma_alloc_attrs_~dma_handle#1.base, dma_alloc_attrs_~dma_handle#1.offset := dma_alloc_attrs_#in~dma_handle#1.base, dma_alloc_attrs_#in~dma_handle#1.offset;dma_alloc_attrs_~gfp#1 := dma_alloc_attrs_#in~gfp#1;dma_alloc_attrs_~attrs#1.base, dma_alloc_attrs_~attrs#1.offset := dma_alloc_attrs_#in~attrs#1.base, dma_alloc_attrs_#in~attrs#1.offset;havoc dma_alloc_attrs_~ops~0#1.base, dma_alloc_attrs_~ops~0#1.offset;havoc dma_alloc_attrs_~tmp~5#1.base, dma_alloc_attrs_~tmp~5#1.offset;havoc dma_alloc_attrs_~memory~0#1.base, dma_alloc_attrs_~memory~0#1.offset;havoc dma_alloc_attrs_~tmp___0~0#1;havoc dma_alloc_attrs_~tmp___1~0#1; [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7843: ttusb_dec_alloc_iso_urbs_#t~ret609#1.base, ttusb_dec_alloc_iso_urbs_#t~ret609#1.offset := pci_alloc_consistent_#res#1.base, pci_alloc_consistent_#res#1.offset;havoc pci_alloc_consistent_#t~ret95#1.base, pci_alloc_consistent_#t~ret95#1.offset, pci_alloc_consistent_~hwdev#1.base, pci_alloc_consistent_~hwdev#1.offset, pci_alloc_consistent_~size#1, pci_alloc_consistent_~dma_handle#1.base, pci_alloc_consistent_~dma_handle#1.offset, pci_alloc_consistent_~tmp~7#1.base, pci_alloc_consistent_~tmp~7#1.offset;havoc pci_alloc_consistent_#in~hwdev#1.base, pci_alloc_consistent_#in~hwdev#1.offset, pci_alloc_consistent_#in~size#1, pci_alloc_consistent_#in~dma_handle#1.base, pci_alloc_consistent_#in~dma_handle#1.offset;assume { :end_inline_pci_alloc_consistent } true;call write~$Pointer$#0(ttusb_dec_alloc_iso_urbs_#t~ret609#1.base, ttusb_dec_alloc_iso_urbs_#t~ret609#1.offset, ttusb_dec_alloc_iso_urbs_~dec#1.base, 2225 + ttusb_dec_alloc_iso_urbs_~dec#1.offset, 8);havoc ttusb_dec_alloc_iso_urbs_#t~ret609#1.base, ttusb_dec_alloc_iso_urbs_#t~ret609#1.offset;call ttusb_dec_alloc_iso_urbs_#t~mem610#1.base, ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset := read~$Pointer$#0(ttusb_dec_alloc_iso_urbs_~dec#1.base, 2225 + ttusb_dec_alloc_iso_urbs_~dec#1.offset, 8); [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7447: assume 0 != ttusb_dec_set_interface_~result~2#1;ttusb_dec_set_interface_#res#1 := ttusb_dec_set_interface_~result~2#1;call ULTIMATE.dealloc(ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset);havoc ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset; [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7447: assume !(0 != ttusb_dec_set_interface_~result~2#1);call write~int#0(ttusb_dec_set_interface_~interface#1, ttusb_dec_set_interface_~dec#1.base, 2041 + ttusb_dec_set_interface_~dec#1.offset, 4); [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8306: call ttusb_dec_exit_dvb_#t~mem757#1.base, ttusb_dec_exit_dvb_#t~mem757#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 1964 + ttusb_dec_exit_dvb_~dec#1.offset, 8); [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8372: ttusb_dec_exit_tasklet_~__mptr~3#1.base, ttusb_dec_exit_tasklet_~__mptr~3#1.offset := ttusb_dec_exit_tasklet_~item~2#1.base, ttusb_dec_exit_tasklet_~item~2#1.offset;ttusb_dec_exit_tasklet_~frame~2#1.base, ttusb_dec_exit_tasklet_~frame~2#1.offset := ttusb_dec_exit_tasklet_~__mptr~3#1.base, -828064 + ttusb_dec_exit_tasklet_~__mptr~3#1.offset; [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8174: call ULTIMATE.dealloc(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset);havoc ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset);havoc ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset);havoc ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset;ttusb_dec_probe_#t~ret793#1 := ttusb_dec_init_stb_#res#1;havoc ttusb_dec_init_stb_#t~ret700#1, ttusb_dec_init_stb_#t~ret701#1, ttusb_dec_init_stb_#t~mem702#1, ttusb_dec_init_stb_#t~mem703#1, ttusb_dec_init_stb_#t~ret704#1, ttusb_dec_init_stb_#t~mem705#1, ttusb_dec_init_stb_#t~mem706#1, ttusb_dec_init_stb_#t~mem707#1, ttusb_dec_init_stb_#t~mem708#1, ttusb_dec_init_stb_#t~ret709#1, ttusb_dec_init_stb_#t~ret710#1, ttusb_dec_init_stb_#t~mem711#1, ttusb_dec_init_stb_#t~switch712#1, ttusb_dec_init_stb_#t~mem713#1, ttusb_dec_init_stb_#t~ret714#1, ttusb_dec_init_stb_#t~mem715#1, ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset, ttusb_dec_init_stb_~result~7#1, ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset, ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset, ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset;havoc ttusb_dec_init_stb_#in~dec#1.base, ttusb_dec_init_stb_#in~dec#1.offset;assume { :end_inline_ttusb_dec_init_stb } true;assume -2147483648 <= ttusb_dec_probe_#t~ret793#1 && ttusb_dec_probe_#t~ret793#1 <= 2147483647;ttusb_dec_probe_~tmp___1~9#1 := ttusb_dec_probe_#t~ret793#1;havoc ttusb_dec_probe_#t~ret793#1; [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8306-1: SUMMARY for call dvb_dmx_release(ttusb_dec_exit_dvb_~dec#1.base, 727 + ttusb_dec_exit_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7844: assume 0 == (ttusb_dec_alloc_iso_urbs_#t~mem610#1.base + ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset) % 18446744073709551616;havoc ttusb_dec_alloc_iso_urbs_#t~mem610#1.base, ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset; [2025-02-08 02:46:44,138 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7844: assume !(0 == (ttusb_dec_alloc_iso_urbs_#t~mem610#1.base + ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset) % 18446744073709551616);havoc ttusb_dec_alloc_iso_urbs_#t~mem610#1.base, ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset;call ttusb_dec_alloc_iso_urbs_#t~mem612#1.base, ttusb_dec_alloc_iso_urbs_#t~mem612#1.offset := read~$Pointer$#0(ttusb_dec_alloc_iso_urbs_~dec#1.base, 2225 + ttusb_dec_alloc_iso_urbs_~dec#1.offset, 8);assume { :begin_inline_#Ultimate.C_memset } true;#Ultimate.C_memset_#ptr#1.base, #Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#value#1, #Ultimate.C_memset_#amount#1 := ttusb_dec_alloc_iso_urbs_#t~mem612#1.base, ttusb_dec_alloc_iso_urbs_#t~mem612#1.offset, 0, 14336;havoc #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;havoc #Ultimate.C_memset_#t~loopctr889#1;#Ultimate.C_memset_#t~loopctr889#1 := 0; [2025-02-08 02:46:44,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7514: call ULTIMATE.dealloc(ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset);havoc ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset;ttusb_dec_start_feed_#t~ret583#1 := ttusb_dec_start_ts_feed_#res#1;havoc ttusb_dec_start_ts_feed_#t~mem522#1.base, ttusb_dec_start_ts_feed_#t~mem522#1.offset, ttusb_dec_start_ts_feed_#t~mem523#1.base, ttusb_dec_start_ts_feed_#t~mem523#1.offset, ttusb_dec_start_ts_feed_#t~ret524#1, ttusb_dec_start_ts_feed_#t~ret525#1, ttusb_dec_start_ts_feed_#t~mem526#1, ttusb_dec_start_ts_feed_#t~bitwise527#1, ttusb_dec_start_ts_feed_#t~ret528#1, ttusb_dec_start_ts_feed_#t~mem529#1, ttusb_dec_start_ts_feed_#t~ret530#1, ttusb_dec_start_ts_feed_#t~mem531#1, ttusb_dec_start_ts_feed_#t~bitwise532#1, ttusb_dec_start_ts_feed_#t~ret533#1, ttusb_dec_start_ts_feed_#t~ret534#1, ttusb_dec_start_ts_feed_#t~mem535#1, ttusb_dec_start_ts_feed_#t~switch536#1, ttusb_dec_start_ts_feed_#t~ret537#1, ttusb_dec_start_ts_feed_#t~mem538#1, ttusb_dec_start_ts_feed_#t~mem539#1, ttusb_dec_start_ts_feed_#t~mem540#1.base, ttusb_dec_start_ts_feed_#t~mem540#1.offset, ttusb_dec_start_ts_feed_#t~ret541#1, ttusb_dec_start_ts_feed_#t~mem542#1, ttusb_dec_start_ts_feed_#t~mem543#1.base, ttusb_dec_start_ts_feed_#t~mem543#1.offset, ttusb_dec_start_ts_feed_#t~mem544#1, ttusb_dec_start_ts_feed_#t~ret545#1, ttusb_dec_start_ts_feed_#t~ret546#1, ttusb_dec_start_ts_feed_#t~mem547#1, ttusb_dec_start_ts_feed_#t~ret548#1, ttusb_dec_start_ts_feed_#t~mem549#1, ttusb_dec_start_ts_feed_#t~ret550#1, ttusb_dec_start_ts_feed_#t~ret551#1, ttusb_dec_start_ts_feed_#t~mem552#1, ttusb_dec_start_ts_feed_#t~ret553#1, ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, ttusb_dec_start_ts_feed_~dvbdmx~0#1.base, ttusb_dec_start_ts_feed_~dvbdmx~0#1.offset, ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset, ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset, ttusb_dec_start_ts_feed_~result~4#1, ttusb_dec_start_ts_feed_~tmp~21#1;havoc ttusb_dec_start_ts_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_ts_feed_#in~dvbdmxfeed#1.offset;assume { :end_inline_ttusb_dec_start_ts_feed } true;assume -2147483648 <= ttusb_dec_start_feed_#t~ret583#1 && ttusb_dec_start_feed_#t~ret583#1 <= 2147483647;ttusb_dec_start_feed_~tmp~23#1 := ttusb_dec_start_feed_#t~ret583#1;ttusb_dec_start_feed_#res#1 := ttusb_dec_start_feed_~tmp~23#1; [2025-02-08 02:46:44,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8307: assume 0 != (ttusb_dec_exit_dvb_#t~mem757#1.base + ttusb_dec_exit_dvb_#t~mem757#1.offset) % 18446744073709551616;havoc ttusb_dec_exit_dvb_#t~mem757#1.base, ttusb_dec_exit_dvb_#t~mem757#1.offset;call ttusb_dec_exit_dvb_#t~mem758#1.base, ttusb_dec_exit_dvb_#t~mem758#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 1964 + ttusb_dec_exit_dvb_~dec#1.offset, 8);assume { :begin_inline_dvb_unregister_frontend } true;dvb_unregister_frontend_#in~arg0#1.base, dvb_unregister_frontend_#in~arg0#1.offset := ttusb_dec_exit_dvb_#t~mem758#1.base, ttusb_dec_exit_dvb_#t~mem758#1.offset;havoc dvb_unregister_frontend_#res#1;havoc dvb_unregister_frontend_#t~nondet867#1, dvb_unregister_frontend_~arg0#1.base, dvb_unregister_frontend_~arg0#1.offset;dvb_unregister_frontend_~arg0#1.base, dvb_unregister_frontend_~arg0#1.offset := dvb_unregister_frontend_#in~arg0#1.base, dvb_unregister_frontend_#in~arg0#1.offset;havoc dvb_unregister_frontend_#t~nondet867#1;assume -2147483648 <= dvb_unregister_frontend_#t~nondet867#1 && dvb_unregister_frontend_#t~nondet867#1 <= 2147483647;dvb_unregister_frontend_#res#1 := dvb_unregister_frontend_#t~nondet867#1;havoc dvb_unregister_frontend_#t~nondet867#1; [2025-02-08 02:46:44,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8307: assume !(0 != (ttusb_dec_exit_dvb_#t~mem757#1.base + ttusb_dec_exit_dvb_#t~mem757#1.offset) % 18446744073709551616);havoc ttusb_dec_exit_dvb_#t~mem757#1.base, ttusb_dec_exit_dvb_#t~mem757#1.offset; [2025-02-08 02:46:44,139 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8439: assume 0 != ~debug~0; [2025-02-08 02:46:44,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8439: assume !(0 != ~debug~0); [2025-02-08 02:46:44,142 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8241: assume ttusb_dec_init_dvb_~result~8#1 < 0; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8241: assume !(ttusb_dec_init_dvb_~result~8#1 < 0);call write~int#0(5, ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset, 4);call write~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 875 + ttusb_dec_init_dvb_~dec#1.offset, 8);call write~int#0(31, ttusb_dec_init_dvb_~dec#1.base, 883 + ttusb_dec_init_dvb_~dec#1.offset, 4);call write~int#0(31, ttusb_dec_init_dvb_~dec#1.base, 887 + ttusb_dec_init_dvb_~dec#1.offset, 4);call write~$Pointer$#0(#funAddr~ttusb_dec_start_feed.base, #funAddr~ttusb_dec_start_feed.offset, ttusb_dec_init_dvb_~dec#1.base, 891 + ttusb_dec_init_dvb_~dec#1.offset, 8);call write~$Pointer$#0(#funAddr~ttusb_dec_stop_feed.base, #funAddr~ttusb_dec_stop_feed.offset, ttusb_dec_init_dvb_~dec#1.base, 899 + ttusb_dec_init_dvb_~dec#1.offset, 8);call write~$Pointer$#0(0, 0, ttusb_dec_init_dvb_~dec#1.base, 907 + ttusb_dec_init_dvb_~dec#1.offset, 8);assume { :begin_inline_dvb_dmx_init } true;dvb_dmx_init_#in~arg0#1.base, dvb_dmx_init_#in~arg0#1.offset := ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset;havoc dvb_dmx_init_#res#1;havoc dvb_dmx_init_#t~nondet860#1, dvb_dmx_init_~arg0#1.base, dvb_dmx_init_~arg0#1.offset;dvb_dmx_init_~arg0#1.base, dvb_dmx_init_~arg0#1.offset := dvb_dmx_init_#in~arg0#1.base, dvb_dmx_init_#in~arg0#1.offset;havoc dvb_dmx_init_#t~nondet860#1;assume -2147483648 <= dvb_dmx_init_#t~nondet860#1 && dvb_dmx_init_#t~nondet860#1 <= 2147483647;dvb_dmx_init_#res#1 := dvb_dmx_init_#t~nondet860#1;havoc dvb_dmx_init_#t~nondet860#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8109: assume ttusb_dec_boot_dsp_~__len___2~1#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8109: assume !(ttusb_dec_boot_dsp_~__len___2~1#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7911-1: call ttusb_init_rc_#t~mem620#1 := read~int#0(~#rc_keys~0.base, ~#rc_keys~0.offset + 2 * ttusb_init_rc_~i~8#1, 2);assume { :begin_inline_set_bit } true;set_bit_#in~nr#1, set_bit_#in~addr#1.base, set_bit_#in~addr#1.offset := ttusb_init_rc_#t~mem620#1 % 65536, ttusb_init_rc_~input_dev~0#1.base, 48 + ttusb_init_rc_~input_dev~0#1.offset;havoc set_bit_~nr#1, set_bit_~addr#1.base, set_bit_~addr#1.offset;set_bit_~nr#1 := set_bit_#in~nr#1;set_bit_~addr#1.base, set_bit_~addr#1.offset := set_bit_#in~addr#1.base, set_bit_#in~addr#1.offset; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7911: havoc set_bit_~nr#1, set_bit_~addr#1.base, set_bit_~addr#1.offset;havoc set_bit_#in~nr#1, set_bit_#in~addr#1.base, set_bit_#in~addr#1.offset;assume { :end_inline_set_bit } true;ttusb_init_rc_~i~8#1 := 1 + ttusb_init_rc_~i~8#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6788-2: call ttusb_dec_get_stb_state_#t~mem248#1 := read~int#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, 4); [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6788-1: SUMMARY for call ttusb_dec_get_stb_state_#t~ret249#1 := __fswab32(ttusb_dec_get_stb_state_#t~mem248#1); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6788: ttusb_dec_get_stb_state_~tmp___1~3#1 := ttusb_dec_get_stb_state_#t~ret249#1;havoc ttusb_dec_get_stb_state_#t~mem248#1;havoc ttusb_dec_get_stb_state_#t~ret249#1;call write~int#17(ttusb_dec_get_stb_state_~tmp___1~3#1, ttusb_dec_get_stb_state_~model#1.base, ttusb_dec_get_stb_state_~model#1.offset, 4); [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7845: assume 0 != ~debug~0; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7845: assume !(0 != ~debug~0); [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7581-1: ttusb_dec_start_ts_feed_#res#1 := -38;call ULTIMATE.dealloc(ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset);havoc ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8374: SUMMARY for call list_del(ttusb_dec_exit_tasklet_~frame~2#1.base, 900 + ttusb_dec_exit_tasklet_~frame~2#1.offset); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8242: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret720#1 && ttusb_dec_init_dvb_#t~ret720#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret720#1;ttusb_dec_init_dvb_#res#1 := ttusb_dec_init_dvb_~result~8#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8440: assume -2147483648 <= ttusb_dec_probe_#t~ret786#1 && ttusb_dec_probe_#t~ret786#1 <= 2147483647;havoc ttusb_dec_probe_#t~ret786#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8440-1: SUMMARY for call ttusb_dec_probe_#t~ret786#1 := printk(130, 0); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8110: ttusb_dec_boot_dsp_~__ret___2~1#1.base, ttusb_dec_boot_dsp_~__ret___2~1#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res685#1.base, ttusb_dec_boot_dsp_#t~memcpy~res685#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res685#1.base, ttusb_dec_boot_dsp_#t~memcpy~res685#1.offset; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8242-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret720#1 := printk(113, 0); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8110-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res685#1.base, ttusb_dec_boot_dsp_#t~memcpy~res685#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#b0~4#1.base, 6 + ttusb_dec_boot_dsp_~#b0~4#1.offset, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset, ttusb_dec_boot_dsp_~__len___2~1#1); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7846: assume -2147483648 <= ttusb_dec_alloc_iso_urbs_#t~ret611#1 && ttusb_dec_alloc_iso_urbs_#t~ret611#1 <= 2147483647;havoc ttusb_dec_alloc_iso_urbs_#t~ret611#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7846-1: SUMMARY for call ttusb_dec_alloc_iso_urbs_#t~ret611#1 := printk(83, 0); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7582: assume 0 != ~debug~0; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7582: assume !(0 != ~debug~0); [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7582-1: assume ttusb_dec_start_ts_feed_#t~switch536#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7582-1: assume !ttusb_dec_start_ts_feed_#t~switch536#1;ttusb_dec_start_ts_feed_#t~switch536#1 := ttusb_dec_start_ts_feed_#t~switch536#1 || 20 == ttusb_dec_start_ts_feed_#t~mem535#1; [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8375-1: SUMMARY for call kfree(ttusb_dec_exit_tasklet_~frame~2#1.base, ttusb_dec_exit_tasklet_~frame~2#1.offset); srcloc: null [2025-02-08 02:46:44,143 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8375: call ttusb_dec_exit_tasklet_#t~mem780#1.base, ttusb_dec_exit_tasklet_#t~mem780#1.offset := read~$Pointer$#0(ttusb_dec_exit_tasklet_~dec#1.base, 15185 + ttusb_dec_exit_tasklet_~dec#1.offset, 8);ttusb_dec_exit_tasklet_~item~2#1.base, ttusb_dec_exit_tasklet_~item~2#1.offset := ttusb_dec_exit_tasklet_#t~mem780#1.base, ttusb_dec_exit_tasklet_#t~mem780#1.offset; [2025-02-08 02:46:44,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9300: havoc dvb_register_frontend_#t~nondet865#1;ttusb_dec_probe_#t~ret806#1 := dvb_register_frontend_#res#1;havoc dvb_register_frontend_#t~nondet865#1, dvb_register_frontend_~arg0#1.base, dvb_register_frontend_~arg0#1.offset, dvb_register_frontend_~arg1#1.base, dvb_register_frontend_~arg1#1.offset;havoc dvb_register_frontend_#in~arg0#1.base, dvb_register_frontend_#in~arg0#1.offset, dvb_register_frontend_#in~arg1#1.base, dvb_register_frontend_#in~arg1#1.offset;assume { :end_inline_dvb_register_frontend } true;assume -2147483648 <= ttusb_dec_probe_#t~ret806#1 && ttusb_dec_probe_#t~ret806#1 <= 2147483647;ttusb_dec_probe_~tmp___2~6#1 := ttusb_dec_probe_#t~ret806#1;havoc ttusb_dec_probe_#t~mem805#1.base, ttusb_dec_probe_#t~mem805#1.offset;havoc ttusb_dec_probe_#t~ret806#1; [2025-02-08 02:46:44,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8309: assume 0 != (ttusb_dec_exit_dvb_#t~mem761#1.base + ttusb_dec_exit_dvb_#t~mem761#1.offset) % 18446744073709551616;havoc ttusb_dec_exit_dvb_#t~mem760#1.base, ttusb_dec_exit_dvb_#t~mem760#1.offset;havoc ttusb_dec_exit_dvb_#t~mem761#1.base, ttusb_dec_exit_dvb_#t~mem761#1.offset;call ttusb_dec_exit_dvb_#t~mem765#1.base, ttusb_dec_exit_dvb_#t~mem765#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 1964 + ttusb_dec_exit_dvb_~dec#1.offset, 8);call ttusb_dec_exit_dvb_#t~mem766#1.base, ttusb_dec_exit_dvb_#t~mem766#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 1964 + ttusb_dec_exit_dvb_~dec#1.offset, 8);call ttusb_dec_exit_dvb_#t~mem767#1.base, ttusb_dec_exit_dvb_#t~mem767#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_#t~mem766#1.base, 176 + ttusb_dec_exit_dvb_#t~mem766#1.offset, 8); [2025-02-08 02:46:44,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8309: assume !(0 != (ttusb_dec_exit_dvb_#t~mem761#1.base + ttusb_dec_exit_dvb_#t~mem761#1.offset) % 18446744073709551616);havoc ttusb_dec_exit_dvb_#t~mem760#1.base, ttusb_dec_exit_dvb_#t~mem760#1.offset;havoc ttusb_dec_exit_dvb_#t~mem761#1.base, ttusb_dec_exit_dvb_#t~mem761#1.offset; [2025-02-08 02:46:44,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7781-1: SUMMARY for call ttusb_dec_stop_sec_feed_#t~ret595#1.base, ttusb_dec_stop_sec_feed_#t~ret595#1.offset := spinlock_check(ttusb_dec_stop_sec_feed_~dec~8#1.base, 15337 + ttusb_dec_stop_sec_feed_~dec~8#1.offset); srcloc: null [2025-02-08 02:46:44,144 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7781: ttusb_dec_stop_sec_feed_~tmp~24#1.base, ttusb_dec_stop_sec_feed_~tmp~24#1.offset := ttusb_dec_stop_sec_feed_#t~ret595#1.base, ttusb_dec_stop_sec_feed_#t~ret595#1.offset;havoc ttusb_dec_stop_sec_feed_#t~ret595#1.base, ttusb_dec_stop_sec_feed_#t~ret595#1.offset; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8508: assume 0 != ~enable_rc~0;assume { :begin_inline_ttusb_init_rc } true;ttusb_init_rc_#in~dec#1.base, ttusb_init_rc_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_init_rc_#res#1;havoc ttusb_init_rc_#t~mem616#1.base, ttusb_init_rc_#t~mem616#1.offset, ttusb_init_rc_#t~ret617#1, ttusb_init_rc_#t~ret618#1, ttusb_init_rc_#t~ret619#1.base, ttusb_init_rc_#t~ret619#1.offset, ttusb_init_rc_#t~mem620#1, ttusb_init_rc_#t~ret621#1, ttusb_init_rc_#t~mem622#1.base, ttusb_init_rc_#t~mem622#1.offset, ttusb_init_rc_#t~ret623#1, ttusb_init_rc_#t~ret624#1, ttusb_init_rc_#t~ret625#1, ttusb_init_rc_~dec#1.base, ttusb_init_rc_~dec#1.offset, ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset, ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset, ttusb_init_rc_~i~8#1, ttusb_init_rc_~err~0#1, ttusb_init_rc_~tmp~26#1;ttusb_init_rc_~dec#1.base, ttusb_init_rc_~dec#1.offset := ttusb_init_rc_#in~dec#1.base, ttusb_init_rc_#in~dec#1.offset;havoc ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset;call ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset := #Ultimate.allocOnStack(2);havoc ttusb_init_rc_~i~8#1;havoc ttusb_init_rc_~err~0#1;havoc ttusb_init_rc_~tmp~26#1;call write~int#0(0, ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset, 1);call write~int#0(1, ttusb_init_rc_~#b~4#1.base, 1 + ttusb_init_rc_~#b~4#1.offset, 1);call ttusb_init_rc_#t~mem616#1.base, ttusb_init_rc_#t~mem616#1.offset := read~$Pointer$#0(ttusb_init_rc_~dec#1.base, 2012 + ttusb_init_rc_~dec#1.offset, 8);assume { :begin_inline_usb_make_path } true;usb_make_path_#in~dev#1.base, usb_make_path_#in~dev#1.offset, usb_make_path_#in~buf#1.base, usb_make_path_#in~buf#1.offset, usb_make_path_#in~size#1 := ttusb_init_rc_#t~mem616#1.base, ttusb_init_rc_#t~mem616#1.offset, ttusb_init_rc_~dec#1.base, 15413 + ttusb_init_rc_~dec#1.offset, 64;havoc usb_make_path_#res#1;havoc usb_make_path_#t~mem105#1.base, usb_make_path_#t~mem105#1.offset, usb_make_path_#t~mem106#1.base, usb_make_path_#t~mem106#1.offset, usb_make_path_#t~loopctr107#1, usb_make_path_#t~nondet108#1, usb_make_path_#t~ret109#1, usb_make_path_~dev#1.base, usb_make_path_~dev#1.offset, usb_make_path_~buf#1.base, usb_make_path_~buf#1.offset, usb_make_path_~size#1, usb_make_path_~actual~0#1;usb_make_path_~dev#1.base, usb_make_path_~dev#1.offset := usb_make_path_#in~dev#1.base, usb_make_path_#in~dev#1.offset;usb_make_path_~buf#1.base, usb_make_path_~buf#1.offset := usb_make_path_#in~buf#1.base, usb_make_path_#in~buf#1.offset;usb_make_path_~size#1 := usb_make_path_#in~size#1;havoc usb_make_path_~actual~0#1;call usb_make_path_#t~mem105#1.base, usb_make_path_#t~mem105#1.offset := read~$Pointer$#0(usb_make_path_~dev#1.base, 60 + usb_make_path_~dev#1.offset, 8);call usb_make_path_#t~mem106#1.base, usb_make_path_#t~mem106#1.offset := read~$Pointer$#0(usb_make_path_#t~mem105#1.base, 12 + usb_make_path_#t~mem105#1.offset, 8);usb_make_path_#t~loopctr107#1 := 0; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8508: assume !(0 != ~enable_rc~0); [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8310: havoc ttusb_dec_exit_dvb_#t~mem765#1.base, ttusb_dec_exit_dvb_#t~mem765#1.offset;havoc ttusb_dec_exit_dvb_#t~mem766#1.base, ttusb_dec_exit_dvb_#t~mem766#1.offset;havoc ttusb_dec_exit_dvb_#t~mem767#1.base, ttusb_dec_exit_dvb_#t~mem767#1.offset; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6328: dma_alloc_coherent_gfp_flags_#t~ret67#1 := dma_alloc_coherent_mask_#res#1;havoc dma_alloc_coherent_mask_#t~mem66#1, dma_alloc_coherent_mask_~dev#1.base, dma_alloc_coherent_mask_~dev#1.offset, dma_alloc_coherent_mask_~gfp#1, dma_alloc_coherent_mask_~dma_mask~0#1;havoc dma_alloc_coherent_mask_#in~dev#1.base, dma_alloc_coherent_mask_#in~dev#1.offset, dma_alloc_coherent_mask_#in~gfp#1;assume { :end_inline_dma_alloc_coherent_mask } true;dma_alloc_coherent_gfp_flags_~tmp~4#1 := dma_alloc_coherent_gfp_flags_#t~ret67#1;havoc dma_alloc_coherent_gfp_flags_#t~ret67#1;dma_alloc_coherent_gfp_flags_~dma_mask~1#1 := dma_alloc_coherent_gfp_flags_~tmp~4#1; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8310-1: SUMMARY for call ##fun~$Pointer$~TO~VOID(ttusb_dec_exit_dvb_#t~mem765#1.base, ttusb_dec_exit_dvb_#t~mem765#1.offset, ttusb_dec_exit_dvb_#t~mem767#1.base, ttusb_dec_exit_dvb_#t~mem767#1.offset); srcloc: null [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7914: assume ttusb_init_rc_~i~8#1 % 4294967296 <= 25; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7914: assume !(ttusb_init_rc_~i~8#1 % 4294967296 <= 25);assume { :begin_inline_input_register_device } true;input_register_device_#in~arg0#1.base, input_register_device_#in~arg0#1.offset := ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset;havoc input_register_device_#res#1;havoc input_register_device_#t~nondet868#1, input_register_device_~arg0#1.base, input_register_device_~arg0#1.offset;input_register_device_~arg0#1.base, input_register_device_~arg0#1.offset := input_register_device_#in~arg0#1.base, input_register_device_#in~arg0#1.offset;havoc input_register_device_#t~nondet868#1;assume -2147483648 <= input_register_device_#t~nondet868#1 && input_register_device_#t~nondet868#1 <= 2147483647;input_register_device_#res#1 := input_register_device_#t~nondet868#1;havoc input_register_device_#t~nondet868#1; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7980: assume 0 == (ttusb_dec_init_usb_#t~mem645#1.base + ttusb_dec_init_usb_#t~mem645#1.offset) % 18446744073709551616;havoc ttusb_dec_init_usb_#t~mem645#1.base, ttusb_dec_init_usb_#t~mem645#1.offset;call ttusb_dec_init_usb_#t~mem646#1.base, ttusb_dec_init_usb_#t~mem646#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7980: assume !(0 == (ttusb_dec_init_usb_#t~mem645#1.base + ttusb_dec_init_usb_#t~mem645#1.offset) % 18446744073709551616);havoc ttusb_dec_init_usb_#t~mem645#1.base, ttusb_dec_init_usb_#t~mem645#1.offset;call ttusb_dec_init_usb_#t~mem647#1.base, ttusb_dec_init_usb_#t~mem647#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8);call ttusb_dec_init_usb_#t~mem648#1.base, ttusb_dec_init_usb_#t~mem648#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2012 + ttusb_dec_init_usb_~dec#1.offset, 8);call ttusb_dec_init_usb_#t~mem649#1 := read~int#0(ttusb_dec_init_usb_~dec#1.base, 2037 + ttusb_dec_init_usb_~dec#1.offset, 4);call ttusb_dec_init_usb_#t~mem650#1.base, ttusb_dec_init_usb_#t~mem650#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2201 + ttusb_dec_init_usb_~dec#1.offset, 8);assume { :begin_inline_usb_fill_int_urb } true;usb_fill_int_urb_#in~urb#1.base, usb_fill_int_urb_#in~urb#1.offset, usb_fill_int_urb_#in~dev#1.base, usb_fill_int_urb_#in~dev#1.offset, usb_fill_int_urb_#in~pipe#1, usb_fill_int_urb_#in~transfer_buffer#1.base, usb_fill_int_urb_#in~transfer_buffer#1.offset, usb_fill_int_urb_#in~buffer_length#1, usb_fill_int_urb_#in~complete_fn#1.base, usb_fill_int_urb_#in~complete_fn#1.offset, usb_fill_int_urb_#in~context#1.base, usb_fill_int_urb_#in~context#1.offset, usb_fill_int_urb_#in~interval#1 := ttusb_dec_init_usb_#t~mem647#1.base, ttusb_dec_init_usb_#t~mem647#1.offset, ttusb_dec_init_usb_#t~mem648#1.base, ttusb_dec_init_usb_#t~mem648#1.offset, ttusb_dec_init_usb_#t~mem649#1, ttusb_dec_init_usb_#t~mem650#1.base, ttusb_dec_init_usb_#t~mem650#1.offset, 8, #funAddr~ttusb_dec_handle_irq.base, #funAddr~ttusb_dec_handle_irq.offset, ttusb_dec_init_usb_~dec#1.base, ttusb_dec_init_usb_~dec#1.offset, 1;havoc usb_fill_int_urb_#t~mem110#1, usb_fill_int_urb_#t~mem111#1, usb_fill_int_urb_#t~short112#1, usb_fill_int_urb_#t~bitwise113#1, usb_fill_int_urb_~urb#1.base, usb_fill_int_urb_~urb#1.offset, usb_fill_int_urb_~dev#1.base, usb_fill_int_urb_~dev#1.offset, usb_fill_int_urb_~pipe#1, usb_fill_int_urb_~transfer_buffer#1.base, usb_fill_int_urb_~transfer_buffer#1.offset, usb_fill_int_urb_~buffer_length#1, usb_fill_int_urb_~complete_fn#1.base, usb_fill_int_urb_~complete_fn#1.offset, usb_fill_int_urb_~context#1.base, usb_fill_int_urb_~context#1.offset, usb_fill_int_urb_~interval#1;usb_fill_int_urb_~urb#1.base, usb_fill_int_urb_~urb#1.offset := usb_fill_int_urb_#in~urb#1.base, usb_fill_int_urb_#in~urb#1.offset;usb_fill_int_urb_~dev#1.base, usb_fill_int_urb_~dev#1.offset := usb_fill_int_urb_#in~dev#1.base, usb_fill_int_urb_#in~dev#1.offset;usb_fill_int_urb_~pipe#1 := usb_fill_int_urb_#in~pipe#1;usb_fill_int_urb_~transfer_buffer#1.base, usb_fill_int_urb_~transfer_buffer#1.offset := usb_fill_int_urb_#in~transfer_buffer#1.base, usb_fill_int_urb_#in~transfer_buffer#1.offset;usb_fill_int_urb_~buffer_length#1 := usb_fill_int_urb_#in~buffer_length#1;usb_fill_int_urb_~complete_fn#1.base, usb_fill_int_urb_~complete_fn#1.offset := usb_fill_int_urb_#in~complete_fn#1.base, usb_fill_int_urb_#in~complete_fn#1.offset;usb_fill_int_urb_~context#1.base, usb_fill_int_urb_~context#1.offset := usb_fill_int_urb_#in~context#1.base, usb_fill_int_urb_#in~context#1.offset;usb_fill_int_urb_~interval#1 := usb_fill_int_urb_#in~interval#1;call write~$Pointer$#0(usb_fill_int_urb_~dev#1.base, usb_fill_int_urb_~dev#1.offset, usb_fill_int_urb_~urb#1.base, 64 + usb_fill_int_urb_~urb#1.offset, 8);call write~int#0(usb_fill_int_urb_~pipe#1, usb_fill_int_urb_~urb#1.base, 80 + usb_fill_int_urb_~urb#1.offset, 4);call write~$Pointer$#0(usb_fill_int_urb_~transfer_buffer#1.base, usb_fill_int_urb_~transfer_buffer#1.offset, usb_fill_int_urb_~urb#1.base, 96 + usb_fill_int_urb_~urb#1.offset, 8);call write~int#0(usb_fill_int_urb_~buffer_length#1, usb_fill_int_urb_~urb#1.base, 128 + usb_fill_int_urb_~urb#1.offset, 4);call write~$Pointer$#0(usb_fill_int_urb_~complete_fn#1.base, usb_fill_int_urb_~complete_fn#1.offset, usb_fill_int_urb_~urb#1.base, 176 + usb_fill_int_urb_~urb#1.offset, 8);call write~$Pointer$#0(usb_fill_int_urb_~context#1.base, usb_fill_int_urb_~context#1.offset, usb_fill_int_urb_~urb#1.base, 168 + usb_fill_int_urb_~urb#1.offset, 8);call usb_fill_int_urb_#t~mem110#1 := read~int#0(usb_fill_int_urb_~dev#1.base, 28 + usb_fill_int_urb_~dev#1.offset, 4);usb_fill_int_urb_#t~short112#1 := 3 == usb_fill_int_urb_#t~mem110#1 % 4294967296; [2025-02-08 02:46:44,145 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7782: ttusb_dec_stop_sec_feed_~flags~4#1 := ttusb_dec_stop_sec_feed_#t~ret596#1;havoc ttusb_dec_stop_sec_feed_#t~ret596#1; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7782-1: SUMMARY for call ttusb_dec_stop_sec_feed_#t~ret596#1 := _raw_spin_lock_irqsave(ttusb_dec_stop_sec_feed_~tmp~24#1.base, ttusb_dec_stop_sec_feed_~tmp~24#1.offset); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7584-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret546#1 := printk(68, 0); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7584: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret546#1 && ttusb_dec_start_ts_feed_#t~ret546#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret546#1; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8443: ttusb_dec_probe_#t~ret787#1.base, ttusb_dec_probe_#t~ret787#1.offset := interface_to_usbdev_#res#1.base, interface_to_usbdev_#res#1.offset;havoc interface_to_usbdev_#t~mem104#1.base, interface_to_usbdev_#t~mem104#1.offset, interface_to_usbdev_~intf#1.base, interface_to_usbdev_~intf#1.offset, interface_to_usbdev_~__mptr~0#1.base, interface_to_usbdev_~__mptr~0#1.offset;havoc interface_to_usbdev_#in~intf#1.base, interface_to_usbdev_#in~intf#1.offset;assume { :end_inline_interface_to_usbdev } true;ttusb_dec_probe_~udev~0#1.base, ttusb_dec_probe_~udev~0#1.offset := ttusb_dec_probe_#t~ret787#1.base, ttusb_dec_probe_#t~ret787#1.offset;havoc ttusb_dec_probe_#t~ret787#1.base, ttusb_dec_probe_#t~ret787#1.offset; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8443-1: assume { :begin_inline_interface_to_usbdev } true;interface_to_usbdev_#in~intf#1.base, interface_to_usbdev_#in~intf#1.offset := ttusb_dec_probe_~intf#1.base, ttusb_dec_probe_~intf#1.offset;havoc interface_to_usbdev_#res#1.base, interface_to_usbdev_#res#1.offset;havoc interface_to_usbdev_#t~mem104#1.base, interface_to_usbdev_#t~mem104#1.offset, interface_to_usbdev_~intf#1.base, interface_to_usbdev_~intf#1.offset, interface_to_usbdev_~__mptr~0#1.base, interface_to_usbdev_~__mptr~0#1.offset;interface_to_usbdev_~intf#1.base, interface_to_usbdev_~intf#1.offset := interface_to_usbdev_#in~intf#1.base, interface_to_usbdev_#in~intf#1.offset;havoc interface_to_usbdev_~__mptr~0#1.base, interface_to_usbdev_~__mptr~0#1.offset;call interface_to_usbdev_#t~mem104#1.base, interface_to_usbdev_#t~mem104#1.offset := read~$Pointer$#13(interface_to_usbdev_~intf#1.base, 44 + interface_to_usbdev_~intf#1.offset, 8);interface_to_usbdev_~__mptr~0#1.base, interface_to_usbdev_~__mptr~0#1.offset := interface_to_usbdev_#t~mem104#1.base, interface_to_usbdev_#t~mem104#1.offset;havoc interface_to_usbdev_#t~mem104#1.base, interface_to_usbdev_#t~mem104#1.offset;interface_to_usbdev_#res#1.base, interface_to_usbdev_#res#1.offset := interface_to_usbdev_~__mptr~0#1.base, -226576 + interface_to_usbdev_~__mptr~0#1.offset; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8113-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res686#1.base, ttusb_dec_boot_dsp_#t~memcpy~res686#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#b0~4#1.base, 6 + ttusb_dec_boot_dsp_~#b0~4#1.offset, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset, ttusb_dec_boot_dsp_~__len___2~1#1); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8113: ttusb_dec_boot_dsp_~__ret___2~1#1.base, ttusb_dec_boot_dsp_~__ret___2~1#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res686#1.base, ttusb_dec_boot_dsp_#t~memcpy~res686#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res686#1.base, ttusb_dec_boot_dsp_#t~memcpy~res686#1.offset; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7981-1: SUMMARY for call usb_free_urb(ttusb_dec_init_usb_#t~mem646#1.base, ttusb_dec_init_usb_#t~mem646#1.offset); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7981: havoc ttusb_dec_init_usb_#t~mem646#1.base, ttusb_dec_init_usb_#t~mem646#1.offset;ttusb_dec_init_usb_#res#1 := -12;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset);havoc ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset);havoc ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7783: SUMMARY for call list_del(ttusb_dec_stop_sec_feed_~finfo~2#1.base, 9 + ttusb_dec_stop_sec_feed_~finfo~2#1.offset); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6792: assume 0 != (ttusb_dec_get_stb_state_~version#1.base + ttusb_dec_get_stb_state_~version#1.offset) % 18446744073709551616;ttusb_dec_get_stb_state_~__len___1~0#1 := 4; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6792: assume !(0 != (ttusb_dec_get_stb_state_~version#1.base + ttusb_dec_get_stb_state_~version#1.offset) % 18446744073709551616); [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7849-1: ttusb_dec_alloc_iso_urbs_#res#1 := -12; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8444: ttusb_dec_probe_~tmp~30#1.base, ttusb_dec_probe_~tmp~30#1.offset := ttusb_dec_probe_#t~ret788#1.base, ttusb_dec_probe_#t~ret788#1.offset;havoc ttusb_dec_probe_#t~ret788#1.base, ttusb_dec_probe_#t~ret788#1.offset;ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset := ttusb_dec_probe_~tmp~30#1.base, ttusb_dec_probe_~tmp~30#1.offset; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8444-1: SUMMARY for call ttusb_dec_probe_#t~ret788#1.base, ttusb_dec_probe_#t~ret788#1.offset := kzalloc(15656, 208); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8378: assume (ttusb_dec_exit_tasklet_~item~2#1.base + ttusb_dec_exit_tasklet_~item~2#1.offset) % 18446744073709551616 != (ttusb_dec_exit_tasklet_~dec#1.base + (15185 + ttusb_dec_exit_tasklet_~dec#1.offset)) % 18446744073709551616; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8378: assume !((ttusb_dec_exit_tasklet_~item~2#1.base + ttusb_dec_exit_tasklet_~item~2#1.offset) % 18446744073709551616 != (ttusb_dec_exit_tasklet_~dec#1.base + (15185 + ttusb_dec_exit_tasklet_~dec#1.offset)) % 18446744073709551616); [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6330: assume dma_alloc_coherent_gfp_flags_~dma_mask~1#1 % 18446744073709551616 <= 16777215;dma_alloc_coherent_gfp_flags_~gfp#1 := 1 + dma_alloc_coherent_gfp_flags_~gfp#1 - dma_alloc_coherent_gfp_flags_~gfp#1 % 2; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6330: assume !(dma_alloc_coherent_gfp_flags_~dma_mask~1#1 % 18446744073709551616 <= 16777215); [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7784: SUMMARY for call spin_unlock_irqrestore(ttusb_dec_stop_sec_feed_~dec~8#1.base, 15337 + ttusb_dec_stop_sec_feed_~dec~8#1.offset, ttusb_dec_stop_sec_feed_~flags~4#1); srcloc: null [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7454-1: ttusb_dec_set_interface_#res#1 := 0;call ULTIMATE.dealloc(ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset);havoc ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset; [2025-02-08 02:46:44,146 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8181: assume 0 != ~debug~0; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8181: assume !(0 != ~debug~0); [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6794: assume ttusb_dec_get_stb_state_~__len___1~0#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6794: assume !(ttusb_dec_get_stb_state_~__len___1~0#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7785: SUMMARY for call kfree(ttusb_dec_stop_sec_feed_~finfo~2#1.base, ttusb_dec_stop_sec_feed_~finfo~2#1.offset); srcloc: null [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7587: call ttusb_dec_start_ts_feed_#t~mem547#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 2);call write~int#0(ttusb_dec_start_ts_feed_#t~mem547#1, ttusb_dec_start_ts_feed_~dec~5#1.base, 1980 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 2); [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9371: havoc ttusbdecfe_dvbs_attach_#t~ret874#1.base, ttusbdecfe_dvbs_attach_#t~ret874#1.offset;ttusb_dec_probe_#t~ret797#1.base, ttusb_dec_probe_#t~ret797#1.offset := ttusbdecfe_dvbs_attach_#res#1.base, ttusbdecfe_dvbs_attach_#res#1.offset;havoc ttusbdecfe_dvbs_attach_#t~ret874#1.base, ttusbdecfe_dvbs_attach_#t~ret874#1.offset, ttusbdecfe_dvbs_attach_~arg0#1.base, ttusbdecfe_dvbs_attach_~arg0#1.offset;havoc ttusbdecfe_dvbs_attach_#in~arg0#1.base, ttusbdecfe_dvbs_attach_#in~arg0#1.offset;assume { :end_inline_ttusbdecfe_dvbs_attach } true;call write~$Pointer$#0(ttusb_dec_probe_#t~ret797#1.base, ttusb_dec_probe_#t~ret797#1.offset, ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8); [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8512-1: ttusb_dec_probe_#res#1 := 0; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8446: assume 0 == (ttusb_dec_probe_~dec~10#1.base + ttusb_dec_probe_~dec~10#1.offset) % 18446744073709551616; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8446: assume !(0 == (ttusb_dec_probe_~dec~10#1.base + ttusb_dec_probe_~dec~10#1.offset) % 18446744073709551616); [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8182: assume -2147483648 <= ttusb_dec_init_stb_#t~ret700#1 && ttusb_dec_init_stb_#t~ret700#1 <= 2147483647;havoc ttusb_dec_init_stb_#t~ret700#1; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9371-2: ttusbdecfe_dvbs_attach_#res#1.base, ttusbdecfe_dvbs_attach_#res#1.offset := ttusbdecfe_dvbs_attach_#t~ret874#1.base, ttusbdecfe_dvbs_attach_#t~ret874#1.offset;havoc ttusbdecfe_dvbs_attach_#t~ret874#1.base, ttusbdecfe_dvbs_attach_#t~ret874#1.offset; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8050: assume 0 != ~debug~0; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8050: assume !(0 != ~debug~0); [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9371-3: SUMMARY for call ttusbdecfe_dvbs_attach_#t~ret874#1.base, ttusbdecfe_dvbs_attach_#t~ret874#1.offset := ldv_malloc(1261); srcloc: null [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8116-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret687#1 := ttusb_dec_send_command(ttusb_dec_boot_dsp_~dec#1.base, ttusb_dec_boot_dsp_~dec#1.offset, 65, 10, ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8116: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret687#1 && ttusb_dec_boot_dsp_#t~ret687#1 <= 2147483647;ttusb_dec_boot_dsp_~result~6#1 := ttusb_dec_boot_dsp_#t~ret687#1;havoc ttusb_dec_boot_dsp_#t~ret687#1; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8182-1: SUMMARY for call ttusb_dec_init_stb_#t~ret700#1 := printk(105, 0); srcloc: null [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7786: assume -2147483648 <= ttusb_dec_stop_sec_feed_#t~ret597#1 && ttusb_dec_stop_sec_feed_#t~ret597#1 <= 2147483647;havoc ttusb_dec_stop_sec_feed_#t~ret597#1;call ttusb_dec_stop_sec_feed_#t~mem598#1 := read~int#0(ttusb_dec_stop_sec_feed_~dec~8#1.base, 8603 + ttusb_dec_stop_sec_feed_~dec~8#1.offset, 4);call write~int#0(ttusb_dec_stop_sec_feed_#t~mem598#1 - 1, ttusb_dec_stop_sec_feed_~dec~8#1.base, 8603 + ttusb_dec_stop_sec_feed_~dec~8#1.offset, 4);havoc ttusb_dec_stop_sec_feed_#t~mem598#1; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6795-1: SUMMARY for call ttusb_dec_get_stb_state_#t~memcpy~res250#1.base, ttusb_dec_get_stb_state_#t~memcpy~res250#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, 8 + ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~__len___1~0#1); srcloc: null [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6795: ttusb_dec_get_stb_state_~__ret___1~0#1.base, ttusb_dec_get_stb_state_~__ret___1~0#1.offset := ttusb_dec_get_stb_state_#t~memcpy~res250#1.base, ttusb_dec_get_stb_state_#t~memcpy~res250#1.offset;havoc ttusb_dec_get_stb_state_#t~memcpy~res250#1.base, ttusb_dec_get_stb_state_#t~memcpy~res250#1.offset; [2025-02-08 02:46:44,147 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7786-1: SUMMARY for call ttusb_dec_stop_sec_feed_#t~ret597#1 := ttusb_dec_send_command(ttusb_dec_stop_sec_feed_~dec~8#1.base, ttusb_dec_stop_sec_feed_~dec~8#1.offset, 98, 2, ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7522: assume 0 != ~debug~0; [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7522: assume !(0 != ~debug~0); [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7588: SUMMARY for call ttusb_dec_set_pids(ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset); srcloc: null [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8315-1: SUMMARY for call ttusb_dec_exit_dvb_#t~ret768#1 := dvb_unregister_adapter(ttusb_dec_exit_dvb_~dec#1.base, 24 + ttusb_dec_exit_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8315: assume -2147483648 <= ttusb_dec_exit_dvb_#t~ret768#1 && ttusb_dec_exit_dvb_#t~ret768#1 <= 2147483647;havoc ttusb_dec_exit_dvb_#t~ret768#1; [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8447: assume -2147483648 <= ttusb_dec_probe_#t~ret789#1 && ttusb_dec_probe_#t~ret789#1 <= 2147483647;havoc ttusb_dec_probe_#t~ret789#1;ttusb_dec_probe_#res#1 := -12; [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8447-1: SUMMARY for call ttusb_dec_probe_#t~ret789#1 := printk(132, 0); srcloc: null [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8051-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret658#1 := printk(96, 0); srcloc: null [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8051: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret658#1 && ttusb_dec_boot_dsp_#t~ret658#1 <= 2147483647;havoc ttusb_dec_boot_dsp_#t~ret658#1; [2025-02-08 02:46:44,148 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8117: assume 0 != ttusb_dec_boot_dsp_~result~6#1;call ttusb_dec_boot_dsp_#t~mem688#1.base, ttusb_dec_boot_dsp_#t~mem688#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8); [2025-02-08 02:46:44,150 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8117: assume !(0 != ttusb_dec_boot_dsp_~result~6#1);ttusb_dec_boot_dsp_~trans_count~0#1 := 0;ttusb_dec_boot_dsp_~j~1#1 := 0; [2025-02-08 02:46:44,150 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7919: assume 0 != ttusb_init_rc_~err~0#1;assume { :begin_inline_input_free_device } true;input_free_device_#in~arg0#1.base, input_free_device_#in~arg0#1.offset := ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset;havoc input_free_device_~arg0#1.base, input_free_device_~arg0#1.offset;input_free_device_~arg0#1.base, input_free_device_~arg0#1.offset := input_free_device_#in~arg0#1.base, input_free_device_#in~arg0#1.offset; [2025-02-08 02:46:44,150 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7919: assume !(0 != ttusb_init_rc_~err~0#1);call write~$Pointer$#0(ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset, ttusb_init_rc_~dec#1.base, 15405 + ttusb_init_rc_~dec#1.offset, 8);call ttusb_init_rc_#t~mem622#1.base, ttusb_init_rc_#t~mem622#1.offset := read~$Pointer$#0(ttusb_init_rc_~dec#1.base, 2209 + ttusb_init_rc_~dec#1.offset, 8); [2025-02-08 02:46:44,150 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7985: havoc usb_fill_int_urb_#t~mem110#1, usb_fill_int_urb_#t~mem111#1, usb_fill_int_urb_#t~short112#1, usb_fill_int_urb_#t~bitwise113#1, usb_fill_int_urb_~urb#1.base, usb_fill_int_urb_~urb#1.offset, usb_fill_int_urb_~dev#1.base, usb_fill_int_urb_~dev#1.offset, usb_fill_int_urb_~pipe#1, usb_fill_int_urb_~transfer_buffer#1.base, usb_fill_int_urb_~transfer_buffer#1.offset, usb_fill_int_urb_~buffer_length#1, usb_fill_int_urb_~complete_fn#1.base, usb_fill_int_urb_~complete_fn#1.offset, usb_fill_int_urb_~context#1.base, usb_fill_int_urb_~context#1.offset, usb_fill_int_urb_~interval#1;havoc usb_fill_int_urb_#in~urb#1.base, usb_fill_int_urb_#in~urb#1.offset, usb_fill_int_urb_#in~dev#1.base, usb_fill_int_urb_#in~dev#1.offset, usb_fill_int_urb_#in~pipe#1, usb_fill_int_urb_#in~transfer_buffer#1.base, usb_fill_int_urb_#in~transfer_buffer#1.offset, usb_fill_int_urb_#in~buffer_length#1, usb_fill_int_urb_#in~complete_fn#1.base, usb_fill_int_urb_#in~complete_fn#1.offset, usb_fill_int_urb_#in~context#1.base, usb_fill_int_urb_#in~context#1.offset, usb_fill_int_urb_#in~interval#1;assume { :end_inline_usb_fill_int_urb } true;havoc ttusb_dec_init_usb_#t~mem647#1.base, ttusb_dec_init_usb_#t~mem647#1.offset;havoc ttusb_dec_init_usb_#t~mem648#1.base, ttusb_dec_init_usb_#t~mem648#1.offset;havoc ttusb_dec_init_usb_#t~mem649#1;havoc ttusb_dec_init_usb_#t~mem650#1.base, ttusb_dec_init_usb_#t~mem650#1.offset;call ttusb_dec_init_usb_#t~mem651#1.base, ttusb_dec_init_usb_#t~mem651#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8);call ttusb_dec_init_usb_#t~mem652#1 := read~int#0(ttusb_dec_init_usb_~dec#1.base, 2217 + ttusb_dec_init_usb_~dec#1.offset, 8);call write~int#0(ttusb_dec_init_usb_#t~mem652#1, ttusb_dec_init_usb_#t~mem651#1.base, 104 + ttusb_dec_init_usb_#t~mem651#1.offset, 8);havoc ttusb_dec_init_usb_#t~mem651#1.base, ttusb_dec_init_usb_#t~mem651#1.offset;havoc ttusb_dec_init_usb_#t~mem652#1;call ttusb_dec_init_usb_#t~mem653#1.base, ttusb_dec_init_usb_#t~mem653#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8);call ttusb_dec_init_usb_#t~mem654#1.base, ttusb_dec_init_usb_#t~mem654#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2209 + ttusb_dec_init_usb_~dec#1.offset, 8);call ttusb_dec_init_usb_#t~mem655#1 := read~int#0(ttusb_dec_init_usb_#t~mem654#1.base, 92 + ttusb_dec_init_usb_#t~mem654#1.offset, 4); [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7523-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret524#1 := printk(58, 0); srcloc: null [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6466: assume true;assume usb_make_path_#t~loopctr107#1 < (if usb_make_path_~size#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then usb_make_path_~size#1 % 18446744073709551616 % 18446744073709551616 else usb_make_path_~size#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616);havoc usb_make_path_#t~nondet108#1;call write~int#0(usb_make_path_#t~nondet108#1, usb_make_path_~buf#1.base, usb_make_path_~buf#1.offset + usb_make_path_#t~loopctr107#1, 8);usb_make_path_#t~loopctr107#1 := 1 + usb_make_path_#t~loopctr107#1; [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6466: assume true;usb_make_path_~actual~0#1 := usb_make_path_#t~ret109#1;havoc usb_make_path_#t~mem105#1.base, usb_make_path_#t~mem105#1.offset;havoc usb_make_path_#t~mem106#1.base, usb_make_path_#t~mem106#1.offset;havoc usb_make_path_#t~loopctr107#1;havoc usb_make_path_#t~nondet108#1;havoc usb_make_path_#t~ret109#1;usb_make_path_#res#1 := (if (if usb_make_path_~size#1 % 18446744073709551616 % 4294967296 <= 2147483647 then usb_make_path_~size#1 % 18446744073709551616 % 4294967296 else usb_make_path_~size#1 % 18446744073709551616 % 4294967296 - 4294967296) > usb_make_path_~actual~0#1 then usb_make_path_~actual~0#1 else -1); [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7523: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret524#1 && ttusb_dec_start_ts_feed_#t~ret524#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret524#1; [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6334: assume dma_alloc_coherent_gfp_flags_~dma_mask~1#1 % 18446744073709551616 <= 4294967295 && 0 == dma_alloc_coherent_gfp_flags_~gfp#1 % 2 % 4294967296; [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6334: assume !(dma_alloc_coherent_gfp_flags_~dma_mask~1#1 % 18446744073709551616 <= 4294967295 && 0 == dma_alloc_coherent_gfp_flags_~gfp#1 % 2 % 4294967296); [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8118: havoc ttusb_dec_boot_dsp_#t~mem688#1.base, ttusb_dec_boot_dsp_#t~mem688#1.offset;ttusb_dec_boot_dsp_#res#1 := ttusb_dec_boot_dsp_~result~6#1;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset; [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8118-1: SUMMARY for call release_firmware(ttusb_dec_boot_dsp_#t~mem688#1.base, ttusb_dec_boot_dsp_#t~mem688#1.offset); srcloc: null [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7920: havoc input_free_device_~arg0#1.base, input_free_device_~arg0#1.offset;havoc input_free_device_#in~arg0#1.base, input_free_device_#in~arg0#1.offset;assume { :end_inline_input_free_device } true;ttusb_init_rc_#res#1 := ttusb_init_rc_~err~0#1;call ULTIMATE.dealloc(ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset);havoc ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset; [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7788-1: SUMMARY for call ttusb_dec_stop_iso_xfer(ttusb_dec_stop_sec_feed_~dec~8#1.base, ttusb_dec_stop_sec_feed_~dec~8#1.offset); srcloc: null [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7788: ttusb_dec_stop_sec_feed_#res#1 := 0;call ULTIMATE.dealloc(ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset);havoc ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset; [2025-02-08 02:46:44,151 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6797-1: SUMMARY for call ttusb_dec_get_stb_state_#t~memcpy~res251#1.base, ttusb_dec_get_stb_state_#t~memcpy~res251#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, 8 + ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~__len___1~0#1); srcloc: null [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6797: ttusb_dec_get_stb_state_~__ret___1~0#1.base, ttusb_dec_get_stb_state_~__ret___1~0#1.offset := ttusb_dec_get_stb_state_#t~memcpy~res251#1.base, ttusb_dec_get_stb_state_#t~memcpy~res251#1.offset;havoc ttusb_dec_get_stb_state_#t~memcpy~res251#1.base, ttusb_dec_get_stb_state_#t~memcpy~res251#1.offset; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7590: assume 0 != ~debug~0; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7590: assume !(0 != ~debug~0); [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7590-1: assume ttusb_dec_start_ts_feed_#t~switch536#1; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7590-1: assume !ttusb_dec_start_ts_feed_#t~switch536#1;ttusb_dec_start_ts_feed_#t~switch536#1 := true; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335-1: [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9308: havoc dvb_unregister_frontend_#t~nondet867#1;ttusb_dec_exit_dvb_#t~ret759#1 := dvb_unregister_frontend_#res#1;havoc dvb_unregister_frontend_#t~nondet867#1, dvb_unregister_frontend_~arg0#1.base, dvb_unregister_frontend_~arg0#1.offset;havoc dvb_unregister_frontend_#in~arg0#1.base, dvb_unregister_frontend_#in~arg0#1.offset;assume { :end_inline_dvb_unregister_frontend } true;assume -2147483648 <= ttusb_dec_exit_dvb_#t~ret759#1 && ttusb_dec_exit_dvb_#t~ret759#1 <= 2147483647;havoc ttusb_dec_exit_dvb_#t~mem758#1.base, ttusb_dec_exit_dvb_#t~mem758#1.offset;havoc ttusb_dec_exit_dvb_#t~ret759#1;call ttusb_dec_exit_dvb_#t~mem760#1.base, ttusb_dec_exit_dvb_#t~mem760#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_~dec#1.base, 1964 + ttusb_dec_exit_dvb_~dec#1.offset, 8);call ttusb_dec_exit_dvb_#t~mem761#1.base, ttusb_dec_exit_dvb_#t~mem761#1.offset := read~$Pointer$#0(ttusb_dec_exit_dvb_#t~mem760#1.base, 176 + ttusb_dec_exit_dvb_#t~mem760#1.offset, 8); [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9374-2: ttusbdecfe_dvbt_attach_#res#1.base, ttusbdecfe_dvbt_attach_#res#1.offset := ttusbdecfe_dvbt_attach_#t~ret875#1.base, ttusbdecfe_dvbt_attach_#t~ret875#1.offset;havoc ttusbdecfe_dvbt_attach_#t~ret875#1.base, ttusbdecfe_dvbt_attach_#t~ret875#1.offset; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335: dma_alloc_coherent_gfp_flags_~gfp#1 := dma_alloc_coherent_gfp_flags_#t~bitwise68#1;havoc dma_alloc_coherent_gfp_flags_#t~bitwise68#1; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9374-3: SUMMARY for call ttusbdecfe_dvbt_attach_#t~ret875#1.base, ttusbdecfe_dvbt_attach_#t~ret875#1.offset := ldv_malloc(1261); srcloc: null [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335-4: assume 0 == dma_alloc_coherent_gfp_flags_~gfp#1 % 4294967296 || 4 == dma_alloc_coherent_gfp_flags_~gfp#1 % 4294967296;dma_alloc_coherent_gfp_flags_#t~bitwise68#1 := 4; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335-4: assume !(0 == dma_alloc_coherent_gfp_flags_~gfp#1 % 4294967296 || 4 == dma_alloc_coherent_gfp_flags_~gfp#1 % 4294967296); [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335-3: assume false;dma_alloc_coherent_gfp_flags_#t~bitwise68#1 := dma_alloc_coherent_gfp_flags_~gfp#1; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335-3: assume !false; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9374: havoc ttusbdecfe_dvbt_attach_#t~ret875#1.base, ttusbdecfe_dvbt_attach_#t~ret875#1.offset;ttusb_dec_probe_#t~ret798#1.base, ttusb_dec_probe_#t~ret798#1.offset := ttusbdecfe_dvbt_attach_#res#1.base, ttusbdecfe_dvbt_attach_#res#1.offset;havoc ttusbdecfe_dvbt_attach_#t~ret875#1.base, ttusbdecfe_dvbt_attach_#t~ret875#1.offset, ttusbdecfe_dvbt_attach_~arg0#1.base, ttusbdecfe_dvbt_attach_~arg0#1.offset;havoc ttusbdecfe_dvbt_attach_#in~arg0#1.base, ttusbdecfe_dvbt_attach_#in~arg0#1.offset;assume { :end_inline_ttusbdecfe_dvbt_attach } true;call write~$Pointer$#0(ttusb_dec_probe_#t~ret798#1.base, ttusb_dec_probe_#t~ret798#1.offset, ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8); [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6335-2: havoc dma_alloc_coherent_gfp_flags_#t~bitwise68#1;assume (dma_alloc_coherent_gfp_flags_#t~bitwise68#1 % 4294967296 >= dma_alloc_coherent_gfp_flags_~gfp#1 % 4294967296 && dma_alloc_coherent_gfp_flags_#t~bitwise68#1 % 4294967296 >= 4) && dma_alloc_coherent_gfp_flags_#t~bitwise68#1 % 4294967296 <= 4 + dma_alloc_coherent_gfp_flags_~gfp#1 % 4294967296; [2025-02-08 02:46:44,152 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8185: assume { :begin_inline_ttusb_dec_get_stb_state } true;ttusb_dec_get_stb_state_#in~dec#1.base, ttusb_dec_get_stb_state_#in~dec#1.offset, ttusb_dec_get_stb_state_#in~mode#1.base, ttusb_dec_get_stb_state_#in~mode#1.offset, ttusb_dec_get_stb_state_#in~model#1.base, ttusb_dec_get_stb_state_#in~model#1.offset, ttusb_dec_get_stb_state_#in~version#1.base, ttusb_dec_get_stb_state_#in~version#1.offset := ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset, ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset, ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset, ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset;havoc ttusb_dec_get_stb_state_#res#1;havoc ttusb_dec_get_stb_state_#t~ret239#1, ttusb_dec_get_stb_state_#t~ret240#1, ttusb_dec_get_stb_state_#t~mem241#1, ttusb_dec_get_stb_state_#t~memcpy~res242#1.base, ttusb_dec_get_stb_state_#t~memcpy~res242#1.offset, ttusb_dec_get_stb_state_#t~memcpy~res243#1.base, ttusb_dec_get_stb_state_#t~memcpy~res243#1.offset, ttusb_dec_get_stb_state_#t~mem244#1, ttusb_dec_get_stb_state_#t~ret245#1, ttusb_dec_get_stb_state_#t~memcpy~res246#1.base, ttusb_dec_get_stb_state_#t~memcpy~res246#1.offset, ttusb_dec_get_stb_state_#t~memcpy~res247#1.base, ttusb_dec_get_stb_state_#t~memcpy~res247#1.offset, ttusb_dec_get_stb_state_#t~mem248#1, ttusb_dec_get_stb_state_#t~ret249#1, ttusb_dec_get_stb_state_#t~memcpy~res250#1.base, ttusb_dec_get_stb_state_#t~memcpy~res250#1.offset, ttusb_dec_get_stb_state_#t~memcpy~res251#1.base, ttusb_dec_get_stb_state_#t~memcpy~res251#1.offset, ttusb_dec_get_stb_state_#t~mem252#1, ttusb_dec_get_stb_state_#t~ret253#1, ttusb_dec_get_stb_state_~dec#1.base, ttusb_dec_get_stb_state_~dec#1.offset, ttusb_dec_get_stb_state_~mode#1.base, ttusb_dec_get_stb_state_~mode#1.offset, ttusb_dec_get_stb_state_~model#1.base, ttusb_dec_get_stb_state_~model#1.offset, ttusb_dec_get_stb_state_~version#1.base, ttusb_dec_get_stb_state_~version#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset, ttusb_dec_get_stb_state_~result~1#1, ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~__len~1#1, ttusb_dec_get_stb_state_~__ret~2#1.base, ttusb_dec_get_stb_state_~__ret~2#1.offset, ttusb_dec_get_stb_state_~tmp___0~3#1, ttusb_dec_get_stb_state_~__len___0~1#1, ttusb_dec_get_stb_state_~__ret___0~1#1.base, ttusb_dec_get_stb_state_~__ret___0~1#1.offset, ttusb_dec_get_stb_state_~tmp___1~3#1, ttusb_dec_get_stb_state_~__len___1~0#1, ttusb_dec_get_stb_state_~__ret___1~0#1.base, ttusb_dec_get_stb_state_~__ret___1~0#1.offset, ttusb_dec_get_stb_state_~tmp___2~1#1;ttusb_dec_get_stb_state_~dec#1.base, ttusb_dec_get_stb_state_~dec#1.offset := ttusb_dec_get_stb_state_#in~dec#1.base, ttusb_dec_get_stb_state_#in~dec#1.offset;ttusb_dec_get_stb_state_~mode#1.base, ttusb_dec_get_stb_state_~mode#1.offset := ttusb_dec_get_stb_state_#in~mode#1.base, ttusb_dec_get_stb_state_#in~mode#1.offset;ttusb_dec_get_stb_state_~model#1.base, ttusb_dec_get_stb_state_~model#1.offset := ttusb_dec_get_stb_state_#in~model#1.base, ttusb_dec_get_stb_state_#in~model#1.offset;ttusb_dec_get_stb_state_~version#1.base, ttusb_dec_get_stb_state_~version#1.offset := ttusb_dec_get_stb_state_#in~version#1.base, ttusb_dec_get_stb_state_#in~version#1.offset;call ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset := #Ultimate.allocOnStack(60);call ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset := #Ultimate.allocOnStack(4);havoc ttusb_dec_get_stb_state_~result~1#1;call ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset := #Ultimate.allocOnStack(4);havoc ttusb_dec_get_stb_state_~__len~1#1;havoc ttusb_dec_get_stb_state_~__ret~2#1.base, ttusb_dec_get_stb_state_~__ret~2#1.offset;havoc ttusb_dec_get_stb_state_~tmp___0~3#1;havoc ttusb_dec_get_stb_state_~__len___0~1#1;havoc ttusb_dec_get_stb_state_~__ret___0~1#1.base, ttusb_dec_get_stb_state_~__ret___0~1#1.offset;havoc ttusb_dec_get_stb_state_~tmp___1~3#1;havoc ttusb_dec_get_stb_state_~__len___1~0#1;havoc ttusb_dec_get_stb_state_~__ret___1~0#1.base, ttusb_dec_get_stb_state_~__ret___1~0#1.offset;havoc ttusb_dec_get_stb_state_~tmp___2~1#1; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8186: assume 0 == ttusb_dec_init_stb_~result~7#1;call ttusb_dec_init_stb_#t~mem702#1 := read~int#5(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset, 4); [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8186: assume !(0 == ttusb_dec_init_stb_~result~7#1);ttusb_dec_init_stb_#res#1 := ttusb_dec_init_stb_~result~7#1;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset);havoc ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset);havoc ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset);havoc ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8054: call ttusb_dec_boot_dsp_#t~mem659#1.base, ttusb_dec_boot_dsp_#t~mem659#1.offset := read~$Pointer$#0(ttusb_dec_boot_dsp_~dec#1.base, 12 + ttusb_dec_boot_dsp_~dec#1.offset, 8);call ttusb_dec_boot_dsp_#t~mem660#1.base, ttusb_dec_boot_dsp_#t~mem660#1.offset := read~$Pointer$#0(ttusb_dec_boot_dsp_~dec#1.base, 2012 + ttusb_dec_boot_dsp_~dec#1.offset, 8);assume { :begin_inline_request_firmware } true;request_firmware_#in~arg0#1.base, request_firmware_#in~arg0#1.offset, request_firmware_#in~arg1#1.base, request_firmware_#in~arg1#1.offset, request_firmware_#in~arg2#1.base, request_firmware_#in~arg2#1.offset := ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, ttusb_dec_boot_dsp_#t~mem659#1.base, ttusb_dec_boot_dsp_#t~mem659#1.offset, ttusb_dec_boot_dsp_#t~mem660#1.base, 131 + ttusb_dec_boot_dsp_#t~mem660#1.offset;havoc request_firmware_#res#1;havoc request_firmware_#t~nondet872#1, request_firmware_~arg0#1.base, request_firmware_~arg0#1.offset, request_firmware_~arg1#1.base, request_firmware_~arg1#1.offset, request_firmware_~arg2#1.base, request_firmware_~arg2#1.offset;request_firmware_~arg0#1.base, request_firmware_~arg0#1.offset := request_firmware_#in~arg0#1.base, request_firmware_#in~arg0#1.offset;request_firmware_~arg1#1.base, request_firmware_~arg1#1.offset := request_firmware_#in~arg1#1.base, request_firmware_#in~arg1#1.offset;request_firmware_~arg2#1.base, request_firmware_~arg2#1.offset := request_firmware_#in~arg2#1.base, request_firmware_#in~arg2#1.offset;havoc request_firmware_#t~nondet872#1;assume -2147483648 <= request_firmware_#t~nondet872#1 && request_firmware_#t~nondet872#1 <= 2147483647;request_firmware_#res#1 := request_firmware_#t~nondet872#1;havoc request_firmware_#t~nondet872#1; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988-2: havoc ttusb_dec_init_usb_#t~bitwise656#1;assume (ttusb_dec_init_usb_#t~bitwise656#1 % 4294967296 >= ttusb_dec_init_usb_#t~mem655#1 % 4294967296 && ttusb_dec_init_usb_#t~bitwise656#1 % 4294967296 >= 4) && ttusb_dec_init_usb_#t~bitwise656#1 % 4294967296 <= 4 + ttusb_dec_init_usb_#t~mem655#1 % 4294967296; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988-1: [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988: call write~int#0(ttusb_dec_init_usb_#t~bitwise656#1, ttusb_dec_init_usb_#t~mem653#1.base, 92 + ttusb_dec_init_usb_#t~mem653#1.offset, 4);havoc ttusb_dec_init_usb_#t~mem653#1.base, ttusb_dec_init_usb_#t~mem653#1.offset;havoc ttusb_dec_init_usb_#t~mem654#1.base, ttusb_dec_init_usb_#t~mem654#1.offset;havoc ttusb_dec_init_usb_#t~mem655#1;havoc ttusb_dec_init_usb_#t~bitwise656#1; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7856-1: SUMMARY for call ttusb_dec_alloc_iso_urbs_#t~ret614#1.base, ttusb_dec_alloc_iso_urbs_#t~ret614#1.offset := usb_alloc_urb(4, 32); srcloc: null [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7856: ttusb_dec_alloc_iso_urbs_~urb~1#1.base, ttusb_dec_alloc_iso_urbs_~urb~1#1.offset := ttusb_dec_alloc_iso_urbs_#t~ret614#1.base, ttusb_dec_alloc_iso_urbs_#t~ret614#1.offset; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988-4: assume 0 == ttusb_dec_init_usb_#t~mem655#1 % 4294967296 || 4 == ttusb_dec_init_usb_#t~mem655#1 % 4294967296;ttusb_dec_init_usb_#t~bitwise656#1 := 4; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988-4: assume !(0 == ttusb_dec_init_usb_#t~mem655#1 % 4294967296 || 4 == ttusb_dec_init_usb_#t~mem655#1 % 4294967296); [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988-3: assume false;ttusb_dec_init_usb_#t~bitwise656#1 := ttusb_dec_init_usb_#t~mem655#1; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7988-3: assume !false; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7526: assume 0 != ~debug~0; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7526: assume !(0 != ~debug~0); [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7592-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret548#1 := printk(69, 0); srcloc: null [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7592: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret548#1 && ttusb_dec_start_ts_feed_#t~ret548#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret548#1; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8451: call ttusb_dec_probe_#t~mem790#1 := read~int#3(ttusb_dec_probe_~id#1.base, 4 + ttusb_dec_probe_~id#1.offset, 2);ttusb_dec_probe_#t~switch791#1 := 4102 == (if ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 else ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8451-1: SUMMARY for call usb_set_intfdata(ttusb_dec_probe_~intf#1.base, ttusb_dec_probe_~intf#1.offset, ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset); srcloc: null [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8187: assume 0 == ttusb_dec_init_stb_#t~mem702#1 % 4294967296;havoc ttusb_dec_init_stb_#t~mem702#1;call ttusb_dec_init_stb_#t~mem703#1 := read~int#2(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4); [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8187: assume !(0 == ttusb_dec_init_stb_#t~mem702#1 % 4294967296);havoc ttusb_dec_init_stb_#t~mem702#1;call ttusb_dec_init_stb_#t~mem711#1 := read~int#17(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset, 4);ttusb_dec_init_stb_#t~switch712#1 := 458753 == ttusb_dec_init_stb_#t~mem711#1; [2025-02-08 02:46:44,153 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8055: assume 0 != ttusb_dec_boot_dsp_~tmp___0~11#1;call ttusb_dec_boot_dsp_#t~mem662#1.base, ttusb_dec_boot_dsp_#t~mem662#1.offset := read~$Pointer$#0(ttusb_dec_boot_dsp_~dec#1.base, 12 + ttusb_dec_boot_dsp_~dec#1.offset, 8); [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8055: assume !(0 != ttusb_dec_boot_dsp_~tmp___0~11#1);call ttusb_dec_boot_dsp_#t~mem664#1.base, ttusb_dec_boot_dsp_#t~mem664#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8);call ttusb_dec_boot_dsp_#t~mem665#1.base, ttusb_dec_boot_dsp_#t~mem665#1.offset := read~$Pointer$#6(ttusb_dec_boot_dsp_#t~mem664#1.base, 8 + ttusb_dec_boot_dsp_#t~mem664#1.offset, 8);ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset := ttusb_dec_boot_dsp_#t~mem665#1.base, ttusb_dec_boot_dsp_#t~mem665#1.offset;havoc ttusb_dec_boot_dsp_#t~mem664#1.base, ttusb_dec_boot_dsp_#t~mem664#1.offset;havoc ttusb_dec_boot_dsp_#t~mem665#1.base, ttusb_dec_boot_dsp_#t~mem665#1.offset;call ttusb_dec_boot_dsp_#t~mem666#1.base, ttusb_dec_boot_dsp_#t~mem666#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8);call ttusb_dec_boot_dsp_#t~mem667#1 := read~int#6(ttusb_dec_boot_dsp_#t~mem666#1.base, ttusb_dec_boot_dsp_#t~mem666#1.offset, 8);ttusb_dec_boot_dsp_~firmware_size~0#1 := ttusb_dec_boot_dsp_#t~mem667#1;havoc ttusb_dec_boot_dsp_#t~mem666#1.base, ttusb_dec_boot_dsp_#t~mem666#1.offset;havoc ttusb_dec_boot_dsp_#t~mem667#1; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6800-2: call ttusb_dec_get_stb_state_#t~mem252#1 := read~int#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, 4); [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6800-1: SUMMARY for call ttusb_dec_get_stb_state_#t~ret253#1 := __fswab32(ttusb_dec_get_stb_state_#t~mem252#1); srcloc: null [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6800: ttusb_dec_get_stb_state_~tmp___2~1#1 := ttusb_dec_get_stb_state_#t~ret253#1;havoc ttusb_dec_get_stb_state_#t~mem252#1;havoc ttusb_dec_get_stb_state_#t~ret253#1;call write~int#2(ttusb_dec_get_stb_state_~tmp___2~1#1, ttusb_dec_get_stb_state_~version#1.base, ttusb_dec_get_stb_state_~version#1.offset, 4); [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7857: assume 0 == (ttusb_dec_alloc_iso_urbs_~urb~1#1.base + ttusb_dec_alloc_iso_urbs_~urb~1#1.offset) % 18446744073709551616; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7857: assume !(0 == (ttusb_dec_alloc_iso_urbs_~urb~1#1.base + ttusb_dec_alloc_iso_urbs_~urb~1#1.offset) % 18446744073709551616);call write~$Pointer$#0(ttusb_dec_alloc_iso_urbs_~urb~1#1.base, ttusb_dec_alloc_iso_urbs_~urb~1#1.offset, ttusb_dec_alloc_iso_urbs_~dec#1.base, 2241 + ttusb_dec_alloc_iso_urbs_~dec#1.offset + 8 * ttusb_dec_alloc_iso_urbs_~i~7#1, 8);ttusb_dec_alloc_iso_urbs_~i~7#1 := 1 + ttusb_dec_alloc_iso_urbs_~i~7#1; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7527-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret525#1 := printk(60, 0); srcloc: null [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7527: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret525#1 && ttusb_dec_start_ts_feed_#t~ret525#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret525#1; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8254: assume ttusb_dec_init_dvb_~result~8#1 < 0; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8254: assume !(ttusb_dec_init_dvb_~result~8#1 < 0);call write~int#0(32, ttusb_dec_init_dvb_~dec#1.base, 298 + ttusb_dec_init_dvb_~dec#1.offset, 4);call write~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 290 + ttusb_dec_init_dvb_~dec#1.offset, 8);call write~int#0(0, ttusb_dec_init_dvb_~dec#1.base, 302 + ttusb_dec_init_dvb_~dec#1.offset, 4);assume { :begin_inline_dvb_dmxdev_init } true;dvb_dmxdev_init_#in~arg0#1.base, dvb_dmxdev_init_#in~arg0#1.offset, dvb_dmxdev_init_#in~arg1#1.base, dvb_dmxdev_init_#in~arg1#1.offset := ttusb_dec_init_dvb_~dec#1.base, 266 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset;havoc dvb_dmxdev_init_#res#1;havoc dvb_dmxdev_init_#t~nondet861#1, dvb_dmxdev_init_~arg0#1.base, dvb_dmxdev_init_~arg0#1.offset, dvb_dmxdev_init_~arg1#1.base, dvb_dmxdev_init_~arg1#1.offset;dvb_dmxdev_init_~arg0#1.base, dvb_dmxdev_init_~arg0#1.offset := dvb_dmxdev_init_#in~arg0#1.base, dvb_dmxdev_init_#in~arg0#1.offset;dvb_dmxdev_init_~arg1#1.base, dvb_dmxdev_init_~arg1#1.offset := dvb_dmxdev_init_#in~arg1#1.base, dvb_dmxdev_init_#in~arg1#1.offset;havoc dvb_dmxdev_init_#t~nondet861#1;assume -2147483648 <= dvb_dmxdev_init_#t~nondet861#1 && dvb_dmxdev_init_#t~nondet861#1 <= 2147483647;dvb_dmxdev_init_#res#1 := dvb_dmxdev_init_#t~nondet861#1;havoc dvb_dmxdev_init_#t~nondet861#1; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6338-1: dma_alloc_coherent_gfp_flags_#res#1 := dma_alloc_coherent_gfp_flags_~gfp#1; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9377: havoc usb_alloc_coherent_#t~ret876#1.base, usb_alloc_coherent_#t~ret876#1.offset;ttusb_dec_init_usb_#t~ret644#1.base, ttusb_dec_init_usb_#t~ret644#1.offset := usb_alloc_coherent_#res#1.base, usb_alloc_coherent_#res#1.offset;havoc usb_alloc_coherent_#t~ret876#1.base, usb_alloc_coherent_#t~ret876#1.offset, usb_alloc_coherent_~arg0#1.base, usb_alloc_coherent_~arg0#1.offset, usb_alloc_coherent_~arg1#1, usb_alloc_coherent_~arg2#1, usb_alloc_coherent_~arg3#1.base, usb_alloc_coherent_~arg3#1.offset;havoc usb_alloc_coherent_#in~arg0#1.base, usb_alloc_coherent_#in~arg0#1.offset, usb_alloc_coherent_#in~arg1#1, usb_alloc_coherent_#in~arg2#1, usb_alloc_coherent_#in~arg3#1.base, usb_alloc_coherent_#in~arg3#1.offset;assume { :end_inline_usb_alloc_coherent } true;call write~$Pointer$#0(ttusb_dec_init_usb_#t~ret644#1.base, ttusb_dec_init_usb_#t~ret644#1.offset, ttusb_dec_init_usb_~dec#1.base, 2201 + ttusb_dec_init_usb_~dec#1.offset, 8);havoc ttusb_dec_init_usb_#t~mem643#1.base, ttusb_dec_init_usb_#t~mem643#1.offset;havoc ttusb_dec_init_usb_#t~ret644#1.base, ttusb_dec_init_usb_#t~ret644#1.offset;call ttusb_dec_init_usb_#t~mem645#1.base, ttusb_dec_init_usb_#t~mem645#1.offset := read~$Pointer$#0(ttusb_dec_init_usb_~dec#1.base, 2201 + ttusb_dec_init_usb_~dec#1.offset, 8); [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8188: assume 2882400171 == ttusb_dec_init_stb_#t~mem703#1 % 4294967296;havoc ttusb_dec_init_stb_#t~mem703#1; [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8188: assume !(2882400171 == ttusb_dec_init_stb_#t~mem703#1 % 4294967296);havoc ttusb_dec_init_stb_#t~mem703#1;call ttusb_dec_init_stb_#t~mem705#1 := read~int#2(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4);call ttusb_dec_init_stb_#t~mem706#1 := read~int#2(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4);call ttusb_dec_init_stb_#t~mem707#1 := read~int#2(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4);call ttusb_dec_init_stb_#t~mem708#1 := read~int#2(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4); [2025-02-08 02:46:44,154 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9377-2: usb_alloc_coherent_#res#1.base, usb_alloc_coherent_#res#1.offset := usb_alloc_coherent_#t~ret876#1.base, usb_alloc_coherent_#t~ret876#1.offset;havoc usb_alloc_coherent_#t~ret876#1.base, usb_alloc_coherent_#t~ret876#1.offset; [2025-02-08 02:46:44,155 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9377-3: SUMMARY for call usb_alloc_coherent_#t~ret876#1.base, usb_alloc_coherent_#t~ret876#1.offset := ldv_malloc(0); srcloc: null [2025-02-08 02:46:44,155 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8056-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret663#1 := printk(98, 0); srcloc: null [2025-02-08 02:46:44,155 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8056: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret663#1 && ttusb_dec_boot_dsp_#t~ret663#1 <= 2147483647;havoc ttusb_dec_boot_dsp_#t~mem662#1.base, ttusb_dec_boot_dsp_#t~mem662#1.offset;havoc ttusb_dec_boot_dsp_#t~ret663#1;ttusb_dec_boot_dsp_#res#1 := 1;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset; [2025-02-08 02:46:44,155 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7858: ttusb_dec_alloc_iso_urbs_#res#1 := -12; [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7858-1: SUMMARY for call ttusb_dec_free_iso_urbs(ttusb_dec_alloc_iso_urbs_~dec#1.base, ttusb_dec_alloc_iso_urbs_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8453: assume ttusb_dec_probe_#t~switch791#1; [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8453: assume !ttusb_dec_probe_#t~switch791#1;ttusb_dec_probe_#t~switch791#1 := ttusb_dec_probe_#t~switch791#1 || 4104 == (if ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 else ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8387: call ULTIMATE.dealloc(ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset);havoc ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset;havoc ttusb_dec_init_filters_#t~ret781#1.base, ttusb_dec_init_filters_#t~ret781#1.offset, ttusb_dec_init_filters_~dec#1.base, ttusb_dec_init_filters_~dec#1.offset, ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset;havoc ttusb_dec_init_filters_#in~dec#1.base, ttusb_dec_init_filters_#in~dec#1.offset;assume { :end_inline_ttusb_dec_init_filters } true;assume { :begin_inline_ttusb_dec_init_tasklet } true;ttusb_dec_init_tasklet_#in~dec#1.base, ttusb_dec_init_tasklet_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_init_tasklet_#t~ret615#1.base, ttusb_dec_init_tasklet_#t~ret615#1.offset, ttusb_dec_init_tasklet_~dec#1.base, ttusb_dec_init_tasklet_~dec#1.offset, ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset;ttusb_dec_init_tasklet_~dec#1.base, ttusb_dec_init_tasklet_~dec#1.offset := ttusb_dec_init_tasklet_#in~dec#1.base, ttusb_dec_init_tasklet_#in~dec#1.offset;call ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset := #Ultimate.allocOnStack(8); [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8255-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret722#1 := printk(115, 0); srcloc: null [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8255: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret722#1 && ttusb_dec_init_dvb_#t~ret722#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret722#1; [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8189-1: SUMMARY for call ttusb_dec_init_stb_#t~ret704#1 := printk(107, 0); srcloc: null [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8189: assume -2147483648 <= ttusb_dec_init_stb_#t~ret704#1 && ttusb_dec_init_stb_#t~ret704#1 <= 2147483647;havoc ttusb_dec_init_stb_#t~ret704#1; [2025-02-08 02:46:44,156 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7991-1: assume { :begin_inline_ttusb_dec_alloc_iso_urbs } true;ttusb_dec_alloc_iso_urbs_#in~dec#1.base, ttusb_dec_alloc_iso_urbs_#in~dec#1.offset := ttusb_dec_init_usb_~dec#1.base, ttusb_dec_init_usb_~dec#1.offset;havoc ttusb_dec_alloc_iso_urbs_#res#1;havoc ttusb_dec_alloc_iso_urbs_#t~ret608#1, ttusb_dec_alloc_iso_urbs_#t~ret609#1.base, ttusb_dec_alloc_iso_urbs_#t~ret609#1.offset, ttusb_dec_alloc_iso_urbs_#t~mem610#1.base, ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset, ttusb_dec_alloc_iso_urbs_#t~ret611#1, ttusb_dec_alloc_iso_urbs_#t~mem612#1.base, ttusb_dec_alloc_iso_urbs_#t~mem612#1.offset, ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.base, ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.offset, ttusb_dec_alloc_iso_urbs_#t~ret614#1.base, ttusb_dec_alloc_iso_urbs_#t~ret614#1.offset, ttusb_dec_alloc_iso_urbs_~dec#1.base, ttusb_dec_alloc_iso_urbs_~dec#1.offset, ttusb_dec_alloc_iso_urbs_~i~7#1, ttusb_dec_alloc_iso_urbs_~urb~1#1.base, ttusb_dec_alloc_iso_urbs_~urb~1#1.offset;ttusb_dec_alloc_iso_urbs_~dec#1.base, ttusb_dec_alloc_iso_urbs_~dec#1.offset := ttusb_dec_alloc_iso_urbs_#in~dec#1.base, ttusb_dec_alloc_iso_urbs_#in~dec#1.offset;havoc ttusb_dec_alloc_iso_urbs_~i~7#1;havoc ttusb_dec_alloc_iso_urbs_~urb~1#1.base, ttusb_dec_alloc_iso_urbs_~urb~1#1.offset; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7991: ttusb_dec_init_usb_#t~ret657#1 := ttusb_dec_alloc_iso_urbs_#res#1;havoc ttusb_dec_alloc_iso_urbs_#t~ret608#1, ttusb_dec_alloc_iso_urbs_#t~ret609#1.base, ttusb_dec_alloc_iso_urbs_#t~ret609#1.offset, ttusb_dec_alloc_iso_urbs_#t~mem610#1.base, ttusb_dec_alloc_iso_urbs_#t~mem610#1.offset, ttusb_dec_alloc_iso_urbs_#t~ret611#1, ttusb_dec_alloc_iso_urbs_#t~mem612#1.base, ttusb_dec_alloc_iso_urbs_#t~mem612#1.offset, ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.base, ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.offset, ttusb_dec_alloc_iso_urbs_#t~ret614#1.base, ttusb_dec_alloc_iso_urbs_#t~ret614#1.offset, ttusb_dec_alloc_iso_urbs_~dec#1.base, ttusb_dec_alloc_iso_urbs_~dec#1.offset, ttusb_dec_alloc_iso_urbs_~i~7#1, ttusb_dec_alloc_iso_urbs_~urb~1#1.base, ttusb_dec_alloc_iso_urbs_~urb~1#1.offset;havoc ttusb_dec_alloc_iso_urbs_#in~dec#1.base, ttusb_dec_alloc_iso_urbs_#in~dec#1.offset;assume { :end_inline_ttusb_dec_alloc_iso_urbs } true;assume -2147483648 <= ttusb_dec_init_usb_#t~ret657#1 && ttusb_dec_init_usb_#t~ret657#1 <= 2147483647;ttusb_dec_init_usb_~tmp___3~1#1 := ttusb_dec_init_usb_#t~ret657#1;havoc ttusb_dec_init_usb_#t~ret657#1;ttusb_dec_init_usb_#res#1 := ttusb_dec_init_usb_~tmp___3~1#1;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset);havoc ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset);havoc ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7925-1: SUMMARY for call ttusb_init_rc_#t~ret623#1 := usb_submit_urb(ttusb_init_rc_#t~mem622#1.base, ttusb_init_rc_#t~mem622#1.offset, 208); srcloc: null [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7925: assume -2147483648 <= ttusb_init_rc_#t~ret623#1 && ttusb_init_rc_#t~ret623#1 <= 2147483647;ttusb_init_rc_~tmp~26#1 := ttusb_init_rc_#t~ret623#1;havoc ttusb_init_rc_#t~mem622#1.base, ttusb_init_rc_#t~mem622#1.offset;havoc ttusb_init_rc_#t~ret623#1; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7727: assume 0 != ~debug~0; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7727: assume !(0 != ~debug~0); [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8586: havoc main_#t~nondet824#1;assume -2147483648 <= main_#t~nondet824#1 && main_#t~nondet824#1 <= 2147483647;main_~tmp~32#1 := main_#t~nondet824#1;main_#t~switch825#1 := 0 == main_~tmp~32#1; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7595-1: ttusb_dec_start_ts_feed_#res#1 := -38;call ULTIMATE.dealloc(ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset);havoc ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8322: assume 0 != ~debug~0; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8322: assume !(0 != ~debug~0); [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8520: ttusb_dec_disconnect_#t~ret818#1.base, ttusb_dec_disconnect_#t~ret818#1.offset := usb_get_intfdata_#res#1.base, usb_get_intfdata_#res#1.offset;havoc usb_get_intfdata_#t~ret102#1.base, usb_get_intfdata_#t~ret102#1.offset, usb_get_intfdata_~intf#1.base, usb_get_intfdata_~intf#1.offset, usb_get_intfdata_~tmp~9#1.base, usb_get_intfdata_~tmp~9#1.offset;havoc usb_get_intfdata_#in~intf#1.base, usb_get_intfdata_#in~intf#1.offset;assume { :end_inline_usb_get_intfdata } true;ttusb_dec_disconnect_~tmp~31#1.base, ttusb_dec_disconnect_~tmp~31#1.offset := ttusb_dec_disconnect_#t~ret818#1.base, ttusb_dec_disconnect_#t~ret818#1.offset;havoc ttusb_dec_disconnect_#t~ret818#1.base, ttusb_dec_disconnect_#t~ret818#1.offset;ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset := ttusb_dec_disconnect_~tmp~31#1.base, ttusb_dec_disconnect_~tmp~31#1.offset; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8454: SUMMARY for call ttusb_dec_set_model(ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, 2); srcloc: null [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8256-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret723#1 := dvb_unregister_adapter(ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8256: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret723#1 && ttusb_dec_init_dvb_#t~ret723#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret723#1;ttusb_dec_init_dvb_#res#1 := ttusb_dec_init_dvb_~result~8#1; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8124-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret689#1.base, ttusb_dec_boot_dsp_#t~ret689#1.offset := kmalloc(4096, 208); srcloc: null [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8124: ttusb_dec_boot_dsp_~tmp___6~0#1.base, ttusb_dec_boot_dsp_~tmp___6~0#1.offset := ttusb_dec_boot_dsp_#t~ret689#1.base, ttusb_dec_boot_dsp_#t~ret689#1.offset;havoc ttusb_dec_boot_dsp_#t~ret689#1.base, ttusb_dec_boot_dsp_#t~ret689#1.offset;ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset := ttusb_dec_boot_dsp_~tmp___6~0#1.base, ttusb_dec_boot_dsp_~tmp___6~0#1.offset; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7926: assume 0 != ttusb_init_rc_~tmp~26#1; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7926: assume !(0 != ttusb_init_rc_~tmp~26#1); [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7728-1: SUMMARY for call ttusb_dec_start_feed_#t~ret577#1 := printk(73, 0); srcloc: null [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7728: assume -2147483648 <= ttusb_dec_start_feed_#t~ret577#1 && ttusb_dec_start_feed_#t~ret577#1 <= 2147483647;havoc ttusb_dec_start_feed_#t~ret577#1; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530: assume 0 != ttusb_dec_start_ts_feed_#t~bitwise527#1;havoc ttusb_dec_start_ts_feed_#t~mem526#1;havoc ttusb_dec_start_ts_feed_#t~bitwise527#1; [2025-02-08 02:46:44,157 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530: assume !(0 != ttusb_dec_start_ts_feed_#t~bitwise527#1);havoc ttusb_dec_start_ts_feed_#t~mem526#1;havoc ttusb_dec_start_ts_feed_#t~bitwise527#1; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7596-1: assume ttusb_dec_start_ts_feed_#t~switch536#1; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7596-1: assume !ttusb_dec_start_ts_feed_#t~switch536#1;havoc ttusb_dec_start_ts_feed_#t~mem535#1;havoc ttusb_dec_start_ts_feed_#t~switch536#1;havoc ttusb_dec_start_ts_feed_#t~mem538#1;havoc ttusb_dec_start_ts_feed_#t~mem539#1;havoc ttusb_dec_start_ts_feed_#t~mem540#1.base, ttusb_dec_start_ts_feed_#t~mem540#1.offset;havoc ttusb_dec_start_ts_feed_#t~mem542#1;havoc ttusb_dec_start_ts_feed_#t~mem543#1.base, ttusb_dec_start_ts_feed_#t~mem543#1.offset;havoc ttusb_dec_start_ts_feed_#t~mem544#1;havoc ttusb_dec_start_ts_feed_#t~mem547#1;havoc ttusb_dec_start_ts_feed_#t~mem535#1;havoc ttusb_dec_start_ts_feed_#t~switch536#1;havoc ttusb_dec_start_ts_feed_#t~mem538#1;havoc ttusb_dec_start_ts_feed_#t~mem539#1;havoc ttusb_dec_start_ts_feed_#t~mem540#1.base, ttusb_dec_start_ts_feed_#t~mem540#1.offset;havoc ttusb_dec_start_ts_feed_#t~mem542#1;havoc ttusb_dec_start_ts_feed_#t~mem543#1.base, ttusb_dec_start_ts_feed_#t~mem543#1.offset;havoc ttusb_dec_start_ts_feed_#t~mem544#1;havoc ttusb_dec_start_ts_feed_#t~mem547#1; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7596: assume 0 != ~debug~0;call ttusb_dec_start_ts_feed_#t~mem549#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4440 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 4); [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7596: assume !(0 != ~debug~0); [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-4: assume 0 == ttusb_dec_start_ts_feed_#t~mem526#1;ttusb_dec_start_ts_feed_#t~bitwise527#1 := 0; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-4: assume !(0 == ttusb_dec_start_ts_feed_#t~mem526#1); [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-3: assume 4 == ttusb_dec_start_ts_feed_#t~mem526#1;ttusb_dec_start_ts_feed_#t~bitwise527#1 := ttusb_dec_start_ts_feed_#t~mem526#1; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-3: assume !(4 == ttusb_dec_start_ts_feed_#t~mem526#1); [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-2: havoc ttusb_dec_start_ts_feed_#t~bitwise527#1;assume ((((ttusb_dec_start_ts_feed_#t~mem526#1 < 0 || ttusb_dec_start_ts_feed_#t~bitwise527#1 <= ttusb_dec_start_ts_feed_#t~mem526#1) && ttusb_dec_start_ts_feed_#t~bitwise527#1 <= 4) && ttusb_dec_start_ts_feed_#t~bitwise527#1 >= 0) && (ttusb_dec_start_ts_feed_#t~mem526#1 >= 0 || ttusb_dec_start_ts_feed_#t~bitwise527#1 > 4 + ttusb_dec_start_ts_feed_#t~mem526#1)) && ttusb_dec_start_ts_feed_#t~bitwise527#1 >= -2147483648; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-1: [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8323-1: SUMMARY for call ttusb_dec_exit_rc_#t~ret769#1 := printk(125, 0); srcloc: null [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8323: assume -2147483648 <= ttusb_dec_exit_rc_#t~ret769#1 && ttusb_dec_exit_rc_#t~ret769#1 <= 2147483647;havoc ttusb_dec_exit_rc_#t~ret769#1; [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7530-5: call ttusb_dec_start_ts_feed_#t~mem526#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4436 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 4); [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8389: SUMMARY for call INIT_LIST_HEAD(ttusb_dec_init_filters_~dec#1.base, 15321 + ttusb_dec_init_filters_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8191-1: SUMMARY for call ttusb_dec_init_stb_#t~ret709#1 := printk(108, 0); srcloc: null [2025-02-08 02:46:44,158 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8191: assume -2147483648 <= ttusb_dec_init_stb_#t~ret709#1 && ttusb_dec_init_stb_#t~ret709#1 <= 2147483647;havoc ttusb_dec_init_stb_#t~mem705#1;havoc ttusb_dec_init_stb_#t~mem706#1;havoc ttusb_dec_init_stb_#t~mem707#1;havoc ttusb_dec_init_stb_#t~mem708#1;havoc ttusb_dec_init_stb_#t~ret709#1; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-1: ##fun~$Pointer$~TO~int_#res#1 := ##fun~$Pointer$~TO~int_#t~funptrres886#1;havoc ##fun~$Pointer$~TO~int_#t~funptrres886#1;havoc ##fun~$Pointer$~TO~int_#t~ret887#1;havoc ##fun~$Pointer$~TO~int_#t~ret888#1; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-2: ##fun~$Pointer$~TO~int_#t~ret888#1 := ttusb_dec_stop_feed_#res#1;havoc ttusb_dec_stop_feed_#t~ret599#1, ttusb_dec_stop_feed_#t~mem600#1, ttusb_dec_stop_feed_#t~switch601#1, ttusb_dec_stop_feed_#t~ret602#1, ttusb_dec_stop_feed_#t~ret603#1, ttusb_dec_stop_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_feed_~dvbdmxfeed#1.offset, ttusb_dec_stop_feed_~tmp~25#1, ttusb_dec_stop_feed_~tmp___0~9#1;havoc ttusb_dec_stop_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_feed_#in~dvbdmxfeed#1.offset;assume { :end_inline_ttusb_dec_stop_feed } true;assume -2147483648 <= ##fun~$Pointer$~TO~int_#t~ret888#1 && ##fun~$Pointer$~TO~int_#t~ret888#1 <= 2147483647;##fun~$Pointer$~TO~int_#t~funptrres886#1 := ##fun~$Pointer$~TO~int_#t~ret888#1; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-3: assume ##fun~$Pointer$~TO~int_#in~#fp#1.base == #funAddr~ttusb_dec_stop_feed.base && ##fun~$Pointer$~TO~int_#in~#fp#1.offset == #funAddr~ttusb_dec_stop_feed.offset;assume { :begin_inline_ttusb_dec_stop_feed } true;ttusb_dec_stop_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_feed_#in~dvbdmxfeed#1.offset := ##fun~$Pointer$~TO~int_#~749#1.base, ##fun~$Pointer$~TO~int_#~749#1.offset;havoc ttusb_dec_stop_feed_#res#1;havoc ttusb_dec_stop_feed_#t~ret599#1, ttusb_dec_stop_feed_#t~mem600#1, ttusb_dec_stop_feed_#t~switch601#1, ttusb_dec_stop_feed_#t~ret602#1, ttusb_dec_stop_feed_#t~ret603#1, ttusb_dec_stop_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_feed_~dvbdmxfeed#1.offset, ttusb_dec_stop_feed_~tmp~25#1, ttusb_dec_stop_feed_~tmp___0~9#1;ttusb_dec_stop_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_feed_~dvbdmxfeed#1.offset := ttusb_dec_stop_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_feed_#in~dvbdmxfeed#1.offset;havoc ttusb_dec_stop_feed_~tmp~25#1;havoc ttusb_dec_stop_feed_~tmp___0~9#1; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-3: assume !(##fun~$Pointer$~TO~int_#in~#fp#1.base == #funAddr~ttusb_dec_stop_feed.base && ##fun~$Pointer$~TO~int_#in~#fp#1.offset == #funAddr~ttusb_dec_stop_feed.offset);assume { :begin_inline_ttusb_dec_start_feed } true;ttusb_dec_start_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_feed_#in~dvbdmxfeed#1.offset := ##fun~$Pointer$~TO~int_#~749#1.base, ##fun~$Pointer$~TO~int_#~749#1.offset;havoc ttusb_dec_start_feed_#res#1;havoc ttusb_dec_start_feed_#t~mem576#1.base, ttusb_dec_start_feed_#t~mem576#1.offset, ttusb_dec_start_feed_#t~ret577#1, ttusb_dec_start_feed_#t~mem578#1.base, ttusb_dec_start_feed_#t~mem578#1.offset, ttusb_dec_start_feed_#t~mem579#1, ttusb_dec_start_feed_#t~ret580#1, ttusb_dec_start_feed_#t~mem581#1, ttusb_dec_start_feed_#t~switch582#1, ttusb_dec_start_feed_#t~ret583#1, ttusb_dec_start_feed_#t~ret584#1, ttusb_dec_start_feed_#t~mem585#1, ttusb_dec_start_feed_#t~ret586#1, ttusb_dec_start_feed_~dvbdmxfeed#1.base, ttusb_dec_start_feed_~dvbdmxfeed#1.offset, ttusb_dec_start_feed_~dvbdmx~1#1.base, ttusb_dec_start_feed_~dvbdmx~1#1.offset, ttusb_dec_start_feed_~tmp~23#1, ttusb_dec_start_feed_~tmp___0~8#1;ttusb_dec_start_feed_~dvbdmxfeed#1.base, ttusb_dec_start_feed_~dvbdmxfeed#1.offset := ttusb_dec_start_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_feed_#in~dvbdmxfeed#1.offset;havoc ttusb_dec_start_feed_~dvbdmx~1#1.base, ttusb_dec_start_feed_~dvbdmx~1#1.offset;havoc ttusb_dec_start_feed_~tmp~23#1;havoc ttusb_dec_start_feed_~tmp___0~8#1;call ttusb_dec_start_feed_#t~mem576#1.base, ttusb_dec_start_feed_#t~mem576#1.offset := read~$Pointer$#0(ttusb_dec_start_feed_~dvbdmxfeed#1.base, 4374 + ttusb_dec_start_feed_~dvbdmxfeed#1.offset, 8);ttusb_dec_start_feed_~dvbdmx~1#1.base, ttusb_dec_start_feed_~dvbdmx~1#1.offset := ttusb_dec_start_feed_#t~mem576#1.base, ttusb_dec_start_feed_#t~mem576#1.offset;havoc ttusb_dec_start_feed_#t~mem576#1.base, ttusb_dec_start_feed_#t~mem576#1.offset; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-4: assume #Ultimate.C_memset_#t~loopctr889#1 % 18446744073709551616 < #Ultimate.C_memset_#amount#1 % 18446744073709551616;#memory_int#0 := #memory_int#0[#Ultimate.C_memset_#ptr#1.base,#Ultimate.C_memset_#ptr#1.offset + #Ultimate.C_memset_#t~loopctr889#1 := #Ultimate.C_memset_#value#1];#memory_$Pointer$#0.base, #memory_$Pointer$#0.offset := #memory_$Pointer$#0.base[#Ultimate.C_memset_#ptr#1.base,#Ultimate.C_memset_#ptr#1.offset + #Ultimate.C_memset_#t~loopctr889#1 := 0], #memory_$Pointer$#0.offset[#Ultimate.C_memset_#ptr#1.base,#Ultimate.C_memset_#ptr#1.offset + #Ultimate.C_memset_#t~loopctr889#1 := (if #Ultimate.C_memset_#value#1 % 256 % 18446744073709551616 <= 9223372036854775807 then #Ultimate.C_memset_#value#1 % 256 % 18446744073709551616 else #Ultimate.C_memset_#value#1 % 256 % 18446744073709551616 - 18446744073709551616)];#Ultimate.C_memset_#t~loopctr889#1 := 1 + #Ultimate.C_memset_#t~loopctr889#1; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L-1-4: assume !(#Ultimate.C_memset_#t~loopctr889#1 % 18446744073709551616 < #Ultimate.C_memset_#amount#1 % 18446744073709551616);assume #Ultimate.C_memset_#res#1.base == #Ultimate.C_memset_#ptr#1.base && #Ultimate.C_memset_#res#1.offset == #Ultimate.C_memset_#ptr#1.offset;ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.base, ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.offset := #Ultimate.C_memset_#res#1.base, #Ultimate.C_memset_#res#1.offset;havoc #Ultimate.C_memset_#t~loopctr889#1;havoc #Ultimate.C_memset_#ptr#1.base, #Ultimate.C_memset_#ptr#1.offset, #Ultimate.C_memset_#value#1, #Ultimate.C_memset_#amount#1;assume { :end_inline_#Ultimate.C_memset } true;havoc ttusb_dec_alloc_iso_urbs_#t~mem612#1.base, ttusb_dec_alloc_iso_urbs_#t~mem612#1.offset;havoc ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.base, ttusb_dec_alloc_iso_urbs_#t~memset~res613#1.offset;ttusb_dec_alloc_iso_urbs_~i~7#1 := 0; [2025-02-08 02:46:44,159 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7927-1: SUMMARY for call ttusb_init_rc_#t~ret624#1 := printk(88, 0); srcloc: null [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7927: assume -2147483648 <= ttusb_init_rc_#t~ret624#1 && ttusb_init_rc_#t~ret624#1 <= 2147483647;havoc ttusb_init_rc_#t~ret624#1; [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6804-1: ttusb_dec_get_stb_state_#res#1 := 0;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset);havoc ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset);havoc ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset);havoc ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset; [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8588: assume 0 != main_~res_ttusb_dec_probe_38~0#1; [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8588: assume !(0 != main_~res_ttusb_dec_probe_38~0#1);main_~ldv_s_ttusb_dec_driver_usb_driver~0#1 := 1 + main_~ldv_s_ttusb_dec_driver_usb_driver~0#1; [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8588-1: assume 0 == main_~ldv_s_ttusb_dec_driver_usb_driver~0#1;assume { :begin_inline_ttusb_dec_probe } true;ttusb_dec_probe_#in~intf#1.base, ttusb_dec_probe_#in~intf#1.offset, ttusb_dec_probe_#in~id#1.base, ttusb_dec_probe_#in~id#1.offset := main_~var_group1~0#1.base, main_~var_group1~0#1.offset, main_~var_ttusb_dec_probe_38_p1~0#1.base, main_~var_ttusb_dec_probe_38_p1~0#1.offset;havoc ttusb_dec_probe_#res#1;havoc ttusb_dec_probe_#t~ret786#1, ttusb_dec_probe_#t~ret787#1.base, ttusb_dec_probe_#t~ret787#1.offset, ttusb_dec_probe_#t~ret788#1.base, ttusb_dec_probe_#t~ret788#1.offset, ttusb_dec_probe_#t~ret789#1, ttusb_dec_probe_#t~mem790#1, ttusb_dec_probe_#t~switch791#1, ttusb_dec_probe_#t~ret792#1, ttusb_dec_probe_#t~ret793#1, ttusb_dec_probe_#t~ret794#1, ttusb_dec_probe_#t~mem795#1, ttusb_dec_probe_#t~switch796#1, ttusb_dec_probe_#t~ret797#1.base, ttusb_dec_probe_#t~ret797#1.offset, ttusb_dec_probe_#t~ret798#1.base, ttusb_dec_probe_#t~ret798#1.offset, ttusb_dec_probe_#t~mem799#1.base, ttusb_dec_probe_#t~mem799#1.offset, ttusb_dec_probe_#t~mem800#1.base, ttusb_dec_probe_#t~mem800#1.offset, ttusb_dec_probe_#t~mem801#1, ttusb_dec_probe_#t~mem802#1.base, ttusb_dec_probe_#t~mem802#1.offset, ttusb_dec_probe_#t~mem803#1, ttusb_dec_probe_#t~ret804#1, ttusb_dec_probe_#t~mem805#1.base, ttusb_dec_probe_#t~mem805#1.offset, ttusb_dec_probe_#t~ret806#1, ttusb_dec_probe_#t~ret807#1, ttusb_dec_probe_#t~mem808#1.base, ttusb_dec_probe_#t~mem808#1.offset, ttusb_dec_probe_#t~mem809#1.base, ttusb_dec_probe_#t~mem809#1.offset, ttusb_dec_probe_#t~mem813#1.base, ttusb_dec_probe_#t~mem813#1.offset, ttusb_dec_probe_#t~mem814#1.base, ttusb_dec_probe_#t~mem814#1.offset, ttusb_dec_probe_#t~mem815#1.base, ttusb_dec_probe_#t~mem815#1.offset, ttusb_dec_probe_#t~ret816#1, ttusb_dec_probe_#t~ret817#1, ttusb_dec_probe_~intf#1.base, ttusb_dec_probe_~intf#1.offset, ttusb_dec_probe_~id#1.base, ttusb_dec_probe_~id#1.offset, ttusb_dec_probe_~udev~0#1.base, ttusb_dec_probe_~udev~0#1.offset, ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, ttusb_dec_probe_~tmp~30#1.base, ttusb_dec_probe_~tmp~30#1.offset, ttusb_dec_probe_~tmp___0~12#1, ttusb_dec_probe_~tmp___1~9#1, ttusb_dec_probe_~tmp___2~6#1;ttusb_dec_probe_~intf#1.base, ttusb_dec_probe_~intf#1.offset := ttusb_dec_probe_#in~intf#1.base, ttusb_dec_probe_#in~intf#1.offset;ttusb_dec_probe_~id#1.base, ttusb_dec_probe_~id#1.offset := ttusb_dec_probe_#in~id#1.base, ttusb_dec_probe_#in~id#1.offset;havoc ttusb_dec_probe_~udev~0#1.base, ttusb_dec_probe_~udev~0#1.offset;havoc ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_probe_~tmp~30#1.base, ttusb_dec_probe_~tmp~30#1.offset;havoc ttusb_dec_probe_~tmp___0~12#1;havoc ttusb_dec_probe_~tmp___1~9#1;havoc ttusb_dec_probe_~tmp___2~6#1; [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8588-1: assume !(0 == main_~ldv_s_ttusb_dec_driver_usb_driver~0#1); [2025-02-08 02:46:44,161 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8522: SUMMARY for call usb_set_intfdata(ttusb_dec_disconnect_~intf#1.base, ttusb_dec_disconnect_~intf#1.offset, 0, 0); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8588-2: assume main_#t~switch825#1; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8588-2: assume !main_#t~switch825#1;main_#t~switch825#1 := main_#t~switch825#1 || 1 == main_~tmp~32#1; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7531: assume 0 != ~debug~0; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7531: assume !(0 != ~debug~0); [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8390: havoc ttusb_dec_init_filters_#t~ret781#1.base, ttusb_dec_init_filters_#t~ret781#1.offset; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8456: assume ttusb_dec_probe_#t~switch791#1; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8456: assume !ttusb_dec_probe_#t~switch791#1;ttusb_dec_probe_#t~switch791#1 := ttusb_dec_probe_#t~switch791#1 || 4105 == (if ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 else ttusb_dec_probe_#t~mem790#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8390-1: SUMMARY for call ttusb_dec_init_filters_#t~ret781#1.base, ttusb_dec_init_filters_#t~ret781#1.offset := spinlock_check(ttusb_dec_init_filters_~dec#1.base, 15337 + ttusb_dec_init_filters_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8126: assume 0 == (ttusb_dec_boot_dsp_~b~5#1.base + ttusb_dec_boot_dsp_~b~5#1.offset) % 18446744073709551616;call ttusb_dec_boot_dsp_#t~mem690#1.base, ttusb_dec_boot_dsp_#t~mem690#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8); [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8126: assume !(0 == (ttusb_dec_boot_dsp_~b~5#1.base + ttusb_dec_boot_dsp_~b~5#1.offset) % 18446744073709551616);ttusb_dec_boot_dsp_~i~9#1 := 0; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7598: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret550#1 && ttusb_dec_start_ts_feed_#t~ret550#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~mem549#1;havoc ttusb_dec_start_ts_feed_#t~ret550#1; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8523: assume 0 != ~debug~0; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8523: assume !(0 != ~debug~0); [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7532-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret528#1 := printk(61, 0); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7532: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret528#1 && ttusb_dec_start_ts_feed_#t~ret528#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret528#1; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7598-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret550#1 := printk(70, 0); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8391-1: SUMMARY for call __raw_spin_lock_init(ttusb_dec_init_filters_~dec#1.base, 15337 + ttusb_dec_init_filters_~dec#1.offset, 129, 0, ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8391: call ULTIMATE.dealloc(ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset);havoc ttusb_dec_init_filters_~#__key~2#1.base, ttusb_dec_init_filters_~#__key~2#1.offset; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8457: SUMMARY for call ttusb_dec_set_model(ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, 0); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8127-1: SUMMARY for call release_firmware(ttusb_dec_boot_dsp_#t~mem690#1.base, ttusb_dec_boot_dsp_#t~mem690#1.offset); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8127: havoc ttusb_dec_boot_dsp_#t~mem690#1.base, ttusb_dec_boot_dsp_#t~mem690#1.offset;ttusb_dec_boot_dsp_#res#1 := -12;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7731-1: call ttusb_dec_start_feed_#t~mem578#1.base, ttusb_dec_start_feed_#t~mem578#1.offset := read~$Pointer$#0(ttusb_dec_start_feed_~dvbdmx~1#1.base, 4 + ttusb_dec_start_feed_~dvbdmx~1#1.offset, 8); [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7731: assume 0 == (ttusb_dec_start_feed_#t~mem578#1.base + ttusb_dec_start_feed_#t~mem578#1.offset) % 18446744073709551616;havoc ttusb_dec_start_feed_#t~mem578#1.base, ttusb_dec_start_feed_#t~mem578#1.offset;ttusb_dec_start_feed_#res#1 := -22; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7731: assume !(0 == (ttusb_dec_start_feed_#t~mem578#1.base + ttusb_dec_start_feed_#t~mem578#1.offset) % 18446744073709551616);havoc ttusb_dec_start_feed_#t~mem578#1.base, ttusb_dec_start_feed_#t~mem578#1.offset; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7797: assume 0 != ~debug~0; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7797: assume !(0 != ~debug~0); [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8524: assume -2147483648 <= ttusb_dec_disconnect_#t~ret819#1 && ttusb_dec_disconnect_#t~ret819#1 <= 2147483647;havoc ttusb_dec_disconnect_#t~ret819#1; [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8524-1: SUMMARY for call ttusb_dec_disconnect_#t~ret819#1 := printk(136, 0); srcloc: null [2025-02-08 02:46:44,162 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6410: pci_alloc_consistent_#t~ret95#1.base, pci_alloc_consistent_#t~ret95#1.offset := dma_alloc_attrs_#res#1.base, dma_alloc_attrs_#res#1.offset;havoc dma_alloc_attrs_#t~ret69#1.base, dma_alloc_attrs_#t~ret69#1.offset, dma_alloc_attrs_#t~ret70#1, dma_alloc_attrs_#t~mem71#1.base, dma_alloc_attrs_#t~mem71#1.offset, dma_alloc_attrs_#t~ret72#1, dma_alloc_attrs_#t~mem79#1.base, dma_alloc_attrs_#t~mem79#1.offset, dma_alloc_attrs_#t~ret80#1.base, dma_alloc_attrs_#t~ret80#1.offset, dma_alloc_attrs_#t~mem81#1, dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset, dma_alloc_attrs_~size#1, dma_alloc_attrs_~dma_handle#1.base, dma_alloc_attrs_~dma_handle#1.offset, dma_alloc_attrs_~gfp#1, dma_alloc_attrs_~attrs#1.base, dma_alloc_attrs_~attrs#1.offset, dma_alloc_attrs_~ops~0#1.base, dma_alloc_attrs_~ops~0#1.offset, dma_alloc_attrs_~tmp~5#1.base, dma_alloc_attrs_~tmp~5#1.offset, dma_alloc_attrs_~memory~0#1.base, dma_alloc_attrs_~memory~0#1.offset, dma_alloc_attrs_~tmp___0~0#1, dma_alloc_attrs_~tmp___1~0#1;havoc dma_alloc_attrs_#in~dev#1.base, dma_alloc_attrs_#in~dev#1.offset, dma_alloc_attrs_#in~size#1, dma_alloc_attrs_#in~dma_handle#1.base, dma_alloc_attrs_#in~dma_handle#1.offset, dma_alloc_attrs_#in~gfp#1, dma_alloc_attrs_#in~attrs#1.base, dma_alloc_attrs_#in~attrs#1.offset;assume { :end_inline_dma_alloc_attrs } true;pci_alloc_consistent_~tmp~7#1.base, pci_alloc_consistent_~tmp~7#1.offset := pci_alloc_consistent_#t~ret95#1.base, pci_alloc_consistent_#t~ret95#1.offset;havoc pci_alloc_consistent_#t~ret95#1.base, pci_alloc_consistent_#t~ret95#1.offset;pci_alloc_consistent_#res#1.base, pci_alloc_consistent_#res#1.offset := pci_alloc_consistent_~tmp~7#1.base, pci_alloc_consistent_~tmp~7#1.offset; [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8590: main_#t~ret826#1 := ttusb_dec_probe_#res#1;havoc ttusb_dec_probe_#t~ret786#1, ttusb_dec_probe_#t~ret787#1.base, ttusb_dec_probe_#t~ret787#1.offset, ttusb_dec_probe_#t~ret788#1.base, ttusb_dec_probe_#t~ret788#1.offset, ttusb_dec_probe_#t~ret789#1, ttusb_dec_probe_#t~mem790#1, ttusb_dec_probe_#t~switch791#1, ttusb_dec_probe_#t~ret792#1, ttusb_dec_probe_#t~ret793#1, ttusb_dec_probe_#t~ret794#1, ttusb_dec_probe_#t~mem795#1, ttusb_dec_probe_#t~switch796#1, ttusb_dec_probe_#t~ret797#1.base, ttusb_dec_probe_#t~ret797#1.offset, ttusb_dec_probe_#t~ret798#1.base, ttusb_dec_probe_#t~ret798#1.offset, ttusb_dec_probe_#t~mem799#1.base, ttusb_dec_probe_#t~mem799#1.offset, ttusb_dec_probe_#t~mem800#1.base, ttusb_dec_probe_#t~mem800#1.offset, ttusb_dec_probe_#t~mem801#1, ttusb_dec_probe_#t~mem802#1.base, ttusb_dec_probe_#t~mem802#1.offset, ttusb_dec_probe_#t~mem803#1, ttusb_dec_probe_#t~ret804#1, ttusb_dec_probe_#t~mem805#1.base, ttusb_dec_probe_#t~mem805#1.offset, ttusb_dec_probe_#t~ret806#1, ttusb_dec_probe_#t~ret807#1, ttusb_dec_probe_#t~mem808#1.base, ttusb_dec_probe_#t~mem808#1.offset, ttusb_dec_probe_#t~mem809#1.base, ttusb_dec_probe_#t~mem809#1.offset, ttusb_dec_probe_#t~mem813#1.base, ttusb_dec_probe_#t~mem813#1.offset, ttusb_dec_probe_#t~mem814#1.base, ttusb_dec_probe_#t~mem814#1.offset, ttusb_dec_probe_#t~mem815#1.base, ttusb_dec_probe_#t~mem815#1.offset, ttusb_dec_probe_#t~ret816#1, ttusb_dec_probe_#t~ret817#1, ttusb_dec_probe_~intf#1.base, ttusb_dec_probe_~intf#1.offset, ttusb_dec_probe_~id#1.base, ttusb_dec_probe_~id#1.offset, ttusb_dec_probe_~udev~0#1.base, ttusb_dec_probe_~udev~0#1.offset, ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, ttusb_dec_probe_~tmp~30#1.base, ttusb_dec_probe_~tmp~30#1.offset, ttusb_dec_probe_~tmp___0~12#1, ttusb_dec_probe_~tmp___1~9#1, ttusb_dec_probe_~tmp___2~6#1;havoc ttusb_dec_probe_#in~intf#1.base, ttusb_dec_probe_#in~intf#1.offset, ttusb_dec_probe_#in~id#1.base, ttusb_dec_probe_#in~id#1.offset;assume { :end_inline_ttusb_dec_probe } true;assume -2147483648 <= main_#t~ret826#1 && main_#t~ret826#1 <= 2147483647;main_~res_ttusb_dec_probe_38~0#1 := main_#t~ret826#1;havoc main_#t~ret826#1;assume { :begin_inline_ldv_check_return_value } true;ldv_check_return_value_#in~arg0#1 := main_~res_ttusb_dec_probe_38~0#1;havoc ldv_check_return_value_~arg0#1;ldv_check_return_value_~arg0#1 := ldv_check_return_value_#in~arg0#1; [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8326: assume 1 == ttusb_dec_exit_rc_#t~mem770#1 % 4294967296;havoc ttusb_dec_exit_rc_#t~mem770#1;call ttusb_dec_exit_rc_#t~mem771#1.base, ttusb_dec_exit_rc_#t~mem771#1.offset := read~$Pointer$#0(ttusb_dec_exit_rc_~dec#1.base, 2209 + ttusb_dec_exit_rc_~dec#1.offset, 8); [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8326: assume !(1 == ttusb_dec_exit_rc_#t~mem770#1 % 4294967296);havoc ttusb_dec_exit_rc_#t~mem770#1; [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9251: havoc crc32_le_#t~nondet857#1;ttusb_dec_boot_dsp_#t~ret670#1 := crc32_le_#res#1;havoc crc32_le_#t~nondet857#1, crc32_le_~arg0#1, crc32_le_~arg1#1.base, crc32_le_~arg1#1.offset, crc32_le_~arg2#1;havoc crc32_le_#in~arg0#1, crc32_le_#in~arg1#1.base, crc32_le_#in~arg1#1.offset, crc32_le_#in~arg2#1;assume { :end_inline_crc32_le } true;ttusb_dec_boot_dsp_~tmp___1~8#1 := ttusb_dec_boot_dsp_#t~ret670#1;havoc ttusb_dec_boot_dsp_#t~ret670#1;ttusb_dec_boot_dsp_~crc32_csum~0#1 := 4294967295 - ttusb_dec_boot_dsp_~tmp___1~8#1;ttusb_dec_boot_dsp_~__len~7#1 := 4; [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8194: assume { :begin_inline_ttusb_dec_boot_dsp } true;ttusb_dec_boot_dsp_#in~dec#1.base, ttusb_dec_boot_dsp_#in~dec#1.offset := ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset;havoc ttusb_dec_boot_dsp_#res#1;havoc ttusb_dec_boot_dsp_#t~ret658#1, ttusb_dec_boot_dsp_#t~mem659#1.base, ttusb_dec_boot_dsp_#t~mem659#1.offset, ttusb_dec_boot_dsp_#t~mem660#1.base, ttusb_dec_boot_dsp_#t~mem660#1.offset, ttusb_dec_boot_dsp_#t~ret661#1, ttusb_dec_boot_dsp_#t~mem662#1.base, ttusb_dec_boot_dsp_#t~mem662#1.offset, ttusb_dec_boot_dsp_#t~ret663#1, ttusb_dec_boot_dsp_#t~mem664#1.base, ttusb_dec_boot_dsp_#t~mem664#1.offset, ttusb_dec_boot_dsp_#t~mem665#1.base, ttusb_dec_boot_dsp_#t~mem665#1.offset, ttusb_dec_boot_dsp_#t~mem666#1.base, ttusb_dec_boot_dsp_#t~mem666#1.offset, ttusb_dec_boot_dsp_#t~mem667#1, ttusb_dec_boot_dsp_#t~ret668#1, ttusb_dec_boot_dsp_#t~mem669#1.base, ttusb_dec_boot_dsp_#t~mem669#1.offset, ttusb_dec_boot_dsp_#t~ret670#1, ttusb_dec_boot_dsp_#t~memcpy~res671#1.base, ttusb_dec_boot_dsp_#t~memcpy~res671#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res672#1.base, ttusb_dec_boot_dsp_#t~memcpy~res672#1.offset, ttusb_dec_boot_dsp_#t~mem673#1, ttusb_dec_boot_dsp_#t~ret674#1, ttusb_dec_boot_dsp_#t~ret675#1, ttusb_dec_boot_dsp_#t~mem676#1.base, ttusb_dec_boot_dsp_#t~mem676#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res677#1.base, ttusb_dec_boot_dsp_#t~memcpy~res677#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res678#1.base, ttusb_dec_boot_dsp_#t~memcpy~res678#1.offset, ttusb_dec_boot_dsp_#t~ret679#1, ttusb_dec_boot_dsp_#t~ret680#1, ttusb_dec_boot_dsp_#t~memcpy~res681#1.base, ttusb_dec_boot_dsp_#t~memcpy~res681#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res682#1.base, ttusb_dec_boot_dsp_#t~memcpy~res682#1.offset, ttusb_dec_boot_dsp_#t~ret683#1, ttusb_dec_boot_dsp_#t~ret684#1, ttusb_dec_boot_dsp_#t~memcpy~res685#1.base, ttusb_dec_boot_dsp_#t~memcpy~res685#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res686#1.base, ttusb_dec_boot_dsp_#t~memcpy~res686#1.offset, ttusb_dec_boot_dsp_#t~ret687#1, ttusb_dec_boot_dsp_#t~mem688#1.base, ttusb_dec_boot_dsp_#t~mem688#1.offset, ttusb_dec_boot_dsp_#t~ret689#1.base, ttusb_dec_boot_dsp_#t~ret689#1.offset, ttusb_dec_boot_dsp_#t~mem690#1.base, ttusb_dec_boot_dsp_#t~mem690#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res691#1.base, ttusb_dec_boot_dsp_#t~memcpy~res691#1.offset, ttusb_dec_boot_dsp_#t~mem692#1.base, ttusb_dec_boot_dsp_#t~mem692#1.offset, ttusb_dec_boot_dsp_#t~mem693#1, ttusb_dec_boot_dsp_#t~ret694#1, ttusb_dec_boot_dsp_#t~mem695#1.base, ttusb_dec_boot_dsp_#t~mem695#1.offset, ttusb_dec_boot_dsp_#t~mem696#1, ttusb_dec_boot_dsp_#t~ret697#1, ttusb_dec_boot_dsp_#t~ret698#1, ttusb_dec_boot_dsp_#t~mem699#1.base, ttusb_dec_boot_dsp_#t~mem699#1.offset, ttusb_dec_boot_dsp_~dec#1.base, ttusb_dec_boot_dsp_~dec#1.offset, ttusb_dec_boot_dsp_~i~9#1, ttusb_dec_boot_dsp_~j~1#1, ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset, ttusb_dec_boot_dsp_~result~6#1, ttusb_dec_boot_dsp_~size~0#1, ttusb_dec_boot_dsp_~trans_count~0#1, ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset, ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset, ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset, ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~firmware_size~0#1, ttusb_dec_boot_dsp_~firmware_csum~0#1, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset, ttusb_dec_boot_dsp_~crc32_csum~0#1, ttusb_dec_boot_dsp_~crc32_check~0#1, ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset, ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, ttusb_dec_boot_dsp_~tmp___0~11#1, ttusb_dec_boot_dsp_~tmp___1~8#1, ttusb_dec_boot_dsp_~__len~7#1, ttusb_dec_boot_dsp_~__ret~8#1.base, ttusb_dec_boot_dsp_~__ret~8#1.offset, ttusb_dec_boot_dsp_~tmp___2~5#1, ttusb_dec_boot_dsp_~__len___0~6#1, ttusb_dec_boot_dsp_~__ret___0~6#1.base, ttusb_dec_boot_dsp_~__ret___0~6#1.offset, ttusb_dec_boot_dsp_~tmp___3~2#1, ttusb_dec_boot_dsp_~__len___1~4#1, ttusb_dec_boot_dsp_~__ret___1~4#1.base, ttusb_dec_boot_dsp_~__ret___1~4#1.offset, ttusb_dec_boot_dsp_~tmp___4~1#1, ttusb_dec_boot_dsp_~tmp___5~1#1, ttusb_dec_boot_dsp_~__len___2~1#1, ttusb_dec_boot_dsp_~__ret___2~1#1.base, ttusb_dec_boot_dsp_~__ret___2~1#1.offset, ttusb_dec_boot_dsp_~tmp___6~0#1.base, ttusb_dec_boot_dsp_~tmp___6~0#1.offset, ttusb_dec_boot_dsp_~tmp___7~0#1, ttusb_dec_boot_dsp_~__len___3~0#1, ttusb_dec_boot_dsp_~__ret___3~0#1.base, ttusb_dec_boot_dsp_~__ret___3~0#1.offset;ttusb_dec_boot_dsp_~dec#1.base, ttusb_dec_boot_dsp_~dec#1.offset := ttusb_dec_boot_dsp_#in~dec#1.base, ttusb_dec_boot_dsp_#in~dec#1.offset;havoc ttusb_dec_boot_dsp_~i~9#1;havoc ttusb_dec_boot_dsp_~j~1#1;call ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset := #Ultimate.allocOnStack(4);havoc ttusb_dec_boot_dsp_~result~6#1;havoc ttusb_dec_boot_dsp_~size~0#1;havoc ttusb_dec_boot_dsp_~trans_count~0#1;call ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset := #Ultimate.allocOnStack(10);call ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset := #Ultimate.allocOnStack(1);havoc ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset;call ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset := #Ultimate.allocOnStack(21);havoc ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset;havoc ttusb_dec_boot_dsp_~firmware_size~0#1;havoc ttusb_dec_boot_dsp_~firmware_csum~0#1;call ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset := #Ultimate.allocOnStack(2);call ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset := #Ultimate.allocOnStack(4);havoc ttusb_dec_boot_dsp_~crc32_csum~0#1;havoc ttusb_dec_boot_dsp_~crc32_check~0#1;call ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset := #Ultimate.allocOnStack(4);call ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset := #Ultimate.allocOnStack(8);havoc ttusb_dec_boot_dsp_~tmp___0~11#1;havoc ttusb_dec_boot_dsp_~tmp___1~8#1;havoc ttusb_dec_boot_dsp_~__len~7#1;havoc ttusb_dec_boot_dsp_~__ret~8#1.base, ttusb_dec_boot_dsp_~__ret~8#1.offset;havoc ttusb_dec_boot_dsp_~tmp___2~5#1;havoc ttusb_dec_boot_dsp_~__len___0~6#1;havoc ttusb_dec_boot_dsp_~__ret___0~6#1.base, ttusb_dec_boot_dsp_~__ret___0~6#1.offset;havoc ttusb_dec_boot_dsp_~tmp___3~2#1;havoc ttusb_dec_boot_dsp_~__len___1~4#1;havoc ttusb_dec_boot_dsp_~__ret___1~4#1.base, ttusb_dec_boot_dsp_~__ret___1~4#1.offset;havoc ttusb_dec_boot_dsp_~tmp___4~1#1;havoc ttusb_dec_boot_dsp_~tmp___5~1#1;havoc ttusb_dec_boot_dsp_~__len___2~1#1;havoc ttusb_dec_boot_dsp_~__ret___2~1#1.base, ttusb_dec_boot_dsp_~__ret___2~1#1.offset;havoc ttusb_dec_boot_dsp_~tmp___6~0#1.base, ttusb_dec_boot_dsp_~tmp___6~0#1.offset;havoc ttusb_dec_boot_dsp_~tmp___7~0#1;havoc ttusb_dec_boot_dsp_~__len___3~0#1;havoc ttusb_dec_boot_dsp_~__ret___3~0#1.base, ttusb_dec_boot_dsp_~__ret___3~0#1.offset;call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 1 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 2 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 3 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 4 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 5 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 6 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 7 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(97, ttusb_dec_boot_dsp_~#b0~4#1.base, 8 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(0, ttusb_dec_boot_dsp_~#b0~4#1.base, 9 + ttusb_dec_boot_dsp_~#b0~4#1.offset, 1);call write~int#0(97, ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset, 1);ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset := 0, 0;ttusb_dec_boot_dsp_~firmware_size~0#1 := 0;ttusb_dec_boot_dsp_~firmware_csum~0#1 := 0;call write~$Pointer$#12(0, 0, ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8); [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8326-1: call ttusb_dec_exit_rc_#t~mem770#1 := read~int#0(ttusb_dec_exit_rc_~dec#1.base, 2041 + ttusb_dec_exit_rc_~dec#1.offset, 4); [2025-02-08 02:46:44,163 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8062: assume ttusb_dec_boot_dsp_~firmware_size~0#1 % 18446744073709551616 <= 59; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8062: assume !(ttusb_dec_boot_dsp_~firmware_size~0#1 % 18446744073709551616 <= 59);assume { :begin_inline_crc32_le } true;crc32_le_#in~arg0#1, crc32_le_#in~arg1#1.base, crc32_le_#in~arg1#1.offset, crc32_le_#in~arg2#1 := 4294967295, ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset, 56;havoc crc32_le_#res#1;havoc crc32_le_#t~nondet857#1, crc32_le_~arg0#1, crc32_le_~arg1#1.base, crc32_le_~arg1#1.offset, crc32_le_~arg2#1;crc32_le_~arg0#1 := crc32_le_#in~arg0#1;crc32_le_~arg1#1.base, crc32_le_~arg1#1.offset := crc32_le_#in~arg1#1.base, crc32_le_#in~arg1#1.offset;crc32_le_~arg2#1 := crc32_le_#in~arg2#1;havoc crc32_le_#t~nondet857#1;crc32_le_#res#1 := crc32_le_#t~nondet857#1;havoc crc32_le_#t~nondet857#1; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7930: assume -2147483648 <= ttusb_init_rc_#t~ret625#1 && ttusb_init_rc_#t~ret625#1 <= 2147483647;havoc ttusb_init_rc_#t~ret625#1;ttusb_init_rc_#res#1 := 0;call ULTIMATE.dealloc(ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset);havoc ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7798: assume -2147483648 <= ttusb_dec_stop_feed_#t~ret599#1 && ttusb_dec_stop_feed_#t~ret599#1 <= 2147483647;havoc ttusb_dec_stop_feed_#t~ret599#1; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7930-1: SUMMARY for call ttusb_init_rc_#t~ret625#1 := ttusb_dec_send_command(ttusb_init_rc_~dec#1.base, ttusb_init_rc_~dec#1.offset, 176, 2, ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7798-1: SUMMARY for call ttusb_dec_stop_feed_#t~ret599#1 := printk(77, 0); srcloc: null [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8459: assume ttusb_dec_probe_#t~switch791#1; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8459: assume !ttusb_dec_probe_#t~switch791#1;havoc ttusb_dec_probe_#t~mem790#1;havoc ttusb_dec_probe_#t~switch791#1;havoc ttusb_dec_probe_#t~mem790#1;havoc ttusb_dec_probe_#t~switch791#1;call write~$Pointer$#0(ttusb_dec_probe_~udev~0#1.base, ttusb_dec_probe_~udev~0#1.offset, ttusb_dec_probe_~dec~10#1.base, 2012 + ttusb_dec_probe_~dec~10#1.offset, 8);assume { :begin_inline_ttusb_dec_init_usb } true;ttusb_dec_init_usb_#in~dec#1.base, ttusb_dec_init_usb_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_init_usb_#res#1;havoc ttusb_dec_init_usb_#t~ret627#1, ttusb_dec_init_usb_#t~mem628#1.base, ttusb_dec_init_usb_#t~mem628#1.offset, ttusb_dec_init_usb_#t~ret629#1, ttusb_dec_init_usb_#t~mem630#1.base, ttusb_dec_init_usb_#t~mem630#1.offset, ttusb_dec_init_usb_#t~ret631#1, ttusb_dec_init_usb_#t~bitwise632#1, ttusb_dec_init_usb_#t~mem633#1.base, ttusb_dec_init_usb_#t~mem633#1.offset, ttusb_dec_init_usb_#t~ret634#1, ttusb_dec_init_usb_#t~bitwise635#1, ttusb_dec_init_usb_#t~mem636#1.base, ttusb_dec_init_usb_#t~mem636#1.offset, ttusb_dec_init_usb_#t~ret637#1, ttusb_dec_init_usb_#t~mem638#1.base, ttusb_dec_init_usb_#t~mem638#1.offset, ttusb_dec_init_usb_#t~ret639#1, ttusb_dec_init_usb_#t~bitwise640#1, ttusb_dec_init_usb_#t~ret641#1.base, ttusb_dec_init_usb_#t~ret641#1.offset, ttusb_dec_init_usb_#t~mem642#1.base, ttusb_dec_init_usb_#t~mem642#1.offset, ttusb_dec_init_usb_#t~mem643#1.base, ttusb_dec_init_usb_#t~mem643#1.offset, ttusb_dec_init_usb_#t~ret644#1.base, ttusb_dec_init_usb_#t~ret644#1.offset, ttusb_dec_init_usb_#t~mem645#1.base, ttusb_dec_init_usb_#t~mem645#1.offset, ttusb_dec_init_usb_#t~mem646#1.base, ttusb_dec_init_usb_#t~mem646#1.offset, ttusb_dec_init_usb_#t~mem647#1.base, ttusb_dec_init_usb_#t~mem647#1.offset, ttusb_dec_init_usb_#t~mem648#1.base, ttusb_dec_init_usb_#t~mem648#1.offset, ttusb_dec_init_usb_#t~mem649#1, ttusb_dec_init_usb_#t~mem650#1.base, ttusb_dec_init_usb_#t~mem650#1.offset, ttusb_dec_init_usb_#t~mem651#1.base, ttusb_dec_init_usb_#t~mem651#1.offset, ttusb_dec_init_usb_#t~mem652#1, ttusb_dec_init_usb_#t~mem653#1.base, ttusb_dec_init_usb_#t~mem653#1.offset, ttusb_dec_init_usb_#t~mem654#1.base, ttusb_dec_init_usb_#t~mem654#1.offset, ttusb_dec_init_usb_#t~mem655#1, ttusb_dec_init_usb_#t~bitwise656#1, ttusb_dec_init_usb_#t~ret657#1, ttusb_dec_init_usb_~dec#1.base, ttusb_dec_init_usb_~dec#1.offset, ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset, ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset, ttusb_dec_init_usb_~tmp~27#1, ttusb_dec_init_usb_~tmp___0~10#1, ttusb_dec_init_usb_~tmp___1~7#1, ttusb_dec_init_usb_~tmp___2~4#1, ttusb_dec_init_usb_~tmp___3~1#1;ttusb_dec_init_usb_~dec#1.base, ttusb_dec_init_usb_~dec#1.offset := ttusb_dec_init_usb_#in~dec#1.base, ttusb_dec_init_usb_#in~dec#1.offset;call ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset := #Ultimate.allocOnStack(8);call ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset := #Ultimate.allocOnStack(8);havoc ttusb_dec_init_usb_~tmp~27#1;havoc ttusb_dec_init_usb_~tmp___0~10#1;havoc ttusb_dec_init_usb_~tmp___1~7#1;havoc ttusb_dec_init_usb_~tmp___2~4#1;havoc ttusb_dec_init_usb_~tmp___3~1#1; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8591: havoc ldv_check_return_value_~arg0#1;havoc ldv_check_return_value_#in~arg0#1;assume { :end_inline_ldv_check_return_value } true;assume { :begin_inline_ldv_check_return_value_probe } true;ldv_check_return_value_probe_#in~arg0#1 := main_~res_ttusb_dec_probe_38~0#1;havoc ldv_check_return_value_probe_~arg0#1;ldv_check_return_value_probe_~arg0#1 := ldv_check_return_value_probe_#in~arg0#1; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8327-1: SUMMARY for call usb_kill_urb(ttusb_dec_exit_rc_#t~mem771#1.base, ttusb_dec_exit_rc_#t~mem771#1.offset); srcloc: null [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8327: havoc ttusb_dec_exit_rc_#t~mem771#1.base, ttusb_dec_exit_rc_#t~mem771#1.offset; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8195: assume 0 != ttusb_dec_init_stb_~result~7#1;ttusb_dec_init_stb_#res#1 := ttusb_dec_init_stb_~result~7#1;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset);havoc ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset);havoc ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset);havoc ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8195: assume !(0 != ttusb_dec_init_stb_~result~7#1);ttusb_dec_init_stb_#res#1 := 1;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset);havoc ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset);havoc ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset);havoc ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9318: havoc input_register_device_#t~nondet868#1;ttusb_init_rc_#t~ret621#1 := input_register_device_#res#1;havoc input_register_device_#t~nondet868#1, input_register_device_~arg0#1.base, input_register_device_~arg0#1.offset;havoc input_register_device_#in~arg0#1.base, input_register_device_#in~arg0#1.offset;assume { :end_inline_input_register_device } true;assume -2147483648 <= ttusb_init_rc_#t~ret621#1 && ttusb_init_rc_#t~ret621#1 <= 2147483647;ttusb_init_rc_~err~0#1 := ttusb_init_rc_#t~ret621#1;havoc ttusb_init_rc_#t~ret621#1; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8063-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret668#1 := printk(100, 0); srcloc: null [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8063: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret668#1 && ttusb_dec_boot_dsp_#t~ret668#1 <= 2147483647;havoc ttusb_dec_boot_dsp_#t~ret668#1;call ttusb_dec_boot_dsp_#t~mem669#1.base, ttusb_dec_boot_dsp_#t~mem669#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8); [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7865: assume ttusb_dec_alloc_iso_urbs_~i~7#1 <= 3; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7865: assume !(ttusb_dec_alloc_iso_urbs_~i~7#1 <= 3); [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7667: assume 0 != ~debug~0; [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7667: assume !(0 != ~debug~0); [2025-02-08 02:46:44,164 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8460: SUMMARY for call ttusb_dec_set_model(ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, 1); srcloc: null [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7601-1: ttusb_dec_start_ts_feed_#res#1 := -22;call ULTIMATE.dealloc(ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset);havoc ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset; [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8592: havoc ldv_check_return_value_probe_~arg0#1;havoc ldv_check_return_value_probe_#in~arg0#1;assume { :end_inline_ldv_check_return_value_probe } true; [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7668-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret556#1 := printk(71, 0); srcloc: null [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7668: assume -2147483648 <= ttusb_dec_start_sec_feed_#t~ret556#1 && ttusb_dec_start_sec_feed_#t~ret556#1 <= 2147483647;havoc ttusb_dec_start_sec_feed_#t~ret556#1; [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8527: assume 0 != ttusb_dec_disconnect_#t~mem820#1;havoc ttusb_dec_disconnect_#t~mem820#1;assume { :begin_inline_ttusb_dec_exit_tasklet } true;ttusb_dec_exit_tasklet_#in~dec#1.base, ttusb_dec_exit_tasklet_#in~dec#1.offset := ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset;havoc ttusb_dec_exit_tasklet_#t~mem780#1.base, ttusb_dec_exit_tasklet_#t~mem780#1.offset, ttusb_dec_exit_tasklet_~dec#1.base, ttusb_dec_exit_tasklet_~dec#1.offset, ttusb_dec_exit_tasklet_~item~2#1.base, ttusb_dec_exit_tasklet_~item~2#1.offset, ttusb_dec_exit_tasklet_~frame~2#1.base, ttusb_dec_exit_tasklet_~frame~2#1.offset, ttusb_dec_exit_tasklet_~__mptr~3#1.base, ttusb_dec_exit_tasklet_~__mptr~3#1.offset;ttusb_dec_exit_tasklet_~dec#1.base, ttusb_dec_exit_tasklet_~dec#1.offset := ttusb_dec_exit_tasklet_#in~dec#1.base, ttusb_dec_exit_tasklet_#in~dec#1.offset;havoc ttusb_dec_exit_tasklet_~item~2#1.base, ttusb_dec_exit_tasklet_~item~2#1.offset;havoc ttusb_dec_exit_tasklet_~frame~2#1.base, ttusb_dec_exit_tasklet_~frame~2#1.offset;havoc ttusb_dec_exit_tasklet_~__mptr~3#1.base, ttusb_dec_exit_tasklet_~__mptr~3#1.offset;assume { :begin_inline_tasklet_kill } true;tasklet_kill_#in~arg0#1.base, tasklet_kill_#in~arg0#1.offset := ttusb_dec_exit_tasklet_~dec#1.base, 15201 + ttusb_dec_exit_tasklet_~dec#1.offset;havoc tasklet_kill_~arg0#1.base, tasklet_kill_~arg0#1.offset;tasklet_kill_~arg0#1.base, tasklet_kill_~arg0#1.offset := tasklet_kill_#in~arg0#1.base, tasklet_kill_#in~arg0#1.offset; [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8527: assume !(0 != ttusb_dec_disconnect_#t~mem820#1);havoc ttusb_dec_disconnect_#t~mem820#1; [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8527-1: call ttusb_dec_disconnect_#t~mem820#1 := read~int#0(ttusb_dec_disconnect_~dec~11#1.base, 15477 + ttusb_dec_disconnect_~dec~11#1.offset, 4); [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7999: call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset;ttusb_dec_init_stb_#t~ret710#1 := ttusb_dec_boot_dsp_#res#1;havoc ttusb_dec_boot_dsp_#t~ret658#1, ttusb_dec_boot_dsp_#t~mem659#1.base, ttusb_dec_boot_dsp_#t~mem659#1.offset, ttusb_dec_boot_dsp_#t~mem660#1.base, ttusb_dec_boot_dsp_#t~mem660#1.offset, ttusb_dec_boot_dsp_#t~ret661#1, ttusb_dec_boot_dsp_#t~mem662#1.base, ttusb_dec_boot_dsp_#t~mem662#1.offset, ttusb_dec_boot_dsp_#t~ret663#1, ttusb_dec_boot_dsp_#t~mem664#1.base, ttusb_dec_boot_dsp_#t~mem664#1.offset, ttusb_dec_boot_dsp_#t~mem665#1.base, ttusb_dec_boot_dsp_#t~mem665#1.offset, ttusb_dec_boot_dsp_#t~mem666#1.base, ttusb_dec_boot_dsp_#t~mem666#1.offset, ttusb_dec_boot_dsp_#t~mem667#1, ttusb_dec_boot_dsp_#t~ret668#1, ttusb_dec_boot_dsp_#t~mem669#1.base, ttusb_dec_boot_dsp_#t~mem669#1.offset, ttusb_dec_boot_dsp_#t~ret670#1, ttusb_dec_boot_dsp_#t~memcpy~res671#1.base, ttusb_dec_boot_dsp_#t~memcpy~res671#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res672#1.base, ttusb_dec_boot_dsp_#t~memcpy~res672#1.offset, ttusb_dec_boot_dsp_#t~mem673#1, ttusb_dec_boot_dsp_#t~ret674#1, ttusb_dec_boot_dsp_#t~ret675#1, ttusb_dec_boot_dsp_#t~mem676#1.base, ttusb_dec_boot_dsp_#t~mem676#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res677#1.base, ttusb_dec_boot_dsp_#t~memcpy~res677#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res678#1.base, ttusb_dec_boot_dsp_#t~memcpy~res678#1.offset, ttusb_dec_boot_dsp_#t~ret679#1, ttusb_dec_boot_dsp_#t~ret680#1, ttusb_dec_boot_dsp_#t~memcpy~res681#1.base, ttusb_dec_boot_dsp_#t~memcpy~res681#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res682#1.base, ttusb_dec_boot_dsp_#t~memcpy~res682#1.offset, ttusb_dec_boot_dsp_#t~ret683#1, ttusb_dec_boot_dsp_#t~ret684#1, ttusb_dec_boot_dsp_#t~memcpy~res685#1.base, ttusb_dec_boot_dsp_#t~memcpy~res685#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res686#1.base, ttusb_dec_boot_dsp_#t~memcpy~res686#1.offset, ttusb_dec_boot_dsp_#t~ret687#1, ttusb_dec_boot_dsp_#t~mem688#1.base, ttusb_dec_boot_dsp_#t~mem688#1.offset, ttusb_dec_boot_dsp_#t~ret689#1.base, ttusb_dec_boot_dsp_#t~ret689#1.offset, ttusb_dec_boot_dsp_#t~mem690#1.base, ttusb_dec_boot_dsp_#t~mem690#1.offset, ttusb_dec_boot_dsp_#t~memcpy~res691#1.base, ttusb_dec_boot_dsp_#t~memcpy~res691#1.offset, ttusb_dec_boot_dsp_#t~mem692#1.base, ttusb_dec_boot_dsp_#t~mem692#1.offset, ttusb_dec_boot_dsp_#t~mem693#1, ttusb_dec_boot_dsp_#t~ret694#1, ttusb_dec_boot_dsp_#t~mem695#1.base, ttusb_dec_boot_dsp_#t~mem695#1.offset, ttusb_dec_boot_dsp_#t~mem696#1, ttusb_dec_boot_dsp_#t~ret697#1, ttusb_dec_boot_dsp_#t~ret698#1, ttusb_dec_boot_dsp_#t~mem699#1.base, ttusb_dec_boot_dsp_#t~mem699#1.offset, ttusb_dec_boot_dsp_~dec#1.base, ttusb_dec_boot_dsp_~dec#1.offset, ttusb_dec_boot_dsp_~i~9#1, ttusb_dec_boot_dsp_~j~1#1, ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset, ttusb_dec_boot_dsp_~result~6#1, ttusb_dec_boot_dsp_~size~0#1, ttusb_dec_boot_dsp_~trans_count~0#1, ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset, ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset, ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset, ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~firmware_size~0#1, ttusb_dec_boot_dsp_~firmware_csum~0#1, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset, ttusb_dec_boot_dsp_~crc32_csum~0#1, ttusb_dec_boot_dsp_~crc32_check~0#1, ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset, ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, ttusb_dec_boot_dsp_~tmp___0~11#1, ttusb_dec_boot_dsp_~tmp___1~8#1, ttusb_dec_boot_dsp_~__len~7#1, ttusb_dec_boot_dsp_~__ret~8#1.base, ttusb_dec_boot_dsp_~__ret~8#1.offset, ttusb_dec_boot_dsp_~tmp___2~5#1, ttusb_dec_boot_dsp_~__len___0~6#1, ttusb_dec_boot_dsp_~__ret___0~6#1.base, ttusb_dec_boot_dsp_~__ret___0~6#1.offset, ttusb_dec_boot_dsp_~tmp___3~2#1, ttusb_dec_boot_dsp_~__len___1~4#1, ttusb_dec_boot_dsp_~__ret___1~4#1.base, ttusb_dec_boot_dsp_~__ret___1~4#1.offset, ttusb_dec_boot_dsp_~tmp___4~1#1, ttusb_dec_boot_dsp_~tmp___5~1#1, ttusb_dec_boot_dsp_~__len___2~1#1, ttusb_dec_boot_dsp_~__ret___2~1#1.base, ttusb_dec_boot_dsp_~__ret___2~1#1.offset, ttusb_dec_boot_dsp_~tmp___6~0#1.base, ttusb_dec_boot_dsp_~tmp___6~0#1.offset, ttusb_dec_boot_dsp_~tmp___7~0#1, ttusb_dec_boot_dsp_~__len___3~0#1, ttusb_dec_boot_dsp_~__ret___3~0#1.base, ttusb_dec_boot_dsp_~__ret___3~0#1.offset;havoc ttusb_dec_boot_dsp_#in~dec#1.base, ttusb_dec_boot_dsp_#in~dec#1.offset;assume { :end_inline_ttusb_dec_boot_dsp } true;assume -2147483648 <= ttusb_dec_init_stb_#t~ret710#1 && ttusb_dec_init_stb_#t~ret710#1 <= 2147483647;ttusb_dec_init_stb_~result~7#1 := ttusb_dec_init_stb_#t~ret710#1;havoc ttusb_dec_init_stb_#t~ret710#1; [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8065-1: SUMMARY for call release_firmware(ttusb_dec_boot_dsp_#t~mem669#1.base, ttusb_dec_boot_dsp_#t~mem669#1.offset); srcloc: null [2025-02-08 02:46:44,165 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8065: havoc ttusb_dec_boot_dsp_#t~mem669#1.base, ttusb_dec_boot_dsp_#t~mem669#1.offset;ttusb_dec_boot_dsp_#res#1 := -1;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7735: assume 0 != ~debug~0;call ttusb_dec_start_feed_#t~mem579#1 := read~int#0(ttusb_dec_start_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_feed_~dvbdmxfeed#1.offset, 2); [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7735: assume !(0 != ~debug~0); [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7801-1: call ttusb_dec_stop_feed_#t~mem600#1 := read~int#0(ttusb_dec_stop_feed_~dvbdmxfeed#1.base, 4390 + ttusb_dec_stop_feed_~dvbdmxfeed#1.offset, 4);ttusb_dec_stop_feed_#t~switch601#1 := 0 == ttusb_dec_stop_feed_#t~mem600#1; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7537-1: call ttusb_dec_start_ts_feed_#t~mem529#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4436 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 4); [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7537: assume 0 != ttusb_dec_start_ts_feed_#t~mem529#1 % 2;havoc ttusb_dec_start_ts_feed_#t~mem529#1; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7537: assume !(0 != ttusb_dec_start_ts_feed_#t~mem529#1 % 2);havoc ttusb_dec_start_ts_feed_#t~mem529#1; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8330: havoc ttusb_dec_exit_rc_#t~mem772#1.base, ttusb_dec_exit_rc_#t~mem772#1.offset;call ttusb_dec_exit_rc_#t~mem773#1.base, ttusb_dec_exit_rc_#t~mem773#1.offset := read~$Pointer$#0(ttusb_dec_exit_rc_~dec#1.base, 2012 + ttusb_dec_exit_rc_~dec#1.offset, 8);call ttusb_dec_exit_rc_#t~mem774#1.base, ttusb_dec_exit_rc_#t~mem774#1.offset := read~$Pointer$#0(ttusb_dec_exit_rc_~dec#1.base, 2201 + ttusb_dec_exit_rc_~dec#1.offset, 8);call ttusb_dec_exit_rc_#t~mem775#1 := read~int#0(ttusb_dec_exit_rc_~dec#1.base, 2217 + ttusb_dec_exit_rc_~dec#1.offset, 8);assume { :begin_inline_usb_free_coherent } true;usb_free_coherent_#in~arg0#1.base, usb_free_coherent_#in~arg0#1.offset, usb_free_coherent_#in~arg1#1, usb_free_coherent_#in~arg2#1.base, usb_free_coherent_#in~arg2#1.offset, usb_free_coherent_#in~arg3#1 := ttusb_dec_exit_rc_#t~mem773#1.base, ttusb_dec_exit_rc_#t~mem773#1.offset, 8, ttusb_dec_exit_rc_#t~mem774#1.base, ttusb_dec_exit_rc_#t~mem774#1.offset, ttusb_dec_exit_rc_#t~mem775#1;havoc usb_free_coherent_~arg0#1.base, usb_free_coherent_~arg0#1.offset, usb_free_coherent_~arg1#1, usb_free_coherent_~arg2#1.base, usb_free_coherent_~arg2#1.offset, usb_free_coherent_~arg3#1;usb_free_coherent_~arg0#1.base, usb_free_coherent_~arg0#1.offset := usb_free_coherent_#in~arg0#1.base, usb_free_coherent_#in~arg0#1.offset;usb_free_coherent_~arg1#1 := usb_free_coherent_#in~arg1#1;usb_free_coherent_~arg2#1.base, usb_free_coherent_~arg2#1.offset := usb_free_coherent_#in~arg2#1.base, usb_free_coherent_#in~arg2#1.offset;usb_free_coherent_~arg3#1 := usb_free_coherent_#in~arg3#1; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8528: havoc ttusb_dec_exit_tasklet_#t~mem780#1.base, ttusb_dec_exit_tasklet_#t~mem780#1.offset, ttusb_dec_exit_tasklet_~dec#1.base, ttusb_dec_exit_tasklet_~dec#1.offset, ttusb_dec_exit_tasklet_~item~2#1.base, ttusb_dec_exit_tasklet_~item~2#1.offset, ttusb_dec_exit_tasklet_~frame~2#1.base, ttusb_dec_exit_tasklet_~frame~2#1.offset, ttusb_dec_exit_tasklet_~__mptr~3#1.base, ttusb_dec_exit_tasklet_~__mptr~3#1.offset;havoc ttusb_dec_exit_tasklet_#in~dec#1.base, ttusb_dec_exit_tasklet_#in~dec#1.offset;assume { :end_inline_ttusb_dec_exit_tasklet } true;assume { :begin_inline_ttusb_dec_exit_filters } true;ttusb_dec_exit_filters_#in~dec#1.base, ttusb_dec_exit_filters_#in~dec#1.offset := ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset;havoc ttusb_dec_exit_filters_#t~mem782#1.base, ttusb_dec_exit_filters_#t~mem782#1.offset, ttusb_dec_exit_filters_~dec#1.base, ttusb_dec_exit_filters_~dec#1.offset, ttusb_dec_exit_filters_~item~3#1.base, ttusb_dec_exit_filters_~item~3#1.offset, ttusb_dec_exit_filters_~finfo~3#1.base, ttusb_dec_exit_filters_~finfo~3#1.offset, ttusb_dec_exit_filters_~__mptr~4#1.base, ttusb_dec_exit_filters_~__mptr~4#1.offset;ttusb_dec_exit_filters_~dec#1.base, ttusb_dec_exit_filters_~dec#1.offset := ttusb_dec_exit_filters_#in~dec#1.base, ttusb_dec_exit_filters_#in~dec#1.offset;havoc ttusb_dec_exit_filters_~item~3#1.base, ttusb_dec_exit_filters_~item~3#1.offset;havoc ttusb_dec_exit_filters_~finfo~3#1.base, ttusb_dec_exit_filters_~finfo~3#1.offset;havoc ttusb_dec_exit_filters_~__mptr~4#1.base, ttusb_dec_exit_filters_~__mptr~4#1.offset; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8330-2: call ttusb_dec_exit_rc_#t~mem772#1.base, ttusb_dec_exit_rc_#t~mem772#1.offset := read~$Pointer$#0(ttusb_dec_exit_rc_~dec#1.base, 2209 + ttusb_dec_exit_rc_~dec#1.offset, 8); [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8264: assume ttusb_dec_init_dvb_~result~8#1 < 0; [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8264: assume !(ttusb_dec_init_dvb_~result~8#1 < 0);call write~int#0(1, ttusb_dec_init_dvb_~dec#1.base, 1667 + ttusb_dec_init_dvb_~dec#1.offset, 4);call ttusb_dec_init_dvb_#t~mem730#1.base, ttusb_dec_init_dvb_#t~mem730#1.offset := read~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, 803 + ttusb_dec_init_dvb_~dec#1.offset, 8); [2025-02-08 02:46:44,166 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8330-1: SUMMARY for call usb_free_urb(ttusb_dec_exit_rc_#t~mem772#1.base, ttusb_dec_exit_rc_#t~mem772#1.offset); srcloc: null [2025-02-08 02:46:44,167 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7802: assume ttusb_dec_stop_feed_#t~switch601#1;assume { :begin_inline_ttusb_dec_stop_ts_feed } true;ttusb_dec_stop_ts_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_ts_feed_#in~dvbdmxfeed#1.offset := ttusb_dec_stop_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_feed_~dvbdmxfeed#1.offset;havoc ttusb_dec_stop_ts_feed_#res#1;havoc ttusb_dec_stop_ts_feed_#t~mem587#1.base, ttusb_dec_stop_ts_feed_#t~mem587#1.offset, ttusb_dec_stop_ts_feed_#t~mem588#1.base, ttusb_dec_stop_ts_feed_#t~mem588#1.offset, ttusb_dec_stop_ts_feed_#t~ret589#1, ttusb_dec_stop_ts_feed_#t~mem590#1, ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.offset, ttusb_dec_stop_ts_feed_~dec~7#1.base, ttusb_dec_stop_ts_feed_~dec~7#1.offset, ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset;ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.offset := ttusb_dec_stop_ts_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_ts_feed_#in~dvbdmxfeed#1.offset;havoc ttusb_dec_stop_ts_feed_~dec~7#1.base, ttusb_dec_stop_ts_feed_~dec~7#1.offset;call ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset := #Ultimate.allocOnStack(1);call ttusb_dec_stop_ts_feed_#t~mem587#1.base, ttusb_dec_stop_ts_feed_#t~mem587#1.offset := read~$Pointer$#0(ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.base, 4374 + ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.offset, 8);call ttusb_dec_stop_ts_feed_#t~mem588#1.base, ttusb_dec_stop_ts_feed_#t~mem588#1.offset := read~$Pointer$#0(ttusb_dec_stop_ts_feed_#t~mem587#1.base, 148 + ttusb_dec_stop_ts_feed_#t~mem587#1.offset, 8);ttusb_dec_stop_ts_feed_~dec~7#1.base, ttusb_dec_stop_ts_feed_~dec~7#1.offset := ttusb_dec_stop_ts_feed_#t~mem588#1.base, ttusb_dec_stop_ts_feed_#t~mem588#1.offset;havoc ttusb_dec_stop_ts_feed_#t~mem587#1.base, ttusb_dec_stop_ts_feed_#t~mem587#1.offset;havoc ttusb_dec_stop_ts_feed_#t~mem588#1.base, ttusb_dec_stop_ts_feed_#t~mem588#1.offset;call write~int#0(0, ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset, 1); [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7802: assume !ttusb_dec_stop_feed_#t~switch601#1;ttusb_dec_stop_feed_#t~switch601#1 := ttusb_dec_stop_feed_#t~switch601#1 || 1 == ttusb_dec_stop_feed_#t~mem600#1; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7736-1: SUMMARY for call ttusb_dec_start_feed_#t~ret580#1 := printk(75, 0); srcloc: null [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7736: assume -2147483648 <= ttusb_dec_start_feed_#t~ret580#1 && ttusb_dec_start_feed_#t~ret580#1 <= 2147483647;havoc ttusb_dec_start_feed_#t~mem579#1;havoc ttusb_dec_start_feed_#t~ret580#1; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6745: call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset);havoc ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset);havoc ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset);havoc ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset;ttusb_dec_init_stb_#t~ret701#1 := ttusb_dec_get_stb_state_#res#1;havoc ttusb_dec_get_stb_state_#t~ret239#1, ttusb_dec_get_stb_state_#t~ret240#1, ttusb_dec_get_stb_state_#t~mem241#1, ttusb_dec_get_stb_state_#t~memcpy~res242#1.base, ttusb_dec_get_stb_state_#t~memcpy~res242#1.offset, ttusb_dec_get_stb_state_#t~memcpy~res243#1.base, ttusb_dec_get_stb_state_#t~memcpy~res243#1.offset, ttusb_dec_get_stb_state_#t~mem244#1, ttusb_dec_get_stb_state_#t~ret245#1, ttusb_dec_get_stb_state_#t~memcpy~res246#1.base, ttusb_dec_get_stb_state_#t~memcpy~res246#1.offset, ttusb_dec_get_stb_state_#t~memcpy~res247#1.base, ttusb_dec_get_stb_state_#t~memcpy~res247#1.offset, ttusb_dec_get_stb_state_#t~mem248#1, ttusb_dec_get_stb_state_#t~ret249#1, ttusb_dec_get_stb_state_#t~memcpy~res250#1.base, ttusb_dec_get_stb_state_#t~memcpy~res250#1.offset, ttusb_dec_get_stb_state_#t~memcpy~res251#1.base, ttusb_dec_get_stb_state_#t~memcpy~res251#1.offset, ttusb_dec_get_stb_state_#t~mem252#1, ttusb_dec_get_stb_state_#t~ret253#1, ttusb_dec_get_stb_state_~dec#1.base, ttusb_dec_get_stb_state_~dec#1.offset, ttusb_dec_get_stb_state_~mode#1.base, ttusb_dec_get_stb_state_~mode#1.offset, ttusb_dec_get_stb_state_~model#1.base, ttusb_dec_get_stb_state_~model#1.offset, ttusb_dec_get_stb_state_~version#1.base, ttusb_dec_get_stb_state_~version#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset, ttusb_dec_get_stb_state_~result~1#1, ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~__len~1#1, ttusb_dec_get_stb_state_~__ret~2#1.base, ttusb_dec_get_stb_state_~__ret~2#1.offset, ttusb_dec_get_stb_state_~tmp___0~3#1, ttusb_dec_get_stb_state_~__len___0~1#1, ttusb_dec_get_stb_state_~__ret___0~1#1.base, ttusb_dec_get_stb_state_~__ret___0~1#1.offset, ttusb_dec_get_stb_state_~tmp___1~3#1, ttusb_dec_get_stb_state_~__len___1~0#1, ttusb_dec_get_stb_state_~__ret___1~0#1.base, ttusb_dec_get_stb_state_~__ret___1~0#1.offset, ttusb_dec_get_stb_state_~tmp___2~1#1;havoc ttusb_dec_get_stb_state_#in~dec#1.base, ttusb_dec_get_stb_state_#in~dec#1.offset, ttusb_dec_get_stb_state_#in~mode#1.base, ttusb_dec_get_stb_state_#in~mode#1.offset, ttusb_dec_get_stb_state_#in~model#1.base, ttusb_dec_get_stb_state_#in~model#1.offset, ttusb_dec_get_stb_state_#in~version#1.base, ttusb_dec_get_stb_state_#in~version#1.offset;assume { :end_inline_ttusb_dec_get_stb_state } true;assume -2147483648 <= ttusb_dec_init_stb_#t~ret701#1 && ttusb_dec_init_stb_#t~ret701#1 <= 2147483647;ttusb_dec_init_stb_~result~7#1 := ttusb_dec_init_stb_#t~ret701#1;havoc ttusb_dec_init_stb_#t~ret701#1; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7538: assume 0 != ~debug~0; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7538: assume !(0 != ~debug~0); [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7604-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret551#1 := ttusb_dec_send_command(ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset, 128, 1, ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7604: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret551#1 && ttusb_dec_start_ts_feed_#t~ret551#1 <= 2147483647;ttusb_dec_start_ts_feed_~result~4#1 := ttusb_dec_start_ts_feed_#t~ret551#1; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8529: havoc ttusb_dec_exit_filters_#t~mem782#1.base, ttusb_dec_exit_filters_#t~mem782#1.offset, ttusb_dec_exit_filters_~dec#1.base, ttusb_dec_exit_filters_~dec#1.offset, ttusb_dec_exit_filters_~item~3#1.base, ttusb_dec_exit_filters_~item~3#1.offset, ttusb_dec_exit_filters_~finfo~3#1.base, ttusb_dec_exit_filters_~finfo~3#1.offset, ttusb_dec_exit_filters_~__mptr~4#1.base, ttusb_dec_exit_filters_~__mptr~4#1.offset;havoc ttusb_dec_exit_filters_#in~dec#1.base, ttusb_dec_exit_filters_#in~dec#1.offset;assume { :end_inline_ttusb_dec_exit_filters } true; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8331: havoc usb_free_coherent_~arg0#1.base, usb_free_coherent_~arg0#1.offset, usb_free_coherent_~arg1#1, usb_free_coherent_~arg2#1.base, usb_free_coherent_~arg2#1.offset, usb_free_coherent_~arg3#1;havoc usb_free_coherent_#in~arg0#1.base, usb_free_coherent_#in~arg0#1.offset, usb_free_coherent_#in~arg1#1, usb_free_coherent_#in~arg2#1.base, usb_free_coherent_#in~arg2#1.offset, usb_free_coherent_#in~arg3#1;assume { :end_inline_usb_free_coherent } true;havoc ttusb_dec_exit_rc_#t~mem773#1.base, ttusb_dec_exit_rc_#t~mem773#1.offset;havoc ttusb_dec_exit_rc_#t~mem774#1.base, ttusb_dec_exit_rc_#t~mem774#1.offset;havoc ttusb_dec_exit_rc_#t~mem775#1;call ttusb_dec_exit_rc_#t~mem776#1.base, ttusb_dec_exit_rc_#t~mem776#1.offset := read~$Pointer$#0(ttusb_dec_exit_rc_~dec#1.base, 15405 + ttusb_dec_exit_rc_~dec#1.offset, 8); [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8265-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret725#1 := printk(117, 0); srcloc: null [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8265: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret725#1 && ttusb_dec_init_dvb_#t~ret725#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret725#1; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7869-1: SUMMARY for call ttusb_dec_setup_urbs(ttusb_dec_alloc_iso_urbs_~dec#1.base, ttusb_dec_alloc_iso_urbs_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7869: ttusb_dec_alloc_iso_urbs_#res#1 := 0; [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7671-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret558#1 := __fswab16((if ttusb_dec_start_sec_feed_#t~mem557#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_start_sec_feed_#t~mem557#1 % 65536 % 4294967296 else ttusb_dec_start_sec_feed_#t~mem557#1 % 65536 % 4294967296 - 4294967296)); srcloc: null [2025-02-08 02:46:44,168 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7671: ttusb_dec_start_sec_feed_~tmp~22#1 := ttusb_dec_start_sec_feed_#t~ret558#1;havoc ttusb_dec_start_sec_feed_#t~mem557#1;havoc ttusb_dec_start_sec_feed_#t~ret558#1;call write~int#0(ttusb_dec_start_sec_feed_~tmp~22#1, ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset, 2);ttusb_dec_start_sec_feed_~__len~6#1 := 2; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8530: assume 0 != ~enable_rc~0;assume { :begin_inline_ttusb_dec_exit_rc } true;ttusb_dec_exit_rc_#in~dec#1.base, ttusb_dec_exit_rc_#in~dec#1.offset := ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset;havoc ttusb_dec_exit_rc_#t~ret769#1, ttusb_dec_exit_rc_#t~mem770#1, ttusb_dec_exit_rc_#t~mem771#1.base, ttusb_dec_exit_rc_#t~mem771#1.offset, ttusb_dec_exit_rc_#t~mem772#1.base, ttusb_dec_exit_rc_#t~mem772#1.offset, ttusb_dec_exit_rc_#t~mem773#1.base, ttusb_dec_exit_rc_#t~mem773#1.offset, ttusb_dec_exit_rc_#t~mem774#1.base, ttusb_dec_exit_rc_#t~mem774#1.offset, ttusb_dec_exit_rc_#t~mem775#1, ttusb_dec_exit_rc_#t~mem776#1.base, ttusb_dec_exit_rc_#t~mem776#1.offset, ttusb_dec_exit_rc_#t~mem777#1.base, ttusb_dec_exit_rc_#t~mem777#1.offset, ttusb_dec_exit_rc_~dec#1.base, ttusb_dec_exit_rc_~dec#1.offset;ttusb_dec_exit_rc_~dec#1.base, ttusb_dec_exit_rc_~dec#1.offset := ttusb_dec_exit_rc_#in~dec#1.base, ttusb_dec_exit_rc_#in~dec#1.offset; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8530: assume !(0 != ~enable_rc~0); [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7539-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret530#1 := printk(62, 0); srcloc: null [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6482: assume usb_fill_int_urb_#t~short112#1;havoc usb_fill_int_urb_#t~mem110#1;havoc usb_fill_int_urb_#t~mem111#1;havoc usb_fill_int_urb_#t~short112#1; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6482: assume !usb_fill_int_urb_#t~short112#1;havoc usb_fill_int_urb_#t~mem110#1;havoc usb_fill_int_urb_#t~mem111#1;havoc usb_fill_int_urb_#t~short112#1;call write~int#0(usb_fill_int_urb_~interval#1, usb_fill_int_urb_~urb#1.base, 160 + usb_fill_int_urb_~urb#1.offset, 4); [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7539: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret530#1 && ttusb_dec_start_ts_feed_#t~ret530#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret530#1; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7671-2: call ttusb_dec_start_sec_feed_#t~mem557#1 := read~int#0(ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, 2); [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7605: assume 0 != ttusb_dec_start_ts_feed_~result~4#1;ttusb_dec_start_ts_feed_#res#1 := ttusb_dec_start_ts_feed_~result~4#1;call ULTIMATE.dealloc(ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset);havoc ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7605: assume !(0 != ttusb_dec_start_ts_feed_~result~4#1);call ttusb_dec_start_ts_feed_#t~mem552#1 := read~int#0(ttusb_dec_start_ts_feed_~dec~5#1.base, 8599 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 4);call write~int#0(1 + ttusb_dec_start_ts_feed_#t~mem552#1, ttusb_dec_start_ts_feed_~dec~5#1.base, 8599 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 4);havoc ttusb_dec_start_ts_feed_#t~mem552#1; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6350: dma_alloc_attrs_~tmp~5#1.base, dma_alloc_attrs_~tmp~5#1.offset := dma_alloc_attrs_#t~ret69#1.base, dma_alloc_attrs_#t~ret69#1.offset;havoc dma_alloc_attrs_#t~ret69#1.base, dma_alloc_attrs_#t~ret69#1.offset;dma_alloc_attrs_~ops~0#1.base, dma_alloc_attrs_~ops~0#1.offset := dma_alloc_attrs_~tmp~5#1.base, dma_alloc_attrs_~tmp~5#1.offset;dma_alloc_attrs_~gfp#1 := dma_alloc_attrs_~gfp#1 - dma_alloc_attrs_~gfp#1 % 8; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6482-1: assume usb_fill_int_urb_#t~short112#1; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6482-1: assume !usb_fill_int_urb_#t~short112#1;call usb_fill_int_urb_#t~mem111#1 := read~int#0(usb_fill_int_urb_~dev#1.base, 28 + usb_fill_int_urb_~dev#1.offset, 4);usb_fill_int_urb_#t~short112#1 := 5 == usb_fill_int_urb_#t~mem111#1 % 4294967296; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8266: SUMMARY for call dvb_dmx_release(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8332: assume 0 != (ttusb_dec_exit_rc_#t~mem776#1.base + ttusb_dec_exit_rc_#t~mem776#1.offset) % 18446744073709551616;havoc ttusb_dec_exit_rc_#t~mem776#1.base, ttusb_dec_exit_rc_#t~mem776#1.offset;call ttusb_dec_exit_rc_#t~mem777#1.base, ttusb_dec_exit_rc_#t~mem777#1.offset := read~$Pointer$#0(ttusb_dec_exit_rc_~dec#1.base, 15405 + ttusb_dec_exit_rc_~dec#1.offset, 8);assume { :begin_inline_input_unregister_device } true;input_unregister_device_#in~arg0#1.base, input_unregister_device_#in~arg0#1.offset := ttusb_dec_exit_rc_#t~mem777#1.base, ttusb_dec_exit_rc_#t~mem777#1.offset;havoc input_unregister_device_~arg0#1.base, input_unregister_device_~arg0#1.offset;input_unregister_device_~arg0#1.base, input_unregister_device_~arg0#1.offset := input_unregister_device_#in~arg0#1.base, input_unregister_device_#in~arg0#1.offset; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8332: assume !(0 != (ttusb_dec_exit_rc_#t~mem776#1.base + ttusb_dec_exit_rc_#t~mem776#1.offset) % 18446744073709551616);havoc ttusb_dec_exit_rc_#t~mem776#1.base, ttusb_dec_exit_rc_#t~mem776#1.offset; [2025-02-08 02:46:44,169 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6350-1: SUMMARY for call dma_alloc_attrs_#t~ret69#1.base, dma_alloc_attrs_#t~ret69#1.offset := get_dma_ops(dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset); srcloc: null [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8134: ttusb_dec_boot_dsp_~size~0#1 := (if (ttusb_dec_boot_dsp_~firmware_size~0#1 - ttusb_dec_boot_dsp_~i~9#1) % 4294967296 % 4294967296 <= 2147483647 then (ttusb_dec_boot_dsp_~firmware_size~0#1 - ttusb_dec_boot_dsp_~i~9#1) % 4294967296 % 4294967296 else (ttusb_dec_boot_dsp_~firmware_size~0#1 - ttusb_dec_boot_dsp_~i~9#1) % 4294967296 % 4294967296 - 4294967296); [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8531: havoc ttusb_dec_exit_rc_#t~ret769#1, ttusb_dec_exit_rc_#t~mem770#1, ttusb_dec_exit_rc_#t~mem771#1.base, ttusb_dec_exit_rc_#t~mem771#1.offset, ttusb_dec_exit_rc_#t~mem772#1.base, ttusb_dec_exit_rc_#t~mem772#1.offset, ttusb_dec_exit_rc_#t~mem773#1.base, ttusb_dec_exit_rc_#t~mem773#1.offset, ttusb_dec_exit_rc_#t~mem774#1.base, ttusb_dec_exit_rc_#t~mem774#1.offset, ttusb_dec_exit_rc_#t~mem775#1, ttusb_dec_exit_rc_#t~mem776#1.base, ttusb_dec_exit_rc_#t~mem776#1.offset, ttusb_dec_exit_rc_#t~mem777#1.base, ttusb_dec_exit_rc_#t~mem777#1.offset, ttusb_dec_exit_rc_~dec#1.base, ttusb_dec_exit_rc_~dec#1.offset;havoc ttusb_dec_exit_rc_#in~dec#1.base, ttusb_dec_exit_rc_#in~dec#1.offset;assume { :end_inline_ttusb_dec_exit_rc } true; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6483-1: [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6483: call write~int#0(usb_fill_int_urb_#t~bitwise113#1, usb_fill_int_urb_~urb#1.base, 160 + usb_fill_int_urb_~urb#1.offset, 4);havoc usb_fill_int_urb_#t~bitwise113#1; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6483-3: assume 0 == -1 + usb_fill_int_urb_~interval#1;usb_fill_int_urb_#t~bitwise113#1 := 1; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6483-3: assume !(0 == -1 + usb_fill_int_urb_~interval#1); [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6483-2: havoc usb_fill_int_urb_#t~bitwise113#1;assume usb_fill_int_urb_#t~bitwise113#1 > 1; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8267-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret726#1 := dvb_unregister_adapter(ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8267: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret726#1 && ttusb_dec_init_dvb_#t~ret726#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret726#1;ttusb_dec_init_dvb_#res#1 := ttusb_dec_init_dvb_~result~8#1; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8333: havoc input_unregister_device_~arg0#1.base, input_unregister_device_~arg0#1.offset;havoc input_unregister_device_#in~arg0#1.base, input_unregister_device_#in~arg0#1.offset;assume { :end_inline_input_unregister_device } true;havoc ttusb_dec_exit_rc_#t~mem777#1.base, ttusb_dec_exit_rc_#t~mem777#1.offset;call write~$Pointer$#0(0, 0, ttusb_dec_exit_rc_~dec#1.base, 15405 + ttusb_dec_exit_rc_~dec#1.offset, 8); [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8135: assume ttusb_dec_boot_dsp_~size~0#1 > 60;ttusb_dec_boot_dsp_~size~0#1 := 60; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8135: assume !(ttusb_dec_boot_dsp_~size~0#1 > 60); [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7937: assume 0 != ~debug~0; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7937: assume !(0 != ~debug~0); [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7739-1: call ttusb_dec_start_feed_#t~mem581#1 := read~int#0(ttusb_dec_start_feed_~dvbdmxfeed#1.base, 4390 + ttusb_dec_start_feed_~dvbdmxfeed#1.offset, 4);ttusb_dec_start_feed_#t~switch582#1 := 0 == ttusb_dec_start_feed_#t~mem581#1; [2025-02-08 02:46:44,170 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7805: assume ttusb_dec_stop_feed_#t~switch601#1;assume { :begin_inline_ttusb_dec_stop_sec_feed } true;ttusb_dec_stop_sec_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_sec_feed_#in~dvbdmxfeed#1.offset := ttusb_dec_stop_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_feed_~dvbdmxfeed#1.offset;havoc ttusb_dec_stop_sec_feed_#res#1;havoc ttusb_dec_stop_sec_feed_#t~mem591#1.base, ttusb_dec_stop_sec_feed_#t~mem591#1.offset, ttusb_dec_stop_sec_feed_#t~mem592#1.base, ttusb_dec_stop_sec_feed_#t~mem592#1.offset, ttusb_dec_stop_sec_feed_#t~mem593#1.base, ttusb_dec_stop_sec_feed_#t~mem593#1.offset, ttusb_dec_stop_sec_feed_#t~mem594#1, ttusb_dec_stop_sec_feed_#t~ret595#1.base, ttusb_dec_stop_sec_feed_#t~ret595#1.offset, ttusb_dec_stop_sec_feed_#t~ret596#1, ttusb_dec_stop_sec_feed_#t~ret597#1, ttusb_dec_stop_sec_feed_#t~mem598#1, ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.offset, ttusb_dec_stop_sec_feed_~dec~8#1.base, ttusb_dec_stop_sec_feed_~dec~8#1.offset, ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset, ttusb_dec_stop_sec_feed_~finfo~2#1.base, ttusb_dec_stop_sec_feed_~finfo~2#1.offset, ttusb_dec_stop_sec_feed_~flags~4#1, ttusb_dec_stop_sec_feed_~tmp~24#1.base, ttusb_dec_stop_sec_feed_~tmp~24#1.offset;ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.offset := ttusb_dec_stop_sec_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_sec_feed_#in~dvbdmxfeed#1.offset;havoc ttusb_dec_stop_sec_feed_~dec~8#1.base, ttusb_dec_stop_sec_feed_~dec~8#1.offset;call ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset := #Ultimate.allocOnStack(2);havoc ttusb_dec_stop_sec_feed_~finfo~2#1.base, ttusb_dec_stop_sec_feed_~finfo~2#1.offset;havoc ttusb_dec_stop_sec_feed_~flags~4#1;havoc ttusb_dec_stop_sec_feed_~tmp~24#1.base, ttusb_dec_stop_sec_feed_~tmp~24#1.offset;call ttusb_dec_stop_sec_feed_#t~mem591#1.base, ttusb_dec_stop_sec_feed_#t~mem591#1.offset := read~$Pointer$#0(ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.base, 4374 + ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.offset, 8);call ttusb_dec_stop_sec_feed_#t~mem592#1.base, ttusb_dec_stop_sec_feed_#t~mem592#1.offset := read~$Pointer$#0(ttusb_dec_stop_sec_feed_#t~mem591#1.base, 148 + ttusb_dec_stop_sec_feed_#t~mem591#1.offset, 8);ttusb_dec_stop_sec_feed_~dec~8#1.base, ttusb_dec_stop_sec_feed_~dec~8#1.offset := ttusb_dec_stop_sec_feed_#t~mem592#1.base, ttusb_dec_stop_sec_feed_#t~mem592#1.offset;havoc ttusb_dec_stop_sec_feed_#t~mem591#1.base, ttusb_dec_stop_sec_feed_#t~mem591#1.offset;havoc ttusb_dec_stop_sec_feed_#t~mem592#1.base, ttusb_dec_stop_sec_feed_#t~mem592#1.offset;call write~int#0(0, ttusb_dec_stop_sec_feed_~#b0~3#1.base, ttusb_dec_stop_sec_feed_~#b0~3#1.offset, 1);call write~int#0(0, ttusb_dec_stop_sec_feed_~#b0~3#1.base, 1 + ttusb_dec_stop_sec_feed_~#b0~3#1.offset, 1);call ttusb_dec_stop_sec_feed_#t~mem593#1.base, ttusb_dec_stop_sec_feed_#t~mem593#1.offset := read~$Pointer$#0(ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.base, 4382 + ttusb_dec_stop_sec_feed_~dvbdmxfeed#1.offset, 8);ttusb_dec_stop_sec_feed_~finfo~2#1.base, ttusb_dec_stop_sec_feed_~finfo~2#1.offset := ttusb_dec_stop_sec_feed_#t~mem593#1.base, ttusb_dec_stop_sec_feed_#t~mem593#1.offset;havoc ttusb_dec_stop_sec_feed_#t~mem593#1.base, ttusb_dec_stop_sec_feed_#t~mem593#1.offset;call ttusb_dec_stop_sec_feed_#t~mem594#1 := read~int#0(ttusb_dec_stop_sec_feed_~finfo~2#1.base, ttusb_dec_stop_sec_feed_~finfo~2#1.offset, 1);call write~int#0(ttusb_dec_stop_sec_feed_#t~mem594#1, ttusb_dec_stop_sec_feed_~#b0~3#1.base, 1 + ttusb_dec_stop_sec_feed_~#b0~3#1.offset, 1);havoc ttusb_dec_stop_sec_feed_#t~mem594#1; [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7805: assume !ttusb_dec_stop_feed_#t~switch601#1;havoc ttusb_dec_stop_feed_#t~mem600#1;havoc ttusb_dec_stop_feed_#t~switch601#1;havoc ttusb_dec_stop_feed_#t~ret602#1;havoc ttusb_dec_stop_feed_#t~ret603#1;havoc ttusb_dec_stop_feed_#t~mem600#1;havoc ttusb_dec_stop_feed_#t~switch601#1;havoc ttusb_dec_stop_feed_#t~ret602#1;havoc ttusb_dec_stop_feed_#t~ret603#1;ttusb_dec_stop_feed_#res#1 := 0; [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8466: assume 0 != ttusb_dec_probe_~tmp___0~12#1;ttusb_dec_probe_#res#1 := 0; [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8466: assume !(0 != ttusb_dec_probe_~tmp___0~12#1);assume { :begin_inline_ttusb_dec_init_stb } true;ttusb_dec_init_stb_#in~dec#1.base, ttusb_dec_init_stb_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_init_stb_#res#1;havoc ttusb_dec_init_stb_#t~ret700#1, ttusb_dec_init_stb_#t~ret701#1, ttusb_dec_init_stb_#t~mem702#1, ttusb_dec_init_stb_#t~mem703#1, ttusb_dec_init_stb_#t~ret704#1, ttusb_dec_init_stb_#t~mem705#1, ttusb_dec_init_stb_#t~mem706#1, ttusb_dec_init_stb_#t~mem707#1, ttusb_dec_init_stb_#t~mem708#1, ttusb_dec_init_stb_#t~ret709#1, ttusb_dec_init_stb_#t~ret710#1, ttusb_dec_init_stb_#t~mem711#1, ttusb_dec_init_stb_#t~switch712#1, ttusb_dec_init_stb_#t~mem713#1, ttusb_dec_init_stb_#t~ret714#1, ttusb_dec_init_stb_#t~mem715#1, ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset, ttusb_dec_init_stb_~result~7#1, ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset, ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset, ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset;ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset := ttusb_dec_init_stb_#in~dec#1.base, ttusb_dec_init_stb_#in~dec#1.offset;havoc ttusb_dec_init_stb_~result~7#1;call ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset := #Ultimate.allocOnStack(4);call ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset := #Ultimate.allocOnStack(4);call ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset := #Ultimate.allocOnStack(4);call write~int#5(0, ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset, 4);call write~int#17(0, ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset, 4);call write~int#2(0, ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4); [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8202: assume ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8202: assume !ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7938: assume -2147483648 <= ttusb_dec_init_v_pes_#t~ret626#1 && ttusb_dec_init_v_pes_#t~ret626#1 <= 2147483647;havoc ttusb_dec_init_v_pes_#t~ret626#1; [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7938-1: SUMMARY for call ttusb_dec_init_v_pes_#t~ret626#1 := printk(90, 0); srcloc: null [2025-02-08 02:46:44,171 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7674: assume ttusb_dec_start_sec_feed_~__len~6#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7674: assume !(ttusb_dec_start_sec_feed_~__len~6#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7740: assume ttusb_dec_start_feed_#t~switch582#1;assume { :begin_inline_ttusb_dec_start_ts_feed } true;ttusb_dec_start_ts_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_ts_feed_#in~dvbdmxfeed#1.offset := ttusb_dec_start_feed_~dvbdmxfeed#1.base, ttusb_dec_start_feed_~dvbdmxfeed#1.offset;havoc ttusb_dec_start_ts_feed_#res#1;havoc ttusb_dec_start_ts_feed_#t~mem522#1.base, ttusb_dec_start_ts_feed_#t~mem522#1.offset, ttusb_dec_start_ts_feed_#t~mem523#1.base, ttusb_dec_start_ts_feed_#t~mem523#1.offset, ttusb_dec_start_ts_feed_#t~ret524#1, ttusb_dec_start_ts_feed_#t~ret525#1, ttusb_dec_start_ts_feed_#t~mem526#1, ttusb_dec_start_ts_feed_#t~bitwise527#1, ttusb_dec_start_ts_feed_#t~ret528#1, ttusb_dec_start_ts_feed_#t~mem529#1, ttusb_dec_start_ts_feed_#t~ret530#1, ttusb_dec_start_ts_feed_#t~mem531#1, ttusb_dec_start_ts_feed_#t~bitwise532#1, ttusb_dec_start_ts_feed_#t~ret533#1, ttusb_dec_start_ts_feed_#t~ret534#1, ttusb_dec_start_ts_feed_#t~mem535#1, ttusb_dec_start_ts_feed_#t~switch536#1, ttusb_dec_start_ts_feed_#t~ret537#1, ttusb_dec_start_ts_feed_#t~mem538#1, ttusb_dec_start_ts_feed_#t~mem539#1, ttusb_dec_start_ts_feed_#t~mem540#1.base, ttusb_dec_start_ts_feed_#t~mem540#1.offset, ttusb_dec_start_ts_feed_#t~ret541#1, ttusb_dec_start_ts_feed_#t~mem542#1, ttusb_dec_start_ts_feed_#t~mem543#1.base, ttusb_dec_start_ts_feed_#t~mem543#1.offset, ttusb_dec_start_ts_feed_#t~mem544#1, ttusb_dec_start_ts_feed_#t~ret545#1, ttusb_dec_start_ts_feed_#t~ret546#1, ttusb_dec_start_ts_feed_#t~mem547#1, ttusb_dec_start_ts_feed_#t~ret548#1, ttusb_dec_start_ts_feed_#t~mem549#1, ttusb_dec_start_ts_feed_#t~ret550#1, ttusb_dec_start_ts_feed_#t~ret551#1, ttusb_dec_start_ts_feed_#t~mem552#1, ttusb_dec_start_ts_feed_#t~ret553#1, ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, ttusb_dec_start_ts_feed_~dvbdmx~0#1.base, ttusb_dec_start_ts_feed_~dvbdmx~0#1.offset, ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset, ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset, ttusb_dec_start_ts_feed_~result~4#1, ttusb_dec_start_ts_feed_~tmp~21#1;ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset := ttusb_dec_start_ts_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_ts_feed_#in~dvbdmxfeed#1.offset;havoc ttusb_dec_start_ts_feed_~dvbdmx~0#1.base, ttusb_dec_start_ts_feed_~dvbdmx~0#1.offset;havoc ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset;call ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset := #Ultimate.allocOnStack(1);havoc ttusb_dec_start_ts_feed_~result~4#1;havoc ttusb_dec_start_ts_feed_~tmp~21#1;call ttusb_dec_start_ts_feed_#t~mem522#1.base, ttusb_dec_start_ts_feed_#t~mem522#1.offset := read~$Pointer$#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4374 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 8);ttusb_dec_start_ts_feed_~dvbdmx~0#1.base, ttusb_dec_start_ts_feed_~dvbdmx~0#1.offset := ttusb_dec_start_ts_feed_#t~mem522#1.base, ttusb_dec_start_ts_feed_#t~mem522#1.offset;havoc ttusb_dec_start_ts_feed_#t~mem522#1.base, ttusb_dec_start_ts_feed_#t~mem522#1.offset;call ttusb_dec_start_ts_feed_#t~mem523#1.base, ttusb_dec_start_ts_feed_#t~mem523#1.offset := read~$Pointer$#0(ttusb_dec_start_ts_feed_~dvbdmx~0#1.base, 148 + ttusb_dec_start_ts_feed_~dvbdmx~0#1.offset, 8);ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset := ttusb_dec_start_ts_feed_#t~mem523#1.base, ttusb_dec_start_ts_feed_#t~mem523#1.offset;havoc ttusb_dec_start_ts_feed_#t~mem523#1.base, ttusb_dec_start_ts_feed_#t~mem523#1.offset;call write~int#0(5, ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset, 1);ttusb_dec_start_ts_feed_~result~4#1 := 0; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7740: assume !ttusb_dec_start_feed_#t~switch582#1;ttusb_dec_start_feed_#t~switch582#1 := ttusb_dec_start_feed_#t~switch582#1 || 1 == ttusb_dec_start_feed_#t~mem581#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9260: havoc dev_get_drvdata_#t~ret858#1.base, dev_get_drvdata_#t~ret858#1.offset;usb_get_intfdata_#t~ret102#1.base, usb_get_intfdata_#t~ret102#1.offset := dev_get_drvdata_#res#1.base, dev_get_drvdata_#res#1.offset;havoc dev_get_drvdata_#t~ret858#1.base, dev_get_drvdata_#t~ret858#1.offset, dev_get_drvdata_~arg0#1.base, dev_get_drvdata_~arg0#1.offset;havoc dev_get_drvdata_#in~arg0#1.base, dev_get_drvdata_#in~arg0#1.offset;assume { :end_inline_dev_get_drvdata } true;usb_get_intfdata_~tmp~9#1.base, usb_get_intfdata_~tmp~9#1.offset := usb_get_intfdata_#t~ret102#1.base, usb_get_intfdata_#t~ret102#1.offset;havoc usb_get_intfdata_#t~ret102#1.base, usb_get_intfdata_#t~ret102#1.offset;usb_get_intfdata_#res#1.base, usb_get_intfdata_#res#1.offset := usb_get_intfdata_~tmp~9#1.base, usb_get_intfdata_~tmp~9#1.offset; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9260-2: dev_get_drvdata_#res#1.base, dev_get_drvdata_#res#1.offset := dev_get_drvdata_#t~ret858#1.base, dev_get_drvdata_#t~ret858#1.offset;havoc dev_get_drvdata_#t~ret858#1.base, dev_get_drvdata_#t~ret858#1.offset; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6353: assume 0 == (dma_alloc_attrs_~dev#1.base + dma_alloc_attrs_~dev#1.offset) % 18446744073709551616;dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset := ~#x86_dma_fallback_dev~0.base, ~#x86_dma_fallback_dev~0.offset; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6353: assume !(0 == (dma_alloc_attrs_~dev#1.base + dma_alloc_attrs_~dev#1.offset) % 18446744073709551616); [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8203-1: ttusb_dec_init_stb_#t~switch712#1 := ttusb_dec_init_stb_#t~switch712#1 || 458760 == ttusb_dec_init_stb_#t~mem711#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8203: assume ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8203: assume !ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9260-3: SUMMARY for call dev_get_drvdata_#t~ret858#1.base, dev_get_drvdata_#t~ret858#1.offset := ldv_malloc(0); srcloc: null [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7675-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~memcpy~res559#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset, ttusb_dec_start_sec_feed_~__len~6#1); srcloc: null [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7675: ttusb_dec_start_sec_feed_~__ret~7#1.base, ttusb_dec_start_sec_feed_~__ret~7#1.offset := ttusb_dec_start_sec_feed_#t~memcpy~res559#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.offset;havoc ttusb_dec_start_sec_feed_#t~memcpy~res559#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.offset; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8534-1: SUMMARY for call ttusb_dec_exit_usb(ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset); srcloc: null [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8534: assume { :begin_inline_ttusb_dec_exit_dvb } true;ttusb_dec_exit_dvb_#in~dec#1.base, ttusb_dec_exit_dvb_#in~dec#1.offset := ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset;havoc ttusb_dec_exit_dvb_#t~ret747#1, ttusb_dec_exit_dvb_#t~mem750#1.base, ttusb_dec_exit_dvb_#t~mem750#1.offset, ttusb_dec_exit_dvb_#t~ret751#1, ttusb_dec_exit_dvb_#t~mem755#1.base, ttusb_dec_exit_dvb_#t~mem755#1.offset, ttusb_dec_exit_dvb_#t~ret756#1, ttusb_dec_exit_dvb_#t~mem757#1.base, ttusb_dec_exit_dvb_#t~mem757#1.offset, ttusb_dec_exit_dvb_#t~mem758#1.base, ttusb_dec_exit_dvb_#t~mem758#1.offset, ttusb_dec_exit_dvb_#t~ret759#1, ttusb_dec_exit_dvb_#t~mem760#1.base, ttusb_dec_exit_dvb_#t~mem760#1.offset, ttusb_dec_exit_dvb_#t~mem761#1.base, ttusb_dec_exit_dvb_#t~mem761#1.offset, ttusb_dec_exit_dvb_#t~mem765#1.base, ttusb_dec_exit_dvb_#t~mem765#1.offset, ttusb_dec_exit_dvb_#t~mem766#1.base, ttusb_dec_exit_dvb_#t~mem766#1.offset, ttusb_dec_exit_dvb_#t~mem767#1.base, ttusb_dec_exit_dvb_#t~mem767#1.offset, ttusb_dec_exit_dvb_#t~ret768#1, ttusb_dec_exit_dvb_~dec#1.base, ttusb_dec_exit_dvb_~dec#1.offset;ttusb_dec_exit_dvb_~dec#1.base, ttusb_dec_exit_dvb_~dec#1.offset := ttusb_dec_exit_dvb_#in~dec#1.base, ttusb_dec_exit_dvb_#in~dec#1.offset; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8204-1: ttusb_dec_init_stb_#t~switch712#1 := ttusb_dec_init_stb_#t~switch712#1 || 458764 == ttusb_dec_init_stb_#t~mem711#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8204: assume ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8204: assume !ttusb_dec_init_stb_#t~switch712#1;ttusb_dec_init_stb_#t~switch712#1 := ttusb_dec_init_stb_#t~switch712#1 || 458761 == ttusb_dec_init_stb_#t~mem711#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8072: assume ttusb_dec_boot_dsp_~__len~7#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8072: assume !(ttusb_dec_boot_dsp_~__len~7#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7610: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret553#1 && ttusb_dec_start_ts_feed_#t~ret553#1 <= 2147483647;ttusb_dec_start_ts_feed_~tmp~21#1 := ttusb_dec_start_ts_feed_#t~ret553#1;havoc ttusb_dec_start_ts_feed_#t~ret553#1;ttusb_dec_start_ts_feed_#res#1 := ttusb_dec_start_ts_feed_~tmp~21#1;call ULTIMATE.dealloc(ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset);havoc ttusb_dec_start_ts_feed_~#b0~0#1.base, ttusb_dec_start_ts_feed_~#b0~0#1.offset; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-2: havoc ttusb_dec_start_ts_feed_#t~bitwise532#1;assume ((((ttusb_dec_start_ts_feed_#t~mem531#1 < 0 || ttusb_dec_start_ts_feed_#t~bitwise532#1 <= ttusb_dec_start_ts_feed_#t~mem531#1) && ttusb_dec_start_ts_feed_#t~bitwise532#1 <= 2) && ttusb_dec_start_ts_feed_#t~bitwise532#1 >= 0) && (ttusb_dec_start_ts_feed_#t~mem531#1 >= 0 || ttusb_dec_start_ts_feed_#t~bitwise532#1 > 2 + ttusb_dec_start_ts_feed_#t~mem531#1)) && ttusb_dec_start_ts_feed_#t~bitwise532#1 >= -2147483648; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-1: [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6487: call write~int#0(-1, usb_fill_int_urb_~urb#1.base, 152 + usb_fill_int_urb_~urb#1.offset, 4); [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544: assume 0 != ttusb_dec_start_ts_feed_#t~bitwise532#1;havoc ttusb_dec_start_ts_feed_#t~mem531#1;havoc ttusb_dec_start_ts_feed_#t~bitwise532#1; [2025-02-08 02:46:44,172 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544: assume !(0 != ttusb_dec_start_ts_feed_#t~bitwise532#1);havoc ttusb_dec_start_ts_feed_#t~mem531#1;havoc ttusb_dec_start_ts_feed_#t~bitwise532#1; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7610-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret553#1 := ttusb_dec_start_iso_xfer(ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset); srcloc: null [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8601: assume 1 == main_~ldv_s_ttusb_dec_driver_usb_driver~0#1;assume { :begin_inline_ldv_handler_precall } true; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8601: assume !(1 == main_~ldv_s_ttusb_dec_driver_usb_driver~0#1); [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-5: call ttusb_dec_start_ts_feed_#t~mem531#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4436 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 4); [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8601-1: assume main_#t~switch825#1; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8601-1: assume !main_#t~switch825#1;main_#t~switch825#1 := true; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8535: havoc ttusb_dec_exit_dvb_#t~ret747#1, ttusb_dec_exit_dvb_#t~mem750#1.base, ttusb_dec_exit_dvb_#t~mem750#1.offset, ttusb_dec_exit_dvb_#t~ret751#1, ttusb_dec_exit_dvb_#t~mem755#1.base, ttusb_dec_exit_dvb_#t~mem755#1.offset, ttusb_dec_exit_dvb_#t~ret756#1, ttusb_dec_exit_dvb_#t~mem757#1.base, ttusb_dec_exit_dvb_#t~mem757#1.offset, ttusb_dec_exit_dvb_#t~mem758#1.base, ttusb_dec_exit_dvb_#t~mem758#1.offset, ttusb_dec_exit_dvb_#t~ret759#1, ttusb_dec_exit_dvb_#t~mem760#1.base, ttusb_dec_exit_dvb_#t~mem760#1.offset, ttusb_dec_exit_dvb_#t~mem761#1.base, ttusb_dec_exit_dvb_#t~mem761#1.offset, ttusb_dec_exit_dvb_#t~mem765#1.base, ttusb_dec_exit_dvb_#t~mem765#1.offset, ttusb_dec_exit_dvb_#t~mem766#1.base, ttusb_dec_exit_dvb_#t~mem766#1.offset, ttusb_dec_exit_dvb_#t~mem767#1.base, ttusb_dec_exit_dvb_#t~mem767#1.offset, ttusb_dec_exit_dvb_#t~ret768#1, ttusb_dec_exit_dvb_~dec#1.base, ttusb_dec_exit_dvb_~dec#1.offset;havoc ttusb_dec_exit_dvb_#in~dec#1.base, ttusb_dec_exit_dvb_#in~dec#1.offset;assume { :end_inline_ttusb_dec_exit_dvb } true; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-4: assume 0 == ttusb_dec_start_ts_feed_#t~mem531#1;ttusb_dec_start_ts_feed_#t~bitwise532#1 := 0; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-4: assume !(0 == ttusb_dec_start_ts_feed_#t~mem531#1); [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-3: assume 2 == ttusb_dec_start_ts_feed_#t~mem531#1;ttusb_dec_start_ts_feed_#t~bitwise532#1 := ttusb_dec_start_ts_feed_#t~mem531#1; [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7544-3: assume !(2 == ttusb_dec_start_ts_feed_#t~mem531#1); [2025-02-08 02:46:44,173 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8139: call write~int#0(170, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset + (if ttusb_dec_boot_dsp_~j~1#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ttusb_dec_boot_dsp_~j~1#1 % 18446744073709551616 % 18446744073709551616 else ttusb_dec_boot_dsp_~j~1#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1);ttusb_dec_boot_dsp_~tmp___7~0#1 := ttusb_dec_boot_dsp_~trans_count~0#1;ttusb_dec_boot_dsp_~trans_count~0#1 := 1 + ttusb_dec_boot_dsp_~trans_count~0#1;call write~int#0(ttusb_dec_boot_dsp_~tmp___7~0#1, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset + (if (1 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (1 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 else (1 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1);call write~int#0(240, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset + (if (2 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (2 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 else (2 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1);call write~int#0(ttusb_dec_boot_dsp_~size~0#1, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset + (if (3 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (3 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 else (3 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), 1);ttusb_dec_boot_dsp_~__len___3~0#1 := ttusb_dec_boot_dsp_~size~0#1; [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8205: SUMMARY for call ttusb_dec_set_model(ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset, 2); srcloc: null [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8073-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res671#1.base, ttusb_dec_boot_dsp_#t~memcpy~res671#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset, ttusb_dec_boot_dsp_~firmware~0#1.base, 56 + ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~__len~7#1); srcloc: null [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8073: ttusb_dec_boot_dsp_~__ret~8#1.base, ttusb_dec_boot_dsp_~__ret~8#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res671#1.base, ttusb_dec_boot_dsp_#t~memcpy~res671#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res671#1.base, ttusb_dec_boot_dsp_#t~memcpy~res671#1.offset; [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7875: call ULTIMATE.dealloc(ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset);havoc ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset;havoc ttusb_dec_init_tasklet_#t~ret615#1.base, ttusb_dec_init_tasklet_#t~ret615#1.offset, ttusb_dec_init_tasklet_~dec#1.base, ttusb_dec_init_tasklet_~dec#1.offset, ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset;havoc ttusb_dec_init_tasklet_#in~dec#1.base, ttusb_dec_init_tasklet_#in~dec#1.offset;assume { :end_inline_ttusb_dec_init_tasklet } true;call write~int#0(1, ttusb_dec_probe_~dec~10#1.base, 15477 + ttusb_dec_probe_~dec~10#1.offset, 4);assume { :begin_inline_ttusb_dec_set_interface } true;ttusb_dec_set_interface_#in~dec#1.base, ttusb_dec_set_interface_#in~dec#1.offset, ttusb_dec_set_interface_#in~interface#1 := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, 1;havoc ttusb_dec_set_interface_#res#1;havoc ttusb_dec_set_interface_#t~mem505#1, ttusb_dec_set_interface_#t~switch506#1, ttusb_dec_set_interface_#t~mem507#1.base, ttusb_dec_set_interface_#t~mem507#1.offset, ttusb_dec_set_interface_#t~ret508#1, ttusb_dec_set_interface_#t~ret509#1, ttusb_dec_set_interface_#t~mem510#1.base, ttusb_dec_set_interface_#t~mem510#1.offset, ttusb_dec_set_interface_#t~ret511#1, ttusb_dec_set_interface_#t~mem512#1.base, ttusb_dec_set_interface_#t~mem512#1.offset, ttusb_dec_set_interface_#t~ret513#1, ttusb_dec_set_interface_~dec#1.base, ttusb_dec_set_interface_~dec#1.offset, ttusb_dec_set_interface_~interface#1, ttusb_dec_set_interface_~result~2#1, ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset;ttusb_dec_set_interface_~dec#1.base, ttusb_dec_set_interface_~dec#1.offset := ttusb_dec_set_interface_#in~dec#1.base, ttusb_dec_set_interface_#in~dec#1.offset;ttusb_dec_set_interface_~interface#1 := ttusb_dec_set_interface_#in~interface#1;havoc ttusb_dec_set_interface_~result~2#1;call ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset := #Ultimate.allocOnStack(1);ttusb_dec_set_interface_~result~2#1 := 0;call write~int#0(5, ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset, 1);call ttusb_dec_set_interface_#t~mem505#1 := read~int#0(ttusb_dec_set_interface_~dec#1.base, 2041 + ttusb_dec_set_interface_~dec#1.offset, 4); [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7941: call write~int#0(0, ttusb_dec_init_v_pes_~dec#1.base, 9017 + ttusb_dec_init_v_pes_~dec#1.offset, 1);call write~int#0(0, ttusb_dec_init_v_pes_~dec#1.base, 9018 + ttusb_dec_init_v_pes_~dec#1.offset, 1);call write~int#0(1, ttusb_dec_init_v_pes_~dec#1.base, 9019 + ttusb_dec_init_v_pes_~dec#1.offset, 1);call write~int#0(224, ttusb_dec_init_v_pes_~dec#1.base, 9020 + ttusb_dec_init_v_pes_~dec#1.offset, 1); [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7743: assume ttusb_dec_start_feed_#t~switch582#1;assume { :begin_inline_ttusb_dec_start_sec_feed } true;ttusb_dec_start_sec_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_sec_feed_#in~dvbdmxfeed#1.offset := ttusb_dec_start_feed_~dvbdmxfeed#1.base, ttusb_dec_start_feed_~dvbdmxfeed#1.offset;havoc ttusb_dec_start_sec_feed_#res#1;havoc ttusb_dec_start_sec_feed_#t~mem554#1.base, ttusb_dec_start_sec_feed_#t~mem554#1.offset, ttusb_dec_start_sec_feed_#t~mem555#1.base, ttusb_dec_start_sec_feed_#t~mem555#1.offset, ttusb_dec_start_sec_feed_#t~ret556#1, ttusb_dec_start_sec_feed_#t~mem557#1, ttusb_dec_start_sec_feed_#t~ret558#1, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.offset, ttusb_dec_start_sec_feed_#t~mem563#1.base, ttusb_dec_start_sec_feed_#t~mem563#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.offset, ttusb_dec_start_sec_feed_#t~mem565#1.base, ttusb_dec_start_sec_feed_#t~mem565#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.offset, ttusb_dec_start_sec_feed_#t~ret567#1, ttusb_dec_start_sec_feed_#t~mem568#1, ttusb_dec_start_sec_feed_#t~ret569#1.base, ttusb_dec_start_sec_feed_#t~ret569#1.offset, ttusb_dec_start_sec_feed_#t~mem570#1, ttusb_dec_start_sec_feed_#t~mem571#1.base, ttusb_dec_start_sec_feed_#t~mem571#1.offset, ttusb_dec_start_sec_feed_#t~ret572#1.base, ttusb_dec_start_sec_feed_#t~ret572#1.offset, ttusb_dec_start_sec_feed_#t~ret573#1, ttusb_dec_start_sec_feed_#t~mem574#1, ttusb_dec_start_sec_feed_#t~ret575#1, ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, ttusb_dec_start_sec_feed_~dec~6#1.base, ttusb_dec_start_sec_feed_~dec~6#1.offset, ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset, ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset, ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset, ttusb_dec_start_sec_feed_~result~5#1, ttusb_dec_start_sec_feed_~finfo~1#1.base, ttusb_dec_start_sec_feed_~finfo~1#1.offset, ttusb_dec_start_sec_feed_~flags~3#1, ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset, ttusb_dec_start_sec_feed_~tmp~22#1, ttusb_dec_start_sec_feed_~__len~6#1, ttusb_dec_start_sec_feed_~__ret~7#1.base, ttusb_dec_start_sec_feed_~__ret~7#1.offset, ttusb_dec_start_sec_feed_~__len___0~5#1, ttusb_dec_start_sec_feed_~__ret___0~5#1.base, ttusb_dec_start_sec_feed_~__ret___0~5#1.offset, ttusb_dec_start_sec_feed_~__len___1~3#1, ttusb_dec_start_sec_feed_~__ret___1~3#1.base, ttusb_dec_start_sec_feed_~__ret___1~3#1.offset, ttusb_dec_start_sec_feed_~tmp___0~7#1.base, ttusb_dec_start_sec_feed_~tmp___0~7#1.offset, ttusb_dec_start_sec_feed_~tmp___1~6#1.base, ttusb_dec_start_sec_feed_~tmp___1~6#1.offset, ttusb_dec_start_sec_feed_~tmp___2~3#1;ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset := ttusb_dec_start_sec_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_sec_feed_#in~dvbdmxfeed#1.offset;havoc ttusb_dec_start_sec_feed_~dec~6#1.base, ttusb_dec_start_sec_feed_~dec~6#1.offset;call ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset := #Ultimate.allocOnStack(29);call ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset := #Ultimate.allocOnStack(2);call ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset := #Ultimate.allocOnStack(60);call ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset := #Ultimate.allocOnStack(4);havoc ttusb_dec_start_sec_feed_~result~5#1;havoc ttusb_dec_start_sec_feed_~finfo~1#1.base, ttusb_dec_start_sec_feed_~finfo~1#1.offset;havoc ttusb_dec_start_sec_feed_~flags~3#1;call ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset := #Ultimate.allocOnStack(1);havoc ttusb_dec_start_sec_feed_~tmp~22#1;havoc ttusb_dec_start_sec_feed_~__len~6#1;havoc ttusb_dec_start_sec_feed_~__ret~7#1.base, ttusb_dec_start_sec_feed_~__ret~7#1.offset;havoc ttusb_dec_start_sec_feed_~__len___0~5#1;havoc ttusb_dec_start_sec_feed_~__ret___0~5#1.base, ttusb_dec_start_sec_feed_~__ret___0~5#1.offset;havoc ttusb_dec_start_sec_feed_~__len___1~3#1;havoc ttusb_dec_start_sec_feed_~__ret___1~3#1.base, ttusb_dec_start_sec_feed_~__ret___1~3#1.offset;havoc ttusb_dec_start_sec_feed_~tmp___0~7#1.base, ttusb_dec_start_sec_feed_~tmp___0~7#1.offset;havoc ttusb_dec_start_sec_feed_~tmp___1~6#1.base, ttusb_dec_start_sec_feed_~tmp___1~6#1.offset;havoc ttusb_dec_start_sec_feed_~tmp___2~3#1;call ttusb_dec_start_sec_feed_#t~mem554#1.base, ttusb_dec_start_sec_feed_#t~mem554#1.offset := read~$Pointer$#0(ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, 4374 + ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, 8);call ttusb_dec_start_sec_feed_#t~mem555#1.base, ttusb_dec_start_sec_feed_#t~mem555#1.offset := read~$Pointer$#0(ttusb_dec_start_sec_feed_#t~mem554#1.base, 148 + ttusb_dec_start_sec_feed_#t~mem554#1.offset, 8);ttusb_dec_start_sec_feed_~dec~6#1.base, ttusb_dec_start_sec_feed_~dec~6#1.offset := ttusb_dec_start_sec_feed_#t~mem555#1.base, ttusb_dec_start_sec_feed_#t~mem555#1.offset;havoc ttusb_dec_start_sec_feed_#t~mem554#1.base, ttusb_dec_start_sec_feed_#t~mem554#1.offset;havoc ttusb_dec_start_sec_feed_#t~mem555#1.base, ttusb_dec_start_sec_feed_#t~mem555#1.offset;call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 1 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 2 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(1, ttusb_dec_start_sec_feed_~#b0~1#1.base, 3 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 4 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 5 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 6 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 7 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 8 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 9 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 10 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 11 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 12 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 13 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 14 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 15 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 16 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(255, ttusb_dec_start_sec_feed_~#b0~1#1.base, 17 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 18 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 19 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 20 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 21 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 22 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 23 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 24 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 25 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 26 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 27 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(0, ttusb_dec_start_sec_feed_~#b0~1#1.base, 28 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, 1);call write~int#0(1, ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset, 1); [2025-02-08 02:46:44,174 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7743: assume !ttusb_dec_start_feed_#t~switch582#1;ttusb_dec_start_feed_#t~switch582#1 := true; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7677-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~memcpy~res560#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset, ttusb_dec_start_sec_feed_~__len~6#1); srcloc: null [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7677: ttusb_dec_start_sec_feed_~__ret~7#1.base, ttusb_dec_start_sec_feed_~__ret~7#1.offset := ttusb_dec_start_sec_feed_#t~memcpy~res560#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.offset;havoc ttusb_dec_start_sec_feed_#t~memcpy~res560#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.offset; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7545: assume 0 != ~debug~0; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7545: assume !(0 != ~debug~0); [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6290: havoc is_device_dma_capable_#t~mem50#1.base, is_device_dma_capable_#t~mem50#1.offset;havoc is_device_dma_capable_#t~mem51#1.base, is_device_dma_capable_#t~mem51#1.offset;havoc is_device_dma_capable_#t~mem52#1;havoc is_device_dma_capable_#t~short53#1;dma_alloc_attrs_#t~ret70#1 := is_device_dma_capable_#res#1;havoc is_device_dma_capable_#t~mem50#1.base, is_device_dma_capable_#t~mem50#1.offset, is_device_dma_capable_#t~mem51#1.base, is_device_dma_capable_#t~mem51#1.offset, is_device_dma_capable_#t~mem52#1, is_device_dma_capable_#t~short53#1, is_device_dma_capable_~dev#1.base, is_device_dma_capable_~dev#1.offset;havoc is_device_dma_capable_#in~dev#1.base, is_device_dma_capable_#in~dev#1.offset;assume { :end_inline_is_device_dma_capable } true;assume -2147483648 <= dma_alloc_attrs_#t~ret70#1 && dma_alloc_attrs_#t~ret70#1 <= 2147483647;dma_alloc_attrs_~tmp___0~0#1 := dma_alloc_attrs_#t~ret70#1;havoc dma_alloc_attrs_#t~ret70#1; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8404: ttusb_dec_exit_filters_~__mptr~4#1.base, ttusb_dec_exit_filters_~__mptr~4#1.offset := ttusb_dec_exit_filters_~item~3#1.base, ttusb_dec_exit_filters_~item~3#1.offset;ttusb_dec_exit_filters_~finfo~3#1.base, ttusb_dec_exit_filters_~finfo~3#1.offset := ttusb_dec_exit_filters_~__mptr~4#1.base, -400 + ttusb_dec_exit_filters_~__mptr~4#1.offset; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6290-3: assume is_device_dma_capable_#t~short53#1;call is_device_dma_capable_#t~mem51#1.base, is_device_dma_capable_#t~mem51#1.offset := read~$Pointer$#15(is_device_dma_capable_~dev#1.base, 856 + is_device_dma_capable_~dev#1.offset, 8);call is_device_dma_capable_#t~mem52#1 := read~int#10(is_device_dma_capable_#t~mem51#1.base, is_device_dma_capable_#t~mem51#1.offset, 8);is_device_dma_capable_#t~short53#1 := 0 != is_device_dma_capable_#t~mem52#1 % 18446744073709551616; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6290-3: assume !is_device_dma_capable_#t~short53#1; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8272-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret731#1 := ##fun~$Pointer$~X~$Pointer$~TO~int(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 1651 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_#t~mem730#1.base, ttusb_dec_init_dvb_#t~mem730#1.offset); srcloc: null [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8272: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret731#1 && ttusb_dec_init_dvb_#t~ret731#1 <= 2147483647;ttusb_dec_init_dvb_~result~8#1 := ttusb_dec_init_dvb_#t~ret731#1;havoc ttusb_dec_init_dvb_#t~mem730#1.base, ttusb_dec_init_dvb_#t~mem730#1.offset;havoc ttusb_dec_init_dvb_#t~ret731#1; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6290-2: is_device_dma_capable_#res#1 := (if is_device_dma_capable_#t~short53#1 then 1 else 0);havoc is_device_dma_capable_#t~mem50#1.base, is_device_dma_capable_#t~mem50#1.offset;havoc is_device_dma_capable_#t~mem51#1.base, is_device_dma_capable_#t~mem51#1.offset;havoc is_device_dma_capable_#t~mem52#1;havoc is_device_dma_capable_#t~short53#1; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8603: assume { :end_inline_ldv_handler_precall } true;assume { :begin_inline_ttusb_dec_disconnect } true;ttusb_dec_disconnect_#in~intf#1.base, ttusb_dec_disconnect_#in~intf#1.offset := main_~var_group1~0#1.base, main_~var_group1~0#1.offset;havoc ttusb_dec_disconnect_#t~ret818#1.base, ttusb_dec_disconnect_#t~ret818#1.offset, ttusb_dec_disconnect_#t~ret819#1, ttusb_dec_disconnect_#t~mem820#1, ttusb_dec_disconnect_~intf#1.base, ttusb_dec_disconnect_~intf#1.offset, ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset, ttusb_dec_disconnect_~tmp~31#1.base, ttusb_dec_disconnect_~tmp~31#1.offset;ttusb_dec_disconnect_~intf#1.base, ttusb_dec_disconnect_~intf#1.offset := ttusb_dec_disconnect_#in~intf#1.base, ttusb_dec_disconnect_#in~intf#1.offset;havoc ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset;havoc ttusb_dec_disconnect_~tmp~31#1.base, ttusb_dec_disconnect_~tmp~31#1.offset;assume { :begin_inline_usb_get_intfdata } true;usb_get_intfdata_#in~intf#1.base, usb_get_intfdata_#in~intf#1.offset := ttusb_dec_disconnect_~intf#1.base, ttusb_dec_disconnect_~intf#1.offset;havoc usb_get_intfdata_#res#1.base, usb_get_intfdata_#res#1.offset;havoc usb_get_intfdata_#t~ret102#1.base, usb_get_intfdata_#t~ret102#1.offset, usb_get_intfdata_~intf#1.base, usb_get_intfdata_~intf#1.offset, usb_get_intfdata_~tmp~9#1.base, usb_get_intfdata_~tmp~9#1.offset;usb_get_intfdata_~intf#1.base, usb_get_intfdata_~intf#1.offset := usb_get_intfdata_#in~intf#1.base, usb_get_intfdata_#in~intf#1.offset;havoc usb_get_intfdata_~tmp~9#1.base, usb_get_intfdata_~tmp~9#1.offset;assume { :begin_inline_dev_get_drvdata } true;dev_get_drvdata_#in~arg0#1.base, dev_get_drvdata_#in~arg0#1.offset := usb_get_intfdata_~intf#1.base, 44 + usb_get_intfdata_~intf#1.offset;havoc dev_get_drvdata_#res#1.base, dev_get_drvdata_#res#1.offset;havoc dev_get_drvdata_#t~ret858#1.base, dev_get_drvdata_#t~ret858#1.offset, dev_get_drvdata_~arg0#1.base, dev_get_drvdata_~arg0#1.offset;dev_get_drvdata_~arg0#1.base, dev_get_drvdata_~arg0#1.offset := dev_get_drvdata_#in~arg0#1.base, dev_get_drvdata_#in~arg0#1.offset; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7546: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret533#1 && ttusb_dec_start_ts_feed_#t~ret533#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret533#1; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7546-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret533#1 := printk(63, 0); srcloc: null [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8471: assume 0 != ttusb_dec_probe_~tmp___1~9#1; [2025-02-08 02:46:44,175 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8471: assume !(0 != ttusb_dec_probe_~tmp___1~9#1);assume { :begin_inline_ttusb_dec_init_dvb } true;ttusb_dec_init_dvb_#in~dec#1.base, ttusb_dec_init_dvb_#in~dec#1.offset := ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset;havoc ttusb_dec_init_dvb_#res#1;havoc ttusb_dec_init_dvb_#t~ret716#1, ttusb_dec_init_dvb_#t~mem717#1.base, ttusb_dec_init_dvb_#t~mem717#1.offset, ttusb_dec_init_dvb_#t~mem718#1.base, ttusb_dec_init_dvb_#t~mem718#1.offset, ttusb_dec_init_dvb_#t~ret719#1, ttusb_dec_init_dvb_#t~ret720#1, ttusb_dec_init_dvb_#t~ret721#1, ttusb_dec_init_dvb_#t~ret722#1, ttusb_dec_init_dvb_#t~ret723#1, ttusb_dec_init_dvb_#t~ret724#1, ttusb_dec_init_dvb_#t~ret725#1, ttusb_dec_init_dvb_#t~ret726#1, ttusb_dec_init_dvb_#t~mem730#1.base, ttusb_dec_init_dvb_#t~mem730#1.offset, ttusb_dec_init_dvb_#t~ret731#1, ttusb_dec_init_dvb_#t~ret732#1, ttusb_dec_init_dvb_#t~ret733#1, ttusb_dec_init_dvb_#t~mem737#1.base, ttusb_dec_init_dvb_#t~mem737#1.offset, ttusb_dec_init_dvb_#t~ret738#1, ttusb_dec_init_dvb_#t~ret739#1, ttusb_dec_init_dvb_#t~mem743#1.base, ttusb_dec_init_dvb_#t~mem743#1.offset, ttusb_dec_init_dvb_#t~ret744#1, ttusb_dec_init_dvb_#t~ret745#1, ttusb_dec_init_dvb_#t~ret746#1, ttusb_dec_init_dvb_~dec#1.base, ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~result~8#1;ttusb_dec_init_dvb_~dec#1.base, ttusb_dec_init_dvb_~dec#1.offset := ttusb_dec_init_dvb_#in~dec#1.base, ttusb_dec_init_dvb_#in~dec#1.offset;havoc ttusb_dec_init_dvb_~result~8#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6357: assume { :begin_inline_is_device_dma_capable } true;is_device_dma_capable_#in~dev#1.base, is_device_dma_capable_#in~dev#1.offset := dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset;havoc is_device_dma_capable_#res#1;havoc is_device_dma_capable_#t~mem50#1.base, is_device_dma_capable_#t~mem50#1.offset, is_device_dma_capable_#t~mem51#1.base, is_device_dma_capable_#t~mem51#1.offset, is_device_dma_capable_#t~mem52#1, is_device_dma_capable_#t~short53#1, is_device_dma_capable_~dev#1.base, is_device_dma_capable_~dev#1.offset;is_device_dma_capable_~dev#1.base, is_device_dma_capable_~dev#1.offset := is_device_dma_capable_#in~dev#1.base, is_device_dma_capable_#in~dev#1.offset;call is_device_dma_capable_#t~mem50#1.base, is_device_dma_capable_#t~mem50#1.offset := read~$Pointer$#15(is_device_dma_capable_~dev#1.base, 856 + is_device_dma_capable_~dev#1.offset, 8);is_device_dma_capable_#t~short53#1 := 0 != (is_device_dma_capable_#t~mem50#1.base + is_device_dma_capable_#t~mem50#1.offset) % 18446744073709551616; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8207: assume ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8207: assume !ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8273: assume ttusb_dec_init_dvb_~result~8#1 < 0; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8273: assume !(ttusb_dec_init_dvb_~result~8#1 < 0);call ttusb_dec_init_dvb_#t~mem737#1.base, ttusb_dec_init_dvb_#t~mem737#1.offset := read~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, 827 + ttusb_dec_init_dvb_~dec#1.offset, 8); [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8075-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res672#1.base, ttusb_dec_boot_dsp_#t~memcpy~res672#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset, ttusb_dec_boot_dsp_~firmware~0#1.base, 56 + ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~__len~7#1); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8075: ttusb_dec_boot_dsp_~__ret~8#1.base, ttusb_dec_boot_dsp_~__ret~8#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res672#1.base, ttusb_dec_boot_dsp_#t~memcpy~res672#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res672#1.base, ttusb_dec_boot_dsp_#t~memcpy~res672#1.offset; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877-1: SUMMARY for call ttusb_dec_init_tasklet_#t~ret615#1.base, ttusb_dec_init_tasklet_#t~ret615#1.offset := spinlock_check(ttusb_dec_init_tasklet_~dec#1.base, 15237 + ttusb_dec_init_tasklet_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7877: havoc ttusb_dec_init_tasklet_#t~ret615#1.base, ttusb_dec_init_tasklet_#t~ret615#1.offset; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6622: crc16_~tmp___0~2#1.base, crc16_~tmp___0~2#1.offset := crc16_~buf#1.base, crc16_~buf#1.offset;crc16_~buf#1.base, crc16_~buf#1.offset := crc16_~buf#1.base, 1 + crc16_~buf#1.offset;call crc16_#t~mem205#1 := read~int#0(crc16_~tmp___0~2#1.base, crc16_~tmp___0~2#1.offset, 1); [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8604: havoc ttusb_dec_disconnect_#t~ret818#1.base, ttusb_dec_disconnect_#t~ret818#1.offset, ttusb_dec_disconnect_#t~ret819#1, ttusb_dec_disconnect_#t~mem820#1, ttusb_dec_disconnect_~intf#1.base, ttusb_dec_disconnect_~intf#1.offset, ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset, ttusb_dec_disconnect_~tmp~31#1.base, ttusb_dec_disconnect_~tmp~31#1.offset;havoc ttusb_dec_disconnect_#in~intf#1.base, ttusb_dec_disconnect_#in~intf#1.offset;assume { :end_inline_ttusb_dec_disconnect } true;main_~ldv_s_ttusb_dec_driver_usb_driver~0#1 := 0; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7679: ttusb_dec_start_sec_feed_~__len___0~5#1 := 1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8538: SUMMARY for call kfree(ttusb_dec_disconnect_~dec~11#1.base, ttusb_dec_disconnect_~dec~11#1.offset); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8406: SUMMARY for call list_del(ttusb_dec_exit_filters_~finfo~3#1.base, 9 + ttusb_dec_exit_filters_~finfo~3#1.offset); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6358: assume 0 == dma_alloc_attrs_~tmp___0~0#1;dma_alloc_attrs_#res#1.base, dma_alloc_attrs_#res#1.offset := 0, 0; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6358: assume !(0 == dma_alloc_attrs_~tmp___0~0#1);call dma_alloc_attrs_#t~mem71#1.base, dma_alloc_attrs_#t~mem71#1.offset := read~$Pointer$#10(dma_alloc_attrs_~ops~0#1.base, dma_alloc_attrs_~ops~0#1.offset, 8); [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8274: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret732#1 && ttusb_dec_init_dvb_#t~ret732#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret732#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8472: ttusb_dec_probe_#res#1 := 0; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8472-1: SUMMARY for call ttusb_dec_exit_usb(ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8208-1: ttusb_dec_init_stb_#t~switch712#1 := ttusb_dec_init_stb_#t~switch712#1 || 458771 == ttusb_dec_init_stb_#t~mem711#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8208: assume ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8208: assume !ttusb_dec_init_stb_#t~switch712#1;ttusb_dec_init_stb_#t~switch712#1 := ttusb_dec_init_stb_#t~switch712#1 || 458769 == ttusb_dec_init_stb_#t~mem711#1; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8274-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret732#1 := printk(119, 0); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7878: SUMMARY for call __raw_spin_lock_init(ttusb_dec_init_tasklet_~dec#1.base, 15237 + ttusb_dec_init_tasklet_~dec#1.offset, 85, 0, ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset); srcloc: null [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7746: assume 0 != ~debug~0;call ttusb_dec_start_feed_#t~mem585#1 := read~int#0(ttusb_dec_start_feed_~dvbdmxfeed#1.base, 4390 + ttusb_dec_start_feed_~dvbdmxfeed#1.offset, 4); [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7746: assume !(0 != ~debug~0); [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7680: assume ttusb_dec_start_sec_feed_~__len___0~5#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7680: assume !(ttusb_dec_start_sec_feed_~__len___0~5#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,176 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7746-1: assume ttusb_dec_start_feed_#t~switch582#1; [2025-02-08 02:46:44,177 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7746-1: assume !ttusb_dec_start_feed_#t~switch582#1;havoc ttusb_dec_start_feed_#t~mem581#1;havoc ttusb_dec_start_feed_#t~switch582#1;havoc ttusb_dec_start_feed_#t~ret583#1;havoc ttusb_dec_start_feed_#t~ret584#1;havoc ttusb_dec_start_feed_#t~mem581#1;havoc ttusb_dec_start_feed_#t~switch582#1;havoc ttusb_dec_start_feed_#t~ret583#1;havoc ttusb_dec_start_feed_#t~ret584#1;##fun~$Pointer$~TO~int_#t~ret887#1 := ttusb_dec_start_feed_#res#1;havoc ttusb_dec_start_feed_#t~mem576#1.base, ttusb_dec_start_feed_#t~mem576#1.offset, ttusb_dec_start_feed_#t~ret577#1, ttusb_dec_start_feed_#t~mem578#1.base, ttusb_dec_start_feed_#t~mem578#1.offset, ttusb_dec_start_feed_#t~mem579#1, ttusb_dec_start_feed_#t~ret580#1, ttusb_dec_start_feed_#t~mem581#1, ttusb_dec_start_feed_#t~switch582#1, ttusb_dec_start_feed_#t~ret583#1, ttusb_dec_start_feed_#t~ret584#1, ttusb_dec_start_feed_#t~mem585#1, ttusb_dec_start_feed_#t~ret586#1, ttusb_dec_start_feed_~dvbdmxfeed#1.base, ttusb_dec_start_feed_~dvbdmxfeed#1.offset, ttusb_dec_start_feed_~dvbdmx~1#1.base, ttusb_dec_start_feed_~dvbdmx~1#1.offset, ttusb_dec_start_feed_~tmp~23#1, ttusb_dec_start_feed_~tmp___0~8#1;havoc ttusb_dec_start_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_feed_#in~dvbdmxfeed#1.offset;assume { :end_inline_ttusb_dec_start_feed } true;assume -2147483648 <= ##fun~$Pointer$~TO~int_#t~ret887#1 && ##fun~$Pointer$~TO~int_#t~ret887#1 <= 2147483647;##fun~$Pointer$~TO~int_#t~funptrres886#1 := ##fun~$Pointer$~TO~int_#t~ret887#1; [2025-02-08 02:46:44,177 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8407-1: SUMMARY for call kfree(ttusb_dec_exit_filters_~finfo~3#1.base, ttusb_dec_exit_filters_~finfo~3#1.offset); srcloc: null [2025-02-08 02:46:44,177 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8407: call ttusb_dec_exit_filters_#t~mem782#1.base, ttusb_dec_exit_filters_#t~mem782#1.offset := read~$Pointer$#0(ttusb_dec_exit_filters_~dec#1.base, 15321 + ttusb_dec_exit_filters_~dec#1.offset, 8);ttusb_dec_exit_filters_~item~3#1.base, ttusb_dec_exit_filters_~item~3#1.offset := ttusb_dec_exit_filters_#t~mem782#1.base, ttusb_dec_exit_filters_#t~mem782#1.offset; [2025-02-08 02:46:44,177 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8275: SUMMARY for call dvb_dmxdev_release(ttusb_dec_init_dvb_~dec#1.base, 266 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,177 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8209: SUMMARY for call ttusb_dec_set_model(ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset, 0); srcloc: null [2025-02-08 02:46:44,177 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8077-2: call ttusb_dec_boot_dsp_#t~mem673#1 := read~int#0(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset, 4); [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8077-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret674#1 := __fswab32(ttusb_dec_boot_dsp_#t~mem673#1); srcloc: null [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8077: ttusb_dec_boot_dsp_~tmp___2~5#1 := ttusb_dec_boot_dsp_#t~ret674#1;havoc ttusb_dec_boot_dsp_#t~mem673#1;havoc ttusb_dec_boot_dsp_#t~ret674#1;ttusb_dec_boot_dsp_~crc32_check~0#1 := ttusb_dec_boot_dsp_~tmp___2~5#1; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-2: havoc crc16_#t~bitwise206#1;assume ((((((((if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) < 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise206#1 > 0) && (((if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) > 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) > 0) || crc16_#t~bitwise206#1 > 0)) && (((if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) < 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) >= 0) || crc16_#t~bitwise206#1 < 0)) && (((if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) >= 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise206#1 < 0)) && (((if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) < 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise206#1 <= (if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) + (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296))) && crc16_#t~bitwise206#1 >= -2147483648) && crc16_#t~bitwise206#1 <= 2147483647; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-1: [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7681-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~memcpy~res561#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_start_sec_feed_~#b0~1#1.base, 4 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset, ttusb_dec_start_sec_feed_~__len___0~5#1); srcloc: null [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624: crc16_~crc#1 := crc16_#t~bitwise206#1;havoc crc16_#t~mem205#1;havoc crc16_#t~bitwise206#1; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7681: ttusb_dec_start_sec_feed_~__ret___0~5#1.base, ttusb_dec_start_sec_feed_~__ret___0~5#1.offset := ttusb_dec_start_sec_feed_#t~memcpy~res561#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.offset;havoc ttusb_dec_start_sec_feed_#t~memcpy~res561#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.offset; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-5: assume 0 == (if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise206#1 := (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-5: assume !(0 == (if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-4: assume 0 == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise206#1 := (if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-4: assume !(0 == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-3: assume (if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise206#1 := 0; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6624-3: assume !((if crc16_#t~mem205#1 % 256 % 65536 % 4294967296 <= 2147483647 then crc16_#t~mem205#1 % 256 % 65536 % 4294967296 else crc16_#t~mem205#1 % 256 % 65536 % 4294967296 - 4294967296) == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8276: SUMMARY for call dvb_dmx_release(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7880-1: SUMMARY for call INIT_LIST_HEAD(ttusb_dec_init_tasklet_~dec#1.base, 15185 + ttusb_dec_init_tasklet_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7880: assume { :begin_inline_tasklet_init } true;tasklet_init_#in~arg0#1.base, tasklet_init_#in~arg0#1.offset, tasklet_init_#in~arg1#1.base, tasklet_init_#in~arg1#1.offset, tasklet_init_#in~arg2#1 := ttusb_dec_init_tasklet_~dec#1.base, 15201 + ttusb_dec_init_tasklet_~dec#1.offset, #funAddr~ttusb_dec_process_urb_frame_list.base, #funAddr~ttusb_dec_process_urb_frame_list.offset, ttusb_dec_init_tasklet_~dec#1.base + ttusb_dec_init_tasklet_~dec#1.offset;havoc tasklet_init_~arg0#1.base, tasklet_init_~arg0#1.offset, tasklet_init_~arg1#1.base, tasklet_init_~arg1#1.offset, tasklet_init_~arg2#1;tasklet_init_~arg0#1.base, tasklet_init_~arg0#1.offset := tasklet_init_#in~arg0#1.base, tasklet_init_#in~arg0#1.offset;tasklet_init_~arg1#1.base, tasklet_init_~arg1#1.offset := tasklet_init_#in~arg1#1.base, tasklet_init_#in~arg1#1.offset;tasklet_init_~arg2#1 := tasklet_init_#in~arg2#1; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7748-1: SUMMARY for call ttusb_dec_start_feed_#t~ret586#1 := printk(76, 0); srcloc: null [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7748: assume -2147483648 <= ttusb_dec_start_feed_#t~ret586#1 && ttusb_dec_start_feed_#t~ret586#1 <= 2147483647;havoc ttusb_dec_start_feed_#t~mem585#1;havoc ttusb_dec_start_feed_#t~ret586#1; [2025-02-08 02:46:44,178 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-3: assume (if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise207#1 := 0; [2025-02-08 02:46:44,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-3: assume !((if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,179 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-2: havoc crc16_#t~bitwise207#1;assume ((((((((if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) < 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise207#1 > 0) && (((if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) > 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) > 0) || crc16_#t~bitwise207#1 > 0)) && (((if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) < 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) >= 0) || crc16_#t~bitwise207#1 < 0)) && (((if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) >= 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise207#1 < 0)) && (((if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) < 0 || (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise207#1 <= (if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296) + (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296))) && crc16_#t~bitwise207#1 >= -2147483648) && crc16_#t~bitwise207#1 <= 2147483647; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-1: [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625: crc16_~crc#1 := crc16_#t~bitwise207#1;havoc crc16_#t~bitwise207#1;crc16_~tmp~10#1 := crc16_~crc#1 % 256; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-5: assume 0 == (if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise207#1 := (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-5: assume !(0 == (if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-4: assume 0 == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise207#1 := (if (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 <= 2147483647 then (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 else (if crc16_~crc#1 % 256 % 4294967296 <= 2147483647 then crc16_~crc#1 % 256 % 4294967296 else crc16_~crc#1 % 256 % 4294967296 - 4294967296) / 16 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6625-4: assume !(0 == (if crc16_~crc#1 % 65536 % 4294967296 <= 2147483647 then crc16_~crc#1 % 65536 % 4294967296 else crc16_~crc#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9268: havoc dvb_dmx_init_#t~nondet860#1;ttusb_dec_init_dvb_#t~ret721#1 := dvb_dmx_init_#res#1;havoc dvb_dmx_init_#t~nondet860#1, dvb_dmx_init_~arg0#1.base, dvb_dmx_init_~arg0#1.offset;havoc dvb_dmx_init_#in~arg0#1.base, dvb_dmx_init_#in~arg0#1.offset;assume { :end_inline_dvb_dmx_init } true;assume -2147483648 <= ttusb_dec_init_dvb_#t~ret721#1 && ttusb_dec_init_dvb_#t~ret721#1 <= 2147483647;ttusb_dec_init_dvb_~result~8#1 := ttusb_dec_init_dvb_#t~ret721#1;havoc ttusb_dec_init_dvb_#t~ret721#1; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8211: assume ttusb_dec_init_stb_#t~switch712#1; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8211: assume !ttusb_dec_init_stb_#t~switch712#1;ttusb_dec_init_stb_#t~switch712#1 := true; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8277-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret733#1 := dvb_unregister_adapter(ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8277: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret733#1 && ttusb_dec_init_dvb_#t~ret733#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret733#1;ttusb_dec_init_dvb_#res#1 := ttusb_dec_init_dvb_~result~8#1; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8079: assume ttusb_dec_boot_dsp_~crc32_csum~0#1 % 4294967296 != ttusb_dec_boot_dsp_~crc32_check~0#1 % 4294967296; [2025-02-08 02:46:44,180 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8079: assume !(ttusb_dec_boot_dsp_~crc32_csum~0#1 % 4294967296 != ttusb_dec_boot_dsp_~crc32_check~0#1 % 4294967296);ttusb_dec_boot_dsp_~__len___0~6#1 := 20; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7881: havoc tasklet_init_~arg0#1.base, tasklet_init_~arg0#1.offset, tasklet_init_~arg1#1.base, tasklet_init_~arg1#1.offset, tasklet_init_~arg2#1;havoc tasklet_init_#in~arg0#1.base, tasklet_init_#in~arg0#1.offset, tasklet_init_#in~arg1#1.base, tasklet_init_#in~arg1#1.offset, tasklet_init_#in~arg2#1;assume { :end_inline_tasklet_init } true;call ULTIMATE.dealloc(ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset);havoc ttusb_dec_init_tasklet_~#__key~0#1.base, ttusb_dec_init_tasklet_~#__key~0#1.offset; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7683-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~memcpy~res562#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_start_sec_feed_~#b0~1#1.base, 4 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset, ttusb_dec_start_sec_feed_~__len___0~5#1); srcloc: null [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7683: ttusb_dec_start_sec_feed_~__ret___0~5#1.base, ttusb_dec_start_sec_feed_~__ret___0~5#1.offset := ttusb_dec_start_sec_feed_#t~memcpy~res562#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.offset;havoc ttusb_dec_start_sec_feed_#t~memcpy~res562#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.offset; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7551: assume 0 != ~debug~0; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7551: assume !(0 != ~debug~0); [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8476: ttusb_dec_probe_#t~ret794#1 := ttusb_dec_init_dvb_#res#1;havoc ttusb_dec_init_dvb_#t~ret716#1, ttusb_dec_init_dvb_#t~mem717#1.base, ttusb_dec_init_dvb_#t~mem717#1.offset, ttusb_dec_init_dvb_#t~mem718#1.base, ttusb_dec_init_dvb_#t~mem718#1.offset, ttusb_dec_init_dvb_#t~ret719#1, ttusb_dec_init_dvb_#t~ret720#1, ttusb_dec_init_dvb_#t~ret721#1, ttusb_dec_init_dvb_#t~ret722#1, ttusb_dec_init_dvb_#t~ret723#1, ttusb_dec_init_dvb_#t~ret724#1, ttusb_dec_init_dvb_#t~ret725#1, ttusb_dec_init_dvb_#t~ret726#1, ttusb_dec_init_dvb_#t~mem730#1.base, ttusb_dec_init_dvb_#t~mem730#1.offset, ttusb_dec_init_dvb_#t~ret731#1, ttusb_dec_init_dvb_#t~ret732#1, ttusb_dec_init_dvb_#t~ret733#1, ttusb_dec_init_dvb_#t~mem737#1.base, ttusb_dec_init_dvb_#t~mem737#1.offset, ttusb_dec_init_dvb_#t~ret738#1, ttusb_dec_init_dvb_#t~ret739#1, ttusb_dec_init_dvb_#t~mem743#1.base, ttusb_dec_init_dvb_#t~mem743#1.offset, ttusb_dec_init_dvb_#t~ret744#1, ttusb_dec_init_dvb_#t~ret745#1, ttusb_dec_init_dvb_#t~ret746#1, ttusb_dec_init_dvb_~dec#1.base, ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~result~8#1;havoc ttusb_dec_init_dvb_#in~dec#1.base, ttusb_dec_init_dvb_#in~dec#1.offset;assume { :end_inline_ttusb_dec_init_dvb } true;assume -2147483648 <= ttusb_dec_probe_#t~ret794#1 && ttusb_dec_probe_#t~ret794#1 <= 2147483647;havoc ttusb_dec_probe_#t~ret794#1;call write~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, ttusb_dec_probe_~dec~10#1.offset, ttusb_dec_probe_~dec~10#1.base, 74 + ttusb_dec_probe_~dec~10#1.offset, 8);call ttusb_dec_probe_#t~mem795#1 := read~int#3(ttusb_dec_probe_~id#1.base, 4 + ttusb_dec_probe_~id#1.offset, 2);ttusb_dec_probe_#t~switch796#1 := 4102 == (if ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 else ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7617: call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset);havoc ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset);havoc ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset);havoc ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset);havoc ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset);havoc ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset;ttusb_dec_start_feed_#t~ret584#1 := ttusb_dec_start_sec_feed_#res#1;havoc ttusb_dec_start_sec_feed_#t~mem554#1.base, ttusb_dec_start_sec_feed_#t~mem554#1.offset, ttusb_dec_start_sec_feed_#t~mem555#1.base, ttusb_dec_start_sec_feed_#t~mem555#1.offset, ttusb_dec_start_sec_feed_#t~ret556#1, ttusb_dec_start_sec_feed_#t~mem557#1, ttusb_dec_start_sec_feed_#t~ret558#1, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res559#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res560#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res561#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res562#1.offset, ttusb_dec_start_sec_feed_#t~mem563#1.base, ttusb_dec_start_sec_feed_#t~mem563#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.offset, ttusb_dec_start_sec_feed_#t~mem565#1.base, ttusb_dec_start_sec_feed_#t~mem565#1.offset, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.offset, ttusb_dec_start_sec_feed_#t~ret567#1, ttusb_dec_start_sec_feed_#t~mem568#1, ttusb_dec_start_sec_feed_#t~ret569#1.base, ttusb_dec_start_sec_feed_#t~ret569#1.offset, ttusb_dec_start_sec_feed_#t~mem570#1, ttusb_dec_start_sec_feed_#t~mem571#1.base, ttusb_dec_start_sec_feed_#t~mem571#1.offset, ttusb_dec_start_sec_feed_#t~ret572#1.base, ttusb_dec_start_sec_feed_#t~ret572#1.offset, ttusb_dec_start_sec_feed_#t~ret573#1, ttusb_dec_start_sec_feed_#t~mem574#1, ttusb_dec_start_sec_feed_#t~ret575#1, ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, ttusb_dec_start_sec_feed_~dec~6#1.base, ttusb_dec_start_sec_feed_~dec~6#1.offset, ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset, ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset, ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset, ttusb_dec_start_sec_feed_~result~5#1, ttusb_dec_start_sec_feed_~finfo~1#1.base, ttusb_dec_start_sec_feed_~finfo~1#1.offset, ttusb_dec_start_sec_feed_~flags~3#1, ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset, ttusb_dec_start_sec_feed_~tmp~22#1, ttusb_dec_start_sec_feed_~__len~6#1, ttusb_dec_start_sec_feed_~__ret~7#1.base, ttusb_dec_start_sec_feed_~__ret~7#1.offset, ttusb_dec_start_sec_feed_~__len___0~5#1, ttusb_dec_start_sec_feed_~__ret___0~5#1.base, ttusb_dec_start_sec_feed_~__ret___0~5#1.offset, ttusb_dec_start_sec_feed_~__len___1~3#1, ttusb_dec_start_sec_feed_~__ret___1~3#1.base, ttusb_dec_start_sec_feed_~__ret___1~3#1.offset, ttusb_dec_start_sec_feed_~tmp___0~7#1.base, ttusb_dec_start_sec_feed_~tmp___0~7#1.offset, ttusb_dec_start_sec_feed_~tmp___1~6#1.base, ttusb_dec_start_sec_feed_~tmp___1~6#1.offset, ttusb_dec_start_sec_feed_~tmp___2~3#1;havoc ttusb_dec_start_sec_feed_#in~dvbdmxfeed#1.base, ttusb_dec_start_sec_feed_#in~dvbdmxfeed#1.offset;assume { :end_inline_ttusb_dec_start_sec_feed } true;assume -2147483648 <= ttusb_dec_start_feed_#t~ret584#1 && ttusb_dec_start_feed_#t~ret584#1 <= 2147483647;ttusb_dec_start_feed_~tmp___0~8#1 := ttusb_dec_start_feed_#t~ret584#1;ttusb_dec_start_feed_#res#1 := ttusb_dec_start_feed_~tmp___0~8#1; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8410: assume (ttusb_dec_exit_filters_~item~3#1.base + ttusb_dec_exit_filters_~item~3#1.offset) % 18446744073709551616 != (ttusb_dec_exit_filters_~dec#1.base + (15321 + ttusb_dec_exit_filters_~dec#1.offset)) % 18446744073709551616; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8410: assume !((ttusb_dec_exit_filters_~item~3#1.base + ttusb_dec_exit_filters_~item~3#1.offset) % 18446744073709551616 != (ttusb_dec_exit_filters_~dec#1.base + (15321 + ttusb_dec_exit_filters_~dec#1.offset)) % 18446744073709551616); [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6362: assume 0 == (dma_alloc_attrs_#t~mem71#1.base + dma_alloc_attrs_#t~mem71#1.offset) % 18446744073709551616;havoc dma_alloc_attrs_#t~mem71#1.base, dma_alloc_attrs_#t~mem71#1.offset;dma_alloc_attrs_#res#1.base, dma_alloc_attrs_#res#1.offset := 0, 0; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6362: assume !(0 == (dma_alloc_attrs_#t~mem71#1.base + dma_alloc_attrs_#t~mem71#1.offset) % 18446744073709551616);havoc dma_alloc_attrs_#t~mem71#1.base, dma_alloc_attrs_#t~mem71#1.offset;assume { :begin_inline_dma_alloc_coherent_gfp_flags } true;dma_alloc_coherent_gfp_flags_#in~dev#1.base, dma_alloc_coherent_gfp_flags_#in~dev#1.offset, dma_alloc_coherent_gfp_flags_#in~gfp#1 := dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset, dma_alloc_attrs_~gfp#1;havoc dma_alloc_coherent_gfp_flags_#res#1;havoc dma_alloc_coherent_gfp_flags_#t~ret67#1, dma_alloc_coherent_gfp_flags_#t~bitwise68#1, dma_alloc_coherent_gfp_flags_~dev#1.base, dma_alloc_coherent_gfp_flags_~dev#1.offset, dma_alloc_coherent_gfp_flags_~gfp#1, dma_alloc_coherent_gfp_flags_~dma_mask~1#1, dma_alloc_coherent_gfp_flags_~tmp~4#1;dma_alloc_coherent_gfp_flags_~dev#1.base, dma_alloc_coherent_gfp_flags_~dev#1.offset := dma_alloc_coherent_gfp_flags_#in~dev#1.base, dma_alloc_coherent_gfp_flags_#in~dev#1.offset;dma_alloc_coherent_gfp_flags_~gfp#1 := dma_alloc_coherent_gfp_flags_#in~gfp#1;havoc dma_alloc_coherent_gfp_flags_~dma_mask~1#1;havoc dma_alloc_coherent_gfp_flags_~tmp~4#1;assume { :begin_inline_dma_alloc_coherent_mask } true;dma_alloc_coherent_mask_#in~dev#1.base, dma_alloc_coherent_mask_#in~dev#1.offset, dma_alloc_coherent_mask_#in~gfp#1 := dma_alloc_coherent_gfp_flags_~dev#1.base, dma_alloc_coherent_gfp_flags_~dev#1.offset, dma_alloc_coherent_gfp_flags_~gfp#1;havoc dma_alloc_coherent_mask_#res#1;havoc dma_alloc_coherent_mask_#t~mem66#1, dma_alloc_coherent_mask_~dev#1.base, dma_alloc_coherent_mask_~dev#1.offset, dma_alloc_coherent_mask_~gfp#1, dma_alloc_coherent_mask_~dma_mask~0#1;dma_alloc_coherent_mask_~dev#1.base, dma_alloc_coherent_mask_~dev#1.offset := dma_alloc_coherent_mask_#in~dev#1.base, dma_alloc_coherent_mask_#in~dev#1.offset;dma_alloc_coherent_mask_~gfp#1 := dma_alloc_coherent_mask_#in~gfp#1;havoc dma_alloc_coherent_mask_~dma_mask~0#1;dma_alloc_coherent_mask_~dma_mask~0#1 := 0;call dma_alloc_coherent_mask_#t~mem66#1 := read~int#15(dma_alloc_coherent_mask_~dev#1.base, 864 + dma_alloc_coherent_mask_~dev#1.offset, 8);dma_alloc_coherent_mask_~dma_mask~0#1 := dma_alloc_coherent_mask_#t~mem66#1;havoc dma_alloc_coherent_mask_#t~mem66#1; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8146: ttusb_dec_boot_dsp_~__ret___3~0#1.base, ttusb_dec_boot_dsp_~__ret___3~0#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res691#1.base, ttusb_dec_boot_dsp_#t~memcpy~res691#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res691#1.base, ttusb_dec_boot_dsp_#t~memcpy~res691#1.offset;ttusb_dec_boot_dsp_~j~1#1 := 64 + ttusb_dec_boot_dsp_~j~1#1; [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8212: SUMMARY for call ttusb_dec_set_model(ttusb_dec_init_stb_~dec#1.base, ttusb_dec_init_stb_~dec#1.offset, 1); srcloc: null [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8080-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret675#1 := printk(102, 0); srcloc: null [2025-02-08 02:46:44,181 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8080: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret675#1 && ttusb_dec_boot_dsp_#t~ret675#1 <= 2147483647;havoc ttusb_dec_boot_dsp_#t~ret675#1;call ttusb_dec_boot_dsp_#t~mem676#1.base, ttusb_dec_boot_dsp_#t~mem676#1.offset := read~$Pointer$#12(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset, 8); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8146-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res691#1.base, ttusb_dec_boot_dsp_#t~memcpy~res691#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset + (if (4 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then (4 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 else (4 + ttusb_dec_boot_dsp_~j~1#1) % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), ttusb_dec_boot_dsp_~firmware~0#1.base, ttusb_dec_boot_dsp_~firmware~0#1.offset + (if ttusb_dec_boot_dsp_~i~9#1 % 18446744073709551616 % 18446744073709551616 <= 9223372036854775807 then ttusb_dec_boot_dsp_~i~9#1 % 18446744073709551616 % 18446744073709551616 else ttusb_dec_boot_dsp_~i~9#1 % 18446744073709551616 % 18446744073709551616 - 18446744073709551616), ttusb_dec_boot_dsp_~__len___3~0#1); srcloc: null [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6759: assume 0 != ~debug~0; [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6759: assume !(0 != ~debug~0); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-1: [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627: crc16_~crc#1 := crc16_#t~bitwise209#1;havoc crc16_#t~bitwise208#1;havoc crc16_#t~bitwise209#1;crc16_~tmp___1~2#1 := crc16_~len#1;crc16_~len#1 := crc16_~len#1 - 1; [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-5: assume 0 == (if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536);crc16_#t~bitwise209#1 := (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-5: assume !(0 == (if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536)); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7552-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret534#1 := printk(64, 0); srcloc: null [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-4: assume 0 == (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536);crc16_#t~bitwise209#1 := (if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-4: assume !(0 == (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536)); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7552: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret534#1 && ttusb_dec_start_ts_feed_#t~ret534#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret534#1; [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-3: assume (if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) == (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536);crc16_#t~bitwise209#1 := 0; [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-3: assume !((if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) == (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536)); [2025-02-08 02:46:44,182 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-2: havoc crc16_#t~bitwise209#1;assume ((((((((if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) < 0 || (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536) < 0) || crc16_#t~bitwise209#1 > 0) && (((if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) > 0 || (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536) > 0) || crc16_#t~bitwise209#1 > 0)) && (((if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) < 0 || (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536) >= 0) || crc16_#t~bitwise209#1 < 0)) && (((if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) >= 0 || (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536) < 0) || crc16_#t~bitwise209#1 < 0)) && (((if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) < 0 || (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536) < 0) || crc16_#t~bitwise209#1 <= (if 16 * crc16_#t~bitwise208#1 % 65536 <= 32767 then 16 * crc16_#t~bitwise208#1 % 65536 else 16 * crc16_#t~bitwise208#1 % 65536 - 65536) + (if crc16_~crc#1 % 65536 % 65536 <= 32767 then crc16_~crc#1 % 65536 % 65536 else crc16_~crc#1 % 65536 % 65536 - 65536))) && crc16_#t~bitwise209#1 >= -2147483648) && crc16_#t~bitwise209#1 <= 2147483647; [2025-02-08 02:46:44,183 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8609: assume main_#t~switch825#1; [2025-02-08 02:46:44,183 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8609: assume !main_#t~switch825#1;havoc main_#t~switch825#1;havoc main_#t~switch825#1; [2025-02-08 02:46:44,183 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-9: assume 0 == 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise208#1 := (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,183 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-9: assume !(0 == 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,183 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-8: assume (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) == 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise208#1 := 0; [2025-02-08 02:46:44,183 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-8: assume !((if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) == 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-7: havoc crc16_#t~bitwise208#1;assume ((((((((if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) < 0 || 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise208#1 > 0) && (((if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) > 0 || 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) > 0) || crc16_#t~bitwise208#1 > 0)) && (((if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) < 0 || 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) >= 0) || crc16_#t~bitwise208#1 < 0)) && (((if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) >= 0 || 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise208#1 < 0)) && (((if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) < 0 || 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) < 0) || crc16_#t~bitwise208#1 <= (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296) + 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296))) && crc16_#t~bitwise208#1 >= -2147483648) && crc16_#t~bitwise208#1 <= 2147483647; [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-6: [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-10: assume 0 == (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296);crc16_#t~bitwise208#1 := 2 * (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6627-10: assume !(0 == (if crc16_~tmp~10#1 % 65536 % 4294967296 <= 2147483647 then crc16_~tmp~10#1 % 65536 % 4294967296 else crc16_~tmp~10#1 % 65536 % 4294967296 - 4294967296)); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7751-1: ttusb_dec_start_feed_#res#1 := -22; [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6760-1: SUMMARY for call ttusb_dec_get_stb_state_#t~ret239#1 := printk(28, 0); srcloc: null [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6760: assume -2147483648 <= ttusb_dec_get_stb_state_#t~ret239#1 && ttusb_dec_get_stb_state_#t~ret239#1 <= 2147483647;havoc ttusb_dec_get_stb_state_#t~ret239#1; [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7685: ttusb_dec_start_sec_feed_~__len___1~3#1 := 1; [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8214: assume ttusb_dec_init_stb_#t~switch712#1;call ttusb_dec_init_stb_#t~mem713#1 := read~int#17(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset, 4); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8214: assume !ttusb_dec_init_stb_#t~switch712#1;havoc ttusb_dec_init_stb_#t~mem711#1;havoc ttusb_dec_init_stb_#t~switch712#1;havoc ttusb_dec_init_stb_#t~mem713#1;havoc ttusb_dec_init_stb_#t~ret714#1;havoc ttusb_dec_init_stb_#t~mem711#1;havoc ttusb_dec_init_stb_#t~switch712#1;havoc ttusb_dec_init_stb_#t~mem713#1;havoc ttusb_dec_init_stb_#t~ret714#1;call ttusb_dec_init_stb_#t~mem715#1 := read~int#2(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset, 4); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8082: havoc ttusb_dec_boot_dsp_#t~mem676#1.base, ttusb_dec_boot_dsp_#t~mem676#1.offset;ttusb_dec_boot_dsp_#res#1 := -1;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset);havoc ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset);havoc ttusb_dec_boot_dsp_~#b0~4#1.base, ttusb_dec_boot_dsp_~#b0~4#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset);havoc ttusb_dec_boot_dsp_~#b1~0#1.base, ttusb_dec_boot_dsp_~#b1~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset);havoc ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.base, ttusb_dec_boot_dsp_~#firmware_csum_ns~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset);havoc ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.base, ttusb_dec_boot_dsp_~#firmware_size_nl~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset);havoc ttusb_dec_boot_dsp_~#tmp~28#1.base, ttusb_dec_boot_dsp_~#tmp~28#1.offset;call ULTIMATE.dealloc(ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset);havoc ttusb_dec_boot_dsp_~#fw_entry~0#1.base, ttusb_dec_boot_dsp_~#fw_entry~0#1.offset; [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7950: call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset);havoc ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset);havoc ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset;ttusb_dec_probe_#t~ret792#1 := ttusb_dec_init_usb_#res#1;havoc ttusb_dec_init_usb_#t~ret627#1, ttusb_dec_init_usb_#t~mem628#1.base, ttusb_dec_init_usb_#t~mem628#1.offset, ttusb_dec_init_usb_#t~ret629#1, ttusb_dec_init_usb_#t~mem630#1.base, ttusb_dec_init_usb_#t~mem630#1.offset, ttusb_dec_init_usb_#t~ret631#1, ttusb_dec_init_usb_#t~bitwise632#1, ttusb_dec_init_usb_#t~mem633#1.base, ttusb_dec_init_usb_#t~mem633#1.offset, ttusb_dec_init_usb_#t~ret634#1, ttusb_dec_init_usb_#t~bitwise635#1, ttusb_dec_init_usb_#t~mem636#1.base, ttusb_dec_init_usb_#t~mem636#1.offset, ttusb_dec_init_usb_#t~ret637#1, ttusb_dec_init_usb_#t~mem638#1.base, ttusb_dec_init_usb_#t~mem638#1.offset, ttusb_dec_init_usb_#t~ret639#1, ttusb_dec_init_usb_#t~bitwise640#1, ttusb_dec_init_usb_#t~ret641#1.base, ttusb_dec_init_usb_#t~ret641#1.offset, ttusb_dec_init_usb_#t~mem642#1.base, ttusb_dec_init_usb_#t~mem642#1.offset, ttusb_dec_init_usb_#t~mem643#1.base, ttusb_dec_init_usb_#t~mem643#1.offset, ttusb_dec_init_usb_#t~ret644#1.base, ttusb_dec_init_usb_#t~ret644#1.offset, ttusb_dec_init_usb_#t~mem645#1.base, ttusb_dec_init_usb_#t~mem645#1.offset, ttusb_dec_init_usb_#t~mem646#1.base, ttusb_dec_init_usb_#t~mem646#1.offset, ttusb_dec_init_usb_#t~mem647#1.base, ttusb_dec_init_usb_#t~mem647#1.offset, ttusb_dec_init_usb_#t~mem648#1.base, ttusb_dec_init_usb_#t~mem648#1.offset, ttusb_dec_init_usb_#t~mem649#1, ttusb_dec_init_usb_#t~mem650#1.base, ttusb_dec_init_usb_#t~mem650#1.offset, ttusb_dec_init_usb_#t~mem651#1.base, ttusb_dec_init_usb_#t~mem651#1.offset, ttusb_dec_init_usb_#t~mem652#1, ttusb_dec_init_usb_#t~mem653#1.base, ttusb_dec_init_usb_#t~mem653#1.offset, ttusb_dec_init_usb_#t~mem654#1.base, ttusb_dec_init_usb_#t~mem654#1.offset, ttusb_dec_init_usb_#t~mem655#1, ttusb_dec_init_usb_#t~bitwise656#1, ttusb_dec_init_usb_#t~ret657#1, ttusb_dec_init_usb_~dec#1.base, ttusb_dec_init_usb_~dec#1.offset, ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset, ttusb_dec_init_usb_~#__key___0~0#1.base, ttusb_dec_init_usb_~#__key___0~0#1.offset, ttusb_dec_init_usb_~tmp~27#1, ttusb_dec_init_usb_~tmp___0~10#1, ttusb_dec_init_usb_~tmp___1~7#1, ttusb_dec_init_usb_~tmp___2~4#1, ttusb_dec_init_usb_~tmp___3~1#1;havoc ttusb_dec_init_usb_#in~dec#1.base, ttusb_dec_init_usb_#in~dec#1.offset;assume { :end_inline_ttusb_dec_init_usb } true;assume -2147483648 <= ttusb_dec_probe_#t~ret792#1 && ttusb_dec_probe_#t~ret792#1 <= 2147483647;ttusb_dec_probe_~tmp___0~12#1 := ttusb_dec_probe_#t~ret792#1;havoc ttusb_dec_probe_#t~ret792#1; [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8082-1: SUMMARY for call release_firmware(ttusb_dec_boot_dsp_#t~mem676#1.base, ttusb_dec_boot_dsp_#t~mem676#1.offset); srcloc: null [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7686: assume ttusb_dec_start_sec_feed_~__len___1~3#1 % 18446744073709551616 > 63;call ttusb_dec_start_sec_feed_#t~mem563#1.base, ttusb_dec_start_sec_feed_#t~mem563#1.offset := read~$Pointer$#0(ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, 4428 + ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, 8); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7686: assume !(ttusb_dec_start_sec_feed_~__len___1~3#1 % 18446744073709551616 > 63);call ttusb_dec_start_sec_feed_#t~mem565#1.base, ttusb_dec_start_sec_feed_#t~mem565#1.offset := read~$Pointer$#0(ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, 4428 + ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, 8); [2025-02-08 02:46:44,184 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8479: assume ttusb_dec_probe_#t~switch796#1;assume { :begin_inline_ttusbdecfe_dvbs_attach } true;ttusbdecfe_dvbs_attach_#in~arg0#1.base, ttusbdecfe_dvbs_attach_#in~arg0#1.offset := ~#fe_config~0.base, ~#fe_config~0.offset;havoc ttusbdecfe_dvbs_attach_#res#1.base, ttusbdecfe_dvbs_attach_#res#1.offset;havoc ttusbdecfe_dvbs_attach_#t~ret874#1.base, ttusbdecfe_dvbs_attach_#t~ret874#1.offset, ttusbdecfe_dvbs_attach_~arg0#1.base, ttusbdecfe_dvbs_attach_~arg0#1.offset;ttusbdecfe_dvbs_attach_~arg0#1.base, ttusbdecfe_dvbs_attach_~arg0#1.offset := ttusbdecfe_dvbs_attach_#in~arg0#1.base, ttusbdecfe_dvbs_attach_#in~arg0#1.offset; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8479: assume !ttusb_dec_probe_#t~switch796#1;ttusb_dec_probe_#t~switch796#1 := ttusb_dec_probe_#t~switch796#1 || 4104 == (if ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 else ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8215-1: SUMMARY for call ttusb_dec_init_stb_#t~ret714#1 := printk(109, 0); srcloc: null [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8215: assume -2147483648 <= ttusb_dec_init_stb_#t~ret714#1 && ttusb_dec_init_stb_#t~ret714#1 <= 2147483647;ttusb_dec_init_stb_#res#1 := -1;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset);havoc ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset);havoc ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset);havoc ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8281-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret738#1 := ##fun~$Pointer$~X~$Pointer$~TO~int(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 1651 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_#t~mem737#1.base, ttusb_dec_init_dvb_#t~mem737#1.offset); srcloc: null [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8281: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret738#1 && ttusb_dec_init_dvb_#t~ret738#1 <= 2147483647;ttusb_dec_init_dvb_~result~8#1 := ttusb_dec_init_dvb_#t~ret738#1;havoc ttusb_dec_init_dvb_#t~mem737#1.base, ttusb_dec_init_dvb_#t~mem737#1.offset;havoc ttusb_dec_init_dvb_#t~ret738#1; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8149: assume ttusb_dec_boot_dsp_~j~1#1 > 4095;call ttusb_dec_boot_dsp_#t~mem692#1.base, ttusb_dec_boot_dsp_#t~mem692#1.offset := read~$Pointer$#0(ttusb_dec_boot_dsp_~dec#1.base, 2012 + ttusb_dec_boot_dsp_~dec#1.offset, 8);call ttusb_dec_boot_dsp_#t~mem693#1 := read~int#0(ttusb_dec_boot_dsp_~dec#1.base, 2021 + ttusb_dec_boot_dsp_~dec#1.offset, 4); [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8149: assume !(ttusb_dec_boot_dsp_~j~1#1 > 4095); [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7687-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~memcpy~res564#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_start_sec_feed_~#b0~1#1.base, 5 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_#t~mem563#1.base, ttusb_dec_start_sec_feed_#t~mem563#1.offset, ttusb_dec_start_sec_feed_~__len___1~3#1); srcloc: null [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7687: ttusb_dec_start_sec_feed_~__ret___1~3#1.base, ttusb_dec_start_sec_feed_~__ret___1~3#1.offset := ttusb_dec_start_sec_feed_#t~memcpy~res564#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.offset;havoc ttusb_dec_start_sec_feed_#t~mem563#1.base, ttusb_dec_start_sec_feed_#t~mem563#1.offset;havoc ttusb_dec_start_sec_feed_#t~memcpy~res564#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res564#1.offset; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7555-1: call ttusb_dec_start_ts_feed_#t~mem535#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4440 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 4);ttusb_dec_start_ts_feed_#t~switch536#1 := 1 == ttusb_dec_start_ts_feed_#t~mem535#1; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8282: assume ttusb_dec_init_dvb_~result~8#1 < 0; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8282: assume !(ttusb_dec_init_dvb_~result~8#1 < 0);assume { :begin_inline_dvb_net_init } true;dvb_net_init_#in~arg0#1.base, dvb_net_init_#in~arg0#1.offset, dvb_net_init_#in~arg1#1.base, dvb_net_init_#in~arg1#1.offset, dvb_net_init_#in~arg2#1.base, dvb_net_init_#in~arg2#1.offset := ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 1671 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset;havoc dvb_net_init_#res#1;havoc dvb_net_init_#t~nondet863#1, dvb_net_init_~arg0#1.base, dvb_net_init_~arg0#1.offset, dvb_net_init_~arg1#1.base, dvb_net_init_~arg1#1.offset, dvb_net_init_~arg2#1.base, dvb_net_init_~arg2#1.offset;dvb_net_init_~arg0#1.base, dvb_net_init_~arg0#1.offset := dvb_net_init_#in~arg0#1.base, dvb_net_init_#in~arg0#1.offset;dvb_net_init_~arg1#1.base, dvb_net_init_~arg1#1.offset := dvb_net_init_#in~arg1#1.base, dvb_net_init_#in~arg1#1.offset;dvb_net_init_~arg2#1.base, dvb_net_init_~arg2#1.offset := dvb_net_init_#in~arg2#1.base, dvb_net_init_#in~arg2#1.offset;havoc dvb_net_init_#t~nondet863#1;assume -2147483648 <= dvb_net_init_#t~nondet863#1 && dvb_net_init_#t~nondet863#1 <= 2147483647;dvb_net_init_#res#1 := dvb_net_init_#t~nondet863#1;havoc dvb_net_init_#t~nondet863#1; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8150: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret694#1 && ttusb_dec_boot_dsp_#t~ret694#1 <= 2147483647;ttusb_dec_boot_dsp_~result~6#1 := ttusb_dec_boot_dsp_#t~ret694#1;havoc ttusb_dec_boot_dsp_#t~mem692#1.base, ttusb_dec_boot_dsp_#t~mem692#1.offset;havoc ttusb_dec_boot_dsp_#t~mem693#1;havoc ttusb_dec_boot_dsp_#t~ret694#1;ttusb_dec_boot_dsp_~j~1#1 := 0; [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8150-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret694#1 := usb_bulk_msg(ttusb_dec_boot_dsp_#t~mem692#1.base, ttusb_dec_boot_dsp_#t~mem692#1.offset, ttusb_dec_boot_dsp_#t~mem693#1, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset, 4096, ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset, 100); srcloc: null [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6763-1: SUMMARY for call ttusb_dec_get_stb_state_#t~ret240#1 := ttusb_dec_send_command(ttusb_dec_get_stb_state_~dec#1.base, ttusb_dec_get_stb_state_~dec#1.offset, 8, 0, 0, 0, ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset); srcloc: null [2025-02-08 02:46:44,185 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6763: assume -2147483648 <= ttusb_dec_get_stb_state_#t~ret240#1 && ttusb_dec_get_stb_state_#t~ret240#1 <= 2147483647;ttusb_dec_get_stb_state_~result~1#1 := ttusb_dec_get_stb_state_#t~ret240#1;havoc ttusb_dec_get_stb_state_#t~ret240#1; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6631: assume 0 != crc16_~tmp___1~2#1 % 18446744073709551616; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6631: assume !(0 != crc16_~tmp___1~2#1 % 18446744073709551616);crc16_#res#1 := crc16_~crc#1; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7556-1: assume ttusb_dec_start_ts_feed_#t~switch536#1; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7556-1: assume !ttusb_dec_start_ts_feed_#t~switch536#1;ttusb_dec_start_ts_feed_#t~switch536#1 := ttusb_dec_start_ts_feed_#t~switch536#1 || 0 == ttusb_dec_start_ts_feed_#t~mem535#1; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7556: assume 0 != ~debug~0; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7556: assume !(0 != ~debug~0); [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8283-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret739#1 := printk(121, 0); srcloc: null [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8283: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret739#1 && ttusb_dec_init_dvb_#t~ret739#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret739#1;call ttusb_dec_init_dvb_#t~mem743#1.base, ttusb_dec_init_dvb_#t~mem743#1.offset := read~$Pointer$#0(ttusb_dec_init_dvb_~dec#1.base, 811 + ttusb_dec_init_dvb_~dec#1.offset, 8); [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6764: assume 0 != ttusb_dec_get_stb_state_~result~1#1;ttusb_dec_get_stb_state_#res#1 := ttusb_dec_get_stb_state_~result~1#1;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset);havoc ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset);havoc ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset);havoc ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6764: assume !(0 != ttusb_dec_get_stb_state_~result~1#1);call ttusb_dec_get_stb_state_#t~mem241#1 := read~int#7(ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset, 4); [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8482: assume ttusb_dec_probe_#t~switch796#1; [2025-02-08 02:46:44,186 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8482: assume !ttusb_dec_probe_#t~switch796#1; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L9275: havoc dvb_dmxdev_init_#t~nondet861#1;ttusb_dec_init_dvb_#t~ret724#1 := dvb_dmxdev_init_#res#1;havoc dvb_dmxdev_init_#t~nondet861#1, dvb_dmxdev_init_~arg0#1.base, dvb_dmxdev_init_~arg0#1.offset, dvb_dmxdev_init_~arg1#1.base, dvb_dmxdev_init_~arg1#1.offset;havoc dvb_dmxdev_init_#in~arg0#1.base, dvb_dmxdev_init_#in~arg0#1.offset, dvb_dmxdev_init_#in~arg1#1.base, dvb_dmxdev_init_#in~arg1#1.offset;assume { :end_inline_dvb_dmxdev_init } true;assume -2147483648 <= ttusb_dec_init_dvb_#t~ret724#1 && ttusb_dec_init_dvb_#t~ret724#1 <= 2147483647;ttusb_dec_init_dvb_~result~8#1 := ttusb_dec_init_dvb_#t~ret724#1;havoc ttusb_dec_init_dvb_#t~ret724#1; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6368: dma_alloc_attrs_#t~ret72#1 := dma_alloc_coherent_gfp_flags_#res#1;havoc dma_alloc_coherent_gfp_flags_#t~ret67#1, dma_alloc_coherent_gfp_flags_#t~bitwise68#1, dma_alloc_coherent_gfp_flags_~dev#1.base, dma_alloc_coherent_gfp_flags_~dev#1.offset, dma_alloc_coherent_gfp_flags_~gfp#1, dma_alloc_coherent_gfp_flags_~dma_mask~1#1, dma_alloc_coherent_gfp_flags_~tmp~4#1;havoc dma_alloc_coherent_gfp_flags_#in~dev#1.base, dma_alloc_coherent_gfp_flags_#in~dev#1.offset, dma_alloc_coherent_gfp_flags_#in~gfp#1;assume { :end_inline_dma_alloc_coherent_gfp_flags } true;dma_alloc_attrs_~tmp___1~0#1 := dma_alloc_attrs_#t~ret72#1;havoc dma_alloc_attrs_#t~ret72#1;call dma_alloc_attrs_#t~mem79#1.base, dma_alloc_attrs_#t~mem79#1.offset := read~$Pointer$#10(dma_alloc_attrs_~ops~0#1.base, dma_alloc_attrs_~ops~0#1.offset, 8);assume { :begin_inline_##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$ } true;##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~74#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~74#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~75#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~76#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~76#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~77#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~78#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~78#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~#fp#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~#fp#1.offset := dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset, dma_alloc_attrs_~size#1, dma_alloc_attrs_~dma_handle#1.base, dma_alloc_attrs_~dma_handle#1.offset, dma_alloc_attrs_~tmp___1~0#1, dma_alloc_attrs_~attrs#1.base, dma_alloc_attrs_~attrs#1.offset, dma_alloc_attrs_#t~mem79#1.base, dma_alloc_attrs_#t~mem79#1.offset;havoc ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#res#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#res#1.offset;havoc ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~74#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~74#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~75#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~76#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~76#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~77#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~78#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~78#1.offset;##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~74#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~74#1.offset := ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~74#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~74#1.offset;##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~75#1 := ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~75#1;##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~76#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~76#1.offset := ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~76#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~76#1.offset;##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~77#1 := ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~77#1;##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~78#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~78#1.offset := ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~78#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~78#1.offset;dma_alloc_attrs_#t~ret80#1.base, dma_alloc_attrs_#t~ret80#1.offset := ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#res#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#res#1.offset;havoc ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~74#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~74#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~75#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~76#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~76#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~77#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~78#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#~78#1.offset;havoc ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~74#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~74#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~75#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~76#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~76#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~77#1, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~78#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~78#1.offset, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~#fp#1.base, ##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$_#in~#fp#1.offset;assume { :end_inline_##fun~$Pointer$~X~int~X~$Pointer$~X~~gfp_t~0~X~$Pointer$~TO~$Pointer$ } true;dma_alloc_attrs_~memory~0#1.base, dma_alloc_attrs_~memory~0#1.offset := dma_alloc_attrs_#t~ret80#1.base, dma_alloc_attrs_#t~ret80#1.offset;havoc dma_alloc_attrs_#t~mem79#1.base, dma_alloc_attrs_#t~mem79#1.offset;havoc dma_alloc_attrs_#t~ret80#1.base, dma_alloc_attrs_#t~ret80#1.offset;call dma_alloc_attrs_#t~mem81#1 := read~int#0(dma_alloc_attrs_~dma_handle#1.base, dma_alloc_attrs_~dma_handle#1.offset, 8);assume { :begin_inline_debug_dma_alloc_coherent } true;debug_dma_alloc_coherent_#in~arg0#1.base, debug_dma_alloc_coherent_#in~arg0#1.offset, debug_dma_alloc_coherent_#in~arg1#1, debug_dma_alloc_coherent_#in~arg2#1, debug_dma_alloc_coherent_#in~arg3#1.base, debug_dma_alloc_coherent_#in~arg3#1.offset := dma_alloc_attrs_~dev#1.base, dma_alloc_attrs_~dev#1.offset, dma_alloc_attrs_~size#1, dma_alloc_attrs_#t~mem81#1, dma_alloc_attrs_~memory~0#1.base, dma_alloc_attrs_~memory~0#1.offset;havoc debug_dma_alloc_coherent_~arg0#1.base, debug_dma_alloc_coherent_~arg0#1.offset, debug_dma_alloc_coherent_~arg1#1, debug_dma_alloc_coherent_~arg2#1, debug_dma_alloc_coherent_~arg3#1.base, debug_dma_alloc_coherent_~arg3#1.offset;debug_dma_alloc_coherent_~arg0#1.base, debug_dma_alloc_coherent_~arg0#1.offset := debug_dma_alloc_coherent_#in~arg0#1.base, debug_dma_alloc_coherent_#in~arg0#1.offset;debug_dma_alloc_coherent_~arg1#1 := debug_dma_alloc_coherent_#in~arg1#1;debug_dma_alloc_coherent_~arg2#1 := debug_dma_alloc_coherent_#in~arg2#1;debug_dma_alloc_coherent_~arg3#1.base, debug_dma_alloc_coherent_~arg3#1.offset := debug_dma_alloc_coherent_#in~arg3#1.base, debug_dma_alloc_coherent_#in~arg3#1.offset; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7425: call ULTIMATE.dealloc(ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset);havoc ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset;ttusb_dec_probe_#t~ret816#1 := ttusb_dec_set_interface_#res#1;havoc ttusb_dec_set_interface_#t~mem505#1, ttusb_dec_set_interface_#t~switch506#1, ttusb_dec_set_interface_#t~mem507#1.base, ttusb_dec_set_interface_#t~mem507#1.offset, ttusb_dec_set_interface_#t~ret508#1, ttusb_dec_set_interface_#t~ret509#1, ttusb_dec_set_interface_#t~mem510#1.base, ttusb_dec_set_interface_#t~mem510#1.offset, ttusb_dec_set_interface_#t~ret511#1, ttusb_dec_set_interface_#t~mem512#1.base, ttusb_dec_set_interface_#t~mem512#1.offset, ttusb_dec_set_interface_#t~ret513#1, ttusb_dec_set_interface_~dec#1.base, ttusb_dec_set_interface_~dec#1.offset, ttusb_dec_set_interface_~interface#1, ttusb_dec_set_interface_~result~2#1, ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset;havoc ttusb_dec_set_interface_#in~dec#1.base, ttusb_dec_set_interface_#in~dec#1.offset, ttusb_dec_set_interface_#in~interface#1;assume { :end_inline_ttusb_dec_set_interface } true;assume -2147483648 <= ttusb_dec_probe_#t~ret816#1 && ttusb_dec_probe_#t~ret816#1 <= 2147483647;havoc ttusb_dec_probe_#t~ret816#1; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8284-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret744#1 := ##fun~$Pointer$~X~$Pointer$~TO~int(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_~dec#1.base, 1651 + ttusb_dec_init_dvb_~dec#1.offset, ttusb_dec_init_dvb_#t~mem743#1.base, ttusb_dec_init_dvb_#t~mem743#1.offset); srcloc: null [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8284: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret744#1 && ttusb_dec_init_dvb_#t~ret744#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~mem743#1.base, ttusb_dec_init_dvb_#t~mem743#1.offset;havoc ttusb_dec_init_dvb_#t~ret744#1; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7888: call ULTIMATE.dealloc(ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset);havoc ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset;ttusb_dec_probe_#t~ret817#1 := ttusb_init_rc_#res#1;havoc ttusb_init_rc_#t~mem616#1.base, ttusb_init_rc_#t~mem616#1.offset, ttusb_init_rc_#t~ret617#1, ttusb_init_rc_#t~ret618#1, ttusb_init_rc_#t~ret619#1.base, ttusb_init_rc_#t~ret619#1.offset, ttusb_init_rc_#t~mem620#1, ttusb_init_rc_#t~ret621#1, ttusb_init_rc_#t~mem622#1.base, ttusb_init_rc_#t~mem622#1.offset, ttusb_init_rc_#t~ret623#1, ttusb_init_rc_#t~ret624#1, ttusb_init_rc_#t~ret625#1, ttusb_init_rc_~dec#1.base, ttusb_init_rc_~dec#1.offset, ttusb_init_rc_~input_dev~0#1.base, ttusb_init_rc_~input_dev~0#1.offset, ttusb_init_rc_~#b~4#1.base, ttusb_init_rc_~#b~4#1.offset, ttusb_init_rc_~i~8#1, ttusb_init_rc_~err~0#1, ttusb_init_rc_~tmp~26#1;havoc ttusb_init_rc_#in~dec#1.base, ttusb_init_rc_#in~dec#1.offset;assume { :end_inline_ttusb_init_rc } true;assume -2147483648 <= ttusb_dec_probe_#t~ret817#1 && ttusb_dec_probe_#t~ret817#1 <= 2147483647;havoc ttusb_dec_probe_#t~ret817#1; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7690: ttusb_dec_start_sec_feed_~__ret___1~3#1.base, ttusb_dec_start_sec_feed_~__ret___1~3#1.offset := ttusb_dec_start_sec_feed_#t~memcpy~res566#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.offset;havoc ttusb_dec_start_sec_feed_#t~mem565#1.base, ttusb_dec_start_sec_feed_#t~mem565#1.offset;havoc ttusb_dec_start_sec_feed_#t~memcpy~res566#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.offset; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7558: assume -2147483648 <= ttusb_dec_start_ts_feed_#t~ret537#1 && ttusb_dec_start_ts_feed_#t~ret537#1 <= 2147483647;havoc ttusb_dec_start_ts_feed_#t~ret537#1; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8483: assume ttusb_dec_probe_#t~switch796#1;assume { :begin_inline_ttusbdecfe_dvbt_attach } true;ttusbdecfe_dvbt_attach_#in~arg0#1.base, ttusbdecfe_dvbt_attach_#in~arg0#1.offset := ~#fe_config~0.base, ~#fe_config~0.offset;havoc ttusbdecfe_dvbt_attach_#res#1.base, ttusbdecfe_dvbt_attach_#res#1.offset;havoc ttusbdecfe_dvbt_attach_#t~ret875#1.base, ttusbdecfe_dvbt_attach_#t~ret875#1.offset, ttusbdecfe_dvbt_attach_~arg0#1.base, ttusbdecfe_dvbt_attach_~arg0#1.offset;ttusbdecfe_dvbt_attach_~arg0#1.base, ttusbdecfe_dvbt_attach_~arg0#1.offset := ttusbdecfe_dvbt_attach_#in~arg0#1.base, ttusbdecfe_dvbt_attach_#in~arg0#1.offset; [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8483: assume !ttusb_dec_probe_#t~switch796#1;havoc ttusb_dec_probe_#t~mem795#1;havoc ttusb_dec_probe_#t~switch796#1;havoc ttusb_dec_probe_#t~ret797#1.base, ttusb_dec_probe_#t~ret797#1.offset;havoc ttusb_dec_probe_#t~ret798#1.base, ttusb_dec_probe_#t~ret798#1.offset;havoc ttusb_dec_probe_#t~mem795#1;havoc ttusb_dec_probe_#t~switch796#1;havoc ttusb_dec_probe_#t~ret797#1.base, ttusb_dec_probe_#t~ret797#1.offset;havoc ttusb_dec_probe_#t~ret798#1.base, ttusb_dec_probe_#t~ret798#1.offset;call ttusb_dec_probe_#t~mem799#1.base, ttusb_dec_probe_#t~mem799#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8); [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7690-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~memcpy~res566#1.base, ttusb_dec_start_sec_feed_#t~memcpy~res566#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_start_sec_feed_~#b0~1#1.base, 5 + ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_#t~mem565#1.base, ttusb_dec_start_sec_feed_#t~mem565#1.offset, ttusb_dec_start_sec_feed_~__len___1~3#1); srcloc: null [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8483-1: ttusb_dec_probe_#t~switch796#1 := ttusb_dec_probe_#t~switch796#1 || 4105 == (if ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 <= 2147483647 then ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 else ttusb_dec_probe_#t~mem795#1 % 65536 % 4294967296 - 4294967296); [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7558-1: SUMMARY for call ttusb_dec_start_ts_feed_#t~ret537#1 := printk(65, 0); srcloc: null [2025-02-08 02:46:44,187 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8285: SUMMARY for call dvb_dmxdev_release(ttusb_dec_init_dvb_~dec#1.base, 266 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8087: assume ttusb_dec_boot_dsp_~__len___0~6#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8087: assume !(ttusb_dec_boot_dsp_~__len___0~6#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6370: havoc debug_dma_alloc_coherent_~arg0#1.base, debug_dma_alloc_coherent_~arg0#1.offset, debug_dma_alloc_coherent_~arg1#1, debug_dma_alloc_coherent_~arg2#1, debug_dma_alloc_coherent_~arg3#1.base, debug_dma_alloc_coherent_~arg3#1.offset;havoc debug_dma_alloc_coherent_#in~arg0#1.base, debug_dma_alloc_coherent_#in~arg0#1.offset, debug_dma_alloc_coherent_#in~arg1#1, debug_dma_alloc_coherent_#in~arg2#1, debug_dma_alloc_coherent_#in~arg3#1.base, debug_dma_alloc_coherent_#in~arg3#1.offset;assume { :end_inline_debug_dma_alloc_coherent } true;havoc dma_alloc_attrs_#t~mem81#1;dma_alloc_attrs_#res#1.base, dma_alloc_attrs_#res#1.offset := dma_alloc_attrs_~memory~0#1.base, dma_alloc_attrs_~memory~0#1.offset; [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8286: SUMMARY for call dvb_dmx_release(ttusb_dec_init_dvb_~dec#1.base, 727 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8154: assume ttusb_dec_boot_dsp_~size~0#1 <= 59;call ttusb_dec_boot_dsp_#t~mem695#1.base, ttusb_dec_boot_dsp_#t~mem695#1.offset := read~$Pointer$#0(ttusb_dec_boot_dsp_~dec#1.base, 2012 + ttusb_dec_boot_dsp_~dec#1.offset, 8);call ttusb_dec_boot_dsp_#t~mem696#1 := read~int#0(ttusb_dec_boot_dsp_~dec#1.base, 2021 + ttusb_dec_boot_dsp_~dec#1.offset, 4); [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8154: assume !(ttusb_dec_boot_dsp_~size~0#1 <= 59); [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8220: assume ttusb_dec_init_stb_#t~mem715#1 % 4294967296 > 24575999;havoc ttusb_dec_init_stb_#t~mem715#1;call write~int#0(1, ttusb_dec_init_stb_~dec#1.base, 20 + ttusb_dec_init_stb_~dec#1.offset, 4); [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8220: assume !(ttusb_dec_init_stb_#t~mem715#1 % 4294967296 > 24575999);havoc ttusb_dec_init_stb_#t~mem715#1; [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8088-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res677#1.base, ttusb_dec_boot_dsp_#t~memcpy~res677#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset, ttusb_dec_boot_dsp_~firmware~0#1.base, 36 + ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~__len___0~6#1); srcloc: null [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8088: ttusb_dec_boot_dsp_~__ret___0~6#1.base, ttusb_dec_boot_dsp_~__ret___0~6#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res677#1.base, ttusb_dec_boot_dsp_#t~memcpy~res677#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res677#1.base, ttusb_dec_boot_dsp_#t~memcpy~res677#1.offset; [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7758: call ULTIMATE.dealloc(ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset);havoc ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset;ttusb_dec_stop_feed_#t~ret602#1 := ttusb_dec_stop_ts_feed_#res#1;havoc ttusb_dec_stop_ts_feed_#t~mem587#1.base, ttusb_dec_stop_ts_feed_#t~mem587#1.offset, ttusb_dec_stop_ts_feed_#t~mem588#1.base, ttusb_dec_stop_ts_feed_#t~mem588#1.offset, ttusb_dec_stop_ts_feed_#t~ret589#1, ttusb_dec_stop_ts_feed_#t~mem590#1, ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.base, ttusb_dec_stop_ts_feed_~dvbdmxfeed#1.offset, ttusb_dec_stop_ts_feed_~dec~7#1.base, ttusb_dec_stop_ts_feed_~dec~7#1.offset, ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset;havoc ttusb_dec_stop_ts_feed_#in~dvbdmxfeed#1.base, ttusb_dec_stop_ts_feed_#in~dvbdmxfeed#1.offset;assume { :end_inline_ttusb_dec_stop_ts_feed } true;assume -2147483648 <= ttusb_dec_stop_feed_#t~ret602#1 && ttusb_dec_stop_feed_#t~ret602#1 <= 2147483647;ttusb_dec_stop_feed_~tmp~25#1 := ttusb_dec_stop_feed_#t~ret602#1;ttusb_dec_stop_feed_#res#1 := ttusb_dec_stop_feed_~tmp~25#1; [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8287-1: SUMMARY for call ttusb_dec_init_dvb_#t~ret745#1 := dvb_unregister_adapter(ttusb_dec_init_dvb_~dec#1.base, 24 + ttusb_dec_init_dvb_~dec#1.offset); srcloc: null [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8287: assume -2147483648 <= ttusb_dec_init_dvb_#t~ret745#1 && ttusb_dec_init_dvb_#t~ret745#1 <= 2147483647;havoc ttusb_dec_init_dvb_#t~ret745#1;ttusb_dec_init_dvb_#res#1 := ttusb_dec_init_dvb_~result~8#1; [2025-02-08 02:46:44,188 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8155-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret697#1 := usb_bulk_msg(ttusb_dec_boot_dsp_#t~mem695#1.base, ttusb_dec_boot_dsp_#t~mem695#1.offset, ttusb_dec_boot_dsp_#t~mem696#1, ttusb_dec_boot_dsp_~b~5#1.base, ttusb_dec_boot_dsp_~b~5#1.offset, -60 + ttusb_dec_boot_dsp_~j~1#1 + ttusb_dec_boot_dsp_~size~0#1, ttusb_dec_boot_dsp_~#actual_len~1#1.base, ttusb_dec_boot_dsp_~#actual_len~1#1.offset, 100); srcloc: null [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8155: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret697#1 && ttusb_dec_boot_dsp_#t~ret697#1 <= 2147483647;ttusb_dec_boot_dsp_~result~6#1 := ttusb_dec_boot_dsp_#t~ret697#1;havoc ttusb_dec_boot_dsp_#t~mem695#1.base, ttusb_dec_boot_dsp_#t~mem695#1.offset;havoc ttusb_dec_boot_dsp_#t~mem696#1;havoc ttusb_dec_boot_dsp_#t~ret697#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6768: assume ttusb_dec_get_stb_state_#t~mem241#1 > 11;havoc ttusb_dec_get_stb_state_#t~mem241#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6768: assume !(ttusb_dec_get_stb_state_#t~mem241#1 > 11);havoc ttusb_dec_get_stb_state_#t~mem241#1;ttusb_dec_get_stb_state_#res#1 := -1;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset);havoc ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset);havoc ttusb_dec_get_stb_state_~#c_length~0#1.base, ttusb_dec_get_stb_state_~#c_length~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset);havoc ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7693-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret567#1 := ttusb_dec_send_command(ttusb_dec_start_sec_feed_~dec~6#1.base, ttusb_dec_start_sec_feed_~dec~6#1.offset, 96, 29, ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset, ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset, ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset); srcloc: null [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7693: assume -2147483648 <= ttusb_dec_start_sec_feed_#t~ret567#1 && ttusb_dec_start_sec_feed_#t~ret567#1 <= 2147483647;ttusb_dec_start_sec_feed_~result~5#1 := ttusb_dec_start_sec_feed_#t~ret567#1;havoc ttusb_dec_start_sec_feed_#t~ret567#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7561: call ttusb_dec_start_ts_feed_#t~mem538#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 2);call write~int#0(ttusb_dec_start_ts_feed_#t~mem538#1, ttusb_dec_start_ts_feed_~dec~5#1.base, 1980 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 2);call ttusb_dec_start_ts_feed_#t~mem539#1 := read~int#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4398 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 2);call write~int#0(ttusb_dec_start_ts_feed_#t~mem539#1, ttusb_dec_start_ts_feed_~dec~5#1.base, 1974 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 2);call ttusb_dec_start_ts_feed_#t~mem540#1.base, ttusb_dec_start_ts_feed_#t~mem540#1.offset := read~$Pointer$#0(ttusb_dec_start_ts_feed_~dvbdmxfeed#1.base, 4428 + ttusb_dec_start_ts_feed_~dvbdmxfeed#1.offset, 8);call write~$Pointer$#0(ttusb_dec_start_ts_feed_#t~mem540#1.base, ttusb_dec_start_ts_feed_#t~mem540#1.offset, ttusb_dec_start_ts_feed_~dec~5#1.base, 15313 + ttusb_dec_start_ts_feed_~dec~5#1.offset, 8); [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7429: assume ttusb_dec_set_interface_#t~mem505#1 % 4294967296 != ttusb_dec_set_interface_~interface#1 % 4294967296;havoc ttusb_dec_set_interface_#t~mem505#1;ttusb_dec_set_interface_#t~switch506#1 := 0 == ttusb_dec_set_interface_~interface#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7429: assume !(ttusb_dec_set_interface_#t~mem505#1 % 4294967296 != ttusb_dec_set_interface_~interface#1 % 4294967296);havoc ttusb_dec_set_interface_#t~mem505#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8090: ttusb_dec_boot_dsp_~__ret___0~6#1.base, ttusb_dec_boot_dsp_~__ret___0~6#1.offset := ttusb_dec_boot_dsp_#t~memcpy~res678#1.base, ttusb_dec_boot_dsp_#t~memcpy~res678#1.offset;havoc ttusb_dec_boot_dsp_#t~memcpy~res678#1.base, ttusb_dec_boot_dsp_#t~memcpy~res678#1.offset; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7958: assume 0 != ~debug~0; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7958: assume !(0 != ~debug~0); [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8090-1: SUMMARY for call ttusb_dec_boot_dsp_#t~memcpy~res678#1.base, ttusb_dec_boot_dsp_#t~memcpy~res678#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_boot_dsp_~#idstring~0#1.base, ttusb_dec_boot_dsp_~#idstring~0#1.offset, ttusb_dec_boot_dsp_~firmware~0#1.base, 36 + ttusb_dec_boot_dsp_~firmware~0#1.offset, ttusb_dec_boot_dsp_~__len___0~6#1); srcloc: null [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7694: assume 0 == ttusb_dec_start_sec_feed_~result~5#1;call ttusb_dec_start_sec_feed_#t~mem568#1 := read~int#7(ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset, 4); [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7694: assume !(0 == ttusb_dec_start_sec_feed_~result~5#1);ttusb_dec_start_sec_feed_#res#1 := ttusb_dec_start_sec_feed_~result~5#1;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset);havoc ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset);havoc ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset);havoc ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset);havoc ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset);havoc ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6769: assume 0 != (ttusb_dec_get_stb_state_~mode#1.base + ttusb_dec_get_stb_state_~mode#1.offset) % 18446744073709551616;ttusb_dec_get_stb_state_~__len~1#1 := 4; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6769: assume !(0 != (ttusb_dec_get_stb_state_~mode#1.base + ttusb_dec_get_stb_state_~mode#1.offset) % 18446744073709551616); [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7959-1: SUMMARY for call ttusb_dec_init_usb_#t~ret627#1 := printk(92, 0); srcloc: null [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7959: assume -2147483648 <= ttusb_dec_init_usb_#t~ret627#1 && ttusb_dec_init_usb_#t~ret627#1 <= 2147483647;havoc ttusb_dec_init_usb_#t~ret627#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7695: assume 2 == ttusb_dec_start_sec_feed_#t~mem568#1;havoc ttusb_dec_start_sec_feed_#t~mem568#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7695: assume !(2 == ttusb_dec_start_sec_feed_#t~mem568#1);havoc ttusb_dec_start_sec_feed_#t~mem568#1;ttusb_dec_start_sec_feed_#res#1 := -11;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset);havoc ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset);havoc ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset);havoc ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset);havoc ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset);havoc ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7431: assume ttusb_dec_set_interface_#t~switch506#1;call ttusb_dec_set_interface_#t~mem507#1.base, ttusb_dec_set_interface_#t~mem507#1.offset := read~$Pointer$#0(ttusb_dec_set_interface_~dec#1.base, 2012 + ttusb_dec_set_interface_~dec#1.offset, 8); [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7431: assume !ttusb_dec_set_interface_#t~switch506#1;ttusb_dec_set_interface_#t~switch506#1 := ttusb_dec_set_interface_#t~switch506#1 || 1 == ttusb_dec_set_interface_~interface#1; [2025-02-08 02:46:44,189 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8488: assume 0 == (ttusb_dec_probe_#t~mem799#1.base + ttusb_dec_probe_#t~mem799#1.offset) % 18446744073709551616;havoc ttusb_dec_probe_#t~mem799#1.base, ttusb_dec_probe_#t~mem799#1.offset;call ttusb_dec_probe_#t~mem800#1.base, ttusb_dec_probe_#t~mem800#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 2012 + ttusb_dec_probe_~dec~10#1.offset, 8);call ttusb_dec_probe_#t~mem801#1 := read~int#0(ttusb_dec_probe_#t~mem800#1.base, 1227 + ttusb_dec_probe_#t~mem800#1.offset, 2);call ttusb_dec_probe_#t~mem802#1.base, ttusb_dec_probe_#t~mem802#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 2012 + ttusb_dec_probe_~dec~10#1.offset, 8);call ttusb_dec_probe_#t~mem803#1 := read~int#0(ttusb_dec_probe_#t~mem802#1.base, 1229 + ttusb_dec_probe_#t~mem802#1.offset, 2); [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8488: assume !(0 == (ttusb_dec_probe_#t~mem799#1.base + ttusb_dec_probe_#t~mem799#1.offset) % 18446744073709551616);havoc ttusb_dec_probe_#t~mem799#1.base, ttusb_dec_probe_#t~mem799#1.offset;call ttusb_dec_probe_#t~mem805#1.base, ttusb_dec_probe_#t~mem805#1.offset := read~$Pointer$#0(ttusb_dec_probe_~dec~10#1.base, 1964 + ttusb_dec_probe_~dec~10#1.offset, 8);assume { :begin_inline_dvb_register_frontend } true;dvb_register_frontend_#in~arg0#1.base, dvb_register_frontend_#in~arg0#1.offset, dvb_register_frontend_#in~arg1#1.base, dvb_register_frontend_#in~arg1#1.offset := ttusb_dec_probe_~dec~10#1.base, 24 + ttusb_dec_probe_~dec~10#1.offset, ttusb_dec_probe_#t~mem805#1.base, ttusb_dec_probe_#t~mem805#1.offset;havoc dvb_register_frontend_#res#1;havoc dvb_register_frontend_#t~nondet865#1, dvb_register_frontend_~arg0#1.base, dvb_register_frontend_~arg0#1.offset, dvb_register_frontend_~arg1#1.base, dvb_register_frontend_~arg1#1.offset;dvb_register_frontend_~arg0#1.base, dvb_register_frontend_~arg0#1.offset := dvb_register_frontend_#in~arg0#1.base, dvb_register_frontend_#in~arg0#1.offset;dvb_register_frontend_~arg1#1.base, dvb_register_frontend_~arg1#1.offset := dvb_register_frontend_#in~arg1#1.base, dvb_register_frontend_#in~arg1#1.offset;havoc dvb_register_frontend_#t~nondet865#1;assume -2147483648 <= dvb_register_frontend_#t~nondet865#1 && dvb_register_frontend_#t~nondet865#1 <= 2147483647;dvb_register_frontend_#res#1 := dvb_register_frontend_#t~nondet865#1;havoc dvb_register_frontend_#t~nondet865#1; [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8224-1: ttusb_dec_init_stb_#res#1 := 0;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset);havoc ttusb_dec_init_stb_~#mode~0#1.base, ttusb_dec_init_stb_~#mode~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset);havoc ttusb_dec_init_stb_~#model~0#1.base, ttusb_dec_init_stb_~#model~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset);havoc ttusb_dec_init_stb_~#version~0#1.base, ttusb_dec_init_stb_~#version~0#1.offset; [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7762: assume -2147483648 <= ttusb_dec_stop_ts_feed_#t~ret589#1 && ttusb_dec_stop_ts_feed_#t~ret589#1 <= 2147483647;havoc ttusb_dec_stop_ts_feed_#t~ret589#1;call ttusb_dec_stop_ts_feed_#t~mem590#1 := read~int#0(ttusb_dec_stop_ts_feed_~dec~7#1.base, 8599 + ttusb_dec_stop_ts_feed_~dec~7#1.offset, 4);call write~int#0(ttusb_dec_stop_ts_feed_#t~mem590#1 - 1, ttusb_dec_stop_ts_feed_~dec~7#1.base, 8599 + ttusb_dec_stop_ts_feed_~dec~7#1.offset, 4);havoc ttusb_dec_stop_ts_feed_#t~mem590#1; [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6771: assume ttusb_dec_get_stb_state_~__len~1#1 % 18446744073709551616 > 63; [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6771: assume !(ttusb_dec_get_stb_state_~__len~1#1 % 18446744073709551616 > 63); [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7696-1: SUMMARY for call ttusb_dec_start_sec_feed_#t~ret569#1.base, ttusb_dec_start_sec_feed_#t~ret569#1.offset := kmalloc(32, 32); srcloc: null [2025-02-08 02:46:44,190 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7696: ttusb_dec_start_sec_feed_~tmp___0~7#1.base, ttusb_dec_start_sec_feed_~tmp___0~7#1.offset := ttusb_dec_start_sec_feed_#t~ret569#1.base, ttusb_dec_start_sec_feed_#t~ret569#1.offset;havoc ttusb_dec_start_sec_feed_#t~ret569#1.base, ttusb_dec_start_sec_feed_#t~ret569#1.offset;ttusb_dec_start_sec_feed_~finfo~1#1.base, ttusb_dec_start_sec_feed_~finfo~1#1.offset := ttusb_dec_start_sec_feed_~tmp___0~7#1.base, ttusb_dec_start_sec_feed_~tmp___0~7#1.offset; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7762-1: SUMMARY for call ttusb_dec_stop_ts_feed_#t~ret589#1 := ttusb_dec_send_command(ttusb_dec_stop_ts_feed_~dec~7#1.base, ttusb_dec_stop_ts_feed_~dec~7#1.offset, 129, 1, ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset, 0, 0, 0, 0); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7564: SUMMARY for call ttusb_dec_set_pids(ttusb_dec_start_ts_feed_~dec~5#1.base, ttusb_dec_start_ts_feed_~dec~5#1.offset); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7432-1: SUMMARY for call ttusb_dec_set_interface_#t~ret508#1 := usb_set_interface(ttusb_dec_set_interface_#t~mem507#1.base, ttusb_dec_set_interface_#t~mem507#1.offset, 0, 0); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7432: assume -2147483648 <= ttusb_dec_set_interface_#t~ret508#1 && ttusb_dec_set_interface_#t~ret508#1 <= 2147483647;ttusb_dec_set_interface_~result~2#1 := ttusb_dec_set_interface_#t~ret508#1; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8489: assume -2147483648 <= ttusb_dec_probe_#t~ret804#1 && ttusb_dec_probe_#t~ret804#1 <= 2147483647;havoc ttusb_dec_probe_#t~mem800#1.base, ttusb_dec_probe_#t~mem800#1.offset;havoc ttusb_dec_probe_#t~mem801#1;havoc ttusb_dec_probe_#t~mem802#1.base, ttusb_dec_probe_#t~mem802#1.offset;havoc ttusb_dec_probe_#t~mem803#1;havoc ttusb_dec_probe_#t~ret804#1; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8489-1: SUMMARY for call ttusb_dec_probe_#t~ret804#1 := printk(134, 0); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8159: ttusb_dec_boot_dsp_~i~9#1 := 60 + ttusb_dec_boot_dsp_~i~9#1; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8093: call write~int#0(0, ttusb_dec_boot_dsp_~#idstring~0#1.base, 20 + ttusb_dec_boot_dsp_~#idstring~0#1.offset, 1); [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7895: ttusb_init_rc_#t~ret617#1 := usb_make_path_#res#1;havoc usb_make_path_#t~mem105#1.base, usb_make_path_#t~mem105#1.offset, usb_make_path_#t~mem106#1.base, usb_make_path_#t~mem106#1.offset, usb_make_path_#t~loopctr107#1, usb_make_path_#t~nondet108#1, usb_make_path_#t~ret109#1, usb_make_path_~dev#1.base, usb_make_path_~dev#1.offset, usb_make_path_~buf#1.base, usb_make_path_~buf#1.offset, usb_make_path_~size#1, usb_make_path_~actual~0#1;havoc usb_make_path_#in~dev#1.base, usb_make_path_#in~dev#1.offset, usb_make_path_#in~buf#1.base, usb_make_path_#in~buf#1.offset, usb_make_path_#in~size#1;assume { :end_inline_usb_make_path } true;assume -2147483648 <= ttusb_init_rc_#t~ret617#1 && ttusb_init_rc_#t~ret617#1 <= 2147483647;havoc ttusb_init_rc_#t~mem616#1.base, ttusb_init_rc_#t~mem616#1.offset;havoc ttusb_init_rc_#t~ret617#1;assume { :begin_inline_strlcat } true;strlcat_#in~arg0#1.base, strlcat_#in~arg0#1.offset, strlcat_#in~arg1#1.base, strlcat_#in~arg1#1.offset, strlcat_#in~arg2#1 := ttusb_init_rc_~dec#1.base, 15413 + ttusb_init_rc_~dec#1.offset, 86, 0, 64;havoc strlcat_#res#1;havoc strlcat_#t~nondet873#1, strlcat_~arg0#1.base, strlcat_~arg0#1.offset, strlcat_~arg1#1.base, strlcat_~arg1#1.offset, strlcat_~arg2#1;strlcat_~arg0#1.base, strlcat_~arg0#1.offset := strlcat_#in~arg0#1.base, strlcat_#in~arg0#1.offset;strlcat_~arg1#1.base, strlcat_~arg1#1.offset := strlcat_#in~arg1#1.base, strlcat_#in~arg1#1.offset;strlcat_~arg2#1 := strlcat_#in~arg2#1;havoc strlcat_#t~nondet873#1;strlcat_#res#1 := strlcat_#t~nondet873#1;havoc strlcat_#t~nondet873#1; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6772-1: SUMMARY for call ttusb_dec_get_stb_state_#t~memcpy~res242#1.base, ttusb_dec_get_stb_state_#t~memcpy~res242#1.offset := #Ultimate.C_memcpy#0(ttusb_dec_get_stb_state_~#tmp~12#1.base, ttusb_dec_get_stb_state_~#tmp~12#1.offset, ttusb_dec_get_stb_state_~#c~0#1.base, ttusb_dec_get_stb_state_~#c~0#1.offset, ttusb_dec_get_stb_state_~__len~1#1); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L6772: ttusb_dec_get_stb_state_~__ret~2#1.base, ttusb_dec_get_stb_state_~__ret~2#1.offset := ttusb_dec_get_stb_state_#t~memcpy~res242#1.base, ttusb_dec_get_stb_state_#t~memcpy~res242#1.offset;havoc ttusb_dec_get_stb_state_#t~memcpy~res242#1.base, ttusb_dec_get_stb_state_#t~memcpy~res242#1.offset; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8094: assume -2147483648 <= ttusb_dec_boot_dsp_#t~ret679#1 && ttusb_dec_boot_dsp_#t~ret679#1 <= 2147483647;havoc ttusb_dec_boot_dsp_#t~ret679#1; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7962: SUMMARY for call __mutex_init(ttusb_dec_init_usb_~dec#1.base, 2045 + ttusb_dec_init_usb_~dec#1.offset, 94, 0, ttusb_dec_init_usb_~#__key~1#1.base, ttusb_dec_init_usb_~#__key~1#1.offset); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L8094-1: SUMMARY for call ttusb_dec_boot_dsp_#t~ret679#1 := printk(104, 0); srcloc: null [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7698: assume 0 == (ttusb_dec_start_sec_feed_~finfo~1#1.base + ttusb_dec_start_sec_feed_~finfo~1#1.offset) % 18446744073709551616;ttusb_dec_start_sec_feed_#res#1 := -12;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset);havoc ttusb_dec_start_sec_feed_~#b0~1#1.base, ttusb_dec_start_sec_feed_~#b0~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset);havoc ttusb_dec_start_sec_feed_~#pid~0#1.base, ttusb_dec_start_sec_feed_~#pid~0#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset);havoc ttusb_dec_start_sec_feed_~#c~2#1.base, ttusb_dec_start_sec_feed_~#c~2#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset);havoc ttusb_dec_start_sec_feed_~#c_length~1#1.base, ttusb_dec_start_sec_feed_~#c_length~1#1.offset;call ULTIMATE.dealloc(ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset);havoc ttusb_dec_start_sec_feed_~#x~0#1.base, ttusb_dec_start_sec_feed_~#x~0#1.offset; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7698: assume !(0 == (ttusb_dec_start_sec_feed_~finfo~1#1.base + ttusb_dec_start_sec_feed_~finfo~1#1.offset) % 18446744073709551616);call ttusb_dec_start_sec_feed_#t~mem570#1 := read~int#0(ttusb_dec_start_sec_feed_~#c~2#1.base, 1 + ttusb_dec_start_sec_feed_~#c~2#1.offset, 1);call write~int#0(ttusb_dec_start_sec_feed_#t~mem570#1, ttusb_dec_start_sec_feed_~finfo~1#1.base, ttusb_dec_start_sec_feed_~finfo~1#1.offset, 1);havoc ttusb_dec_start_sec_feed_#t~mem570#1;call ttusb_dec_start_sec_feed_#t~mem571#1.base, ttusb_dec_start_sec_feed_#t~mem571#1.offset := read~$Pointer$#0(ttusb_dec_start_sec_feed_~dvbdmxfeed#1.base, 4428 + ttusb_dec_start_sec_feed_~dvbdmxfeed#1.offset, 8);call write~$Pointer$#0(ttusb_dec_start_sec_feed_#t~mem571#1.base, ttusb_dec_start_sec_feed_#t~mem571#1.offset, ttusb_dec_start_sec_feed_~finfo~1#1.base, 1 + ttusb_dec_start_sec_feed_~finfo~1#1.offset, 8);havoc ttusb_dec_start_sec_feed_#t~mem571#1.base, ttusb_dec_start_sec_feed_#t~mem571#1.offset; [2025-02-08 02:46:44,191 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7764-1: SUMMARY for call ttusb_dec_stop_iso_xfer(ttusb_dec_stop_ts_feed_~dec~7#1.base, ttusb_dec_stop_ts_feed_~dec~7#1.offset); srcloc: null [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7764: ttusb_dec_stop_ts_feed_#res#1 := 0;call ULTIMATE.dealloc(ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset);havoc ttusb_dec_stop_ts_feed_~#b0~2#1.base, ttusb_dec_stop_ts_feed_~#b0~2#1.offset; [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7566: assume 0 != ~debug~0; [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7566: assume !(0 != ~debug~0); [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7434: assume 0 != ttusb_dec_set_interface_~result~2#1;ttusb_dec_set_interface_#res#1 := ttusb_dec_set_interface_~result~2#1;call ULTIMATE.dealloc(ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset);havoc ttusb_dec_set_interface_~#b~3#1.base, ttusb_dec_set_interface_~#b~3#1.offset; [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7434: assume !(0 != ttusb_dec_set_interface_~result~2#1);call ttusb_dec_set_interface_#t~mem510#1.base, ttusb_dec_set_interface_#t~mem510#1.offset := read~$Pointer$#0(ttusb_dec_set_interface_~dec#1.base, 2012 + ttusb_dec_set_interface_~dec#1.offset, 8); [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7566-1: assume ttusb_dec_start_ts_feed_#t~switch536#1; [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7566-1: assume !ttusb_dec_start_ts_feed_#t~switch536#1;ttusb_dec_start_ts_feed_#t~switch536#1 := ttusb_dec_start_ts_feed_#t~switch536#1 || 2 == ttusb_dec_start_ts_feed_#t~mem535#1; [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7434-1: assume ttusb_dec_set_interface_#t~switch506#1; [2025-02-08 02:46:44,192 INFO L1324 $ProcedureCfgBuilder]: dead code at ProgramPoint L7434-1: assume !ttusb_dec_set_interface_#t~switch506#1;ttusb_dec_set_interface_#t~switch506#1 := ttusb_dec_set_interface_#t~switch506#1 || 2 == ttusb_dec_set_interface_~interface#1; [2025-02-08 02:46:44,311 INFO L? ?]: Removed 642 outVars from TransFormulas that were not future-live. [2025-02-08 02:46:44,311 INFO L308 CfgBuilder]: Performing block encoding [2025-02-08 02:46:44,342 INFO L332 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-02-08 02:46:44,343 INFO L337 CfgBuilder]: Removed 0 assume(true) statements. [2025-02-08 02:46:44,343 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:46:44 BoogieIcfgContainer [2025-02-08 02:46:44,343 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-02-08 02:46:44,348 INFO L112 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2025-02-08 02:46:44,348 INFO L270 PluginConnector]: Initializing TraceAbstraction... [2025-02-08 02:46:44,352 INFO L274 PluginConnector]: TraceAbstraction initialized [2025-02-08 02:46:44,352 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.02 02:46:27" (1/3) ... [2025-02-08 02:46:44,353 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@994bf04 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:46:44, skipping insertion in model container [2025-02-08 02:46:44,354 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.02 02:46:30" (2/3) ... [2025-02-08 02:46:44,354 INFO L204 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@994bf04 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.02 02:46:44, skipping insertion in model container [2025-02-08 02:46:44,354 INFO L184 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:46:44" (3/3) ... [2025-02-08 02:46:44,355 INFO L128 eAbstractionObserver]: Analyzing ICFG linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i [2025-02-08 02:46:44,368 INFO L216 ceAbstractionStarter]: Automizer settings: Hoare:LoopHeads NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2025-02-08 02:46:44,370 INFO L151 ceAbstractionStarter]: Applying trace abstraction to ICFG linux-3.8-rc1-32_7a-drivers--media--usb--ttusb-dec--ttusb_dec.ko-ldv_main0.cil.out.i that has 69 procedures, 469 locations, 1 initial locations, 38 loop locations, and 1 error locations. [2025-02-08 02:46:44,432 INFO L332 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2025-02-08 02:46:44,442 INFO L333 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopHeads, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=[Lde.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings;@2b8316d0, mLbeIndependenceSettings=[IndependenceType=SEMANTIC, AbstractionType=NONE, UseConditional=false, UseSemiCommutativity=true, Solver=Z3, SolverTimeout=1000ms] [2025-02-08 02:46:44,443 INFO L334 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2025-02-08 02:46:44,448 INFO L276 IsEmpty]: Start isEmpty. Operand has 239 states, 152 states have (on average 1.243421052631579) internal successors, (189), 169 states have internal predecessors, (189), 46 states have call successors, (46), 19 states have call predecessors, (46), 19 states have return successors, (46), 46 states have call predecessors, (46), 46 states have call successors, (46) [2025-02-08 02:46:44,452 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 7 [2025-02-08 02:46:44,452 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:44,453 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1] [2025-02-08 02:46:44,453 INFO L396 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:44,458 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:44,458 INFO L85 PathProgramCache]: Analyzing trace with hash 1086498297, now seen corresponding path program 1 times [2025-02-08 02:46:44,467 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:44,468 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [499516200] [2025-02-08 02:46:44,468 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:44,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:44,791 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 6 statements into 1 equivalence classes. [2025-02-08 02:46:44,925 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 6 of 6 statements. [2025-02-08 02:46:44,925 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:44,926 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:45,184 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-02-08 02:46:45,186 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:45,186 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [499516200] [2025-02-08 02:46:45,187 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [499516200] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:45,187 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:45,187 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-02-08 02:46:45,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [834665776] [2025-02-08 02:46:45,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:45,191 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:45,192 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:45,210 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:45,210 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:45,214 INFO L87 Difference]: Start difference. First operand has 239 states, 152 states have (on average 1.243421052631579) internal successors, (189), 169 states have internal predecessors, (189), 46 states have call successors, (46), 19 states have call predecessors, (46), 19 states have return successors, (46), 46 states have call predecessors, (46), 46 states have call successors, (46) Second operand has 3 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 2 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:45,230 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:45,231 INFO L93 Difference]: Finished difference Result 30 states and 41 transitions. [2025-02-08 02:46:45,232 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:45,233 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 2 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 6 [2025-02-08 02:46:45,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:45,238 INFO L225 Difference]: With dead ends: 30 [2025-02-08 02:46:45,238 INFO L226 Difference]: Without dead ends: 12 [2025-02-08 02:46:45,240 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:45,242 INFO L435 NwaCegarLoop]: 16 mSDtfsCounter, 14 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 14 SdHoareTripleChecker+Valid, 16 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:45,243 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [14 Valid, 16 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:45,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12 states. [2025-02-08 02:46:45,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12 to 12. [2025-02-08 02:46:45,263 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12 states, 8 states have (on average 1.25) internal successors, (10), 10 states have internal predecessors, (10), 3 states have call successors, (3), 1 states have call predecessors, (3), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:45,265 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 13 transitions. [2025-02-08 02:46:45,267 INFO L78 Accepts]: Start accepts. Automaton has 12 states and 13 transitions. Word has length 6 [2025-02-08 02:46:45,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:45,267 INFO L471 AbstractCegarLoop]: Abstraction has 12 states and 13 transitions. [2025-02-08 02:46:45,267 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 1.6666666666666667) internal successors, (5), 2 states have internal predecessors, (5), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:45,267 INFO L276 IsEmpty]: Start isEmpty. Operand 12 states and 13 transitions. [2025-02-08 02:46:45,268 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 8 [2025-02-08 02:46:45,268 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:45,268 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:46:45,268 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2025-02-08 02:46:45,268 INFO L396 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:45,269 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:45,269 INFO L85 PathProgramCache]: Analyzing trace with hash -679410797, now seen corresponding path program 1 times [2025-02-08 02:46:45,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:45,269 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1956111810] [2025-02-08 02:46:45,269 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:45,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:45,501 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 7 statements into 1 equivalence classes. [2025-02-08 02:46:45,554 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 7 of 7 statements. [2025-02-08 02:46:45,554 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:45,554 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:45,774 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-02-08 02:46:45,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:45,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1956111810] [2025-02-08 02:46:45,775 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1956111810] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:45,775 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:45,775 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-02-08 02:46:45,775 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581034953] [2025-02-08 02:46:45,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:45,776 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:45,777 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:45,777 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:45,777 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:45,777 INFO L87 Difference]: Start difference. First operand 12 states and 13 transitions. Second operand has 3 states, 3 states have (on average 2.0) internal successors, (6), 2 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:45,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:45,783 INFO L93 Difference]: Finished difference Result 14 states and 14 transitions. [2025-02-08 02:46:45,784 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:45,784 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 2.0) internal successors, (6), 2 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 7 [2025-02-08 02:46:45,784 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:45,784 INFO L225 Difference]: With dead ends: 14 [2025-02-08 02:46:45,784 INFO L226 Difference]: Without dead ends: 11 [2025-02-08 02:46:45,785 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:45,785 INFO L435 NwaCegarLoop]: 10 mSDtfsCounter, 7 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 10 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:45,786 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 10 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:45,786 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11 states. [2025-02-08 02:46:45,787 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11 to 11. [2025-02-08 02:46:45,787 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11 states, 8 states have (on average 1.125) internal successors, (9), 9 states have internal predecessors, (9), 2 states have call successors, (2), 1 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:45,788 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 11 transitions. [2025-02-08 02:46:45,788 INFO L78 Accepts]: Start accepts. Automaton has 11 states and 11 transitions. Word has length 7 [2025-02-08 02:46:45,788 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:45,788 INFO L471 AbstractCegarLoop]: Abstraction has 11 states and 11 transitions. [2025-02-08 02:46:45,788 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 2.0) internal successors, (6), 2 states have internal predecessors, (6), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:45,788 INFO L276 IsEmpty]: Start isEmpty. Operand 11 states and 11 transitions. [2025-02-08 02:46:45,789 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2025-02-08 02:46:45,789 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:45,789 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:46:45,789 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2025-02-08 02:46:45,789 INFO L396 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:45,790 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:45,790 INFO L85 PathProgramCache]: Analyzing trace with hash 411981114, now seen corresponding path program 1 times [2025-02-08 02:46:45,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:45,790 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [783286657] [2025-02-08 02:46:45,790 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:45,790 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:45,991 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 8 statements into 1 equivalence classes. [2025-02-08 02:46:46,015 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 8 of 8 statements. [2025-02-08 02:46:46,016 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:46,016 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:46,151 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-02-08 02:46:46,152 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:46,152 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [783286657] [2025-02-08 02:46:46,152 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [783286657] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:46,152 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:46,152 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-02-08 02:46:46,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1264110199] [2025-02-08 02:46:46,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:46,152 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:46,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:46,153 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:46,153 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:46,153 INFO L87 Difference]: Start difference. First operand 11 states and 11 transitions. Second operand has 3 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:46,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:46,160 INFO L93 Difference]: Finished difference Result 13 states and 12 transitions. [2025-02-08 02:46:46,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:46,160 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2025-02-08 02:46:46,160 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:46,160 INFO L225 Difference]: With dead ends: 13 [2025-02-08 02:46:46,161 INFO L226 Difference]: Without dead ends: 10 [2025-02-08 02:46:46,161 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:46,161 INFO L435 NwaCegarLoop]: 8 mSDtfsCounter, 4 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4 SdHoareTripleChecker+Valid, 8 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:46,162 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [4 Valid, 8 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:46,162 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10 states. [2025-02-08 02:46:46,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10 to 10. [2025-02-08 02:46:46,163 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 8 states have (on average 1.0) internal successors, (8), 8 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:46,163 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 9 transitions. [2025-02-08 02:46:46,165 INFO L78 Accepts]: Start accepts. Automaton has 10 states and 9 transitions. Word has length 8 [2025-02-08 02:46:46,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:46,166 INFO L471 AbstractCegarLoop]: Abstraction has 10 states and 9 transitions. [2025-02-08 02:46:46,166 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 2.3333333333333335) internal successors, (7), 2 states have internal predecessors, (7), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:46,166 INFO L276 IsEmpty]: Start isEmpty. Operand 10 states and 9 transitions. [2025-02-08 02:46:46,166 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 10 [2025-02-08 02:46:46,166 INFO L210 NwaCegarLoop]: Found error trace [2025-02-08 02:46:46,167 INFO L218 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-02-08 02:46:46,167 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2025-02-08 02:46:46,167 INFO L396 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2025-02-08 02:46:46,168 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-02-08 02:46:46,168 INFO L85 PathProgramCache]: Analyzing trace with hash -114609036, now seen corresponding path program 1 times [2025-02-08 02:46:46,168 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-02-08 02:46:46,168 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986669360] [2025-02-08 02:46:46,168 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-02-08 02:46:46,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-02-08 02:46:46,324 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 9 statements into 1 equivalence classes. [2025-02-08 02:46:46,346 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 9 of 9 statements. [2025-02-08 02:46:46,346 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-02-08 02:46:46,346 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-02-08 02:46:46,543 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-02-08 02:46:46,543 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-02-08 02:46:46,543 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986669360] [2025-02-08 02:46:46,543 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986669360] provided 1 perfect and 0 imperfect interpolant sequences [2025-02-08 02:46:46,543 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-02-08 02:46:46,543 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2025-02-08 02:46:46,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2141711954] [2025-02-08 02:46:46,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-02-08 02:46:46,544 INFO L548 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2025-02-08 02:46:46,544 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-02-08 02:46:46,544 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-02-08 02:46:46,544 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:46,544 INFO L87 Difference]: Start difference. First operand 10 states and 9 transitions. Second operand has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 2 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:46,545 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-02-08 02:46:46,545 INFO L93 Difference]: Finished difference Result 10 states and 9 transitions. [2025-02-08 02:46:46,545 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-02-08 02:46:46,545 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 2 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 9 [2025-02-08 02:46:46,545 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2025-02-08 02:46:46,545 INFO L225 Difference]: With dead ends: 10 [2025-02-08 02:46:46,545 INFO L226 Difference]: Without dead ends: 0 [2025-02-08 02:46:46,546 INFO L434 NwaCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-02-08 02:46:46,546 INFO L435 NwaCegarLoop]: 6 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 6 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2025-02-08 02:46:46,546 INFO L436 NwaCegarLoop]: SdHoareTripleChecker [0 Valid, 6 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2025-02-08 02:46:46,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 0 states. [2025-02-08 02:46:46,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 0 to 0. [2025-02-08 02:46:46,549 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 0 states, 0 states have (on average 0.0) internal successors, (0), 0 states have internal predecessors, (0), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:46,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 0 states to 0 states and 0 transitions. [2025-02-08 02:46:46,550 INFO L78 Accepts]: Start accepts. Automaton has 0 states and 0 transitions. Word has length 9 [2025-02-08 02:46:46,550 INFO L84 Accepts]: Finished accepts. word is rejected. [2025-02-08 02:46:46,550 INFO L471 AbstractCegarLoop]: Abstraction has 0 states and 0 transitions. [2025-02-08 02:46:46,550 INFO L472 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 2 states have internal predecessors, (8), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-02-08 02:46:46,550 INFO L276 IsEmpty]: Start isEmpty. Operand 0 states and 0 transitions. [2025-02-08 02:46:46,550 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2025-02-08 02:46:46,556 INFO L782 garLoopResultBuilder]: Registering result SAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2025-02-08 02:46:46,556 WARN L453 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2025-02-08 02:46:46,559 INFO L422 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2025-02-08 02:46:46,560 INFO L343 DoubleDeckerVisitor]: Before removal of dead ends 0 states and 0 transitions. [2025-02-08 02:46:46,578 INFO L170 ceAbstractionStarter]: Computing trace abstraction results [2025-02-08 02:46:46,586 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 08.02 02:46:46 BoogieIcfgContainer [2025-02-08 02:46:46,586 INFO L131 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2025-02-08 02:46:46,587 INFO L112 PluginConnector]: ------------------------Witness Printer---------------------------- [2025-02-08 02:46:46,587 INFO L270 PluginConnector]: Initializing Witness Printer... [2025-02-08 02:46:46,587 INFO L274 PluginConnector]: Witness Printer initialized [2025-02-08 02:46:46,588 INFO L184 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 08.02 02:46:44" (3/4) ... [2025-02-08 02:46:46,590 INFO L146 WitnessPrinter]: Generating witness for correct program [2025-02-08 02:46:46,593 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure get_dma_ops [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#12 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#11 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __fswab32 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#10 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_free_iso_urbs [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __raw_spin_lock_init [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#7 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#6 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#9 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#8 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#17 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#16 [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_submit_urb [2025-02-08 02:46:46,594 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#15 [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_event [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#14 [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure INIT_LIST_HEAD [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#13 [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~X~int~X~$Pointer$~X~int~X~$Pointer$~X~int~TO~int [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_lock_interruptible_iso_mutex_of_ttusb_dec [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~TO~VOID [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_bulk_msg [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_set_interface [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure dvb_unregister_adapter [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_free_urb [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __create_pipe [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spin_unlock_irqrestore [2025-02-08 02:46:46,595 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_malloc [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_lock_interruptible [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_kill_urb [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kfree [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_unlock_iso_mutex_of_ttusb_dec [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure printk [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_start_iso_xfer [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure list_add_tail [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_send_command [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure mutex_unlock [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_error [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure list_del [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_setup_urbs [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure dvb_dmxdev_release [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __mutex_init [2025-02-08 02:46:46,596 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kzalloc [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_sync [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv_mutex_unlock_usb_mutex_of_ttusb_dec [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure kmalloc [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure __fswab16 [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure _raw_spin_lock_irqsave [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ##fun~$Pointer$~X~$Pointer$~TO~int [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ldv__builtin_expect [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_set_pids [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_set_intfdata [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_exit_usb [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_set_model [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure release_firmware [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure dvb_dmx_release [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure input_report_key [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure ttusb_dec_stop_iso_xfer [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#1 [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#0 [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure usb_alloc_urb [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure dvb_filter_pes2ts_init [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#3 [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#2 [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#5 [2025-02-08 02:46:46,597 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure #Ultimate.C_memcpy#4 [2025-02-08 02:46:46,598 INFO L385 IcfgBacktranslator]: Ignoring RootEdge to procedure spinlock_check [2025-02-08 02:46:46,613 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 216 nodes and edges [2025-02-08 02:46:46,614 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 93 nodes and edges [2025-02-08 02:46:46,615 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 45 nodes and edges [2025-02-08 02:46:46,616 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 20 nodes and edges [2025-02-08 02:46:46,617 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 9 nodes and edges [2025-02-08 02:46:46,617 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 4 nodes and edges [2025-02-08 02:46:46,618 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 2 nodes and edges [2025-02-08 02:46:46,619 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2025-02-08 02:46:46,620 INFO L919 BoogieBacktranslator]: Reduced CFG by removing 1 nodes and edges [2025-02-08 02:46:46,730 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.graphml [2025-02-08 02:46:46,730 INFO L149 WitnessManager]: Wrote witness to /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/witness.yml [2025-02-08 02:46:46,730 INFO L131 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2025-02-08 02:46:46,732 INFO L158 Benchmark]: Toolchain (without parser) took 19144.28ms. Allocated memory was 167.8MB in the beginning and 302.0MB in the end (delta: 134.2MB). Free memory was 121.9MB in the beginning and 173.5MB in the end (delta: -51.7MB). Peak memory consumption was 85.3MB. Max. memory is 16.1GB. [2025-02-08 02:46:46,732 INFO L158 Benchmark]: CDTParser took 0.91ms. Allocated memory is still 201.3MB. Free memory is still 127.2MB. There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:46:46,732 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2548.88ms. Allocated memory is still 167.8MB. Free memory was 121.9MB in the beginning and 86.3MB in the end (delta: 35.6MB). Peak memory consumption was 118.8MB. Max. memory is 16.1GB. [2025-02-08 02:46:46,733 INFO L158 Benchmark]: Boogie Procedure Inliner took 210.51ms. Allocated memory is still 167.8MB. Free memory was 86.3MB in the beginning and 65.9MB in the end (delta: 20.4MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2025-02-08 02:46:46,733 INFO L158 Benchmark]: Boogie Preprocessor took 919.95ms. Allocated memory was 167.8MB in the beginning and 302.0MB in the end (delta: 134.2MB). Free memory was 65.9MB in the beginning and 191.0MB in the end (delta: -125.1MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. [2025-02-08 02:46:46,733 INFO L158 Benchmark]: IcfgBuilder took 13073.30ms. Allocated memory is still 302.0MB. Free memory was 191.0MB in the beginning and 123.3MB in the end (delta: 67.7MB). Peak memory consumption was 144.1MB. Max. memory is 16.1GB. [2025-02-08 02:46:46,734 INFO L158 Benchmark]: TraceAbstraction took 2238.86ms. Allocated memory is still 302.0MB. Free memory was 123.3MB in the beginning and 184.9MB in the end (delta: -61.6MB). There was no memory consumed. Max. memory is 16.1GB. [2025-02-08 02:46:46,734 INFO L158 Benchmark]: Witness Printer took 142.88ms. Allocated memory is still 302.0MB. Free memory was 184.9MB in the beginning and 173.5MB in the end (delta: 11.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2025-02-08 02:46:46,735 INFO L338 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.91ms. Allocated memory is still 201.3MB. Free memory is still 127.2MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2548.88ms. Allocated memory is still 167.8MB. Free memory was 121.9MB in the beginning and 86.3MB in the end (delta: 35.6MB). Peak memory consumption was 118.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 210.51ms. Allocated memory is still 167.8MB. Free memory was 86.3MB in the beginning and 65.9MB in the end (delta: 20.4MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 919.95ms. Allocated memory was 167.8MB in the beginning and 302.0MB in the end (delta: 134.2MB). Free memory was 65.9MB in the beginning and 191.0MB in the end (delta: -125.1MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. * IcfgBuilder took 13073.30ms. Allocated memory is still 302.0MB. Free memory was 191.0MB in the beginning and 123.3MB in the end (delta: 67.7MB). Peak memory consumption was 144.1MB. Max. memory is 16.1GB. * TraceAbstraction took 2238.86ms. Allocated memory is still 302.0MB. Free memory was 123.3MB in the beginning and 184.9MB in the end (delta: -61.6MB). There was no memory consumed. Max. memory is 16.1GB. * Witness Printer took 142.88ms. Allocated memory is still 302.0MB. Free memory was 184.9MB in the beginning and 173.5MB in the end (delta: 11.4MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResultAtLocation [Line: 6103]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %1,%0": "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [6103] - GenericResultAtLocation [Line: 6111]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile (".pushsection .smp_locks,\"a\"\n.balign 4\n.long 671f - .\n.popsection\n671:\n\tlock; bts %2,%1\n\tsbb %0,%0": "=r" (oldbit), "+m" (*((long volatile *)addr)): "Ir" (nr): "memory"); [6111-6112] - GenericResultAtLocation [Line: 6119]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ ("bswapl %0": "=r" (val): "0" (val)); [6119] - GenericResultAtLocation [Line: 6179]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("1:\tud2\n.pushsection __bug_table,\"a\"\n2:\t.long 1b - 2b, %c0 - 2b\n\t.word %c1, 0\n\t.org 2b+%c2\n.popsection": : "i" ((char *)"/work/ldvuser/exper_fp/inst/current/envs/linux-3.10-rc1.tar/linux-3.10-rc1/arch/x86/include/asm/paravirt.h"), "i" (824), "i" (12UL)); [6179-6180] - GenericResultAtLocation [Line: 6185]: Unsoundness Warning Ignoring inline assembler instruction C: __asm__ volatile ("771:\n\tcall *%c2;\n772:\n.pushsection .parainstructions,\"a\"\n .balign 8 \n .quad 771b\n .byte %c1\n .byte 772b-771b\n .short %c3\n.popsection\n": "=a" (__eax): [paravirt_typenum] "i" (44UL), [paravirt_opptr] "i" (& pv_irq_ops.save_fl.func), [paravirt_clobber] "i" (1): "memory", "cc"); [6185-6187] * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - PositiveResult [Line: 8760]: a call to reach_error is unreachable For all program executions holds that a call to reach_error is unreachable at this location - StatisticsResult: Ultimate Automizer benchmark data CFG has 69 procedures, 469 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.1s, OverallIterations: 4, TraceHistogramMax: 1, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 25 SdHoareTripleChecker+Valid, 0.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 25 mSDsluCounter, 40 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 0 mSDsCounter, 0 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3 IncrementalHoareTripleChecker+Invalid, 3 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 0 mSolverCounterUnsat, 40 mSDtfsCounter, 3 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 8 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=239occurred in iteration=0, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.0s AutomataMinimizationTime, 4 MinimizatonAttempts, 0 StatesRemovedByMinimization, 0 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.3s SatisfiabilityAnalysisTime, 0.8s InterpolantComputationTime, 30 NumberOfCodeBlocks, 30 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 26 ConstructedInterpolants, 0 QuantifiedInterpolants, 62 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 4 InterpolantComputations, 4 PerfectInterpolantSequences, 0/0 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available, ConComCheckerStatistics: No data available - AllSpecificationsHoldResult: All specifications hold 1 specifications checked. All of them hold RESULT: Ultimate proved your program to be correct! [2025-02-08 02:46:46,765 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate-jdk21/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:4000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE