/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.1.25-46f3038-m [2020-07-08 13:55:40,980 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-08 13:55:40,982 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-08 13:55:40,994 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-08 13:55:40,994 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-08 13:55:40,995 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-08 13:55:40,997 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-08 13:55:40,999 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-08 13:55:41,000 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-08 13:55:41,001 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-08 13:55:41,002 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-08 13:55:41,003 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-08 13:55:41,003 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-08 13:55:41,004 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-08 13:55:41,006 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-08 13:55:41,007 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-08 13:55:41,007 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-08 13:55:41,008 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-08 13:55:41,010 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-08 13:55:41,012 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-08 13:55:41,013 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-08 13:55:41,014 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-08 13:55:41,019 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-08 13:55:41,020 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-08 13:55:41,022 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-08 13:55:41,023 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-08 13:55:41,023 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-08 13:55:41,024 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-08 13:55:41,024 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-08 13:55:41,027 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-08 13:55:41,027 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-08 13:55:41,028 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-08 13:55:41,028 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-08 13:55:41,030 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-08 13:55:41,033 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-08 13:55:41,034 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-08 13:55:41,036 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-08 13:55:41,036 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-08 13:55:41,037 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-08 13:55:41,038 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-08 13:55:41,039 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-08 13:55:41,040 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Default.epf [2020-07-08 13:55:41,062 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-08 13:55:41,062 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-08 13:55:41,064 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-08 13:55:41,064 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-08 13:55:41,065 INFO L138 SettingsManager]: * Use SBE=true [2020-07-08 13:55:41,065 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-08 13:55:41,065 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-08 13:55:41,065 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-08 13:55:41,066 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-08 13:55:41,066 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-08 13:55:41,067 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-08 13:55:41,067 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-08 13:55:41,067 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-08 13:55:41,068 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-08 13:55:41,068 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-08 13:55:41,068 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-08 13:55:41,068 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-08 13:55:41,069 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-08 13:55:41,069 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-08 13:55:41,069 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-08 13:55:41,069 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-08 13:55:41,069 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-08 13:55:41,070 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-08 13:55:41,070 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-08 13:55:41,070 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-08 13:55:41,070 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-08 13:55:41,070 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2020-07-08 13:55:41,071 INFO L138 SettingsManager]: * To the following directory=dump/ [2020-07-08 13:55:41,358 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-08 13:55:41,372 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-08 13:55:41,375 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-08 13:55:41,377 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-08 13:55:41,377 INFO L275 PluginConnector]: CDTParser initialized [2020-07-08 13:55:41,378 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-08 13:55:41,461 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/345c6f5c5/61e046591a8744aba29ed3bfe2aaf906/FLAGf72e2cef2 [2020-07-08 13:55:42,138 INFO L306 CDTParser]: Found 1 translation units. [2020-07-08 13:55:42,138 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-08 13:55:42,174 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/345c6f5c5/61e046591a8744aba29ed3bfe2aaf906/FLAGf72e2cef2 [2020-07-08 13:55:42,282 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/345c6f5c5/61e046591a8744aba29ed3bfe2aaf906 [2020-07-08 13:55:42,290 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-08 13:55:42,292 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2020-07-08 13:55:42,293 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-08 13:55:42,293 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-08 13:55:42,296 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-08 13:55:42,298 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.07 01:55:42" (1/1) ... [2020-07-08 13:55:42,300 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3565a5d4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:42, skipping insertion in model container [2020-07-08 13:55:42,301 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 08.07 01:55:42" (1/1) ... [2020-07-08 13:55:42,308 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-08 13:55:42,378 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-08 13:55:42,948 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2384] [2020-07-08 13:55:42,949 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2385-2386] [2020-07-08 13:55:43,333 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-08 13:55:43,356 INFO L203 MainTranslator]: Completed pre-run [2020-07-08 13:55:43,431 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2384] [2020-07-08 13:55:43,432 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2385-2386] [2020-07-08 13:55:43,564 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-08 13:55:43,629 INFO L208 MainTranslator]: Completed translation [2020-07-08 13:55:43,630 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43 WrapperNode [2020-07-08 13:55:43,630 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-08 13:55:43,631 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-08 13:55:43,631 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-08 13:55:43,631 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-08 13:55:43,646 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,647 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,700 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,700 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,786 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,797 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,811 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... [2020-07-08 13:55:43,830 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-08 13:55:43,833 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-08 13:55:43,833 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-08 13:55:43,833 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-08 13:55:43,835 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-08 13:55:43,909 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2020-07-08 13:55:43,909 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-08 13:55:43,910 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2020-07-08 13:55:43,910 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2020-07-08 13:55:43,910 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2020-07-08 13:55:43,910 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2020-07-08 13:55:43,911 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2020-07-08 13:55:43,911 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2020-07-08 13:55:43,911 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2020-07-08 13:55:43,912 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2020-07-08 13:55:43,912 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2020-07-08 13:55:43,912 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2020-07-08 13:55:43,913 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2020-07-08 13:55:43,914 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2020-07-08 13:55:43,915 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2020-07-08 13:55:43,915 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2020-07-08 13:55:43,915 INFO L138 BoogieDeclarations]: Found implementation of procedure input_get_drvdata [2020-07-08 13:55:43,915 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_parse [2020-07-08 13:55:43,915 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_start [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_stop [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_open [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_close [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_request [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure axff_play [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure axff_init [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_probe [2020-07-08 13:55:43,916 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_remove [2020-07-08 13:55:43,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_driver_init [2020-07-08 13:55:43,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_driver_exit [2020-07-08 13:55:43,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hid_driver_1 [2020-07-08 13:55:43,917 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2020-07-08 13:55:43,918 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2020-07-08 13:55:43,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2020-07-08 13:55:43,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags_and_return_some_page [2020-07-08 13:55:43,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_nonatomic [2020-07-08 13:55:43,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2020-07-08 13:55:43,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_unlock [2020-07-08 13:55:43,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_trylock [2020-07-08 13:55:43,919 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2020-07-08 13:55:43,919 INFO L138 BoogieDeclarations]: Found implementation of procedure __hid_register_driver [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure __hid_request [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure _dev_info [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_warn [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_connect [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_disconnect [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_open_report [2020-07-08 13:55:43,920 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_unregister_driver [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure input_ff_create_memless [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure kmem_cache_alloc [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_some_page [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2020-07-08 13:55:43,921 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2020-07-08 13:55:43,922 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2020-07-08 13:55:43,922 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2020-07-08 13:55:43,922 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2020-07-08 13:55:43,922 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2020-07-08 13:55:43,923 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2020-07-08 13:55:43,923 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2020-07-08 13:55:43,923 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2020-07-08 13:55:43,923 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2020-07-08 13:55:43,923 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc [2020-07-08 13:55:43,923 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2020-07-08 13:55:43,924 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2020-07-08 13:55:43,924 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2020-07-08 13:55:43,924 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2020-07-08 13:55:43,924 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2020-07-08 13:55:43,924 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2020-07-08 13:55:43,925 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2020-07-08 13:55:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2020-07-08 13:55:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2020-07-08 13:55:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2020-07-08 13:55:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2020-07-08 13:55:43,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hid_driver_1 [2020-07-08 13:55:43,927 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2020-07-08 13:55:43,927 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2020-07-08 13:55:43,927 INFO L130 BoogieDeclarations]: Found specification of procedure dev_warn [2020-07-08 13:55:43,928 INFO L130 BoogieDeclarations]: Found specification of procedure _dev_info [2020-07-08 13:55:43,928 INFO L130 BoogieDeclarations]: Found specification of procedure input_get_drvdata [2020-07-08 13:55:43,928 INFO L130 BoogieDeclarations]: Found specification of procedure input_ff_create_memless [2020-07-08 13:55:43,928 INFO L130 BoogieDeclarations]: Found specification of procedure __hid_register_driver [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure hid_unregister_driver [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure __hid_request [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure hid_open_report [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure hid_connect [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure hid_disconnect [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure hid_parse [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_start [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2020-07-08 13:55:43,929 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_stop [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_open [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_close [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_request [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure axff_play [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2020-07-08 13:55:43,930 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2020-07-08 13:55:43,931 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2020-07-08 13:55:43,931 INFO L130 BoogieDeclarations]: Found specification of procedure axff_init [2020-07-08 13:55:43,931 INFO L130 BoogieDeclarations]: Found specification of procedure ax_probe [2020-07-08 13:55:43,931 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2020-07-08 13:55:43,932 INFO L130 BoogieDeclarations]: Found specification of procedure ax_remove [2020-07-08 13:55:43,932 INFO L130 BoogieDeclarations]: Found specification of procedure ax_driver_init [2020-07-08 13:55:43,932 INFO L130 BoogieDeclarations]: Found specification of procedure ax_driver_exit [2020-07-08 13:55:43,932 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2020-07-08 13:55:43,932 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2020-07-08 13:55:43,933 INFO L130 BoogieDeclarations]: Found specification of procedure main [2020-07-08 13:55:43,933 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_some_page [2020-07-08 13:55:43,933 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags_and_return_some_page [2020-07-08 13:55:43,933 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_nonatomic [2020-07-08 13:55:43,934 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2020-07-08 13:55:43,934 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_unlock [2020-07-08 13:55:43,934 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_trylock [2020-07-08 13:55:43,935 INFO L130 BoogieDeclarations]: Found specification of procedure free [2020-07-08 13:55:43,935 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2020-07-08 13:55:43,935 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-08 13:55:43,935 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2020-07-08 13:55:43,935 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-08 13:55:48,977 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2020-07-08 13:55:49,939 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-08 13:55:49,939 INFO L295 CfgBuilder]: Removed 0 assume(true) statements. [2020-07-08 13:55:49,949 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.07 01:55:49 BoogieIcfgContainer [2020-07-08 13:55:49,949 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-08 13:55:49,952 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-08 13:55:49,952 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-08 13:55:49,956 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-08 13:55:49,957 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 08.07 01:55:42" (1/3) ... [2020-07-08 13:55:49,962 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@dab8b37 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.07 01:55:49, skipping insertion in model container [2020-07-08 13:55:49,963 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 08.07 01:55:43" (2/3) ... [2020-07-08 13:55:49,964 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@dab8b37 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 08.07 01:55:49, skipping insertion in model container [2020-07-08 13:55:49,965 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 08.07 01:55:49" (3/3) ... [2020-07-08 13:55:49,974 INFO L109 eAbstractionObserver]: Analyzing ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-08 13:55:49,988 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-08 13:55:49,998 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2020-07-08 13:55:50,016 INFO L251 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2020-07-08 13:55:50,055 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-08 13:55:50,055 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-08 13:55:50,055 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-08 13:55:50,056 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-08 13:55:50,056 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-08 13:55:50,056 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-08 13:55:50,056 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-08 13:55:50,056 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-08 13:55:50,085 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states. [2020-07-08 13:55:50,103 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2020-07-08 13:55:50,104 INFO L414 BasicCegarLoop]: Found error trace [2020-07-08 13:55:50,105 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-08 13:55:50,105 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-08 13:55:50,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-08 13:55:50,112 INFO L82 PathProgramCache]: Analyzing trace with hash -1545756631, now seen corresponding path program 1 times [2020-07-08 13:55:50,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-08 13:55:50,124 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13193248] [2020-07-08 13:55:50,124 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-08 13:55:50,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,095 WARN L193 SmtUtils]: Spent 324.00 ms on a formula simplification that was a NOOP. DAG size: 175 [2020-07-08 13:55:51,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,190 INFO L280 TraceCheckUtils]: 0: Hoare triple {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(31);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(212);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(32);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(212);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(25);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(37);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(77);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(9);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(9);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(212);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(29);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(29);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(14);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(17);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(52);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(16);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(6);call write~init~int(97, #t~string132.base, #t~string132.offset, 1);call write~init~int(99, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(114, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(117, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(120, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 5 + #t~string132.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(9);~ldv_state_variable_1~0 := 0;~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~ax_driver_group0~0.base, ~ax_driver_group0~0.offset := 0, 0;call ~#ax_devices~0.base, ~#ax_devices~0.offset := #Ultimate.allocOnStack(60);call write~init~int(3, ~#ax_devices~0.base, ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 2 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 4 + ~#ax_devices~0.offset, 4);call write~init~int(2050, ~#ax_devices~0.base, 8 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 12 + ~#ax_devices~0.offset, 8);call write~init~int(3, ~#ax_devices~0.base, 20 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 22 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 24 + ~#ax_devices~0.offset, 4);call write~init~int(63237, ~#ax_devices~0.base, 28 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 32 + ~#ax_devices~0.offset, 8);call write~init~int(0, ~#ax_devices~0.base, 40 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 42 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 44 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 48 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 52 + ~#ax_devices~0.offset, 8);~__mod_hid__ax_devices_device_table~0.bus := 0;~__mod_hid__ax_devices_device_table~0.group := 0;~__mod_hid__ax_devices_device_table~0.vendor := 0;~__mod_hid__ax_devices_device_table~0.product := 0;~__mod_hid__ax_devices_device_table~0.driver_data := 0;call ~#ax_driver~0.base, ~#ax_driver~0.offset := #Ultimate.allocOnStack(333);call write~init~$Pointer$(#t~string132.base, #t~string132.offset, ~#ax_driver~0.base, ~#ax_driver~0.offset, 8);call write~init~$Pointer$(~#ax_devices~0.base, ~#ax_devices~0.offset, ~#ax_driver~0.base, 8 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 16 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 24 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 32 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 36 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 40 + ~#ax_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 44 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 52 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 60 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 68 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 76 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 84 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 88 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_probe.base, #funAddr~ax_probe.offset, ~#ax_driver~0.base, 100 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_remove.base, #funAddr~ax_remove.offset, ~#ax_driver~0.base, 108 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 116 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 124 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 132 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 140 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 148 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 156 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 164 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 172 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 180 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 188 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 196 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 204 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 212 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 220 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 228 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 236 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 244 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 252 + ~#ax_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 253 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 261 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 269 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 277 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 285 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 293 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 301 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 309 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 317 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 325 + ~#ax_driver~0.offset, 8);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_spin~0 := 0; {253#true} is VALID [2020-07-08 13:55:51,190 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,191 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #568#return; {253#true} is VALID [2020-07-08 13:55:51,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,221 INFO L280 TraceCheckUtils]: 0: Hoare triple {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~1.base, ~tmp~1.offset;havoc ~tmp___0~1;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___0~1 := #t~nondet10;havoc #t~nondet10; {253#true} is VALID [2020-07-08 13:55:51,221 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume 0 != ~tmp___0~1;#res.base, #res.offset := 0, 0; {253#true} is VALID [2020-07-08 13:55:51,221 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,222 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {253#true} {253#true} #472#return; {253#true} is VALID [2020-07-08 13:55:51,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,228 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,229 INFO L275 TraceCheckUtils]: 1: Hoare quadruple {253#true} {253#true} #474#return; {253#true} is VALID [2020-07-08 13:55:51,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,236 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {253#true} is VALID [2020-07-08 13:55:51,236 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,237 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {254#false} #494#return; {254#false} is VALID [2020-07-08 13:55:51,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,254 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-08 13:55:51,254 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,254 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-08 13:55:51,255 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;havoc ~tmp~5; {253#true} is VALID [2020-07-08 13:55:51,255 INFO L263 TraceCheckUtils]: 1: Hoare triple {253#true} call #t~ret36 := hid_open_report(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-08 13:55:51,256 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-08 13:55:51,256 INFO L280 TraceCheckUtils]: 3: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,256 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-08 13:55:51,257 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;~tmp~5 := #t~ret36;havoc #t~ret36;#res := ~tmp~5; {253#true} is VALID [2020-07-08 13:55:51,257 INFO L280 TraceCheckUtils]: 6: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,257 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {253#true} {254#false} #496#return; {254#false} is VALID [2020-07-08 13:55:51,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,278 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-08 13:55:51,279 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,279 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-08 13:55:51,280 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~connect_mask := #in~connect_mask;havoc ~ret~0;havoc ~tmp~6;call #t~mem40.base, #t~mem40.offset := read~$Pointer$(~hdev.base, 7869 + ~hdev.offset, 8);call #t~mem41.base, #t~mem41.offset := read~$Pointer$(#t~mem40.base, #t~mem40.offset, 8); {253#true} is VALID [2020-07-08 13:55:51,280 INFO L263 TraceCheckUtils]: 1: Hoare triple {253#true} call #t~ret42 := ##fun~$Pointer$~TO~int(~hdev.base, ~hdev.offset, #t~mem41.base, #t~mem41.offset); {253#true} is VALID [2020-07-08 13:55:51,280 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-08 13:55:51,281 INFO L280 TraceCheckUtils]: 3: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,281 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-08 13:55:51,281 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;~tmp~6 := #t~ret42;havoc #t~ret42;havoc #t~mem41.base, #t~mem41.offset;havoc #t~mem40.base, #t~mem40.offset;~ret~0 := ~tmp~6; {253#true} is VALID [2020-07-08 13:55:51,282 INFO L280 TraceCheckUtils]: 6: Hoare triple {253#true} assume 0 != ~ret~0 || 0 == ~connect_mask % 4294967296;#res := ~ret~0; {253#true} is VALID [2020-07-08 13:55:51,282 INFO L280 TraceCheckUtils]: 7: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,283 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {253#true} {254#false} #498#return; {254#false} is VALID [2020-07-08 13:55:51,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:55:51,297 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~head.base, ~head.offset := #in~head.base, #in~head.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~head.base, ~head.offset, 8);#res := (if (#t~mem4.base + #t~mem4.offset) % 18446744073709551616 == (~head.base + ~head.offset) % 18446744073709551616 then 1 else 0);havoc #t~mem4.base, #t~mem4.offset; {253#true} is VALID [2020-07-08 13:55:51,298 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,298 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {254#false} #510#return; {254#false} is VALID [2020-07-08 13:55:51,307 INFO L263 TraceCheckUtils]: 0: Hoare triple {253#true} call ULTIMATE.init(); {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} is VALID [2020-07-08 13:55:51,307 INFO L280 TraceCheckUtils]: 1: Hoare triple {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(31);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(212);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(32);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(212);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(25);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(37);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(77);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(9);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(9);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(212);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(29);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(29);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(14);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(17);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(52);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(16);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(6);call write~init~int(97, #t~string132.base, #t~string132.offset, 1);call write~init~int(99, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(114, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(117, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(120, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 5 + #t~string132.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(9);~ldv_state_variable_1~0 := 0;~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~ax_driver_group0~0.base, ~ax_driver_group0~0.offset := 0, 0;call ~#ax_devices~0.base, ~#ax_devices~0.offset := #Ultimate.allocOnStack(60);call write~init~int(3, ~#ax_devices~0.base, ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 2 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 4 + ~#ax_devices~0.offset, 4);call write~init~int(2050, ~#ax_devices~0.base, 8 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 12 + ~#ax_devices~0.offset, 8);call write~init~int(3, ~#ax_devices~0.base, 20 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 22 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 24 + ~#ax_devices~0.offset, 4);call write~init~int(63237, ~#ax_devices~0.base, 28 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 32 + ~#ax_devices~0.offset, 8);call write~init~int(0, ~#ax_devices~0.base, 40 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 42 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 44 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 48 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 52 + ~#ax_devices~0.offset, 8);~__mod_hid__ax_devices_device_table~0.bus := 0;~__mod_hid__ax_devices_device_table~0.group := 0;~__mod_hid__ax_devices_device_table~0.vendor := 0;~__mod_hid__ax_devices_device_table~0.product := 0;~__mod_hid__ax_devices_device_table~0.driver_data := 0;call ~#ax_driver~0.base, ~#ax_driver~0.offset := #Ultimate.allocOnStack(333);call write~init~$Pointer$(#t~string132.base, #t~string132.offset, ~#ax_driver~0.base, ~#ax_driver~0.offset, 8);call write~init~$Pointer$(~#ax_devices~0.base, ~#ax_devices~0.offset, ~#ax_driver~0.base, 8 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 16 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 24 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 32 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 36 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 40 + ~#ax_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 44 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 52 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 60 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 68 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 76 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 84 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 88 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_probe.base, #funAddr~ax_probe.offset, ~#ax_driver~0.base, 100 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_remove.base, #funAddr~ax_remove.offset, ~#ax_driver~0.base, 108 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 116 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 124 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 132 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 140 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 148 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 156 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 164 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 172 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 180 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 188 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 196 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 204 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 212 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 220 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 228 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 236 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 244 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 252 + ~#ax_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 253 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 261 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 269 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 277 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 285 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 293 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 301 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 309 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 317 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 325 + ~#ax_driver~0.offset, 8);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_spin~0 := 0; {253#true} is VALID [2020-07-08 13:55:51,308 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,308 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {253#true} {253#true} #568#return; {253#true} is VALID [2020-07-08 13:55:51,309 INFO L263 TraceCheckUtils]: 4: Hoare triple {253#true} call #t~ret159 := main(); {253#true} is VALID [2020-07-08 13:55:51,309 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} havoc ~ldvarg0~0.base, ~ldvarg0~0.offset;havoc ~tmp~13.base, ~tmp~13.offset;havoc ~tmp___0~3;havoc ~tmp___1~0;havoc ~tmp___2~0; {253#true} is VALID [2020-07-08 13:55:51,311 INFO L263 TraceCheckUtils]: 6: Hoare triple {253#true} call #t~ret136.base, #t~ret136.offset := ldv_zalloc(24); {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} is VALID [2020-07-08 13:55:51,311 INFO L280 TraceCheckUtils]: 7: Hoare triple {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~1.base, ~tmp~1.offset;havoc ~tmp___0~1;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___0~1 := #t~nondet10;havoc #t~nondet10; {253#true} is VALID [2020-07-08 13:55:51,312 INFO L280 TraceCheckUtils]: 8: Hoare triple {253#true} assume 0 != ~tmp___0~1;#res.base, #res.offset := 0, 0; {253#true} is VALID [2020-07-08 13:55:51,312 INFO L280 TraceCheckUtils]: 9: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,313 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {253#true} {253#true} #472#return; {253#true} is VALID [2020-07-08 13:55:51,313 INFO L280 TraceCheckUtils]: 11: Hoare triple {253#true} ~tmp~13.base, ~tmp~13.offset := #t~ret136.base, #t~ret136.offset;havoc #t~ret136.base, #t~ret136.offset;~ldvarg0~0.base, ~ldvarg0~0.offset := ~tmp~13.base, ~tmp~13.offset; {253#true} is VALID [2020-07-08 13:55:51,313 INFO L263 TraceCheckUtils]: 12: Hoare triple {253#true} call ldv_initialize(); {253#true} is VALID [2020-07-08 13:55:51,314 INFO L280 TraceCheckUtils]: 13: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,314 INFO L275 TraceCheckUtils]: 14: Hoare quadruple {253#true} {253#true} #474#return; {253#true} is VALID [2020-07-08 13:55:51,315 INFO L280 TraceCheckUtils]: 15: Hoare triple {253#true} ~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-08 13:55:51,317 INFO L280 TraceCheckUtils]: 16: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~tmp___0~3 := #t~nondet137;havoc #t~nondet137;#t~switch138 := 0 == ~tmp___0~3; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-08 13:55:51,318 INFO L280 TraceCheckUtils]: 17: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume #t~switch138; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-08 13:55:51,319 INFO L280 TraceCheckUtils]: 18: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume 0 != ~ldv_state_variable_1~0;assume -2147483648 <= #t~nondet139 && #t~nondet139 <= 2147483647;~tmp___1~0 := #t~nondet139;havoc #t~nondet139;#t~switch140 := 0 == ~tmp___1~0; {254#false} is VALID [2020-07-08 13:55:51,319 INFO L280 TraceCheckUtils]: 19: Hoare triple {254#false} assume #t~switch140; {254#false} is VALID [2020-07-08 13:55:51,320 INFO L280 TraceCheckUtils]: 20: Hoare triple {254#false} assume 1 == ~ldv_state_variable_1~0; {254#false} is VALID [2020-07-08 13:55:51,320 INFO L263 TraceCheckUtils]: 21: Hoare triple {254#false} call #t~ret141 := ax_probe(~ax_driver_group0~0.base, ~ax_driver_group0~0.offset, ~ldvarg0~0.base, ~ldvarg0~0.offset); {254#false} is VALID [2020-07-08 13:55:51,320 INFO L280 TraceCheckUtils]: 22: Hoare triple {254#false} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;havoc ~error~1;call ~#descriptor~0.base, ~#descriptor~0.offset := #Ultimate.allocOnStack(37);havoc ~tmp~10;call write~$Pointer$(#t~string112.base, #t~string112.offset, ~#descriptor~0.base, ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string113.base, #t~string113.offset, ~#descriptor~0.base, 8 + ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string114.base, #t~string114.offset, ~#descriptor~0.base, 16 + ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string115.base, #t~string115.offset, ~#descriptor~0.base, 24 + ~#descriptor~0.offset, 8);call write~int(162, ~#descriptor~0.base, 32 + ~#descriptor~0.offset, 4);call write~int(0, ~#descriptor~0.base, 36 + ~#descriptor~0.offset, 1);call #t~mem116 := read~int(~#descriptor~0.base, 36 + ~#descriptor~0.offset, 1); {254#false} is VALID [2020-07-08 13:55:51,321 INFO L263 TraceCheckUtils]: 23: Hoare triple {254#false} call #t~ret117 := ldv__builtin_expect(~bitwiseAnd(#t~mem116 % 256, 1), 0); {253#true} is VALID [2020-07-08 13:55:51,321 INFO L280 TraceCheckUtils]: 24: Hoare triple {253#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {253#true} is VALID [2020-07-08 13:55:51,322 INFO L280 TraceCheckUtils]: 25: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,322 INFO L275 TraceCheckUtils]: 26: Hoare quadruple {253#true} {254#false} #494#return; {254#false} is VALID [2020-07-08 13:55:51,322 INFO L280 TraceCheckUtils]: 27: Hoare triple {254#false} assume -9223372036854775808 <= #t~ret117 && #t~ret117 <= 9223372036854775807;~tmp~10 := #t~ret117;havoc #t~ret117;havoc #t~mem116; {254#false} is VALID [2020-07-08 13:55:51,323 INFO L280 TraceCheckUtils]: 28: Hoare triple {254#false} assume 0 != ~tmp~10;havoc #t~nondet118; {254#false} is VALID [2020-07-08 13:55:51,323 INFO L263 TraceCheckUtils]: 29: Hoare triple {254#false} call #t~ret120 := hid_parse(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-08 13:55:51,323 INFO L280 TraceCheckUtils]: 30: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;havoc ~tmp~5; {253#true} is VALID [2020-07-08 13:55:51,324 INFO L263 TraceCheckUtils]: 31: Hoare triple {253#true} call #t~ret36 := hid_open_report(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-08 13:55:51,324 INFO L280 TraceCheckUtils]: 32: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-08 13:55:51,324 INFO L280 TraceCheckUtils]: 33: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,325 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-08 13:55:51,325 INFO L280 TraceCheckUtils]: 35: Hoare triple {253#true} assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;~tmp~5 := #t~ret36;havoc #t~ret36;#res := ~tmp~5; {253#true} is VALID [2020-07-08 13:55:51,326 INFO L280 TraceCheckUtils]: 36: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,326 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {253#true} {254#false} #496#return; {254#false} is VALID [2020-07-08 13:55:51,326 INFO L280 TraceCheckUtils]: 38: Hoare triple {254#false} assume -2147483648 <= #t~ret120 && #t~ret120 <= 2147483647;~error~1 := #t~ret120;havoc #t~ret120; {254#false} is VALID [2020-07-08 13:55:51,327 INFO L280 TraceCheckUtils]: 39: Hoare triple {254#false} assume !(0 != ~error~1); {254#false} is VALID [2020-07-08 13:55:51,327 INFO L263 TraceCheckUtils]: 40: Hoare triple {254#false} call #t~ret123 := hid_hw_start(~hdev.base, ~hdev.offset, 13); {253#true} is VALID [2020-07-08 13:55:51,327 INFO L280 TraceCheckUtils]: 41: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~connect_mask := #in~connect_mask;havoc ~ret~0;havoc ~tmp~6;call #t~mem40.base, #t~mem40.offset := read~$Pointer$(~hdev.base, 7869 + ~hdev.offset, 8);call #t~mem41.base, #t~mem41.offset := read~$Pointer$(#t~mem40.base, #t~mem40.offset, 8); {253#true} is VALID [2020-07-08 13:55:51,328 INFO L263 TraceCheckUtils]: 42: Hoare triple {253#true} call #t~ret42 := ##fun~$Pointer$~TO~int(~hdev.base, ~hdev.offset, #t~mem41.base, #t~mem41.offset); {253#true} is VALID [2020-07-08 13:55:51,328 INFO L280 TraceCheckUtils]: 43: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-08 13:55:51,329 INFO L280 TraceCheckUtils]: 44: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,329 INFO L275 TraceCheckUtils]: 45: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-08 13:55:51,329 INFO L280 TraceCheckUtils]: 46: Hoare triple {253#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;~tmp~6 := #t~ret42;havoc #t~ret42;havoc #t~mem41.base, #t~mem41.offset;havoc #t~mem40.base, #t~mem40.offset;~ret~0 := ~tmp~6; {253#true} is VALID [2020-07-08 13:55:51,329 INFO L280 TraceCheckUtils]: 47: Hoare triple {253#true} assume 0 != ~ret~0 || 0 == ~connect_mask % 4294967296;#res := ~ret~0; {253#true} is VALID [2020-07-08 13:55:51,330 INFO L280 TraceCheckUtils]: 48: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,330 INFO L275 TraceCheckUtils]: 49: Hoare quadruple {253#true} {254#false} #498#return; {254#false} is VALID [2020-07-08 13:55:51,330 INFO L280 TraceCheckUtils]: 50: Hoare triple {254#false} assume -2147483648 <= #t~ret123 && #t~ret123 <= 2147483647;~error~1 := #t~ret123;havoc #t~ret123; {254#false} is VALID [2020-07-08 13:55:51,331 INFO L280 TraceCheckUtils]: 51: Hoare triple {254#false} assume !(0 != ~error~1); {254#false} is VALID [2020-07-08 13:55:51,331 INFO L263 TraceCheckUtils]: 52: Hoare triple {254#false} call #t~ret126 := axff_init(~hdev.base, ~hdev.offset); {254#false} is VALID [2020-07-08 13:55:51,331 INFO L280 TraceCheckUtils]: 53: Hoare triple {254#false} ~hid.base, ~hid.offset := #in~hid.base, #in~hid.offset;havoc ~axff~1.base, ~axff~1.offset;havoc ~report~1.base, ~report~1.offset;havoc ~hidinput~0.base, ~hidinput~0.offset;havoc ~__mptr~0.base, ~__mptr~0.offset;havoc ~report_list~0.base, ~report_list~0.offset;havoc ~dev~0.base, ~dev~0.offset;havoc ~field_count~1;havoc ~i~1;havoc ~j~1;havoc ~error~0;havoc ~tmp~9;havoc ~__mptr___0~0.base, ~__mptr___0~0.offset;havoc ~tmp___0~2.base, ~tmp___0~2.offset;call #t~mem92.base, #t~mem92.offset := read~$Pointer$(~hid.base, 7890 + ~hid.offset, 8);~__mptr~0.base, ~__mptr~0.offset := #t~mem92.base, #t~mem92.offset;havoc #t~mem92.base, #t~mem92.offset;~hidinput~0.base, ~hidinput~0.offset := ~__mptr~0.base, ~__mptr~0.offset;~report_list~0.base, ~report_list~0.offset := ~hid.base, 2140 + ~hid.offset;call #t~mem93.base, #t~mem93.offset := read~$Pointer$(~hidinput~0.base, 24 + ~hidinput~0.offset, 8);~dev~0.base, ~dev~0.offset := #t~mem93.base, #t~mem93.offset;havoc #t~mem93.base, #t~mem93.offset;~field_count~1 := 0; {254#false} is VALID [2020-07-08 13:55:51,332 INFO L263 TraceCheckUtils]: 54: Hoare triple {254#false} call #t~ret94 := list_empty(~report_list~0.base, ~report_list~0.offset); {253#true} is VALID [2020-07-08 13:55:51,332 INFO L280 TraceCheckUtils]: 55: Hoare triple {253#true} ~head.base, ~head.offset := #in~head.base, #in~head.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~head.base, ~head.offset, 8);#res := (if (#t~mem4.base + #t~mem4.offset) % 18446744073709551616 == (~head.base + ~head.offset) % 18446744073709551616 then 1 else 0);havoc #t~mem4.base, #t~mem4.offset; {253#true} is VALID [2020-07-08 13:55:51,332 INFO L280 TraceCheckUtils]: 56: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-08 13:55:51,333 INFO L275 TraceCheckUtils]: 57: Hoare quadruple {253#true} {254#false} #510#return; {254#false} is VALID [2020-07-08 13:55:51,333 INFO L280 TraceCheckUtils]: 58: Hoare triple {254#false} assume -2147483648 <= #t~ret94 && #t~ret94 <= 2147483647;~tmp~9 := #t~ret94;havoc #t~ret94; {254#false} is VALID [2020-07-08 13:55:51,333 INFO L280 TraceCheckUtils]: 59: Hoare triple {254#false} assume !(0 != ~tmp~9);call #t~mem97.base, #t~mem97.offset := read~$Pointer$(~report_list~0.base, ~report_list~0.offset, 8);~__mptr___0~0.base, ~__mptr___0~0.offset := #t~mem97.base, #t~mem97.offset;havoc #t~mem97.base, #t~mem97.offset;~report~1.base, ~report~1.offset := ~__mptr___0~0.base, ~__mptr___0~0.offset;~i~1 := 0; {254#false} is VALID [2020-07-08 13:55:51,334 INFO L280 TraceCheckUtils]: 60: Hoare triple {254#false} call #t~mem102 := read~int(~report~1.base, 2072 + ~report~1.offset, 4); {254#false} is VALID [2020-07-08 13:55:51,334 INFO L280 TraceCheckUtils]: 61: Hoare triple {254#false} assume !(~i~1 % 4294967296 < #t~mem102 % 4294967296);havoc #t~mem102;#t~short104 := ~field_count~1 <= 3; {254#false} is VALID [2020-07-08 13:55:51,334 INFO L280 TraceCheckUtils]: 62: Hoare triple {254#false} assume #t~short104;call #t~mem103 := read~int(~hid.base, 52 + ~hid.offset, 4);#t~short104 := 63237 != #t~mem103 % 4294967296; {254#false} is VALID [2020-07-08 13:55:51,335 INFO L280 TraceCheckUtils]: 63: Hoare triple {254#false} assume !#t~short104;havoc #t~short104;havoc #t~mem103; {254#false} is VALID [2020-07-08 13:55:51,335 INFO L263 TraceCheckUtils]: 64: Hoare triple {254#false} call #t~ret107.base, #t~ret107.offset := kzalloc(8, 208); {254#false} is VALID [2020-07-08 13:55:51,335 INFO L280 TraceCheckUtils]: 65: Hoare triple {254#false} ~size := #in~size;~flags := #in~flags; {254#false} is VALID [2020-07-08 13:55:51,336 INFO L263 TraceCheckUtils]: 66: Hoare triple {254#false} call ldv_check_alloc_flags(~flags); {254#false} is VALID [2020-07-08 13:55:51,336 INFO L280 TraceCheckUtils]: 67: Hoare triple {254#false} ~flags := #in~flags; {254#false} is VALID [2020-07-08 13:55:51,336 INFO L280 TraceCheckUtils]: 68: Hoare triple {254#false} assume !(0 == ~ldv_spin~0 || 0 == ~bitwiseAnd(~flags, 16) % 4294967296); {254#false} is VALID [2020-07-08 13:55:51,336 INFO L263 TraceCheckUtils]: 69: Hoare triple {254#false} call ldv_error(); {254#false} is VALID [2020-07-08 13:55:51,337 INFO L280 TraceCheckUtils]: 70: Hoare triple {254#false} assume !false; {254#false} is VALID [2020-07-08 13:55:51,354 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-08 13:55:51,355 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13193248] [2020-07-08 13:55:51,356 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-08 13:55:51,357 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-08 13:55:51,358 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [374661290] [2020-07-08 13:55:51,366 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2020-07-08 13:55:51,373 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-08 13:55:51,377 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-08 13:55:51,533 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-08 13:55:51,533 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-08 13:55:51,534 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-08 13:55:51,546 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-08 13:55:51,547 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-08 13:55:51,550 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 5 states. [2020-07-08 13:55:51,914 WARN L193 SmtUtils]: Spent 277.00 ms on a formula simplification that was a NOOP. DAG size: 178 [2020-07-08 13:55:52,535 WARN L193 SmtUtils]: Spent 245.00 ms on a formula simplification that was a NOOP. DAG size: 180 [2020-07-08 13:55:53,220 WARN L193 SmtUtils]: Spent 244.00 ms on a formula simplification that was a NOOP. DAG size: 177 [2020-07-08 13:56:02,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-08 13:56:02,571 INFO L93 Difference]: Finished difference Result 564 states and 711 transitions. [2020-07-08 13:56:02,571 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-08 13:56:02,571 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2020-07-08 13:56:02,572 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-08 13:56:02,573 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-08 13:56:02,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 711 transitions. [2020-07-08 13:56:02,610 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-08 13:56:02,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 711 transitions. [2020-07-08 13:56:02,637 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 711 transitions. [2020-07-08 13:56:04,677 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 711 edges. 711 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-08 13:56:04,721 INFO L225 Difference]: With dead ends: 564 [2020-07-08 13:56:04,722 INFO L226 Difference]: Without dead ends: 286 [2020-07-08 13:56:04,728 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 1.4s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-08 13:56:04,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2020-07-08 13:56:06,171 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 214. [2020-07-08 13:56:06,171 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-08 13:56:06,172 INFO L82 GeneralOperation]: Start isEquivalent. First operand 286 states. Second operand 214 states. [2020-07-08 13:56:06,173 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 214 states. [2020-07-08 13:56:06,173 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 214 states. [2020-07-08 13:56:06,191 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-08 13:56:06,191 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2020-07-08 13:56:06,192 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 355 transitions. [2020-07-08 13:56:06,195 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-08 13:56:06,196 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-08 13:56:06,196 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 286 states. [2020-07-08 13:56:06,196 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 286 states. [2020-07-08 13:56:06,212 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-08 13:56:06,213 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2020-07-08 13:56:06,213 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 355 transitions. [2020-07-08 13:56:06,215 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-08 13:56:06,216 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-08 13:56:06,216 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-08 13:56:06,216 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-08 13:56:06,216 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2020-07-08 13:56:06,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 249 transitions. [2020-07-08 13:56:06,228 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 249 transitions. Word has length 71 [2020-07-08 13:56:06,229 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-08 13:56:06,229 INFO L479 AbstractCegarLoop]: Abstraction has 214 states and 249 transitions. [2020-07-08 13:56:06,229 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-08 13:56:06,229 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 249 transitions. [2020-07-08 13:56:06,232 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2020-07-08 13:56:06,233 INFO L414 BasicCegarLoop]: Found error trace [2020-07-08 13:56:06,233 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-08 13:56:06,234 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-08 13:56:06,234 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-08 13:56:06,234 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-08 13:56:06,234 INFO L82 PathProgramCache]: Analyzing trace with hash 345320668, now seen corresponding path program 1 times [2020-07-08 13:56:06,234 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-08 13:56:06,235 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [735413142] [2020-07-08 13:56:06,235 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-08 13:56:06,336 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-08 13:56:06,348 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-08 13:56:06,349 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError at de.uni_freiburg.informatik.ultimate.smtinterpol.proof.FixResolutionProof.fix(FixResolutionProof.java:191) at de.uni_freiburg.informatik.ultimate.smtinterpol.proof.ProofTermGenerator.convert(ProofTermGenerator.java:150) at de.uni_freiburg.informatik.ultimate.smtinterpol.smtlib2.SMTInterpol.getProof(SMTInterpol.java:799) at de.uni_freiburg.informatik.ultimate.smtinterpol.smtlib2.SMTInterpol.getInterpolants(SMTInterpol.java:883) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.getInterpolants(NoopScript.java:385) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.getInterpolants(WrapperScript.java:332) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.getInterpolants(WrapperScript.java:332) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.ManagedScript.getInterpolants(ManagedScript.java:191) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.NestedInterpolantsBuilder.computeCraigInterpolants(NestedInterpolantsBuilder.java:285) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.NestedInterpolantsBuilder.(NestedInterpolantsBuilder.java:166) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolantsRecursive(InterpolatingTraceCheckCraig.java:337) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolants(InterpolatingTraceCheckCraig.java:239) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.(InterpolatingTraceCheckCraig.java:108) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleCraig.construct(IpTcStrategyModuleCraig.java:79) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleCraig.construct(IpTcStrategyModuleCraig.java:1) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.getOrConstruct(IpTcStrategyModuleBase.java:101) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.isCorrect(IpTcStrategyModuleBase.java:57) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.checkFeasibility(AutomatonFreeRefinementEngine.java:242) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.executeStrategy(AutomatonFreeRefinementEngine.java:166) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.(AutomatonFreeRefinementEngine.java:85) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:75) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:508) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterateInternal(AbstractCegarLoop.java:436) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:370) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResult.iterate(CegarLoopResult.java:142) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.iterateNew(TraceAbstractionStarter.java:334) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:175) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:127) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:120) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:317) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2020-07-08 13:56:06,355 INFO L168 Benchmark]: Toolchain (without parser) took 24063.17 ms. Allocated memory was 144.7 MB in the beginning and 640.7 MB in the end (delta: 496.0 MB). Free memory was 98.0 MB in the beginning and 412.0 MB in the end (delta: -314.1 MB). Peak memory consumption was 181.9 MB. Max. memory is 7.1 GB. [2020-07-08 13:56:06,357 INFO L168 Benchmark]: CDTParser took 0.21 ms. Allocated memory is still 144.7 MB. Free memory was 121.0 MB in the beginning and 120.8 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. [2020-07-08 13:56:06,359 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1337.61 ms. Allocated memory was 144.7 MB in the beginning and 204.5 MB in the end (delta: 59.8 MB). Free memory was 97.8 MB in the beginning and 132.0 MB in the end (delta: -34.2 MB). Peak memory consumption was 33.5 MB. Max. memory is 7.1 GB. [2020-07-08 13:56:06,368 INFO L168 Benchmark]: Boogie Preprocessor took 201.32 ms. Allocated memory is still 204.5 MB. Free memory was 132.0 MB in the beginning and 121.4 MB in the end (delta: 10.6 MB). Peak memory consumption was 10.6 MB. Max. memory is 7.1 GB. [2020-07-08 13:56:06,369 INFO L168 Benchmark]: RCFGBuilder took 6116.50 ms. Allocated memory was 204.5 MB in the beginning and 404.2 MB in the end (delta: 199.8 MB). Free memory was 121.4 MB in the beginning and 252.2 MB in the end (delta: -130.8 MB). Peak memory consumption was 184.9 MB. Max. memory is 7.1 GB. [2020-07-08 13:56:06,370 INFO L168 Benchmark]: TraceAbstraction took 16400.72 ms. Allocated memory was 404.2 MB in the beginning and 640.7 MB in the end (delta: 236.5 MB). Free memory was 252.2 MB in the beginning and 412.0 MB in the end (delta: -159.9 MB). Peak memory consumption was 76.6 MB. Max. memory is 7.1 GB. [2020-07-08 13:56:06,380 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.21 ms. Allocated memory is still 144.7 MB. Free memory was 121.0 MB in the beginning and 120.8 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1337.61 ms. Allocated memory was 144.7 MB in the beginning and 204.5 MB in the end (delta: 59.8 MB). Free memory was 97.8 MB in the beginning and 132.0 MB in the end (delta: -34.2 MB). Peak memory consumption was 33.5 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 201.32 ms. Allocated memory is still 204.5 MB. Free memory was 132.0 MB in the beginning and 121.4 MB in the end (delta: 10.6 MB). Peak memory consumption was 10.6 MB. Max. memory is 7.1 GB. * RCFGBuilder took 6116.50 ms. Allocated memory was 204.5 MB in the beginning and 404.2 MB in the end (delta: 199.8 MB). Free memory was 121.4 MB in the beginning and 252.2 MB in the end (delta: -130.8 MB). Peak memory consumption was 184.9 MB. Max. memory is 7.1 GB. * TraceAbstraction took 16400.72 ms. Allocated memory was 404.2 MB in the beginning and 640.7 MB in the end (delta: 236.5 MB). Free memory was 252.2 MB in the beginning and 412.0 MB in the end (delta: -159.9 MB). Peak memory consumption was 76.6 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: AssertionError: null de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: null: de.uni_freiburg.informatik.ultimate.smtinterpol.proof.FixResolutionProof.fix(FixResolutionProof.java:191) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...