/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.1.25-8fc6572 [2020-07-10 16:36:50,633 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-10 16:36:50,635 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-10 16:36:50,648 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-10 16:36:50,649 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-10 16:36:50,650 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-10 16:36:50,651 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-10 16:36:50,653 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-10 16:36:50,655 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-10 16:36:50,656 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-10 16:36:50,657 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-10 16:36:50,658 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-10 16:36:50,658 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-10 16:36:50,659 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-10 16:36:50,660 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-10 16:36:50,661 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-10 16:36:50,662 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-10 16:36:50,663 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-10 16:36:50,665 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-10 16:36:50,667 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-10 16:36:50,669 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-10 16:36:50,670 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-10 16:36:50,671 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-10 16:36:50,672 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-10 16:36:50,674 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-10 16:36:50,674 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-10 16:36:50,674 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-10 16:36:50,675 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-10 16:36:50,676 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-10 16:36:50,677 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-10 16:36:50,677 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-10 16:36:50,678 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-10 16:36:50,679 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-10 16:36:50,679 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-10 16:36:50,680 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-10 16:36:50,681 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-10 16:36:50,681 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-10 16:36:50,681 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-10 16:36:50,682 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-10 16:36:50,683 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-10 16:36:50,683 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-10 16:36:50,684 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Default.epf [2020-07-10 16:36:50,699 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-10 16:36:50,700 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-10 16:36:50,701 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-10 16:36:50,701 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-10 16:36:50,702 INFO L138 SettingsManager]: * Use SBE=true [2020-07-10 16:36:50,702 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-10 16:36:50,702 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-10 16:36:50,702 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-10 16:36:50,703 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-10 16:36:50,703 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-10 16:36:50,703 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-10 16:36:50,703 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-10 16:36:50,703 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-10 16:36:50,704 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-10 16:36:50,704 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-10 16:36:50,704 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-10 16:36:50,704 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-10 16:36:50,704 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-10 16:36:50,705 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-10 16:36:50,705 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-10 16:36:50,705 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-10 16:36:50,705 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-10 16:36:50,706 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-10 16:36:50,706 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-10 16:36:50,706 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-10 16:36:50,706 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-10 16:36:50,706 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2020-07-10 16:36:50,707 INFO L138 SettingsManager]: * To the following directory=dump/ [2020-07-10 16:36:51,011 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-10 16:36:51,022 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-10 16:36:51,025 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-10 16:36:51,027 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-10 16:36:51,028 INFO L275 PluginConnector]: CDTParser initialized [2020-07-10 16:36:51,028 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-10 16:36:51,116 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/376485f44/ec73e4e631b24abfbc44c534f3e6a515/FLAG81b4ddaf1 [2020-07-10 16:36:51,836 INFO L306 CDTParser]: Found 1 translation units. [2020-07-10 16:36:51,837 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-10 16:36:51,868 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/376485f44/ec73e4e631b24abfbc44c534f3e6a515/FLAG81b4ddaf1 [2020-07-10 16:36:51,960 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/376485f44/ec73e4e631b24abfbc44c534f3e6a515 [2020-07-10 16:36:51,969 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-10 16:36:51,971 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2020-07-10 16:36:51,972 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-10 16:36:51,972 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-10 16:36:51,976 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-10 16:36:51,977 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.07 04:36:51" (1/1) ... [2020-07-10 16:36:51,980 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3168b03b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:51, skipping insertion in model container [2020-07-10 16:36:51,980 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 10.07 04:36:51" (1/1) ... [2020-07-10 16:36:51,988 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-10 16:36:52,056 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-10 16:36:52,629 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2384] [2020-07-10 16:36:52,630 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2385-2386] [2020-07-10 16:36:53,133 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-10 16:36:53,157 INFO L203 MainTranslator]: Completed pre-run [2020-07-10 16:36:53,222 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2384] [2020-07-10 16:36:53,223 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2385-2386] [2020-07-10 16:36:53,347 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-10 16:36:53,409 INFO L208 MainTranslator]: Completed translation [2020-07-10 16:36:53,410 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53 WrapperNode [2020-07-10 16:36:53,410 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-10 16:36:53,411 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-10 16:36:53,411 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-10 16:36:53,412 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-10 16:36:53,428 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,428 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,484 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,488 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,568 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,574 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,581 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... [2020-07-10 16:36:53,593 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-10 16:36:53,594 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-10 16:36:53,594 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-10 16:36:53,594 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-10 16:36:53,595 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-10 16:36:53,670 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2020-07-10 16:36:53,670 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-10 16:36:53,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2020-07-10 16:36:53,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2020-07-10 16:36:53,671 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2020-07-10 16:36:53,672 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2020-07-10 16:36:53,672 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2020-07-10 16:36:53,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2020-07-10 16:36:53,672 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2020-07-10 16:36:53,673 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2020-07-10 16:36:53,673 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2020-07-10 16:36:53,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2020-07-10 16:36:53,674 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2020-07-10 16:36:53,676 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2020-07-10 16:36:53,677 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2020-07-10 16:36:53,677 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2020-07-10 16:36:53,677 INFO L138 BoogieDeclarations]: Found implementation of procedure input_get_drvdata [2020-07-10 16:36:53,678 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_parse [2020-07-10 16:36:53,678 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_start [2020-07-10 16:36:53,678 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_stop [2020-07-10 16:36:53,678 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_open [2020-07-10 16:36:53,678 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_close [2020-07-10 16:36:53,680 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_request [2020-07-10 16:36:53,680 INFO L138 BoogieDeclarations]: Found implementation of procedure axff_play [2020-07-10 16:36:53,680 INFO L138 BoogieDeclarations]: Found implementation of procedure axff_init [2020-07-10 16:36:53,681 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_probe [2020-07-10 16:36:53,681 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_remove [2020-07-10 16:36:53,681 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_driver_init [2020-07-10 16:36:53,682 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_driver_exit [2020-07-10 16:36:53,682 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hid_driver_1 [2020-07-10 16:36:53,682 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2020-07-10 16:36:53,682 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2020-07-10 16:36:53,682 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2020-07-10 16:36:53,682 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags_and_return_some_page [2020-07-10 16:36:53,683 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_nonatomic [2020-07-10 16:36:53,683 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2020-07-10 16:36:53,683 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_unlock [2020-07-10 16:36:53,683 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_trylock [2020-07-10 16:36:53,683 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2020-07-10 16:36:53,684 INFO L138 BoogieDeclarations]: Found implementation of procedure __hid_register_driver [2020-07-10 16:36:53,684 INFO L138 BoogieDeclarations]: Found implementation of procedure __hid_request [2020-07-10 16:36:53,684 INFO L138 BoogieDeclarations]: Found implementation of procedure _dev_info [2020-07-10 16:36:53,685 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2020-07-10 16:36:53,685 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_warn [2020-07-10 16:36:53,685 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_connect [2020-07-10 16:36:53,685 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_disconnect [2020-07-10 16:36:53,685 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_open_report [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_unregister_driver [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure input_ff_create_memless [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure kmem_cache_alloc [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_some_page [2020-07-10 16:36:53,686 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2020-07-10 16:36:53,687 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2020-07-10 16:36:53,687 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2020-07-10 16:36:53,687 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2020-07-10 16:36:53,687 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2020-07-10 16:36:53,687 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2020-07-10 16:36:53,688 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2020-07-10 16:36:53,688 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2020-07-10 16:36:53,688 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2020-07-10 16:36:53,688 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2020-07-10 16:36:53,688 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2020-07-10 16:36:53,688 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc [2020-07-10 16:36:53,689 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2020-07-10 16:36:53,689 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2020-07-10 16:36:53,689 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2020-07-10 16:36:53,689 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2020-07-10 16:36:53,689 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2020-07-10 16:36:53,690 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2020-07-10 16:36:53,690 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2020-07-10 16:36:53,690 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2020-07-10 16:36:53,690 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2020-07-10 16:36:53,691 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2020-07-10 16:36:53,691 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2020-07-10 16:36:53,691 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2020-07-10 16:36:53,691 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2020-07-10 16:36:53,691 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2020-07-10 16:36:53,691 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2020-07-10 16:36:53,692 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2020-07-10 16:36:53,692 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2020-07-10 16:36:53,692 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hid_driver_1 [2020-07-10 16:36:53,692 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2020-07-10 16:36:53,693 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2020-07-10 16:36:53,693 INFO L130 BoogieDeclarations]: Found specification of procedure dev_warn [2020-07-10 16:36:53,693 INFO L130 BoogieDeclarations]: Found specification of procedure _dev_info [2020-07-10 16:36:53,693 INFO L130 BoogieDeclarations]: Found specification of procedure input_get_drvdata [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure input_ff_create_memless [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure __hid_register_driver [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure hid_unregister_driver [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure __hid_request [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure hid_open_report [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure hid_connect [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure hid_disconnect [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure hid_parse [2020-07-10 16:36:53,694 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_start [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_stop [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_open [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_close [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_request [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure axff_play [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2020-07-10 16:36:53,695 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2020-07-10 16:36:53,696 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2020-07-10 16:36:53,696 INFO L130 BoogieDeclarations]: Found specification of procedure axff_init [2020-07-10 16:36:53,696 INFO L130 BoogieDeclarations]: Found specification of procedure ax_probe [2020-07-10 16:36:53,696 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2020-07-10 16:36:53,696 INFO L130 BoogieDeclarations]: Found specification of procedure ax_remove [2020-07-10 16:36:53,697 INFO L130 BoogieDeclarations]: Found specification of procedure ax_driver_init [2020-07-10 16:36:53,697 INFO L130 BoogieDeclarations]: Found specification of procedure ax_driver_exit [2020-07-10 16:36:53,697 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2020-07-10 16:36:53,697 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2020-07-10 16:36:53,698 INFO L130 BoogieDeclarations]: Found specification of procedure main [2020-07-10 16:36:53,698 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_some_page [2020-07-10 16:36:53,698 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags_and_return_some_page [2020-07-10 16:36:53,698 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_nonatomic [2020-07-10 16:36:53,699 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2020-07-10 16:36:53,700 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_unlock [2020-07-10 16:36:53,700 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_trylock [2020-07-10 16:36:53,700 INFO L130 BoogieDeclarations]: Found specification of procedure free [2020-07-10 16:36:53,700 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2020-07-10 16:36:53,700 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-10 16:36:53,700 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2020-07-10 16:36:53,701 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-10 16:36:58,586 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2020-07-10 16:36:59,472 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-10 16:36:59,473 INFO L295 CfgBuilder]: Removed 0 assume(true) statements. [2020-07-10 16:36:59,479 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.07 04:36:59 BoogieIcfgContainer [2020-07-10 16:36:59,479 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-10 16:36:59,480 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-10 16:36:59,481 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-10 16:36:59,484 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-10 16:36:59,485 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 10.07 04:36:51" (1/3) ... [2020-07-10 16:36:59,485 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3d592491 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.07 04:36:59, skipping insertion in model container [2020-07-10 16:36:59,486 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 10.07 04:36:53" (2/3) ... [2020-07-10 16:36:59,486 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3d592491 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 10.07 04:36:59, skipping insertion in model container [2020-07-10 16:36:59,486 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 10.07 04:36:59" (3/3) ... [2020-07-10 16:36:59,488 INFO L109 eAbstractionObserver]: Analyzing ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-10 16:36:59,500 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-10 16:36:59,509 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2020-07-10 16:36:59,525 INFO L251 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2020-07-10 16:36:59,553 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-10 16:36:59,554 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-10 16:36:59,554 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-10 16:36:59,554 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-10 16:36:59,554 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-10 16:36:59,554 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-10 16:36:59,554 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-10 16:36:59,555 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-10 16:36:59,580 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states. [2020-07-10 16:36:59,593 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2020-07-10 16:36:59,593 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 16:36:59,594 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 16:36:59,595 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 16:36:59,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 16:36:59,602 INFO L82 PathProgramCache]: Analyzing trace with hash -1545756631, now seen corresponding path program 1 times [2020-07-10 16:36:59,611 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 16:36:59,612 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [260890436] [2020-07-10 16:36:59,612 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 16:36:59,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,445 WARN L193 SmtUtils]: Spent 279.00 ms on a formula simplification that was a NOOP. DAG size: 175 [2020-07-10 16:37:00,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,568 INFO L280 TraceCheckUtils]: 0: Hoare triple {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(31);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(212);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(32);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(212);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(25);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(37);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(77);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(9);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(9);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(212);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(29);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(29);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(14);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(17);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(52);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(16);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(6);call write~init~int(97, #t~string132.base, #t~string132.offset, 1);call write~init~int(99, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(114, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(117, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(120, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 5 + #t~string132.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(9);~ldv_state_variable_1~0 := 0;~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~ax_driver_group0~0.base, ~ax_driver_group0~0.offset := 0, 0;call ~#ax_devices~0.base, ~#ax_devices~0.offset := #Ultimate.allocOnStack(60);call write~init~int(3, ~#ax_devices~0.base, ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 2 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 4 + ~#ax_devices~0.offset, 4);call write~init~int(2050, ~#ax_devices~0.base, 8 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 12 + ~#ax_devices~0.offset, 8);call write~init~int(3, ~#ax_devices~0.base, 20 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 22 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 24 + ~#ax_devices~0.offset, 4);call write~init~int(63237, ~#ax_devices~0.base, 28 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 32 + ~#ax_devices~0.offset, 8);call write~init~int(0, ~#ax_devices~0.base, 40 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 42 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 44 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 48 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 52 + ~#ax_devices~0.offset, 8);~__mod_hid__ax_devices_device_table~0.bus := 0;~__mod_hid__ax_devices_device_table~0.group := 0;~__mod_hid__ax_devices_device_table~0.vendor := 0;~__mod_hid__ax_devices_device_table~0.product := 0;~__mod_hid__ax_devices_device_table~0.driver_data := 0;call ~#ax_driver~0.base, ~#ax_driver~0.offset := #Ultimate.allocOnStack(333);call write~init~$Pointer$(#t~string132.base, #t~string132.offset, ~#ax_driver~0.base, ~#ax_driver~0.offset, 8);call write~init~$Pointer$(~#ax_devices~0.base, ~#ax_devices~0.offset, ~#ax_driver~0.base, 8 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 16 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 24 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 32 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 36 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 40 + ~#ax_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 44 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 52 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 60 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 68 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 76 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 84 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 88 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_probe.base, #funAddr~ax_probe.offset, ~#ax_driver~0.base, 100 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_remove.base, #funAddr~ax_remove.offset, ~#ax_driver~0.base, 108 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 116 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 124 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 132 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 140 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 148 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 156 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 164 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 172 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 180 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 188 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 196 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 204 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 212 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 220 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 228 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 236 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 244 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 252 + ~#ax_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 253 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 261 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 269 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 277 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 285 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 293 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 301 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 309 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 317 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 325 + ~#ax_driver~0.offset, 8);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_spin~0 := 0; {253#true} is VALID [2020-07-10 16:37:00,569 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,570 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #568#return; {253#true} is VALID [2020-07-10 16:37:00,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,599 INFO L280 TraceCheckUtils]: 0: Hoare triple {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~1.base, ~tmp~1.offset;havoc ~tmp___0~1;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___0~1 := #t~nondet10;havoc #t~nondet10; {253#true} is VALID [2020-07-10 16:37:00,599 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume 0 != ~tmp___0~1;#res.base, #res.offset := 0, 0; {253#true} is VALID [2020-07-10 16:37:00,599 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,600 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {253#true} {253#true} #472#return; {253#true} is VALID [2020-07-10 16:37:00,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,606 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,607 INFO L275 TraceCheckUtils]: 1: Hoare quadruple {253#true} {253#true} #474#return; {253#true} is VALID [2020-07-10 16:37:00,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,614 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {253#true} is VALID [2020-07-10 16:37:00,615 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,615 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {254#false} #494#return; {254#false} is VALID [2020-07-10 16:37:00,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,632 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-10 16:37:00,633 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,633 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-10 16:37:00,633 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;havoc ~tmp~5; {253#true} is VALID [2020-07-10 16:37:00,634 INFO L263 TraceCheckUtils]: 1: Hoare triple {253#true} call #t~ret36 := hid_open_report(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-10 16:37:00,634 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-10 16:37:00,635 INFO L280 TraceCheckUtils]: 3: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,635 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-10 16:37:00,635 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;~tmp~5 := #t~ret36;havoc #t~ret36;#res := ~tmp~5; {253#true} is VALID [2020-07-10 16:37:00,636 INFO L280 TraceCheckUtils]: 6: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,636 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {253#true} {254#false} #496#return; {254#false} is VALID [2020-07-10 16:37:00,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,656 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-10 16:37:00,657 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,657 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-10 16:37:00,658 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~connect_mask := #in~connect_mask;havoc ~ret~0;havoc ~tmp~6;call #t~mem40.base, #t~mem40.offset := read~$Pointer$(~hdev.base, 7869 + ~hdev.offset, 8);call #t~mem41.base, #t~mem41.offset := read~$Pointer$(#t~mem40.base, #t~mem40.offset, 8); {253#true} is VALID [2020-07-10 16:37:00,658 INFO L263 TraceCheckUtils]: 1: Hoare triple {253#true} call #t~ret42 := ##fun~$Pointer$~TO~int(~hdev.base, ~hdev.offset, #t~mem41.base, #t~mem41.offset); {253#true} is VALID [2020-07-10 16:37:00,658 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-10 16:37:00,659 INFO L280 TraceCheckUtils]: 3: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,659 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-10 16:37:00,659 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;~tmp~6 := #t~ret42;havoc #t~mem40.base, #t~mem40.offset;havoc #t~mem41.base, #t~mem41.offset;havoc #t~ret42;~ret~0 := ~tmp~6; {253#true} is VALID [2020-07-10 16:37:00,660 INFO L280 TraceCheckUtils]: 6: Hoare triple {253#true} assume 0 != ~ret~0 || 0 == ~connect_mask % 4294967296;#res := ~ret~0; {253#true} is VALID [2020-07-10 16:37:00,660 INFO L280 TraceCheckUtils]: 7: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,660 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {253#true} {254#false} #498#return; {254#false} is VALID [2020-07-10 16:37:00,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:00,673 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~head.base, ~head.offset := #in~head.base, #in~head.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~head.base, ~head.offset, 8);#res := (if (#t~mem4.base + #t~mem4.offset) % 18446744073709551616 == (~head.base + ~head.offset) % 18446744073709551616 then 1 else 0);havoc #t~mem4.base, #t~mem4.offset; {253#true} is VALID [2020-07-10 16:37:00,674 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,674 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {254#false} #510#return; {254#false} is VALID [2020-07-10 16:37:00,680 INFO L263 TraceCheckUtils]: 0: Hoare triple {253#true} call ULTIMATE.init(); {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} is VALID [2020-07-10 16:37:00,681 INFO L280 TraceCheckUtils]: 1: Hoare triple {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(31);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(212);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(32);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(212);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(25);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(37);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(77);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(9);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(9);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(212);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(29);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(29);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(14);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(17);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(52);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(16);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(6);call write~init~int(97, #t~string132.base, #t~string132.offset, 1);call write~init~int(99, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(114, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(117, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(120, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 5 + #t~string132.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(9);~ldv_state_variable_1~0 := 0;~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~ax_driver_group0~0.base, ~ax_driver_group0~0.offset := 0, 0;call ~#ax_devices~0.base, ~#ax_devices~0.offset := #Ultimate.allocOnStack(60);call write~init~int(3, ~#ax_devices~0.base, ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 2 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 4 + ~#ax_devices~0.offset, 4);call write~init~int(2050, ~#ax_devices~0.base, 8 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 12 + ~#ax_devices~0.offset, 8);call write~init~int(3, ~#ax_devices~0.base, 20 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 22 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 24 + ~#ax_devices~0.offset, 4);call write~init~int(63237, ~#ax_devices~0.base, 28 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 32 + ~#ax_devices~0.offset, 8);call write~init~int(0, ~#ax_devices~0.base, 40 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 42 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 44 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 48 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 52 + ~#ax_devices~0.offset, 8);~__mod_hid__ax_devices_device_table~0.bus := 0;~__mod_hid__ax_devices_device_table~0.group := 0;~__mod_hid__ax_devices_device_table~0.vendor := 0;~__mod_hid__ax_devices_device_table~0.product := 0;~__mod_hid__ax_devices_device_table~0.driver_data := 0;call ~#ax_driver~0.base, ~#ax_driver~0.offset := #Ultimate.allocOnStack(333);call write~init~$Pointer$(#t~string132.base, #t~string132.offset, ~#ax_driver~0.base, ~#ax_driver~0.offset, 8);call write~init~$Pointer$(~#ax_devices~0.base, ~#ax_devices~0.offset, ~#ax_driver~0.base, 8 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 16 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 24 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 32 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 36 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 40 + ~#ax_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 44 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 52 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 60 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 68 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 76 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 84 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 88 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_probe.base, #funAddr~ax_probe.offset, ~#ax_driver~0.base, 100 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_remove.base, #funAddr~ax_remove.offset, ~#ax_driver~0.base, 108 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 116 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 124 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 132 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 140 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 148 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 156 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 164 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 172 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 180 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 188 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 196 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 204 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 212 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 220 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 228 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 236 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 244 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 252 + ~#ax_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 253 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 261 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 269 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 277 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 285 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 293 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 301 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 309 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 317 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 325 + ~#ax_driver~0.offset, 8);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_spin~0 := 0; {253#true} is VALID [2020-07-10 16:37:00,681 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,682 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {253#true} {253#true} #568#return; {253#true} is VALID [2020-07-10 16:37:00,682 INFO L263 TraceCheckUtils]: 4: Hoare triple {253#true} call #t~ret159 := main(); {253#true} is VALID [2020-07-10 16:37:00,682 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} havoc ~ldvarg0~0.base, ~ldvarg0~0.offset;havoc ~tmp~13.base, ~tmp~13.offset;havoc ~tmp___0~3;havoc ~tmp___1~0;havoc ~tmp___2~0; {253#true} is VALID [2020-07-10 16:37:00,684 INFO L263 TraceCheckUtils]: 6: Hoare triple {253#true} call #t~ret136.base, #t~ret136.offset := ldv_zalloc(24); {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} is VALID [2020-07-10 16:37:00,684 INFO L280 TraceCheckUtils]: 7: Hoare triple {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~1.base, ~tmp~1.offset;havoc ~tmp___0~1;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___0~1 := #t~nondet10;havoc #t~nondet10; {253#true} is VALID [2020-07-10 16:37:00,685 INFO L280 TraceCheckUtils]: 8: Hoare triple {253#true} assume 0 != ~tmp___0~1;#res.base, #res.offset := 0, 0; {253#true} is VALID [2020-07-10 16:37:00,685 INFO L280 TraceCheckUtils]: 9: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,685 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {253#true} {253#true} #472#return; {253#true} is VALID [2020-07-10 16:37:00,686 INFO L280 TraceCheckUtils]: 11: Hoare triple {253#true} ~tmp~13.base, ~tmp~13.offset := #t~ret136.base, #t~ret136.offset;havoc #t~ret136.base, #t~ret136.offset;~ldvarg0~0.base, ~ldvarg0~0.offset := ~tmp~13.base, ~tmp~13.offset; {253#true} is VALID [2020-07-10 16:37:00,686 INFO L263 TraceCheckUtils]: 12: Hoare triple {253#true} call ldv_initialize(); {253#true} is VALID [2020-07-10 16:37:00,686 INFO L280 TraceCheckUtils]: 13: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,687 INFO L275 TraceCheckUtils]: 14: Hoare quadruple {253#true} {253#true} #474#return; {253#true} is VALID [2020-07-10 16:37:00,688 INFO L280 TraceCheckUtils]: 15: Hoare triple {253#true} ~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-10 16:37:00,689 INFO L280 TraceCheckUtils]: 16: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~tmp___0~3 := #t~nondet137;havoc #t~nondet137;#t~switch138 := 0 == ~tmp___0~3; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-10 16:37:00,690 INFO L280 TraceCheckUtils]: 17: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume #t~switch138; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-10 16:37:00,691 INFO L280 TraceCheckUtils]: 18: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume 0 != ~ldv_state_variable_1~0;assume -2147483648 <= #t~nondet139 && #t~nondet139 <= 2147483647;~tmp___1~0 := #t~nondet139;havoc #t~nondet139;#t~switch140 := 0 == ~tmp___1~0; {254#false} is VALID [2020-07-10 16:37:00,691 INFO L280 TraceCheckUtils]: 19: Hoare triple {254#false} assume #t~switch140; {254#false} is VALID [2020-07-10 16:37:00,691 INFO L280 TraceCheckUtils]: 20: Hoare triple {254#false} assume 1 == ~ldv_state_variable_1~0; {254#false} is VALID [2020-07-10 16:37:00,692 INFO L263 TraceCheckUtils]: 21: Hoare triple {254#false} call #t~ret141 := ax_probe(~ax_driver_group0~0.base, ~ax_driver_group0~0.offset, ~ldvarg0~0.base, ~ldvarg0~0.offset); {254#false} is VALID [2020-07-10 16:37:00,692 INFO L280 TraceCheckUtils]: 22: Hoare triple {254#false} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;havoc ~error~1;call ~#descriptor~0.base, ~#descriptor~0.offset := #Ultimate.allocOnStack(37);havoc ~tmp~10;call write~$Pointer$(#t~string112.base, #t~string112.offset, ~#descriptor~0.base, ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string113.base, #t~string113.offset, ~#descriptor~0.base, 8 + ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string114.base, #t~string114.offset, ~#descriptor~0.base, 16 + ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string115.base, #t~string115.offset, ~#descriptor~0.base, 24 + ~#descriptor~0.offset, 8);call write~int(162, ~#descriptor~0.base, 32 + ~#descriptor~0.offset, 4);call write~int(0, ~#descriptor~0.base, 36 + ~#descriptor~0.offset, 1);call #t~mem116 := read~int(~#descriptor~0.base, 36 + ~#descriptor~0.offset, 1); {254#false} is VALID [2020-07-10 16:37:00,692 INFO L263 TraceCheckUtils]: 23: Hoare triple {254#false} call #t~ret117 := ldv__builtin_expect(~bitwiseAnd(#t~mem116 % 256, 1), 0); {253#true} is VALID [2020-07-10 16:37:00,693 INFO L280 TraceCheckUtils]: 24: Hoare triple {253#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {253#true} is VALID [2020-07-10 16:37:00,693 INFO L280 TraceCheckUtils]: 25: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,693 INFO L275 TraceCheckUtils]: 26: Hoare quadruple {253#true} {254#false} #494#return; {254#false} is VALID [2020-07-10 16:37:00,694 INFO L280 TraceCheckUtils]: 27: Hoare triple {254#false} assume -9223372036854775808 <= #t~ret117 && #t~ret117 <= 9223372036854775807;~tmp~10 := #t~ret117;havoc #t~ret117;havoc #t~mem116; {254#false} is VALID [2020-07-10 16:37:00,694 INFO L280 TraceCheckUtils]: 28: Hoare triple {254#false} assume 0 != ~tmp~10;havoc #t~nondet118; {254#false} is VALID [2020-07-10 16:37:00,694 INFO L263 TraceCheckUtils]: 29: Hoare triple {254#false} call #t~ret120 := hid_parse(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-10 16:37:00,695 INFO L280 TraceCheckUtils]: 30: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;havoc ~tmp~5; {253#true} is VALID [2020-07-10 16:37:00,695 INFO L263 TraceCheckUtils]: 31: Hoare triple {253#true} call #t~ret36 := hid_open_report(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-10 16:37:00,695 INFO L280 TraceCheckUtils]: 32: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-10 16:37:00,696 INFO L280 TraceCheckUtils]: 33: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,696 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-10 16:37:00,696 INFO L280 TraceCheckUtils]: 35: Hoare triple {253#true} assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;~tmp~5 := #t~ret36;havoc #t~ret36;#res := ~tmp~5; {253#true} is VALID [2020-07-10 16:37:00,697 INFO L280 TraceCheckUtils]: 36: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,697 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {253#true} {254#false} #496#return; {254#false} is VALID [2020-07-10 16:37:00,697 INFO L280 TraceCheckUtils]: 38: Hoare triple {254#false} assume -2147483648 <= #t~ret120 && #t~ret120 <= 2147483647;~error~1 := #t~ret120;havoc #t~ret120; {254#false} is VALID [2020-07-10 16:37:00,698 INFO L280 TraceCheckUtils]: 39: Hoare triple {254#false} assume !(0 != ~error~1); {254#false} is VALID [2020-07-10 16:37:00,698 INFO L263 TraceCheckUtils]: 40: Hoare triple {254#false} call #t~ret123 := hid_hw_start(~hdev.base, ~hdev.offset, 13); {253#true} is VALID [2020-07-10 16:37:00,698 INFO L280 TraceCheckUtils]: 41: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~connect_mask := #in~connect_mask;havoc ~ret~0;havoc ~tmp~6;call #t~mem40.base, #t~mem40.offset := read~$Pointer$(~hdev.base, 7869 + ~hdev.offset, 8);call #t~mem41.base, #t~mem41.offset := read~$Pointer$(#t~mem40.base, #t~mem40.offset, 8); {253#true} is VALID [2020-07-10 16:37:00,699 INFO L263 TraceCheckUtils]: 42: Hoare triple {253#true} call #t~ret42 := ##fun~$Pointer$~TO~int(~hdev.base, ~hdev.offset, #t~mem41.base, #t~mem41.offset); {253#true} is VALID [2020-07-10 16:37:00,699 INFO L280 TraceCheckUtils]: 43: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-10 16:37:00,699 INFO L280 TraceCheckUtils]: 44: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,700 INFO L275 TraceCheckUtils]: 45: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-10 16:37:00,700 INFO L280 TraceCheckUtils]: 46: Hoare triple {253#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;~tmp~6 := #t~ret42;havoc #t~mem40.base, #t~mem40.offset;havoc #t~mem41.base, #t~mem41.offset;havoc #t~ret42;~ret~0 := ~tmp~6; {253#true} is VALID [2020-07-10 16:37:00,700 INFO L280 TraceCheckUtils]: 47: Hoare triple {253#true} assume 0 != ~ret~0 || 0 == ~connect_mask % 4294967296;#res := ~ret~0; {253#true} is VALID [2020-07-10 16:37:00,701 INFO L280 TraceCheckUtils]: 48: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,701 INFO L275 TraceCheckUtils]: 49: Hoare quadruple {253#true} {254#false} #498#return; {254#false} is VALID [2020-07-10 16:37:00,701 INFO L280 TraceCheckUtils]: 50: Hoare triple {254#false} assume -2147483648 <= #t~ret123 && #t~ret123 <= 2147483647;~error~1 := #t~ret123;havoc #t~ret123; {254#false} is VALID [2020-07-10 16:37:00,702 INFO L280 TraceCheckUtils]: 51: Hoare triple {254#false} assume !(0 != ~error~1); {254#false} is VALID [2020-07-10 16:37:00,702 INFO L263 TraceCheckUtils]: 52: Hoare triple {254#false} call #t~ret126 := axff_init(~hdev.base, ~hdev.offset); {254#false} is VALID [2020-07-10 16:37:00,702 INFO L280 TraceCheckUtils]: 53: Hoare triple {254#false} ~hid.base, ~hid.offset := #in~hid.base, #in~hid.offset;havoc ~axff~1.base, ~axff~1.offset;havoc ~report~1.base, ~report~1.offset;havoc ~hidinput~0.base, ~hidinput~0.offset;havoc ~__mptr~0.base, ~__mptr~0.offset;havoc ~report_list~0.base, ~report_list~0.offset;havoc ~dev~0.base, ~dev~0.offset;havoc ~field_count~1;havoc ~i~1;havoc ~j~1;havoc ~error~0;havoc ~tmp~9;havoc ~__mptr___0~0.base, ~__mptr___0~0.offset;havoc ~tmp___0~2.base, ~tmp___0~2.offset;call #t~mem92.base, #t~mem92.offset := read~$Pointer$(~hid.base, 7890 + ~hid.offset, 8);~__mptr~0.base, ~__mptr~0.offset := #t~mem92.base, #t~mem92.offset;havoc #t~mem92.base, #t~mem92.offset;~hidinput~0.base, ~hidinput~0.offset := ~__mptr~0.base, ~__mptr~0.offset;~report_list~0.base, ~report_list~0.offset := ~hid.base, 2140 + ~hid.offset;call #t~mem93.base, #t~mem93.offset := read~$Pointer$(~hidinput~0.base, 24 + ~hidinput~0.offset, 8);~dev~0.base, ~dev~0.offset := #t~mem93.base, #t~mem93.offset;havoc #t~mem93.base, #t~mem93.offset;~field_count~1 := 0; {254#false} is VALID [2020-07-10 16:37:00,703 INFO L263 TraceCheckUtils]: 54: Hoare triple {254#false} call #t~ret94 := list_empty(~report_list~0.base, ~report_list~0.offset); {253#true} is VALID [2020-07-10 16:37:00,703 INFO L280 TraceCheckUtils]: 55: Hoare triple {253#true} ~head.base, ~head.offset := #in~head.base, #in~head.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~head.base, ~head.offset, 8);#res := (if (#t~mem4.base + #t~mem4.offset) % 18446744073709551616 == (~head.base + ~head.offset) % 18446744073709551616 then 1 else 0);havoc #t~mem4.base, #t~mem4.offset; {253#true} is VALID [2020-07-10 16:37:00,703 INFO L280 TraceCheckUtils]: 56: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-10 16:37:00,704 INFO L275 TraceCheckUtils]: 57: Hoare quadruple {253#true} {254#false} #510#return; {254#false} is VALID [2020-07-10 16:37:00,704 INFO L280 TraceCheckUtils]: 58: Hoare triple {254#false} assume -2147483648 <= #t~ret94 && #t~ret94 <= 2147483647;~tmp~9 := #t~ret94;havoc #t~ret94; {254#false} is VALID [2020-07-10 16:37:00,704 INFO L280 TraceCheckUtils]: 59: Hoare triple {254#false} assume !(0 != ~tmp~9);call #t~mem97.base, #t~mem97.offset := read~$Pointer$(~report_list~0.base, ~report_list~0.offset, 8);~__mptr___0~0.base, ~__mptr___0~0.offset := #t~mem97.base, #t~mem97.offset;havoc #t~mem97.base, #t~mem97.offset;~report~1.base, ~report~1.offset := ~__mptr___0~0.base, ~__mptr___0~0.offset;~i~1 := 0; {254#false} is VALID [2020-07-10 16:37:00,705 INFO L280 TraceCheckUtils]: 60: Hoare triple {254#false} call #t~mem102 := read~int(~report~1.base, 2072 + ~report~1.offset, 4); {254#false} is VALID [2020-07-10 16:37:00,705 INFO L280 TraceCheckUtils]: 61: Hoare triple {254#false} assume !(~i~1 % 4294967296 < #t~mem102 % 4294967296);havoc #t~mem102;#t~short104 := ~field_count~1 <= 3; {254#false} is VALID [2020-07-10 16:37:00,706 INFO L280 TraceCheckUtils]: 62: Hoare triple {254#false} assume #t~short104;call #t~mem103 := read~int(~hid.base, 52 + ~hid.offset, 4);#t~short104 := 63237 != #t~mem103 % 4294967296; {254#false} is VALID [2020-07-10 16:37:00,706 INFO L280 TraceCheckUtils]: 63: Hoare triple {254#false} assume !#t~short104;havoc #t~mem103;havoc #t~short104; {254#false} is VALID [2020-07-10 16:37:00,706 INFO L263 TraceCheckUtils]: 64: Hoare triple {254#false} call #t~ret107.base, #t~ret107.offset := kzalloc(8, 208); {254#false} is VALID [2020-07-10 16:37:00,707 INFO L280 TraceCheckUtils]: 65: Hoare triple {254#false} ~size := #in~size;~flags := #in~flags; {254#false} is VALID [2020-07-10 16:37:00,707 INFO L263 TraceCheckUtils]: 66: Hoare triple {254#false} call ldv_check_alloc_flags(~flags); {254#false} is VALID [2020-07-10 16:37:00,707 INFO L280 TraceCheckUtils]: 67: Hoare triple {254#false} ~flags := #in~flags; {254#false} is VALID [2020-07-10 16:37:00,708 INFO L280 TraceCheckUtils]: 68: Hoare triple {254#false} assume !(0 == ~ldv_spin~0 || 0 == ~bitwiseAnd(~flags, 16) % 4294967296); {254#false} is VALID [2020-07-10 16:37:00,708 INFO L263 TraceCheckUtils]: 69: Hoare triple {254#false} call ldv_error(); {254#false} is VALID [2020-07-10 16:37:00,708 INFO L280 TraceCheckUtils]: 70: Hoare triple {254#false} assume !false; {254#false} is VALID [2020-07-10 16:37:00,721 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-10 16:37:00,722 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [260890436] [2020-07-10 16:37:00,723 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-10 16:37:00,723 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-10 16:37:00,724 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809564478] [2020-07-10 16:37:00,731 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2020-07-10 16:37:00,734 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-10 16:37:00,738 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-10 16:37:00,867 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 16:37:00,867 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-10 16:37:00,867 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-10 16:37:00,877 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-10 16:37:00,878 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-10 16:37:00,880 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 5 states. [2020-07-10 16:37:01,172 WARN L193 SmtUtils]: Spent 227.00 ms on a formula simplification that was a NOOP. DAG size: 178 [2020-07-10 16:37:01,837 WARN L193 SmtUtils]: Spent 246.00 ms on a formula simplification that was a NOOP. DAG size: 180 [2020-07-10 16:37:02,518 WARN L193 SmtUtils]: Spent 276.00 ms on a formula simplification that was a NOOP. DAG size: 177 [2020-07-10 16:37:11,954 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 16:37:11,955 INFO L93 Difference]: Finished difference Result 564 states and 711 transitions. [2020-07-10 16:37:11,955 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-10 16:37:11,955 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2020-07-10 16:37:11,955 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-10 16:37:11,957 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-10 16:37:12,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 711 transitions. [2020-07-10 16:37:12,007 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-10 16:37:12,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 711 transitions. [2020-07-10 16:37:12,042 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 711 transitions. [2020-07-10 16:37:13,983 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 711 edges. 711 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-10 16:37:14,034 INFO L225 Difference]: With dead ends: 564 [2020-07-10 16:37:14,035 INFO L226 Difference]: Without dead ends: 286 [2020-07-10 16:37:14,047 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-10 16:37:14,069 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2020-07-10 16:37:15,563 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 214. [2020-07-10 16:37:15,564 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-10 16:37:15,564 INFO L82 GeneralOperation]: Start isEquivalent. First operand 286 states. Second operand 214 states. [2020-07-10 16:37:15,565 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 214 states. [2020-07-10 16:37:15,565 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 214 states. [2020-07-10 16:37:15,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 16:37:15,592 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2020-07-10 16:37:15,592 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 355 transitions. [2020-07-10 16:37:15,603 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 16:37:15,604 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 16:37:15,604 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 286 states. [2020-07-10 16:37:15,604 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 286 states. [2020-07-10 16:37:15,630 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-10 16:37:15,630 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2020-07-10 16:37:15,630 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 355 transitions. [2020-07-10 16:37:15,632 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-10 16:37:15,632 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-10 16:37:15,633 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-10 16:37:15,633 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-10 16:37:15,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2020-07-10 16:37:15,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 249 transitions. [2020-07-10 16:37:15,648 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 249 transitions. Word has length 71 [2020-07-10 16:37:15,648 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-10 16:37:15,649 INFO L479 AbstractCegarLoop]: Abstraction has 214 states and 249 transitions. [2020-07-10 16:37:15,649 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-10 16:37:15,649 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 249 transitions. [2020-07-10 16:37:15,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2020-07-10 16:37:15,653 INFO L414 BasicCegarLoop]: Found error trace [2020-07-10 16:37:15,654 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-10 16:37:15,654 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-10 16:37:15,654 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-10 16:37:15,655 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-10 16:37:15,655 INFO L82 PathProgramCache]: Analyzing trace with hash 345320668, now seen corresponding path program 1 times [2020-07-10 16:37:15,655 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-10 16:37:15,656 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [481740564] [2020-07-10 16:37:15,656 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-10 16:37:15,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-10 16:37:15,824 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-10 16:37:15,825 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError at de.uni_freiburg.informatik.ultimate.smtinterpol.proof.FixResolutionProof.fix(FixResolutionProof.java:191) at de.uni_freiburg.informatik.ultimate.smtinterpol.proof.ProofTermGenerator.convert(ProofTermGenerator.java:150) at de.uni_freiburg.informatik.ultimate.smtinterpol.smtlib2.SMTInterpol.getProof(SMTInterpol.java:797) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.getInterpolants(NoopScript.java:391) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.getInterpolants(NoopScript.java:385) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.getInterpolants(WrapperScript.java:332) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.getInterpolants(WrapperScript.java:332) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.ManagedScript.getInterpolants(ManagedScript.java:191) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.NestedInterpolantsBuilder.computeCraigInterpolants(NestedInterpolantsBuilder.java:285) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.NestedInterpolantsBuilder.(NestedInterpolantsBuilder.java:166) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolantsRecursive(InterpolatingTraceCheckCraig.java:337) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolants(InterpolatingTraceCheckCraig.java:239) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.(InterpolatingTraceCheckCraig.java:108) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleCraig.construct(IpTcStrategyModuleCraig.java:79) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleCraig.construct(IpTcStrategyModuleCraig.java:1) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.getOrConstruct(IpTcStrategyModuleBase.java:101) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.isCorrect(IpTcStrategyModuleBase.java:57) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.checkFeasibility(AutomatonFreeRefinementEngine.java:242) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.executeStrategy(AutomatonFreeRefinementEngine.java:166) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.(AutomatonFreeRefinementEngine.java:85) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:75) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:508) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterateInternal(AbstractCegarLoop.java:436) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:370) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResult.iterate(CegarLoopResult.java:142) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.iterateNew(TraceAbstractionStarter.java:334) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:175) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:127) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:120) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:317) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2020-07-10 16:37:15,831 INFO L168 Benchmark]: Toolchain (without parser) took 23860.47 ms. Allocated memory was 142.1 MB in the beginning and 652.7 MB in the end (delta: 510.7 MB). Free memory was 95.3 MB in the beginning and 160.0 MB in the end (delta: -64.7 MB). Peak memory consumption was 446.0 MB. Max. memory is 7.1 GB. [2020-07-10 16:37:15,832 INFO L168 Benchmark]: CDTParser took 0.16 ms. Allocated memory is still 142.1 MB. Free memory was 118.4 MB in the beginning and 118.1 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. [2020-07-10 16:37:15,833 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1438.42 ms. Allocated memory was 142.1 MB in the beginning and 200.8 MB in the end (delta: 58.7 MB). Free memory was 95.1 MB in the beginning and 126.4 MB in the end (delta: -31.3 MB). Peak memory consumption was 35.4 MB. Max. memory is 7.1 GB. [2020-07-10 16:37:15,834 INFO L168 Benchmark]: Boogie Preprocessor took 182.55 ms. Allocated memory is still 200.8 MB. Free memory was 126.4 MB in the beginning and 115.8 MB in the end (delta: 10.6 MB). Peak memory consumption was 10.6 MB. Max. memory is 7.1 GB. [2020-07-10 16:37:15,835 INFO L168 Benchmark]: RCFGBuilder took 5885.84 ms. Allocated memory was 200.8 MB in the beginning and 398.5 MB in the end (delta: 197.7 MB). Free memory was 115.8 MB in the beginning and 180.7 MB in the end (delta: -64.9 MB). Peak memory consumption was 241.4 MB. Max. memory is 7.1 GB. [2020-07-10 16:37:15,836 INFO L168 Benchmark]: TraceAbstraction took 16348.36 ms. Allocated memory was 398.5 MB in the beginning and 652.7 MB in the end (delta: 254.3 MB). Free memory was 180.7 MB in the beginning and 160.0 MB in the end (delta: 20.7 MB). Peak memory consumption was 275.0 MB. Max. memory is 7.1 GB. [2020-07-10 16:37:15,840 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16 ms. Allocated memory is still 142.1 MB. Free memory was 118.4 MB in the beginning and 118.1 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1438.42 ms. Allocated memory was 142.1 MB in the beginning and 200.8 MB in the end (delta: 58.7 MB). Free memory was 95.1 MB in the beginning and 126.4 MB in the end (delta: -31.3 MB). Peak memory consumption was 35.4 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 182.55 ms. Allocated memory is still 200.8 MB. Free memory was 126.4 MB in the beginning and 115.8 MB in the end (delta: 10.6 MB). Peak memory consumption was 10.6 MB. Max. memory is 7.1 GB. * RCFGBuilder took 5885.84 ms. Allocated memory was 200.8 MB in the beginning and 398.5 MB in the end (delta: 197.7 MB). Free memory was 115.8 MB in the beginning and 180.7 MB in the end (delta: -64.9 MB). Peak memory consumption was 241.4 MB. Max. memory is 7.1 GB. * TraceAbstraction took 16348.36 ms. Allocated memory was 398.5 MB in the beginning and 652.7 MB in the end (delta: 254.3 MB). Free memory was 180.7 MB in the beginning and 160.0 MB in the end (delta: 20.7 MB). Peak memory consumption was 275.0 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: AssertionError: null de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: null: de.uni_freiburg.informatik.ultimate.smtinterpol.proof.FixResolutionProof.fix(FixResolutionProof.java:191) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...