/usr/bin/java -ea -Xmx8000000000 -Xss4m -jar ./plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata ./data -tc ../../../trunk/examples/toolchains/AutomizerC.xml -s ../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Default.epf -i ../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i -------------------------------------------------------------------------------- This is Ultimate 0.1.25-267fbe0 [2020-07-17 23:59:49,240 INFO L177 SettingsManager]: Resetting all preferences to default values... [2020-07-17 23:59:49,242 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2020-07-17 23:59:49,254 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2020-07-17 23:59:49,255 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2020-07-17 23:59:49,256 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2020-07-17 23:59:49,257 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2020-07-17 23:59:49,259 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2020-07-17 23:59:49,261 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2020-07-17 23:59:49,262 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2020-07-17 23:59:49,263 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2020-07-17 23:59:49,264 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2020-07-17 23:59:49,264 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2020-07-17 23:59:49,265 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2020-07-17 23:59:49,266 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2020-07-17 23:59:49,267 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2020-07-17 23:59:49,268 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2020-07-17 23:59:49,269 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2020-07-17 23:59:49,271 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2020-07-17 23:59:49,273 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2020-07-17 23:59:49,274 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2020-07-17 23:59:49,275 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2020-07-17 23:59:49,276 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2020-07-17 23:59:49,277 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2020-07-17 23:59:49,280 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2020-07-17 23:59:49,280 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2020-07-17 23:59:49,280 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2020-07-17 23:59:49,281 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2020-07-17 23:59:49,281 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2020-07-17 23:59:49,282 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2020-07-17 23:59:49,283 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2020-07-17 23:59:49,283 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2020-07-17 23:59:49,284 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2020-07-17 23:59:49,285 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2020-07-17 23:59:49,286 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2020-07-17 23:59:49,287 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2020-07-17 23:59:49,287 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2020-07-17 23:59:49,287 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2020-07-17 23:59:49,288 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2020-07-17 23:59:49,288 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2020-07-17 23:59:49,289 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2020-07-17 23:59:49,290 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/settings/default/automizer/svcomp-Reach-64bit-Automizer_Default.epf [2020-07-17 23:59:49,306 INFO L113 SettingsManager]: Loading preferences was successful [2020-07-17 23:59:49,306 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2020-07-17 23:59:49,308 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2020-07-17 23:59:49,308 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2020-07-17 23:59:49,308 INFO L138 SettingsManager]: * Use SBE=true [2020-07-17 23:59:49,308 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2020-07-17 23:59:49,309 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2020-07-17 23:59:49,309 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2020-07-17 23:59:49,309 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2020-07-17 23:59:49,309 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2020-07-17 23:59:49,309 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2020-07-17 23:59:49,310 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2020-07-17 23:59:49,310 INFO L138 SettingsManager]: * Use constant arrays=true [2020-07-17 23:59:49,310 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2020-07-17 23:59:49,310 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2020-07-17 23:59:49,310 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2020-07-17 23:59:49,311 INFO L138 SettingsManager]: * To the following directory=./dump/ [2020-07-17 23:59:49,311 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2020-07-17 23:59:49,311 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-17 23:59:49,311 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2020-07-17 23:59:49,311 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2020-07-17 23:59:49,312 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2020-07-17 23:59:49,312 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2020-07-17 23:59:49,312 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2020-07-17 23:59:49,312 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2020-07-17 23:59:49,312 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2020-07-17 23:59:49,313 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2020-07-17 23:59:49,313 INFO L138 SettingsManager]: * To the following directory=dump/ [2020-07-17 23:59:49,613 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2020-07-17 23:59:49,627 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2020-07-17 23:59:49,631 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2020-07-17 23:59:49,632 INFO L271 PluginConnector]: Initializing CDTParser... [2020-07-17 23:59:49,633 INFO L275 PluginConnector]: CDTParser initialized [2020-07-17 23:59:49,634 INFO L429 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../../../trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-17 23:59:49,707 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c98940b40/2c13211b0c654763aa2c9cd210df6a45/FLAG4947c047e [2020-07-17 23:59:50,394 INFO L306 CDTParser]: Found 1 translation units. [2020-07-17 23:59:50,395 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/trunk/examples/svcomp/ldv-linux-3.16-rc1/43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-17 23:59:50,428 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c98940b40/2c13211b0c654763aa2c9cd210df6a45/FLAG4947c047e [2020-07-17 23:59:50,519 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/c98940b40/2c13211b0c654763aa2c9cd210df6a45 [2020-07-17 23:59:50,529 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2020-07-17 23:59:50,533 INFO L131 ToolchainWalker]: Walking toolchain with 4 elements. [2020-07-17 23:59:50,534 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2020-07-17 23:59:50,534 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2020-07-17 23:59:50,538 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2020-07-17 23:59:50,539 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.07 11:59:50" (1/1) ... [2020-07-17 23:59:50,542 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7a6f33a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:50, skipping insertion in model container [2020-07-17 23:59:50,543 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.07 11:59:50" (1/1) ... [2020-07-17 23:59:50,551 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2020-07-17 23:59:50,648 INFO L178 MainTranslator]: Built tables and reachable declarations [2020-07-17 23:59:51,210 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2384] [2020-07-17 23:59:51,210 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2385-2386] [2020-07-17 23:59:51,581 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-17 23:59:51,618 INFO L203 MainTranslator]: Completed pre-run [2020-07-17 23:59:51,730 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name show at C: (*show)(struct kobject___0 * , struct attribute___0 * , char * ) [2384] [2020-07-17 23:59:51,731 WARN L1191 CHandler]: Detected problem Invalid redeclaration of the name store at C: (*store)(struct kobject___0 * , struct attribute___0 * , char const * , size_t ) [2385-2386] [2020-07-17 23:59:51,860 INFO L206 PostProcessor]: Analyzing one entry point: main [2020-07-17 23:59:51,910 INFO L208 MainTranslator]: Completed translation [2020-07-17 23:59:51,910 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51 WrapperNode [2020-07-17 23:59:51,911 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2020-07-17 23:59:51,912 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2020-07-17 23:59:51,912 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2020-07-17 23:59:51,912 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2020-07-17 23:59:51,927 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:51,927 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:51,955 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:51,955 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:52,070 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:52,075 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:52,081 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... [2020-07-17 23:59:52,092 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2020-07-17 23:59:52,093 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2020-07-17 23:59:52,093 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2020-07-17 23:59:52,093 INFO L275 PluginConnector]: RCFGBuilder initialized [2020-07-17 23:59:52,096 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (1/1) ... No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2020-07-17 23:59:52,159 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.init [2020-07-17 23:59:52,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2020-07-17 23:59:52,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~int [2020-07-17 23:59:52,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2020-07-17 23:59:52,160 INFO L138 BoogieDeclarations]: Found implementation of procedure set_bit [2020-07-17 23:59:52,160 INFO L138 BoogieDeclarations]: Found implementation of procedure list_empty [2020-07-17 23:59:52,161 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2020-07-17 23:59:52,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2020-07-17 23:59:52,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2020-07-17 23:59:52,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2020-07-17 23:59:52,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_ulong [2020-07-17 23:59:52,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2020-07-17 23:59:52,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2020-07-17 23:59:52,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2020-07-17 23:59:52,162 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_trap [2020-07-17 23:59:52,162 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2020-07-17 23:59:52,163 INFO L138 BoogieDeclarations]: Found implementation of procedure input_get_drvdata [2020-07-17 23:59:52,163 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_parse [2020-07-17 23:59:52,163 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_start [2020-07-17 23:59:52,163 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_stop [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_open [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_close [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_hw_request [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure axff_play [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure axff_init [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_probe [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_remove [2020-07-17 23:59:52,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_driver_init [2020-07-17 23:59:52,165 INFO L138 BoogieDeclarations]: Found implementation of procedure ax_driver_exit [2020-07-17 23:59:52,165 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize_hid_driver_1 [2020-07-17 23:59:52,165 INFO L138 BoogieDeclarations]: Found implementation of procedure main [2020-07-17 23:59:52,165 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2020-07-17 23:59:52,165 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags [2020-07-17 23:59:52,165 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_flags_and_return_some_page [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_alloc_nonatomic [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_lock [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_unlock [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_spin_trylock [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure __dynamic_dev_dbg [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure __hid_register_driver [2020-07-17 23:59:52,166 INFO L138 BoogieDeclarations]: Found implementation of procedure __hid_request [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure _dev_info [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_err [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_warn [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_connect [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_disconnect [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_open_report [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure hid_unregister_driver [2020-07-17 23:59:52,167 INFO L138 BoogieDeclarations]: Found implementation of procedure input_ff_create_memless [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure kmem_cache_alloc [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_some_page [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure printk [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2020-07-17 23:59:52,168 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_error [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure set_bit [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure printk [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure __dynamic_dev_dbg [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure list_empty [2020-07-17 23:59:52,169 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2020-07-17 23:59:52,170 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2020-07-17 23:59:52,170 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc [2020-07-17 23:59:52,170 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2020-07-17 23:59:52,170 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags [2020-07-17 23:59:52,170 INFO L130 BoogieDeclarations]: Found specification of procedure malloc [2020-07-17 23:59:52,170 INFO L130 BoogieDeclarations]: Found specification of procedure calloc [2020-07-17 23:59:52,171 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_int [2020-07-17 23:59:52,171 INFO L130 BoogieDeclarations]: Found specification of procedure __VERIFIER_nondet_ulong [2020-07-17 23:59:52,171 INFO L130 BoogieDeclarations]: Found specification of procedure abort [2020-07-17 23:59:52,171 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2020-07-17 23:59:52,171 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2020-07-17 23:59:52,171 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_ulong [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2020-07-17 23:59:52,172 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_trap [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize_hid_driver_1 [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure dev_err [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure dev_warn [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure _dev_info [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure input_get_drvdata [2020-07-17 23:59:52,173 INFO L130 BoogieDeclarations]: Found specification of procedure input_ff_create_memless [2020-07-17 23:59:52,174 INFO L130 BoogieDeclarations]: Found specification of procedure __hid_register_driver [2020-07-17 23:59:52,174 INFO L130 BoogieDeclarations]: Found specification of procedure hid_unregister_driver [2020-07-17 23:59:52,174 INFO L130 BoogieDeclarations]: Found specification of procedure __hid_request [2020-07-17 23:59:52,174 INFO L130 BoogieDeclarations]: Found specification of procedure hid_open_report [2020-07-17 23:59:52,174 INFO L130 BoogieDeclarations]: Found specification of procedure hid_connect [2020-07-17 23:59:52,174 INFO L130 BoogieDeclarations]: Found specification of procedure hid_disconnect [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure hid_parse [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_start [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~int [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_stop [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_open [2020-07-17 23:59:52,175 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_close [2020-07-17 23:59:52,176 INFO L130 BoogieDeclarations]: Found specification of procedure hid_hw_request [2020-07-17 23:59:52,176 INFO L130 BoogieDeclarations]: Found specification of procedure axff_play [2020-07-17 23:59:52,176 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2020-07-17 23:59:52,176 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2020-07-17 23:59:52,176 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2020-07-17 23:59:52,176 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2020-07-17 23:59:52,177 INFO L130 BoogieDeclarations]: Found specification of procedure axff_init [2020-07-17 23:59:52,177 INFO L130 BoogieDeclarations]: Found specification of procedure ax_probe [2020-07-17 23:59:52,177 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2020-07-17 23:59:52,177 INFO L130 BoogieDeclarations]: Found specification of procedure ax_remove [2020-07-17 23:59:52,177 INFO L130 BoogieDeclarations]: Found specification of procedure ax_driver_init [2020-07-17 23:59:52,177 INFO L130 BoogieDeclarations]: Found specification of procedure ax_driver_exit [2020-07-17 23:59:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2020-07-17 23:59:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2020-07-17 23:59:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure main [2020-07-17 23:59:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_some_page [2020-07-17 23:59:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_flags_and_return_some_page [2020-07-17 23:59:52,178 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_alloc_nonatomic [2020-07-17 23:59:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_lock [2020-07-17 23:59:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_unlock [2020-07-17 23:59:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_spin_trylock [2020-07-17 23:59:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure free [2020-07-17 23:59:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.init [2020-07-17 23:59:52,179 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2020-07-17 23:59:52,180 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2020-07-17 23:59:52,180 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2020-07-17 23:59:56,867 INFO L728 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2020-07-17 23:59:57,659 INFO L290 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2020-07-17 23:59:57,659 INFO L295 CfgBuilder]: Removed 0 assume(true) statements. [2020-07-17 23:59:57,665 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.07 11:59:57 BoogieIcfgContainer [2020-07-17 23:59:57,665 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2020-07-17 23:59:57,667 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2020-07-17 23:59:57,667 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2020-07-17 23:59:57,670 INFO L275 PluginConnector]: TraceAbstraction initialized [2020-07-17 23:59:57,670 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.07 11:59:50" (1/3) ... [2020-07-17 23:59:57,671 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@749fc28f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.07 11:59:57, skipping insertion in model container [2020-07-17 23:59:57,671 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.07 11:59:51" (2/3) ... [2020-07-17 23:59:57,672 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@749fc28f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.07 11:59:57, skipping insertion in model container [2020-07-17 23:59:57,672 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.07 11:59:57" (3/3) ... [2020-07-17 23:59:57,674 INFO L109 eAbstractionObserver]: Analyzing ICFG 43_2a_consumption_linux-3.16-rc1.tar.xz-43_2a-drivers--hid--hid-axff.ko-entry_point.cil.out.i [2020-07-17 23:59:57,686 INFO L157 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2020-07-17 23:59:57,697 INFO L169 ceAbstractionStarter]: Appying trace abstraction to program that has 1 error locations. [2020-07-17 23:59:57,714 INFO L251 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2020-07-17 23:59:57,750 INFO L375 AbstractCegarLoop]: Interprodecural is true [2020-07-17 23:59:57,751 INFO L376 AbstractCegarLoop]: Hoare is true [2020-07-17 23:59:57,751 INFO L377 AbstractCegarLoop]: Compute interpolants for FPandBP [2020-07-17 23:59:57,751 INFO L378 AbstractCegarLoop]: Backedges is STRAIGHT_LINE [2020-07-17 23:59:57,752 INFO L379 AbstractCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2020-07-17 23:59:57,752 INFO L380 AbstractCegarLoop]: Difference is false [2020-07-17 23:59:57,752 INFO L381 AbstractCegarLoop]: Minimize is MINIMIZE_SEVPA [2020-07-17 23:59:57,752 INFO L385 AbstractCegarLoop]: ======== Iteration 0==of CEGAR loop == AllErrorsAtOnce======== [2020-07-17 23:59:57,781 INFO L276 IsEmpty]: Start isEmpty. Operand 250 states. [2020-07-17 23:59:57,801 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2020-07-17 23:59:57,801 INFO L414 BasicCegarLoop]: Found error trace [2020-07-17 23:59:57,802 INFO L422 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-17 23:59:57,803 INFO L427 AbstractCegarLoop]: === Iteration 1 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-17 23:59:57,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-17 23:59:57,810 INFO L82 PathProgramCache]: Analyzing trace with hash -1545756631, now seen corresponding path program 1 times [2020-07-17 23:59:57,822 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-17 23:59:57,823 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [274729587] [2020-07-17 23:59:57,823 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-17 23:59:58,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,631 WARN L193 SmtUtils]: Spent 274.00 ms on a formula simplification that was a NOOP. DAG size: 175 [2020-07-17 23:59:58,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,734 INFO L280 TraceCheckUtils]: 0: Hoare triple {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(31);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(212);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(32);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(212);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(25);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(37);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(77);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(9);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(9);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(212);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(29);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(29);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(14);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(17);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(52);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(16);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(6);call write~init~int(97, #t~string132.base, #t~string132.offset, 1);call write~init~int(99, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(114, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(117, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(120, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 5 + #t~string132.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(9);~ldv_state_variable_1~0 := 0;~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~ax_driver_group0~0.base, ~ax_driver_group0~0.offset := 0, 0;call ~#ax_devices~0.base, ~#ax_devices~0.offset := #Ultimate.allocOnStack(60);call write~init~int(3, ~#ax_devices~0.base, ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 2 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 4 + ~#ax_devices~0.offset, 4);call write~init~int(2050, ~#ax_devices~0.base, 8 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 12 + ~#ax_devices~0.offset, 8);call write~init~int(3, ~#ax_devices~0.base, 20 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 22 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 24 + ~#ax_devices~0.offset, 4);call write~init~int(63237, ~#ax_devices~0.base, 28 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 32 + ~#ax_devices~0.offset, 8);call write~init~int(0, ~#ax_devices~0.base, 40 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 42 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 44 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 48 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 52 + ~#ax_devices~0.offset, 8);~__mod_hid__ax_devices_device_table~0.bus := 0;~__mod_hid__ax_devices_device_table~0.group := 0;~__mod_hid__ax_devices_device_table~0.vendor := 0;~__mod_hid__ax_devices_device_table~0.product := 0;~__mod_hid__ax_devices_device_table~0.driver_data := 0;call ~#ax_driver~0.base, ~#ax_driver~0.offset := #Ultimate.allocOnStack(333);call write~init~$Pointer$(#t~string132.base, #t~string132.offset, ~#ax_driver~0.base, ~#ax_driver~0.offset, 8);call write~init~$Pointer$(~#ax_devices~0.base, ~#ax_devices~0.offset, ~#ax_driver~0.base, 8 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 16 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 24 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 32 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 36 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 40 + ~#ax_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 44 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 52 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 60 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 68 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 76 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 84 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 88 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_probe.base, #funAddr~ax_probe.offset, ~#ax_driver~0.base, 100 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_remove.base, #funAddr~ax_remove.offset, ~#ax_driver~0.base, 108 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 116 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 124 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 132 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 140 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 148 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 156 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 164 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 172 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 180 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 188 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 196 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 204 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 212 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 220 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 228 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 236 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 244 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 252 + ~#ax_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 253 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 261 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 269 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 277 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 285 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 293 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 301 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 309 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 317 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 325 + ~#ax_driver~0.offset, 8);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_spin~0 := 0; {253#true} is VALID [2020-07-17 23:59:58,735 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,735 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #568#return; {253#true} is VALID [2020-07-17 23:59:58,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,763 INFO L280 TraceCheckUtils]: 0: Hoare triple {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~1.base, ~tmp~1.offset;havoc ~tmp___0~1;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___0~1 := #t~nondet10;havoc #t~nondet10; {253#true} is VALID [2020-07-17 23:59:58,763 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume 0 != ~tmp___0~1;#res.base, #res.offset := 0, 0; {253#true} is VALID [2020-07-17 23:59:58,764 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,764 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {253#true} {253#true} #472#return; {253#true} is VALID [2020-07-17 23:59:58,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,771 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,771 INFO L275 TraceCheckUtils]: 1: Hoare quadruple {253#true} {253#true} #474#return; {253#true} is VALID [2020-07-17 23:59:58,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,778 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {253#true} is VALID [2020-07-17 23:59:58,779 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,779 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {254#false} #494#return; {254#false} is VALID [2020-07-17 23:59:58,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,806 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-17 23:59:58,807 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,807 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-17 23:59:58,807 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;havoc ~tmp~5; {253#true} is VALID [2020-07-17 23:59:58,808 INFO L263 TraceCheckUtils]: 1: Hoare triple {253#true} call #t~ret36 := hid_open_report(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-17 23:59:58,808 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-17 23:59:58,808 INFO L280 TraceCheckUtils]: 3: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,809 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-17 23:59:58,809 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;~tmp~5 := #t~ret36;havoc #t~ret36;#res := ~tmp~5; {253#true} is VALID [2020-07-17 23:59:58,809 INFO L280 TraceCheckUtils]: 6: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,810 INFO L275 TraceCheckUtils]: 7: Hoare quadruple {253#true} {254#false} #496#return; {254#false} is VALID [2020-07-17 23:59:58,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,830 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-17 23:59:58,830 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,830 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-17 23:59:58,831 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~connect_mask := #in~connect_mask;havoc ~ret~0;havoc ~tmp~6;call #t~mem40.base, #t~mem40.offset := read~$Pointer$(~hdev.base, 7869 + ~hdev.offset, 8);call #t~mem41.base, #t~mem41.offset := read~$Pointer$(#t~mem40.base, #t~mem40.offset, 8); {253#true} is VALID [2020-07-17 23:59:58,831 INFO L263 TraceCheckUtils]: 1: Hoare triple {253#true} call #t~ret42 := ##fun~$Pointer$~TO~int(~hdev.base, ~hdev.offset, #t~mem41.base, #t~mem41.offset); {253#true} is VALID [2020-07-17 23:59:58,831 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-17 23:59:58,832 INFO L280 TraceCheckUtils]: 3: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,832 INFO L275 TraceCheckUtils]: 4: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-17 23:59:58,832 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;~tmp~6 := #t~ret42;havoc #t~mem40.base, #t~mem40.offset;havoc #t~mem41.base, #t~mem41.offset;havoc #t~ret42;~ret~0 := ~tmp~6; {253#true} is VALID [2020-07-17 23:59:58,833 INFO L280 TraceCheckUtils]: 6: Hoare triple {253#true} assume 0 != ~ret~0 || 0 == ~connect_mask % 4294967296;#res := ~ret~0; {253#true} is VALID [2020-07-17 23:59:58,833 INFO L280 TraceCheckUtils]: 7: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,833 INFO L275 TraceCheckUtils]: 8: Hoare quadruple {253#true} {254#false} #498#return; {254#false} is VALID [2020-07-17 23:59:58,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-17 23:59:58,846 INFO L280 TraceCheckUtils]: 0: Hoare triple {253#true} ~head.base, ~head.offset := #in~head.base, #in~head.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~head.base, ~head.offset, 8);#res := (if (#t~mem4.base + #t~mem4.offset) % 18446744073709551616 == (~head.base + ~head.offset) % 18446744073709551616 then 1 else 0);havoc #t~mem4.base, #t~mem4.offset; {253#true} is VALID [2020-07-17 23:59:58,847 INFO L280 TraceCheckUtils]: 1: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,847 INFO L275 TraceCheckUtils]: 2: Hoare quadruple {253#true} {254#false} #510#return; {254#false} is VALID [2020-07-17 23:59:58,854 INFO L263 TraceCheckUtils]: 0: Hoare triple {253#true} call ULTIMATE.init(); {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} is VALID [2020-07-17 23:59:58,854 INFO L280 TraceCheckUtils]: 1: Hoare triple {288#(and (= ~ldv_state_variable_0~0 |old(~ldv_state_variable_0~0)|) (= ~ldv_retval_0~0 |old(~ldv_retval_0~0)|) (= |#t~string90.base| |old(#t~string90.base)|) (= |#t~string131.base| |old(#t~string131.base)|) (= |#t~string106.offset| |old(#t~string106.offset)|) (= |#t~string115.base| |old(#t~string115.base)|) (= |#t~string112.base| |old(#t~string112.base)|) (= |#t~string125.offset| |old(#t~string125.offset)|) (= ~LDV_IN_INTERRUPT~0 |old(~LDV_IN_INTERRUPT~0)|) (= ~__mod_hid__ax_devices_device_table~0.group |old(~__mod_hid__ax_devices_device_table~0.group)|) (= |#t~string106.base| |old(#t~string106.base)|) (= |#t~string131.offset| |old(#t~string131.offset)|) (= |~#ax_driver~0.base| |old(~#ax_driver~0.base)|) (= |#t~string128.offset| |old(#t~string128.offset)|) (= |#t~string113.offset| |old(#t~string113.offset)|) (= |~#ax_driver~0.offset| |old(~#ax_driver~0.offset)|) (= |#t~string128.base| |old(#t~string128.base)|) (= |~#ax_devices~0.base| |old(~#ax_devices~0.base)|) (= |#t~string90.offset| |old(#t~string90.offset)|) (= |#t~string81.base| |old(#t~string81.base)|) (= ~ref_cnt~0 |old(~ref_cnt~0)|) (= ~__mod_hid__ax_devices_device_table~0.driver_data |old(~__mod_hid__ax_devices_device_table~0.driver_data)|) (= |#t~string119.base| |old(#t~string119.base)|) (= |#t~string96.offset| |old(#t~string96.offset)|) (= ~__mod_hid__ax_devices_device_table~0.product |old(~__mod_hid__ax_devices_device_table~0.product)|) (= |#t~string113.base| |old(#t~string113.base)|) (= |#t~string111.offset| |old(#t~string111.offset)|) (= |#t~string80.base| |old(#t~string80.base)|) (= |#t~string119.offset| |old(#t~string119.offset)|) (= ~ldv_spin~0 |old(~ldv_spin~0)|) (= |#t~string80.offset| |old(#t~string80.offset)|) (= ~__mod_hid__ax_devices_device_table~0.vendor |old(~__mod_hid__ax_devices_device_table~0.vendor)|) (= |#t~string133.base| |old(#t~string133.base)|) (= ~ax_driver_group0~0.base |old(~ax_driver_group0~0.base)|) (= |#NULL.base| |old(#NULL.base)|) (= |~#ax_devices~0.offset| |old(~#ax_devices~0.offset)|) (= |#NULL.offset| |old(#NULL.offset)|) (= |#t~string89.offset| |old(#t~string89.offset)|) (= |old(#length)| |#length|) (= |#t~string132.offset| |old(#t~string132.offset)|) (= |#t~string132.base| |old(#t~string132.base)|) (= |#t~string81.offset| |old(#t~string81.offset)|) (= ~__mod_hid__ax_devices_device_table~0.bus |old(~__mod_hid__ax_devices_device_table~0.bus)|) (= |#t~string115.offset| |old(#t~string115.offset)|) (= |#t~string133.offset| |old(#t~string133.offset)|) (= |#t~string112.offset| |old(#t~string112.offset)|) (= |#valid| |old(#valid)|) (= ~ldv_state_variable_1~0 |old(~ldv_state_variable_1~0)|) (= |#t~string89.base| |old(#t~string89.base)|) (= |#t~string125.base| |old(#t~string125.base)|) (= |#t~string96.base| |old(#t~string96.base)|) (= ~ldv_retval_1~0 |old(~ldv_retval_1~0)|) (= |#t~string122.offset| |old(#t~string122.offset)|) (= |#t~string114.offset| |old(#t~string114.offset)|) (= |#t~string111.base| |old(#t~string111.base)|) (= |#t~string122.base| |old(#t~string122.base)|) (= |#t~string114.base| |old(#t~string114.base)|) (= ~ax_driver_group0~0.offset |old(~ax_driver_group0~0.offset)|))} #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(31);call #t~string81.base, #t~string81.offset := #Ultimate.allocOnStack(212);call #t~string89.base, #t~string89.offset := #Ultimate.allocOnStack(32);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(212);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(25);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(37);call #t~string111.base, #t~string111.offset := #Ultimate.allocOnStack(77);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(9);call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(9);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(212);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(29);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(29);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(14);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(17);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(52);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(16);call #t~string132.base, #t~string132.offset := #Ultimate.allocOnStack(6);call write~init~int(97, #t~string132.base, #t~string132.offset, 1);call write~init~int(99, #t~string132.base, 1 + #t~string132.offset, 1);call write~init~int(114, #t~string132.base, 2 + #t~string132.offset, 1);call write~init~int(117, #t~string132.base, 3 + #t~string132.offset, 1);call write~init~int(120, #t~string132.base, 4 + #t~string132.offset, 1);call write~init~int(0, #t~string132.base, 5 + #t~string132.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(9);~ldv_state_variable_1~0 := 0;~LDV_IN_INTERRUPT~0 := 1;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 0;~ax_driver_group0~0.base, ~ax_driver_group0~0.offset := 0, 0;call ~#ax_devices~0.base, ~#ax_devices~0.offset := #Ultimate.allocOnStack(60);call write~init~int(3, ~#ax_devices~0.base, ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 2 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 4 + ~#ax_devices~0.offset, 4);call write~init~int(2050, ~#ax_devices~0.base, 8 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 12 + ~#ax_devices~0.offset, 8);call write~init~int(3, ~#ax_devices~0.base, 20 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 22 + ~#ax_devices~0.offset, 2);call write~init~int(6708, ~#ax_devices~0.base, 24 + ~#ax_devices~0.offset, 4);call write~init~int(63237, ~#ax_devices~0.base, 28 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 32 + ~#ax_devices~0.offset, 8);call write~init~int(0, ~#ax_devices~0.base, 40 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 42 + ~#ax_devices~0.offset, 2);call write~init~int(0, ~#ax_devices~0.base, 44 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 48 + ~#ax_devices~0.offset, 4);call write~init~int(0, ~#ax_devices~0.base, 52 + ~#ax_devices~0.offset, 8);~__mod_hid__ax_devices_device_table~0.bus := 0;~__mod_hid__ax_devices_device_table~0.group := 0;~__mod_hid__ax_devices_device_table~0.vendor := 0;~__mod_hid__ax_devices_device_table~0.product := 0;~__mod_hid__ax_devices_device_table~0.driver_data := 0;call ~#ax_driver~0.base, ~#ax_driver~0.offset := #Ultimate.allocOnStack(333);call write~init~$Pointer$(#t~string132.base, #t~string132.offset, ~#ax_driver~0.base, ~#ax_driver~0.offset, 8);call write~init~$Pointer$(~#ax_devices~0.base, ~#ax_devices~0.offset, ~#ax_driver~0.base, 8 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 16 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 24 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 32 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 36 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 40 + ~#ax_driver~0.offset, 4);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 44 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 52 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 60 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 68 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 76 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 84 + ~#ax_driver~0.offset, 4);call write~init~int(0, ~#ax_driver~0.base, 88 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_probe.base, #funAddr~ax_probe.offset, ~#ax_driver~0.base, 100 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(#funAddr~ax_remove.base, #funAddr~ax_remove.offset, ~#ax_driver~0.base, 108 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 116 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 124 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 132 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 140 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 148 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 156 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 164 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 172 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 180 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 188 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 196 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 204 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 212 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 220 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 228 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 236 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 244 + ~#ax_driver~0.offset, 8);call write~init~int(0, ~#ax_driver~0.base, 252 + ~#ax_driver~0.offset, 1);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 253 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 261 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 269 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 277 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 285 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 293 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 301 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 309 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 317 + ~#ax_driver~0.offset, 8);call write~init~$Pointer$(0, 0, ~#ax_driver~0.base, 325 + ~#ax_driver~0.offset, 8);~ldv_retval_0~0 := 0;~ldv_retval_1~0 := 0;~ldv_spin~0 := 0; {253#true} is VALID [2020-07-17 23:59:58,855 INFO L280 TraceCheckUtils]: 2: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,855 INFO L275 TraceCheckUtils]: 3: Hoare quadruple {253#true} {253#true} #568#return; {253#true} is VALID [2020-07-17 23:59:58,855 INFO L263 TraceCheckUtils]: 4: Hoare triple {253#true} call #t~ret159 := main(); {253#true} is VALID [2020-07-17 23:59:58,855 INFO L280 TraceCheckUtils]: 5: Hoare triple {253#true} havoc ~ldvarg0~0.base, ~ldvarg0~0.offset;havoc ~tmp~13.base, ~tmp~13.offset;havoc ~tmp___0~3;havoc ~tmp___1~0;havoc ~tmp___2~0; {253#true} is VALID [2020-07-17 23:59:58,857 INFO L263 TraceCheckUtils]: 6: Hoare triple {253#true} call #t~ret136.base, #t~ret136.offset := ldv_zalloc(24); {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} is VALID [2020-07-17 23:59:58,857 INFO L280 TraceCheckUtils]: 7: Hoare triple {289#(and (= |#valid| |old(#valid)|) (= |#memory_int| |old(#memory_int)|) (= |old(#length)| |#length|))} ~size := #in~size;havoc ~p~1.base, ~p~1.offset;havoc ~tmp~1.base, ~tmp~1.offset;havoc ~tmp___0~1;assume -2147483648 <= #t~nondet10 && #t~nondet10 <= 2147483647;~tmp___0~1 := #t~nondet10;havoc #t~nondet10; {253#true} is VALID [2020-07-17 23:59:58,858 INFO L280 TraceCheckUtils]: 8: Hoare triple {253#true} assume 0 != ~tmp___0~1;#res.base, #res.offset := 0, 0; {253#true} is VALID [2020-07-17 23:59:58,858 INFO L280 TraceCheckUtils]: 9: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,858 INFO L275 TraceCheckUtils]: 10: Hoare quadruple {253#true} {253#true} #472#return; {253#true} is VALID [2020-07-17 23:59:58,858 INFO L280 TraceCheckUtils]: 11: Hoare triple {253#true} ~tmp~13.base, ~tmp~13.offset := #t~ret136.base, #t~ret136.offset;havoc #t~ret136.base, #t~ret136.offset;~ldvarg0~0.base, ~ldvarg0~0.offset := ~tmp~13.base, ~tmp~13.offset; {253#true} is VALID [2020-07-17 23:59:58,859 INFO L263 TraceCheckUtils]: 12: Hoare triple {253#true} call ldv_initialize(); {253#true} is VALID [2020-07-17 23:59:58,859 INFO L280 TraceCheckUtils]: 13: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,859 INFO L275 TraceCheckUtils]: 14: Hoare quadruple {253#true} {253#true} #474#return; {253#true} is VALID [2020-07-17 23:59:58,860 INFO L280 TraceCheckUtils]: 15: Hoare triple {253#true} ~ldv_state_variable_1~0 := 0;~ref_cnt~0 := 0;~ldv_state_variable_0~0 := 1; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-17 23:59:58,861 INFO L280 TraceCheckUtils]: 16: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume -2147483648 <= #t~nondet137 && #t~nondet137 <= 2147483647;~tmp___0~3 := #t~nondet137;havoc #t~nondet137;#t~switch138 := 0 == ~tmp___0~3; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-17 23:59:58,862 INFO L280 TraceCheckUtils]: 17: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume #t~switch138; {264#(= 0 ~ldv_state_variable_1~0)} is VALID [2020-07-17 23:59:58,863 INFO L280 TraceCheckUtils]: 18: Hoare triple {264#(= 0 ~ldv_state_variable_1~0)} assume 0 != ~ldv_state_variable_1~0;assume -2147483648 <= #t~nondet139 && #t~nondet139 <= 2147483647;~tmp___1~0 := #t~nondet139;havoc #t~nondet139;#t~switch140 := 0 == ~tmp___1~0; {254#false} is VALID [2020-07-17 23:59:58,863 INFO L280 TraceCheckUtils]: 19: Hoare triple {254#false} assume #t~switch140; {254#false} is VALID [2020-07-17 23:59:58,863 INFO L280 TraceCheckUtils]: 20: Hoare triple {254#false} assume 1 == ~ldv_state_variable_1~0; {254#false} is VALID [2020-07-17 23:59:58,864 INFO L263 TraceCheckUtils]: 21: Hoare triple {254#false} call #t~ret141 := ax_probe(~ax_driver_group0~0.base, ~ax_driver_group0~0.offset, ~ldvarg0~0.base, ~ldvarg0~0.offset); {254#false} is VALID [2020-07-17 23:59:58,864 INFO L280 TraceCheckUtils]: 22: Hoare triple {254#false} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~id.base, ~id.offset := #in~id.base, #in~id.offset;havoc ~error~1;call ~#descriptor~0.base, ~#descriptor~0.offset := #Ultimate.allocOnStack(37);havoc ~tmp~10;call write~$Pointer$(#t~string112.base, #t~string112.offset, ~#descriptor~0.base, ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string113.base, #t~string113.offset, ~#descriptor~0.base, 8 + ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string114.base, #t~string114.offset, ~#descriptor~0.base, 16 + ~#descriptor~0.offset, 8);call write~$Pointer$(#t~string115.base, #t~string115.offset, ~#descriptor~0.base, 24 + ~#descriptor~0.offset, 8);call write~int(162, ~#descriptor~0.base, 32 + ~#descriptor~0.offset, 4);call write~int(0, ~#descriptor~0.base, 36 + ~#descriptor~0.offset, 1);call #t~mem116 := read~int(~#descriptor~0.base, 36 + ~#descriptor~0.offset, 1); {254#false} is VALID [2020-07-17 23:59:58,864 INFO L263 TraceCheckUtils]: 23: Hoare triple {254#false} call #t~ret117 := ldv__builtin_expect(~bitwiseAnd(#t~mem116 % 256, 1), 0); {253#true} is VALID [2020-07-17 23:59:58,865 INFO L280 TraceCheckUtils]: 24: Hoare triple {253#true} ~exp := #in~exp;~c := #in~c;#res := ~exp; {253#true} is VALID [2020-07-17 23:59:58,865 INFO L280 TraceCheckUtils]: 25: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,865 INFO L275 TraceCheckUtils]: 26: Hoare quadruple {253#true} {254#false} #494#return; {254#false} is VALID [2020-07-17 23:59:58,866 INFO L280 TraceCheckUtils]: 27: Hoare triple {254#false} assume -9223372036854775808 <= #t~ret117 && #t~ret117 <= 9223372036854775807;~tmp~10 := #t~ret117;havoc #t~ret117;havoc #t~mem116; {254#false} is VALID [2020-07-17 23:59:58,866 INFO L280 TraceCheckUtils]: 28: Hoare triple {254#false} assume 0 != ~tmp~10;havoc #t~nondet118; {254#false} is VALID [2020-07-17 23:59:58,866 INFO L263 TraceCheckUtils]: 29: Hoare triple {254#false} call #t~ret120 := hid_parse(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-17 23:59:58,866 INFO L280 TraceCheckUtils]: 30: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;havoc ~tmp~5; {253#true} is VALID [2020-07-17 23:59:58,867 INFO L263 TraceCheckUtils]: 31: Hoare triple {253#true} call #t~ret36 := hid_open_report(~hdev.base, ~hdev.offset); {253#true} is VALID [2020-07-17 23:59:58,867 INFO L280 TraceCheckUtils]: 32: Hoare triple {253#true} ~arg0.base, ~arg0.offset := #in~arg0.base, #in~arg0.offset;assume -2147483648 <= #t~nondet153 && #t~nondet153 <= 2147483647;#res := #t~nondet153;havoc #t~nondet153; {253#true} is VALID [2020-07-17 23:59:58,867 INFO L280 TraceCheckUtils]: 33: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,868 INFO L275 TraceCheckUtils]: 34: Hoare quadruple {253#true} {253#true} #572#return; {253#true} is VALID [2020-07-17 23:59:58,868 INFO L280 TraceCheckUtils]: 35: Hoare triple {253#true} assume -2147483648 <= #t~ret36 && #t~ret36 <= 2147483647;~tmp~5 := #t~ret36;havoc #t~ret36;#res := ~tmp~5; {253#true} is VALID [2020-07-17 23:59:58,868 INFO L280 TraceCheckUtils]: 36: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,869 INFO L275 TraceCheckUtils]: 37: Hoare quadruple {253#true} {254#false} #496#return; {254#false} is VALID [2020-07-17 23:59:58,869 INFO L280 TraceCheckUtils]: 38: Hoare triple {254#false} assume -2147483648 <= #t~ret120 && #t~ret120 <= 2147483647;~error~1 := #t~ret120;havoc #t~ret120; {254#false} is VALID [2020-07-17 23:59:58,869 INFO L280 TraceCheckUtils]: 39: Hoare triple {254#false} assume !(0 != ~error~1); {254#false} is VALID [2020-07-17 23:59:58,870 INFO L263 TraceCheckUtils]: 40: Hoare triple {254#false} call #t~ret123 := hid_hw_start(~hdev.base, ~hdev.offset, 13); {253#true} is VALID [2020-07-17 23:59:58,870 INFO L280 TraceCheckUtils]: 41: Hoare triple {253#true} ~hdev.base, ~hdev.offset := #in~hdev.base, #in~hdev.offset;~connect_mask := #in~connect_mask;havoc ~ret~0;havoc ~tmp~6;call #t~mem40.base, #t~mem40.offset := read~$Pointer$(~hdev.base, 7869 + ~hdev.offset, 8);call #t~mem41.base, #t~mem41.offset := read~$Pointer$(#t~mem40.base, #t~mem40.offset, 8); {253#true} is VALID [2020-07-17 23:59:58,870 INFO L263 TraceCheckUtils]: 42: Hoare triple {253#true} call #t~ret42 := ##fun~$Pointer$~TO~int(~hdev.base, ~hdev.offset, #t~mem41.base, #t~mem41.offset); {253#true} is VALID [2020-07-17 23:59:58,871 INFO L280 TraceCheckUtils]: 43: Hoare triple {253#true} #~56.base, #~56.offset := #in~56.base, #in~56.offset; {253#true} is VALID [2020-07-17 23:59:58,871 INFO L280 TraceCheckUtils]: 44: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,871 INFO L275 TraceCheckUtils]: 45: Hoare quadruple {253#true} {253#true} #550#return; {253#true} is VALID [2020-07-17 23:59:58,871 INFO L280 TraceCheckUtils]: 46: Hoare triple {253#true} assume -2147483648 <= #t~ret42 && #t~ret42 <= 2147483647;~tmp~6 := #t~ret42;havoc #t~mem40.base, #t~mem40.offset;havoc #t~mem41.base, #t~mem41.offset;havoc #t~ret42;~ret~0 := ~tmp~6; {253#true} is VALID [2020-07-17 23:59:58,872 INFO L280 TraceCheckUtils]: 47: Hoare triple {253#true} assume 0 != ~ret~0 || 0 == ~connect_mask % 4294967296;#res := ~ret~0; {253#true} is VALID [2020-07-17 23:59:58,872 INFO L280 TraceCheckUtils]: 48: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,872 INFO L275 TraceCheckUtils]: 49: Hoare quadruple {253#true} {254#false} #498#return; {254#false} is VALID [2020-07-17 23:59:58,873 INFO L280 TraceCheckUtils]: 50: Hoare triple {254#false} assume -2147483648 <= #t~ret123 && #t~ret123 <= 2147483647;~error~1 := #t~ret123;havoc #t~ret123; {254#false} is VALID [2020-07-17 23:59:58,873 INFO L280 TraceCheckUtils]: 51: Hoare triple {254#false} assume !(0 != ~error~1); {254#false} is VALID [2020-07-17 23:59:58,873 INFO L263 TraceCheckUtils]: 52: Hoare triple {254#false} call #t~ret126 := axff_init(~hdev.base, ~hdev.offset); {254#false} is VALID [2020-07-17 23:59:58,874 INFO L280 TraceCheckUtils]: 53: Hoare triple {254#false} ~hid.base, ~hid.offset := #in~hid.base, #in~hid.offset;havoc ~axff~1.base, ~axff~1.offset;havoc ~report~1.base, ~report~1.offset;havoc ~hidinput~0.base, ~hidinput~0.offset;havoc ~__mptr~0.base, ~__mptr~0.offset;havoc ~report_list~0.base, ~report_list~0.offset;havoc ~dev~0.base, ~dev~0.offset;havoc ~field_count~1;havoc ~i~1;havoc ~j~1;havoc ~error~0;havoc ~tmp~9;havoc ~__mptr___0~0.base, ~__mptr___0~0.offset;havoc ~tmp___0~2.base, ~tmp___0~2.offset;call #t~mem92.base, #t~mem92.offset := read~$Pointer$(~hid.base, 7890 + ~hid.offset, 8);~__mptr~0.base, ~__mptr~0.offset := #t~mem92.base, #t~mem92.offset;havoc #t~mem92.base, #t~mem92.offset;~hidinput~0.base, ~hidinput~0.offset := ~__mptr~0.base, ~__mptr~0.offset;~report_list~0.base, ~report_list~0.offset := ~hid.base, 2140 + ~hid.offset;call #t~mem93.base, #t~mem93.offset := read~$Pointer$(~hidinput~0.base, 24 + ~hidinput~0.offset, 8);~dev~0.base, ~dev~0.offset := #t~mem93.base, #t~mem93.offset;havoc #t~mem93.base, #t~mem93.offset;~field_count~1 := 0; {254#false} is VALID [2020-07-17 23:59:58,874 INFO L263 TraceCheckUtils]: 54: Hoare triple {254#false} call #t~ret94 := list_empty(~report_list~0.base, ~report_list~0.offset); {253#true} is VALID [2020-07-17 23:59:58,874 INFO L280 TraceCheckUtils]: 55: Hoare triple {253#true} ~head.base, ~head.offset := #in~head.base, #in~head.offset;call #t~mem4.base, #t~mem4.offset := read~$Pointer$(~head.base, ~head.offset, 8);#res := (if (#t~mem4.base + #t~mem4.offset) % 18446744073709551616 == (~head.base + ~head.offset) % 18446744073709551616 then 1 else 0);havoc #t~mem4.base, #t~mem4.offset; {253#true} is VALID [2020-07-17 23:59:58,875 INFO L280 TraceCheckUtils]: 56: Hoare triple {253#true} assume true; {253#true} is VALID [2020-07-17 23:59:58,875 INFO L275 TraceCheckUtils]: 57: Hoare quadruple {253#true} {254#false} #510#return; {254#false} is VALID [2020-07-17 23:59:58,875 INFO L280 TraceCheckUtils]: 58: Hoare triple {254#false} assume -2147483648 <= #t~ret94 && #t~ret94 <= 2147483647;~tmp~9 := #t~ret94;havoc #t~ret94; {254#false} is VALID [2020-07-17 23:59:58,876 INFO L280 TraceCheckUtils]: 59: Hoare triple {254#false} assume !(0 != ~tmp~9);call #t~mem97.base, #t~mem97.offset := read~$Pointer$(~report_list~0.base, ~report_list~0.offset, 8);~__mptr___0~0.base, ~__mptr___0~0.offset := #t~mem97.base, #t~mem97.offset;havoc #t~mem97.base, #t~mem97.offset;~report~1.base, ~report~1.offset := ~__mptr___0~0.base, ~__mptr___0~0.offset;~i~1 := 0; {254#false} is VALID [2020-07-17 23:59:58,876 INFO L280 TraceCheckUtils]: 60: Hoare triple {254#false} call #t~mem102 := read~int(~report~1.base, 2072 + ~report~1.offset, 4); {254#false} is VALID [2020-07-17 23:59:58,876 INFO L280 TraceCheckUtils]: 61: Hoare triple {254#false} assume !(~i~1 % 4294967296 < #t~mem102 % 4294967296);havoc #t~mem102;#t~short104 := ~field_count~1 <= 3; {254#false} is VALID [2020-07-17 23:59:58,876 INFO L280 TraceCheckUtils]: 62: Hoare triple {254#false} assume #t~short104;call #t~mem103 := read~int(~hid.base, 52 + ~hid.offset, 4);#t~short104 := 63237 != #t~mem103 % 4294967296; {254#false} is VALID [2020-07-17 23:59:58,877 INFO L280 TraceCheckUtils]: 63: Hoare triple {254#false} assume !#t~short104;havoc #t~mem103;havoc #t~short104; {254#false} is VALID [2020-07-17 23:59:58,877 INFO L263 TraceCheckUtils]: 64: Hoare triple {254#false} call #t~ret107.base, #t~ret107.offset := kzalloc(8, 208); {254#false} is VALID [2020-07-17 23:59:58,877 INFO L280 TraceCheckUtils]: 65: Hoare triple {254#false} ~size := #in~size;~flags := #in~flags; {254#false} is VALID [2020-07-17 23:59:58,878 INFO L263 TraceCheckUtils]: 66: Hoare triple {254#false} call ldv_check_alloc_flags(~flags); {254#false} is VALID [2020-07-17 23:59:58,878 INFO L280 TraceCheckUtils]: 67: Hoare triple {254#false} ~flags := #in~flags; {254#false} is VALID [2020-07-17 23:59:58,878 INFO L280 TraceCheckUtils]: 68: Hoare triple {254#false} assume !(0 == ~ldv_spin~0 || 0 == ~bitwiseAnd(~flags, 16) % 4294967296); {254#false} is VALID [2020-07-17 23:59:58,879 INFO L263 TraceCheckUtils]: 69: Hoare triple {254#false} call ldv_error(); {254#false} is VALID [2020-07-17 23:59:58,879 INFO L280 TraceCheckUtils]: 70: Hoare triple {254#false} assume !false; {254#false} is VALID [2020-07-17 23:59:58,905 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2020-07-17 23:59:58,906 INFO L354 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [274729587] [2020-07-17 23:59:58,907 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2020-07-17 23:59:58,907 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2020-07-17 23:59:58,908 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82416793] [2020-07-17 23:59:58,914 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2020-07-17 23:59:58,917 INFO L84 Accepts]: Finished accepts. word is accepted. [2020-07-17 23:59:58,922 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states. [2020-07-17 23:59:59,052 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 71 edges. 71 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-17 23:59:59,053 INFO L459 AbstractCegarLoop]: Interpolant automaton has 5 states [2020-07-17 23:59:59,053 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2020-07-17 23:59:59,062 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2020-07-17 23:59:59,063 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2020-07-17 23:59:59,065 INFO L87 Difference]: Start difference. First operand 250 states. Second operand 5 states. [2020-07-17 23:59:59,363 WARN L193 SmtUtils]: Spent 239.00 ms on a formula simplification that was a NOOP. DAG size: 178 [2020-07-18 00:00:00,007 WARN L193 SmtUtils]: Spent 236.00 ms on a formula simplification that was a NOOP. DAG size: 180 [2020-07-18 00:00:00,599 WARN L193 SmtUtils]: Spent 208.00 ms on a formula simplification that was a NOOP. DAG size: 177 [2020-07-18 00:00:09,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-18 00:00:09,903 INFO L93 Difference]: Finished difference Result 564 states and 711 transitions. [2020-07-18 00:00:09,903 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2020-07-18 00:00:09,903 INFO L78 Accepts]: Start accepts. Automaton has 5 states. Word has length 71 [2020-07-18 00:00:09,904 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2020-07-18 00:00:09,905 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-18 00:00:09,944 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 711 transitions. [2020-07-18 00:00:09,944 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2020-07-18 00:00:09,967 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 711 transitions. [2020-07-18 00:00:09,968 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 711 transitions. [2020-07-18 00:00:11,824 INFO L119 InductivityCheck]: Floyd-Hoare automaton has 711 edges. 711 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2020-07-18 00:00:11,861 INFO L225 Difference]: With dead ends: 564 [2020-07-18 00:00:11,861 INFO L226 Difference]: Without dead ends: 286 [2020-07-18 00:00:11,869 INFO L675 BasicCegarLoop]: 0 DeclaredPredicates, 27 GetRequests, 20 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 1.2s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2020-07-18 00:00:11,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 286 states. [2020-07-18 00:00:13,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 286 to 214. [2020-07-18 00:00:13,511 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2020-07-18 00:00:13,512 INFO L82 GeneralOperation]: Start isEquivalent. First operand 286 states. Second operand 214 states. [2020-07-18 00:00:13,513 INFO L74 IsIncluded]: Start isIncluded. First operand 286 states. Second operand 214 states. [2020-07-18 00:00:13,513 INFO L87 Difference]: Start difference. First operand 286 states. Second operand 214 states. [2020-07-18 00:00:13,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-18 00:00:13,533 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2020-07-18 00:00:13,533 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 355 transitions. [2020-07-18 00:00:13,537 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-18 00:00:13,538 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-18 00:00:13,538 INFO L74 IsIncluded]: Start isIncluded. First operand 214 states. Second operand 286 states. [2020-07-18 00:00:13,538 INFO L87 Difference]: Start difference. First operand 214 states. Second operand 286 states. [2020-07-18 00:00:13,557 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2020-07-18 00:00:13,557 INFO L93 Difference]: Finished difference Result 286 states and 355 transitions. [2020-07-18 00:00:13,557 INFO L276 IsEmpty]: Start isEmpty. Operand 286 states and 355 transitions. [2020-07-18 00:00:13,559 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2020-07-18 00:00:13,559 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2020-07-18 00:00:13,559 INFO L88 GeneralOperation]: Finished isEquivalent. [2020-07-18 00:00:13,560 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2020-07-18 00:00:13,560 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214 states. [2020-07-18 00:00:13,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214 states to 214 states and 249 transitions. [2020-07-18 00:00:13,573 INFO L78 Accepts]: Start accepts. Automaton has 214 states and 249 transitions. Word has length 71 [2020-07-18 00:00:13,574 INFO L84 Accepts]: Finished accepts. word is rejected. [2020-07-18 00:00:13,574 INFO L479 AbstractCegarLoop]: Abstraction has 214 states and 249 transitions. [2020-07-18 00:00:13,574 INFO L480 AbstractCegarLoop]: Interpolant automaton has 5 states. [2020-07-18 00:00:13,574 INFO L276 IsEmpty]: Start isEmpty. Operand 214 states and 249 transitions. [2020-07-18 00:00:13,577 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 101 [2020-07-18 00:00:13,578 INFO L414 BasicCegarLoop]: Found error trace [2020-07-18 00:00:13,578 INFO L422 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2020-07-18 00:00:13,579 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2020-07-18 00:00:13,579 INFO L427 AbstractCegarLoop]: === Iteration 2 === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION]=== [2020-07-18 00:00:13,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2020-07-18 00:00:13,579 INFO L82 PathProgramCache]: Analyzing trace with hash 345320668, now seen corresponding path program 1 times [2020-07-18 00:00:13,580 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2020-07-18 00:00:13,580 INFO L354 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1346261723] [2020-07-18 00:00:13,580 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2020-07-18 00:00:13,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2020-07-18 00:00:13,728 WARN L516 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2020-07-18 00:00:13,729 FATAL L? ?]: The Plugin de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction has thrown an exception: java.lang.AssertionError at de.uni_freiburg.informatik.ultimate.smtinterpol.proof.FixResolutionProof.fix(FixResolutionProof.java:191) at de.uni_freiburg.informatik.ultimate.smtinterpol.proof.ProofTermGenerator.convert(ProofTermGenerator.java:150) at de.uni_freiburg.informatik.ultimate.smtinterpol.smtlib2.SMTInterpol.getProof(SMTInterpol.java:797) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.getInterpolants(NoopScript.java:392) at de.uni_freiburg.informatik.ultimate.logic.NoopScript.getInterpolants(NoopScript.java:386) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.getInterpolants(WrapperScript.java:337) at de.uni_freiburg.informatik.ultimate.logic.WrapperScript.getInterpolants(WrapperScript.java:337) at de.uni_freiburg.informatik.ultimate.lib.smtlibutils.ManagedScript.getInterpolants(ManagedScript.java:191) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.NestedInterpolantsBuilder.computeCraigInterpolants(NestedInterpolantsBuilder.java:285) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.NestedInterpolantsBuilder.(NestedInterpolantsBuilder.java:166) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolantsRecursive(InterpolatingTraceCheckCraig.java:337) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.computeInterpolants(InterpolatingTraceCheckCraig.java:239) at de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.singletracecheck.InterpolatingTraceCheckCraig.(InterpolatingTraceCheckCraig.java:108) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleCraig.construct(IpTcStrategyModuleCraig.java:79) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleCraig.construct(IpTcStrategyModuleCraig.java:1) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.getOrConstruct(IpTcStrategyModuleBase.java:101) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.IpTcStrategyModuleBase.isCorrect(IpTcStrategyModuleBase.java:57) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.checkFeasibility(AutomatonFreeRefinementEngine.java:242) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.executeStrategy(AutomatonFreeRefinementEngine.java:166) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.AutomatonFreeRefinementEngine.(AutomatonFreeRefinementEngine.java:85) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.tracehandling.TraceAbstractionRefinementEngine.(TraceAbstractionRefinementEngine.java:75) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.BasicCegarLoop.isCounterexampleFeasible(BasicCegarLoop.java:508) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterateInternal(AbstractCegarLoop.java:436) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.AbstractCegarLoop.iterate(AbstractCegarLoop.java:370) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.CegarLoopResult.iterate(CegarLoopResult.java:142) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.iterateNew(TraceAbstractionStarter.java:334) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.runCegarLoops(TraceAbstractionStarter.java:175) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionStarter.(TraceAbstractionStarter.java:127) at de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver.finish(TraceAbstractionObserver.java:120) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runObserver(PluginConnector.java:168) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.runTool(PluginConnector.java:151) at de.uni_freiburg.informatik.ultimate.core.coreplugin.PluginConnector.run(PluginConnector.java:128) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.executePluginConnector(ToolchainWalker.java:232) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.processPlugin(ToolchainWalker.java:226) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walkUnprotected(ToolchainWalker.java:142) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainWalker.walk(ToolchainWalker.java:104) at de.uni_freiburg.informatik.ultimate.core.coreplugin.ToolchainManager$Toolchain.processToolchain(ToolchainManager.java:317) at de.uni_freiburg.informatik.ultimate.core.coreplugin.toolchain.DefaultToolchainJob.run(DefaultToolchainJob.java:145) at org.eclipse.core.internal.jobs.Worker.run(Worker.java:55) [2020-07-18 00:00:13,735 INFO L168 Benchmark]: Toolchain (without parser) took 23204.03 ms. Allocated memory was 137.9 MB in the beginning and 639.1 MB in the end (delta: 501.2 MB). Free memory was 98.7 MB in the beginning and 315.1 MB in the end (delta: -216.4 MB). Peak memory consumption was 284.8 MB. Max. memory is 7.1 GB. [2020-07-18 00:00:13,736 INFO L168 Benchmark]: CDTParser took 0.22 ms. Allocated memory is still 137.9 MB. Free memory was 121.0 MB in the beginning and 120.8 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. [2020-07-18 00:00:13,737 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1377.32 ms. Allocated memory was 137.9 MB in the beginning and 203.9 MB in the end (delta: 66.1 MB). Free memory was 98.3 MB in the beginning and 129.5 MB in the end (delta: -31.3 MB). Peak memory consumption was 40.0 MB. Max. memory is 7.1 GB. [2020-07-18 00:00:13,738 INFO L168 Benchmark]: Boogie Preprocessor took 181.02 ms. Allocated memory is still 203.9 MB. Free memory was 129.5 MB in the beginning and 119.3 MB in the end (delta: 10.2 MB). Peak memory consumption was 10.2 MB. Max. memory is 7.1 GB. [2020-07-18 00:00:13,739 INFO L168 Benchmark]: RCFGBuilder took 5572.63 ms. Allocated memory was 203.9 MB in the beginning and 439.9 MB in the end (delta: 235.9 MB). Free memory was 119.3 MB in the beginning and 357.2 MB in the end (delta: -237.8 MB). Peak memory consumption was 214.3 MB. Max. memory is 7.1 GB. [2020-07-18 00:00:13,740 INFO L168 Benchmark]: TraceAbstraction took 16065.84 ms. Allocated memory was 439.9 MB in the beginning and 639.1 MB in the end (delta: 199.2 MB). Free memory was 357.2 MB in the beginning and 315.1 MB in the end (delta: 42.1 MB). Peak memory consumption was 241.3 MB. Max. memory is 7.1 GB. [2020-07-18 00:00:13,744 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - AssertionsEnabledResult: Assertions are enabled Assertions are enabled - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.22 ms. Allocated memory is still 137.9 MB. Free memory was 121.0 MB in the beginning and 120.8 MB in the end (delta: 210.0 kB). Peak memory consumption was 210.0 kB. Max. memory is 7.1 GB. * CACSL2BoogieTranslator took 1377.32 ms. Allocated memory was 137.9 MB in the beginning and 203.9 MB in the end (delta: 66.1 MB). Free memory was 98.3 MB in the beginning and 129.5 MB in the end (delta: -31.3 MB). Peak memory consumption was 40.0 MB. Max. memory is 7.1 GB. * Boogie Preprocessor took 181.02 ms. Allocated memory is still 203.9 MB. Free memory was 129.5 MB in the beginning and 119.3 MB in the end (delta: 10.2 MB). Peak memory consumption was 10.2 MB. Max. memory is 7.1 GB. * RCFGBuilder took 5572.63 ms. Allocated memory was 203.9 MB in the beginning and 439.9 MB in the end (delta: 235.9 MB). Free memory was 119.3 MB in the beginning and 357.2 MB in the end (delta: -237.8 MB). Peak memory consumption was 214.3 MB. Max. memory is 7.1 GB. * TraceAbstraction took 16065.84 ms. Allocated memory was 439.9 MB in the beginning and 639.1 MB in the end (delta: 199.2 MB). Free memory was 357.2 MB in the beginning and 315.1 MB in the end (delta: 42.1 MB). Peak memory consumption was 241.3 MB. Max. memory is 7.1 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - ExceptionOrErrorResult: AssertionError: null de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: AssertionError: null: de.uni_freiburg.informatik.ultimate.smtinterpol.proof.FixResolutionProof.fix(FixResolutionProof.java:191) RESULT: Ultimate could not prove your program: Toolchain returned no result. Received shutdown request...