./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.6/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 9ad7fb26 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.6/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash fa2b7015249343fdf8056852ea29542152fe4e2fe5328579e80867d2e6b2b327 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-9ad7fb2 [2021-11-02 22:20:34,434 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-02 22:20:34,437 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-02 22:20:34,477 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-02 22:20:34,478 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-02 22:20:34,480 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-02 22:20:34,482 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-02 22:20:34,485 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-02 22:20:34,487 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-02 22:20:34,488 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-02 22:20:34,490 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-02 22:20:34,492 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-02 22:20:34,492 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-02 22:20:34,494 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-02 22:20:34,496 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-02 22:20:34,498 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-02 22:20:34,499 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-02 22:20:34,501 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-02 22:20:34,503 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-02 22:20:34,506 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-02 22:20:34,509 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-02 22:20:34,510 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-02 22:20:34,512 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-02 22:20:34,514 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-02 22:20:34,518 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-02 22:20:34,518 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-02 22:20:34,519 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-02 22:20:34,520 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-02 22:20:34,521 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-02 22:20:34,522 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-02 22:20:34,523 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-02 22:20:34,524 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-02 22:20:34,525 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-02 22:20:34,527 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-02 22:20:34,528 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-02 22:20:34,529 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-02 22:20:34,530 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-02 22:20:34,530 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-02 22:20:34,530 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-02 22:20:34,532 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-02 22:20:34,533 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-02 22:20:34,534 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-02 22:20:34,575 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-02 22:20:34,575 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-02 22:20:34,576 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-02 22:20:34,576 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-02 22:20:34,584 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-02 22:20:34,584 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-02 22:20:34,585 INFO L138 SettingsManager]: * Use SBE=true [2021-11-02 22:20:34,585 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-02 22:20:34,585 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-02 22:20:34,585 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-02 22:20:34,586 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-02 22:20:34,587 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-02 22:20:34,587 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-02 22:20:34,587 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-02 22:20:34,587 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-02 22:20:34,587 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-02 22:20:34,588 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-02 22:20:34,588 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-02 22:20:34,588 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-02 22:20:34,588 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-02 22:20:34,588 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-02 22:20:34,589 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-02 22:20:34,589 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-02 22:20:34,589 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-02 22:20:34,589 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-02 22:20:34,589 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-02 22:20:34,590 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-02 22:20:34,590 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-02 22:20:34,590 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-02 22:20:34,592 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> fa2b7015249343fdf8056852ea29542152fe4e2fe5328579e80867d2e6b2b327 [2021-11-02 22:20:34,852 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-02 22:20:34,878 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-02 22:20:34,881 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-02 22:20:34,882 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-02 22:20:34,884 INFO L275 PluginConnector]: CDTParser initialized [2021-11-02 22:20:34,885 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/../../sv-benchmarks/c/ldv-validator-v0.6/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i [2021-11-02 22:20:34,966 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/data/57675713d/ed468a32e1ec459aab63f00cec87148e/FLAGf8ee6df97 [2021-11-02 22:20:36,030 INFO L306 CDTParser]: Found 1 translation units. [2021-11-02 22:20:36,031 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/sv-benchmarks/c/ldv-validator-v0.6/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i [2021-11-02 22:20:36,097 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/data/57675713d/ed468a32e1ec459aab63f00cec87148e/FLAGf8ee6df97 [2021-11-02 22:20:36,355 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/data/57675713d/ed468a32e1ec459aab63f00cec87148e [2021-11-02 22:20:36,357 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-02 22:20:36,358 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-02 22:20:36,363 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-02 22:20:36,363 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-02 22:20:36,366 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-02 22:20:36,368 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:20:36" (1/1) ... [2021-11-02 22:20:36,370 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@70e78f8c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:36, skipping insertion in model container [2021-11-02 22:20:36,370 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 02.11 10:20:36" (1/1) ... [2021-11-02 22:20:36,379 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-02 22:20:36,580 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-02 22:20:37,358 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/sv-benchmarks/c/ldv-validator-v0.6/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i[81795,81808] [2021-11-02 22:20:39,976 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:20:40,073 INFO L203 MainTranslator]: Completed pre-run [2021-11-02 22:20:40,166 WARN L228 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/sv-benchmarks/c/ldv-validator-v0.6/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i[81795,81808] [2021-11-02 22:20:40,694 INFO L206 PostProcessor]: Analyzing one entry point: main [2021-11-02 22:20:40,875 INFO L208 MainTranslator]: Completed translation [2021-11-02 22:20:40,876 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40 WrapperNode [2021-11-02 22:20:40,876 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-02 22:20:40,877 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-02 22:20:40,877 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-02 22:20:40,877 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-02 22:20:40,885 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:20:41,096 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:00,419 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-02 22:21:00,420 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-02 22:21:00,420 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-02 22:21:00,420 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-02 22:21:00,428 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:00,429 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:04,022 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:04,023 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:09,615 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:11,781 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:12,502 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:14,031 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-02 22:21:14,034 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-02 22:21:14,034 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-02 22:21:14,034 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-02 22:21:14,035 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (1/1) ... [2021-11-02 22:21:14,057 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-02 22:21:14,076 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/z3 [2021-11-02 22:21:14,096 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-02 22:21:14,121 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_a2aa099c-4a48-45e9-9df9-80364a606b3b/bin/uautomizer-tBqnrhUYjU/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-02 22:21:14,157 INFO L130 BoogieDeclarations]: Found specification of procedure timer_open [2021-11-02 22:21:14,157 INFO L138 BoogieDeclarations]: Found implementation of procedure timer_open [2021-11-02 22:21:14,158 INFO L130 BoogieDeclarations]: Found specification of procedure default_set_channels [2021-11-02 22:21:14,159 INFO L138 BoogieDeclarations]: Found implementation of procedure default_set_channels [2021-11-02 22:21:14,159 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-02 22:21:14,159 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~X~int~X~$Pointer$~TO~int [2021-11-02 22:21:14,160 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~X~int~X~$Pointer$~TO~int [2021-11-02 22:21:14,160 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-02 22:21:14,160 INFO L130 BoogieDeclarations]: Found specification of procedure timer_ioctl [2021-11-02 22:21:14,160 INFO L138 BoogieDeclarations]: Found implementation of procedure timer_ioctl [2021-11-02 22:21:14,160 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~X~int~TO~int [2021-11-02 22:21:14,161 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~X~int~TO~int [2021-11-02 22:21:14,161 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-02 22:21:14,161 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-02 22:21:14,161 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-02 22:21:14,161 INFO L130 BoogieDeclarations]: Found specification of procedure default_set_bits [2021-11-02 22:21:14,162 INFO L138 BoogieDeclarations]: Found implementation of procedure default_set_bits [2021-11-02 22:21:14,162 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-02 22:21:14,162 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-02 22:21:14,162 INFO L130 BoogieDeclarations]: Found specification of procedure timer_close [2021-11-02 22:21:14,162 INFO L138 BoogieDeclarations]: Found implementation of procedure timer_close [2021-11-02 22:21:14,163 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-02 22:21:14,163 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-02 22:21:14,163 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-11-02 22:21:14,163 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-11-02 22:21:14,163 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-02 22:21:14,164 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-02 22:21:14,164 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-02 22:21:14,164 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-02 22:21:14,164 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2021-11-02 22:21:14,164 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-02 22:21:14,165 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-02 22:21:14,165 INFO L130 BoogieDeclarations]: Found specification of procedure reprogram_timer [2021-11-02 22:21:14,165 INFO L138 BoogieDeclarations]: Found implementation of procedure reprogram_timer [2021-11-02 22:21:14,165 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-02 22:21:14,165 INFO L130 BoogieDeclarations]: Found specification of procedure default_set_speed [2021-11-02 22:21:14,166 INFO L138 BoogieDeclarations]: Found implementation of procedure default_set_speed [2021-11-02 22:21:14,166 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-02 22:21:14,166 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-02 22:21:14,166 INFO L130 BoogieDeclarations]: Found specification of procedure def_tmr_ioctl [2021-11-02 22:21:14,166 INFO L138 BoogieDeclarations]: Found implementation of procedure def_tmr_ioctl [2021-11-02 22:31:18,159 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-81: __copy_to_user_#t~ret126 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret126 && __copy_to_user_#t~ret126 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret126;havoc __copy_to_user_#t~ret126; [2021-11-02 22:31:18,159 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-80: __copy_to_user_#t~ret125 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret125 && __copy_to_user_#t~ret125 <= 9223372036854775807;__copy_to_user_~tmp___0~8 := __copy_to_user_#t~ret125;havoc __copy_to_user_#t~ret125; [2021-11-02 22:31:18,160 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-83: __copy_to_user_#t~ret126 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret126 && __copy_to_user_#t~ret126 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret126;havoc __copy_to_user_#t~ret126; [2021-11-02 22:31:18,160 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-82: __copy_to_user_#t~ret125 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret125 && __copy_to_user_#t~ret125 <= 9223372036854775807;__copy_to_user_~tmp___0~8 := __copy_to_user_#t~ret125;havoc __copy_to_user_#t~ret125; [2021-11-02 22:31:18,160 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-85: __copy_to_user_#t~ret126 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret126 && __copy_to_user_#t~ret126 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret126;havoc __copy_to_user_#t~ret126; [2021-11-02 22:31:18,160 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-84: __copy_to_user_#t~ret125 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret125 && __copy_to_user_#t~ret125 <= 9223372036854775807;__copy_to_user_~tmp___0~8 := __copy_to_user_#t~ret125;havoc __copy_to_user_#t~ret125; [2021-11-02 22:31:18,160 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-87: __copy_from_user_#t~ret121 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret121 && __copy_from_user_#t~ret121 <= 9223372036854775807;__copy_from_user_~tmp___1~2 := __copy_from_user_#t~ret121;havoc __copy_from_user_#t~ret121; [2021-11-02 22:31:18,161 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-86: __copy_from_user_#t~ret120 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_from_user_#t~ret120 && __copy_from_user_#t~ret120 <= 9223372036854775807;__copy_from_user_~tmp___0~7 := __copy_from_user_#t~ret120;havoc __copy_from_user_#t~ret120; [2021-11-02 22:31:18,161 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-89: __copy_to_user_#t~ret126 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret126 && __copy_to_user_#t~ret126 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret126;havoc __copy_to_user_#t~ret126; [2021-11-02 22:31:18,161 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-88: __copy_to_user_#t~ret125 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret125 && __copy_to_user_#t~ret125 <= 9223372036854775807;__copy_to_user_~tmp___0~8 := __copy_to_user_#t~ret125;havoc __copy_to_user_#t~ret125; [2021-11-02 22:31:18,161 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-91: __copy_to_user_#t~ret126 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret126 && __copy_to_user_#t~ret126 <= 9223372036854775807;__copy_to_user_~tmp___1~3 := __copy_to_user_#t~ret126;havoc __copy_to_user_#t~ret126; [2021-11-02 22:31:18,161 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L2947-90: __copy_to_user_#t~ret125 := ldv__builtin_expect_#res;assume -9223372036854775808 <= __copy_to_user_#t~ret125 && __copy_to_user_#t~ret125 <= 9223372036854775807;__copy_to_user_~tmp___0~8 := __copy_to_user_#t~ret125;havoc __copy_to_user_#t~ret125; [2021-11-02 22:31:18,162 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3713-1: __copy_to_user_#t~ret127 := copy_user_generic_#res;__copy_to_user_~tmp___2~2 := __copy_to_user_#t~ret127;havoc __copy_to_user_#t~ret127;__copy_to_user_#res := (if __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-02 22:31:18,162 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3713-3: __copy_to_user_#t~ret127 := copy_user_generic_#res;__copy_to_user_~tmp___2~2 := __copy_to_user_#t~ret127;havoc __copy_to_user_#t~ret127;__copy_to_user_#res := (if __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-02 22:31:18,162 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3713-5: __copy_to_user_#t~ret127 := copy_user_generic_#res;__copy_to_user_~tmp___2~2 := __copy_to_user_#t~ret127;havoc __copy_to_user_#t~ret127;__copy_to_user_#res := (if __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-02 22:31:18,163 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3713-7: __copy_from_user_#t~ret122 := copy_user_generic_#res;__copy_from_user_~tmp___2~1 := __copy_from_user_#t~ret122;havoc __copy_from_user_#t~ret122;__copy_from_user_#res := (if __copy_from_user_~tmp___2~1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~1 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-02 22:31:18,163 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3713-9: __copy_to_user_#t~ret127 := copy_user_generic_#res;__copy_to_user_~tmp___2~2 := __copy_to_user_#t~ret127;havoc __copy_to_user_#t~ret127;__copy_to_user_#res := (if __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-02 22:31:18,163 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3713-11: __copy_to_user_#t~ret127 := copy_user_generic_#res;__copy_to_user_~tmp___2~2 := __copy_to_user_#t~ret127;havoc __copy_to_user_#t~ret127;__copy_to_user_#res := (if __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~2 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-02 22:31:18,163 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3738: havoc __copy_from_user_#t~switch119; [2021-11-02 22:31:18,163 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3744: assume __copy_from_user_#t~switch119;__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,164 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3744: assume !__copy_from_user_#t~switch119;__copy_from_user_#t~switch119 := __copy_from_user_#t~switch119 || 4 == __copy_from_user_~size; [2021-11-02 22:31:18,164 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3749: assume __copy_from_user_#t~switch119;__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,164 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3749: assume !__copy_from_user_#t~switch119;__copy_from_user_#t~switch119 := __copy_from_user_#t~switch119 || 8 == __copy_from_user_~size; [2021-11-02 22:31:18,164 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3754: assume __copy_from_user_#t~switch119;__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,164 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3754: assume !__copy_from_user_#t~switch119;__copy_from_user_#t~switch119 := __copy_from_user_#t~switch119 || 10 == __copy_from_user_~size; [2021-11-02 22:31:18,164 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3759: assume __copy_from_user_#t~switch119;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,165 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3759: assume !__copy_from_user_#t~switch119;__copy_from_user_#t~switch119 := __copy_from_user_#t~switch119 || 16 == __copy_from_user_~size; [2021-11-02 22:31:18,165 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3764: assume 0 != __copy_from_user_~tmp___0~7;__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,165 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3764: assume !(0 != __copy_from_user_~tmp___0~7);__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,165 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3772: assume __copy_from_user_#t~switch119;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_from_user_~ret~2 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,165 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3772: assume !__copy_from_user_#t~switch119;__copy_from_user_#t~switch119 := true; [2021-11-02 22:31:18,166 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3777: assume 0 != __copy_from_user_~tmp___1~2;__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,166 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3777: assume !(0 != __copy_from_user_~tmp___1~2);__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,166 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3785: assume __copy_from_user_#t~switch119;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_from_user_~dst.base, __copy_from_user_~dst.offset, __copy_from_user_~src.base, __copy_from_user_~src.offset, __copy_from_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~1;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~1;copy_user_generic_#res := copy_user_generic_~ret~1 % 4294967296; [2021-11-02 22:31:18,166 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3785: assume !__copy_from_user_#t~switch119; [2021-11-02 22:31:18,166 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3803-1: havoc __copy_to_user_#t~switch124; [2021-11-02 22:31:18,167 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3803: havoc __copy_to_user_#t~switch124; [2021-11-02 22:31:18,167 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3803-3: havoc __copy_to_user_#t~switch124; [2021-11-02 22:31:18,167 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3803-2: havoc __copy_to_user_#t~switch124; [2021-11-02 22:31:18,167 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3803-4: havoc __copy_to_user_#t~switch124; [2021-11-02 22:31:18,167 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,168 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 4 == __copy_to_user_~size; [2021-11-02 22:31:18,168 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-2: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,168 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-2: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 4 == __copy_to_user_~size; [2021-11-02 22:31:18,168 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-1: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,168 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-1: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 4 == __copy_to_user_~size; [2021-11-02 22:31:18,168 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-4: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,169 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-4: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 4 == __copy_to_user_~size; [2021-11-02 22:31:18,169 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-3: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,169 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3808-3: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 4 == __copy_to_user_~size; [2021-11-02 22:31:18,169 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,169 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 8 == __copy_to_user_~size; [2021-11-02 22:31:18,169 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-2: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,170 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-2: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 8 == __copy_to_user_~size; [2021-11-02 22:31:18,170 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-1: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,170 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-1: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 8 == __copy_to_user_~size; [2021-11-02 22:31:18,170 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-4: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,170 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-4: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 8 == __copy_to_user_~size; [2021-11-02 22:31:18,171 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-3: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,171 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3812-3: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 8 == __copy_to_user_~size; [2021-11-02 22:31:18,171 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,171 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 10 == __copy_to_user_~size; [2021-11-02 22:31:18,171 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-2: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,171 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-2: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 10 == __copy_to_user_~size; [2021-11-02 22:31:18,172 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-1: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,172 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-1: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 10 == __copy_to_user_~size; [2021-11-02 22:31:18,172 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-4: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,172 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-4: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 10 == __copy_to_user_~size; [2021-11-02 22:31:18,172 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-3: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,172 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3816-3: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 10 == __copy_to_user_~size; [2021-11-02 22:31:18,173 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,173 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 16 == __copy_to_user_~size; [2021-11-02 22:31:18,173 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-2: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,173 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-2: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 16 == __copy_to_user_~size; [2021-11-02 22:31:18,173 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-1: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,174 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-1: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 16 == __copy_to_user_~size; [2021-11-02 22:31:18,174 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-4: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,174 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-4: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 16 == __copy_to_user_~size; [2021-11-02 22:31:18,174 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-3: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,174 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3820-3: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 16 == __copy_to_user_~size; [2021-11-02 22:31:18,175 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824: assume 0 != __copy_to_user_~tmp___0~8;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,175 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824: assume !(0 != __copy_to_user_~tmp___0~8);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,175 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-2: assume 0 != __copy_to_user_~tmp___0~8;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,175 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-2: assume !(0 != __copy_to_user_~tmp___0~8);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,175 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-1: assume 0 != __copy_to_user_~tmp___0~8;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,175 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-1: assume !(0 != __copy_to_user_~tmp___0~8);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,176 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-4: assume 0 != __copy_to_user_~tmp___0~8;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,176 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-4: assume !(0 != __copy_to_user_~tmp___0~8);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,176 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-3: assume 0 != __copy_to_user_~tmp___0~8;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,176 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3824-3: assume !(0 != __copy_to_user_~tmp___0~8);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,176 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,177 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := true; [2021-11-02 22:31:18,177 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-2: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,177 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-2: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := true; [2021-11-02 22:31:18,178 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-1: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,178 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-1: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := true; [2021-11-02 22:31:18,178 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-4: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,178 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-4: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := true; [2021-11-02 22:31:18,179 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-3: assume __copy_to_user_#t~switch124;ldv__builtin_expect_#in~exp, ldv__builtin_expect_#in~c := (if 0 != __copy_to_user_~ret~3 then 1 else 0), 0;havoc ldv__builtin_expect_#res;havoc ldv__builtin_expect_~exp, ldv__builtin_expect_~c;ldv__builtin_expect_~exp := ldv__builtin_expect_#in~exp;ldv__builtin_expect_~c := ldv__builtin_expect_#in~c;ldv__builtin_expect_#res := ldv__builtin_expect_~exp; [2021-11-02 22:31:18,179 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3832-3: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := true; [2021-11-02 22:31:18,179 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,179 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,179 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-2: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,179 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-2: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,180 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-1: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,180 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-1: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,180 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-4: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,180 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-4: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,180 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-3: assume 0 != __copy_to_user_~tmp___1~3;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,180 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3836-3: assume !(0 != __copy_to_user_~tmp___1~3);__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,181 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844: assume __copy_to_user_#t~switch124;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~1;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~1;copy_user_generic_#res := copy_user_generic_~ret~1 % 4294967296; [2021-11-02 22:31:18,181 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844: assume !__copy_to_user_#t~switch124; [2021-11-02 22:31:18,181 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-2: assume __copy_to_user_#t~switch124;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~1;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~1;copy_user_generic_#res := copy_user_generic_~ret~1 % 4294967296; [2021-11-02 22:31:18,181 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-2: assume !__copy_to_user_#t~switch124; [2021-11-02 22:31:18,181 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-1: assume __copy_to_user_#t~switch124;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~1;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~1;copy_user_generic_#res := copy_user_generic_~ret~1 % 4294967296; [2021-11-02 22:31:18,182 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-1: assume !__copy_to_user_#t~switch124; [2021-11-02 22:31:18,182 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-4: assume __copy_to_user_#t~switch124;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~1;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~1;copy_user_generic_#res := copy_user_generic_~ret~1 % 4294967296; [2021-11-02 22:31:18,182 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-4: assume !__copy_to_user_#t~switch124; [2021-11-02 22:31:18,182 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-3: assume __copy_to_user_#t~switch124;copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset, copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset, copy_user_generic_#in~len := __copy_to_user_~dst.base, __copy_to_user_~dst.offset, __copy_to_user_~src.base, __copy_to_user_~src.offset, __copy_to_user_~size;havoc copy_user_generic_#res;havoc copy_user_generic_~to.base, copy_user_generic_~to.offset, copy_user_generic_~from.base, copy_user_generic_~from.offset, copy_user_generic_~len, copy_user_generic_~ret~1;copy_user_generic_~to.base, copy_user_generic_~to.offset := copy_user_generic_#in~to.base, copy_user_generic_#in~to.offset;copy_user_generic_~from.base, copy_user_generic_~from.offset := copy_user_generic_#in~from.base, copy_user_generic_#in~from.offset;copy_user_generic_~len := copy_user_generic_#in~len;havoc copy_user_generic_~ret~1;copy_user_generic_#res := copy_user_generic_~ret~1 % 4294967296; [2021-11-02 22:31:18,182 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint L3844-3: assume !__copy_to_user_#t~switch124; [2021-11-02 22:31:18,201 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41377: assume !__copy_from_user_#t~switch119;__copy_from_user_#t~switch119 := __copy_from_user_#t~switch119 || 2 == __copy_from_user_~size; [2021-11-02 22:31:18,202 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41376: assume __copy_from_user_#t~switch119;__copy_from_user_#res := __copy_from_user_~ret~2; [2021-11-02 22:31:18,202 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41416: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 2 == __copy_to_user_~size; [2021-11-02 22:31:18,202 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41415: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,202 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41452: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 2 == __copy_to_user_~size; [2021-11-02 22:31:18,203 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41451: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,203 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41252: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 2 == __copy_to_user_~size; [2021-11-02 22:31:18,204 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41251: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,204 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41300: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,204 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41301: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 2 == __copy_to_user_~size; [2021-11-02 22:31:18,205 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41353: assume __copy_to_user_#t~switch124;__copy_to_user_#res := __copy_to_user_~ret~3; [2021-11-02 22:31:18,205 INFO L758 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41354: assume !__copy_to_user_#t~switch124;__copy_to_user_#t~switch124 := __copy_to_user_#t~switch124 || 2 == __copy_to_user_~size; [2021-11-02 22:31:18,578 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-02 22:31:18,578 INFO L299 CfgBuilder]: Removed 66027 assume(true) statements. [2021-11-02 22:31:18,634 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:31:18 BoogieIcfgContainer [2021-11-02 22:31:18,634 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-02 22:31:18,636 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-02 22:31:18,636 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-02 22:31:18,642 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-02 22:31:18,642 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 02.11 10:20:36" (1/3) ... [2021-11-02 22:31:18,643 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bc56145 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 10:31:18, skipping insertion in model container [2021-11-02 22:31:18,643 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 02.11 10:20:40" (2/3) ... [2021-11-02 22:31:18,644 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3bc56145 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 02.11 10:31:18, skipping insertion in model container [2021-11-02 22:31:18,644 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 02.11 10:31:18" (3/3) ... [2021-11-02 22:31:18,646 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point.cil.out.i [2021-11-02 22:31:18,654 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-02 22:31:18,654 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 31 error locations. [2021-11-02 22:31:18,851 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-02 22:31:18,858 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-02 22:31:18,858 INFO L340 AbstractCegarLoop]: Starting to check reachability of 31 error locations. [2021-11-02 22:31:19,662 INFO L276 IsEmpty]: Start isEmpty. Operand has 66578 states, 66030 states have (on average 1.5273966378918673) internal successors, (100854), 66115 states have internal predecessors, (100854), 505 states have call successors, (505), 11 states have call predecessors, (505), 11 states have return successors, (505), 471 states have call predecessors, (505), 505 states have call successors, (505) [2021-11-02 22:31:19,667 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 24 [2021-11-02 22:31:19,667 INFO L505 BasicCegarLoop]: Found error trace [2021-11-02 22:31:19,668 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:31:19,668 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 28 more)] === [2021-11-02 22:31:19,673 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:31:19,674 INFO L85 PathProgramCache]: Analyzing trace with hash -237195783, now seen corresponding path program 1 times [2021-11-02 22:31:19,682 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:31:19,683 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [57889987] [2021-11-02 22:31:19,683 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:31:19,684 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:31:20,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:31:21,125 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:31:21,126 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:31:21,126 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [57889987] [2021-11-02 22:31:21,129 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [57889987] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:31:21,129 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:31:21,129 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:31:21,131 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530008741] [2021-11-02 22:31:21,136 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-02 22:31:21,137 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:31:21,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:31:21,155 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:31:21,228 INFO L87 Difference]: Start difference. First operand has 66578 states, 66030 states have (on average 1.5273966378918673) internal successors, (100854), 66115 states have internal predecessors, (100854), 505 states have call successors, (505), 11 states have call predecessors, (505), 11 states have return successors, (505), 471 states have call predecessors, (505), 505 states have call successors, (505) Second operand has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:31:25,351 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-02 22:31:25,351 INFO L93 Difference]: Finished difference Result 140899 states and 215658 transitions. [2021-11-02 22:31:25,351 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-02 22:31:25,353 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 23 [2021-11-02 22:31:25,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-02 22:31:25,958 INFO L225 Difference]: With dead ends: 140899 [2021-11-02 22:31:25,959 INFO L226 Difference]: Without dead ends: 74303 [2021-11-02 22:31:26,699 INFO L786 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:31:26,845 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74303 states. [2021-11-02 22:31:29,217 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74303 to 74271. [2021-11-02 22:31:29,378 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 74271 states, 73668 states have (on average 1.5280718901015367) internal successors, (112570), 73773 states have internal predecessors, (112570), 550 states have call successors, (550), 22 states have call predecessors, (550), 22 states have return successors, (550), 504 states have call predecessors, (550), 550 states have call successors, (550) [2021-11-02 22:31:30,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 74271 states to 74271 states and 113670 transitions. [2021-11-02 22:31:30,031 INFO L78 Accepts]: Start accepts. Automaton has 74271 states and 113670 transitions. Word has length 23 [2021-11-02 22:31:30,033 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-02 22:31:30,033 INFO L470 AbstractCegarLoop]: Abstraction has 74271 states and 113670 transitions. [2021-11-02 22:31:30,033 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.666666666666667) internal successors, (23), 3 states have internal predecessors, (23), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-02 22:31:30,034 INFO L276 IsEmpty]: Start isEmpty. Operand 74271 states and 113670 transitions. [2021-11-02 22:31:30,045 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 36 [2021-11-02 22:31:30,045 INFO L505 BasicCegarLoop]: Found error trace [2021-11-02 22:31:30,045 INFO L513 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-02 22:31:30,046 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-02 22:31:30,046 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr29ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 28 more)] === [2021-11-02 22:31:30,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-02 22:31:30,049 INFO L85 PathProgramCache]: Analyzing trace with hash -1394562932, now seen corresponding path program 1 times [2021-11-02 22:31:30,050 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-02 22:31:30,050 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [533990144] [2021-11-02 22:31:30,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-02 22:31:30,050 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-02 22:31:30,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-02 22:31:30,535 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-02 22:31:30,536 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-02 22:31:30,536 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [533990144] [2021-11-02 22:31:30,536 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [533990144] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-02 22:31:30,537 INFO L186 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2021-11-02 22:31:30,538 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-02 22:31:30,541 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [509058969] [2021-11-02 22:31:30,542 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-02 22:31:30,543 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-02 22:31:30,543 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-02 22:31:30,544 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-02 22:31:30,545 INFO L87 Difference]: Start difference. First operand 74271 states and 113670 transitions. Second operand has 3 states, 3 states have (on average 11.666666666666666) internal successors, (35), 3 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)