./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.8/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version fcb8e130 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash d13c8fd602d503a5b89ef19dbfdd96987c0182e1babba89942a78b68f80ba8e9 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-fcb8e13 [2021-11-23 00:08:26,333 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-23 00:08:26,335 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-23 00:08:26,361 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-23 00:08:26,362 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-23 00:08:26,364 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-23 00:08:26,365 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-23 00:08:26,367 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-23 00:08:26,368 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-23 00:08:26,371 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-23 00:08:26,372 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-23 00:08:26,373 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-23 00:08:26,373 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-23 00:08:26,375 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-23 00:08:26,376 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-23 00:08:26,381 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-23 00:08:26,382 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-23 00:08:26,382 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-23 00:08:26,384 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-23 00:08:26,388 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-23 00:08:26,388 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-23 00:08:26,389 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-23 00:08:26,390 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-23 00:08:26,391 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-23 00:08:26,395 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-23 00:08:26,395 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-23 00:08:26,396 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-23 00:08:26,397 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-23 00:08:26,397 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-23 00:08:26,398 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-23 00:08:26,398 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-23 00:08:26,399 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-23 00:08:26,400 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-23 00:08:26,401 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-23 00:08:26,401 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-23 00:08:26,401 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-23 00:08:26,402 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-23 00:08:26,402 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-23 00:08:26,402 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-23 00:08:26,403 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-23 00:08:26,404 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-23 00:08:26,404 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-23 00:08:26,435 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-23 00:08:26,436 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-23 00:08:26,436 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-23 00:08:26,436 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-23 00:08:26,437 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-23 00:08:26,437 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-23 00:08:26,438 INFO L138 SettingsManager]: * Use SBE=true [2021-11-23 00:08:26,438 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-23 00:08:26,438 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-23 00:08:26,438 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-23 00:08:26,439 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-23 00:08:26,439 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-23 00:08:26,439 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-23 00:08:26,439 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-23 00:08:26,439 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-23 00:08:26,439 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-23 00:08:26,439 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 00:08:26,440 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-23 00:08:26,440 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-23 00:08:26,441 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-23 00:08:26,441 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-23 00:08:26,442 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-23 00:08:26,442 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-23 00:08:26,442 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> d13c8fd602d503a5b89ef19dbfdd96987c0182e1babba89942a78b68f80ba8e9 [2021-11-23 00:08:26,609 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-23 00:08:26,623 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-23 00:08:26,625 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-23 00:08:26,626 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-23 00:08:26,626 INFO L275 PluginConnector]: CDTParser initialized [2021-11-23 00:08:26,627 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-23 00:08:26,719 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6cfa7ab12/f605252691c6457aa13b014a0c84b959/FLAG549fa8364 [2021-11-23 00:08:27,335 INFO L306 CDTParser]: Found 1 translation units. [2021-11-23 00:08:27,336 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-23 00:08:27,374 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6cfa7ab12/f605252691c6457aa13b014a0c84b959/FLAG549fa8364 [2021-11-23 00:08:27,445 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6cfa7ab12/f605252691c6457aa13b014a0c84b959 [2021-11-23 00:08:27,447 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-23 00:08:27,448 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-23 00:08:27,450 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-23 00:08:27,450 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-23 00:08:27,453 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-23 00:08:27,453 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:08:27" (1/1) ... [2021-11-23 00:08:27,455 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7087fa51 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:27, skipping insertion in model container [2021-11-23 00:08:27,455 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 23.11 12:08:27" (1/1) ... [2021-11-23 00:08:27,459 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-23 00:08:27,558 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-23 00:08:29,937 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i[389398,389411] [2021-11-23 00:08:30,057 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 00:08:30,115 INFO L203 MainTranslator]: Completed pre-run [2021-11-23 00:08:30,421 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i[389398,389411] [2021-11-23 00:08:30,427 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-23 00:08:30,550 INFO L208 MainTranslator]: Completed translation [2021-11-23 00:08:30,550 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30 WrapperNode [2021-11-23 00:08:30,550 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-23 00:08:30,552 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-23 00:08:30,552 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-23 00:08:30,552 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-23 00:08:30,558 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:30,664 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:37,770 INFO L137 Inliner]: procedures = 425, calls = 5273, calls flagged for inlining = 1076, calls inlined = 33047, statements flattened = 436564 [2021-11-23 00:08:37,775 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-23 00:08:37,776 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-23 00:08:37,776 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-23 00:08:37,776 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-23 00:08:37,782 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:37,783 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:39,432 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:39,433 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:42,869 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:43,593 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:44,039 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:45,834 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-23 00:08:45,836 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-23 00:08:45,836 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-23 00:08:45,836 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-23 00:08:45,841 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (1/1) ... [2021-11-23 00:08:45,848 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-23 00:08:45,857 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-23 00:08:45,874 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-23 00:08:45,880 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-23 00:08:45,902 INFO L130 BoogieDeclarations]: Found specification of procedure timer_open [2021-11-23 00:08:45,902 INFO L138 BoogieDeclarations]: Found implementation of procedure timer_open [2021-11-23 00:08:45,903 INFO L130 BoogieDeclarations]: Found specification of procedure default_set_channels [2021-11-23 00:08:45,903 INFO L138 BoogieDeclarations]: Found implementation of procedure default_set_channels [2021-11-23 00:08:45,903 INFO L130 BoogieDeclarations]: Found specification of procedure __put_user_bad [2021-11-23 00:08:45,903 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~X~int~X~$Pointer$~TO~int [2021-11-23 00:08:45,904 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~X~int~X~$Pointer$~TO~int [2021-11-23 00:08:45,904 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-23 00:08:45,904 INFO L130 BoogieDeclarations]: Found specification of procedure timer_ioctl [2021-11-23 00:08:45,904 INFO L138 BoogieDeclarations]: Found implementation of procedure timer_ioctl [2021-11-23 00:08:45,904 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~X~int~TO~int [2021-11-23 00:08:45,904 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~X~int~TO~int [2021-11-23 00:08:45,904 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-23 00:08:45,904 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-23 00:08:45,904 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure default_set_bits [2021-11-23 00:08:45,905 INFO L138 BoogieDeclarations]: Found implementation of procedure default_set_bits [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure __get_user_bad [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure timer_close [2021-11-23 00:08:45,905 INFO L138 BoogieDeclarations]: Found implementation of procedure timer_close [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-23 00:08:45,905 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-11-23 00:08:45,906 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-23 00:08:45,906 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_size_call_parameter [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-23 00:08:45,906 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-23 00:08:45,907 INFO L130 BoogieDeclarations]: Found specification of procedure reprogram_timer [2021-11-23 00:08:45,907 INFO L138 BoogieDeclarations]: Found implementation of procedure reprogram_timer [2021-11-23 00:08:45,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-23 00:08:45,907 INFO L130 BoogieDeclarations]: Found specification of procedure default_set_speed [2021-11-23 00:08:45,907 INFO L138 BoogieDeclarations]: Found implementation of procedure default_set_speed [2021-11-23 00:08:45,907 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-23 00:08:45,908 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-23 00:08:45,908 INFO L130 BoogieDeclarations]: Found specification of procedure def_tmr_ioctl [2021-11-23 00:08:45,908 INFO L138 BoogieDeclarations]: Found implementation of procedure def_tmr_ioctl [2021-11-23 00:08:46,880 INFO L236 CfgBuilder]: Building ICFG [2021-11-23 00:08:46,881 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-23 00:18:00,058 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-73: __copy_to_user_#t~ret122#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret122#1 && __copy_to_user_#t~ret122#1 <= 9223372036854775807;__copy_to_user_~tmp___1~2#1 := __copy_to_user_#t~ret122#1;havoc __copy_to_user_#t~ret122#1; [2021-11-23 00:18:00,058 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-72: __copy_to_user_#t~ret121#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret121#1 && __copy_to_user_#t~ret121#1 <= 9223372036854775807;__copy_to_user_~tmp___0~8#1 := __copy_to_user_#t~ret121#1;havoc __copy_to_user_#t~ret121#1; [2021-11-23 00:18:00,059 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-75: __copy_to_user_#t~ret122#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret122#1 && __copy_to_user_#t~ret122#1 <= 9223372036854775807;__copy_to_user_~tmp___1~2#1 := __copy_to_user_#t~ret122#1;havoc __copy_to_user_#t~ret122#1; [2021-11-23 00:18:00,059 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-74: __copy_to_user_#t~ret121#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret121#1 && __copy_to_user_#t~ret121#1 <= 9223372036854775807;__copy_to_user_~tmp___0~8#1 := __copy_to_user_#t~ret121#1;havoc __copy_to_user_#t~ret121#1; [2021-11-23 00:18:00,059 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-77: __copy_to_user_#t~ret122#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret122#1 && __copy_to_user_#t~ret122#1 <= 9223372036854775807;__copy_to_user_~tmp___1~2#1 := __copy_to_user_#t~ret122#1;havoc __copy_to_user_#t~ret122#1; [2021-11-23 00:18:00,059 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-76: __copy_to_user_#t~ret121#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret121#1 && __copy_to_user_#t~ret121#1 <= 9223372036854775807;__copy_to_user_~tmp___0~8#1 := __copy_to_user_#t~ret121#1;havoc __copy_to_user_#t~ret121#1; [2021-11-23 00:18:00,059 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-79: __copy_from_user_#t~ret117#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_from_user_#t~ret117#1 && __copy_from_user_#t~ret117#1 <= 9223372036854775807;__copy_from_user_~tmp___1~1#1 := __copy_from_user_#t~ret117#1;havoc __copy_from_user_#t~ret117#1; [2021-11-23 00:18:00,059 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-78: __copy_from_user_#t~ret116#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_from_user_#t~ret116#1 && __copy_from_user_#t~ret116#1 <= 9223372036854775807;__copy_from_user_~tmp___0~7#1 := __copy_from_user_#t~ret116#1;havoc __copy_from_user_#t~ret116#1; [2021-11-23 00:18:00,060 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-81: __copy_to_user_#t~ret122#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret122#1 && __copy_to_user_#t~ret122#1 <= 9223372036854775807;__copy_to_user_~tmp___1~2#1 := __copy_to_user_#t~ret122#1;havoc __copy_to_user_#t~ret122#1; [2021-11-23 00:18:00,060 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-80: __copy_to_user_#t~ret121#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret121#1 && __copy_to_user_#t~ret121#1 <= 9223372036854775807;__copy_to_user_~tmp___0~8#1 := __copy_to_user_#t~ret121#1;havoc __copy_to_user_#t~ret121#1; [2021-11-23 00:18:00,060 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-83: __copy_to_user_#t~ret122#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret122#1 && __copy_to_user_#t~ret122#1 <= 9223372036854775807;__copy_to_user_~tmp___1~2#1 := __copy_to_user_#t~ret122#1;havoc __copy_to_user_#t~ret122#1; [2021-11-23 00:18:00,060 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3331-82: __copy_to_user_#t~ret121#1 := ldv__builtin_expect_#res#1;assume { :end_inline_ldv__builtin_expect } true;assume -9223372036854775808 <= __copy_to_user_#t~ret121#1 && __copy_to_user_#t~ret121#1 <= 9223372036854775807;__copy_to_user_~tmp___0~8#1 := __copy_to_user_#t~ret121#1;havoc __copy_to_user_#t~ret121#1; [2021-11-23 00:18:00,060 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3711-1: __copy_to_user_#t~ret123#1 := copy_user_generic_#res#1;assume { :end_inline_copy_user_generic } true;__copy_to_user_~tmp___2~1#1 := __copy_to_user_#t~ret123#1;havoc __copy_to_user_#t~ret123#1;__copy_to_user_#res#1 := (if __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-23 00:18:00,060 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3711-3: __copy_to_user_#t~ret123#1 := copy_user_generic_#res#1;assume { :end_inline_copy_user_generic } true;__copy_to_user_~tmp___2~1#1 := __copy_to_user_#t~ret123#1;havoc __copy_to_user_#t~ret123#1;__copy_to_user_#res#1 := (if __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-23 00:18:00,061 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3711-5: __copy_to_user_#t~ret123#1 := copy_user_generic_#res#1;assume { :end_inline_copy_user_generic } true;__copy_to_user_~tmp___2~1#1 := __copy_to_user_#t~ret123#1;havoc __copy_to_user_#t~ret123#1;__copy_to_user_#res#1 := (if __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-23 00:18:00,061 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3711-7: __copy_from_user_#t~ret118#1 := copy_user_generic_#res#1;assume { :end_inline_copy_user_generic } true;__copy_from_user_~tmp___2~0#1 := __copy_from_user_#t~ret118#1;havoc __copy_from_user_#t~ret118#1;__copy_from_user_#res#1 := (if __copy_from_user_~tmp___2~0#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_from_user_~tmp___2~0#1 % 18446744073709551616 % 4294967296 else __copy_from_user_~tmp___2~0#1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-23 00:18:00,061 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3711-9: __copy_to_user_#t~ret123#1 := copy_user_generic_#res#1;assume { :end_inline_copy_user_generic } true;__copy_to_user_~tmp___2~1#1 := __copy_to_user_#t~ret123#1;havoc __copy_to_user_#t~ret123#1;__copy_to_user_#res#1 := (if __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-23 00:18:00,066 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3711-11: __copy_to_user_#t~ret123#1 := copy_user_generic_#res#1;assume { :end_inline_copy_user_generic } true;__copy_to_user_~tmp___2~1#1 := __copy_to_user_#t~ret123#1;havoc __copy_to_user_#t~ret123#1;__copy_to_user_#res#1 := (if __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 <= 2147483647 then __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 else __copy_to_user_~tmp___2~1#1 % 18446744073709551616 % 4294967296 - 4294967296); [2021-11-23 00:18:00,066 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3736: havoc __copy_from_user_#t~switch115#1; [2021-11-23 00:18:00,066 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3742: assume __copy_from_user_#t~switch115#1;__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3742: assume !__copy_from_user_#t~switch115#1;__copy_from_user_#t~switch115#1 := __copy_from_user_#t~switch115#1 || 4 == __copy_from_user_~size#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3747: assume __copy_from_user_#t~switch115#1;__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3747: assume !__copy_from_user_#t~switch115#1;__copy_from_user_#t~switch115#1 := __copy_from_user_#t~switch115#1 || 8 == __copy_from_user_~size#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3752: assume __copy_from_user_#t~switch115#1;__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3752: assume !__copy_from_user_#t~switch115#1;__copy_from_user_#t~switch115#1 := __copy_from_user_#t~switch115#1 || 10 == __copy_from_user_~size#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3757: assume __copy_from_user_#t~switch115#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_from_user_~ret~2#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,067 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3757: assume !__copy_from_user_#t~switch115#1;__copy_from_user_#t~switch115#1 := __copy_from_user_#t~switch115#1 || 16 == __copy_from_user_~size#1; [2021-11-23 00:18:00,068 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3762: assume 0 != __copy_from_user_~tmp___0~7#1;__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,068 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3762: assume !(0 != __copy_from_user_~tmp___0~7#1);__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,068 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3770: assume __copy_from_user_#t~switch115#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_from_user_~ret~2#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,068 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3770: assume !__copy_from_user_#t~switch115#1;__copy_from_user_#t~switch115#1 := true; [2021-11-23 00:18:00,068 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3775: assume 0 != __copy_from_user_~tmp___1~1#1;__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,068 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3775: assume !(0 != __copy_from_user_~tmp___1~1#1);__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3783: assume __copy_from_user_#t~switch115#1;assume { :begin_inline_copy_user_generic } true;copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset, copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset, copy_user_generic_#in~len#1 := __copy_from_user_~dst#1.base, __copy_from_user_~dst#1.offset, __copy_from_user_~src#1.base, __copy_from_user_~src#1.offset, __copy_from_user_~size#1;havoc copy_user_generic_#res#1;havoc copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset, copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset, copy_user_generic_~len#1, copy_user_generic_~ret~1#1;copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset := copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset;copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset := copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset;copy_user_generic_~len#1 := copy_user_generic_#in~len#1;havoc copy_user_generic_~ret~1#1;copy_user_generic_#res#1 := copy_user_generic_~ret~1#1 % 4294967296; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3783: assume !__copy_from_user_#t~switch115#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3801-1: havoc __copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3801: havoc __copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3801-3: havoc __copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3801-2: havoc __copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3801-4: havoc __copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,069 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,070 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 4 == __copy_to_user_~size#1; [2021-11-23 00:18:00,070 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-2: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,070 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-2: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 4 == __copy_to_user_~size#1; [2021-11-23 00:18:00,070 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-1: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,070 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-1: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 4 == __copy_to_user_~size#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-4: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-4: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 4 == __copy_to_user_~size#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-3: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3806-3: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 4 == __copy_to_user_~size#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 8 == __copy_to_user_~size#1; [2021-11-23 00:18:00,071 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-2: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,072 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-2: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 8 == __copy_to_user_~size#1; [2021-11-23 00:18:00,072 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-1: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,072 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-1: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 8 == __copy_to_user_~size#1; [2021-11-23 00:18:00,072 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-4: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,073 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-4: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 8 == __copy_to_user_~size#1; [2021-11-23 00:18:00,073 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-3: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,073 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3810-3: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 8 == __copy_to_user_~size#1; [2021-11-23 00:18:00,073 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,073 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 10 == __copy_to_user_~size#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-2: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-2: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 10 == __copy_to_user_~size#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-1: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-1: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 10 == __copy_to_user_~size#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-4: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-4: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 10 == __copy_to_user_~size#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-3: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,074 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3814-3: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 10 == __copy_to_user_~size#1; [2021-11-23 00:18:00,075 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,075 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 16 == __copy_to_user_~size#1; [2021-11-23 00:18:00,075 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-2: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,075 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-2: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 16 == __copy_to_user_~size#1; [2021-11-23 00:18:00,075 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-1: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,076 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-1: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 16 == __copy_to_user_~size#1; [2021-11-23 00:18:00,076 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-4: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,078 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-4: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 16 == __copy_to_user_~size#1; [2021-11-23 00:18:00,078 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-3: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,079 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3818-3: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 16 == __copy_to_user_~size#1; [2021-11-23 00:18:00,079 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822: assume 0 != __copy_to_user_~tmp___0~8#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,079 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822: assume !(0 != __copy_to_user_~tmp___0~8#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-2: assume 0 != __copy_to_user_~tmp___0~8#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-2: assume !(0 != __copy_to_user_~tmp___0~8#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-1: assume 0 != __copy_to_user_~tmp___0~8#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-1: assume !(0 != __copy_to_user_~tmp___0~8#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-4: assume 0 != __copy_to_user_~tmp___0~8#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-4: assume !(0 != __copy_to_user_~tmp___0~8#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,080 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-3: assume 0 != __copy_to_user_~tmp___0~8#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,081 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3822-3: assume !(0 != __copy_to_user_~tmp___0~8#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,081 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,081 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := true; [2021-11-23 00:18:00,081 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-2: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,081 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-2: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := true; [2021-11-23 00:18:00,081 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-1: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-1: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := true; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-4: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-4: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := true; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-3: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_ldv__builtin_expect } true;ldv__builtin_expect_#in~exp#1, ldv__builtin_expect_#in~c#1 := (if 0 != __copy_to_user_~ret~3#1 then 1 else 0), 0;havoc ldv__builtin_expect_#res#1;havoc ldv__builtin_expect_~exp#1, ldv__builtin_expect_~c#1;ldv__builtin_expect_~exp#1 := ldv__builtin_expect_#in~exp#1;ldv__builtin_expect_~c#1 := ldv__builtin_expect_#in~c#1;ldv__builtin_expect_#res#1 := ldv__builtin_expect_~exp#1; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3830-3: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := true; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834: assume 0 != __copy_to_user_~tmp___1~2#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,082 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834: assume !(0 != __copy_to_user_~tmp___1~2#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-2: assume 0 != __copy_to_user_~tmp___1~2#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-2: assume !(0 != __copy_to_user_~tmp___1~2#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-1: assume 0 != __copy_to_user_~tmp___1~2#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-1: assume !(0 != __copy_to_user_~tmp___1~2#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-4: assume 0 != __copy_to_user_~tmp___1~2#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-4: assume !(0 != __copy_to_user_~tmp___1~2#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-3: assume 0 != __copy_to_user_~tmp___1~2#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,083 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3834-3: assume !(0 != __copy_to_user_~tmp___1~2#1);__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,084 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_copy_user_generic } true;copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset, copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset, copy_user_generic_#in~len#1 := __copy_to_user_~dst#1.base, __copy_to_user_~dst#1.offset, __copy_to_user_~src#1.base, __copy_to_user_~src#1.offset, __copy_to_user_~size#1;havoc copy_user_generic_#res#1;havoc copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset, copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset, copy_user_generic_~len#1, copy_user_generic_~ret~1#1;copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset := copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset;copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset := copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset;copy_user_generic_~len#1 := copy_user_generic_#in~len#1;havoc copy_user_generic_~ret~1#1;copy_user_generic_#res#1 := copy_user_generic_~ret~1#1 % 4294967296; [2021-11-23 00:18:00,084 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842: assume !__copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,084 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-2: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_copy_user_generic } true;copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset, copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset, copy_user_generic_#in~len#1 := __copy_to_user_~dst#1.base, __copy_to_user_~dst#1.offset, __copy_to_user_~src#1.base, __copy_to_user_~src#1.offset, __copy_to_user_~size#1;havoc copy_user_generic_#res#1;havoc copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset, copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset, copy_user_generic_~len#1, copy_user_generic_~ret~1#1;copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset := copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset;copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset := copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset;copy_user_generic_~len#1 := copy_user_generic_#in~len#1;havoc copy_user_generic_~ret~1#1;copy_user_generic_#res#1 := copy_user_generic_~ret~1#1 % 4294967296; [2021-11-23 00:18:00,084 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-2: assume !__copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,084 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-1: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_copy_user_generic } true;copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset, copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset, copy_user_generic_#in~len#1 := __copy_to_user_~dst#1.base, __copy_to_user_~dst#1.offset, __copy_to_user_~src#1.base, __copy_to_user_~src#1.offset, __copy_to_user_~size#1;havoc copy_user_generic_#res#1;havoc copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset, copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset, copy_user_generic_~len#1, copy_user_generic_~ret~1#1;copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset := copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset;copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset := copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset;copy_user_generic_~len#1 := copy_user_generic_#in~len#1;havoc copy_user_generic_~ret~1#1;copy_user_generic_#res#1 := copy_user_generic_~ret~1#1 % 4294967296; [2021-11-23 00:18:00,085 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-1: assume !__copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,085 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-4: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_copy_user_generic } true;copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset, copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset, copy_user_generic_#in~len#1 := __copy_to_user_~dst#1.base, __copy_to_user_~dst#1.offset, __copy_to_user_~src#1.base, __copy_to_user_~src#1.offset, __copy_to_user_~size#1;havoc copy_user_generic_#res#1;havoc copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset, copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset, copy_user_generic_~len#1, copy_user_generic_~ret~1#1;copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset := copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset;copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset := copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset;copy_user_generic_~len#1 := copy_user_generic_#in~len#1;havoc copy_user_generic_~ret~1#1;copy_user_generic_#res#1 := copy_user_generic_~ret~1#1 % 4294967296; [2021-11-23 00:18:00,085 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-4: assume !__copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,085 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-3: assume __copy_to_user_#t~switch120#1;assume { :begin_inline_copy_user_generic } true;copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset, copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset, copy_user_generic_#in~len#1 := __copy_to_user_~dst#1.base, __copy_to_user_~dst#1.offset, __copy_to_user_~src#1.base, __copy_to_user_~src#1.offset, __copy_to_user_~size#1;havoc copy_user_generic_#res#1;havoc copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset, copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset, copy_user_generic_~len#1, copy_user_generic_~ret~1#1;copy_user_generic_~to#1.base, copy_user_generic_~to#1.offset := copy_user_generic_#in~to#1.base, copy_user_generic_#in~to#1.offset;copy_user_generic_~from#1.base, copy_user_generic_~from#1.offset := copy_user_generic_#in~from#1.base, copy_user_generic_#in~from#1.offset;copy_user_generic_~len#1 := copy_user_generic_#in~len#1;havoc copy_user_generic_~ret~1#1;copy_user_generic_#res#1 := copy_user_generic_~ret~1#1 % 4294967296; [2021-11-23 00:18:00,085 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint L3842-3: assume !__copy_to_user_#t~switch120#1; [2021-11-23 00:18:00,114 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41362: assume !__copy_from_user_#t~switch115#1;__copy_from_user_#t~switch115#1 := __copy_from_user_#t~switch115#1 || 2 == __copy_from_user_~size#1; [2021-11-23 00:18:00,115 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41361: assume __copy_from_user_#t~switch115#1;__copy_from_user_#res#1 := __copy_from_user_~ret~2#1; [2021-11-23 00:18:00,116 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41401: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 2 == __copy_to_user_~size#1; [2021-11-23 00:18:00,116 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41400: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41436: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41437: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 2 == __copy_to_user_~size#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41236: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41237: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 2 == __copy_to_user_~size#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41285: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41286: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 2 == __copy_to_user_~size#1; [2021-11-23 00:18:00,117 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41339: assume !__copy_to_user_#t~switch120#1;__copy_to_user_#t~switch120#1 := __copy_to_user_#t~switch120#1 || 2 == __copy_to_user_~size#1; [2021-11-23 00:18:00,118 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##41338: assume __copy_to_user_#t~switch120#1;__copy_to_user_#res#1 := __copy_to_user_~ret~3#1; [2021-11-23 00:18:00,204 INFO L277 CfgBuilder]: Performing block encoding [2021-11-23 00:18:00,337 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-23 00:18:00,337 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-11-23 00:18:00,389 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:18:00 BoogieIcfgContainer [2021-11-23 00:18:00,390 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-23 00:18:00,391 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-23 00:18:00,391 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-23 00:18:00,394 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-23 00:18:00,394 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 23.11 12:08:27" (1/3) ... [2021-11-23 00:18:00,394 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43a5dcb3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:18:00, skipping insertion in model container [2021-11-23 00:18:00,394 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 23.11 12:08:30" (2/3) ... [2021-11-23 00:18:00,395 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@43a5dcb3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 23.11 12:18:00, skipping insertion in model container [2021-11-23 00:18:00,395 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 23.11 12:18:00" (3/3) ... [2021-11-23 00:18:00,396 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-torvalds-645ef9e-32_7a-sound--oss--sound.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-23 00:18:00,399 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-23 00:18:00,399 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 31 error locations. [2021-11-23 00:18:00,583 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-23 00:18:00,588 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-23 00:18:00,588 INFO L340 AbstractCegarLoop]: Starting to check reachability of 31 error locations. [2021-11-23 00:18:01,350 INFO L276 IsEmpty]: Start isEmpty. Operand has 76524 states, 75976 states have (on average 1.4584079182899863) internal successors, (110804), 76061 states have internal predecessors, (110804), 505 states have call successors, (505), 11 states have call predecessors, (505), 11 states have return successors, (505), 471 states have call predecessors, (505), 505 states have call successors, (505) [2021-11-23 00:18:01,355 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-23 00:18:01,355 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 00:18:01,355 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 00:18:01,356 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 28 more)] === [2021-11-23 00:18:01,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 00:18:01,360 INFO L85 PathProgramCache]: Analyzing trace with hash -540699979, now seen corresponding path program 1 times [2021-11-23 00:18:01,366 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 00:18:01,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [310220218] [2021-11-23 00:18:01,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 00:18:01,367 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 00:18:02,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 00:18:02,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 00:18:02,335 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 00:18:02,336 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [310220218] [2021-11-23 00:18:02,336 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [310220218] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 00:18:02,336 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 00:18:02,337 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 00:18:02,338 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67047178] [2021-11-23 00:18:02,338 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 00:18:02,344 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-23 00:18:02,345 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 00:18:02,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-23 00:18:02,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 00:18:02,467 INFO L87 Difference]: Start difference. First operand has 76524 states, 75976 states have (on average 1.4584079182899863) internal successors, (110804), 76061 states have internal predecessors, (110804), 505 states have call successors, (505), 11 states have call predecessors, (505), 11 states have return successors, (505), 471 states have call predecessors, (505), 505 states have call successors, (505) Second operand has 2 states, 2 states have (on average 28.0) internal successors, (56), 2 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 00:18:05,238 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 00:18:05,239 INFO L93 Difference]: Finished difference Result 153013 states and 223592 transitions. [2021-11-23 00:18:05,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-23 00:18:05,242 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 28.0) internal successors, (56), 2 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2021-11-23 00:18:05,243 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 00:18:05,985 INFO L225 Difference]: With dead ends: 153013 [2021-11-23 00:18:05,985 INFO L226 Difference]: Without dead ends: 76481 [2021-11-23 00:18:06,369 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-23 00:18:06,372 INFO L933 BasicCegarLoop]: 111735 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 111735 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 00:18:06,372 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 111735 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 00:18:06,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 76481 states. [2021-11-23 00:18:08,115 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 76481 to 76481. [2021-11-23 00:18:08,217 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 76481 states, 75934 states have (on average 1.457910817288698) internal successors, (110705), 76018 states have internal predecessors, (110705), 505 states have call successors, (505), 11 states have call predecessors, (505), 11 states have return successors, (505), 471 states have call predecessors, (505), 505 states have call successors, (505) [2021-11-23 00:18:08,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 76481 states to 76481 states and 111715 transitions. [2021-11-23 00:18:08,595 INFO L78 Accepts]: Start accepts. Automaton has 76481 states and 111715 transitions. Word has length 56 [2021-11-23 00:18:08,596 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 00:18:08,596 INFO L470 AbstractCegarLoop]: Abstraction has 76481 states and 111715 transitions. [2021-11-23 00:18:08,596 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 28.0) internal successors, (56), 2 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 00:18:08,596 INFO L276 IsEmpty]: Start isEmpty. Operand 76481 states and 111715 transitions. [2021-11-23 00:18:08,600 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 57 [2021-11-23 00:18:08,600 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 00:18:08,600 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 00:18:08,600 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-23 00:18:08,601 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 28 more)] === [2021-11-23 00:18:08,603 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 00:18:08,603 INFO L85 PathProgramCache]: Analyzing trace with hash 924412605, now seen corresponding path program 1 times [2021-11-23 00:18:08,603 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 00:18:08,604 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [161965406] [2021-11-23 00:18:08,606 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 00:18:08,606 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 00:18:09,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 00:18:09,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 00:18:09,326 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 00:18:09,326 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [161965406] [2021-11-23 00:18:09,327 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [161965406] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 00:18:09,327 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 00:18:09,327 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-11-23 00:18:09,327 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [688447226] [2021-11-23 00:18:09,331 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 00:18:09,332 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 00:18:09,333 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 00:18:09,333 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 00:18:09,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 00:18:09,335 INFO L87 Difference]: Start difference. First operand 76481 states and 111715 transitions. Second operand has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 00:18:11,944 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 00:18:11,944 INFO L93 Difference]: Finished difference Result 161860 states and 236511 transitions. [2021-11-23 00:18:11,944 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 00:18:11,944 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 56 [2021-11-23 00:18:11,945 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 00:18:12,340 INFO L225 Difference]: With dead ends: 161860 [2021-11-23 00:18:12,340 INFO L226 Difference]: Without dead ends: 85427 [2021-11-23 00:18:12,701 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 00:18:12,702 INFO L933 BasicCegarLoop]: 111759 mSDtfsCounter, 13185 mSDsluCounter, 111624 mSDsCounter, 0 mSdLazyCounter, 36 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13185 SdHoareTripleChecker+Valid, 223383 SdHoareTripleChecker+Invalid, 38 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.2s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 36 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-23 00:18:12,703 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13185 Valid, 223383 Invalid, 38 Unknown, 0 Unchecked, 0.2s Time], IncrementalHoareTripleChecker [2 Valid, 36 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-23 00:18:12,862 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85427 states. [2021-11-23 00:18:14,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85427 to 85393. [2021-11-23 00:18:14,861 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85393 states, 84790 states have (on average 1.459016393442623) internal successors, (123710), 84895 states have internal predecessors, (123710), 550 states have call successors, (550), 22 states have call predecessors, (550), 22 states have return successors, (550), 504 states have call predecessors, (550), 550 states have call successors, (550) [2021-11-23 00:18:15,149 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85393 states to 85393 states and 124810 transitions. [2021-11-23 00:18:15,150 INFO L78 Accepts]: Start accepts. Automaton has 85393 states and 124810 transitions. Word has length 56 [2021-11-23 00:18:15,150 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 00:18:15,150 INFO L470 AbstractCegarLoop]: Abstraction has 85393 states and 124810 transitions. [2021-11-23 00:18:15,150 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 18.666666666666668) internal successors, (56), 3 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 00:18:15,151 INFO L276 IsEmpty]: Start isEmpty. Operand 85393 states and 124810 transitions. [2021-11-23 00:18:15,152 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2021-11-23 00:18:15,153 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 00:18:15,153 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 00:18:15,153 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-23 00:18:15,153 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ULTIMATE.startErr29ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 28 more)] === [2021-11-23 00:18:15,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 00:18:15,154 INFO L85 PathProgramCache]: Analyzing trace with hash 1600125059, now seen corresponding path program 1 times [2021-11-23 00:18:15,154 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 00:18:15,154 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [550648176] [2021-11-23 00:18:15,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 00:18:15,154 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 00:18:15,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 00:18:15,513 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 00:18:15,513 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 00:18:15,513 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [550648176] [2021-11-23 00:18:15,513 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [550648176] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 00:18:15,513 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 00:18:15,514 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 00:18:15,514 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [375875613] [2021-11-23 00:18:15,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 00:18:15,514 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 00:18:15,514 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 00:18:15,515 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 00:18:15,515 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 00:18:15,515 INFO L87 Difference]: Start difference. First operand 85393 states and 124810 transitions. Second operand has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 00:18:17,216 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-23 00:18:17,216 INFO L93 Difference]: Finished difference Result 85393 states and 124810 transitions. [2021-11-23 00:18:17,217 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-23 00:18:17,217 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 69 [2021-11-23 00:18:17,217 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-23 00:18:17,510 INFO L225 Difference]: With dead ends: 85393 [2021-11-23 00:18:17,510 INFO L226 Difference]: Without dead ends: 85391 [2021-11-23 00:18:17,565 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 00:18:17,567 INFO L933 BasicCegarLoop]: 111712 mSDtfsCounter, 111646 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 111646 SdHoareTripleChecker+Valid, 111712 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-23 00:18:17,567 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [111646 Valid, 111712 Invalid, 1 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-23 00:18:17,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85391 states. [2021-11-23 00:18:19,392 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85391 to 85391. [2021-11-23 00:18:19,488 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85391 states, 84789 states have (on average 1.4590100130913208) internal successors, (123708), 84893 states have internal predecessors, (123708), 550 states have call successors, (550), 22 states have call predecessors, (550), 22 states have return successors, (550), 504 states have call predecessors, (550), 550 states have call successors, (550) [2021-11-23 00:18:19,736 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85391 states to 85391 states and 124808 transitions. [2021-11-23 00:18:19,736 INFO L78 Accepts]: Start accepts. Automaton has 85391 states and 124808 transitions. Word has length 69 [2021-11-23 00:18:19,736 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-23 00:18:19,736 INFO L470 AbstractCegarLoop]: Abstraction has 85391 states and 124808 transitions. [2021-11-23 00:18:19,737 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 23.0) internal successors, (69), 2 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-11-23 00:18:19,737 INFO L276 IsEmpty]: Start isEmpty. Operand 85391 states and 124808 transitions. [2021-11-23 00:18:19,738 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 71 [2021-11-23 00:18:19,738 INFO L506 BasicCegarLoop]: Found error trace [2021-11-23 00:18:19,738 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-23 00:18:19,738 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-23 00:18:19,738 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ULTIMATE.startErr30ASSERT_VIOLATIONERROR_FUNCTION === [ULTIMATE.startErr0ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr1ASSERT_VIOLATIONERROR_FUNCTION, ULTIMATE.startErr2ASSERT_VIOLATIONERROR_FUNCTION (and 28 more)] === [2021-11-23 00:18:19,739 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-23 00:18:19,739 INFO L85 PathProgramCache]: Analyzing trace with hash -1935456565, now seen corresponding path program 1 times [2021-11-23 00:18:19,739 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-23 00:18:19,739 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1801546445] [2021-11-23 00:18:19,739 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-23 00:18:19,739 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-23 00:18:19,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-23 00:18:20,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-11-23 00:18:20,035 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-23 00:18:20,035 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1801546445] [2021-11-23 00:18:20,035 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1801546445] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-23 00:18:20,035 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-23 00:18:20,035 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2021-11-23 00:18:20,035 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1175290799] [2021-11-23 00:18:20,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-23 00:18:20,036 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-23 00:18:20,036 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-23 00:18:20,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-23 00:18:20,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-23 00:18:20,036 INFO L87 Difference]: Start difference. First operand 85391 states and 124808 transitions. Second operand has 3 states, 3 states have (on average 23.333333333333332) internal successors, (70), 2 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)